ToolKit[.]Premium[.]v1[.]11[.]16[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

ToolKit.Premium.v1.11.16.zip
Size

18.2MB
MD5

625cf290d05825b2138d82facca32360
SHA1

bd452c058573ee8a45d9105419d540412e458dcc
SHA256

a9b919c46156302c6d580a884c600be2f0375590c4879996c980c2c597051f95
SHA512

f4026be3c3801c33deb6feda7c1e7549bd35d0b5265c56a416bff12713eb38d09b92b364d5c3489f7e9db9d27457cd68e2d24dcfe79970b88c34254b0fb7cf1a
SSDEEP

393216:rsJsfXG/6yPpOnNYA+4GWmJzcCu9/2Z5teN//VF5sEzGzuWDBfIE:cg2/6auKWiRuOJeJ/35sB9tQE

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ToolKit.Premium.v1.11.16/FreeImage.dll
unpack001/ToolKit.Premium.v1.11.16/OpenTK.dll
unpack001/ToolKit.Premium.v1.11.16/ToolKit.Premium.exe
unpack001/ToolKit.Premium.v1.11.16/cppcsw.dll

Files

ToolKit.Premium.v1.11.16.zip
.zip
ToolKit.Premium.v1.11.16/Data/ArtifactOption.xml
.xml
ToolKit.Premium.v1.11.16/Data/ArtifactSystem.xml
.xml
ToolKit.Premium.v1.11.16/Data/CashShop Files/CashItem_Info.xml
.xml
ToolKit.Premium.v1.11.16/Data/CashShop Files/CashItem_List.xml
.xml
ToolKit.Premium.v1.11.16/Data/CashShop Files/CashItem_Package.xml
.xml
ToolKit.Premium.v1.11.16/Data/CashShop Files/IBSCategory.txt
ToolKit.Premium.v1.11.16/Data/CashShop Files/IBSPackage.txt
ToolKit.Premium.v1.11.16/Data/CashShop Files/IBSProduct.txt
ToolKit.Premium.v1.11.16/Data/CashShop Files/IGC_CashItemInfo.dat
ToolKit.Premium.v1.11.16/Data/CashShop Files/IGC_CashItemList.dat
ToolKit.Premium.v1.11.16/Data/CashShop Files/IGC_CashItemPackages.dat
ToolKit.Premium.v1.11.16/Data/Custom Maps/24.jpg
.jpg
ToolKit.Premium.v1.11.16/Data/Custom Maps/README.txt
ToolKit.Premium.v1.11.16/Data/Error.log
ToolKit.Premium.v1.11.16/Data/EventTypes.xml
.xml
ToolKit.Premium.v1.11.16/Data/ExcellentOptions.xml
.xml
ToolKit.Premium.v1.11.16/Data/Export Templates/IGC_GateSettings_S13+_Template.xml
.xml
ToolKit.Premium.v1.11.16/Data/Export Templates/IGC_GateSettings_S6+_Template.xml
.xml
ToolKit.Premium.v1.11.16/Data/Export Templates/IGC_MoveReq_S13_P2-2+_Template.xml
.xml
ToolKit.Premium.v1.11.16/Data/Export Templates/IGC_MoveReq_Template.xml
.xml
ToolKit.Premium.v1.11.16/Data/Export Templates/IGC_PentagramOption_Template.xml
.xml
ToolKit.Premium.v1.11.16/Data/Export Templates/IGC_SeedSphere_Upgrade_Template.xml
.xml
ToolKit.Premium.v1.11.16/Data/Export Templates/IGC_SkillList_S12+_Template.xml
.xml
ToolKit.Premium.v1.11.16/Data/Export Templates/IGC_SkillList_S13+_Template.xml
.xml
ToolKit.Premium.v1.11.16/Data/Export Templates/IGC_SkillList_S13E1_Template.xml
.xml
ToolKit.Premium.v1.11.16/Data/Export Templates/IGC_SkillList_S13_P2-2+_Template.xml
.xml
ToolKit.Premium.v1.11.16/Data/Export Templates/IGC_SkillList_Template.xml
.xml
ToolKit.Premium.v1.11.16/Data/Export Templates/IGC_SkillList_Template_S15_P1.xml
.xml
ToolKit.Premium.v1.11.16/Data/Export Templates/IGC_SocketItem_Upgrade_Template.xml
.xml
ToolKit.Premium.v1.11.16/Data/Export Templates/PentagramJewelOptionValue_Template.xml
.xml
ToolKit.Premium.v1.11.16/Data/GuardianItemOption.xml
.xml
ToolKit.Premium.v1.11.16/Data/Info.log
ToolKit.Premium.v1.11.16/Data/Information.log
ToolKit.Premium.v1.11.16/Data/ItemGradeOption.xml
.xml
ToolKit.Premium.v1.11.16/Data/ItemList.xml
.xml
ToolKit.Premium.v1.11.16/Data/ItemListExportOptions.xml
.xml
ToolKit.Premium.v1.11.16/Data/ItemListExportOptions_S6.xml
ToolKit.Premium.v1.11.16/Data/ItemListExportOptions_SX3.xml
.xml
ToolKit.Premium.v1.11.16/Data/ItemList_SX.xml
.xml
ToolKit.Premium.v1.11.16/Data/ItemList_s6.xml
ToolKit.Premium.v1.11.16/Data/ItemTRSData.txt
ToolKit.Premium.v1.11.16/Data/Licenses/ZeCoder.key
ToolKit.Premium.v1.11.16/Data/MapList.xml
.xml
ToolKit.Premium.v1.11.16/Data/MasteryGradeItems.xml
ToolKit.Premium.v1.11.16/Data/Monster Files/Monster.txt
ToolKit.Premium.v1.11.16/Data/Monster Files/MonsterList.xml
.xml
ToolKit.Premium.v1.11.16/Data/Monster Files/MonsterSetBase.txt
ToolKit.Premium.v1.11.16/Data/MonsterList.xml
.xml
ToolKit.Premium.v1.11.16/Data/MonsterSpawn.xml
.xml
ToolKit.Premium.v1.11.16/Data/MuunInfo.xml
.xml
ToolKit.Premium.v1.11.16/Data/NPCList.xml
.xml
ToolKit.Premium.v1.11.16/Data/SpecialItemList.dat
ToolKit.Premium.v1.11.16/Data/TabbedFileInfo.json
ToolKit.Premium.v1.11.16/Data/config.ini
ToolKit.Premium.v1.11.16/FreeImage.dll
.dll windows:6 windows x64 arch:x64

ab53cf646a62452fcbbb6ff72dd39df2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

vcomp120

_vcomp_enter_critsect
_vcomp_barrier
_vcomp_for_dynamic_init
_vcomp_for_dynamic_next
_vcomp_for_static_end
_vcomp_leave_critsect
omp_get_thread_num
_vcomp_fork
_vcomp_for_static_simple_init

ws2_32

htons
ntohl
ntohs
htonl

kernel32

RtlVirtualUnwind
SetEndOfFile
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
OutputDebugStringW
GetTimeZoneInformation
CreateFileW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
FlushFileBuffers
LoadLibraryExW
FreeLibrary
GetModuleFileNameW
GetCurrentDirectoryW
GetProcAddress
LoadLibraryA
SetCurrentDirectoryW
IsBadReadPtr
OutputDebugStringA
GetTempFileNameA
GetTempPathA
DeleteFileA
ExitProcess
CreateFileA
GetFileSizeEx
CloseHandle
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
DebugBreak
WideCharToMultiByte
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapFree
HeapAlloc
ReadFile
HeapReAlloc
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FindClose
RtlUnwindEx
AreFileApisANSI
GetCommandLineA
GetCurrentThreadId
GetModuleHandleExW
IsProcessorFeaturePresent
FindFirstFileExW
GetDriveTypeW
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
GetCPInfo
RtlCaptureContext
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetStdHandle
WriteFile
HeapSize
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetConsoleMode
ReadConsoleW
GetConsoleCP
SetFilePointerEx
GetFileType
FindNextFileW
DeleteFileW
MoveFileExW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW

Exports

Exports

FreeImage_AcquireMemory
FreeImage_AdjustBrightness
FreeImage_AdjustColors
FreeImage_AdjustContrast
FreeImage_AdjustCurve
FreeImage_AdjustGamma
FreeImage_Allocate
FreeImage_AllocateEx
FreeImage_AllocateExT
FreeImage_AllocateHeader
FreeImage_AllocateHeaderForBits
FreeImage_AllocateHeaderT
FreeImage_AllocateT
FreeImage_AppendPage
FreeImage_ApplyColorMapping
FreeImage_ApplyPaletteIndexMapping
FreeImage_Clone
FreeImage_CloneMetadata
FreeImage_CloneTag
FreeImage_CloseMemory
FreeImage_CloseMultiBitmap
FreeImage_ColorQuantize
FreeImage_ColorQuantizeEx
FreeImage_Composite
FreeImage_ConvertFromRawBits
FreeImage_ConvertFromRawBitsEx
FreeImage_ConvertLine16To24_555
FreeImage_ConvertLine16To24_565
FreeImage_ConvertLine16To32_555
FreeImage_ConvertLine16To32_565
FreeImage_ConvertLine16To4_555
FreeImage_ConvertLine16To4_565
FreeImage_ConvertLine16To8_555
FreeImage_ConvertLine16To8_565
FreeImage_ConvertLine16_555_To16_565
FreeImage_ConvertLine16_565_To16_555
FreeImage_ConvertLine1To16_555
FreeImage_ConvertLine1To16_565
FreeImage_ConvertLine1To24
FreeImage_ConvertLine1To32
FreeImage_ConvertLine1To4
FreeImage_ConvertLine1To8
FreeImage_ConvertLine24To16_555
FreeImage_ConvertLine24To16_565
FreeImage_ConvertLine24To32
FreeImage_ConvertLine24To4
FreeImage_ConvertLine24To8
FreeImage_ConvertLine32To16_555
FreeImage_ConvertLine32To16_565
FreeImage_ConvertLine32To24
FreeImage_ConvertLine32To4
FreeImage_ConvertLine32To8
FreeImage_ConvertLine4To16_555
FreeImage_ConvertLine4To16_565
FreeImage_ConvertLine4To24
FreeImage_ConvertLine4To32
FreeImage_ConvertLine4To8
FreeImage_ConvertLine8To16_555
FreeImage_ConvertLine8To16_565
FreeImage_ConvertLine8To24
FreeImage_ConvertLine8To32
FreeImage_ConvertLine8To4
FreeImage_ConvertTo16Bits555
FreeImage_ConvertTo16Bits565
FreeImage_ConvertTo24Bits
FreeImage_ConvertTo32Bits
FreeImage_ConvertTo4Bits
FreeImage_ConvertTo8Bits
FreeImage_ConvertToFloat
FreeImage_ConvertToGreyscale
FreeImage_ConvertToRGB16
FreeImage_ConvertToRGBA16
FreeImage_ConvertToRGBAF
FreeImage_ConvertToRGBF
FreeImage_ConvertToRawBits
FreeImage_ConvertToStandardType
FreeImage_ConvertToType
FreeImage_ConvertToUINT16
FreeImage_Copy
FreeImage_CreateICCProfile
FreeImage_CreateTag
FreeImage_CreateView
FreeImage_DeInitialise
FreeImage_DeletePage
FreeImage_DeleteTag
FreeImage_DestroyICCProfile
FreeImage_Dither
FreeImage_EnlargeCanvas
FreeImage_FIFSupportsExportBPP
FreeImage_FIFSupportsExportType
FreeImage_FIFSupportsICCProfiles
FreeImage_FIFSupportsNoPixels
FreeImage_FIFSupportsReading
FreeImage_FIFSupportsWriting
FreeImage_FillBackground
FreeImage_FindCloseMetadata
FreeImage_FindFirstMetadata
FreeImage_FindNextMetadata
FreeImage_FlipHorizontal
FreeImage_FlipVertical
FreeImage_GetAdjustColorsLookupTable
FreeImage_GetBPP
FreeImage_GetBackgroundColor
FreeImage_GetBits
FreeImage_GetBlueMask
FreeImage_GetChannel
FreeImage_GetColorType
FreeImage_GetColorsUsed
FreeImage_GetComplexChannel
FreeImage_GetCopyrightMessage
FreeImage_GetDIBSize
FreeImage_GetDotsPerMeterX
FreeImage_GetDotsPerMeterY
FreeImage_GetFIFCount
FreeImage_GetFIFDescription
FreeImage_GetFIFExtensionList
FreeImage_GetFIFFromFilename
FreeImage_GetFIFFromFilenameU
FreeImage_GetFIFFromFormat
FreeImage_GetFIFFromMime
FreeImage_GetFIFMimeType
FreeImage_GetFIFRegExpr
FreeImage_GetFileType
FreeImage_GetFileTypeFromHandle
FreeImage_GetFileTypeFromMemory
FreeImage_GetFileTypeU
FreeImage_GetFormatFromFIF
FreeImage_GetGreenMask
FreeImage_GetHeight
FreeImage_GetHistogram
FreeImage_GetICCProfile
FreeImage_GetImageType
FreeImage_GetInfo
FreeImage_GetInfoHeader
FreeImage_GetLine
FreeImage_GetLockedPageNumbers
FreeImage_GetMemorySize
FreeImage_GetMetadata
FreeImage_GetMetadataCount
FreeImage_GetPageCount
FreeImage_GetPalette
FreeImage_GetPitch
FreeImage_GetPixelColor
FreeImage_GetPixelIndex
FreeImage_GetRedMask
FreeImage_GetScanLine
FreeImage_GetTagCount
FreeImage_GetTagDescription
FreeImage_GetTagID
FreeImage_GetTagKey
FreeImage_GetTagLength
FreeImage_GetTagType
FreeImage_GetTagValue
FreeImage_GetThumbnail
FreeImage_GetTransparencyCount
FreeImage_GetTransparencyTable
FreeImage_GetTransparentIndex
FreeImage_GetVersion
FreeImage_GetWidth
FreeImage_HasBackgroundColor
FreeImage_HasPixels
FreeImage_HasRGBMasks
FreeImage_Initialise
FreeImage_InsertPage
FreeImage_Invert
FreeImage_IsLittleEndian
FreeImage_IsPluginEnabled
FreeImage_IsTransparent
FreeImage_JPEGCrop
FreeImage_JPEGCropU
FreeImage_JPEGTransform
FreeImage_JPEGTransformCombined
FreeImage_JPEGTransformCombinedFromMemory
FreeImage_JPEGTransformCombinedU
FreeImage_JPEGTransformFromHandle
FreeImage_JPEGTransformU
FreeImage_Load
FreeImage_LoadFromHandle
FreeImage_LoadFromMemory
FreeImage_LoadMultiBitmapFromMemory
FreeImage_LoadU
FreeImage_LockPage
FreeImage_LookupSVGColor
FreeImage_LookupX11Color
FreeImage_MakeThumbnail
FreeImage_MovePage
FreeImage_MultigridPoissonSolver
FreeImage_OpenMemory
FreeImage_OpenMultiBitmap
FreeImage_OpenMultiBitmapFromHandle
FreeImage_OutputMessageProc
FreeImage_Paste
FreeImage_PreMultiplyWithAlpha
FreeImage_ReadMemory
FreeImage_RegisterExternalPlugin
FreeImage_RegisterLocalPlugin
FreeImage_Rescale
FreeImage_RescaleRect
FreeImage_Rotate
FreeImage_RotateClassic
FreeImage_RotateEx
FreeImage_Save
FreeImage_SaveMultiBitmapToHandle
FreeImage_SaveMultiBitmapToMemory
FreeImage_SaveToHandle
FreeImage_SaveToMemory
FreeImage_SaveU
FreeImage_SeekMemory
FreeImage_SetBackgroundColor
FreeImage_SetChannel
FreeImage_SetComplexChannel
FreeImage_SetDotsPerMeterX
FreeImage_SetDotsPerMeterY
FreeImage_SetMetadata
FreeImage_SetMetadataKeyValue
FreeImage_SetOutputMessage
FreeImage_SetOutputMessageStdCall
FreeImage_SetPixelColor
FreeImage_SetPixelIndex
FreeImage_SetPluginEnabled
FreeImage_SetTagCount
FreeImage_SetTagDescription
FreeImage_SetTagID
FreeImage_SetTagKey
FreeImage_SetTagLength
FreeImage_SetTagType
FreeImage_SetTagValue
FreeImage_SetThumbnail
FreeImage_SetTransparencyTable
FreeImage_SetTransparent
FreeImage_SetTransparentIndex
FreeImage_SwapColors
FreeImage_SwapPaletteIndices
FreeImage_TagToString
FreeImage_TellMemory
FreeImage_Threshold
FreeImage_TmoDrago03
FreeImage_TmoFattal02
FreeImage_TmoReinhard05
FreeImage_TmoReinhard05Ex
FreeImage_ToneMapping
FreeImage_Unload
FreeImage_UnlockPage
FreeImage_WriteMemory
FreeImage_ZLibCRC32
FreeImage_ZLibCompress
FreeImage_ZLibGUnzip
FreeImage_ZLibGZip
FreeImage_ZLibUncompress

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ToolKit.Premium.v1.11.16/OpenTK.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

I:\work\github\opentk\src\OpenTK\bin\Release\OpenTK.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ToolKit.Premium.v1.11.16/ToolKit.Premium.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 8.9MB - Virtual size: 18.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 72KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.winlice
Size: - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ToolKit.Premium.v1.11.16/cppcsw.dll
.dll windows:6 windows x64 arch:x64

e113ef1af539dafa636ea367d5d6e632

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Visual Studio TFS\Source\Workspaces\RabanSoft\CryptoPPWrapper\Output\Release\64\cppcsw.pdb

Imports

kernel32

GetThreadTimes
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentThread
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
LCMapStringW
GetStringTypeW
GetCPInfo
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
IsDebuggerPresent
GetStartupInfoW
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwindEx
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
GetModuleFileNameA
GetModuleHandleExW
GetStdHandle
GetFileType
WriteConsoleW
HeapAlloc
HeapSize
HeapValidate
GetSystemInfo
ExitProcess
WriteFile
OutputDebugStringA
OutputDebugStringW
CreateThread
HeapReAlloc
HeapQueryInformation
HeapFree
GetACP
GetProcessHeap
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineA
GetCommandLineW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
CreateFileW
GetLastError

advapi32

SystemFunction036
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA

Exports

Exports

CryptBlock
GetCryptorBlockSize
GetCryptorDefaultKeyLength

Sections

.text
Size: 1010KB - Virtual size: 1009KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab53cf646a62452fcbbb6ff72dd39df2

Headers

DLL Characteristics

File Characteristics

Imports

vcomp120

ws2_32

kernel32

Exports

Exports

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 1.7MB - Virtual size: 1.7MB

.data Size: 1.6MB - Virtual size: 1.6MB

.pdata Size: 136KB - Virtual size: 135KB

_RDATA Size: 34KB - Virtual size: 34KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 15KB - Virtual size: 15KB

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 5.5MB - Virtual size: 5.5MB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 12B

Headers

DLL Characteristics

File Characteristics

Sections

Size: 8.9MB - Virtual size: 18.6MB

Size: 72KB - Virtual size: 365KB

.idata Size: 512B - Virtual size: 8KB

.rsrc Size: 365KB - Virtual size: 365KB

.winlice Size: - Virtual size: 8.4MB

.boot Size: 4.9MB - Virtual size: 4.9MB

e113ef1af539dafa636ea367d5d6e632

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 1010KB - Virtual size: 1009KB

.rdata Size: 332KB - Virtual size: 332KB

.data Size: 27KB - Virtual size: 44KB

.pdata Size: 52KB - Virtual size: 52KB

.gfids Size: 1024B - Virtual size: 532B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 1.6MB - Virtual size: 1.6MB

.pdata
Size: 136KB - Virtual size: 135KB

_RDATA
Size: 34KB - Virtual size: 34KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 15KB - Virtual size: 15KB

.text
Size: 5.5MB - Virtual size: 5.5MB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 12B

.idata
Size: 512B - Virtual size: 8KB

.rsrc
Size: 365KB - Virtual size: 365KB

.winlice
Size: - Virtual size: 8.4MB

.boot
Size: 4.9MB - Virtual size: 4.9MB

.text
Size: 1010KB - Virtual size: 1009KB

.rdata
Size: 332KB - Virtual size: 332KB

.data
Size: 27KB - Virtual size: 44KB

.pdata
Size: 52KB - Virtual size: 52KB

.gfids
Size: 1024B - Virtual size: 532B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 7KB - Virtual size: 7KB