9ea3576f708a938f7a9f2b29cedc872f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9ea3576f708a938f7a9f2b29cedc872f_JaffaCakes118
Size

2.5MB
MD5

9ea3576f708a938f7a9f2b29cedc872f
SHA1

e0ccad3af0cef4ab11b6b1c88aaf3e43202fac86
SHA256

c3bf53b13c9d596552218dd5adc595352706cf0ba19aef12e2b83beed33b0031
SHA512

1e489eea340672fa92a564cb098802592b60dc606321e3c150f345ebba0513225c0fa78bc7c8b14322aac0833844cc4e00d6b0c7e002d7a32426a39f26b3d207
SSDEEP

49152:bxoDKVRklTzaxaH7vRZteCGY1BaDo6BjFIMvjXIrZ4UDDt:bx/RGaobpeCZrFchIMvj4rCK

Score

3^/10

Malware Config

Signatures

Unsigned PE 14 IoCs

Checks for missing Authenticode signature.

resource
unpack001/arzr/SAMPFUNCS/ARZ_Renderer.sf
unpack001/arzr/moonloader/lib/MoonAdditions.dll
unpack001/arzr/moonloader/lib/MoonImGui.dll
unpack001/arzr/moonloader/lib/base64.dll
unpack001/arzr/moonloader/lib/cjson.dll
unpack001/arzr/moonloader/lib/des56.dll
unpack001/arzr/moonloader/lib/iconv.dll
unpack001/arzr/moonloader/lib/lanes/core.dll
unpack001/arzr/moonloader/lib/lfs.dll
unpack001/arzr/moonloader/lib/md5/core.dll
unpack001/arzr/moonloader/lib/mime/core.dll
unpack001/arzr/moonloader/lib/socket/core.dll
unpack001/arzr/moonloader/lib/ssl.dll
unpack001/arzr/moonloader/lib/xml/core.dll

Files

9ea3576f708a938f7a9f2b29cedc872f_JaffaCakes118
.7z
arzr/SAMPFUNCS/ARZ_Renderer.INI
arzr/SAMPFUNCS/ARZ_Renderer.sf
.dll windows:5 windows x86 arch:x86

4faafa12720076da502dc12311392fbf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

sampfuncs.asi

?PEDSELF@@3PAVCPed@@A
?registerD3DCallback@SFRender@@QAEXW4eDirect3DDeviceMethods@@PAX@Z
?getD3DDevice@SFRender@@QAEPAUIDirect3DDevice9@@XZ
?BeginRender@SFRender@@QAEJXZ
?DrawLine@SFRender@@QAEXHHHHHK@Z
?CreateNewFont@SFRender@@QAEPAUstFontInfo@@PADHK@Z
?IsPickupExists@stPickupPool@@QAE_NH@Z
?IsObjectExists@stObjectPool@@QAE_NH@Z
?AddChatMessage@stChatInfo@@QAAXKPBDZZ
?ToggleCursor@stMiscInfo@@QAEX_N@Z
?IsInitialized@SFSAMP@@QAE_NXZ
?getInfo@SFSAMP@@QAEPAUstSAMP@@XZ
?getChat@SFSAMP@@QAEPAUstChatInfo@@XZ
?getMisc@SFSAMP@@QAEPAUstMiscInfo@@XZ
?registerChatCommand@SFSAMP@@QAE_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@P6GX0@Z@Z
?registerWndProcCallback@SFGame@@QAEXW4WndProcCallbackPriority@1@P6G_NPAUHWND__@@IIJ@Z@Z
?convert3DCoordsToScreen@SFGame@@QAEXMMMPAM0@Z
?getSAMP@SAMPFUNCS@@QAEPAVSFSAMP@@XZ
?getRender@SAMPFUNCS@@QAEPAVSFRender@@XZ
?getGame@SAMPFUNCS@@QAEPAVSFGame@@XZ
?initPlugin@SAMPFUNCS@@QAE_NP6GXXZPAUHINSTANCE__@@@Z
?GAME@@3PAVCGame@@A
?Print@stFontInfo@@QAEJPBDKMM_N1U?$rect@M@@@Z

user32

SetClipboardData
GetClipboardData
EmptyClipboard
GetActiveWindow
GetKeyState
GetCapture
SetCapture
CloseClipboard
GetClientRect
SetCursorPos
SetCursor
GetCursorPos
ClientToScreen
ScreenToClient
LoadCursorA
ReleaseCapture
OpenClipboard

imm32

ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

kernel32

GetFileAttributesExW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
GetACP
SetStdHandle
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
OutputDebugStringW
WriteFile
HeapReAlloc
HeapFree
HeapAlloc
ExitProcess
FreeLibraryAndExitThread
ResumeThread
CreateFileW
HeapSize
SetFilePointerEx
GetCurrentProcess
ExitThread
CreateThread
ReadFile
WriteConsoleW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
QueryPerformanceCounter
QueryPerformanceFrequency
GetPrivateProfileStringA
WritePrivateProfileStringA
DeleteFileA
CloseHandle
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetEndOfFile
TerminateProcess
WideCharToMultiByte
MultiByteToWideChar
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
RtlUnwind
RaiseException
GetLastError
FreeLibrary
LoadLibraryExW
InterlockedFlushSList
GetStdHandle
GetFileType
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW

Sections

.text
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arzr/SAMPFUNCS/SAMPFUNCS.log
arzr/SAMPFUNCS/sampfuncs-settings.ini
arzr/moonloader/lib/MoonAdditions.dll
.dll windows:5 windows x86 arch:x86

2d3ec0d8ac68567c8bbbba5c3a2822b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Dev\Sources\MoonAdditions\Release\MoonAdditions.pdb

Imports

lua51

lua_equal
lua_tonumber
lua_pushnumber
lua_toboolean
lua_rawequal
lua_rawget
lua_pushinteger
lua_rawset
lua_gettable
lua_pushboolean
lua_error
lua_newuserdata
lua_pushlstring
luaL_getmetafield
lua_setmetatable
lua_getfield
lua_getmetatable
lua_isnumber
lua_pushlightuserdata
lua_pushnil
lua_touserdata
luaL_checkstack
lua_pushstring
lua_pushcclosure
lua_settable
luaL_newmetatable
lua_setfield
lua_type
lua_gettop
lua_pushvalue
luaL_ref
lua_createtable
luaL_error
lua_tointeger
luaL_unref
lua_rawgeti
lua_settop
lua_tolstring

kernel32

GetModuleHandleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetProcessHeap
WriteFile
GetACP
ExitProcess
HeapFree
HeapReAlloc
HeapAlloc
WriteConsoleW
GetModuleHandleExW
VirtualProtect
GetModuleHandleA
CreateFileW
FindClose
SetFilePointerEx
CloseHandle
GetLastError
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
HeapSize
GetProcAddress
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStringTypeW
LCMapStringW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
GetStdHandle
GetFileType
GetModuleFileNameA

Exports

Exports

luaopen_MoonAdditions

Sections

.text
Size: 590KB - Virtual size: 590KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arzr/moonloader/lib/MoonImGui.dll
.dll windows:5 windows x86 arch:x86

68284cc62752f594bd25cab885f3f8b4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\GTA\SAMP\moonloader\lib\MoonImGui.pdb

Imports

lua51

lua_pushinteger
lua_pcall
lua_pushnil
lua_pushvalue
luaL_newmetatable
lua_settop
lua_setmetatable
lua_toboolean
lua_getfield
lua_rawset
lua_rawget
luaL_getmetafield
lua_gettop
lua_checkstack
lua_pushnumber
lua_error
luaL_unref
lua_remove
lua_pushstring
lua_rawgeti
lua_touserdata
lua_topointer
lua_tolstring
lua_tointeger
lua_pushboolean
lua_tonumber
lua_newuserdata
lua_xmove
lua_createtable
luaL_ref
lua_equal
luaL_error
lua_setfield
lua_gettable
lua_pushlightuserdata
lua_type
lua_rawequal
lua_settable
lua_getmetatable
lua_pushlstring
lua_isnumber
lua_pushcclosure

d3dx9_43

D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileA

kernel32

HeapSize
CreateFileW
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
CreateThread
WaitForSingleObjectEx
OutputDebugStringW
GetStringTypeW
CloseHandle
GetConsoleCP
WriteFile
FlushFileBuffers
LCMapStringW
HeapReAlloc
ReadConsoleW
GetConsoleMode
SetFilePointerEx
HeapAlloc
HeapFree
WideCharToMultiByte
ExitProcess
WriteConsoleW
GetModuleFileNameW
GetModuleFileNameA
GetFileType
GlobalAlloc
GlobalLock
GlobalUnlock
MultiByteToWideChar
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleExW
GetStdHandle
ReadFile
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
SetLastError
GetLastError
InterlockedFlushSList
SetEndOfFile
GetACP
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DecodePointer
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException

user32

MessageBoxA
GetKeyState
GetCapture
ClientToScreen
LoadCursorW
SetCapture
SetCursor
GetClientRect
ReleaseCapture
SetClipboardData
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetCursorPos

imm32

ImmSetCompositionWindow
ImmGetContext

Exports

Exports

luaopen_MoonImGui

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arzr/moonloader/lib/Trebucbd.ttf
arzr/moonloader/lib/aeslua.lua
arzr/moonloader/lib/aeslua/aes.lua
arzr/moonloader/lib/aeslua/buffer.lua
arzr/moonloader/lib/aeslua/ciphermode.lua
arzr/moonloader/lib/aeslua/gf.lua
arzr/moonloader/lib/aeslua/util.lua
arzr/moonloader/lib/base64.dll
.dll windows:6 windows x86 arch:x86

751e262dc89cf9bc842f9fb10dae679d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

luaL_pushresult
luaL_addlstring
luaL_buffinit
luaL_checklstring
luaL_register
lua_settable
lua_pushlstring

kernel32

CreateFileW
DecodePointer
WriteConsoleW
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
RaiseException
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx

Exports

Exports

luaopen_base64

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arzr/moonloader/lib/bass.lua
arzr/moonloader/lib/bitex.lua
arzr/moonloader/lib/cjson.dll
.dll windows:5 windows x86 arch:x86

13115fe24663146dfd2ee3956fc02a02

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

lua_pushlightuserdata
luaL_checkoption
luaL_error
luaL_checkstack
luaL_checkinteger
luaL_checklstring
luaL_argerror
lua_next
lua_pcall
lua_setmetatable
lua_rawseti
lua_rawset
lua_setfield
lua_getmetatable
lua_newuserdata
lua_createtable
lua_rawgeti
lua_rawget
lua_getfield
lua_gettop
lua_pushboolean
lua_pushcclosure
lua_pushstring
lua_pushlstring
lua_pushinteger
lua_pushnumber
lua_pushnil
lua_touserdata
lua_tolstring
lua_toboolean
lua_tonumber
lua_rawequal
lua_typename
lua_type
lua_checkstack
lua_insert
lua_pushvalue
lua_settop

kernel32

TlsGetValue
CreateFileW
WriteConsoleW
CloseHandle
SetFilePointerEx
HeapSize
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
RaiseException
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
GetStringTypeW
HeapReAlloc
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetACP
GetStdHandle
GetFileType
DecodePointer

Exports

Exports

luaopen_cjson
luaopen_cjson_safe

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arzr/moonloader/lib/cjson/util.lua
arzr/moonloader/lib/colorise.lua
.js
arzr/moonloader/lib/des56.dll
.dll windows:6 windows x86 arch:x86

5cd94f39d3257ff1e2a230f037448932

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

luaL_optlstring
luaL_checklstring
lua_error
lua_createtable
lua_pushlstring
luaL_checkstack
lua_settable
lua_pushcclosure
lua_pushstring
lua_pushvalue
lua_settop

kernel32

HeapFree
CreateFileW
DecodePointer
WriteConsoleW
CloseHandle
SetFilePointerEx
GetConsoleMode
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
HeapAlloc
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP

Exports

Exports

luaopen_des56

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arzr/moonloader/lib/dkjson.lua
.js
arzr/moonloader/lib/encoding.lua
.js
arzr/moonloader/lib/game/globals.lua
arzr/moonloader/lib/game/keys.lua
arzr/moonloader/lib/game/models.lua
arzr/moonloader/lib/game/weapons.lua
arzr/moonloader/lib/iconv.dll
.dll windows:5 windows x86 arch:x86

32c7e99f7a4e9fea3c5eaf0cf28dea1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Dev\Sources\lua-iconv\Release\lua-iconv.pdb

Imports

lua51

lua_pushlstring
lua_pushnil
luaL_argerror
lua_pushvalue
luaL_newmetatable
lua_settop
luaL_buffinit
lua_setmetatable
luaL_register
lua_typename
lua_getfield
luaL_addlstring
lua_pushnumber
lua_pushstring
luaL_checkudata
lua_touserdata
lua_pushfstring
lua_objlen
lua_pushboolean
lua_newuserdata
lua_createtable
luaL_pushresult
lua_type
lua_settable
luaL_checklstring
lua_pushcclosure

kernel32

GetProcAddress
RaiseException
CloseHandle
WriteConsoleW
DecodePointer
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
HeapReAlloc
HeapSize
SetStdHandle
GetStringTypeW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetACP
GetOEMCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
CreateFileW
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage

Exports

Exports

luaopen_iconv

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 839KB - Virtual size: 838KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arzr/moonloader/lib/iconv/COPYING-libiconv
arzr/moonloader/lib/iconv/README-libiconv
arzr/moonloader/lib/iconv/README-lua-iconv
arzr/moonloader/lib/imgui.lua
.js
arzr/moonloader/lib/imgui_piemenu.lua
.js
arzr/moonloader/lib/json2lua.lua
.sh linux
arzr/moonloader/lib/lanes.lua
.js
arzr/moonloader/lib/lanes/core.dll
.dll windows:6 windows x86 arch:x86

76f8d883664d197527dc6219778c2014

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

luaL_pushresult
luaL_addvalue
luaL_addlstring
luaL_buffinit
luaL_loadbuffer
luaL_openlibs
luaopen_base
lua_setupvalue
lua_getupvalue
lua_gc
lua_dump
lua_topointer
lua_tocfunction
lua_lessthan
luaopen_debug
luaopen_os
luaopen_io
luaopen_table
luaopen_string
luaopen_math
luaopen_package
lua_newstate
luaL_loadstring
luaL_loadfile
luaL_checkudata
luaL_newmetatable
luaL_checktype
luaL_optinteger
luaL_checkinteger
luaL_optnumber
luaL_checknumber
luaL_optlstring
luaL_checklstring
luaL_argerror
luaL_register
lua_sethook
lua_getinfo
lua_getstack
lua_setallocf
lua_getallocf
lua_next
lua_error
lua_setfenv
lua_rawseti
lua_settable
lua_getfenv
lua_rawgeti
lua_gettable
lua_pushboolean
lua_pushinteger
lua_pushnumber
lua_pushnil
lua_objlen
lua_tointeger
lua_tonumber
lua_rawequal
lua_typename
lua_iscfunction
lua_isnumber
lua_replace
lua_close
luaL_error
lua_concat
lua_pcall
lua_setmetatable
lua_rawset
lua_getmetatable
lua_newuserdata
lua_rawget
lua_pushlightuserdata
lua_pushfstring
lua_pushlstring
lua_touserdata
lua_tolstring
lua_toboolean
lua_equal
lua_isuserdata
lua_isstring
lua_checkstack
lua_insert
lua_remove
lua_call
lua_setfield
lua_createtable
lua_getfield
lua_pushcclosure
lua_pushstring
lua_type
lua_pushvalue
lua_settop
lua_gettop

kernel32

GetProcAddress
SetFilePointerEx
HeapReAlloc
HeapSize
CreateFileW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
LCMapStringW
CompareStringW
WaitForSingleObjectEx
OutputDebugStringW
WriteFile
GetTimeZoneInformation
GetACP
HeapAlloc
HeapFree
WideCharToMultiByte
MultiByteToWideChar
ExitProcess
FreeLibraryAndExitThread
ExitThread
CreateThread
CloseHandle
SetConsoleCtrlHandler
WriteConsoleW
GetModuleHandleExW
GetModuleFileNameW
GetModuleFileNameA
GetFileType
GetStdHandle
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RtlUnwind
InterlockedFlushSList
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SystemTimeToFileTime
FormatMessageA
GetSystemTime
TerminateThread
SetThreadPriority
GetCurrentThreadId
GetCurrentThread
WaitForSingleObject
SleepConditionVariableCS
WakeAllConditionVariable
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
Sleep
DecodePointer
LoadLibraryA
RaiseException
GetLastError
InitializeConditionVariable

Exports

Exports

luaG_newdeepuserdata
luaG_pushdeepversion
luaG_todeep
luaopen_lanes_core
luaopen_lanes_embedded

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arzr/moonloader/lib/lfs.dll
.dll windows:6 windows x86 arch:x86

e9db98f361b96ad50703f384d479544a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

luaL_checkoption
luaL_error
luaL_checkudata
luaL_newmetatable
luaL_optinteger
luaL_optnumber
luaL_checklstring
luaL_argerror
luaL_register
lua_setmetatable
lua_rawset
lua_setfield
lua_settable
lua_newuserdata
lua_createtable
lua_getfield
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushstring
lua_pushlstring
lua_pushinteger
lua_pushnil
lua_touserdata
lua_tolstring
lua_type
lua_isstring
lua_pushvalue
lua_gettop

kernel32

FileTimeToSystemTime
DecodePointer
WriteConsoleW
HeapReAlloc
HeapSize
SetEndOfFile
GetTimeZoneInformation
GetConsoleCP
WriteFile
FlushFileBuffers
GetStringTypeW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
CreateFileA
CloseHandle
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ReadFile
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
RaiseException
GetFullPathNameW
GetFullPathNameA
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetCurrentDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
LockFileEx
UnlockFileEx
Sleep
SetFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
SetFilePointerEx
GetStdHandle
GetConsoleMode
ReadConsoleW
GetACP
SetStdHandle
CreateDirectoryW
RemoveDirectoryW
CompareStringW
LCMapStringW

Exports

Exports

luaopen_lfs

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arzr/moonloader/lib/lockbox.lua
arzr/moonloader/lib/lockbox/cipher/aes128.lua
.js
arzr/moonloader/lib/lockbox/cipher/aes192.lua
.js
arzr/moonloader/lib/lockbox/cipher/aes256.lua
.js
arzr/moonloader/lib/lockbox/cipher/des.lua
.js
arzr/moonloader/lib/lockbox/cipher/des3.lua
.js
arzr/moonloader/lib/lockbox/cipher/mode/cbc.lua
.js
arzr/moonloader/lib/lockbox/cipher/mode/cfb.lua
.js
arzr/moonloader/lib/lockbox/cipher/mode/ctr.lua
.js
arzr/moonloader/lib/lockbox/cipher/mode/ecb.lua
.js
arzr/moonloader/lib/lockbox/cipher/mode/ige.lua
.js
arzr/moonloader/lib/lockbox/cipher/mode/ofb.lua
.js
arzr/moonloader/lib/lockbox/cipher/mode/pcbc.lua
.js
arzr/moonloader/lib/lockbox/cipher/tea.lua
.js
arzr/moonloader/lib/lockbox/cipher/xtea.lua
.js
arzr/moonloader/lib/lockbox/digest/md2.lua
.js
arzr/moonloader/lib/lockbox/digest/md4.lua
.js
arzr/moonloader/lib/lockbox/digest/md5.lua
.js
arzr/moonloader/lib/lockbox/digest/ripemd128.lua
.js
arzr/moonloader/lib/lockbox/digest/ripemd160.lua
.js
arzr/moonloader/lib/lockbox/digest/sha1.lua
.js
arzr/moonloader/lib/lockbox/digest/sha2_224.lua
.js
arzr/moonloader/lib/lockbox/digest/sha2_256.lua
.js
arzr/moonloader/lib/lockbox/init.lua
.js
arzr/moonloader/lib/lockbox/kdf/hkdf.lua
.js
arzr/moonloader/lib/lockbox/kdf/pbkdf2.lua
.js
arzr/moonloader/lib/lockbox/mac/hmac.lua
.js
arzr/moonloader/lib/lockbox/padding/ansix923.lua
.js
arzr/moonloader/lib/lockbox/padding/isoiec7816.lua
.js
arzr/moonloader/lib/lockbox/padding/pkcs7.lua
.js
arzr/moonloader/lib/lockbox/padding/zero.lua
.js
arzr/moonloader/lib/lockbox/util/array.lua
.js
arzr/moonloader/lib/lockbox/util/base64.lua
.js
arzr/moonloader/lib/lockbox/util/bit.lua
arzr/moonloader/lib/lockbox/util/queue.lua
.js
arzr/moonloader/lib/lockbox/util/stream.lua
.js
arzr/moonloader/lib/ltn12.lua
.js
arzr/moonloader/lib/lua2json.lua
.sh linux
arzr/moonloader/lib/lub/Autoload.lua
arzr/moonloader/lib/lub/Dir.lua
arzr/moonloader/lib/lub/Param.lua
arzr/moonloader/lib/lub/Template.lua
arzr/moonloader/lib/lub/init.lua
.js
arzr/moonloader/lib/matrix3x3.lua
.js
arzr/moonloader/lib/md5.lua
arzr/moonloader/lib/md5/core.dll
.dll windows:6 windows x86 arch:x86

58828ea62143b1c7a9a9f122282994a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

luaL_pushresult
luaL_addlstring
luaL_prepbuffer
luaL_buffinit
luaL_error
luaL_checklstring
luaL_argerror
lua_concat
lua_createtable
lua_pushlstring
lua_type
luaL_checkstack
lua_settable
lua_pushcclosure
lua_pushstring
lua_pushvalue
lua_settop

kernel32

CreateFileW
DecodePointer
WriteConsoleW
CloseHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteFile
SetStdHandle
HeapReAlloc
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
RaiseException
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW

Exports

Exports

luaopen_md5_core

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arzr/moonloader/lib/mgtweaks.lua
arzr/moonloader/lib/mime.lua
.js
arzr/moonloader/lib/mime/core.dll
.dll windows:6 windows x86 arch:x86

ec9717053080f592fcd66a0df7291450

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

luaL_pushresult
luaL_addstring
luaL_addlstring
luaL_prepbuffer
luaL_buffinit
luaL_checkinteger
luaL_optnumber
luaL_checknumber
luaL_optlstring
luaL_openlib
lua_rawset
lua_pushstring
lua_pushlstring
lua_pushnumber
lua_pushnil
lua_tolstring
lua_settop

kernel32

GetModuleFileNameA
DecodePointer
WriteConsoleW
CloseHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteFile
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
CreateFileW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType

Exports

Exports

luaopen_mime_core

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arzr/moonloader/lib/moonloader.lua
arzr/moonloader/lib/requests.lua
.js
arzr/moonloader/lib/samp/events.lua
.vbs
arzr/moonloader/lib/samp/events/bitstream_io.lua
.js
arzr/moonloader/lib/samp/events/core.lua
arzr/moonloader/lib/samp/events/extra_types.lua
.js
arzr/moonloader/lib/samp/events/handlers.lua
.js
arzr/moonloader/lib/samp/events/utils.lua
arzr/moonloader/lib/samp/events_core.lua
.js
arzr/moonloader/lib/samp/raknet.lua
.vbs
arzr/moonloader/lib/samp/synchronization.lua
arzr/moonloader/lib/sampfuncs.lua
arzr/moonloader/lib/socket.lua
.js
arzr/moonloader/lib/socket/core.dll
.dll windows:6 windows x86 arch:x86

9e9fcae90366572b3c771f819b84f34d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

lua_newuserdata
luaL_checktype
lua_call
lua_pcall
lua_insert
luaL_checkoption
luaL_error
lua_settable
lua_pushlstring
lua_setfield
lua_pushinteger
luaL_checkudata
luaL_newmetatable
lua_setmetatable
lua_getmetatable
lua_createtable
lua_rawget
lua_getfield
lua_gettable
lua_pushcclosure
lua_pushfstring
lua_touserdata
lua_tolstring
lua_toboolean
lua_typename
lua_type
lua_isstring
lua_settop
luaL_pushresult
luaL_addlstring
luaL_prepbuffer
luaL_buffinit
luaL_checklstring
lua_pushnil
lua_tonumber
lua_isnumber
lua_replace
lua_pushvalue
luaL_optnumber
luaL_checknumber
luaL_optlstring
luaL_argerror
lua_pushnumber
luaL_checkinteger
luaL_openlib
lua_error
lua_rawset
lua_pushboolean
lua_pushstring
lua_gettop

ws2_32

WSAGetLastError
WSACleanup
WSAStartup
gethostbyname
gethostbyaddr
socket
shutdown
sendto
send
select
recvfrom
recv
listen
ioctlsocket
connect
closesocket
bind
accept
__WSAFDIsSet
getnameinfo
freeaddrinfo
getaddrinfo
gethostname
getsockname
getpeername
inet_pton
setsockopt
inet_ntoa
htonl
getsockopt

kernel32

UnhandledExceptionFilter
CloseHandle
WriteConsoleW
DecodePointer
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
HeapReAlloc
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
LCMapStringW
GetStringTypeW
GetFileType
GetStdHandle
GetACP
HeapAlloc
HeapFree
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
RaiseException
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
RtlUnwind
InterlockedFlushSList
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
Sleep
GetSystemTimeAsFileTime
FormatMessageA
CreateFileW
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess

Exports

Exports

luaopen_socket_core

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arzr/moonloader/lib/socket/ftp.lua
.js
arzr/moonloader/lib/socket/headers.lua
arzr/moonloader/lib/socket/http.lua
.js
arzr/moonloader/lib/socket/smtp.lua
arzr/moonloader/lib/socket/tp.lua
.js
arzr/moonloader/lib/socket/url.lua
arzr/moonloader/lib/ssl.dll
.dll windows:6 windows x86 arch:x86

71c11249508eb697b5113c5b2ee26c01

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

luaL_checknumber
luaL_pushresult
luaL_addlstring
luaL_prepbuffer
luaL_buffinit
luaL_optnumber
lua_isnumber
luaL_checktype
luaL_optinteger
luaL_argerror
lua_next
lua_rawset
lua_toboolean
lua_remove
lua_error
lua_call
lua_rawgeti
lua_pushlightuserdata
lua_pushnumber
lua_tolstring
lua_tonumber
luaL_checkudata
luaL_newmetatable
luaL_checkinteger
luaL_optlstring
luaL_checklstring
luaL_register
lua_setmetatable
lua_rawseti
lua_setfield
lua_settable
lua_newuserdata
lua_createtable
lua_getfield
lua_gettable
lua_pushboolean
lua_pushfstring
lua_pushstring
lua_pushlstring
lua_pushinteger
lua_pushnil
lua_objlen
lua_type
lua_isuserdata
lua_replace
lua_pushvalue
lua_settop
lua_gettop

ws2_32

WSASetLastError
WSACleanup
send
select
recv
ioctlsocket
closesocket
__WSAFDIsSet
WSAGetLastError
getnameinfo

advapi32

CryptCreateHash
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGenRandom
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
DeregisterEventSource
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam

user32

MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation

crypt32

CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertOpenStore
CertGetCertificateContextProperty

kernel32

GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExA
FindClose
GetStringTypeW
SetStdHandle
SetFilePointerEx
FlushFileBuffers
LCMapStringW
CompareStringW
GetConsoleCP
GetACP
HeapReAlloc
HeapAlloc
HeapFree
FreeEnvironmentStringsW
GetModuleFileNameA
RaiseException
SetConsoleCtrlHandler
ExitProcess
ReadFile
LoadLibraryExW
RtlUnwind
InterlockedFlushSList
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SystemTimeToFileTime
GetSystemTime
SetLastError
SetConsoleMode
ReadConsoleW
ReadConsoleA
GetConsoleMode
GetEnvironmentVariableW
SetEnvironmentVariableA
GetProcessHeap
WriteConsoleW
CreateFileW
HeapSize
SetEndOfFile
DecodePointer
FindFirstFileW
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
LoadLibraryW
LoadLibraryA
FreeLibrary
CloseHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetCurrentDirectoryW
GetFullPathNameW
GetModuleHandleExW
Sleep
GetSystemTimeAsFileTime
GetTimeZoneInformation
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetLastError
GetStdHandle
GetFileType
WriteFile
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
SwitchToFiber
DeleteFiber
CreateFiber
WideCharToMultiByte
ConvertFiberToThread
ConvertThreadToFiber
QueryPerformanceCounter
GetCurrentProcessId
GetTickCount
GlobalMemoryStatus

Exports

Exports

luaopen_ssl
luaopen_ssl_context
luaopen_ssl_core
luaopen_ssl_x509

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arzr/moonloader/lib/ssl.lua
arzr/moonloader/lib/ssl/https.lua
.js
arzr/moonloader/lib/vector3d.lua
.js
arzr/moonloader/lib/vkeys.lua
arzr/moonloader/lib/windows/init.lua
arzr/moonloader/lib/windows/message.lua
arzr/moonloader/lib/xml/Parser.lua
arzr/moonloader/lib/xml/core.dll
.dll windows:6 windows x86 arch:x86

04151667cd8781e41e7fca22ca2f9971

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

lua_pushfstring
luaL_loadbuffer
luaL_error
luaL_where
luaL_newmetatable
luaL_register
lua_concat
lua_error
lua_pcall
lua_call
lua_setfenv
lua_setmetatable
lua_getfenv
lua_getmetatable
lua_newuserdata
lua_rawget
lua_getfield
lua_pushboolean
lua_pushstring
lua_pushnumber
lua_touserdata
lua_tolstring
lua_tointeger
lua_rawequal
lua_typename
lua_type
lua_isnumber
lua_remove
lua_pushvalue
lua_settop
lua_rawseti
lua_rawset
lua_setfield
lua_createtable
lua_pushlstring
lua_gettop

kernel32

EnterCriticalSection
CreateFileW
SetFilePointerEx
HeapReAlloc
HeapSize
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
GetACP
LCMapStringW
CreateThread
WaitForSingleObjectEx
CloseHandle
OutputDebugStringW
WriteFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
DecodePointer
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
GetFileType
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc

Exports

Exports

luaopen_xml_Parser
luaopen_xml_core

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arzr/moonloader/lib/xml/init.lua
arzr/moonloader/moonloader.log

Sharing

General

Malware Config

Signatures

Files

4faafa12720076da502dc12311392fbf

Headers

DLL Characteristics

File Characteristics

Imports

sampfuncs.asi

user32

imm32

urlmon

shell32

kernel32

Sections

.text Size: 341KB - Virtual size: 340KB

.rdata Size: 106KB - Virtual size: 105KB

.data Size: 4KB - Virtual size: 8KB

.tls Size: 512B - Virtual size: 9B

.gfids Size: 512B - Virtual size: 388B

.reloc Size: 14KB - Virtual size: 14KB

2d3ec0d8ac68567c8bbbba5c3a2822b7

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

lua51

kernel32

Exports

Exports

Sections

.text Size: 590KB - Virtual size: 590KB

.rdata Size: 106KB - Virtual size: 105KB

.data Size: 4KB - Virtual size: 18KB

.gfids Size: 512B - Virtual size: 372B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 45KB - Virtual size: 44KB

68284cc62752f594bd25cab885f3f8b4

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

lua51

d3dx9_43

kernel32

user32

imm32

Exports

Exports

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 335KB - Virtual size: 335KB

.data Size: 40KB - Virtual size: 128KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 180KB - Virtual size: 179KB

751e262dc89cf9bc842f9fb10dae679d

Headers

DLL Characteristics

File Characteristics

Imports

lua51

kernel32

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 22KB - Virtual size: 21KB

.data Size: 2KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 160B

.reloc Size: 3KB - Virtual size: 3KB

13115fe24663146dfd2ee3956fc02a02

Headers

DLL Characteristics

File Characteristics

Imports

lua51

.text
Size: 341KB - Virtual size: 340KB

.rdata
Size: 106KB - Virtual size: 105KB

.data
Size: 4KB - Virtual size: 8KB

.tls
Size: 512B - Virtual size: 9B

.gfids
Size: 512B - Virtual size: 388B

.reloc
Size: 14KB - Virtual size: 14KB

.text
Size: 590KB - Virtual size: 590KB

.rdata
Size: 106KB - Virtual size: 105KB

.data
Size: 4KB - Virtual size: 18KB

.gfids
Size: 512B - Virtual size: 372B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 45KB - Virtual size: 44KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 335KB - Virtual size: 335KB

.data
Size: 40KB - Virtual size: 128KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 180KB - Virtual size: 179KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 22KB - Virtual size: 21KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 160B

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 83KB - Virtual size: 82KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 2KB - Virtual size: 9KB

.gfids
Size: 512B - Virtual size: 160B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 128KB - Virtual size: 128KB

.rdata
Size: 839KB - Virtual size: 838KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 6KB - Virtual size: 6KB

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 35KB - Virtual size: 35KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 176B

.reloc
Size: 7KB - Virtual size: 6KB

.text
Size: 86KB - Virtual size: 85KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 2KB - Virtual size: 5KB

.gfids
Size: 512B - Virtual size: 164B

.reloc
Size: 5KB - Virtual size: 4KB