ksNet[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

ksNet.dll
Size

17.4MB
MD5

3c9b1e96a1e61374e4fbc1ddcef59a29
SHA1

0a05846f2e020ab639a180088745dc130eb397c7
SHA256

9c640bc45f50b2379d8b3f10168cc14254ba676d6d4ebee85da1ef6ca9c56ad0
SHA512

f4bfcba68d3a7d17e1a3beeaf18c2026cd2376f4db40deacfb9e40d8dbe581beb5396e938ddde991ef612f5bb5a1d0a679462eff0b7e7b3dc52c7f27a4520a21
SSDEEP

49152:9bqfB5aZe77777i+h/Uisq0MtjSERHC/Ul852GwOcitpADOYUs1zw0vA9NKOz7OM:9qXtdC/2iwOcAAD9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ksNet.dll

Files

ksNet.dll
.dll windows:6 windows x86 arch:x86

7503fb59be1ade68543bafa04a72cc80

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\ACS\bin\AssettoCorsa\ksNet.pdb

Imports

msvcp120

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
??Bid@locale@std@@QAEIXZ
??0id@locale@std@@QAE@I@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
?_Xbad_function_call@std@@YAXXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?pubseekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@V32@H@Z
?pubsync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHXZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@PAV32@@Z
?_Xinvalid_argument@std@@YAXPBD@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?empty@locale@std@@SA?AV12@XZ
??0?$codecvt@_WDH@std@@QAE@I@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??_7_Facet_base@std@@6B@
??_7facet@locale@std@@6B@
??_7codecvt_base@std@@6B@
??_7?$codecvt@_WDH@std@@6B@
?max_length@codecvt_base@std@@QBEHXZ
?length@?$codecvt@_WDH@std@@QBEHAAHPBD1I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ
??7ios_base@std@@QBE_NXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?swap@?$basic_ostream@DU?$char_traits@D@std@@@std@@IAEXAAV12@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?eof@ios_base@std@@QBE_NXZ
?precision@ios_base@std@@QAE_J_J@Z
?setf@ios_base@std@@QAEHHH@Z
?_Lockit_dtor@_Lockit@std@@SAXH@Z
?_Lockit_ctor@_Lockit@std@@SAXH@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z
?_Xbad_alloc@std@@YAXXZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
??1_Container_base12@std@@QAE@XZ
??0_Container_base12@std@@QAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?_Orphan_all@_Container_base0@std@@QAEXXZ
??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?id@?$codecvt@_WDH@std@@2V0locale@2@A
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_BADOFF@std@@3_JB
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??_7ios_base@std@@6B@

msvcr120

atoi
wcstol
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
_except1
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
_initterm_e
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
??1type_info@@UAE@XZ
qsort
tolower
toupper
wcstod
_errno
isspace
islower
isupper
strncmp
swprintf_s
vsprintf
fputs
fopen
fgets
sprintf
floor
_libm_sse2_sqrt_precise
_libm_sse2_sin_precise
_libm_sse2_exp_precise
_libm_sse2_cos_precise
_libm_sse2_asin_precise
_libm_sse2_acos_precise
_CIatan2
_controlfp
_libm_sse2_tan_precise
_libm_sse2_pow_precise
_libm_sse2_log_precise
_libm_sse2_atan_precise
_vsnprintf
?what@exception@std@@UBEPBDXZ
_purecall
??0exception@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??3@YAXPAX@Z
??2@YAPAXI@Z
??_V@YAXPAX@Z
memmove
??0bad_cast@std@@QAE@PBD@Z
_hypot
memcpy_s
fgetc
fputc
ungetc
_lock_file
_unlock_file
fwrite
_fseeki64
__libm_sse2_tan
__libm_sse2_atanf
__libm_sse2_asin
__libm_sse2_acosf
__libm_sse2_acos
modf
_vsnprintf_s
strncpy_s
_strdup
strcat_s
strcpy_s
wcscat_s
malloc
fprintf
__libm_sse2_asinf
printf
fread
_wfopen_s
rand
__libm_sse2_tanf
__FrameUnwindFilter
_cexit
?__ExceptionPtrCopy@@YAXPAXPBX@Z
_wtoi
_wtof
??0exception@std@@QAE@ABQBD@Z
__CxxUnregisterExceptionObject
__CxxDetectRethrow
__CxxRegisterExceptionObject
__CxxExceptionFilter
__CxxQueryExceptionSize
??1exception@std@@UAE@XZ
fgetpos
fsetpos
setvbuf
fflush
fclose
vswprintf_s
_fdtest
fgetwc
fputwc
ungetwc
swscanf_s
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
__libm_sse2_pow
__RTDynamicCast
wcsstr
exit
__libm_sse2_cosf
__libm_sse2_powf
__libm_sse2_sinf
_wfindfirst64i32
_wfindnext64i32
wcscpy_s
_findclose
ceil
_dtest
_vswprintf_c_l
wcstok_s

shlwapi

PathFileExistsW

iphlpapi

GetAdaptersInfo

d3dcompiler_43

D3DCreateBlob
D3DReflect
D3DCompile

kernel32

GetCurrentThread
GetProcessAffinityMask
SetThreadAffinityMask
EncodePointer
DecodePointer
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentProcess
QueryPerformanceFrequency
QueryPerformanceCounter
InitializeCriticalSection
RaiseException
LeaveCriticalSection
DeleteCriticalSection
CloseHandle
GetFileTime
CreateFileW
CreateDirectoryW
DeleteFileW
Sleep
SetUnhandledExceptionFilter
GetEnvironmentVariableA
GetEnvironmentVariableW
GetCurrentDirectoryA
GetFileAttributesW
GetLastError
SetLastError
SuspendThread
ResumeThread
GetThreadContext
GetVersionExA
ReadProcessMemory
FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
LoadLibraryW
EnterCriticalSection
GetTickCount
OutputDebugStringA

user32

MessageBoxW
GetCursorPos
GetActiveWindow
GetWindowRect
GetAsyncKeyState
SetRect
FillRect
MessageBoxA

shell32

SHGetFolderPathW

fbxsdk-2014.1

??0FbxTime@fbxsdk_2014_1_rc@@QAE@_J@Z
?SetMilliSeconds@FbxTime@fbxsdk_2014_1_rc@@QAEX_J@Z
??1?$FbxVectorTemplate2@N@fbxsdk_2014_1_rc@@QAE@XZ
??1?$FbxVectorTemplate4@N@fbxsdk_2014_1_rc@@QAE@XZ
?IsRestPose@FbxPose@fbxsdk_2014_1_rc@@QBE_NXZ
??A?$FbxVectorTemplate4@N@fbxsdk_2014_1_rc@@QAEAANH@Z
??A?$FbxVectorTemplate4@N@fbxsdk_2014_1_rc@@QBEABNH@Z
??1?$FbxVectorTemplate3@N@fbxsdk_2014_1_rc@@QAE@XZ
??A?$FbxVectorTemplate3@N@fbxsdk_2014_1_rc@@QAEAANH@Z
??4?$FbxVectorTemplate3@N@fbxsdk_2014_1_rc@@QAEAAV01@ABN@Z
?GetDirectArray@?$FbxLayerElementTemplate@VFbxVector4@fbxsdk_2014_1_rc@@@fbxsdk_2014_1_rc@@QAEAAV?$FbxLayerElementArrayTemplate@VFbxVector4@fbxsdk_2014_1_rc@@@2@XZ
?GetIndexArray@?$FbxLayerElementTemplate@VFbxVector4@fbxsdk_2014_1_rc@@@fbxsdk_2014_1_rc@@QAEAAV?$FbxLayerElementArrayTemplate@H@2@XZ
??0?$FbxVectorTemplate3@N@fbxsdk_2014_1_rc@@QAE@XZ
?GetAt@FbxLayerElementArray@fbxsdk_2014_1_rc@@QBE_NHPAPAXW4EFbxType@2@@Z
?Get@FbxProperty@fbxsdk_2014_1_rc@@IBE_NPAXABW4EFbxType@2@@Z
?GetEvaluator@FbxScene@fbxsdk_2014_1_rc@@QAEPAVFbxAnimEvaluator@2@XZ
?GetCount@FbxPose@fbxsdk_2014_1_rc@@QBEHXZ
??1FbxVector4@fbxsdk_2014_1_rc@@QAE@XZ
?SetContext@FbxAnimEvaluator@fbxsdk_2014_1_rc@@QAEXPAVFbxAnimStack@2@@Z
?GetTakeInfo@FbxDocument@fbxsdk_2014_1_rc@@QBEPAVFbxTakeInfo@2@ABVFbxString@2@@Z
?GetCharacterCount@FbxScene@fbxsdk_2014_1_rc@@QBEHXZ
?GetAnimStackCount@FbxImporter@fbxsdk_2014_1_rc@@QAEHXZ
?SetBoolProp@FbxIOSettings@fbxsdk_2014_1_rc@@QAEXPBD_N@Z
?GetPolygonVertexUV@FbxMesh@fbxsdk_2014_1_rc@@QBE_NHHPBDAAVFbxVector2@2@@Z
??1FbxVector2@fbxsdk_2014_1_rc@@QAE@XZ
?GetMappingMode@FbxLayerElement@fbxsdk_2014_1_rc@@QBE?AW4EMappingMode@12@XZ
?FbxFree@fbxsdk_2014_1_rc@@YAXPAX@Z
?FbxRealloc@fbxsdk_2014_1_rc@@YAPAXPAXI@Z
?FbxMalloc@fbxsdk_2014_1_rc@@YAPAXI@Z
??0FbxString@fbxsdk_2014_1_rc@@QAE@ABV01@@Z
?GetDirectArrayVoid@FbxLayerElementUserData@fbxsdk_2014_1_rc@@QAEPAV?$FbxLayerElementArrayTemplate@PAX@2@HPA_N@Z
?GetDirectArrayVoid@FbxLayerElementUserData@fbxsdk_2014_1_rc@@QBEPBV?$FbxLayerElementArrayTemplate@PAX@2@HPA_N@Z
?SetAt@FbxLayerElementArray@fbxsdk_2014_1_rc@@QAEXHPBXW4EFbxType@2@@Z
??0FbxStringSymbol@fbxsdk_2014_1_rc@@QAE@ABV01@@Z
??1FbxStringSymbol@fbxsdk_2014_1_rc@@QAE@XZ
?SetStatus@FbxLayerElementArray@fbxsdk_2014_1_rc@@IBEXW4ELockAccessStatus@LockAccessStatus@2@@Z
?GetStart@FbxTimeSpan@fbxsdk_2014_1_rc@@QBE?AVFbxTime@2@XZ
?SetCount@FbxLayerElementArray@fbxsdk_2014_1_rc@@QAEXH@Z
?WriteUnlock@FbxLayerElementArray@fbxsdk_2014_1_rc@@QBEXXZ
?GetPolygonVertexNormal@FbxMesh@fbxsdk_2014_1_rc@@QBE_NHHAAVFbxVector4@2@@Z
?GetElementTangentCount@FbxGeometryBase@fbxsdk_2014_1_rc@@QBEHXZ
?GetElementUVCount@FbxGeometryBase@fbxsdk_2014_1_rc@@QBEHXZ
?GetTextureUVCount@FbxMesh@fbxsdk_2014_1_rc@@QAEHW4EType@FbxLayerElement@2@@Z
?GetElementUV@FbxGeometryBase@fbxsdk_2014_1_rc@@QAEPAVFbxLayerElementUV@2@H@Z
?GetControlPointIndices@FbxCluster@fbxsdk_2014_1_rc@@QBEPAHXZ
?GetControlPointWeights@FbxCluster@fbxsdk_2014_1_rc@@QBEPANXZ
?GetControlPointIndicesCount@FbxCluster@fbxsdk_2014_1_rc@@QBEHXZ
?GetTransformLinkMatrix@FbxCluster@fbxsdk_2014_1_rc@@QBEAAVFbxAMatrix@2@AAV32@@Z
??0FbxAMatrix@fbxsdk_2014_1_rc@@QAE@XZ
?GetLink@FbxCluster@fbxsdk_2014_1_rc@@QAEPAVFbxNode@2@XZ
?GetCluster@FbxSkin@fbxsdk_2014_1_rc@@QAEPAVFbxCluster@2@H@Z
?GetClusterCount@FbxSkin@fbxsdk_2014_1_rc@@QBEHXZ
?GetDeformer@FbxGeometry@fbxsdk_2014_1_rc@@QBEPAVFbxDeformer@2@HPAVFbxStatus@2@@Z
?GetDeformerCount@FbxGeometry@fbxsdk_2014_1_rc@@QBEHXZ
?GetElementNormal@FbxGeometryBase@fbxsdk_2014_1_rc@@QAEPAVFbxLayerElementNormal@2@H@Z
?GetName@FbxLayerElement@fbxsdk_2014_1_rc@@QBEPBDXZ
??DFbxMatrix@fbxsdk_2014_1_rc@@QBE?AV01@ABV01@@Z
?SetTRS@FbxMatrix@fbxsdk_2014_1_rc@@QAEXABVFbxVector4@2@00@Z
?GetGeometricScaling@FbxNode@fbxsdk_2014_1_rc@@QBE?AVFbxVector4@2@W4EPivotSet@12@@Z
?GetGeometricRotation@FbxNode@fbxsdk_2014_1_rc@@QBE?AVFbxVector4@2@W4EPivotSet@12@@Z
?GetGeometricTranslation@FbxNode@fbxsdk_2014_1_rc@@QBE?AVFbxVector4@2@W4EPivotSet@12@@Z
?GetRotationPivot@FbxNode@fbxsdk_2014_1_rc@@QBEABVFbxVector4@2@W4EPivotSet@12@@Z
?GetPivotState@FbxNode@fbxsdk_2014_1_rc@@QBEXW4EPivotSet@12@AAW4EPivotState@12@@Z
?GetMaterialIndices@FbxMesh@fbxsdk_2014_1_rc@@QBE_NPAPAV?$FbxLayerElementArrayTemplate@H@2@@Z
?GetLayer@FbxLayerContainer@fbxsdk_2014_1_rc@@QAEPAVFbxLayer@2@H@Z
?GetUVSetCount@FbxLayer@fbxsdk_2014_1_rc@@QBEHXZ
?GetLayerCount@FbxLayerContainer@fbxsdk_2014_1_rc@@QBEHXZ
?TriangulateInPlace@FbxGeometryConverter@fbxsdk_2014_1_rc@@QAE_NPAVFbxNode@2@@Z
??1FbxGeometryConverter@fbxsdk_2014_1_rc@@QAE@XZ
??0FbxGeometryConverter@fbxsdk_2014_1_rc@@QAE@PAVFbxManager@1@@Z
?GetTarget@FbxNode@fbxsdk_2014_1_rc@@QBEPAV12@XZ
??0FbxMatrix@fbxsdk_2014_1_rc@@QAE@ABVFbxAMatrix@1@@Z
??4FbxMatrix@fbxsdk_2014_1_rc@@QAEAAV01@ABV01@@Z
??9FbxVector4@fbxsdk_2014_1_rc@@QBE_NABV01@@Z
?EvaluateLocalScaling@FbxNode@fbxsdk_2014_1_rc@@QAEAAVFbxVector4@2@VFbxTime@2@W4EPivotSet@12@_N2@Z
??0FbxVector4@fbxsdk_2014_1_rc@@QAE@ABV01@@Z
?EvaluateLocalTransform@FbxNode@fbxsdk_2014_1_rc@@QAEAAVFbxAMatrix@2@VFbxTime@2@W4EPivotSet@12@_N2@Z
??4FbxAMatrix@fbxsdk_2014_1_rc@@QAEAAV01@ABV01@@Z
?GetNodeAttribute@FbxNode@fbxsdk_2014_1_rc@@QAEPAVFbxNodeAttribute@2@XZ
?EvaluateGlobalTransform@FbxNode@fbxsdk_2014_1_rc@@QAEAAVFbxAMatrix@2@VFbxTime@2@W4EPivotSet@12@_N2@Z
??0FbxAMatrix@fbxsdk_2014_1_rc@@QAE@ABV01@@Z
?GetFileName@FbxFileTexture@fbxsdk_2014_1_rc@@QBEPBDXZ
?GetSrcObject@FbxProperty@fbxsdk_2014_1_rc@@QBEPAVFbxObject@2@ABVFbxClassId@2@H@Z
?GetSrcObjectCount@FbxProperty@fbxsdk_2014_1_rc@@QBEHABVFbxClassId@2@@Z
?sTextureChannelNames@FbxLayerElement@fbxsdk_2014_1_rc@@2QBQBDB
?GetMaterial@FbxScene@fbxsdk_2014_1_rc@@QAEPAVFbxSurfaceMaterial@2@H@Z
?GetStop@FbxTimeSpan@fbxsdk_2014_1_rc@@QBE?AVFbxTime@2@XZ
?FindProperty@FbxObject@fbxsdk_2014_1_rc@@QBE?AVFbxProperty@2@PBD_N@Z
?WriteLock@FbxLayerElementArray@fbxsdk_2014_1_rc@@QBE_NXZ
?IsBindPose@FbxPose@fbxsdk_2014_1_rc@@QBE_NXZ
?GetMaterialCount@FbxScene@fbxsdk_2014_1_rc@@QBEHXZ
?GetRootNode@FbxScene@fbxsdk_2014_1_rc@@QBEPAVFbxNode@2@XZ
?GetMatrix@FbxPose@fbxsdk_2014_1_rc@@QBEABVFbxMatrix@2@H@Z
??0FbxMatrix@fbxsdk_2014_1_rc@@QAE@ABV01@@Z
?GetNodeName@FbxPose@fbxsdk_2014_1_rc@@QBE?AVFbxNameHandler@2@H@Z
?GetCurrentName@FbxNameHandler@fbxsdk_2014_1_rc@@QBEPBDXZ
?GetPose@FbxScene@fbxsdk_2014_1_rc@@QAEPAVFbxPose@2@H@Z
?GetPoseCount@FbxScene@fbxsdk_2014_1_rc@@QBEHXZ
?Destroy@FbxObject@fbxsdk_2014_1_rc@@QAEX_N@Z
?Import@FbxImporter@fbxsdk_2014_1_rc@@QAE_NPAVFbxDocument@2@_N@Z
?Create@FbxScene@fbxsdk_2014_1_rc@@SAPAV12@PAVFbxManager@2@PBD@Z
?GetFileHeaderInfo@FbxImporter@fbxsdk_2014_1_rc@@QAEPAVFbxIOFileHeaderInfo@2@XZ
?Create@FbxImporter@fbxsdk_2014_1_rc@@SAPAV12@PAVFbxManager@2@PBD@Z
?Create@FbxIOSettings@fbxsdk_2014_1_rc@@SAPAV12@PAVFbxManager@2@PBD@Z
?Create@FbxManager@fbxsdk_2014_1_rc@@SAPAV12@XZ
?GetNode@FbxNodeAttribute@fbxsdk_2014_1_rc@@QBEPAVFbxNode@2@H@Z
?GetMaterial@FbxNode@fbxsdk_2014_1_rc@@QBEPAVFbxSurfaceMaterial@2@H@Z
?GetPolygonCount@FbxMesh@fbxsdk_2014_1_rc@@QBEHXZ
?GetElementMaterialCount@FbxGeometryBase@fbxsdk_2014_1_rc@@QBEHXZ
?SetRow@FbxMatrix@fbxsdk_2014_1_rc@@QAEXHABVFbxVector4@2@@Z
?SetRow@FbxAMatrix@fbxsdk_2014_1_rc@@QAEXHABVFbxVector4@2@@Z
?GetRow@FbxAMatrix@fbxsdk_2014_1_rc@@QBE?AVFbxVector4@2@H@Z
?GetRow@FbxMatrix@fbxsdk_2014_1_rc@@QBE?AVFbxVector4@2@H@Z
?GetChild@FbxNode@fbxsdk_2014_1_rc@@QAEPAV12@H@Z
?GetChildCount@FbxNode@fbxsdk_2014_1_rc@@QBEH_N@Z
?ClassId@FbxSurfacePhong@fbxsdk_2014_1_rc@@2VFbxClassId@2@A
?ClassId@FbxFileTexture@fbxsdk_2014_1_rc@@2VFbxClassId@2@A
??0FbxVector4@fbxsdk_2014_1_rc@@QAE@NNNN@Z
??0FbxMatrix@fbxsdk_2014_1_rc@@QAE@XZ
??1FbxMatrix@fbxsdk_2014_1_rc@@QAE@XZ
?GetCount@FbxLayerElementArray@fbxsdk_2014_1_rc@@QBEHXZ
??0FbxVector2@fbxsdk_2014_1_rc@@QAE@XZ
?ClassId@FbxTexture@fbxsdk_2014_1_rc@@2VFbxClassId@2@A
?ClassId@FbxAnimStack@fbxsdk_2014_1_rc@@2VFbxClassId@2@A
??1FbxAMatrix@fbxsdk_2014_1_rc@@QAE@XZ
??4FbxVector4@fbxsdk_2014_1_rc@@QAEAAV01@ABV01@@Z
??0FbxVector4@fbxsdk_2014_1_rc@@QAE@XZ
?GetName@FbxObject@fbxsdk_2014_1_rc@@QBEPBDXZ
??0FbxString@fbxsdk_2014_1_rc@@QAE@PBD@Z
??1FbxNameHandler@fbxsdk_2014_1_rc@@QAE@XZ
??1FbxProperty@fbxsdk_2014_1_rc@@QAE@XZ
?IsValid@FbxProperty@fbxsdk_2014_1_rc@@QBE_NXZ
??1FbxString@fbxsdk_2014_1_rc@@QAE@XZ
?GetPolygonSize@FbxMesh@fbxsdk_2014_1_rc@@QBEHH@Z
?GetElementNormalCount@FbxGeometryBase@fbxsdk_2014_1_rc@@QBEHXZ
?GetPolygonVertex@FbxMesh@fbxsdk_2014_1_rc@@QBEHHH@Z
?GetMilliSeconds@FbxTime@fbxsdk_2014_1_rc@@QBE_JXZ
?Is@FbxClassId@fbxsdk_2014_1_rc@@QBE_NABV12@@Z

dxgi

CreateDXGIFactory

d3d11

D3D11CreateDevice
D3D11CreateDeviceAndSwapChain

d3dx11_43

D3DX11GetImageInfoFromFileW
D3DX11SaveTextureToFileW
D3DX11CreateShaderResourceViewFromFileW
D3DX11GetImageInfoFromMemory
D3DX11CreateShaderResourceViewFromMemory

dwrite

DWriteCreateFactory

gdi32

DeleteObject
GetObjectW
CreateSolidBrush
GetCurrentObject

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueW

advapi32

GetUserNameA

mscoree

_CorDllMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15.6MB - Virtual size: 15.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7503fb59be1ade68543bafa04a72cc80

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcp120

msvcr120

shlwapi

iphlpapi

d3dcompiler_43

kernel32

user32

shell32

fbxsdk-2014.1

dxgi

d3d11

d3dx11_43

dwrite

gdi32

version

advapi32

mscoree

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 15.6MB - Virtual size: 15.6MB

.data Size: 30KB - Virtual size: 58KB

_RDATA Size: 512B - Virtual size: 32B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 72KB - Virtual size: 72KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 15.6MB - Virtual size: 15.6MB

.data
Size: 30KB - Virtual size: 58KB

_RDATA
Size: 512B - Virtual size: 32B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 72KB - Virtual size: 72KB