225b09e6527c3142976eca7fc9452902_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

225b09e6527c3142976eca7fc9452902_JaffaCakes118
Size

6.4MB
MD5

225b09e6527c3142976eca7fc9452902
SHA1

9ff20151e3b6ee42d78473d1fdd3be13de8cf619
SHA256

62c2a7fc84e366676c4cc2856336884b0fa0cac400ce985af0bc1b76d594f2fa
SHA512

150d9704ad4e40495ae48923547492985835ecde66bc559a38d9b7ebd69c64f84ed745c5350272e7379f40f75b87a0140cb32413af82d955dfe7821f30924ae3
SSDEEP

196608:9R3siYU7uapa6Rj46ZnAwM1Z/R68o4NLAvJq:g67da6G6xAH/E8o4pAvU

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Crack/MaxPayne3.exe
unpack001/Crack/binkw32.dll
unpack001/Crack/gsrld.dll

Files

225b09e6527c3142976eca7fc9452902_JaffaCakes118
.rar
Crack/MaxPayne3.exe
.exe windows:5 windows x86 arch:x86

71ec13184a7ef7c1ea8d7f3f1e70895f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

x:\payne\build\dev\MaxPayne3.pdb

Imports

binkw32

_BinkDoFrameAsync@12
_BinkShouldSkip@4
_BinkGetError@0
_BinkDoFrameAsyncWait@8
_BinkPause@8
_BinkWait@4
_BinkSetSpeakerVolumes@20
_BinkGetRealtime@12
_BinkControlBackgroundIO@8
_BinkSetVolume@12
_BinkSetFrameRate@8
_BinkFreeGlobals@0
_BinkOpenXAudio2@4
_BinkSetSoundSystem@8
_BinkRequestStopAsyncThread@4
_BinkWaitStopAsyncThread@4
_BinkNextFrame@4
_BinkDoFrame@4
_BinkGoto@12
_BinkStartAsyncThread@8
_BinkSetMemory@8
_BinkSetSoundTrack@8
_BinkSetIOSize@4
_BinkOpen@8
_BinkGetFrameBuffersInfo@8
_BinkRegisterFrameBuffers@8
_BinkClose@4
_BinkGetKeyFrame@12

winmm

timeBeginPeriod
timeGetTime
timeEndPeriod

rpcrt4

UuidCreateSequential

dsound

ord6
ord8
ord3
ord9
ord1

psapi

GetPerformanceInfo
EnumProcessModules
GetModuleFileNameExA

ws2_32

htons
ntohs
WSAGetLastError
send
recv
ioctlsocket
closesocket
gethostbyname
inet_addr
gethostname
connect
socket
listen
bind
accept
getsockname
WSACleanup
WSAStartup
ntohl
select
__WSAFDIsSet
setsockopt
sendto
recvfrom
shutdown
htonl
inet_ntoa

d3dcompiler_43

D3DReflect

dinput8

DirectInput8Create

kernel32

CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
SetErrorMode
ResetEvent
CompareStringW
SetEnvironmentVariableA
CreateFileW
RtlUnwind
GetTimeZoneInformation
LCMapStringW
GetCurrentDirectoryA
RaiseException
GetConsoleMode
GetConsoleCP
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
SetHandleCount
GetStdHandle
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetFileType
PeekNamedPipe
LCMapStringA
GetModuleHandleExA
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
GetLastError
MultiByteToWideChar
lstrlenA
CloseHandle
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetDiskFreeSpaceExA
GetProcAddress
FreeLibrary
LoadLibraryA
GetVersionExA
GetUserDefaultUILanguage
WideCharToMultiByte
GlobalMemoryStatusEx
GetNativeSystemInfo
CreateDirectoryA
SwitchToThread
InterlockedExchangeAdd
InterlockedExchange
FoldStringW
SetThreadPriority
GetThreadPriority
OpenThread
GetProcessAffinityMask
GetCurrentProcess
TerminateProcess
QueryPerformanceFrequency
WaitForMultipleObjects
CreateEventA
Sleep
OpenFile
VirtualAlloc
VirtualFree
HeapAlloc
GetProcessHeap
HeapFree
VirtualQueryEx
ExitProcess
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
CreateSemaphoreA
WaitForSingleObject
ReleaseSemaphore
CreateMutexA
ReleaseMutex
GetSystemInfo
ResumeThread
ExitThread
GetCurrentThread
GetCurrentThreadId
CreateThread
QueryPerformanceCounter
GetModuleHandleA
SetEvent
InterlockedCompareExchange
WriteFile
CreateFileA
DeleteFileA
FindClose
FindFirstFileA
LocalFree
FormatMessageA
SetFilePointer
SetFilePointerEx
ReadFile
GetFileSizeEx
SetFileTime
GetFileAttributesA
SetFileAttributesA
FindNextFileA
SetEndOfFile
MoveFileA
RemoveDirectoryA
FileTimeToSystemTime
FileTimeToLocalFileTime
LoadLibraryW
SetThreadExecutionState
GetVersion
GetModuleFileNameW
LoadLibraryExA
CreateProcessA
GetOverlappedResult
GetTickCount
GetTempPathA
InitializeCriticalSection
EnterCriticalSection
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
InitializeSListHead
GetModuleFileNameA
GetModuleHandleW
GetCommandLineA
GetStartupInfoA
GetDriveTypeA
GetFullPathNameA
GetSystemTimeAsFileTime
HeapReAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileInformationByHandle

user32

PeekMessageA
TranslateMessage
LoadIconA
LoadCursorA
RegisterClassA
GetDC
DispatchMessageA
SetRect
AdjustWindowRect
CreateWindowExA
PostMessageA
IsWindowVisible
GetWindowLongA
GetWindowPlacement
GetMonitorInfoA
SetWindowPos
SetWindowPlacement
SetWindowLongA
UpdateWindow
SetFocus
GetClientRect
GetCursorPos
MapWindowPoints
UnregisterClassA
DestroyWindow
GetSystemMetrics
GetParent
SetForegroundWindow
SetCapture
ReleaseCapture
DefWindowProcW
IsWindowUnicode
ReleaseDC
ClipCursor
GetForegroundWindow
SystemParametersInfoA
ToUnicodeEx
MapVirtualKeyExA
LoadKeyboardLayoutA
GetKeyboardLayoutNameA
GetKeyboardLayout
GetKeyboardType
GetWindowThreadProcessId
GetGUIThreadInfo
GetKeyState
GetKeyboardState
CharLowerBuffA
MessageBoxW
ShowWindow
DefWindowProcA
MessageBoxA
EnumDisplayDevicesA
GetDesktopWindow
ShowCursor
GetWindowRect
SendMessageA

gdi32

CreateDCA
ExtEscape
DeleteDC
GetStockObject
GetDeviceCaps

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyA
RegEnumKeyA
RegQueryValueExA
RegCloseKey

shell32

SHGetSpecialFolderPathA
SHGetFolderPathA

ole32

CoSetProxyBlanket
CoInitialize
CoUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun

oleaut32

SysAllocString
SysFreeString
VariantClear
VariantInit
GetErrorInfo

Sections

.rld0
Size: 13.6MB - Virtual size: 13.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rld1
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rld2
Size: 4.1MB - Virtual size: 270.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rld3
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rld4
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.aURGMC
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Crack/binkw32.dll
.dll windows:5 windows x86 arch:x86

a9dbeed0559439e5d94d85ea22ea38f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\devel\projects\bink\build\binkw32.pdb

Imports

user32

GetTopWindow
GetWindowLongA
GetActiveWindow
GetWindowThreadProcessId
GetWindow
EndPaint
ClientToScreen
DestroyWindow
SetCursor
ScreenToClient
GetWindowRect
IsIconic
GetClientRect
BeginPaint
GetDC
ShowCursor
UnregisterClassA
CreateWindowExA
PeekMessageA
ReleaseDC
DefWindowProcA
GetCursorPos
GetSystemMetrics
IsWindowVisible
ChangeDisplaySettingsA
GetClassLongA
RegisterClassA
MessageBoxA

gdi32

CreateDIBSection
GetDeviceCaps
StretchBlt
GetDIBits
SetPixel
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
SetStretchBltMode
GetPixel
DeleteDC

kernel32

EnterCriticalSection
RaiseException
ReleaseSemaphore
SetThreadPriority
CreateSemaphoreA
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThread
WaitForSingleObject
SetUnhandledExceptionFilter
TlsGetValue
HeapCreate
HeapFree
GetThreadPriority
CreateMutexA
DeleteCriticalSection
SetThreadAffinityMask
ReleaseMutex
TlsAlloc
ResumeThread
CreateThread
LocalAlloc
TlsSetValue
SetFilePointer
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sleep
GetSystemInfo
GetCurrentProcessId
OutputDebugStringA
QueryPerformanceCounter
GetTickCount
GetEnvironmentVariableA
QueryPerformanceFrequency
CreateFileA
InterlockedExchange
ReadFile
GetLastError
CloseHandle
TerminateProcess
GetCurrentProcess
DisableThreadLibraryCalls
HeapAlloc

winmm

waveOutSetVolume
waveOutReset
waveOutRestart
waveOutPause
waveOutWrite
waveOutClose
timeGetTime
timeEndPeriod
timeBeginPeriod
waveOutPrepareHeader
waveOutOpen
waveOutUnprepareHeader

ole32

CoCreateInstance
CoInitializeEx

Exports

Exports

_BinkBufferBlit@12
_BinkBufferCheckWinPos@12
_BinkBufferClear@8
_BinkBufferClose@4
_BinkBufferGetDescription@4
_BinkBufferGetError@0
_BinkBufferLock@4
_BinkBufferOpen@16
_BinkBufferSetDirectDraw@8
_BinkBufferSetHWND@8
_BinkBufferSetOffset@12
_BinkBufferSetResolution@12
_BinkBufferSetScale@12
_BinkBufferUnlock@4
_BinkCheckCursor@20
_BinkClose@4
_BinkCloseTrack@4
_BinkControlBackgroundIO@8
_BinkControlPlatformFeatures@8
_BinkCopyToBuffer@28
_BinkCopyToBufferRect@44
_BinkDDSurfaceType@4
_BinkDX8SurfaceType@4
_BinkDX9SurfaceType@4
_BinkDoFrame@4
_BinkDoFrameAsync@12
_BinkDoFrameAsyncWait@8
_BinkDoFramePlane@8
_BinkFreeGlobals@0
_BinkGetError@0
_BinkGetFrameBuffersInfo@8
_BinkGetKeyFrame@12
_BinkGetPalette@4
_BinkGetPlatformInfo@8
_BinkGetRealtime@12
_BinkGetRects@8
_BinkGetSummary@8
_BinkGetTrackData@8
_BinkGetTrackID@8
_BinkGetTrackMaxSize@8
_BinkGetTrackType@8
_BinkGoto@12
_BinkIsSoftwareCursor@8
_BinkLogoAddress@0
_BinkNextFrame@4
_BinkOpen@8
_BinkOpenDirectSound@4
_BinkOpenMiles@4
_BinkOpenTrack@8
_BinkOpenWaveOut@4
_BinkOpenWithOptions@12
_BinkOpenXAudio2@4
_BinkPause@8
_BinkRegisterFrameBuffers@8
_BinkRequestStopAsyncThread@4
_BinkRestoreCursor@4
_BinkService@4
_BinkSetError@4
_BinkSetFileOffset@8
_BinkSetFrameRate@8
_BinkSetIO@4
_BinkSetIOSize@4
_BinkSetMemory@8
_BinkSetPan@12
_BinkSetSimulate@4
_BinkSetSoundOnOff@8
_BinkSetSoundSystem@8
_BinkSetSoundTrack@8
_BinkSetSpeakerVolumes@20
_BinkSetVideoOnOff@8
_BinkSetVolume@12
_BinkSetWillLoop@8
_BinkShouldSkip@4
_BinkStartAsyncThread@8
_BinkWait@4
_BinkWaitStopAsyncThread@4
_RADTimerRead@0

Sections

.rld0
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rld1
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rld2
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rld3
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rld4
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rld5
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rld6
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rld7
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rld8
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rld9
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rld10
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rld11
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rld12
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rld13
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rld14
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rld15
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/Clouds.xml
.xml
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/CoverData.xml
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/MAPAREA.IPL
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/SpatialData.xml
.xml
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/anim.list
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/audOcclusionPaths.dat
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/cascade_shadows.dat
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/checkpoints.xml
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/images.txt
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/minimap.xml
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/networkleveldata.xml
.xml
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/occl.ipl
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/pedgrp.dat
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/popcycle.dat
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/sev_pesdata.xml
.xml
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/shorelines.dat
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/streamhelpers.dat
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/v_cemet.dat
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/weather.dat
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/worldblanket.dat
Crack/dlc/cemetery_pack/common/data/levels/v_cemet/zonebind.dat
Crack/dlc/cemetery_pack/platform/levels/v_cemet/interiors/v_mauzneint.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/props/mp_p_1stcem.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/props/mp_p_doors.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/props/mp_p_funhmei.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/props/mp_p_mauzne.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/props/mp_p_rotgdn.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/props/mp_p_script.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/props/mp_p_snip01.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/props/mp_p_sniper.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/props/mp_p_veg.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/props/mp_p_veg2.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/timecycle/timecycle.xml
.xml
Crack/dlc/cemetery_pack/platform/levels/v_cemet/v_bg_nw.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/v_bg_nw.wpl
Crack/dlc/cemetery_pack/platform/levels/v_cemet/v_funhme.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/v_funhme.wpl
Crack/dlc/cemetery_pack/platform/levels/v_cemet/v_mauapr.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/v_mauapr.wpl
Crack/dlc/cemetery_pack/platform/levels/v_cemet/v_mauzne.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/v_mauzne.wpl
Crack/dlc/cemetery_pack/platform/levels/v_cemet/v_rotgdn.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/v_rotgdn.wpl
Crack/dlc/cemetery_pack/platform/levels/v_cemet/v_sniper.ide
Crack/dlc/cemetery_pack/platform/levels/v_cemet/v_sniper.wpl
Crack/dlc/cemetery_pack/rsetup.xml
Crack/dlc/cemetery_pack/setup.xml
Crack/dlc/cemetery_pack/unlocking_rules_cemetery_pack.xml
Crack/dlc/cemetery_pack/unlocks_cemetery_pack.xml
Crack/dlc/content.xml
.xml
Crack/dlc/deadly_force_pack/rsetup.xml
Crack/dlc/deadly_force_pack/setup.xml
Crack/dlc/deadly_force_pack/unlocking_rules_deadly_force.xml
Crack/dlc/deadly_force_pack/unlocks_deadly_force.xml
Crack/dlc/gorilla_warfare/rsetup.xml
Crack/dlc/gorilla_warfare/setup.xml
Crack/dlc/gorilla_warfare/unlocking_rules_lo_item_bundle.xml
Crack/dlc/gorilla_warfare/unlocks_lo_item_bundle.xml
Crack/dlc/max_payne_1_pack/rsetup.xml
Crack/dlc/max_payne_1_pack/setup.xml
Crack/dlc/max_payne_1_pack/unlocking_rules_max_payne_1.xml
Crack/dlc/max_payne_1_pack/unlocks_max_payne_1.xml
Crack/dlc/pill_bottle_pack/rsetup.xml
Crack/dlc/pill_bottle_pack/setup.xml
Crack/dlc/pill_bottle_pack/unlocking_rules_pill_bottle.xml
Crack/dlc/pill_bottle_pack/unlocks_pill_bottle.xml
Crack/dlc/silent_killer_pack/rsetup.xml
Crack/dlc/silent_killer_pack/setup.xml
Crack/dlc/silent_killer_pack/unlocking_rules_silent_killer.xml
Crack/dlc/silent_killer_pack/unlocks_silent_killer.xml
Crack/dlc/special_ed_pack/rsetup.xml
Crack/dlc/special_ed_pack/setup.xml
Crack/dlc/special_ed_pack/unlocking_rules_special_edition.xml
Crack/dlc/special_ed_pack/unlocks_special_edition.xml
Crack/gsrld.dll
.dll windows:5 windows x86 arch:x86

6ebdea122e4556376f303dc5fa678bf1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcmpA
MultiByteToWideChar
lstrcmpiA
LoadLibraryA
lstrcmpiW
ExitProcess
HeapCreate
GetModuleHandleA
VirtualProtect
GetProcAddress

user32

MessageBoxA
wsprintfA

oleaut32

SysAllocString

Exports

Exports

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 813B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RLD0
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RLD1
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71ec13184a7ef7c1ea8d7f3f1e70895f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

binkw32

winmm

rpcrt4

dsound

psapi

ws2_32

d3dcompiler_43

dinput8

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.rld0 Size: 13.6MB - Virtual size: 13.6MB

.rld1 Size: 2.0MB - Virtual size: 2.0MB

.rld2 Size: 4.1MB - Virtual size: 270.1MB

.rld3 Size: 28KB - Virtual size: 27KB

.rsrc Size: 205KB - Virtual size: 204KB

.rld4 Size: 1.6MB - Virtual size: 1.6MB

.aURGMC Size: 1024B - Virtual size: 722B

a9dbeed0559439e5d94d85ea22ea38f2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

gdi32

kernel32

winmm

ole32

Exports

Exports

Sections

.rld0 Size: 6KB - Virtual size: 6KB

.rld1 Size: 512B - Virtual size: 432B

.rld2 Size: 2KB - Virtual size: 2KB

.rld3 Size: 2KB - Virtual size: 2KB

.rld4 Size: 4KB - Virtual size: 4KB

.rld5 Size: 5KB - Virtual size: 4KB

.rld6 Size: 113KB - Virtual size: 112KB

.rld7 Size: 2KB - Virtual size: 2KB

.rld8 Size: - Virtual size: 34KB

.rld9 Size: 6KB - Virtual size: 6KB

.rld10 Size: 15KB - Virtual size: 14KB

.rld11 Size: 21KB - Virtual size: 21KB

.rld12 Size: 12KB - Virtual size: 11KB

.rld13 Size: 512B - Virtual size: 56B

.rld14 Size: 512B - Virtual size: 159B

.rsrc Size: 19KB - Virtual size: 19KB

.rld15 Size: 7KB - Virtual size: 6KB

6ebdea122e4556376f303dc5fa678bf1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

oleaut32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 1024B - Virtual size: 813B

.data Size: 1024B - Virtual size: 972B

.RLD0 Size: 1024B - Virtual size: 850B

.rld0
Size: 13.6MB - Virtual size: 13.6MB

.rld1
Size: 2.0MB - Virtual size: 2.0MB

.rld2
Size: 4.1MB - Virtual size: 270.1MB

.rld3
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 205KB - Virtual size: 204KB

.rld4
Size: 1.6MB - Virtual size: 1.6MB

.aURGMC
Size: 1024B - Virtual size: 722B

.rld0
Size: 6KB - Virtual size: 6KB

.rld1
Size: 512B - Virtual size: 432B

.rld2
Size: 2KB - Virtual size: 2KB

.rld3
Size: 2KB - Virtual size: 2KB

.rld4
Size: 4KB - Virtual size: 4KB

.rld5
Size: 5KB - Virtual size: 4KB

.rld6
Size: 113KB - Virtual size: 112KB

.rld7
Size: 2KB - Virtual size: 2KB

.rld8
Size: - Virtual size: 34KB

.rld9
Size: 6KB - Virtual size: 6KB

.rld10
Size: 15KB - Virtual size: 14KB

.rld11
Size: 21KB - Virtual size: 21KB

.rld12
Size: 12KB - Virtual size: 11KB

.rld13
Size: 512B - Virtual size: 56B

.rld14
Size: 512B - Virtual size: 159B

.rsrc
Size: 19KB - Virtual size: 19KB

.rld15
Size: 7KB - Virtual size: 6KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 1024B - Virtual size: 813B

.data
Size: 1024B - Virtual size: 972B

.RLD0
Size: 1024B - Virtual size: 850B

.RLD1
Size: 145KB - Virtual size: 145KB

.reloc
Size: 1KB - Virtual size: 1KB