LEAGUESKIN_8[.]16[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

LEAGUESKIN_8.16.zip
Size

2.0MB
MD5

6f186482f9ea1ddaf24117aa4eee8178
SHA1

3b20848a7ee3623cd529a8db30fa13330e303ef1
SHA256

ec53f258eed0317da294d3d4aa3d7cafdb7252d3dbc904888cf3b3cb69fa5b0a
SHA512

5bf3d270b3f413b5e213d2e99426d1bcc61bfe50adef0a7b5a17a47383a5f944732e25c594ce73a266a6ca560d9083100e2693620f96aab81c771ccd064f6be4
SSDEEP

49152:4giQGzIuATUUVTfKkb1xfRo4bNTM1GEQo+Q+ZXwFX:ZiQG7qpT11ZR7bNqDbiXwFX

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Fraps/LOLPRO.exe
unpack002/Fraps/data/Lib/Lib
unpack002/Fraps/data/Lib/Lib2.dll
unpack001/LOLPRO 9.5.3.exe

Files

LEAGUESKIN_8.16.zip
.zip
Data.lol
.zip
Fraps/LOLPRO.exe
.exe windows:5 windows x86 arch:x86

263ffb3e571697dc7865eb5e2fee0e5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
GetFileSize
DuplicateHandle
FindClose
GetVolumeInformationW
GetFullPathNameW
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
SetErrorMode
GetTickCount
GetStartupInfoW
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
DeleteFileA
MoveFileA
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
SetStdHandle
GetFileType
ExitProcess
ExitThread
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnlockFile
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
LockFile
FlushFileBuffers
InterlockedIncrement
GlobalFlags
FileTimeToSystemTime
GetThreadLocale
lstrlenA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
WritePrivateProfileStringW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
GlobalAlloc
InterlockedDecrement
GlobalFree
GetCurrentProcessId
GetModuleFileNameW
GlobalLock
GlobalUnlock
MulDiv
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
SetFileAttributesW
LocalFree
FormatMessageW
GetCurrentProcess
WritePrivateProfileStringA
GetPrivateProfileStringA
FindNextFileW
FindFirstFileW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
TerminateProcess
WaitForSingleObject
CreateFileW
ReadFile
GetFileAttributesW
WriteFile
SetFilePointer
TerminateThread
DeleteFileW
GetModuleHandleA
GetWindowsDirectoryW
OpenProcess
Sleep
SetLastError
FreeLibrary
GetLastError
CreateThread
CloseHandle
CopyFileW
MapViewOfFile
CreateFileMappingW
ReadProcessMemory
VirtualQueryEx
LoadLibraryW
MultiByteToWideChar
GetProcAddress
GetModuleHandleW
WideCharToMultiByte
LockResource
SizeofResource
LoadResource
FindResourceW
lstrlenW
RaiseException
InterlockedExchange
LeaveCriticalSection
GetCommandLineW
EnterCriticalSection

user32

PostThreadMessageW
GetNextDlgGroupItem
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
ReleaseCapture
SetCapture
CharUpperW
UnregisterClassW
LoadCursorW
GetSysColorBrush
DestroyMenu
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
EnableWindow
GetDC
SendMessageW
ReleaseDC
GetKeyState
SetMenu
SetForegroundWindow
UpdateWindow
PostMessageW
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
RegisterClipboardFormatW
GetSysColor
AdjustWindowRectEx
IsDialogMessageW
InvalidateRect
RedrawWindow
MessageBoxW
LoadIconW
FindWindowW
GetWindowThreadProcessId
SetWindowsHookExW
UnhookWindowsHookEx
GetWindow
GetSystemMenu
AppendMenuW
GetWindowRect
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
IsWindowVisible
MessageBeep
GetSubMenu
GetParent
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongW
GetWindowLongW
GetMenu
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
PtInRect
CopyRect
EqualRect
GetActiveWindow

gdi32

GetDeviceCaps
CreateFontIndirectW
ExtSelectClipRgn
GetMapMode
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateRectRgnIndirect
DeleteDC
GetWindowExtEx
GetViewportExtEx
SetMapMode
SetStretchBltMode
RestoreDC
SaveDC
CreateBitmap
GetClipBox
GetStockObject
RemoveFontResourceW
CreateFontW
AddFontResourceW
SetBkColor
SetBkMode
SetTextColor
CreateSolidBrush
CreateCompatibleBitmap
GetObjectW
SetDIBColorTable
SelectObject
StretchBlt
DeleteObject
CreateDIBSection
CreateCompatibleDC

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteExW

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathIsDirectoryW
PathFindExtensionW

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
CreateStreamOnHGlobal
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
SysStringLen

gdiplus

GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipBitmapLockBits
GdipFree
GdipAlloc
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI

ws2_32

freeaddrinfo
getaddrinfo
WSAStartup
recv
send
closesocket
connect
WSACleanup
socket

wininet

InternetCloseHandle
InternetOpenUrlW
InternetSetOptionW
InternetReadFile
InternetOpenW

uxtheme

SetWindowTheme

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Sections

.text
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fraps/data/80/aatrox.jpg
.jpg
Fraps/data/80/ahri.jpg
.jpg
Fraps/data/80/akali.jpg
.jpg
Fraps/data/80/alistar.jpg
.jpg
Fraps/data/80/amumu.jpg
.jpg
Fraps/data/80/anivia.jpg
.jpg
Fraps/data/80/annie.jpg
.jpg
Fraps/data/80/ashe.jpg
.jpg
Fraps/data/80/aurelionsol.jpg
.jpg
Fraps/data/80/azir.jpg
.jpg
Fraps/data/80/bard.jpg
.jpg
Fraps/data/80/blitzcrank.jpg
.jpg
Fraps/data/80/brand.jpg
.jpg
Fraps/data/80/braum.jpg
.jpg
Fraps/data/80/caitlyn.jpg
.jpg
Fraps/data/80/camille.jpg
.jpg
Fraps/data/80/cassiopeia.jpg
.jpg
Fraps/data/80/chogath.jpg
.jpg
Fraps/data/80/corki.jpg
.jpg
Fraps/data/80/darius.jpg
.jpg
Fraps/data/80/diana.jpg
.jpg
Fraps/data/80/draven.jpg
.jpg
Fraps/data/80/drmundo.jpg
.jpg
Fraps/data/80/ekko.jpg
.jpg
Fraps/data/80/elise.jpg
.jpg
Fraps/data/80/evelynn.jpg
.jpg
Fraps/data/80/ezreal.jpg
.jpg
Fraps/data/80/fiddlesticks.jpg
.jpg
Fraps/data/80/fiora.jpg
.jpg
Fraps/data/80/fizz.jpg
.jpg
Fraps/data/80/galio.jpg
.jpg
Fraps/data/80/gangplank.jpg
.jpg
Fraps/data/80/garen.jpg
.jpg
Fraps/data/80/gnar.jpg
.jpg
Fraps/data/80/gragas.jpg
.jpg
Fraps/data/80/graves.jpg
.jpg
Fraps/data/80/hecarim.jpg
.jpg
Fraps/data/80/heimerdinger.jpg
.jpg
Fraps/data/80/illaoi.jpg
.jpg
Fraps/data/80/irelia.jpg
.jpg
Fraps/data/80/ivern.jpg
.jpg
Fraps/data/80/janna.jpg
.jpg
Fraps/data/80/jarvaniv.jpg
.jpg
Fraps/data/80/jax.jpg
.jpg
Fraps/data/80/jayce.jpg
.jpg
Fraps/data/80/jhin.jpg
.jpg
Fraps/data/80/jinx.jpg
.jpg
Fraps/data/80/kaisa.jpg
.jpg
Fraps/data/80/kalista.jpg
.jpg
Fraps/data/80/karma.jpg
.jpg
Fraps/data/80/karthus.jpg
.jpg
Fraps/data/80/kassadin.jpg
.jpg
Fraps/data/80/katarina.jpg
.jpg
Fraps/data/80/kayle.jpg
.jpg
Fraps/data/80/kayn.jpg
.jpg
Fraps/data/80/kennen.jpg
.jpg
Fraps/data/80/khazix.jpg
.jpg
Fraps/data/80/kindred.jpg
.jpg
Fraps/data/80/kled.jpg
.jpg
Fraps/data/80/kogmaw.jpg
.jpg
Fraps/data/80/leblanc.jpg
.jpg
Fraps/data/80/leesin.jpg
.jpg
Fraps/data/80/leona.jpg
.jpg
Fraps/data/80/lissandra.jpg
.jpg
Fraps/data/80/lucian.jpg
.jpg
Fraps/data/80/lulu.jpg
.jpg
Fraps/data/80/lux.jpg
.jpg
Fraps/data/80/malphite.jpg
.jpg
Fraps/data/80/malzahar.jpg
.jpg
Fraps/data/80/maokai.jpg
.jpg
Fraps/data/80/masteryi.jpg
.jpg
Fraps/data/80/missfortune.jpg
.jpg
Fraps/data/80/monkeyking.jpg
.jpg
Fraps/data/80/mordekaiser.jpg
.jpg
Fraps/data/80/morgana.jpg
.jpg
Fraps/data/80/nami.jpg
.jpg
Fraps/data/80/nasus.jpg
.jpg
Fraps/data/80/nautilus.jpg
.jpg
Fraps/data/80/neeko.jpg
.jpg
Fraps/data/80/nidalee.jpg
.jpg
Fraps/data/80/nocturne.jpg
.jpg
Fraps/data/80/nunu.jpg
.jpg
Fraps/data/80/olaf.jpg
.jpg
Fraps/data/80/orianna.jpg
.jpg
Fraps/data/80/ornn.jpg
.jpg
Fraps/data/80/pantheon.jpg
.jpg
Fraps/data/80/poppy.jpg
.jpg
Fraps/data/80/pyke.jpg
.jpg
Fraps/data/80/quinn.jpg
.jpg
Fraps/data/80/rakan.jpg
.jpg
Fraps/data/80/rammus.jpg
.jpg
Fraps/data/80/reksai.jpg
.jpg
Fraps/data/80/renekton.jpg
.jpg
Fraps/data/80/rengar.jpg
.jpg
Fraps/data/80/riven.jpg
.jpg
Fraps/data/80/rumble.jpg
.jpg
Fraps/data/80/ryze.jpg
.jpg
Fraps/data/80/sejuani.jpg
.jpg
Fraps/data/80/shaco.jpg
.jpg
Fraps/data/80/shen.jpg
.jpg
Fraps/data/80/shyvana.jpg
.jpg
Fraps/data/80/singed.jpg
.jpg
Fraps/data/80/sion.jpg
.jpg
Fraps/data/80/sivir.jpg
.jpg
Fraps/data/80/skarner.jpg
.jpg
Fraps/data/80/sona.jpg
.jpg
Fraps/data/80/soraka.jpg
.jpg
Fraps/data/80/swain.jpg
.jpg
Fraps/data/80/sylas.jpg
.jpg
Fraps/data/80/syndra.jpg
.jpg
Fraps/data/80/tahmkench.jpg
.jpg
Fraps/data/80/taliyah.jpg
.jpg
Fraps/data/80/talon.jpg
.jpg
Fraps/data/80/taric.jpg
.jpg
Fraps/data/80/teemo.jpg
.jpg
Fraps/data/80/thresh.jpg
.jpg
Fraps/data/80/tristana.jpg
.jpg
Fraps/data/80/trundle.jpg
.jpg
Fraps/data/80/tryndamere.jpg
.jpg
Fraps/data/80/twistedfate.jpg
.jpg
Fraps/data/80/twitch.jpg
.jpg
Fraps/data/80/udyr.jpg
.jpg
Fraps/data/80/urgot.jpg
.jpg
Fraps/data/80/varus.jpg
.jpg
Fraps/data/80/vayne.jpg
.jpg
Fraps/data/80/veigar.jpg
.jpg
Fraps/data/80/velkoz.jpg
.jpg
Fraps/data/80/vi.jpg
.jpg
Fraps/data/80/viktor.jpg
.jpg
Fraps/data/80/vladimir.jpg
.jpg
Fraps/data/80/volibear.jpg
.jpg
Fraps/data/80/warwick.jpg
.jpg
Fraps/data/80/xayah.jpg
.jpg
Fraps/data/80/xerath.jpg
.jpg
Fraps/data/80/xinzhao.jpg
.jpg
Fraps/data/80/yasuo.jpg
.jpg
Fraps/data/80/yorick.jpg
.jpg
Fraps/data/80/zac.jpg
.jpg
Fraps/data/80/zed.jpg
.jpg
Fraps/data/80/ziggs.jpg
.jpg
Fraps/data/80/zilean.jpg
.jpg
Fraps/data/80/zoe.jpg
.jpg
Fraps/data/80/zyra.jpg
.jpg
Fraps/data/CardWait.jpg
.jpg
Fraps/data/Default/All.ini
Fraps/data/Default/Blank.ini
Fraps/data/Default/Config.ini
Fraps/data/Default/Language.ini
Fraps/data/Default/SkinCustom.ini
Fraps/data/Default/chromas.ini
Fraps/data/Default/data_AR.ini
Fraps/data/Default/data_BR.ini
Fraps/data/Default/data_CN.ini
Fraps/data/Default/data_CZ.ini
Fraps/data/Default/data_DE.ini
Fraps/data/Default/data_ES.ini
Fraps/data/Default/data_FR.ini
Fraps/data/Default/data_GR.ini
Fraps/data/Default/data_HU.ini
Fraps/data/Default/data_ID.ini
Fraps/data/Default/data_IT.ini
Fraps/data/Default/data_JP.ini
Fraps/data/Default/data_KR.ini
Fraps/data/Default/data_PL.ini
Fraps/data/Default/data_RO.ini
Fraps/data/Default/data_RU.ini
Fraps/data/Default/data_TH.ini
Fraps/data/Default/data_TR.ini
Fraps/data/Default/data_TW.ini
Fraps/data/Default/data_VN.ini
Fraps/data/Default/data_en.ini
Fraps/data/Default/name_CN.ini
Fraps/data/Default/name_GR.ini
Fraps/data/Default/name_JP.ini
Fraps/data/Default/name_KR.ini
Fraps/data/Default/name_RU.ini
Fraps/data/Default/name_TW.ini
Fraps/data/Kaisa.jpg
.jpg
Fraps/data/Lib/LOL1.dll
.dll windows:6 windows x86 arch:x86

901cf2a321aa7eb39bd863e73e1f8add

Code Sign

32:64:38:fe:d6:0b:22:c1:d7:41:bd:d2:f9:ab:1d:fc
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

27/08/2015, 00:00

Not After

25/09/2018, 23:59

Subject

CN=Beepa Pty Ltd,O=Beepa Pty Ltd,L=Albert Park,ST=Victoria,C=AU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:18:e8:f0:3b:76:22:90:9f:3d:24:97:67:4d:c4:71:6c:c3:db:bd
Signer

Actual PE Digest

33:18:e8:f0:3b:76:22:90:9f:3d:24:97:67:4d:c4:71:6c:c3:db:bd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
VirtualFree
GetModuleHandleA
CloseHandle
GetCurrentProcessId
GetSystemDirectoryA
GetVersionExA
MapViewOfFileEx
UnmapViewOfFile
DisableThreadLibraryCalls
GetSystemInfo
GetProcAddress
OpenFileMappingA
SetEvent
WaitForSingleObject
CreateMutexA
FreeLibrary
LoadLibraryA
WriteConsoleW
SetFilePointerEx
GetModuleFileNameA
IsBadReadPtr
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
RtlUnwind
VirtualQuery
EncodePointer
IsDebuggerPresent
DecodePointer
GetLastError
SetLastError
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
HeapFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetModuleFileNameW
LoadLibraryExW
HeapAlloc
HeapReAlloc
GetStringTypeW
OutputDebugStringW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
CreateFileW

user32

CallNextHookEx

gdi32

DeleteObject

Exports

Exports

FrapsCount
FrapsFunc
FrapsKey
FrapsProcCALLWND
FrapsProcCBT
FrapsSetup
FrapsSharedData
FrapsVersion

Sections

.text
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fraps/data/Lib/Lib
.dll windows:6 windows x86 arch:x86

c1360b0838aca31a2f33f80e0b5c203d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
CloseHandle
Sleep
TerminateProcess
CreateThread
GetWindowsDirectoryA
VirtualAlloc
VirtualProtect
VirtualQuery
ReadProcessMemory
MapViewOfFile
DisableThreadLibraryCalls
GetModuleHandleA
GetProcAddress
OpenFileMappingA
LoadLibraryA
CreateToolhelp32Snapshot
Process32First
Process32Next
DecodePointer
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ReadFile
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetStdHandle
GetFileType
GetACP
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
CreateFileW
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
RaiseException

user32

CallNextHookEx

shlwapi

PathFileExistsA

Exports

Exports

HidD_FlushQueue
HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetConfiguration
HidD_GetFeature
HidD_GetHidGuid
HidD_GetIndexedString
HidD_GetInputReport
HidD_GetManufacturerString
HidD_GetMsGenreDescriptor
HidD_GetNumInputBuffers
HidD_GetPhysicalDescriptor
HidD_GetPreparsedData
HidD_GetProductString
HidD_GetSerialNumberString
HidD_Hello
HidD_SetConfiguration
HidD_SetFeature
HidD_SetNumInputBuffers
HidD_SetOutputReport
HidP_GetButtonCaps
HidP_GetCaps
HidP_GetData
HidP_GetExtendedAttributes
HidP_GetLinkCollectionNodes
HidP_GetScaledUsageValue
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidP_GetUsageValue
HidP_GetUsageValueArray
HidP_GetUsages
HidP_GetUsagesEx
HidP_GetValueCaps
HidP_InitializeReportForID
HidP_MaxDataListLength
HidP_MaxUsageListLength
HidP_SetData
HidP_SetScaledUsageValue
HidP_SetUsageValue
HidP_SetUsageValueArray
HidP_SetUsages
HidP_TranslateUsagesToI8042ScanCodes
HidP_UnsetUsages
HidP_UsageListDifference
HookProc

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fraps/data/Lib/Lib2.dll
.dll windows:4 windows x86 arch:x86

0bb1f38f62c92aab4983604754d24dfe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OpenFileMappingA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
HeapFree
GetCommandLineA
GetVersion
HeapAlloc
HeapReAlloc
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TerminateProcess
GetCurrentProcess
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
CloseHandle
WriteFile
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetProcAddress
GetModuleHandleA
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
ReadFile
GetACP
GetOEMCP
LoadLibraryA
CreateFileA
GetLocaleInfoW
SetEndOfFile
SetEnvironmentVariableA

Exports

Exports

MD5Hash
ReManifest

Sections

.text
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fraps/data/Lib/clear.zip
.zip
DATA/Menu/Textures/modskinlolvn.com.txt
Fraps/data/Lib/zkhungvien.zip
.zip
DATA/Menu/Textures/modskinlolvn.com.txt
Fraps/data/NotFound.JPG
.jpg
Fraps/data/aatrox.jpg
.jpg
Fraps/data/ahri.jpg
.jpg
Fraps/data/akali.jpg
.jpg
Fraps/data/alistar.jpg
.jpg
Fraps/data/amumu.jpg
.jpg
Fraps/data/anivia.jpg
.jpg
Fraps/data/annie.jpg
.jpg
Fraps/data/ashe.jpg
.jpg
Fraps/data/aurelionsol.jpg
.jpg
Fraps/data/azir.jpg
.jpg
Fraps/data/back.jpg
.jpg
Fraps/data/bard.jpg
.jpg
Fraps/data/blitzcrank.jpg
.jpg
Fraps/data/brand.jpg
.jpg
Fraps/data/braum.jpg
.jpg
Fraps/data/caitlyn.jpg
.jpg
Fraps/data/camille.jpg
.jpg
Fraps/data/cassiopeia.jpg
.jpg
Fraps/data/chogath.jpg
.jpg
Fraps/data/corki.jpg
.jpg
Fraps/data/darius.jpg
.jpg
Fraps/data/diana.jpg
.jpg
Fraps/data/draven.jpg
.jpg
Fraps/data/drmundo.jpg
.jpg
Fraps/data/ekko.jpg
.jpg
Fraps/data/elise.jpg
.jpg
Fraps/data/evelynn.jpg
.jpg
Fraps/data/ezreal.jpg
.jpg
Fraps/data/fiddlesticks.jpg
.jpg
Fraps/data/fiora.jpg
.jpg
Fraps/data/fizz.jpg
.jpg
Fraps/data/font.ttf
Fraps/data/galio.jpg
.jpg
Fraps/data/gangplank.jpg
.jpg
Fraps/data/garen.jpg
.jpg
Fraps/data/gnar.jpg
.jpg
Fraps/data/gragas.jpg
.jpg
Fraps/data/graves.jpg
.jpg
Fraps/data/hecarim.jpg
.jpg
Fraps/data/heimerdinger.jpg
.jpg
Fraps/data/illaoi.jpg
.jpg
Fraps/data/irelia.jpg
.jpg
Fraps/data/ivern.jpg
.jpg
Fraps/data/janna.jpg
.jpg
Fraps/data/jarvaniv.jpg
.jpg
Fraps/data/jax.jpg
.jpg
Fraps/data/jayce.jpg
.jpg
Fraps/data/jhin.jpg
.jpg
Fraps/data/jinx.jpg
.jpg
Fraps/data/kalista.jpg
.jpg
Fraps/data/karma.jpg
.jpg
Fraps/data/karthus.jpg
.jpg
Fraps/data/kassadin.jpg
.jpg
Fraps/data/katarina.jpg
.jpg
Fraps/data/kayle.jpg
.jpg
Fraps/data/kayn.jpg
.jpg
Fraps/data/kennen.jpg
.jpg
Fraps/data/khazix.jpg
.jpg
Fraps/data/kindred.jpg
.jpg
Fraps/data/kled.jpg
.jpg
Fraps/data/kogmaw.jpg
.jpg
Fraps/data/leblanc.jpg
.jpg
Fraps/data/leesin.jpg
.jpg
Fraps/data/leona.jpg
.jpg
Fraps/data/lissandra.jpg
.jpg
Fraps/data/loading.jpg
.jpg
Fraps/data/lucian.jpg
.jpg
Fraps/data/lulu.jpg
.jpg
Fraps/data/lux.jpg
.jpg
Fraps/data/malphite.jpg
.jpg
Fraps/data/malzahar.jpg
.jpg
Fraps/data/maokai.jpg
.jpg
Fraps/data/masteryi.jpg
.jpg
Fraps/data/missfortune.jpg
.jpg
Fraps/data/monkeyking.jpg
.jpg
Fraps/data/mordekaiser.jpg
.jpg
Fraps/data/morgana.jpg
.jpg
Fraps/data/nami.jpg
.jpg
Fraps/data/nasus.jpg
.jpg
Fraps/data/nautilus.jpg
.jpg
Fraps/data/neeko.jpg
.jpg
Fraps/data/nidalee.jpg
.jpg
Fraps/data/nocturne.jpg
.jpg
Fraps/data/nunu.jpg
.jpg
Fraps/data/olaf.jpg
.jpg
Fraps/data/orianna.jpg
.jpg
Fraps/data/ornn.jpg
.jpg
Fraps/data/pantheon.jpg
.jpg
Fraps/data/poppy.jpg
.jpg
Fraps/data/pyke.jpg
.jpg
Fraps/data/quinn.jpg
.jpg
Fraps/data/rakan.jpg
.jpg
Fraps/data/rammus.jpg
.jpg
Fraps/data/reksai.jpg
.jpg
Fraps/data/release
Fraps/data/renekton.jpg
.jpg
Fraps/data/rengar.jpg
.jpg
Fraps/data/riven.jpg
.jpg
Fraps/data/rumble.jpg
.jpg
Fraps/data/ryze.jpg
.jpg
Fraps/data/sejuani.jpg
.jpg
Fraps/data/shaco.jpg
.jpg
Fraps/data/shen.jpg
.jpg
Fraps/data/shyvana.jpg
.jpg
Fraps/data/singed.jpg
.jpg
Fraps/data/sion.jpg
.jpg
Fraps/data/sivir.jpg
.jpg
Fraps/data/skarner.jpg
.jpg
Fraps/data/sona.jpg
.jpg
Fraps/data/soraka.jpg
.jpg
Fraps/data/swain.jpg
.jpg
Fraps/data/sylas.jpg
.jpg
Fraps/data/syndra.jpg
.jpg
Fraps/data/tahmkench.jpg
.jpg
Fraps/data/taliyah.jpg
.jpg
Fraps/data/talon.jpg
.jpg
Fraps/data/taric.jpg
.jpg
Fraps/data/teemo.jpg
.jpg
Fraps/data/thresh.jpg
.jpg
Fraps/data/tristana.jpg
.jpg
Fraps/data/trundle.jpg
.jpg
Fraps/data/tryndamere.jpg
.jpg
Fraps/data/twistedfate.jpg
.jpg
Fraps/data/twitch.jpg
.jpg
Fraps/data/udyr.jpg
.jpg
Fraps/data/urgot.jpg
.jpg
Fraps/data/varus.jpg
.jpg
Fraps/data/vayne.jpg
.jpg
Fraps/data/veigar.jpg
.jpg
Fraps/data/velkoz.jpg
.jpg
Fraps/data/vi.jpg
.jpg
Fraps/data/viktor.jpg
.jpg
Fraps/data/vladimir.jpg
.jpg
Fraps/data/volibear.jpg
.jpg
Fraps/data/warwick.jpg
.jpg
Fraps/data/xayah.jpg
.jpg
Fraps/data/xerath.jpg
.jpg
Fraps/data/xinzhao.jpg
.jpg
Fraps/data/yasuo.jpg
.jpg
Fraps/data/yorick.jpg
.jpg
Fraps/data/youtube.jpg
.jpg
Fraps/data/zac.jpg
.jpg
Fraps/data/zed.jpg
.jpg
Fraps/data/ziggs.jpg
.jpg
Fraps/data/zilean.jpg
.jpg
Fraps/data/zoe.jpg
.jpg
Fraps/data/zyra.jpg
.jpg
LOLPRO 9.5.3.exe
.exe windows:5 windows x86 arch:x86

72417f9b6150901502c119dbf07b386f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
HeapReAlloc
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetStartupInfoW
GetFileTime
GetFileSizeEx
GetTickCount
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GlobalFlags
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetModuleHandleA
InterlockedDecrement
GlobalFindAtomW
GetVersionExW
CompareStringW
LoadLibraryA
GetVersionExA
GetCurrentProcessId
GlobalAddAtomW
WritePrivateProfileStringW
FreeResource
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
CompareStringA
InterlockedExchange
lstrcmpW
FreeLibrary
GetModuleHandleW
GetProcAddress
GetLastError
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
MulDiv
RemoveDirectoryW
DeleteFileW
SetFileAttributesW
Sleep
CopyFileW
GetModuleFileNameW
LocalFileTimeToFileTime
CloseHandle
GetCurrentDirectoryW
CreateFileW
ReadFile
GetFileAttributesW
WriteFile
SetFileTime
CreateDirectoryW
SystemTimeToFileTime
SetFilePointer
WideCharToMultiByte
lstrlenA
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar

user32

RegisterClipboardFormatW
PostThreadMessageW
CharNextW
ReleaseCapture
SetCapture
LoadCursorW
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
DestroyMenu
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextW
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxW
wsprintfW
EnableWindow
LoadIconW
GetSystemMenu
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
UnregisterClassW
CharUpperW
LoadBitmapW
GetFocus
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
AppendMenuW
SendMessageW
SetTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
KillTimer
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PostMessageW
PostQuitMessage
SetWindowPos
MapDialogRect
GetParent
SetWindowContextHelpId
GetWindow
EndDialog
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
GetWindowLongW
IsWindow
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow
GetActiveWindow
GetDesktopWindow
GetWindowRect
CheckMenuItem
EnableMenuItem
ModifyMenuW
GetCapture

gdi32

ExtSelectClipRgn
DeleteDC
GetStockObject
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
GetDeviceCaps
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
ExtTextOutW
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateBitmap

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

SHGetPathFromIDListA
ShellExecuteExW
SHGetSpecialFolderLocation

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFileExistsW

oledlg

OleUIBusyW

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromString

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
SysStringLen

Sections

.text
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

263ffb3e571697dc7865eb5e2fee0e5f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

ws2_32

wininet

uxtheme

psapi

Sections

.text Size: 303KB - Virtual size: 302KB

.rdata Size: 87KB - Virtual size: 87KB

.data Size: 11KB - Virtual size: 27KB

.rsrc Size: 149KB - Virtual size: 148KB

.reloc Size: 39KB - Virtual size: 38KB

901cf2a321aa7eb39bd863e73e1f8add

Code Sign

32:64:38:fe:d6:0b:22:c1:d7:41:bd:d2:f9:ab:1d:fcCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

33:18:e8:f0:3b:76:22:90:9f:3d:24:97:67:4d:c4:71:6c:c3:db:bdSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 194KB - Virtual size: 194KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 13KB - Virtual size: 60KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 16KB - Virtual size: 16KB

c1360b0838aca31a2f33f80e0b5c203d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shlwapi

Exports

Exports

Sections

.text Size: 81KB - Virtual size: 81KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 3KB - Virtual size: 6KB

.gfids Size: 512B - Virtual size: 160B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 5KB - Virtual size: 4KB

0bb1f38f62c92aab4983604754d24dfe

Headers

File Characteristics

Imports

kernel32

Exports

.text
Size: 303KB - Virtual size: 302KB

.rdata
Size: 87KB - Virtual size: 87KB

.data
Size: 11KB - Virtual size: 27KB

.rsrc
Size: 149KB - Virtual size: 148KB

.reloc
Size: 39KB - Virtual size: 38KB

32:64:38:fe:d6:0b:22:c1:d7:41:bd:d2:f9:ab:1d:fc
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

33:18:e8:f0:3b:76:22:90:9f:3d:24:97:67:4d:c4:71:6c:c3:db:bd
Signer

.text
Size: 194KB - Virtual size: 194KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 13KB - Virtual size: 60KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 16KB - Virtual size: 16KB

.text
Size: 81KB - Virtual size: 81KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 3KB - Virtual size: 6KB

.gfids
Size: 512B - Virtual size: 160B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 4KB

.text
Size: 156KB - Virtual size: 152KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 12KB - Virtual size: 16KB

.reloc
Size: 12KB - Virtual size: 11KB

.text
Size: 227KB - Virtual size: 227KB

.rdata
Size: 63KB - Virtual size: 62KB

.data
Size: 11KB - Virtual size: 26KB

.rsrc
Size: 148KB - Virtual size: 147KB