malaia[.]cc_v7_source[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

malaia.cc_v7_source.rar
Size

178.2MB
MD5

c9e4636eb1b6119d6862047330eca05f
SHA1

32d6c315d904bad9cba8de9de17220119f451bd6
SHA256

5551063fd484bb5b83d80efcc1f8207d9b3593220ece7cc07ae6c77a8642af76
SHA512

40cb58fcfaae0d333ea3a53a7551722e640fb1daada947716484040400e598ac14cdc0eee1c5a02a30c31ce312682fa6d9ce252231d4c7ac4b1114fc63fab0ef
SSDEEP

3145728:RDFlRE5/Tv+kc4c6FMUhSmYGfnkVq9BgAVoBKkazc9S06w:t4bU4c6FM7mYQnkVso46p

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/malaia.cc v7 source/x64/Build/CapCut.exe
unpack001/malaia.cc v7 source/x64/Build/OBS-Studio-30.0-Full-Installer-x64.exe

Files

malaia.cc_v7_source.rar
.rar
malaia.cc v7 source/.vs/1/FileContentIndex/398f8cce-f072-4465-a734-5260713e0bb5.vsidx
malaia.cc v7 source/.vs/1/v17/.suo
malaia.cc v7 source/.vs/1/v17/Browse.VC.db
malaia.cc v7 source/.vs/1/v17/DocumentLayout.json
malaia.cc v7 source/.vs/1/v17/ipch/AutoPCH/32b7683813c70ab7/MAIN.ipch
malaia.cc v7 source/.vs/1/v17/ipch/AutoPCH/354795afc38e6786/FIVEM-EXTERNAL.ipch
malaia.cc v7 source/.vs/1/v17/ipch/AutoPCH/7b72a9dedaa1f968/AIMBOT.ipch
malaia.cc v7 source/1.sln
malaia.cc v7 source/1/1.aps
malaia.cc v7 source/1/1.rc
malaia.cc v7 source/1/1.vcxproj
.xml
malaia.cc v7 source/1/1.vcxproj.filters
malaia.cc v7 source/1/1.vcxproj.user
malaia.cc v7 source/1/Hotkey/hotkey.cpp
malaia.cc v7 source/1/Hotkey/hotkey.h
malaia.cc v7 source/1/OIP-removebg-preview.ico
malaia.cc v7 source/1/aimbot/Classes.hpp
malaia.cc v7 source/1/aimbot/CustomWinApi.hpp
malaia.cc v7 source/1/aimbot/EncryptFuncs.hpp
malaia.cc v7 source/1/aimbot/EncryptString.hpp
malaia.cc v7 source/1/aimbot/Memory.hpp
malaia.cc v7 source/1/aimbot/aimbot.cpp
malaia.cc v7 source/1/aimbot/aimbot.h
malaia.cc v7 source/1/aimbot/includes.hpp
malaia.cc v7 source/1/aimbot/natives.hpp
malaia.cc v7 source/1/auth/auth.hpp
malaia.cc v7 source/1/auth/json.hpp
malaia.cc v7 source/1/auth/libcurl.lib
malaia.cc v7 source/1/auth/library_x64.lib
malaia.cc v7 source/1/auth/utils.hpp
malaia.cc v7 source/1/entry/main.cpp
malaia.cc v7 source/1/esp/esp.cpp
malaia.cc v7 source/1/esp/esp.h
malaia.cc v7 source/1/exploits/exploits.cpp
malaia.cc v7 source/1/exploits/exploits.h
malaia.cc v7 source/1/fn.otf
malaia.cc v7 source/1/font.ttf
malaia.cc v7 source/1/font2412.ttf
malaia.cc v7 source/1/font25.ttf
malaia.cc v7 source/1/font3.ttf
malaia.cc v7 source/1/fontv2.ttf
malaia.cc v7 source/1/lazy.h
malaia.cc v7 source/1/main/fivem-external.cpp
malaia.cc v7 source/1/main/fivem-external.h
malaia.cc v7 source/1/memory/libcurl.lib
malaia.cc v7 source/1/memory/library_x64.lib
malaia.cc v7 source/1/memory/memory.cpp
malaia.cc v7 source/1/memory/memory.h
malaia.cc v7 source/1/memory/skStr.h
malaia.cc v7 source/1/menufnt.ttf
malaia.cc v7 source/1/overlay/col.h
malaia.cc v7 source/1/overlay/fonts.h
malaia.cc v7 source/1/overlay/image.h
malaia.cc v7 source/1/overlay/imgui/imconfig.h
malaia.cc v7 source/1/overlay/imgui/imgui.cpp
malaia.cc v7 source/1/overlay/imgui/imgui.h
malaia.cc v7 source/1/overlay/imgui/imgui_demo.cpp
malaia.cc v7 source/1/overlay/imgui/imgui_draw.cpp
malaia.cc v7 source/1/overlay/imgui/imgui_impl_dx9.cpp
malaia.cc v7 source/1/overlay/imgui/imgui_impl_dx9.h
malaia.cc v7 source/1/overlay/imgui/imgui_impl_win32.cpp
malaia.cc v7 source/1/overlay/imgui/imgui_impl_win32.h
malaia.cc v7 source/1/overlay/imgui/imgui_internal.h
malaia.cc v7 source/1/overlay/imgui/imgui_tables.cpp
malaia.cc v7 source/1/overlay/imgui/imgui_widgets.cpp
malaia.cc v7 source/1/overlay/imgui/imstb_rectpack.h
malaia.cc v7 source/1/overlay/imgui/imstb_textedit.h
malaia.cc v7 source/1/overlay/imgui/imstb_truetype.h
malaia.cc v7 source/1/overlay/imgui/skCrypt.h
malaia.cc v7 source/1/overlay/million.cpp
malaia.cc v7 source/1/overlay/million.h
malaia.cc v7 source/1/overlay/overlay.cpp
malaia.cc v7 source/1/overlay/overlay.h
malaia.cc v7 source/1/overlay/overlaysafe.cpp
malaia.cc v7 source/1/prt.h
malaia.cc v7 source/1/resource.h
malaia.cc v7 source/1/sdk/sdk.cpp
malaia.cc v7 source/1/sdk/sdk.h
malaia.cc v7 source/1/sdk/sdk.rar
.rar
sdk.cpp
sdk.h
vectorh.h
malaia.cc v7 source/1/sdk/vectorh.h
malaia.cc v7 source/1/x64/Debug/1.log
malaia.cc v7 source/1/x64/Debug/hotkey.obj
malaia.cc v7 source/1/x64/Debug/hus on top fr.tlog/CL.command.1.tlog
malaia.cc v7 source/1/x64/Debug/hus on top fr.tlog/hus on top fr.lastbuildstate
malaia.cc v7 source/1/x64/Debug/imgui.obj
malaia.cc v7 source/1/x64/Debug/imgui_demo.obj
malaia.cc v7 source/1/x64/Debug/imgui_draw.obj
malaia.cc v7 source/1/x64/Debug/imgui_impl_dx9.obj
malaia.cc v7 source/1/x64/Debug/imgui_tables.obj
malaia.cc v7 source/1/x64/Debug/imgui_widgets.obj
malaia.cc v7 source/1/x64/Debug/million.obj
malaia.cc v7 source/1/x64/Debug/vc143.idb
malaia.cc v7 source/1/x64/Debug/vc143.pdb
malaia.cc v7 source/1/x64/Release/1.log
malaia.cc v7 source/1/x64/Release/1.res
malaia.cc v7 source/1/x64/Release/OBS-Studio-30.0-Full-Installer-x64.exe.recipe
malaia.cc v7 source/1/x64/Release/OBS-Studio-30.0-Full-Installer-x64.iobj
malaia.cc v7 source/1/x64/Release/OBS-Studio-30.0-Full-Installer-x64.ipdb
malaia.cc v7 source/1/x64/Release/aimbot.obj
malaia.cc v7 source/1/x64/Release/esp.obj
malaia.cc v7 source/1/x64/Release/exploits.obj
malaia.cc v7 source/1/x64/Release/fivem-external.obj
malaia.cc v7 source/1/x64/Release/hotkey.obj
malaia.cc v7 source/1/x64/Release/hus on top fr.tlog/CL.command.1.tlog
malaia.cc v7 source/1/x64/Release/hus on top fr.tlog/CL.read.1.tlog
malaia.cc v7 source/1/x64/Release/hus on top fr.tlog/CL.write.1.tlog
malaia.cc v7 source/1/x64/Release/hus on top fr.tlog/Cl.items.tlog
malaia.cc v7 source/1/x64/Release/hus on top fr.tlog/hus on top fr.lastbuildstate
malaia.cc v7 source/1/x64/Release/hus on top fr.tlog/link.command.1.tlog
malaia.cc v7 source/1/x64/Release/hus on top fr.tlog/link.read.1.tlog
malaia.cc v7 source/1/x64/Release/hus on top fr.tlog/link.write.1.tlog
malaia.cc v7 source/1/x64/Release/hus on top fr.tlog/rc.command.1.tlog
malaia.cc v7 source/1/x64/Release/hus on top fr.tlog/rc.read.1.tlog
malaia.cc v7 source/1/x64/Release/hus on top fr.tlog/rc.write.1.tlog
malaia.cc v7 source/1/x64/Release/imgui.obj
malaia.cc v7 source/1/x64/Release/imgui_demo.obj
malaia.cc v7 source/1/x64/Release/imgui_draw.obj
malaia.cc v7 source/1/x64/Release/imgui_impl_dx9.obj
malaia.cc v7 source/1/x64/Release/imgui_impl_win32.obj
malaia.cc v7 source/1/x64/Release/imgui_tables.obj
malaia.cc v7 source/1/x64/Release/imgui_widgets.obj
malaia.cc v7 source/1/x64/Release/main.obj
malaia.cc v7 source/1/x64/Release/malaia.cc v7.tlog/CL.command.1.tlog
malaia.cc v7 source/1/x64/Release/malaia.cc v7.tlog/CL.read.1.tlog
malaia.cc v7 source/1/x64/Release/malaia.cc v7.tlog/CL.write.1.tlog
malaia.cc v7 source/1/x64/Release/malaia.cc v7.tlog/Cl.items.tlog
malaia.cc v7 source/1/x64/Release/malaia.cc v7.tlog/link.command.1.tlog
malaia.cc v7 source/1/x64/Release/malaia.cc v7.tlog/link.read.1.tlog
malaia.cc v7 source/1/x64/Release/malaia.cc v7.tlog/link.write.1.tlog
malaia.cc v7 source/1/x64/Release/malaia.cc v7.tlog/malaia.cc v7.lastbuildstate
malaia.cc v7 source/1/x64/Release/malaia.cc v7.tlog/rc.command.1.tlog
malaia.cc v7 source/1/x64/Release/malaia.cc v7.tlog/rc.read.1.tlog
malaia.cc v7 source/1/x64/Release/malaia.cc v7.tlog/rc.write.1.tlog
malaia.cc v7 source/1/x64/Release/memory.obj
malaia.cc v7 source/1/x64/Release/million.obj
malaia.cc v7 source/1/x64/Release/overlay.obj
malaia.cc v7 source/1/x64/Release/sdk.obj
malaia.cc v7 source/1/x64/Release/vc143.pdb
malaia.cc v7 source/1/xor.hpp
malaia.cc v7 source/x64/Build/CapCut.exe
.exe windows:6 windows x64 arch:x64

857f82086a0c92b4d507bbf307f0f018

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\tryxz\Desktop\source codes\malaia.cc v7 source\x64\Build\OBS-Studio-30.0-Full-Installer-x64.pdb

Imports

kernel32

OpenProcess
CreateToolhelp32Snapshot
GetLastError
Process32NextW
Process32FirstW
CloseHandle
Module32FirstW
Module32NextW
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
SetLastError
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WriteProcessMemory
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetModuleHandleW
Beep
Sleep
SetConsoleTitleA
GetModuleFileNameA
ReadProcessMemory
RtlVirtualUnwind
GetTickCount64

user32

GetAsyncKeyState
GetSystemMetrics
mouse_event
FindWindowA
GetCapture
GetWindowLongW
GetWindow
GetWindowRect
DestroyWindow
SetWindowPos
DispatchMessageW
ClientToScreen
TrackMouseEvent
GetForegroundWindow
LoadCursorW
SetCapture
SetCursor
GetClientRect
ReleaseCapture
SetCursorPos
GetCursorPos
PeekMessageW
MoveWindow
DefWindowProcA
CreateWindowExA
SetLayeredWindowAttributes
ShowWindow
SetWindowLongA
TranslateMessage
EnumWindows
LoadIconW
GetWindowThreadProcessId
OpenClipboard
SetWindowLongW
SetClipboardData
GetClipboardData
GetDesktopWindow
RegisterClassExA
GetKeyState
EmptyClipboard
CloseClipboard
ScreenToClient

msvcp140

??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?uncaught_exceptions@std@@YAHXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?id@?$ctype@_W@std@@2V0locale@2@A
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??Bios_base@std@@QEBA_NXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

d3d9

Direct3DCreate9Ex

d3dx9_43

D3DXVec3Transform
D3DXMatrixTranspose

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmSetCandidateWindow
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset
memcmp
_CxxThrowException
__current_exception_context
__current_exception
memmove
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
__C_specific_handler
memchr
memcpy

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc
_set_new_mode

api-ms-win-crt-convert-l1-1-0

strtoul
atof

api-ms-win-crt-utility-l1-1-0

rand
srand
qsort

api-ms-win-crt-runtime-l1-1-0

_c_exit
__p___argv
__p___argc
system
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
_beginthreadex
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
terminate
_configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode
__stdio_common_vsscanf
_wfopen
fflush
fclose
__stdio_common_vfprintf
fseek
ftell
fread
__stdio_common_vsprintf
__acrt_iob_func
fwrite

api-ms-win-crt-math-l1-1-0

pow
powf
fmodf
ceilf
atan2f
sinf
sqrtf
__setusermatherr
acosf
cosf

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-filesystem-l1-1-0

rename

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
strcmp
_wcsicmp

Sections

.text
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 935KB - Virtual size: 937KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
malaia.cc v7 source/x64/Build/OBS-Studio-30.0-Full-Installer-x64.exe
.exe windows:6 windows x64 arch:x64

857f82086a0c92b4d507bbf307f0f018

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\tryxz\Desktop\source codes\malaia.cc v7 source\x64\Build\OBS-Studio-30.0-Full-Installer-x64.pdb

Imports

kernel32

OpenProcess
CreateToolhelp32Snapshot
GetLastError
Process32NextW
Process32FirstW
CloseHandle
Module32FirstW
Module32NextW
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
SetLastError
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WriteProcessMemory
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetModuleHandleW
Beep
Sleep
SetConsoleTitleA
GetModuleFileNameA
ReadProcessMemory
RtlVirtualUnwind
GetTickCount64

user32

GetAsyncKeyState
GetSystemMetrics
mouse_event
FindWindowA
GetCapture
GetWindowLongW
GetWindow
GetWindowRect
DestroyWindow
SetWindowPos
DispatchMessageW
ClientToScreen
TrackMouseEvent
GetForegroundWindow
LoadCursorW
SetCapture
SetCursor
GetClientRect
ReleaseCapture
SetCursorPos
GetCursorPos
PeekMessageW
MoveWindow
DefWindowProcA
CreateWindowExA
SetLayeredWindowAttributes
ShowWindow
SetWindowLongA
TranslateMessage
EnumWindows
LoadIconW
GetWindowThreadProcessId
OpenClipboard
SetWindowLongW
SetClipboardData
GetClipboardData
GetDesktopWindow
RegisterClassExA
GetKeyState
EmptyClipboard
CloseClipboard
ScreenToClient

msvcp140

??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?uncaught_exceptions@std@@YAHXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?id@?$ctype@_W@std@@2V0locale@2@A
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??Bios_base@std@@QEBA_NXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

d3d9

Direct3DCreate9Ex

d3dx9_43

D3DXVec3Transform
D3DXMatrixTranspose

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmSetCandidateWindow
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset
memcmp
_CxxThrowException
__current_exception_context
__current_exception
memmove
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
__C_specific_handler
memchr
memcpy

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc
_set_new_mode

api-ms-win-crt-convert-l1-1-0

strtoul
atof

api-ms-win-crt-utility-l1-1-0

rand
srand
qsort

api-ms-win-crt-runtime-l1-1-0

_c_exit
__p___argv
__p___argc
system
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
_beginthreadex
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
terminate
_configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode
__stdio_common_vsscanf
_wfopen
fflush
fclose
__stdio_common_vfprintf
fseek
ftell
fread
__stdio_common_vsprintf
__acrt_iob_func
fwrite

api-ms-win-crt-math-l1-1-0

pow
powf
fmodf
ceilf
atan2f
sinf
sqrtf
__setusermatherr
acosf
cosf

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-filesystem-l1-1-0

rename

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
strcmp
_wcsicmp

Sections

.text
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 935KB - Virtual size: 937KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
malaia.cc v7 source/x64/Build/OBS-Studio-30.0-Full-Installer-x64.pdb

Sharing

General

Malware Config

Signatures

Files

857f82086a0c92b4d507bbf307f0f018

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140

d3d9

d3dx9_43

dwmapi

imm32

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-string-l1-1-0

Sections

.text Size: 336KB - Virtual size: 336KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 935KB - Virtual size: 937KB

.pdata Size: 13KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 488B

.reloc Size: 1024B - Virtual size: 632B

857f82086a0c92b4d507bbf307f0f018

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140

d3d9

d3dx9_43

dwmapi

imm32

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-string-l1-1-0

Sections

.text Size: 336KB - Virtual size: 336KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 935KB - Virtual size: 937KB

.pdata Size: 13KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 488B

.reloc Size: 1024B - Virtual size: 632B

.text
Size: 336KB - Virtual size: 336KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 935KB - Virtual size: 937KB

.pdata
Size: 13KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 488B

.reloc
Size: 1024B - Virtual size: 632B

.text
Size: 336KB - Virtual size: 336KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 935KB - Virtual size: 937KB

.pdata
Size: 13KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 488B

.reloc
Size: 1024B - Virtual size: 632B