7d202a5f087c9330991e8246e0eac40441d67c098901aab9fe4d915952ea477a

Sharing

Copy URL Twitter E-mail

General

Target

7d202a5f087c9330991e8246e0eac40441d67c098901aab9fe4d915952ea477a
Size

15.0MB
MD5

90bb3f9d0cc6ff17e1bf3b89caf87630
SHA1

28b7c6997d2b7187aefdf727224e4afceb3ea97b
SHA256

7d202a5f087c9330991e8246e0eac40441d67c098901aab9fe4d915952ea477a
SHA512

fe3e4b700c47ed608e634cb09fd828bef9e144f2a4221644ef433e2e986080daca2db04fc7aa7d8e9bc4d0dd0f83a1cb26e863f5e11c7aa63478a2cc5e7c6074
SSDEEP

196608:87ij1/W9XjX0o6qT5Ll7kXKI5zl2MDOtCiohRQ:87594o6P2MKTuRQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d202a5f087c9330991e8246e0eac40441d67c098901aab9fe4d915952ea477a

Files

7d202a5f087c9330991e8246e0eac40441d67c098901aab9fe4d915952ea477a
.exe windows:6 windows x86 arch:x86

b2c77668dca8bd1c03cc79273bef2118

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
FindClose
FindNextFileA
FindFirstFileA
SetFileAttributesA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WaitForSingleObject
WriteConsoleW
SetEndOfFile
HeapSize
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
HeapReAlloc
SetStdHandle
GetTimeZoneInformation
FlushFileBuffers
CreateProcessW
GetExitCodeProcess
GetFileAttributesExW
MoveFileExW
DeleteFileW
CreateDirectoryW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetProductInfo
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
Sleep
GetDriveTypeW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedPushEntrySList
RaiseException
RtlUnwind
GetFileSizeEx
VerifyVersionInfoA
VerSetConditionMask
WaitForMultipleObjects
GetFileType
GetStdHandle
GetEnvironmentVariableA
MoveFileExA
SleepEx
FormatMessageW
SetLastError
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
TerminateProcess
UnhandledExceptionFilter
GetCPInfo
IsProcessorFeaturePresent
GetDateFormatW
GlobalMemoryStatusEx
GetSystemInfo
GetLastError
ReadProcessMemory
GetCurrentProcess
Module32Next
Module32First
GetCurrentProcessId
CreateToolhelp32Snapshot
GetTickCount
GetCurrentDirectoryW
MultiByteToWideChar
HeapFree
GetProcessHeap
GetSystemFirmwareTable
MoveFileA
GetCurrentDirectoryA
lstrlenA
GetPrivateProfileStringA
LoadLibraryA
GetCurrentThread
DeleteFileA
GetModuleFileNameA
GetFileInformationByHandle
GlobalFree
GetSystemTimeAsFileTime
LCMapStringEx
InitializeCriticalSectionEx
DecodePointer
EncodePointer
GetStringTypeW
GetExitCodeThread
WaitForSingleObjectEx
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
QueryPerformanceFrequency
GetCurrentThreadId
SleepConditionVariableSRW
WakeAllConditionVariable
HeapValidate
QueryPerformanceCounter
ReleaseSemaphore
GetLocaleInfoA
CompareStringA
WideCharToMultiByte
GlobalLock
GlobalUnlock
FreeLibrary
GetVersionExA
GetSystemDirectoryA
OutputDebugStringA
WinExec
GetModuleHandleA
SetUnhandledExceptionFilter
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetFileSize
GlobalAlloc
CreateDirectoryA
GetModuleFileNameW
lstrlenW
WaitNamedPipeW
CreateFileW
PeekNamedPipe
WriteFile
ReadFile
HeapAlloc
CloseHandle
DeviceIoControl
GetFullPathNameW
CreateFileA

user32

DispatchMessageA
TranslateMessage
GetKeyboardLayoutNameA
GetKeyboardLayout
OpenClipboard
GetClipboardData
CharNextW
CharNextExA
CharPrevExA
LoadStringA
MessageBoxA
EnumDisplayDevicesA
GetSystemMetrics
GetCapture
ChangeDisplaySettingsA
ReleaseCapture
SetCapture
SetCursorPos
SetCursor
ShowCursor
DestroyCursor
LoadImageA
GetKeyState
SystemParametersInfoA
SetWindowPos
LoadIconA
FindWindowA
ScreenToClient
GetCursorPos
PostQuitMessage
SetRect
OffsetRect
ClientToScreen
PeekMessageA
ReleaseDC
FillRect
GetDC
InvalidateRect
UnregisterClassA
DestroyWindow
IsWindow
MoveWindow
SetFocus
UpdateWindow
ShowWindow
GetClientRect
CreateWindowExA
RegisterClassExA
DefWindowProcA
CloseClipboard
GetMessageA
LoadCursorA
SetWindowLongA
GetWindowLongA
AdjustWindowRectEx
GetMenu
RegisterClassA

gdi32

EnumFontFamiliesExA
StretchBlt
GetTextExtentPoint32A
DeleteObject
CreateSolidBrush
CreateFontIndirectA
GetCharABCWidthsFloatW
GetTextExtentPoint32W
SelectObject
SetBkColor
SetTextColor
TextOutW
DeleteDC
TextOutA
CreateDIBSection
GetStockObject
SetBkMode
CreateCompatibleDC

advapi32

CryptGenRandom
CryptCreateHash
RegCreateKeyExW
RegOpenKeyExA
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
RegQueryValueExA
RegOpenKeyA
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW

ole32

CoInitialize
CoCreateInstance
CoInitializeEx
CoUninitialize

winmm

timeGetTime
timeBeginPeriod
timeEndPeriod
timeGetDevCaps

d3d8

Direct3DCreate8

python27

PyEval_MergeCompilerFlags
PyExc_AssertionError
PyClassMethod_New
PyDescr_NewClassMethod
PyCFunction_Type
PyMethod_Type
PyLong_FromString
PyNumber_InPlaceMultiply
PyInt_Type
PyNumber_Xor
PyNumber_Lshift
PyList_Sort
PySet_Pop
PyNumber_Index
Py_Initialize
PyNumber_Subtract
PyNumber_Add
PyObject_GetIter
PyObject_SetItem
PyObject_GetItem
PyObject_Size
PyObject_CallFunctionObjArgs
PyObject_Call
Py_GetVersion
PyOS_snprintf
PyErr_Format
PyErr_NormalizeException
PyErr_ExceptionMatches
PyErr_GivenExceptionMatches
PyErr_SetObject
PyErr_WarnEx
PyTraceBack_Here
PyMethod_New
PyCFunction_Call
PyDict_Copy
PyDict_GetItem
PyTuple_Pack
_PyString_Eq
PyString_FromFormat
PyInt_AsSsize_t
PyInt_FromSsize_t
PyUnicodeUCS2_Compare
PyObject_GC_Del
PyExc_UnboundLocalError
PyObject_GC_Track
_PyObject_GC_New
PyObject_ClearWeakRefs
PyObject_IsTrue
PyObject_SetAttr
PyObject_SetAttrString
PyObject_RichCompare
PyType_Ready
PyType_IsSubtype
PyEval_GetBuiltins
PyMem_Realloc
PyMem_Malloc
PyInt_FromString
PyNumber_Absolute
PyNumber_Negative
PyNumber_InPlaceAdd
PyErr_Restore
PyDict_Items
PySequence_GetSlice
PyNumber_Divide
PyDict_Type
PyFloat_Type
PyUnicode_Type
PySequence_Tuple
PyNumber_InPlaceSubtract
PyNumber_And
PyObject_DelItem
PyObject_CallMethodObjArgs
PyImport_ReloadModule
PySys_GetObject
PyFile_WriteString
PyFile_SoftSpace
PyFile_WriteObject
PyTuple_GetSlice
PyString_Size
PyFloat_FromString
PyExc_GeneratorExit
PyNumber_Multiply
PyIter_Next
_PyObject_CallMethod_SizeT
_PyObject_CallFunction_SizeT
PyArg_UnpackTuple
PyErr_WriteUnraisable
PyErr_SetNone
PyObject_GenericGetAttr
Py_SetProgramName
PyNumber_Divmod
PyDict_Contains
PyObject_SelfIter
PySet_Add
PySet_New
_PyThreadState_Current
PyExc_TypeError
PyExc_NameError
PyExc_ImportError
PyExc_AttributeError
PyExc_BaseException
PyObject_Dir
PyErr_Fetch
PyModule_GetDict
PyDict_SetItemString
_Py_NoneStruct
PyNumber_Check
PyObject_CallObject
PyErr_BadArgument
PyErr_Clear
PyString_AsString
PyMem_Free
PyExc_ZeroDivisionError
PyFloat_AsDouble
PyCallable_Check
PyObject_GetAttr
PyObject_GetAttrString
PyString_InternFromString
PyErr_Print
Py_BuildValue
PyErr_SetString
PyExc_RuntimeError
PyTuple_GetItem
PyInt_AsLong
PyList_New
PyString_FromString
PyList_Append
Py_InitModule4
PyModule_AddIntConstant
PyTuple_Size
PyDict_GetItemString
PyLong_AsLong
PyTraceBack_Type
PyClass_Type
PySet_Type
PyList_Type
PyTuple_Type
PyString_Type
_Py_TrueStruct
_Py_ZeroStruct
PyFrame_New
PyObject_IsInstance
PySequence_Contains
PySequence_DelSlice
PyObject_GC_UnTrack
PyTuple_SetItem
Py_Finalize
PyRun_StringFlags
PyImport_AddModule
PyEval_EvalCode
Py_OptimizeFlag
Py_NoSiteFlag
Py_IgnoreEnvironmentFlag
PyCode_Type
PyUnicodeUCS2_DecodeUTF8
PyInt_FromLong
PyFloat_FromDouble
PyString_FromStringAndSize
PyDict_New
PyDict_SetItem
PyErr_NoMemory
PyCode_New
PyExc_StopIteration
PyExc_ValueError
PyDict_Size
PyDict_Next
PyArg_ParseTuple
PyErr_Occurred
PyImport_GetModuleDict
PyTuple_New
PyExc_SystemError
PyModule_AddStringConstant
PyUnicodeUCS2_AsUTF8String
PyImport_ImportModule
PyNumber_Remainder

libcef

cef_string_utf8_clear
cef_string_utf16_clear
cef_string_utf8_to_utf16
cef_string_utf16_to_utf8
cef_string_utf16_cmp
cef_string_multimap_free
cef_string_multimap_alloc
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_browser_host_create_browser
cef_command_line_get_global
cef_string_map_free
cef_string_map_alloc
cef_v8context_get_current_context
cef_log
cef_api_hash
cef_run_message_loop
cef_shutdown
cef_initialize
cef_execute_process
cef_register_extension
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_string_utf16_set

iphlpapi

GetAdaptersInfo
GetPerAdapterInfo

devil

ilInit
ilSetPixels
ilTexImage
ilSave
ilShutDown
ilDeleteImages
ilCopyPixels
ilConvertImage
ilGetInteger
ilLoad
ilOriginFunc
ilEnable
ilBindImage
ilGenImages

imm32

ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmIsIME
ImmGetIMEFileNameA
ImmNotifyIME

ws2_32

WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
select
freeaddrinfo
getaddrinfo
listen
accept
WSAIoctl
WSASetLastError
setsockopt
getsockopt
getsockname
__WSAFDIsSet
recvfrom
getpeername
bind
connect
sendto
ioctlsocket
gethostname
gethostbyname
ntohs
ntohl
inet_addr
htons
htonl
WSACleanup
WSAStartup
WSAGetLastError
socket
send
recv
closesocket

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

imagehlp

StackWalk
EnumerateLoadedModules
GetTimestampForLoadedLibrary

granny2

_GrannyNewMeshDeformer@16
_GrannyCopyMeshIndices@12
_GrannyGetMeshVertices@4
_GrannySetLogCallback@4
_GrannyGetMaterialTextureByType@8
_GrannyFindMatchingMember@16
_GrannyConvertSingleObject@20
_GrannyReadEntireFileFromMemory@8
_GrannyFreeFileSection@8
_GrannyFreeFile@4
_GrannyGetFileInfo@4
_GrannyGetSourceSkeleton@4
_GrannySetModelClock@8
_GrannyFreeCompletedModelControls@4
_GrannySampleModelAnimationsAccelerated@20
_GrannyUpdateModelMatrix@20
_GrannyNewLocalPose@4
_GrannyFreeLocalPose@4
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyInstantiateModel@4
_GrannyFreeModelInstance@4
_GrannyNewMeshBinding@12
_GrannyFreeMeshBinding@4
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFindBoneByName@12
_GrannyNewWorldPose@4
_GrannyFreeWorldPose@4
_GrannyGetWorldPose4x4@8
_GrannyGetWorldPoseComposite4x4@8
_GrannyGetTotalTypeSize@4
_GrannyGetMeshVertexCount@4
_GrannyMeshIsRigid@4
_GrannyGetMeshIndexCount@4
_GrannyFreeControl@4
_GrannyFreeControlOnceUnused@4
_GrannyCompleteControlAt@8
_GrannyFreeMeshDeformer@4
_GrannyDeformVertices@24
GrannyPNT332VertexType
_GrannyCopyMeshVertices@12
_GrannyControlIsComplete@4
_GrannyGetMeshVertexType@4
_GrannyGetMeshTriangleGroups@4
_GrannyGetMeshTriangleGroupCount@4
_GrannyPlayControlledAnimation@12
_GrannySetControlRawLocalClock@8
_GrannyGetControlRawLocalClock@4
_GrannySetControlEaseOutCurve@28
_GrannySetControlEaseOut@8
_GrannySetControlEaseInCurve@28
_GrannyFreeControlIfComplete@4
_GrannyGetControlLoopCount@4
_GrannySetControlLoopCount@8
_GrannyGetControlSpeed@4
_GrannySetControlSpeed@8
_GrannyGetControlLocalDuration@4
_GrannySetControlEaseIn@8

mss32

_AIL_startup@0
_AIL_file_read@8
_AIL_set_file_callbacks@16
_AIL_WAV_info@8
_AIL_decompress_ASI@24
_AIL_decompress_ADPCM@12
_AIL_file_type@8
_AIL_open_digital_driver@16
_AIL_open_stream@12
_AIL_close_digital_driver@4
_AIL_enumerate_3D_providers@12
_AIL_open_3D_provider@4
_AIL_close_3D_provider@4
_AIL_auto_update_3D_position@8
_AIL_3D_sample_volume@4
_AIL_3D_sample_status@4
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
_AIL_end_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_start_3D_sample@4
_AIL_release_3D_sample_handle@4
_AIL_allocate_3D_sample_handle@4
_AIL_sample_volume_pan@12
_AIL_sample_status@4
_AIL_set_sample_loop_count@8
_AIL_set_sample_volume_pan@12
_AIL_end_sample@4
_AIL_resume_sample@4
_AIL_stop_sample@4
_AIL_start_sample@4
_AIL_set_sample_file@12
_AIL_init_sample@4
_AIL_release_sample_handle@4
_AIL_allocate_sample_handle@4
_AIL_last_error@0
_AIL_stream_status@4
_AIL_set_stream_loop_count@8
_AIL_stream_volume_levels@12
_AIL_set_stream_volume_levels@12
_AIL_pause_stream@8
_AIL_start_stream@4
_AIL_close_stream@4
_AIL_set_redist_directory@4
_AIL_shutdown@0
_AIL_set_3D_orientation@28
_AIL_set_3D_velocity@20
_AIL_set_3D_position@16
_AIL_close_3D_listener@4
_AIL_open_3D_listener@4
_AIL_mem_free_lock@4

speedtreert

?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetTime@CSpeedTreeRT@@SAXM@Z

dinput8

DirectInput8Create

ddraw

DirectDrawCreate

shell32

SHGetSpecialFolderPathA

oleaut32

VariantClear
SysFreeString

crypt32

CertCreateCertificateChainEngine
CertFindExtension
CertGetNameStringA
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertOpenStore
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CryptQueryObject

wldap32

ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord41
ord50
ord45
ord60
ord211
ord22
ord143
ord217
ord46

normaliz

IdnToAscii

Exports

Exports

initacceptguildwardialog
initatlaswindow
initattachstonedialog
initauctionwindow
initauctionwindow_listpage
initauctionwindow_registerpage
initauctionwindow_uniqueauctionpage
initbeltinventorywindow
initbetter_profanity
initbetter_profanity_constants
initbetter_profanity_utils
initbetter_profanity_varying_string
initbuildguildbuildingwindow
initchangegradenamedialog
initchangepassworddialog
initcharacterwindow
initcolorinfo
initconnectingdialog
initconsolemodule
initconstinfo
initcostumewindow
initcreatecharacterwindow
initcuberesultwindow
initcubewindow
initdebugInfo
initdeclareguildwardialog
initdragon_soul_refine_settings
initdragonsoulrefinewindow
initdragonsoulwindow
initemotion
initenergybar
initequipmentdialog
initexception
initexchangedialog
initexpandedtaskbar
initfishingwindow
initgame
initgameoptiondialog
initgameoptiondialog_formobile
initgamewindow
initgiftbox
initguildwindow
initguildwindow_baseinfopage
initguildwindow_boardpage
initguildwindow_gradepage
initguildwindow_guildinfopage
initguildwindow_guildinfopage_eu
initguildwindow_guildinfopage_jp
initguildwindow_guildskillpage
initguildwindow_memberpage
inithelper_gm_info
inithelpwindow
inithelpwindow2
initinputdialog
initinputdialogwithdescription
initinputdialogwithdescription2
initinputdialogwithdescription_new
initinterfacemodule
initintroLogo
initintrocreate
initintroempire
initintroloading
initintrologin
initintroselect
initinventorywindow
initloadingwindow
initlocaleinfo
initloginwindow
initmallwindow
initmarklistwindow
initmessengerwindow
initminimap
initmoneyinputdialog
initmousebuttonwindow
initmousemodule
initmusicinfo
initmusiclistwindow
initnetworkmodule
initpartymemberinfoboard
initpassworddialog
initpenaltywindow
initpickmoneydialog
initplayersettingmodule
initpopupdialog
initprivateshopbuilder
initprototype
initquestdialog
initquestiondialog
initquestiondialog2
initrefinedialog
initrestartdialog
initrightmousebuttonwindow
initsafeboxwindow
initselectcharacterwindow
initselectempirewindow
initselectitemwindow
initservercommandparser
initserverinfo
initshopdialog
initskillpointresetdialog
initstringcommander
initsvsideoi
initsystem
initsystemdialog
initsystemdialog_formall
initsystemdialog_forportal
initsystemoptiondialog
inittaskbar
initui
inituiadminhelper
inituiaffectshower
inituiattachmetin
inituicharacter
inituichat
inituicommon
inituicube
inituidragonsoul
inituiequipmentdialog
inituiexchange
inituifarm
inituigamebutton
inituigameoption
inituiguild
inituihelp
inituihelpergminfo
inituiinventory
inituimapnameshower
inituimessenger
inituiminimap
inituiparty
inituipenalty
inituiphasecurtain
inituipickmoney
inituiplayergauge
inituipointreset
inituiprivateshopbuilder
inituiquest
inituirefine
inituirestart
inituisafebox
inituiscriptlocale
inituiselectitem
inituiselectmusic
inituishop
inituisystem
inituisystemoption
inituitarget
inituitaskbar
inituitip
inituitooltip
inituiuploadmark
inituiweb
inituiwhisper
initutils
initwebwindow
initwhisperdialog

Sections

.text
Size: 11.8MB - Virtual size: 11.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 700KB - Virtual size: 699KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2c77668dca8bd1c03cc79273bef2118

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

winmm

d3d8

python27

libcef

iphlpapi

devil

imm32

ws2_32

version

imagehlp

granny2

mss32

speedtreert

dinput8

ddraw

shell32

oleaut32

crypt32

wldap32

normaliz

Exports

Exports

Sections

.text Size: 11.8MB - Virtual size: 11.8MB

.rdata Size: 700KB - Virtual size: 699KB

.data Size: 1.3MB - Virtual size: 1.9MB

.data1 Size: 2KB - Virtual size: 2KB

.rsrc Size: 45KB - Virtual size: 44KB

.reloc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 11.8MB - Virtual size: 11.8MB

.rdata
Size: 700KB - Virtual size: 699KB

.data
Size: 1.3MB - Virtual size: 1.9MB

.data1
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 45KB - Virtual size: 44KB

.reloc
Size: 1.2MB - Virtual size: 1.2MB