SMM_PL 1[.]0[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

SMM_PL 1.0.zip
Size

145.7MB
MD5

c1bc564540a301fe6db625b67dcca472
SHA1

856214dad23e5cb8a137e16eec9013f73c911109
SHA256

29ef9fd3e09040f2eba0f050ef0dba13302f464a81422af6006e1d1138ad39aa
SHA512

ce6505be1695e3be036f3f551649751b3307920a05493d93a78a32011606f9e0360c82d3eee661cb33bcc90006dfd5440bdd264f4ed66eb2609c13499244fe6e
SSDEEP

3145728:odvf2twQpYqTuOQ3lY+Yujp1W0V7wB5dbupmogkidNtm:odvutwQPTup3lTv1Wya5dbTJkipm

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NekoPresence_x64.dll
unpack001/SMM-PL.exe

Files

SMM_PL 1.0.zip
.zip
D3DX9_43.dll
.dll windows:6 windows x64 arch:x64

336d8057d1db03e5a3ac3b62e8902f4b

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

bd:1c:4f:ec:4a:e7:0c:11:ef:6d:b7:89:8e:6a:4a:de:c2:22:ed:47
Signer

Actual PE Digest

bd:1c:4f:ec:4a:e7:0c:11:ef:6d:b7:89:8e:6a:4a:de:c2:22:ed:47

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3dx9_43.pdb

Imports

msvcrt

malloc
_vsnprintf
_finite
memmove
_purecall
qsort
_stricmp
modff
iswpunct
_clearfp
iswdigit
iswalpha
iswspace
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
_strdup
setlocale
free
calloc
realloc
sscanf
_strtime
_isatty
_write
_lseeki64
__pioinfo
__badioinfo
wctomb
_itoa
_snprintf
_iob
_fileno
isleadbyte
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
memset
memcpy
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
srand
strtod
fread
fwrite
fflush
abort
_tempnam
_ultoa
isalpha
atol
atof
isxdigit
wcstombs
_isnan
rand
atoi
isalnum
_vsnwprintf
isdigit
isspace
longjmp
ldexp
frexp
__CxxFrameHandler
_errno
_strdate
sqrt
powf
sqrtf
floor
fmodf
memcmp
log
cos
exp
sinf
cosf
floorf
ceilf
atan2
atan
acos
asin
sin
pow
atan2f
logf
acosf
fmod
asinf
_setjmp
ceil

gdi32

GetObjectW
GetGlyphOutlineW
GetCurrentObject
GetOutlineTextMetricsA
TranslateCharsetInfo
ExtTextOutA
MoveToEx
ExtTextOutW
CreateDIBSection
GetGlyphOutlineA
GetObjectA
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsA
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject

kernel32

FindResourceW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetProcessHeap
HeapFree
HeapAlloc
ReleaseMutex
WaitForSingleObject
CreateMutexA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
ExpandEnvironmentStringsA
GlobalMemoryStatus
GetSystemInfo
SetEndOfFile
MoveFileW
GetTempFileNameW
MoveFileA
CompareStringA
SetFilePointer
DeleteFileW
FindResourceA
LoadResource
LockResource
SizeofResource
GetFileSize
CreateFileMappingA
MapViewOfFile
FreeResource
UnmapViewOfFile
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalFree
FormatMessageA
GetFullPathNameW
CreateFileW
GetFileSizeEx
GetLastError
IsDBCSLeadByte
WriteFile
DeleteFileA
CloseHandle
ReadFile
CreateFileA
GetTempFileNameA
GetTempPathA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetACP
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
Sleep
VirtualProtect
DisableThreadLibraryCalls

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

Exports

Exports

D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderConstantTableEx
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXPreprocessShader
D3DXPreprocessShaderFromFileA
D3DXPreprocessShaderFromFileW
D3DXPreprocessShaderFromResourceA
D3DXPreprocessShaderFromResourceW
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
NekoPresence_x64.dll
.dll windows:6 windows x64 arch:x64

65c9ccfc2f670a3fb5013427dee7e5fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\VisualStudio\CPP\NekoPresence\NekoPresence.x64.pdb

Imports

kernel32

CloseHandle
GetLastError
WriteFile
WaitNamedPipeW
GetCurrentProcessId
ReadFile
CreateFileW
MultiByteToWideChar
lstrlenW
PeekNamedPipe
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegSetValueExW

msvcp140

_Cnd_wait
?_Xlength_error@std@@YAXPEBD@Z
_Thrd_start
_Xtime_get_ticks
_Thrd_join
_Thrd_id
_Mtx_init
_Mtx_destroy
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_current_owns
_Mtx_lock
_Mtx_unlock
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Cnd_signal
_Cnd_broadcast
_Cnd_timedwait
?_Throw_C_error@std@@YAXH@Z
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Cnd_destroy
_Cnd_init

vcruntime140

__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__C_specific_handler
memmove
memset
memcpy
memcmp
_purecall
__std_terminate
__CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_initterm_e
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_initterm
terminate

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-math-l1-1-0

ceil
log2
floor

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vswprintf

Exports

Exports

RegisterCallbacks
np_clearpresence
np_initdiscord
np_initdll
np_registergame
np_registergame_steam
np_respond
np_setpresence
np_setpresence_buttons
np_setpresence_clearsecrets
np_setpresence_more
np_setpresence_partyparams
np_setpresence_secrets
np_setpresence_timestamps
np_shutdown
np_update

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SMM-PL.exe
.exe windows:6 windows x64 arch:x64

a66fe83a09391aaa5e5e274956e89072

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\GameMaker\GameMaker\GameMaker\Runner\VC_Runner\x64\Release-Zeus\Runner.pdb

Imports

rpcrt4

UuidToStringW
UuidCreate

wininet

HttpEndRequestW
InternetWriteFile
InternetCloseHandle
HttpSendRequestA
InternetConnectA
InternetCrackUrlA
InternetCanonicalizeUrlA
HttpOpenRequestA
HttpQueryInfoA
InternetOpenA
InternetReadFile
InternetGetConnectedState

d3d11

D3D11CreateDevice

dbghelp

MiniDumpWriteDump
SymInitialize
SymFromAddr

winmm

joyGetPosEx
mciSendStringA
timeGetTime
timeGetDevCaps
timeEndPeriod
timeBeginPeriod
joyGetPos

ws2_32

getaddrinfo
WSAStartup
listen
send
socket
connect
gethostname
recvfrom
recv
getsockopt
freeaddrinfo
sendto
ioctlsocket
setsockopt
WSAGetLastError
getpeername
inet_ntop
getnameinfo
__WSAFDIsSet
select
ntohl
ntohs
htonl
htons
inet_pton
closesocket
bind
accept
WSACleanup
getsockname
WSAAddressToStringA

gdiplus

GdiplusShutdown
GdiplusStartup

comctl32

InitCommonControlsEx

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

mfplat

MFStartup
MFCreateSourceResolver
MFCreateMediaType
MFShutdown

mf

MFCreateAudioRendererActivate
MFCreateTopologyNode
MFCreateMediaSession
MFCreateSampleGrabberSinkActivate
MFGetService
MFCreateTopology

iphlpapi

GetAdaptersAddresses
NotifyIpInterfaceChange
CancelMibChangeNotify2

kernel32

SetConsoleCtrlHandler
GetCurrentThread
WriteFile
GetStdHandle
FreeLibraryAndExitThread
ExitThread
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
MoveFileExW
SetFileAttributesW
GetFileAttributesExW
GetModuleHandleExW
HeapWalk
HeapValidate
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
LoadLibraryExW
GetTempPathW
InterlockedPushEntrySList
RtlPcToFileHeader
RtlUnwindEx
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
InitializeSListHead
GetConsoleMode
GetFileSizeEx
RaiseException
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetFilePointerEx
ReadConsoleW
SetStdHandle
GetTimeZoneInformation
HeapReAlloc
IsValidLocale
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetDateFormatW
GetTimeFormatW
CompareStringW
InterlockedFlushSList
Sleep
LoadLibraryW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetLastError
LoadLibraryA
OutputDebugStringA
SetWaitableTimer
CreateWaitableTimerW
CloseHandle
GetConsoleWindow
SetLastError
GetFullPathNameW
GetExitCodeThread
FormatMessageW
DeleteFileW
CreateThread
GetCurrentDirectoryW
SetCurrentDirectoryW
LocalFree
GetModuleHandleW
ReadFile
SetFilePointer
CreateFileW
GetFileAttributesW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableW
FreeLibrary
FormatMessageA
CreateDirectoryW
FindFirstFileW
FindNextFileW
RemoveDirectoryW
GetModuleFileNameW
GetUserDefaultLCID
ResumeThread
GetTempPathA
CreateProcessW
CreateDirectoryA
WaitForSingleObject
GetTickCount64
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentProcess
K32GetProcessMemoryInfo
GlobalAlloc
GlobalLock
GlobalUnlock
GetLocaleInfoW
GetVersionExW
GetSystemInfo
GlobalMemoryStatusEx
VerSetConditionMask
VerifyVersionInfoW
GlobalFree
GetCurrentProcessId
DebugBreak
GetEnvironmentVariableA
ExitProcess
lstrlenA
GetVersion
SetEnvironmentVariableA
CreateFileMappingW
MapViewOfFile
MoveFileA
GetCommandLineW
ExpandEnvironmentStringsW
GetFinalPathNameByHandleW
SetErrorMode
GetCurrentThreadId
SetUnhandledExceptionFilter
WaitForSingleObjectEx
CreateEventExA
OutputDebugStringW
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
SetEvent
GetStringTypeW
GetLocaleInfoEx
GetCPInfo
CompareStringEx
LCMapStringEx
DecodePointer
EncodePointer
CreateSymbolicLinkW
GetFileInformationByHandleEx
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
InitOnceExecuteOnce
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetFileInformationByHandle
GetNativeSystemInfo
SwitchToThread
SetEndOfFile
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
SetThreadPriority
DeleteCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
RtlCaptureStackBackTrace
LCMapStringW
EnumSystemLocalesW
FlushFileBuffers
FindClose
GetConsoleOutputCP
HeapSize
GetFileSize
WriteConsoleW

user32

MsgWaitForMultipleObjectsEx
EnumDisplaySettingsA
TranslateMessage
SetProcessDPIAware
SetDlgItemTextA
MessageBoxA
GetFocus
PeekMessageW
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
IsClipboardFormatAvailable
keybd_event
GetAsyncKeyState
IsWindowVisible
IsDialogMessageW
OpenClipboard
DispatchMessageW
GetCursorPos
SetCursorPos
UpdateWindow
EnumDisplaySettingsW
GetMonitorInfoW
ShowWindow
GetSystemMetrics
SendMessageW
SetWindowLongPtrW
MonitorFromWindow
GetWindowLongPtrW
GetLayeredWindowAttributes
IntersectRect
GetWindowLongW
GetWindowPlacement
SetWindowPos
GetWindowRect
wsprintfW
GetActiveWindow
ClientToScreen
MoveWindow
CreateDialogParamW
GetDC
EndDialog
SetWindowTextW
SetDlgItemTextW
GetDlgItemTextW
GetDlgItem
DrawTextW
DialogBoxParamW
ReleaseDC
DefWindowProcW
GetKeyState
DestroyWindow
CreateWindowExW
ScreenToClient
CallNextHookEx
RegisterClassExW
FindWindowExA
MapWindowPoints
SetWindowPlacement
UnhookWindowsHookEx
EnumWindows
SetFocus
BringWindowToTop
EnumDisplayDevicesW
LoadCursorW
SendMessageA
SetParent
SetCapture
SetWindowsHookExW
SetCursor
GetClientRect
PostThreadMessageW
FindWindowA
ReleaseCapture
SetForegroundWindow
LoadImageW
MessageBoxW
GetRawInputDeviceInfoA
GetRawInputDeviceList
AdjustWindowRectEx
PostMessageW

gdi32

SelectObject
DeleteObject
CombineRgn
GetRgnBox
CreateRectRgnIndirect
GetDeviceCaps
GetStockObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegOpenKeyExW
RegCloseKey
CryptGenRandom
CryptReleaseContext
RegQueryValueExW
CryptAcquireContextA

shell32

ShellExecuteW
SHGetFolderPathW

ole32

CoCreateInstance
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoInitialize
PropVariantClear

dwmapi

DwmGetWindowAttribute
DwmSetWindowAttribute
DwmGetCompositionTimingInfo

imm32

ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext
ImmSetCandidateWindow

Sections

.text
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 467KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 413KB - Virtual size: 413KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

minATL
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mydata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bgm_sm1clear.ogg
bgm_smwclear.ogg
bgm_smwclear_castle.ogg
data.win
font_as.ttf
fontcjk.ttf
options.ini
snd_1up.ogg
snd_NSMBU_1up_coins.ogg
snd_NSMBU_1up_original.ogg
snd_NSMBU_airspin.ogg
snd_NSMBU_angrysun.ogg
snd_NSMBU_bobomb_charge.ogg
snd_NSMBU_bonus.ogg
snd_NSMBU_boo.ogg
snd_NSMBU_boo_dead.ogg
snd_NSMBU_boo_stop.ogg
snd_NSMBU_boss.ogg
snd_NSMBU_boss_stomp.ogg
snd_NSMBU_bouncycloud.ogg
snd_NSMBU_bowser_castle1.ogg
snd_NSMBU_bowser_castle2.ogg
snd_NSMBU_bowser_dead.ogg
snd_NSMBU_bowser_fire.ogg
snd_NSMBU_bowser_impact.ogg
snd_NSMBU_bowser_jump1.ogg
snd_NSMBU_bowser_jump2.ogg
snd_NSMBU_bowser_multifire.ogg
snd_NSMBU_bowser_paso1.ogg
snd_NSMBU_bowser_paso2.ogg
snd_NSMBU_bowserjr_dead.ogg
snd_NSMBU_bowserjr_fire.ogg
snd_NSMBU_bowserjr_groundpount.ogg
snd_NSMBU_bowserjr_inside.ogg
snd_NSMBU_bowserjr_jump.ogg
snd_NSMBU_bowserjr_outside.ogg
snd_NSMBU_bowserjr_shell.ogg
snd_NSMBU_bowserjr_stomp.ogg
snd_NSMBU_break.ogg
snd_NSMBU_bullet.ogg
snd_NSMBU_bump.ogg
snd_NSMBU_bumper1.ogg
snd_NSMBU_bumper2.ogg
snd_NSMBU_cannon.ogg
snd_NSMBU_chomp.ogg
snd_NSMBU_clawin.ogg
snd_NSMBU_clawout.ogg
snd_NSMBU_clear.ogg
snd_NSMBU_clear_castle.ogg
snd_NSMBU_clear_castle_voice.ogg
snd_NSMBU_clown_charge_end.ogg
snd_NSMBU_clown_charge_start.ogg
snd_NSMBU_clown_fly.ogg
snd_NSMBU_coin.ogg
snd_NSMBU_coin10.ogg
snd_NSMBU_coinappear.ogg
snd_NSMBU_count.ogg
snd_NSMBU_countend.ogg
snd_NSMBU_dead.ogg
snd_NSMBU_dead_lava.ogg
snd_NSMBU_dead_veneno.ogg
snd_NSMBU_desllizarse_walljump.ogg
snd_NSMBU_door_close.ogg
snd_NSMBU_door_open.ogg
snd_NSMBU_doorlock.ogg
snd_NSMBU_doorlock_open.ogg
snd_NSMBU_drybones_armar.ogg
snd_NSMBU_drybones_desarmar.ogg
snd_NSMBU_duck.ogg
snd_NSMBU_editor.ogg
snd_NSMBU_editor_airship.ogg
snd_NSMBU_editor_castle.ogg
snd_NSMBU_editor_desert.ogg
snd_NSMBU_editor_forest.ogg
snd_NSMBU_editor_ghost.ogg
snd_NSMBU_editor_overworld.ogg
snd_NSMBU_editor_sky.ogg
snd_NSMBU_editor_snow.ogg
snd_NSMBU_editor_underground.ogg
snd_NSMBU_editor_underwater.ogg
snd_NSMBU_editor_volcano.ogg
snd_NSMBU_erupcion.ogg
snd_NSMBU_estalactita_break.ogg
snd_NSMBU_estalactita_fall.ogg
snd_NSMBU_explosion.ogg
snd_NSMBU_fireball.ogg
snd_NSMBU_flag_decender.ogg
snd_NSMBU_get_start1.ogg
snd_NSMBU_get_start2.ogg
snd_NSMBU_get_vine.ogg
snd_NSMBU_getkey.ogg
snd_NSMBU_goal.ogg
snd_NSMBU_goal2.ogg
snd_NSMBU_goomba_stomped.ogg
snd_NSMBU_groundpound.ogg
snd_NSMBU_groundpount_stop.ogg
snd_NSMBU_hacha.ogg
snd_NSMBU_hammer_throw.ogg
snd_NSMBU_happymoon.ogg
snd_NSMBU_helice.ogg
snd_NSMBU_helice_down_spin.ogg
snd_NSMBU_helice_drill_spin.ogg
snd_NSMBU_helice_planear.ogg
snd_NSMBU_helice_voice.ogg
snd_NSMBU_hold1.ogg
snd_NSMBU_hold2.ogg
snd_NSMBU_hurryup.ogg
snd_NSMBU_jump.ogg
snd_NSMBU_jump_2ND.ogg
snd_NSMBU_kamek_appear.ogg
snd_NSMBU_kamek_disappear.ogg
snd_NSMBU_kick.ogg
snd_NSMBU_kick_1.ogg
snd_NSMBU_kick_1up.ogg
snd_NSMBU_kick_2.ogg
snd_NSMBU_kick_3.ogg
snd_NSMBU_kick_4.ogg
snd_NSMBU_kick_5.ogg
snd_NSMBU_kick_6.ogg
snd_NSMBU_kick_7.ogg
snd_NSMBU_kick_jump.ogg
snd_NSMBU_lava.ogg
snd_NSMBU_magic.ogg
snd_NSMBU_magic_destroy.ogg
snd_NSMBU_minirebote_1.ogg
snd_NSMBU_minirebote_2.ogg
snd_NSMBU_minirebote_3.ogg
snd_NSMBU_minirebote_4.ogg
snd_NSMBU_minirebote_5.ogg
snd_NSMBU_minirebote_6.ogg
snd_NSMBU_minirebote_7.ogg
snd_NSMBU_music_airship.ogg
snd_NSMBU_music_airship_night.ogg
snd_NSMBU_music_autumn.ogg
snd_NSMBU_music_beach.ogg
snd_NSMBU_music_castle.ogg
snd_NSMBU_music_castle_night.ogg
snd_NSMBU_music_desert.ogg
snd_NSMBU_music_desert_night.ogg
snd_NSMBU_music_forest.ogg
snd_NSMBU_music_forest_night.ogg
snd_NSMBU_music_ghost.ogg
snd_NSMBU_music_ghost_night.ogg
snd_NSMBU_music_mountain.ogg
snd_NSMBU_music_overworld.ogg
snd_NSMBU_music_overworld_night.ogg
snd_NSMBU_music_sky.ogg
snd_NSMBU_music_sky_night.ogg
snd_NSMBU_music_snow.ogg
snd_NSMBU_music_snow_night.ogg
snd_NSMBU_music_underground.ogg
snd_NSMBU_music_underground_night.ogg
snd_NSMBU_music_underwater.ogg
snd_NSMBU_music_underwater_night.ogg
snd_NSMBU_music_volcano.ogg
snd_NSMBU_noteblock.ogg
snd_NSMBU_oneway.ogg
snd_NSMBU_penguin_slide.ogg
snd_NSMBU_pink_coin1.ogg
snd_NSMBU_pink_coin2.ogg
snd_NSMBU_pink_coin3.ogg
snd_NSMBU_pink_coin4.ogg
snd_NSMBU_pink_coin5.ogg
snd_NSMBU_podoboo.ogg
snd_NSMBU_pow.ogg
snd_NSMBU_powerdown.ogg
snd_NSMBU_powerup.ogg
snd_NSMBU_powerup_helice.ogg
snd_NSMBU_powerup_penguinsuit.ogg
snd_NSMBU_powerup_second.ogg
snd_NSMBU_rebote.ogg
snd_NSMBU_rebote_1up.ogg
snd_NSMBU_rocks_break.ogg
snd_NSMBU_skid.ogg
snd_NSMBU_skidsnow.ogg
snd_NSMBU_snowball.ogg
snd_NSMBU_snowball_break.ogg
snd_NSMBU_snowball_freeze.ogg
snd_NSMBU_soplete.ogg
snd_NSMBU_spinjump.ogg
snd_NSMBU_spinstomp_1.ogg
snd_NSMBU_spinstomp_2.ogg
snd_NSMBU_spinstomp_3.ogg
snd_NSMBU_spinstomp_4.ogg
snd_NSMBU_spinstomp_5.ogg
snd_NSMBU_spinstomp_6.ogg
snd_NSMBU_spinstomp_7.ogg
snd_NSMBU_spinstomp_8.ogg
snd_NSMBU_spring.ogg
snd_NSMBU_spring_high.ogg
snd_NSMBU_sprout.ogg
snd_NSMBU_squirrel_imp.ogg
snd_NSMBU_squirrel_plan.ogg
snd_NSMBU_standup.ogg
snd_NSMBU_starman.ogg
snd_NSMBU_step_airship.ogg
snd_NSMBU_step_airship2.ogg
snd_NSMBU_step_block1.ogg
snd_NSMBU_step_block2.ogg
snd_NSMBU_step_normal1.ogg
snd_NSMBU_step_normal2.ogg
snd_NSMBU_step_penguin1.ogg
snd_NSMBU_step_penguin2.ogg
snd_NSMBU_steps.ogg
snd_NSMBU_stomp.ogg
snd_NSMBU_stun.ogg
snd_NSMBU_swim.ogg
snd_NSMBU_swim2.ogg
snd_NSMBU_switch.ogg
snd_NSMBU_switchalert.ogg
snd_NSMBU_switchsong.ogg
snd_NSMBU_throw1.ogg
snd_NSMBU_throw2.ogg
snd_NSMBU_thwomp_original.ogg
snd_NSMBU_triplejump_0.ogg
snd_NSMBU_triplejump_1.ogg
snd_NSMBU_triplejump_2.ogg
snd_NSMBU_triplejump_3.ogg
snd_NSMBU_vine_up.ogg
snd_NSMBU_volcanic_rocks.ogg
snd_NSMBU_walljump1.ogg
snd_NSMBU_walljump2.ogg
snd_NSMBU_warp.ogg
snd_NSMBU_whistle.ogg
snd_SMB2_1up.ogg
snd_SMB2_coin.ogg
snd_SMB2_course_clear.ogg
snd_SMB2_course_clear_castle.ogg
snd_SMB2_dead.ogg
snd_SMB2_door.ogg
snd_SMB2_get.ogg
snd_SMB2_jump.ogg
snd_SMB2_liana.ogg
snd_SMB2_pow.ogg
snd_SMB2_powerup.ogg
snd_SMB2_throw.ogg
snd_SMB3_1up.ogg
snd_SMB3_autumn.ogg
snd_SMB3_bonus.ogg
snd_SMB3_boss.ogg
snd_SMB3_bowser_dead.ogg
snd_SMB3_bowser_fire.ogg
snd_SMB3_break.ogg
snd_SMB3_bump.ogg
snd_SMB3_bumper1.ogg
snd_SMB3_bumper2.ogg
snd_SMB3_clawin.ogg
snd_SMB3_clawout.ogg
snd_SMB3_clown_damage.ogg
snd_SMB3_clown_fire_charge.ogg
snd_SMB3_coin.ogg
snd_SMB3_coin10.ogg
snd_SMB3_course_clear_castle.ogg
snd_SMB3_dead.ogg
snd_SMB3_door_close.ogg
snd_SMB3_door_open.ogg
snd_SMB3_doorlock_open.ogg
snd_SMB3_editor.ogg
snd_SMB3_editor_castle.ogg
snd_SMB3_editor_desert.ogg
snd_SMB3_editor_fall.ogg
snd_SMB3_editor_forest.ogg
snd_SMB3_editor_ghost.ogg
snd_SMB3_editor_sky.ogg
snd_SMB3_editor_snow.ogg
snd_SMB3_editor_underground.ogg
snd_SMB3_editor_underwater.ogg
snd_SMB3_estalactita_break.ogg
snd_SMB3_estalactita_fall.ogg
snd_SMB3_explode.ogg
snd_SMB3_explode_red.ogg
snd_SMB3_fireball.ogg
snd_SMB3_getkey.ogg
snd_SMB3_hurryup.ogg
snd_SMB3_jump.ogg
snd_SMB3_key_destroy.ogg
snd_SMB3_kick.ogg
snd_SMB3_magicbean.ogg
snd_SMB3_music_airship.ogg
snd_SMB3_music_airship_night.ogg
snd_SMB3_music_beach.ogg
snd_SMB3_music_castle.ogg
snd_SMB3_music_castle_night.ogg
snd_SMB3_music_ghost.ogg
snd_SMB3_music_ghost_night.ogg
snd_SMB3_music_ground.ogg
snd_SMB3_music_ground_night.ogg
snd_SMB3_music_mountain.ogg
snd_SMB3_music_sky.ogg
snd_SMB3_music_sky_night.ogg
snd_SMB3_music_snow.ogg
snd_SMB3_music_snow_night.ogg
snd_SMB3_music_underground.ogg
snd_SMB3_music_underground_night.ogg
snd_SMB3_music_underwater.ogg
snd_SMB3_music_underwater_night.ogg
snd_SMB3_music_volcano.ogg
snd_SMB3_oneway.ogg
snd_SMB3_pow.ogg
snd_SMB3_powerdown.ogg
snd_SMB3_powerup.ogg
snd_SMB3_skid.ogg
snd_SMB3_spring.ogg
snd_SMB3_sprout.ogg
snd_SMB3_starman.ogg
snd_SMB3_switch.ogg
snd_SMB3_switchsong.ogg
snd_SMB3_thwomp.ogg
snd_SMB3_thwomp_original.ogg
snd_SMB3_whistle.ogg
snd_SMB_bigjump.ogg
snd_SMB_bonus.ogg
snd_SMB_bonus_link.ogg
snd_SMB_boss.ogg
snd_SMB_boss_link.ogg
snd_SMB_bowser_dead.ogg
snd_SMB_clawin.ogg
snd_SMB_clawout.ogg
snd_SMB_clear_castle_link.ogg
snd_SMB_clear_link.ogg
snd_SMB_clear_superball.ogg
snd_SMB_count.ogg
snd_SMB_course_clear_castle.ogg
snd_SMB_dead.ogg
snd_SMB_editor.ogg
snd_SMB_editor_airship.ogg
snd_SMB_editor_castle.ogg
snd_SMB_editor_desert.ogg
snd_SMB_editor_forest.ogg
snd_SMB_editor_ghost.ogg
snd_SMB_editor_sky.ogg
snd_SMB_editor_snow.ogg
snd_SMB_editor_underground.ogg
snd_SMB_editor_underwater.ogg
snd_SMB_flag_decender.ogg
snd_SMB_hen_jump.ogg
snd_SMB_hen_jump_fall.ogg
snd_SMB_hurryup.ogg
snd_SMB_jump_superflower.ogg
snd_SMB_jump_supermushroom.ogg
snd_SMB_link.ogg
snd_SMB_link_dash_sword.ogg
snd_SMB_link_dead.ogg
snd_SMB_link_dead_enemigo.ogg
snd_SMB_link_explosion.ogg
snd_SMB_link_itemappear.ogg
snd_SMB_master_sword.ogg
snd_SMB_master_sword_castle.ogg
snd_SMB_master_sword_underground.ogg
snd_SMB_music_airship.ogg
snd_SMB_music_airship_night.ogg
snd_SMB_music_castle.ogg
snd_SMB_music_castle_night.ogg
snd_SMB_music_desert.ogg
snd_SMB_music_desert_night.ogg
snd_SMB_music_forest.ogg
snd_SMB_music_forest_night.ogg
snd_SMB_music_ghost.ogg
snd_SMB_music_ghost_night.ogg
snd_SMB_music_ground.ogg
snd_SMB_music_ground_night.ogg
snd_SMB_music_mountain.ogg
snd_SMB_music_sky.ogg
snd_SMB_music_sky_night.ogg
snd_SMB_music_snow.ogg
snd_SMB_music_snow_night.ogg
snd_SMB_music_underground.ogg
snd_SMB_music_underground_night.ogg
snd_SMB_music_underwater.ogg
snd_SMB_music_underwater_night.ogg
snd_SMB_music_volcano.ogg
snd_SMB_pink_coin1.ogg
snd_SMB_pink_coin2.ogg
snd_SMB_pink_coin3.ogg
snd_SMB_pink_coin4.ogg
snd_SMB_pink_coin5.ogg
snd_SMB_powerup_link.ogg
snd_SMB_powerup_superflower.ogg
snd_SMB_powerup_supermushroom.ogg
snd_SMB_smalljump.ogg
snd_SMB_sprout_superflower.ogg
snd_SMB_starman.ogg
snd_SMB_superball.ogg
snd_SMB_superball_dead.ogg
snd_SMB_switch.ogg
snd_SMM_intro.ogg
snd_SMW_bonus.ogg
snd_SMW_boss.ogg
snd_abrir_menu.ogg
snd_aceptar.ogg
snd_add_hongo.ogg
snd_add_paracaidas.ogg
snd_add_trayectory.ogg
snd_add_wings.ogg
snd_agregar_wings.ogg
snd_atack_leaf.ogg
snd_back.ogg
snd_big_pplant_atack.ogg
snd_big_pplant_dead.ogg
snd_block_up.ogg
snd_boomboom_dead.ogg
snd_boomboom_giro.ogg
snd_boomboom_grito1.ogg
snd_boomboom_grito2.ogg
snd_boomboom_grito3.ogg
snd_boomboom_ruleta.ogg
snd_boomboom_step1.ogg
snd_boomboom_step2.ogg
snd_bowser_dead.ogg
snd_bowserjr_shell.ogg
snd_break.ogg
snd_bulletbill_red.ogg
snd_bumper1.ogg
snd_bumper2.ogg
snd_button_home_move.ogg
snd_button_pausa_move.ogg
snd_caidas_letras.ogg
snd_cambio_entorno.ogg
snd_cambio_objecto.ogg
snd_castle_destroyed.ogg
snd_cerrar_menu.ogg
snd_change_arrow.ogg
snd_change_night_day.ogg
snd_changeleaf.ogg
snd_chapoteo_agua.ogg
snd_chapoteo_lava.ogg
snd_circle_1.ogg
snd_circle_2.ogg
snd_circle_3.ogg
snd_circle_4.ogg
snd_circle_5.ogg
snd_circle_6.ogg
snd_circle_7.ogg
snd_circle_8.ogg
snd_clawin.ogg
snd_clawout.ogg
snd_close_guardabot.ogg
snd_close_palette2.ogg
snd_clown_damage.ogg
snd_clown_fire.ogg
snd_clown_fire_charge.ogg
snd_clown_in.ogg
snd_coin.ogg
snd_coin10.ogg
snd_colocar_item_bloque.ogg
snd_colocar_objectos.ogg
snd_correct.ogg
snd_count.ogg
snd_countend.ogg
snd_course_clear.ogg
snd_credits.ogg
snd_crumble.ogg
snd_dead.ogg
snd_decoracion.ogg
snd_delete_level.ogg
snd_despausar.ogg
snd_dislike.ogg
snd_door.ogg
snd_door_close.ogg
snd_doorlock_open.ogg
snd_drag.ogg
snd_editor_airship.ogg
snd_editor_castle.ogg
snd_editor_desert.ogg
snd_editor_forest.ogg
snd_editor_ghost.ogg
snd_editor_overworld.ogg
snd_editor_sky.ogg
snd_editor_snow.ogg
snd_editor_underground.ogg
snd_editor_underwater.ogg
snd_editor_volcano.ogg
snd_enemy_fall_castle.ogg
snd_erase_clean.ogg
snd_es_aplausos.ogg
snd_es_bebe.ogg
snd_es_bocina.ogg
snd_es_chisporreo.ogg
snd_es_destello.ogg
snd_es_nota_musical.ogg
snd_es_remolino.ogg
snd_estalactita_break.ogg
snd_estalactita_fall.ogg
snd_explode.ogg
snd_explode_red.ogg
snd_fireball.ogg
snd_flames.ogg
snd_foo.ogg
snd_foo_dead.ogg
snd_gameover.ogg
snd_goomba_march.ogg
snd_goomba_stomped.ogg
snd_ground_bomb.ogg
snd_guardabot.ogg
snd_hatch.ogg
snd_helmet.ogg
snd_helmet_add.ogg
snd_helmet_remove.ogg
snd_helmet_spiny.ogg
snd_helmet_spiny_add.ogg
snd_hen_powerup.ogg
snd_hurryup.ogg
snd_inventory.ogg
snd_item_deselect.ogg
snd_item_select.ogg
snd_jump.ogg
snd_jump_erase.ogg
snd_jump_erase_reverse.ogg
snd_jump_floruga.ogg
snd_key.ogg
snd_key_appear.ogg
snd_key_go.ogg
snd_kick.ogg
snd_kick2.ogg
snd_kick3.ogg
snd_kick4.ogg
snd_kick5.ogg
snd_kick6.ogg
snd_kick7.ogg
snd_kick_1up.ogg
snd_klock.ogg
snd_kuriboshoe_steps.ogg
snd_letsgo.ogg
snd_letsgo_luigi.ogg
snd_letsgo_toad.ogg
snd_letsgo_toadette.ogg
snd_lick.ogg
snd_like.ogg
snd_luigi_voice.ogg
snd_lupa_hover.ogg
snd_magicbean.ogg
snd_mario_add.ogg
snd_mario_voice.ogg
snd_mariocap_out.ogg
snd_mariocap_rise.ogg
snd_mb_1up.ogg
snd_mb_arcon.ogg
snd_mb_fireflower.ogg
snd_mb_fireplant.ogg
snd_mb_frogsuit.ogg
snd_mb_goomba.ogg
snd_mb_goombrat.ogg
snd_mb_green_koopa.ogg
snd_mb_mario.ogg
snd_mb_megamushroom.ogg
snd_mb_muncher.ogg
snd_mb_mushroom.ogg
snd_mb_plant.ogg
snd_mb_red_koopa.ogg
snd_mb_star.ogg
snd_mb_superflower.ogg
snd_menu_settings_button_move.ogg
snd_miniwindow_desplazarse.ogg
snd_miniwindow_seleccionar.ogg
snd_modo_historia.ogg
snd_move_object.ogg
snd_music_airship.ogg
snd_music_airship_night.ogg
snd_music_beach.ogg
snd_music_beach_night.ogg
snd_music_castle.ogg
snd_music_castle_night.ogg
snd_music_desert.ogg
snd_music_desert_night.ogg
snd_music_ending.ogg
snd_music_forest.ogg
snd_music_forest_night.ogg
snd_music_ghost.ogg
snd_music_ghost_night.ogg
snd_music_ground.ogg
snd_music_ground_night.ogg
snd_music_mario_land.ogg
snd_music_mountain.ogg
snd_music_sky.ogg
snd_music_sky_night.ogg
snd_music_snow.ogg
snd_music_snow_night.ogg
snd_music_underground.ogg
snd_music_underground_night.ogg
snd_music_underwater.ogg
snd_music_underwater_night.ogg
snd_music_volcano.ogg
snd_n64.ogg
snd_oneway.ogg
snd_open_desafios.ogg
snd_open_guardabot.ogg
snd_open_palette.ogg
snd_open_windows.ogg
snd_page_enemies.ogg
snd_page_enemies2.ogg
snd_palette_page2.ogg
snd_paloma_move.ogg
snd_panel_close.ogg
snd_panel_derecho.ogg
snd_panel_izquierdo_move.ogg
snd_panel_open.ogg
snd_panel_right_move.ogg
snd_panel_superior.ogg
snd_pase_bloque.ogg
snd_pase_bloque_sonido.ogg
snd_pass_carditems.ogg
snd_pausa.ogg
snd_pballon.ogg
snd_pballon_c.ogg
snd_pballon_item.ogg
snd_pink_coin1.ogg
snd_pink_coin2.ogg
snd_pink_coin3.ogg
snd_pink_coin4.ogg
snd_pink_coin5.ogg
snd_play_start_create.ogg
snd_pmeter.ogg
snd_podoboo.ogg
snd_pow.ogg
snd_powerup.ogg
snd_powerup_cap.ogg
snd_remove_hongo.ogg
snd_remove_hongo_enemigos.ogg
snd_remove_wings.ogg
snd_rieles.ogg
snd_rocket_count.ogg
snd_rocket_go.ogg
snd_rotten.ogg
snd_salir_del_nivel.ogg
snd_seleccion_entorno1.ogg
snd_select_guardabot.ogg
snd_select_sounds.ogg
snd_select_tile.ogg
snd_settings_aceptar_move.ogg
snd_settings_move.ogg
snd_settings_player_move.ogg
snd_shell_drybones_down.ogg
snd_shell_drybones_in.ogg
snd_skewer1.ogg
snd_skewer2.ogg
snd_skewer4.ogg
snd_skewer5.ogg
snd_skid.ogg
snd_soplete.ogg
snd_spin.ogg
snd_spinstomp.ogg
snd_spit.ogg
snd_spring.ogg
snd_sprout.ogg
snd_starman.ogg
snd_step_enemy.ogg
snd_step_enemy_1up.ogg
snd_stomp.ogg
snd_super_experto.ogg
snd_swim.ogg
snd_switchalert.ogg
snd_switchsong.ogg
snd_thwomp_original.ogg
snd_timedown.ogg
snd_timeup.ogg
snd_titlemusic.ogg
snd_titlemusic_modern.ogg
snd_titlemusic_night.ogg
snd_titlemusic_smw.ogg
snd_toad_voice.ogg
snd_toadette_voice.ogg
snd_trayectoria.ogg
snd_tread_boss.ogg
snd_volver_a_empezar.ogg
snd_volver_posicion.ogg
snd_warp.ogg
snd_whistle.ogg
snd_wrong.ogg
snd_yoshi.ogg
snd_yoshi_eat.ogg
snd_yoshi_golpe.ogg
snd_yoshi_lick.ogg
snd_yoshi_spit.ogg
spr_NSMBU_clown_bounce.ogg

Sharing

General

Malware Config

Signatures

Files

336d8057d1db03e5a3ac3b62e8902f4b

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:cf:3e:00:00:00:00:00:0fCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:06:94:2d:00:00:00:00:00:09Certificate

Extended Key Usages

Key Usages

bd:1c:4f:ec:4a:e7:0c:11:ef:6d:b7:89:8e:6a:4a:de:c2:22:ed:47Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

gdi32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.data Size: 57KB - Virtual size: 148KB

.pdata Size: 39KB - Virtual size: 38KB

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 13KB - Virtual size: 12KB

65c9ccfc2f670a3fb5013427dee7e5fb

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 6KB - Virtual size: 221KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 116B

a66fe83a09391aaa5e5e274956e89072

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

rpcrt4

wininet

d3d11

dbghelp

winmm

ws2_32

gdiplus

comctl32

version

mfplat

mf

iphlpapi

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:06:94:2d:00:00:00:00:00:09
Certificate

bd:1c:4f:ec:4a:e7:0c:11:ef:6d:b7:89:8e:6a:4a:de:c2:22:ed:47
Signer

.text
Size: 2.2MB - Virtual size: 2.2MB

.data
Size: 57KB - Virtual size: 148KB

.pdata
Size: 39KB - Virtual size: 38KB

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 13KB - Virtual size: 12KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 6KB - Virtual size: 221KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 116B

.text
Size: 8.9MB - Virtual size: 8.9MB

.rdata
Size: 2.1MB - Virtual size: 2.1MB

.data
Size: 467KB - Virtual size: 2.8MB

.pdata
Size: 413KB - Virtual size: 413KB

minATL
Size: 512B - Virtual size: 24B

_RDATA
Size: 512B - Virtual size: 244B

.mydata
Size: 512B - Virtual size: 24B

.rsrc
Size: 49KB - Virtual size: 49KB