Wwise-Unpacker-1[.]0[.]3[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Wwise-Unpacker-1.0.3.zip
Size

19.6MB
MD5

a0f6c604a2e155c9d018ed97e3c3e0eb
SHA1

dd4884e91ad34875d68cf9892dcbbe504ccc9529
SHA256

94fd6066083bb74ef63c40dfa5e98a0c2257086a55fe59b60aaf14de34b161bb
SHA512

cb9eec1de52cf2214462e01a5f2f34bcbe9def9a7207d1afc453b6453b8b0622f01211650339f5ca242c36bc14745ceeee7d5cbf3bb792bbd1a66df5fc6eebc2
SSDEEP

393216:6FosI9jcj+pwvhaB1yq3rFtjPvoxn9tsUIfG06yrazk6HuU5ejF+ID:TsajcSPB1yCZ5voxn9tsUGDrazvHuUc3

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Wwise-Unpacker-1.0.3/Tools/revorb.exe	upx

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Wwise-Unpacker-1.0.3/Tools/bnkextr.exe
unpack001/Wwise-Unpacker-1.0.3/Tools/ffmpeg.exe
unpack001/Wwise-Unpacker-1.0.3/Tools/quickbms.exe
unpack001/Wwise-Unpacker-1.0.3/Tools/revorb.exe
unpack002/out.upx
unpack001/Wwise-Unpacker-1.0.3/Tools/ww2ogg.exe

Files

Wwise-Unpacker-1.0.3.zip
.zip
Wwise-Unpacker-1.0.3/.gitattributes
Wwise-Unpacker-1.0.3/.gitignore
Wwise-Unpacker-1.0.3/Game Files/.keep
Wwise-Unpacker-1.0.3/MP3/.keep
Wwise-Unpacker-1.0.3/OGG/.keep
Wwise-Unpacker-1.0.3/README.md
Wwise-Unpacker-1.0.3/Tools/Decoding/.keep
Wwise-Unpacker-1.0.3/Tools/LICENSE.txt
Wwise-Unpacker-1.0.3/Tools/bnkextr.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 57B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Wwise-Unpacker-1.0.3/Tools/ffmpeg.exe
.exe windows:4 windows x64 arch:x64

f37590e34919639c4085756922cc122c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW

gdi32

BitBlt
ChoosePixelFormat
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreateFontW
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
DescribePixelFormat
ExtTextOutW
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetObjectA
GetPixelFormat
GetStockObject
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextMetricsW
Rectangle
SelectObject
SetBkMode
SetDeviceGammaRamp
SetPixelFormat
SetTextColor
SwapBuffers

imm32

ImmAssociateContext
ImmGetCandidateListW
ImmGetCompositionStringW
ImmGetContext
ImmGetIMEFileNameA
ImmNotifyIME
ImmReleaseContext
ImmSetCompositionStringW
ImmSetCompositionWindow

kernel32

CloseHandle
CompareStringA
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileMappingA
CreateFileW
CreateMutexA
CreateSemaphoreA
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileW
FindNextFileW
FormatMessageW
FreeLibrary
GetACP
GetCommandLineW
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesW
GetFileSizeEx
GetFullPathNameA
GetLastError
GetLongPathNameA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNumaHighestNodeNumber
GetNumaNodeProcessorMaskEx
GetProcAddress
GetProcessAffinityMask
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTimeAsFileTime
GetTempPathA
GetThreadPriority
GetTickCount
GetTimeZoneInformation
GetVersionExA
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAlloc
GlobalLock
GlobalMemoryStatusEx
GlobalUnlock
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MapViewOfFile
MoveFileExA
MoveFileExW
MulDiv
MultiByteToWideChar
OutputDebugStringW
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseMutex
ReleaseSemaphore
ResetEvent
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleCtrlHandler
SetConsoleTextAttribute
SetDllDirectoryA
SetDllDirectoryW
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetFilePointerEx
SetLastError
SetThreadAffinityMask
SetThreadGroupAffinity
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableCS
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
__C_specific_handler
lstrcatW
lstrlenW

msvcrt

___lc_codepage_func
__dllonexit
__doserrno
__getmainargs
__initenv
__iob_func
__lconv_init
__mb_cur_max
__pioinfo
__set_app_type
__setusermatherr
_access
_acmdln
_access
_aligned_free
_aligned_malloc
_aligned_realloc
_amsg_exit
_beginthread
_beginthreadex
_cexit
_chmod
_close
_endthread
_endthreadex
_errno
_exit
_getch
_fdopen
_filelengthi64
_fileno
_findclose
_fileno
_findfirst64
_findnext64
_fmode
_fstat64
_ftime64
_fullpath
_get_osfhandle
_getcwd
_gmtime64
_hypot
_i64toa
_initterm
_isatty
_itoa
_kbhit
_localtime64
_lock
_locking
_lseeki64
_ltoa
_mbsrchr
_mkdir
_mktime64
_onexit
_open
_rmdir
_read
_rmdir
_setjmp
_setmode
_snwprintf
_sopen
_stat64
_strdup
_strdup
_stricmp
_strlwr
_strnicmp
_strrev
_strupr
_time64
_ui64toa
_ultoa
_unlink
_unlink
_unlock
_vsnprintf
_waccess
_wcsdup
_wfindfirst64
_wfindnext64
_wfopen
_wfopen_s
_time64
_wmkdir
_wremove
_wrename
_write
_write
_wrmdir
_wsopen
_wstat64
_wunlink
abort
acos
asin
atan
atof
atoi
bsearch
calloc
clock
cosh
div
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fgetws
fopen
fprintf
fputc
fputs
fread
free
frexp
fscanf
fseek
fsetpos
ftell
fwprintf
fwrite
getc
getchar
getenv
isalpha
islower
isspace
isupper
isxdigit
localeconv
log10
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
perror
printf
putchar
puts
qsort
raise
rand
realloc
rename
rewind
setlocale
setvbuf
signal
sinh
sprintf
srand
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtok
strtok_s
strtol
strtoul
swscanf_s
tan
tanh
tolower
toupper
ungetc
vfprintf
wcscat
wcschr
wcscmp
wcscpy
wcscspn
wcslen
wcsrchr
wcsstr

ole32

CoCreateInstance
CoGetMalloc
CoInitialize
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateBindCtx
OleLoadFromStream
OleSaveToStream
PropVariantClear

oleaut32

OleCreatePropertyFrame
SysFreeString

psapi

GetProcessMemoryInfo

secur32

AcquireCredentialsHandleA
ApplyControlToken
DecryptMessage
DeleteSecurityContext
EncryptMessage
FreeContextBuffer
FreeCredentialsHandle
InitializeSecurityContextA
QueryContextAttributesA

shell32

CommandLineToArgvW
DragAcceptFiles
DragFinish
DragQueryFileW
ExtractIconExW
SHGetFolderPathW

shlwapi

SHCreateStreamOnFileA

user32

AdjustWindowRectEx
BeginPaint
CallWindowProcW
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CloseClipboard
CopyIcon
CreateIconFromResource
CreateIconIndirect
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCursor
DestroyIcon
DestroyWindow
DialogBoxIndirectParamW
DispatchMessageA
DispatchMessageW
DrawIcon
DrawTextW
EmptyClipboard
EndDialog
EndPaint
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsW
FindWindowA
FrameRect
GetAsyncKeyState
GetClassInfoExW
GetClientRect
GetClipboardData
GetClipboardSequenceNumber
GetCursorInfo
GetCursorPos
GetDC
GetDesktopWindow
GetDoubleClickTime
GetFocus
GetIconInfo
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetMessageExtraInfo
GetMessageW
GetMonitorInfoW
GetParent
GetPropW
GetRawInputData
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetSystemMetrics
GetUpdateRect
GetWindowLongPtrA
GetWindowLongPtrW
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InvalidateRect
IsClipboardFormatAvailable
IsIconic
IsRectEmpty
KillTimer
LoadCursorA
LoadCursorW
LoadIconW
MapVirtualKeyW
MessageBoxW
OpenClipboard
PeekMessageA
PeekMessageW
PostThreadMessageW
RegisterClassExW
RegisterClassW
RegisterDeviceNotificationW
RegisterRawInputDevices
ReleaseDC
RemovePropW
ScreenToClient
SendMessageA
SendMessageW
SetClipboardData
SetCursor
SetCursorPos
SetForegroundWindow
SetLayeredWindowAttributes
SetPropW
SetTimer
SetWindowLongPtrA
SetWindowLongPtrW
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
ToUnicode
TrackMouseEvent
TranslateMessage
UnregisterClassW
UnregisterDeviceNotification
ValidateRect
WindowFromPoint

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime
waveInAddBuffer
waveInClose
waveInGetDevCapsW
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsW
waveOutGetErrorTextW
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite

ws2_32

WSACleanup
WSAGetLastError
WSASetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyaddr
gethostbyname
gethostname
getnameinfo
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Exports

Exports

ABR_iteration_loop
ALL_POWERSCHEMES_GUID
AMPROPSETID_Pin
AM_INTERFACESETID_Standard
AM_KSCATEGORY_AUDIO
AM_KSCATEGORY_CAPTURE
AM_KSCATEGORY_CROSSBAR
AM_KSCATEGORY_DATACOMPRESSOR
AM_KSCATEGORY_RENDER
AM_KSCATEGORY_SPLITTER
AM_KSCATEGORY_TVAUDIO
AM_KSCATEGORY_TVTUNER
AM_KSCATEGORY_VBICODEC
AM_KSCATEGORY_VIDEO
AM_KSPROPSETID_AC3
AM_KSPROPSETID_CopyProt
AM_KSPROPSETID_DVD_RateChange
AM_KSPROPSETID_DvdKaraoke
AM_KSPROPSETID_DvdSubPic
AM_KSPROPSETID_FrameStep
AM_KSPROPSETID_MPEG4_MediaType_Attributes
AM_KSPROPSETID_TSRateChange
APIAudioFunc
APIFunc
ATHformula
AddVbrFrame
AnalyzeSamples
BZ2_blockSort
BZ2_bsInitWrite
BZ2_bzBuffToBuffCompress
BZ2_bzBuffToBuffDecompress
BZ2_bzCompress
BZ2_bzCompressEnd
BZ2_bzCompressInit
BZ2_bzDecompress
BZ2_bzDecompressEnd
BZ2_bzDecompressInit
BZ2_bzRead
BZ2_bzReadClose
BZ2_bzReadGetUnused
BZ2_bzReadOpen
BZ2_bzWrite
BZ2_bzWriteClose
BZ2_bzWriteClose64
BZ2_bzWriteOpen
BZ2_bz__AssertH__fail
BZ2_bzclose
BZ2_bzdopen
BZ2_bzerror
BZ2_bzflush
BZ2_bzlibVersion
BZ2_bzopen
BZ2_bzread
BZ2_bzwrite
BZ2_compressBlock
BZ2_crc32Table
BZ2_decompress
BZ2_hbAssignCodes
BZ2_hbCreateDecodeTables
BZ2_hbMakeCodeLengths
BZ2_indexIntoF
BZ2_rNums
BitrateIndex
CBR_iteration_loop
CLSID_ACMWrapper
CLSID_AMAudioData
CLSID_AMAudioStream
CLSID_AMDirectDrawStream
CLSID_AMMediaTypeStream
CLSID_AMMultiMediaStream
CLSID_AMTimeline
CLSID_AMTimelineComp
CLSID_AMTimelineEffect
CLSID_AMTimelineGroup
CLSID_AMTimelineObj
CLSID_AMTimelineSrc
CLSID_AMTimelineTrack
CLSID_AMTimelineTrans
CLSID_AMovie
CLSID_ATSCChannelTuneRequest
CLSID_ATSCComponentType
CLSID_ATSCLocator
CLSID_ATSCNetworkPropertyPage
CLSID_ATSCNetworkProvider
CLSID_ATSCTuningSpace
CLSID_AVICo
CLSID_AVIDec
CLSID_AVIDoc
CLSID_AVIDraw
CLSID_AVIMIDIRender
CLSID_AccessibilityDockingService
CLSID_ActiveMovieCategories
CLSID_AllocPresenter
CLSID_AllocPresenterDDXclMode
CLSID_AlphabeticalCategorizer
CLSID_AnalogRadioTuningSpace
CLSID_AnalogTVTuningSpace
CLSID_AnalogVideoDecoderPropertyPage
CLSID_AppShellVerbHandler
CLSID_AppStartupLink
CLSID_AppVisibility
CLSID_ApplicationActivationManager
CLSID_ApplicationAssociationRegistration
CLSID_ApplicationAssociationRegistrationUI
CLSID_ApplicationDesignModeSettings
CLSID_ApplicationDestinations
CLSID_ApplicationDocumentLists
CLSID_AsyncReader
CLSID_AttachmentServices
CLSID_AudMixer
CLSID_AudioCompressorCategory
CLSID_AudioInputDeviceCategory
CLSID_AudioInputMixerProperties
CLSID_AudioProperties
CLSID_AudioRecord
CLSID_AudioRender
CLSID_AudioRendererAdvancedProperties
CLSID_AudioRendererCategory
CLSID_AuxInTuningSpace
CLSID_AviDest
CLSID_AviMuxProptyPage
CLSID_AviMuxProptyPage1
CLSID_AviReader
CLSID_AviSplitter
CLSID_BroadcastEventService
CLSID_CADefaultDlg
CLSID_CADenials
CLSID_CAManager
CLSID_CAManagerProxy
CLSID_CAOffer
CLSID_CAResDenialTree
CLSID_CAcmCoClassManager
CLSID_CDBurn
CLSID_CDeviceMoniker
CLSID_CIcmCoClassManager
CLSID_CMidiOutClassManager
CLSID_CMpegAudioCodec
CLSID_CMpegVideoCodec
CLSID_CQzFilterClassManager
CLSID_CVidCapClassManager
CLSID_CWaveOutClassManager
CLSID_CWaveinClassManager
CLSID_CameraControlPropertyPage
CLSID_CaptureGraphBuilder
CLSID_CaptureGraphBuilder2
CLSID_CaptureProperties
CLSID_ChannelTuneRequest
CLSID_ColorSource
CLSID_Colour
CLSID_Component
CLSID_ComponentType
CLSID_ComponentTypes
CLSID_Components
CLSID_CreatePropBagOnRegKey
CLSID_CrossbarFilterPropertyPage
CLSID_DShowTVEFilter
CLSID_DSoundRender
CLSID_DTFilter
CLSID_DVBCLocator
CLSID_DVBCNetworkProvider
CLSID_DVBSLocator
CLSID_DVBSNetworkProvider
CLSID_DVBSTuningSpace
CLSID_DVBTLocator
CLSID_DVBTNetworkProvider
CLSID_DVBTuneRequest
CLSID_DVBTuningSpace
CLSID_DVDHWDecodersCategory
CLSID_DVDNavigator
CLSID_DVDState
CLSID_DVDecPropertiesPage
CLSID_DVEncPropertiesPage
CLSID_DVMux
CLSID_DVMuxPropertyPage
CLSID_DVSplitter
CLSID_DVVideoCodec
CLSID_DVVideoEnc
CLSID_DefFolderMenu
CLSID_DesktopGadget
CLSID_DesktopWallpaper
CLSID_DestinationList
CLSID_DeviceControlCategory
CLSID_DirectDraw
CLSID_DirectDraw7
CLSID_DirectDrawClipper
CLSID_DirectDrawProperties
CLSID_DirectInput
CLSID_DirectInput8
CLSID_DirectInputDevice
CLSID_DirectInputDevice8
CLSID_DirectSound
CLSID_DirectSound8
CLSID_DirectSoundCapture
CLSID_DirectSoundCapture8
CLSID_DirectSoundFullDuplex
CLSID_Dither
CLSID_DocPropShellExtension
CLSID_DriveSizeCategorizer
CLSID_DriveTypeCategorizer
CLSID_DvdGraphBuilder
CLSID_DxtAlphaSetter
CLSID_DxtCompositor
CLSID_DxtJpeg
CLSID_DxtKey
CLSID_ETFilter
CLSID_EnumerableObjectCollection
CLSID_EvalRat
CLSID_ExecuteFolder
CLSID_ExecuteUnknown
CLSID_ExplorerBrowser
CLSID_FGControl
CLSID_FSCopyHandler
CLSID_FileOpenDialog
CLSID_FileOperation
CLSID_FileSaveDialog
CLSID_FileSource
CLSID_FileWriter
CLSID_FilgraphManager
CLSID_FilterGraph
CLSID_FilterGraphNoThread
CLSID_FilterMapper
CLSID_FilterMapper2
CLSID_FolderViewHost
CLSID_FrameworkInputPane
CLSID_FreeSpaceCategorizer
CLSID_HomeGroup
CLSID_ICodecAPIProxy
CLSID_IENamespaceTreeControl
CLSID_IVideoEncoderCodecAPIProxy
CLSID_IVideoEncoderProxy
CLSID_ImageProperties
CLSID_ImageRecompress
CLSID_InMemoryPropertyStore
CLSID_InfTee
CLSID_InternetPrintOrdering
CLSID_KnownFolderManager
CLSID_LanguageComponentType
CLSID_LegacyAmFilterCategory
CLSID_Line21Decoder
CLSID_Line21Decoder2
CLSID_Locator
CLSID_MJPGEnc
CLSID_MMSPLITTER
CLSID_MOVReader
CLSID_MPEG1Doc
CLSID_MPEG1PacketPlayer
CLSID_MPEG1Splitter
CLSID_MPEG2Component
CLSID_MPEG2ComponentType
CLSID_MPEG2Demultiplexer
CLSID_MPEG2TuneRequest
CLSID_MPEG2TuneRequestFactory
CLSID_MSEventBinder
CLSID_MSVidAnalogCaptureToDataServices
CLSID_MSVidAnalogCaptureToOverlayMixer
CLSID_MSVidAnalogCaptureToStreamBufferSink
CLSID_MSVidAnalogCaptureToXDS
CLSID_MSVidAnalogTVToEncoder
CLSID_MSVidAnalogTunerDevice
CLSID_MSVidAudioRenderer
CLSID_MSVidAudioRendererDevices
CLSID_MSVidBDATunerDevice
CLSID_MSVidCAGSeg
CLSID_MSVidClosedCaptioning
CLSID_MSVidCtl
CLSID_MSVidDataServices
CLSID_MSVidDataServicesToStreamBufferSink
CLSID_MSVidDataServicesToXDS
CLSID_MSVidDevice
CLSID_MSVidDigitalCaptureToStreamBufferSink
CLSID_MSVidEncoder
CLSID_MSVidEncoderToStreamBufferSink
CLSID_MSVidFeature
CLSID_MSVidFeatures
CLSID_MSVidFilePlaybackDevice
CLSID_MSVidFilePlaybackToAudioRenderer
CLSID_MSVidFilePlaybackToVideoRenderer
CLSID_MSVidGenericComposite
CLSID_MSVidInputDevice
CLSID_MSVidInputDevices
CLSID_MSVidMPEG2DecoderToClosedCaptioning
CLSID_MSVidOutput
CLSID_MSVidOutputDevices
CLSID_MSVidRect
CLSID_MSVidRenderFactory
CLSID_MSVidSBESourceToCC
CLSID_MSVidStreamBufferRecordingControl
CLSID_MSVidStreamBufferSink
CLSID_MSVidStreamBufferSource
CLSID_MSVidStreamBufferSourceToVideoRenderer
CLSID_MSVidTVEGSeg
CLSID_MSVidVideoInputDevice
CLSID_MSVidVideoPlaybackDevice
CLSID_MSVidVideoRenderer
CLSID_MSVidVideoRendererDevices
CLSID_MSVidWebDVD
CLSID_MSVidWebDVDAdm
CLSID_MSVidWebDVDToAudioRenderer
CLSID_MSVidWebDVDToVideoRenderer
CLSID_MSVidXDS
CLSID_MailRecipient
CLSID_MediaDet
CLSID_MediaEncoderCategory
CLSID_MediaLocator
CLSID_MediaMultiplexerCategory
CLSID_MediaPropertyBag
CLSID_MemoryAllocator
CLSID_MergedCategorizer
CLSID_MidiRendererCategory
CLSID_MjpegDec
CLSID_ModexProperties
CLSID_ModexRenderer
CLSID_Mpeg2VideoStreamAnalyzer
CLSID_NamespaceTreeControl
CLSID_NamespaceWalker
CLSID_NetworkConnections
CLSID_NetworkExplorerFolder
CLSID_NetworkPlaces
CLSID_NullRenderer
CLSID_OpenControlPanel
CLSID_OverlayMixer
CLSID_PackageDebugSettings
CLSID_PerformanceProperties
CLSID_PersistMonikerPID
CLSID_PlaybackManager
CLSID_PreviousVersions
CLSID_PropertiesUI
CLSID_PropertySetter
CLSID_PropertySystem
CLSID_ProtoFilterGraph
CLSID_PublishDropTarget
CLSID_PublishingWizard
CLSID_QTDec
CLSID_QualityProperties
CLSID_QueryCancelAutoPlay
CLSID_QuickTimeParser
CLSID_RenderEngine
CLSID_SampleGrabber
CLSID_ScheduledTasks
CLSID_SearchFolderItemFactory
CLSID_SeekingPassThru
CLSID_SharingConfigurationManager
CLSID_ShellDesktop
CLSID_ShellFSFolder
CLSID_ShellItem
CLSID_ShellLibrary
CLSID_ShellLink
CLSID_SizeCategorizer
CLSID_SmartRenderEngine
CLSID_SmartTee
CLSID_StartMenuPin
CLSID_StreamBufferComposeRecording
CLSID_StreamBufferConfig
CLSID_StreamBufferRecordingAttributes
CLSID_StreamBufferSink
CLSID_StreamBufferSource
CLSID_SystemClock
CLSID_SystemDeviceEnum
CLSID_SystemTuningSpaces
CLSID_TIFLoad
CLSID_TVAudioFilterPropertyPage
CLSID_TVEAttrMap
CLSID_TVEAttrTimeQ
CLSID_TVECBAnnc
CLSID_TVECBDummy
CLSID_TVECBFile
CLSID_TVECBTrig
CLSID_TVEEnhancement
CLSID_TVEEnhancements
CLSID_TVEFeature
CLSID_TVEFile
CLSID_TVEFilter
CLSID_TVEFilterCCProperties
CLSID_TVEFilterStatsProperties
CLSID_TVEFilterTuneProperties
CLSID_TVEMCast
CLSID_TVEMCastCallback
CLSID_TVEMCastManager
CLSID_TVEMCasts
CLSID_TVENavAid
CLSID_TVEService
CLSID_TVEServices
CLSID_TVESupervisor
CLSID_TVETrack
CLSID_TVETrigger
CLSID_TVETriggerCtrl
CLSID_TVEVariation
CLSID_TVTunerFilterPropertyPage
CLSID_TaskbarList
CLSID_TextRender
CLSID_TimeCategorizer
CLSID_TransmitCategory
CLSID_TrayBandSiteService
CLSID_TrayDeskBand
CLSID_TuneRequest
CLSID_TuningSpace
CLSID_URLReader
CLSID_UserNotification
CLSID_VBISurfaces
CLSID_VPObject
CLSID_VPVBIObject
CLSID_VfwCapture
CLSID_VideoCompressorCategory
CLSID_VideoInputDeviceCategory
CLSID_VideoMixingRenderer
CLSID_VideoMixingRenderer9
CLSID_VideoPortManager
CLSID_VideoProcAmpPropertyPage
CLSID_VideoRenderer
CLSID_VideoRendererDefault
CLSID_VideoStreamConfigPropertyPage
CLSID_WMAsfReader
CLSID_WMAsfWriter
CLSID_WSTDecoder
CLSID_WebWizardHost
CLSID_WstDecoderPropertyPage
CLSID_XDSCodec
CLSID_XDSToRat
CLSID_Xml2Dex
CODECAPI_ALLSETTINGS
CODECAPI_AUDIO_ENCODER
CODECAPI_CHANGELISTS
CODECAPI_CURRENTCHANGELIST
CODECAPI_SETALLDEFAULTS
CODECAPI_SUPPORTSEVENTS
CODECAPI_VIDEO_ENCODER
CRC_writeheader
D3D11_DXGIFormatToSDLPixelFormat
D3D11_RenderDriver
D3D11_Trim
D3D_LoadDLL
D3D_RenderDriver
DIID_IDTFilterEvents
DIID_IETFilterEvents
DIID_IXDSCodecEvents
DIID__ICAComponentsEvents
DIID__ICADefaultDlgEvents
DIID__ICADenialsEvents
DIID__ICAManagerEvents
DIID__ICAOffersEvents
DIID__ICAPoliciesEvents
DIID__ICARequestEvents
DIID__ICAResDenialTreeEvents
DIID__ICATollsEvents
DIID__IMSVidCtlEvents
DIID__ITVEEvents
DIID__ITVETriggerCtrlEvents
DISKAUDIO_bootstrap
DSDEVID_DefaultCapture
DSDEVID_DefaultPlayback
DSDEVID_DefaultVoiceCapture
DSDEVID_DefaultVoicePlayback
DSOUND_bootstrap
DUMMYAUDIO_bootstrap
DUMMY_PumpEvents
DUMMY_bootstrap
DXVA2_ModeH264_A
DXVA2_ModeH264_B
DXVA2_ModeH264_C
DXVA2_ModeH264_D
DXVA2_ModeH264_E
DXVA2_ModeH264_F
DXVA2_ModeMPEG2_IDCT
DXVA2_ModeMPEG2_MoComp
DXVA2_ModeMPEG2_VLD
DXVA2_ModeVC1_A
DXVA2_ModeVC1_B
DXVA2_ModeVC1_C
DXVA2_ModeVC1_D
DXVA2_ModeWMV8_A
DXVA2_ModeWMV8_B
DXVA2_ModeWMV9_A
DXVA2_ModeWMV9_B
DXVA2_ModeWMV9_C
DXVA_NoEncrypt
ENCAPIPARAM_BITRATE
ENCAPIPARAM_BITRATE_MODE
ENCAPIPARAM_PEAK_BITRATE
ExitMP3
FORMAT_AnalogVideo
FORMAT_DVD_LPCMAudio
FORMAT_DolbyAC3
FORMAT_DvInfo
FORMAT_MPEG2Audio
FORMAT_MPEG2Video
FORMAT_MPEG2_VIDEO
FORMAT_MPEGStreams
FORMAT_MPEGVideo
FORMAT_None
FORMAT_VIDEOINFO2
FORMAT_VideoInfo
FORMAT_VideoInfo2
FORMAT_WaveFormatEx
FT_Activate_Size
FT_Add_Default_Modules
FT_Add_Module
FT_Angle_Diff
FT_Atan2
FT_Attach_File
FT_Attach_Stream

Sections

.text
Size: 27.0MB - Virtual size: 27.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 416KB - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 518KB - Virtual size: 518KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 9.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 910KB - Virtual size: 910KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Wwise-Unpacker-1.0.3/Tools/packed_codebooks_aoTuV_603.bin
Wwise-Unpacker-1.0.3/Tools/quickbms.exe
.exe windows:4 windows x86 arch:x86

a54287103896ce1ac5bcdc730fe93a0c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

AdjustTokenPrivileges
CryptAcquireContextA
CryptCreateHash
CryptDecrypt
CryptDeriveKey
CryptDestroyHash
CryptEncrypt
CryptGenRandom
CryptGetHashParam
CryptHashData
CryptReleaseContext
DeregisterEventSource
LookupPrivilegeValueA
OpenProcessToken
RegisterEventSourceA
ReportEventA

comdlg32

GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
GetSaveFileNameW

crypt32

CryptProtectData
CryptUnprotectData

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetBitmapBits
GetDIBits
GetDeviceCaps
GetObjectA
GetStockObject
SelectObject
SetBitmapBits

kernel32

CloseHandle
ConnectNamedPipe
ContinueDebugEvent
CreateEventA
CreateNamedPipeA
CreatePipe
CreateProcessA
CreateSemaphoreA
CreateSemaphoreW
CreateThread
CreateToolhelp32Snapshot
DebugActiveProcess
DeleteCriticalSection
DisconnectNamedPipe
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindFirstFileExA
FindNextFileA
FlushFileBuffers
FlushInstructionCache
FormatMessageA
FreeLibrary
GetCommandLineA
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeThread
GetFileSize
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTime
GetTempPathA
GetThreadContext
GetThreadLocale
GetTickCount
GetVersion
GetVersionExA
GlobalMemoryStatus
Heap32First
Heap32ListFirst
Heap32ListNext
Heap32Next
HeapAlloc
HeapFree
HeapValidate
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadReadPtr
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LocalFree
Module32First
Module32Next
MultiByteToWideChar
OpenProcess
OutputDebugStringA
Process32First
Process32Next
QueryPerformanceCounter
ReadConsoleInputA
ReadFile
ReadProcessMemory
ReleaseSemaphore
ResetEvent
SetConsoleCP
SetConsoleOutputCP
SetConsoleTextAttribute
SetConsoleTitleA
SetEvent
SetFilePointer
SetLastError
SetThreadContext
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitForDebugEvent
WaitForSingleObject
WideCharToMultiByte
WriteFile
WriteProcessMemory
lstrlenA

msvcrt

_chdir
_chmod
_chsize
_close
_fdopen
_getcwd
_hypot
_mkdir
_nextafter
_open
_read
_setmode
_spawnl
_spawnv
_stat
_strdup
_stricmp
_stricoll
_strnicmp
_unlink
_utime
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_beginthreadex
_cexit
_errno
_exit
_expand
_filbuf
_filelengthi64
_flsbuf
_fstati64
_fullpath
_get_osfhandle
_getch
_iob
_isctype
_msize
_onexit
_osver
_pctype
_setjmp
_setmode
_stat
_stati64
_stricmp
_strnicmp
_vsnprintf
_wchdir
_wcsnicmp
_wfopen
_wgetcwd
abort
acos
asin
atan
atan2
atexit
atoi
bsearch
calloc
ceil
clock
cos
cosh
exit
exp
fclose
fflush
fgetc
fgetpos
fgets
floor
fmod
fopen
fprintf
fputc
fputs
fread
free
frexp
fseek
fsetpos
ftell
fwrite
getenv
gmtime
iswctype
ldexp
localeconv
localtime
log
log10
longjmp
malloc
mbstowcs
mbtowc
memchr
memcmp
memcpy
memmove
memset
mktime
modf
perror
pow
printf
putchar
puts
qsort
raise
rand
realloc
remove
rewind
setbuf
setlocale
setvbuf
signal
sin
sinh
sprintf
sqrt
srand
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strerror
strftime
strlen
strncat
strncmp
strncpy
strrchr
strstr
strtod
strtol
strtoul
strxfrm
swprintf
system
tan
tanh
time
tmpfile
tolower
toupper
towlower
towupper
ungetc
vfprintf
vprintf
wcscoll
wcsftime
wcslen
wcsstr
wcstombs
wcsxfrm
wctomb

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
EndPaint
EnumWindows
FindWindowA
GetClassNameA
GetClientRect
GetDC
GetForegroundWindow
GetMessageA
GetProcessWindowStation
GetUserObjectInformationW
GetWindowLongA
GetWindowThreadProcessId
InvalidateRect
LoadCursorA
LoadIconA
MessageBoxA
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
ReleaseDC
ShowWindow
TranslateMessage
UpdateWindow

winmm

waveInAddBuffer
waveInClose
waveInGetNumDevs
waveInGetPosition
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
waveOutClose
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite

ws2_32

WSAGetLastError
WSASetLastError
WSAStartup
accept
bind
closesocket
connect
gethostbyname
htonl
htons
inet_addr
inet_ntoa
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Exports

Exports

arcfour_LTX__is_block_algorithm
arcfour_LTX__mcrypt_algorithm_version
arcfour_LTX__mcrypt_decrypt
arcfour_LTX__mcrypt_encrypt
arcfour_LTX__mcrypt_get_algo_iv_size
arcfour_LTX__mcrypt_get_algorithms_name
arcfour_LTX__mcrypt_get_block_size
arcfour_LTX__mcrypt_get_key_size
arcfour_LTX__mcrypt_get_size
arcfour_LTX__mcrypt_get_supported_key_sizes
arcfour_LTX__mcrypt_self_test
arcfour_LTX__mcrypt_set_key
blowfish_LTX__is_block_algorithm
blowfish_LTX__mcrypt_algorithm_version
blowfish_LTX__mcrypt_decrypt
blowfish_LTX__mcrypt_encrypt
blowfish_LTX__mcrypt_get_algorithms_name
blowfish_LTX__mcrypt_get_block_size
blowfish_LTX__mcrypt_get_key_size
blowfish_LTX__mcrypt_get_size
blowfish_LTX__mcrypt_get_supported_key_sizes
blowfish_LTX__mcrypt_self_test
blowfish_LTX__mcrypt_set_key
blowfish_compat_LTX__is_block_algorithm
blowfish_compat_LTX__mcrypt_algorithm_version
blowfish_compat_LTX__mcrypt_decrypt
blowfish_compat_LTX__mcrypt_encrypt
blowfish_compat_LTX__mcrypt_get_algorithms_name
blowfish_compat_LTX__mcrypt_get_block_size
blowfish_compat_LTX__mcrypt_get_key_size
blowfish_compat_LTX__mcrypt_get_size
blowfish_compat_LTX__mcrypt_get_supported_key_sizes
blowfish_compat_LTX__mcrypt_self_test
blowfish_compat_LTX__mcrypt_set_key
cast_128_LTX__is_block_algorithm
cast_128_LTX__mcrypt_algorithm_version
cast_128_LTX__mcrypt_decrypt
cast_128_LTX__mcrypt_encrypt
cast_128_LTX__mcrypt_get_algorithms_name
cast_128_LTX__mcrypt_get_block_size
cast_128_LTX__mcrypt_get_key_size
cast_128_LTX__mcrypt_get_size
cast_128_LTX__mcrypt_get_supported_key_sizes
cast_128_LTX__mcrypt_self_test
cast_128_LTX__mcrypt_set_key
cast_256_LTX__is_block_algorithm
cast_256_LTX__mcrypt_algorithm_version
cast_256_LTX__mcrypt_decrypt
cast_256_LTX__mcrypt_encrypt
cast_256_LTX__mcrypt_get_algorithms_name
cast_256_LTX__mcrypt_get_block_size
cast_256_LTX__mcrypt_get_key_size
cast_256_LTX__mcrypt_get_size
cast_256_LTX__mcrypt_get_supported_key_sizes
cast_256_LTX__mcrypt_self_test
cast_256_LTX__mcrypt_set_key
des_LTX__is_block_algorithm
des_LTX__mcrypt_algorithm_version
des_LTX__mcrypt_decrypt
des_LTX__mcrypt_encrypt
des_LTX__mcrypt_get_algorithms_name
des_LTX__mcrypt_get_block_size
des_LTX__mcrypt_get_key_size
des_LTX__mcrypt_get_size
des_LTX__mcrypt_get_supported_key_sizes
des_LTX__mcrypt_self_test
des_LTX__mcrypt_set_key
end_mcrypt
enigma_LTX__is_block_algorithm
enigma_LTX__mcrypt_algorithm_version
enigma_LTX__mcrypt_decrypt
enigma_LTX__mcrypt_encrypt
enigma_LTX__mcrypt_get_algo_iv_size
enigma_LTX__mcrypt_get_algorithms_name
enigma_LTX__mcrypt_get_block_size
enigma_LTX__mcrypt_get_key_size
enigma_LTX__mcrypt_get_size
enigma_LTX__mcrypt_get_supported_key_sizes
enigma_LTX__mcrypt_self_test
enigma_LTX__mcrypt_set_key
gost_LTX__is_block_algorithm
gost_LTX__mcrypt_algorithm_version
gost_LTX__mcrypt_decrypt
gost_LTX__mcrypt_encrypt
gost_LTX__mcrypt_get_algorithms_name
gost_LTX__mcrypt_get_block_size
gost_LTX__mcrypt_get_key_size
gost_LTX__mcrypt_get_size
gost_LTX__mcrypt_get_supported_key_sizes
gost_LTX__mcrypt_self_test
gost_LTX__mcrypt_set_key
init_mcrypt
loki97_LTX__is_block_algorithm
loki97_LTX__mcrypt_algorithm_version
loki97_LTX__mcrypt_decrypt
loki97_LTX__mcrypt_encrypt
loki97_LTX__mcrypt_get_algorithms_name
loki97_LTX__mcrypt_get_block_size
loki97_LTX__mcrypt_get_key_size
loki97_LTX__mcrypt_get_size
loki97_LTX__mcrypt_get_supported_key_sizes
loki97_LTX__mcrypt_self_test
loki97_LTX__mcrypt_set_key
mcrypt
mcrypt_dlopen
mcrypt_enc_get_algorithms_name
mcrypt_enc_get_block_size
mcrypt_enc_get_iv_size
mcrypt_enc_get_key_size
mcrypt_enc_get_modes_name
mcrypt_enc_get_state
mcrypt_enc_get_supported_key_sizes
mcrypt_enc_is_block_algorithm
mcrypt_enc_is_block_algorithm_mode
mcrypt_enc_is_block_mode
mcrypt_enc_mode_has_iv
mcrypt_enc_self_test
mcrypt_enc_set_state
mcrypt_free
mcrypt_generic
mcrypt_generic_deinit
mcrypt_generic_end
mcrypt_generic_init
mcrypt_get_algo_iv_size
mcrypt_get_size
mcrypt_mode_get_size
mcrypt_module_algorithm_version
mcrypt_module_close
mcrypt_module_get_algo_block_size
mcrypt_module_get_algo_key_size
mcrypt_module_get_algo_supported_key_sizes
mcrypt_module_is_block_algorithm
mcrypt_module_is_block_algorithm_mode
mcrypt_module_is_block_mode
mcrypt_module_mode_version
mcrypt_module_open
mcrypt_module_self_test
mcrypt_perror
mcrypt_set_key
mcrypt_strerror
mdecrypt
mdecrypt_generic
rc2_LTX__is_block_algorithm
rc2_LTX__mcrypt_algorithm_version
rc2_LTX__mcrypt_decrypt
rc2_LTX__mcrypt_encrypt
rc2_LTX__mcrypt_get_algorithms_name
rc2_LTX__mcrypt_get_block_size
rc2_LTX__mcrypt_get_key_size
rc2_LTX__mcrypt_get_size
rc2_LTX__mcrypt_get_supported_key_sizes
rc2_LTX__mcrypt_self_test
rc2_LTX__mcrypt_set_key
rijndael_128_LTX__is_block_algorithm
rijndael_128_LTX__mcrypt_algorithm_version
rijndael_128_LTX__mcrypt_decrypt
rijndael_128_LTX__mcrypt_encrypt
rijndael_128_LTX__mcrypt_get_algorithms_name
rijndael_128_LTX__mcrypt_get_block_size
rijndael_128_LTX__mcrypt_get_key_size
rijndael_128_LTX__mcrypt_get_size
rijndael_128_LTX__mcrypt_get_supported_key_sizes
rijndael_128_LTX__mcrypt_self_test
rijndael_128_LTX__mcrypt_set_key
rijndael_192_LTX__is_block_algorithm
rijndael_192_LTX__mcrypt_algorithm_version
rijndael_192_LTX__mcrypt_decrypt
rijndael_192_LTX__mcrypt_encrypt
rijndael_192_LTX__mcrypt_get_algorithms_name
rijndael_192_LTX__mcrypt_get_block_size
rijndael_192_LTX__mcrypt_get_key_size
rijndael_192_LTX__mcrypt_get_size
rijndael_192_LTX__mcrypt_get_supported_key_sizes
rijndael_192_LTX__mcrypt_self_test
rijndael_192_LTX__mcrypt_set_key
rijndael_256_LTX__is_block_algorithm
rijndael_256_LTX__mcrypt_algorithm_version
rijndael_256_LTX__mcrypt_decrypt
rijndael_256_LTX__mcrypt_encrypt
rijndael_256_LTX__mcrypt_get_algorithms_name
rijndael_256_LTX__mcrypt_get_block_size
rijndael_256_LTX__mcrypt_get_key_size
rijndael_256_LTX__mcrypt_get_size
rijndael_256_LTX__mcrypt_get_supported_key_sizes
rijndael_256_LTX__mcrypt_self_test
rijndael_256_LTX__mcrypt_set_key
saferplus_LTX__is_block_algorithm
saferplus_LTX__mcrypt_algorithm_version
saferplus_LTX__mcrypt_decrypt
saferplus_LTX__mcrypt_encrypt
saferplus_LTX__mcrypt_get_algorithms_name
saferplus_LTX__mcrypt_get_block_size
saferplus_LTX__mcrypt_get_key_size
saferplus_LTX__mcrypt_get_size
saferplus_LTX__mcrypt_get_supported_key_sizes
saferplus_LTX__mcrypt_self_test
saferplus_LTX__mcrypt_set_key
serpent_LTX__is_block_algorithm
serpent_LTX__mcrypt_algorithm_version
serpent_LTX__mcrypt_decrypt
serpent_LTX__mcrypt_encrypt
serpent_LTX__mcrypt_get_algorithms_name
serpent_LTX__mcrypt_get_block_size
serpent_LTX__mcrypt_get_key_size
serpent_LTX__mcrypt_get_size
serpent_LTX__mcrypt_get_supported_key_sizes
serpent_LTX__mcrypt_self_test
serpent_LTX__mcrypt_set_key
spookyhash_128
spookyhash_32
spookyhash_64
spookyhash_context_allocate
spookyhash_context_free
spookyhash_context_init
spookyhash_final
spookyhash_update
tripledes_LTX__is_block_algorithm
tripledes_LTX__mcrypt_algorithm_version
tripledes_LTX__mcrypt_decrypt
tripledes_LTX__mcrypt_encrypt
tripledes_LTX__mcrypt_get_algorithms_name
tripledes_LTX__mcrypt_get_block_size
tripledes_LTX__mcrypt_get_key_size
tripledes_LTX__mcrypt_get_size
tripledes_LTX__mcrypt_get_supported_key_sizes
tripledes_LTX__mcrypt_self_test
tripledes_LTX__mcrypt_set_key
twofish_LTX__is_block_algorithm
twofish_LTX__mcrypt_algorithm_version
twofish_LTX__mcrypt_decrypt
twofish_LTX__mcrypt_encrypt
twofish_LTX__mcrypt_get_algorithms_name
twofish_LTX__mcrypt_get_block_size
twofish_LTX__mcrypt_get_key_size
twofish_LTX__mcrypt_get_size
twofish_LTX__mcrypt_get_supported_key_sizes
twofish_LTX__mcrypt_self_test
twofish_LTX__mcrypt_set_key
wake_LTX__is_block_algorithm
wake_LTX__mcrypt_algorithm_version
wake_LTX__mcrypt_decrypt
wake_LTX__mcrypt_encrypt
wake_LTX__mcrypt_get_algo_iv_size
wake_LTX__mcrypt_get_algorithms_name
wake_LTX__mcrypt_get_block_size
wake_LTX__mcrypt_get_key_size
wake_LTX__mcrypt_get_size
wake_LTX__mcrypt_get_supported_key_sizes
wake_LTX__mcrypt_self_test
wake_LTX__mcrypt_set_key
xtea_LTX__is_block_algorithm
xtea_LTX__mcrypt_algorithm_version
xtea_LTX__mcrypt_decrypt
xtea_LTX__mcrypt_encrypt
xtea_LTX__mcrypt_get_algorithms_name
xtea_LTX__mcrypt_get_block_size
xtea_LTX__mcrypt_get_key_size
xtea_LTX__mcrypt_get_size
xtea_LTX__mcrypt_get_supported_key_sizes
xtea_LTX__mcrypt_self_test
xtea_LTX__mcrypt_set_key

Sections

.text
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 663KB - Virtual size: 663KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 138.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 231KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Wwise-Unpacker-1.0.3/Tools/quickbms.txt
Wwise-Unpacker-1.0.3/Tools/revorb.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Wwise-Unpacker-1.0.3/Tools/wavescan.bms
Wwise-Unpacker-1.0.3/Tools/ww2ogg.exe
.exe windows:4 windows x86 arch:x86

7ec4c9870dd32e88c8ec01f7cd6479ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WideCharToMultiByte

msvcrt

_fdopen
_read
_strdup
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_filbuf
_filelengthi64
_flsbuf
_iob
_lseeki64
_onexit
_setmode
abort
atexit
fclose
fflush
fgetpos
fopen
fputc
fputs
fread
free
fsetpos
fwrite
getenv
getwc
iswctype
localeconv
malloc
memchr
memcpy
memmove
memset
putwc
realloc
setlocale
setvbuf
signal
sscanf
strcat
strcmp
strcoll
strcpy
strftime
strlen
strxfrm
towlower
towupper
ungetc
ungetwc
wcscoll
wcsftime
wcslen
wcsxfrm

Sections

.text
Size: 628KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Wwise-Unpacker-1.0.3/Unpack to MP3.bat
Wwise-Unpacker-1.0.3/Unpack to OGG.bat

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 5KB - Virtual size: 5KB

DATA Size: 512B - Virtual size: 8B

BSS Size: - Virtual size: 57B

.idata Size: 512B - Virtual size: 324B

.reloc Size: - Virtual size: 220B

.rsrc Size: 512B - Virtual size: 512B

f37590e34919639c4085756922cc122c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

gdi32

imm32

kernel32

msvcrt

ole32

oleaut32

psapi

secur32

shell32

shlwapi

user32

version

avicap32

winmm

ws2_32

Exports

Exports

Sections

.text Size: 27.0MB - Virtual size: 27.0MB

.rodata Size: 82KB - Virtual size: 81KB

.data Size: 356KB - Virtual size: 356KB

.rdata Size: 6.6MB - Virtual size: 6.6MB

.pdata Size: 416KB - Virtual size: 415KB

.xdata Size: 518KB - Virtual size: 518KB

.bss Size: - Virtual size: 9.1MB

.edata Size: 910KB - Virtual size: 910KB

.idata Size: 21KB - Virtual size: 21KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 104B

.reloc Size: 124KB - Virtual size: 124KB

a54287103896ce1ac5bcdc730fe93a0c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comdlg32

crypt32

gdi32

kernel32

msvcrt

user32

winmm

ws2_32

Exports

Exports

Sections

.text Size: 6.2MB - Virtual size: 6.2MB

.data Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 4.5MB - Virtual size: 4.5MB

.eh_fram Size: 663KB - Virtual size: 663KB

.bss Size: - Virtual size: 138.5MB

.edata Size: 11KB - Virtual size: 10KB

.idata Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 15KB - Virtual size: 14KB

.reloc Size: 231KB - Virtual size: 231KB

Headers

DLL Characteristics

CODE
Size: 5KB - Virtual size: 5KB

DATA
Size: 512B - Virtual size: 8B

BSS
Size: - Virtual size: 57B

.idata
Size: 512B - Virtual size: 324B

.reloc
Size: - Virtual size: 220B

.rsrc
Size: 512B - Virtual size: 512B

.text
Size: 27.0MB - Virtual size: 27.0MB

.rodata
Size: 82KB - Virtual size: 81KB

.data
Size: 356KB - Virtual size: 356KB

.rdata
Size: 6.6MB - Virtual size: 6.6MB

.pdata
Size: 416KB - Virtual size: 415KB

.xdata
Size: 518KB - Virtual size: 518KB

.bss
Size: - Virtual size: 9.1MB

.edata
Size: 910KB - Virtual size: 910KB

.idata
Size: 21KB - Virtual size: 21KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 104B

.reloc
Size: 124KB - Virtual size: 124KB

.text
Size: 6.2MB - Virtual size: 6.2MB

.data
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 4.5MB - Virtual size: 4.5MB

.eh_fram
Size: 663KB - Virtual size: 663KB

.bss
Size: - Virtual size: 138.5MB

.edata
Size: 11KB - Virtual size: 10KB

.idata
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 15KB - Virtual size: 14KB

.reloc
Size: 231KB - Virtual size: 231KB

UPX0
Size: - Virtual size: 64KB

UPX1
Size: 70KB - Virtual size: 72KB

UPX2
Size: 512B - Virtual size: 4KB

.text
Size: 61KB - Virtual size: 60KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 58KB - Virtual size: 59KB

.text
Size: 628KB - Virtual size: 628KB

.data
Size: 22KB - Virtual size: 22KB

.rdata
Size: 30KB - Virtual size: 29KB

.bss
Size: - Virtual size: 2KB

.idata
Size: 2KB - Virtual size: 2KB