D:\Mt2\PvE-Capital\[Capital] Sources\PvE-Capital Client Source C++20\Client\bin\Release\metin2client.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c118a09ce349c0dffab511382f086e9c5625d78984d61c9597e9d77034ac1429.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c118a09ce349c0dffab511382f086e9c5625d78984d61c9597e9d77034ac1429.exe
Resource
win10v2004-20240802-en
General
-
Target
c118a09ce349c0dffab511382f086e9c5625d78984d61c9597e9d77034ac1429
-
Size
5.6MB
-
MD5
f0fba6db04353deb8c8f567b84f6c74d
-
SHA1
9f414cf2fceb0be3f99724f42bdd04a03c446690
-
SHA256
c118a09ce349c0dffab511382f086e9c5625d78984d61c9597e9d77034ac1429
-
SHA512
b78e2097bdfc84a992be165c6d181abafb17253f95f243a582e0fcc016eb42904b8a3983279f40492da47789b8857132597c133c0a3e0cb97ebb346792bf4045
-
SSDEEP
98304:4JfcCeCletdmRh4eLoNYsYpZSPmJM+1+t6mWyu6Cqyqaie5:4aCHlimH1Mka38yW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c118a09ce349c0dffab511382f086e9c5625d78984d61c9597e9d77034ac1429
Files
-
c118a09ce349c0dffab511382f086e9c5625d78984d61c9597e9d77034ac1429.exe windows:6 windows x86 arch:x86
5205cbe13f2b3113e3eb8ac687792599
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
HeapReAlloc
CreateProcessW
GetExitCodeProcess
FindNextFileA
FindFirstFileA
FindClose
MultiByteToWideChar
GetEnvironmentStringsW
SetFileAttributesA
GetSystemInfo
SetThreadPriority
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
Module32Next
Module32First
Process32Next
Process32First
CreateToolhelp32Snapshot
SetConsoleCtrlHandler
GetTimeZoneInformation
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
DeleteFileW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStdHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileType
GetDriveTypeW
FreeLibraryAndExitThread
ResumeThread
ExitThread
GetModuleHandleExW
ExitProcess
FreeEnvironmentStringsW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
RaiseException
GetThreadTimes
GetCurrentThread
SetLastError
WaitNamedPipeW
PeekNamedPipe
LoadLibraryExA
GetStartupInfoW
IsDebuggerPresent
UnhandledExceptionFilter
InitializeSListHead
CreateEventW
ResetEvent
InitializeCriticalSectionAndSpinCount
FindResourceW
FindResourceA
SizeofResource
LoadResource
LockResource
IsProcessorFeaturePresent
InterlockedDecrement
HeapValidate
InterlockedIncrement
GetLocaleInfoEx
GetModuleHandleW
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
InitOnceExecuteOnce
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetCPInfo
CompareStringEx
SleepConditionVariableSRW
SetEnvironmentVariableW
OutputDebugStringW
HeapSize
HeapQueryInformation
WriteConsoleW
CreateDirectoryA
GetFileAttributesA
GetCurrentDirectoryW
GetTickCount
GetCurrentDirectoryA
DeleteFileA
ReleaseMutex
CreateMutexA
GetModuleFileNameA
GlobalFree
lstrlenA
GetPrivateProfileStringA
LoadLibraryExW
MoveFileA
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
GetProcAddress
GetModuleHandleA
FreeLibrary
ReadProcessMemory
OpenProcess
CreateThread
TerminateProcess
GetCurrentProcess
Sleep
GetLastError
GetProcessHeap
HeapFree
HeapAlloc
DeviceIoControl
CloseHandle
TryEnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
QueryPerformanceFrequency
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW
CreateSymbolicLinkW
GetFileInformationByHandleEx
CreateHardLinkW
MoveFileExW
CopyFileW
CreateDirectoryExW
AreFileApisANSI
GetTempPathW
SetFileTime
SetFilePointerEx
SetFileInformationByHandle
SetFileAttributesW
SetEndOfFile
GetFullPathNameW
GetFinalPathNameByHandleW
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileExW
CreateFileW
CreateDirectoryW
SetCurrentDirectoryW
LocalFree
GetNativeSystemInfo
GetExitCodeThread
SwitchToThread
WaitForSingleObjectEx
FormatMessageA
QueryPerformanceCounter
CopyFileA
CreateSemaphoreA
ReleaseSemaphore
GetLocaleInfoA
CompareStringA
WideCharToMultiByte
lstrlenW
GlobalLock
GlobalUnlock
GetVersionExA
GetSystemDirectoryA
WriteFile
SetFilePointer
ReadFile
LoadLibraryA
GetCurrentThreadId
SetUnhandledExceptionFilter
GetFileSize
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
OutputDebugStringA
GetTempFileNameA
GetTempPathA
RemoveDirectoryA
AllocConsole
GlobalAlloc
CreateFileA
VerifyVersionInfoW
GetCurrentProcessId
GetModuleFileNameW
VerSetConditionMask
user32
CharNextExA
LoadCursorA
AdjustWindowRectEx
GetWindowRect
SetWindowTextA
GetMenu
RegisterClassA
SetWindowLongA
GetWindowLongA
UpdateWindow
SetFocus
MoveWindow
DestroyWindow
IsWindow
CreateWindowExA
RegisterClassExA
UnregisterClassA
DefWindowProcA
ReleaseCapture
ChangeDisplaySettingsA
GetSystemMetrics
IsIconic
PeekMessageA
GetDC
ReleaseDC
ShowCursor
SetCursor
DestroyCursor
SetCursorPos
ClientToScreen
ShowWindow
GetCapture
CharPrevExA
GetMessageA
TranslateMessage
GetKeyState
SystemParametersInfoA
LoadIconA
ScreenToClient
GetCursorPos
GetAsyncKeyState
SetWindowPos
PostQuitMessage
FindWindowA
WindowFromPoint
MessageBoxA
GetWindowTextA
SendMessageA
LoadImageA
GetMonitorInfoA
DestroyIcon
FlashWindowEx
BeginPaint
EndPaint
InvalidateRect
DispatchMessageA
GetKeyboardLayoutNameA
GetKeyboardLayout
OpenClipboard
CloseClipboard
GetClipboardData
CharNextW
GetClientRect
SetCapture
LoadStringA
OffsetRect
SetRect
FillRect
MonitorFromPoint
gdi32
GetStockObject
GetTextExtentPoint32W
SelectObject
SetBkColor
SetTextColor
TextOutW
CreateCompatibleDC
DeleteDC
SetBkMode
SetDIBitsToDevice
CreateSolidBrush
DeleteObject
PatBlt
EnumFontFamiliesExA
StretchBlt
GetTextExtentPoint32A
GetCharABCWidthsFloatW
CreateFontIndirectA
GetPixel
GetDeviceCaps
TextOutA
CreateDIBSection
advapi32
AddAccessAllowedAce
RegQueryValueExA
RegOpenKeyA
RegCreateKeyExW
RegSetValueExW
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
RegOpenKeyExA
AddAccessDeniedAce
AllocateAndInitializeSid
FreeSid
GetLengthSid
GetTokenInformation
InitializeAcl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityInfo
shell32
SHGetSpecialFolderPathA
ShellExecuteA
SetCurrentProcessExplicitAppUserModelID
ole32
CoInitialize
CoUninitialize
CoInitializeEx
OleSetContainedObject
OleUninitialize
OleInitialize
CoGetClassObject
CoCreateInstance
winmm
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeGetTime
d3d8
Direct3DCreate8
python27
PyArg_ParseTuple
PyList_New
PyList_Append
PyInt_AsLong
PyDict_New
PyDict_SetItem
PyDict_Next
PyDict_Size
PyString_AsString
PyErr_SetString
PyExc_RuntimeError
_PyThreadState_Current
PyString_FromString
PyTuple_New
PyTuple_SetItem
PyInt_FromLong
PyModule_AddStringConstant
PyImport_ImportModule
PyString_InternFromString
PyObject_GetAttrString
PyObject_GetAttr
PyCallable_Check
PyLong_AsLongLong
PyFloat_AsDouble
PyErr_Clear
PyErr_BadArgument
PyErr_Print
PyObject_CallObject
PyNumber_Check
PyTuple_GetItem
PyDict_SetItemString
PyModule_GetDict
PyErr_Fetch
Py_SetProgramName
Py_Initialize
Py_Finalize
PyRun_StringFlags
PyEval_SetTrace
Py_FlushLine
PyImport_GetMagicNumber
PyImport_AddModule
PyObject_AsCharBuffer
PyCode_Addr2Line
PyEval_EvalCode
Py_OptimizeFlag
PyCode_Type
PyUnicodeUCS2_DecodeUTF8
_PyLong_FromByteArray
PyFloat_FromDouble
PyComplex_FromCComplex
PyString_FromStringAndSize
PyList_SetItem
PyErr_Occurred
PyErr_NoMemory
PyEval_GetRestricted
PyCode_New
PyLong_AsLong
Py_InitModule4
PyModule_AddIntConstant
Py_BuildValue
PyTuple_Size
PyMarshal_ReadObjectFromString
_PyLong_New
_Py_EllipsisObject
PyExc_StopIteration
PyExc_EOFError
PyExc_ValueError
PyDict_GetItemString
_Py_NoneStruct
imm32
ImmGetIMEFileNameA
ImmIsIME
ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmNotifyIME
ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
iphlpapi
GetPerAdapterInfo
IcmpCreateFile
IcmpCloseHandle
IcmpSendEcho2
GetAdaptersInfo
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
devil
ilGetInteger
ilLoad
ilConvertImage
ilCopyPixels
ilEnable
ilOriginFunc
ilShutDown
ilSave
ilBindImage
ilInit
ilTexImage
ilSetPixels
ilGenImages
ilDeleteImages
granny2
_GrannyFreeWorldPose@4
_GrannyNewWorldPose@4
_GrannyFindBoneByName@12
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFreeMeshBinding@4
_GrannyNewMeshBinding@12
_GrannyFreeModelInstance@4
_GrannyInstantiateModel@4
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyFreeLocalPose@4
_GrannyNewLocalPose@4
_GrannyUpdateModelMatrix@20
_GrannySampleModelAnimationsAccelerated@20
_GrannyFreeCompletedModelControls@4
_GrannyGetMeshVertexCount@4
_GrannyGetSourceSkeleton@4
_GrannyCopyMeshVertices@12
_GrannyFindMatchingMember@16
_GrannyGetMaterialTextureByType@8
_GrannyGetFileInfo@4
_GrannyFreeFile@4
_GrannyFreeFileSection@8
_GrannyReadEntireFileFromMemory@8
_GrannySetLogCallback@4
_GrannyMeshIsRigid@4
_GrannyGetWorldPose4x4@8
_GrannyGetSourceModel@4
_GrannyFindTrackGroupForModel@12
_GrannyGetMeshVertices@4
_GrannyCopyMeshIndices@12
_GrannyNewMeshDeformer@16
_GrannyFreeMeshDeformer@4
_GrannyDeformVertices@24
GrannyPNT332VertexType
_GrannyGetWorldPoseComposite4x4@8
_GrannyFreeControl@4
_GrannyFreeControlOnceUnused@4
_GrannyCompleteControlAt@8
_GrannyControlIsComplete@4
_GrannyFreeControlIfComplete@4
_GrannyGetControlLoopCount@4
_GrannySetControlLoopCount@8
_GrannyGetControlSpeed@4
_GrannySetControlSpeed@8
_GrannyGetControlLocalDuration@4
_GrannySetControlEaseIn@8
_GrannySetControlEaseInCurve@28
_GrannySetControlEaseOut@8
_GrannySetControlEaseOutCurve@28
_GrannyGetControlRawLocalClock@4
_GrannySetControlRawLocalClock@8
_GrannyPlayControlledAnimation@12
_GrannyBeginControlledAnimation@8
_GrannyGetMeshIndexCount@4
_GrannyGetTotalTypeSize@4
_GrannyEndControlledAnimation@4
_GrannySetTrackGroupTarget@12
_GrannySetTrackGroupLOD@16
_GrannyGetMeshTriangleGroupCount@4
_GrannyGetMeshTriangleGroups@4
_GrannySetModelClock@8
_GrannyGetMeshVertexType@4
_GrannyConvertSingleObject@20
mss32
_AIL_mem_free_lock@4
_AIL_file_read@8
_AIL_set_file_callbacks@16
_AIL_WAV_info@8
_AIL_decompress_ASI@24
_AIL_decompress_ADPCM@12
_AIL_file_type@8
_AIL_open_digital_driver@16
_AIL_auto_update_3D_position@8
_AIL_update_3D_position@8
_AIL_3D_sample_volume@4
_AIL_3D_sample_status@4
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
_AIL_end_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_start_3D_sample@4
_AIL_release_3D_sample_handle@4
_AIL_allocate_3D_sample_handle@4
_AIL_sample_volume_pan@12
_AIL_sample_status@4
_AIL_set_sample_loop_count@8
_AIL_set_sample_volume_pan@12
_AIL_open_stream@12
_AIL_resume_sample@4
_AIL_stop_sample@4
_AIL_start_sample@4
_AIL_set_sample_file@12
_AIL_init_sample@4
_AIL_release_sample_handle@4
_AIL_allocate_sample_handle@4
_AIL_last_error@0
_AIL_stream_status@4
_AIL_set_stream_loop_count@8
_AIL_stream_volume_levels@12
_AIL_set_stream_volume_levels@12
_AIL_pause_stream@8
_AIL_start_stream@4
_AIL_close_stream@4
_AIL_set_redist_directory@4
_AIL_shutdown@0
_AIL_startup@0
_AIL_set_3D_orientation@28
_AIL_set_3D_velocity@20
_AIL_set_3D_position@16
_AIL_close_3D_listener@4
_AIL_open_3D_listener@4
_AIL_close_3D_provider@4
_AIL_open_3D_provider@4
_AIL_enumerate_3D_providers@12
_AIL_close_digital_driver@4
_AIL_end_sample@4
speedtreert
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
??0SGeometry@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1CSpeedTreeRT@@QAE@XZ
??2CSpeedTreeRT@@SAPAXI@Z
??3CSpeedTreeRT@@SAXPAX@Z
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?DeleteTransientData@CSpeedTreeRT@@QAEXXZ
dinput8
DirectInput8Create
ws2_32
closesocket
connect
ioctlsocket
recv
__WSAFDIsSet
send
gethostbyname
WSAGetLastError
WSAStartup
WSACleanup
htons
ntohl
ntohs
gethostname
inet_ntoa
inet_addr
socket
select
htonl
ddraw
DirectDrawCreate
oleaut32
VariantInit
SafeArrayAccessData
SafeArrayDestroy
SysAllocString
VariantClear
SysFreeString
SafeArrayCreate
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 766KB - Virtual size: 765KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 207KB - Virtual size: 713KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 369KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ