4d17cb38e80e27a3e202f2605acdebd25b015df8c9c6d3833c4f40a5ca0e957dN

Sharing

Copy URL Twitter E-mail

General

Target

4d17cb38e80e27a3e202f2605acdebd25b015df8c9c6d3833c4f40a5ca0e957dN
Size

532KB
MD5

54b66ce45464e889741ebfef50dc8aa0
SHA1

4834777bc9bb6b78fcf37b753395f485306482f1
SHA256

4d17cb38e80e27a3e202f2605acdebd25b015df8c9c6d3833c4f40a5ca0e957d
SHA512

554a99a3b59bd5f9f9ea34fc74a1a0dd77041f7fb8f16ef1ecc7b3f584a6b7fc4abd6ad5020c9e7cf82cdc0451c51fe91133510f5da0e695db5ff85f18c4d704
SSDEEP

12288:poOLRq1xQO+ErFEtuV39TD+aaYDS7OirccjtQeZW:poOTw9TSaaIifJ1s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d17cb38e80e27a3e202f2605acdebd25b015df8c9c6d3833c4f40a5ca0e957dN

Files

4d17cb38e80e27a3e202f2605acdebd25b015df8c9c6d3833c4f40a5ca0e957dN
.dll windows:4 windows x64 arch:x64

2d93e0c3c1d4b1138342d3cbb3d397d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

audcore5

_Z11aud_get_intPKcS0_
_Z12aud_get_boolPKcS0_
_Z23aud_config_set_defaultsPKcPKS0_
_ZN11InputPlugin10check_seekEv
_ZN11InputPlugin10check_stopEv
_ZN11InputPlugin10open_audioEiii
_ZN11InputPlugin11write_audioEPKvi
_ZN11InputPlugin18set_stream_bitrateEi
_ZN5Tuple7set_intENS_5FieldEi
_ZN5Tuple7set_strENS_5FieldEPKc
_ZN6String7raw_getEPKc
_ZN6String9raw_unrefEPc
_ZN7VFSFile5freadEPvxx
_ZN7VFSFile5fseekEx11VFSSeekType
_ZN7VFSFile5ftellEv
_ZN7VFSFile9test_fileEPKc11VFSFileTest
_ZN7VFSFileC1EPKcS1_

libgcc_s_seh-1

_Unwind_Resume

libintl-8

DllMain
libintl_dgettext

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

api-ms-win-crt-convert-l1-1-0

mbrtowc
wcrtomb
wcstombs

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc
realloc

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-math-l1-1-0

log10
pow
sin
sqrt
sqrtf

api-ms-win-crt-private-l1-1-0

memcmp
memcpy
memmove
strchr
strrchr
strstr

api-ms-win-crt-runtime-l1-1-0

_errno
_execute_onexit_table
_exit
_initialize_onexit_table
_initterm
_register_onexit_function
abort
strerror

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vsprintf
fclose
fgetc
fopen
fputc
fseek
ftell
fwrite

api-ms-win-crt-string-l1-1-0

_stricmp
memset
strcat
strcmp
strcpy
strlen
strncmp
strncpy
strnlen
tolower
wcslen
wcsnlen

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_tzset

api-ms-win-crt-utility-l1-1-0

rand

libstdc++-6

_ZNKSt5ctypeIcE13_M_widen_initEv
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE12find_last_ofEPKcy
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE5rfindEcy
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6substrEyy
_ZNSi10_M_extractIfEERSiRT_
_ZNSo3putEc
_ZNSo5flushEv
_ZNSo9_M_insertIdEERSoT_
_ZNSo9_M_insertImEERSoT_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_disposeEv
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_replaceEyyPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6appendEPKc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_appendEPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_assignERKS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERyy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_mutateEyyPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1ERKS4_
_ZNSt8__detail15_List_node_base7_M_hookEPS0_
_ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_x
_ZSt16__throw_bad_castv
_ZSt17__throw_bad_allocv
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_length_errorPKc
_ZSt24__throw_out_of_range_fmtPKcz
_ZSt28__throw_bad_array_new_lengthv
_ZStrsIcSt11char_traitsIcESaIcEERSt13basic_istreamIT_T0_ES7_RNSt7__cxx1112basic_stringIS4_S5_T1_EE
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdaPv
_ZdlPvy
_Znay
_Znwy
__cxa_begin_catch
__cxa_end_catch
__cxa_guard_acquire
__cxa_guard_release
__cxa_rethrow
__cxa_throw_bad_array_new_length
__gxx_personality_seh0

Exports

Exports

AdPlug_LogFile
AdPlug_LogWrite
OPL3_Generate
OPL3_GenerateResampled
OPL3_GenerateStream
OPL3_Reset
OPL3_WriteReg
OPL3_WriteRegBuffered
OPLCreate
OPLDestroy
OPLRead
OPLResetChip
OPLSetIRQHandler
OPLSetTimerHandler
OPLSetUpdateHandler
OPLTimerOver
OPLWrite
SLOT7_1
SLOT7_2
SLOT8_1
SLOT8_2
YM3812UpdateOne
_Z10fillGD3TagP10binistreamPw
_Z12operator_offP15operator_struct
_Z14HSQ_decompressPhiS_
_Z14SQX_decompressPhiS_
_Z14operator_decayP15operator_struct
_Z15operator_attackP15operator_struct
_Z15operator_outputP15operator_structii
_Z16disable_operatorP15operator_structj
_Z16operator_advanceP15operator_structi
_Z16operator_releaseP15operator_struct
_Z16operator_sustainP15operator_struct
_Z22operator_advance_drumsP15operator_structiS0_iS0_i
_Z5isHSQPhi
_Z5isSQXPh
_Z6printfPKcz
_Z7sprintfPcPKcz
_ZN10AdPlugXMMS11is_our_fileEPKcR7VFSFile
_ZN10AdPlugXMMS4extsE
_ZN10AdPlugXMMS4initEv
_ZN10AdPlugXMMS4playEPKcR7VFSFile
_ZN10AdPlugXMMS5prefsE
_ZN10AdPlugXMMS7cleanupEv
_ZN10AdPlugXMMS7widgetsE
_ZN10AdPlugXMMS8defaultsE
_ZN10AdPlugXMMS8read_tagEPKcR7VFSFileR5TupleP5IndexIcE
_ZN10CSilentopl4initEv
_ZN10CSilentopl5writeEii
_ZN10CSilentoplD0Ev
_ZN10CSilentoplD1Ev
_ZN10Ca2mLoader10COPYRANGESE
_ZN10Ca2mLoader10getrefreshEv
_ZN10Ca2mLoader10uncompressEv
_ZN10Ca2mLoader10updatefreqEtt
_ZN10Ca2mLoader11MAXDISTANCEE
_ZN10Ca2mLoader11updatemodelEt
_ZN10Ca2mLoader13CODESPERRANGEE
_ZN10Ca2mLoader13getinstrumentB5cxx11Ej
_ZN10Ca2mLoader14getinstrumentsEv
_ZN10Ca2mLoader4ROOTE
_ZN10Ca2mLoader4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10Ca2mLoader6MAXBUFE
_ZN10Ca2mLoader6decodeEv
_ZN10Ca2mLoader7MAXCHARE
_ZN10Ca2mLoader7MAXCOPYE
_ZN10Ca2mLoader7MAXFREQE
_ZN10Ca2mLoader7MAXSIZEE
_ZN10Ca2mLoader7MINCOPYE
_ZN10Ca2mLoader7SUCCMAXE
_ZN10Ca2mLoader7copyminE
_ZN10Ca2mLoader7factoryEP4Copl
_ZN10Ca2mLoader7gettypeB5cxx11Ev
_ZN10Ca2mLoader8TWICEMAXE
_ZN10Ca2mLoader8bitvalueE
_ZN10Ca2mLoader8copybitsE
_ZN10Ca2mLoader8gettitleB5cxx11Ev
_ZN10Ca2mLoader8inittreeEv
_ZN10Ca2mLoader8sixdepakEPtPht
_ZN10Ca2mLoader9FIRSTCODEE
_ZN10Ca2mLoader9TERMINATEE
_ZN10Ca2mLoader9getauthorB5cxx11Ev
_ZN10Ca2mLoader9inputcodeEt
_ZN10Ca2mLoaderD0Ev
_ZN10Ca2mLoaderD1Ev
_ZN10CadlPlayer10getrefreshEv
_ZN10CadlPlayer10getsubsongEv
_ZN10CadlPlayer11getsubsongsEv
_ZN10CadlPlayer15playSoundEffectEt
_ZN10CadlPlayer19_kyra1SoundTriggersE
_ZN10CadlPlayer22_kyra1NumSoundTriggersE
_ZN10CadlPlayer4initEv
_ZN10CadlPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CadlPlayer4playEt
_ZN10CadlPlayer4unk1Ev
_ZN10CadlPlayer4unk2Ev
_ZN10CadlPlayer6rewindEi
_ZN10CadlPlayer6updateEv
_ZN10CadlPlayer7factoryEP4Copl
_ZN10CadlPlayer7gettypeB5cxx11Ev
_ZN10CadlPlayer7processEv
_ZN10CadlPlayer9playTrackEt
_ZN10CadlPlayerC1EP4Copl
_ZN10CadlPlayerC2EP4Copl
_ZN10CadlPlayerD0Ev
_ZN10CadlPlayerD1Ev
_ZN10CadlPlayerD2Ev
_ZN10CamdLoader10getrefreshEv
_ZN10CamdLoader13getinstrumentB5cxx11Ej
_ZN10CamdLoader14getinstrumentsEv
_ZN10CamdLoader4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CamdLoader7factoryEP4Copl
_ZN10CamdLoader7gettypeB5cxx11Ev
_ZN10CamdLoader8gettitleB5cxx11Ev
_ZN10CamdLoader9getauthorB5cxx11Ev
_ZN10CamdLoaderD0Ev
_ZN10CamdLoaderD1Ev
_ZN10CbamPlayer10getrefreshEv
_ZN10CbamPlayer4freqE
_ZN10CbamPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CbamPlayer6rewindEi
_ZN10CbamPlayer6updateEv
_ZN10CbamPlayer7factoryEP4Copl
_ZN10CbamPlayer7gettypeB5cxx11Ev
_ZN10CbamPlayerD0Ev
_ZN10CbamPlayerD1Ev
_ZN10CcffLoader12cff_unpacker14translate_codeEmPh
_ZN10CcffLoader12cff_unpacker17expand_dictionaryEPh
_ZN10CcffLoader12cff_unpacker6unpackEPhS1_
_ZN10CcffLoader12cff_unpacker7cleanupEv
_ZN10CcffLoader12cff_unpacker7startupEv
_ZN10CcffLoader12cff_unpacker8get_codeEv
_ZN10CcffLoader13getinstrumentB5cxx11Ej
_ZN10CcffLoader14getinstrumentsEv
_ZN10CcffLoader4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CcffLoader6rewindEi
_ZN10CcffLoader7factoryEP4Copl
_ZN10CcffLoader7gettypeB5cxx11Ev
_ZN10CcffLoader8gettitleB5cxx11Ev
_ZN10CcffLoader9getauthorB5cxx11Ev
_ZN10CcffLoaderD0Ev
_ZN10CcffLoaderD1Ev
_ZN10CcmfPlayer10cmfNoteOffEhhh
_ZN10CcmfPlayer10getrefreshEv
_ZN10CcmfPlayer13cmfNoteUpdateEh
_ZN10CcmfPlayer14MIDIcontrollerEhhh
_ZN10CcmfPlayer14getPercChannelEh
_ZN10CcmfPlayer14readMIDINumberEv
_ZN10CcmfPlayer20MIDIchangeInstrumentEhhh
_ZN10CcmfPlayer23writeInstrumentSettingsEhhhh
_ZN10CcmfPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CcmfPlayer6rewindEi
_ZN10CcmfPlayer6updateEv
_ZN10CcmfPlayer7factoryEP4Copl
_ZN10CcmfPlayer7getFreqEhhPhPt
_ZN10CcmfPlayer7getdescB5cxx11Ev
_ZN10CcmfPlayer7gettypeB5cxx11Ev
_ZN10CcmfPlayer8gettitleB5cxx11Ev
_ZN10CcmfPlayer8writeOPLEhh
_ZN10CcmfPlayer9cmfNoteOnEhhh
_ZN10CcmfPlayer9getauthorB5cxx11Ev
_ZN10CcmfPlayerC1EP4Copl
_ZN10CcmfPlayerC2EP4Copl
_ZN10CcmfPlayerD0Ev
_ZN10CcmfPlayerD1Ev
_ZN10CcmfPlayerD2Ev
_ZN10Cd00Player10getrefreshEv
_ZN10Cd00Player11getsubsongsEv
_ZN10Cd00Player4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10Cd00Player6rewindEi
_ZN10Cd00Player6updateEv
_ZN10Cd00Player7factoryEP4Copl
_ZN10Cd00Player7getdescB5cxx11Ev
_ZN10Cd00Player7gettypeB5cxx11Ev
_ZN10Cd00Player7setfreqEh
_ZN10Cd00Player7setinstEh
_ZN10Cd00Player7vibratoEh
_ZN10Cd00Player8gettitleB5cxx11Ev
_ZN10Cd00Player8playnoteEh
_ZN10Cd00Player9getauthorB5cxx11Ev
_ZN10Cd00Player9setvolumeEh
_ZN10Cd00PlayerD0Ev
_ZN10Cd00PlayerD1Ev
_ZN10CdfmLoader10getrefreshEv
_ZN10CdfmLoader13getinstrumentB5cxx11Ej
_ZN10CdfmLoader14getinstrumentsEv
_ZN10CdfmLoader4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CdfmLoader7factoryEP4Copl
_ZN10CdfmLoader7getdescB5cxx11Ev
_ZN10CdfmLoader7gettypeB5cxx11Ev
_ZN10CdfmLoaderD0Ev
_ZN10CdfmLoaderD1Ev
_ZN10CdmoLoader12dmo_unpacker12unpack_blockEPhlS1_
_ZN10CdmoLoader12dmo_unpacker5brandEt
_ZN10CdmoLoader12dmo_unpacker6unpackEPhS1_m
_ZN10CdmoLoader12dmo_unpacker7decryptEPhl
_ZN10CdmoLoader4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CdmoLoader7factoryEP4Copl
_ZN10CdmoLoader7gettypeB5cxx11Ev
_ZN10CdmoLoader9getauthorB5cxx11Ev
_ZN10CdmoLoaderD0Ev
_ZN10CdmoLoaderD1Ev
_ZN10CdroPlayer10getrefreshEv
_ZN10CdroPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CdroPlayer6rewindEi
_ZN10CdroPlayer6updateEv
_ZN10CdroPlayer7factoryEP4Copl
_ZN10CdroPlayer7getdescB5cxx11Ev
_ZN10CdroPlayer7gettypeB5cxx11Ev
_ZN10CdroPlayer8gettitleB5cxx11Ev
_ZN10CdroPlayer9getauthorB5cxx11Ev
_ZN10CdroPlayerC1EP4Copl
_ZN10CdroPlayerC2EP4Copl
_ZN10CdroPlayerD0Ev
_ZN10CdroPlayerD1Ev
_ZN10CdroPlayerD2Ev
_ZN10CdtmLoader10getrefreshEv
_ZN10CdtmLoader13getinstrumentB5cxx11Ej
_ZN10CdtmLoader14getinstrumentsEv
_ZN10CdtmLoader14unpack_patternEPhlS0_l
_ZN10CdtmLoader4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CdtmLoader6rewindEi
_ZN10CdtmLoader7factoryEP4Copl
_ZN10CdtmLoader7getdescB5cxx11Ev
_ZN10CdtmLoader7gettypeB5cxx11Ev
_ZN10CdtmLoader8gettitleB5cxx11Ev
_ZN10CdtmLoader9getauthorB5cxx11Ev
_ZN10CdtmLoaderD0Ev
_ZN10CdtmLoaderD1Ev
_ZN10CfmcLoader10getrefreshEv
_ZN10CfmcLoader13getinstrumentB5cxx11Ej
_ZN10CfmcLoader14getinstrumentsEv
_ZN10CfmcLoader4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CfmcLoader7factoryEP4Copl
_ZN10CfmcLoader7gettypeB5cxx11Ev
_ZN10CfmcLoader8gettitleB5cxx11Ev
_ZN10CfmcLoader9buildinstEh
_ZN10CfmcLoaderD0Ev
_ZN10CfmcLoaderD1Ev
_ZN10CgotPlayer10getrefreshEv
_ZN10CgotPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CgotPlayer6rewindEi
_ZN10CgotPlayer6updateEv
_ZN10CgotPlayer7factoryEP4Copl
_ZN10CgotPlayer7gettypeB5cxx11Ev
_ZN10CgotPlayer8getspeedEv
_ZN10CgotPlayerD0Ev
_ZN10CgotPlayerD1Ev
_ZN10ChscPlayer10getpatternEv
_ZN10ChscPlayer10getrefreshEv
_ZN10ChscPlayer11getpatternsEv
_ZN10ChscPlayer14getinstrumentsEv
_ZN10ChscPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10ChscPlayer6getrowEv
_ZN10ChscPlayer6rewindEi
_ZN10ChscPlayer6updateEv
_ZN10ChscPlayer7factoryEP4Copl
_ZN10ChscPlayer7gettypeB5cxx11Ev
_ZN10ChscPlayer7setfreqEht
_ZN10ChscPlayer8getorderEv
_ZN10ChscPlayer8getspeedEv
_ZN10ChscPlayer8setinstrEhh
_ZN10ChscPlayer9getordersEv
_ZN10ChscPlayer9setvolumeEhii
_ZN10ChscPlayerD0Ev
_ZN10ChscPlayerD1Ev
_ZN10ChspLoader4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10ChspLoader7factoryEP4Copl
_ZN10ChspLoaderD0Ev
_ZN10ChspLoaderD1Ev
_ZN10CimfPlayer10getrefreshEv
_ZN10CimfPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CimfPlayer6rewindEi
_ZN10CimfPlayer6updateEv
_ZN10CimfPlayer7factoryEP4Copl
_ZN10CimfPlayer7getdescB5cxx11Ev
_ZN10CimfPlayer7getrateERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProviderP10binistream
_ZN10CimfPlayer7gettypeB5cxx11Ev
_ZN10CimfPlayer8gettitleB5cxx11Ev
_ZN10CimfPlayer9getauthorB5cxx11Ev
_ZN10CimfPlayerD0Ev
_ZN10CimfPlayerD1Ev
_ZN10CjbmPlayer10getrefreshEv
_ZN10CjbmPlayer13opl_noteonoffEiPNS_8JBMVoiceEb
_ZN10CjbmPlayer18set_opl_instrumentEiPNS_8JBMVoiceE
_ZN10CjbmPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CjbmPlayer6rewindEi
_ZN10CjbmPlayer6updateEv
_ZN10CjbmPlayer7factoryEP4Copl
_ZN10CjbmPlayer7gettypeB5cxx11Ev
_ZN10CjbmPlayer9getauthorB5cxx11Ev
_ZN10CjbmPlayerD0Ev
_ZN10CjbmPlayerD1Ev
_ZN10CksmPlayer10getrefreshEv
_ZN10CksmPlayer13getinstrumentB5cxx11Ej
_ZN10CksmPlayer14getinstrumentsEv
_ZN10CksmPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CksmPlayer6rewindEi
_ZN10CksmPlayer6updateEv
_ZN10CksmPlayer7factoryEP4Copl
_ZN10CksmPlayer7gettypeB5cxx11Ev
_ZN10CksmPlayer7setinstEihhhhhhhhhhh
_ZN10CksmPlayer9adlibfreqE
_ZN10CksmPlayer9loadinstsEP10binistream
_ZN10CksmPlayerD0Ev
_ZN10CksmPlayerD1Ev
_ZN10CldsPlayer10getrefreshEv
_ZN10CldsPlayer14getinstrumentsEv
_ZN10CldsPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CldsPlayer6getrowEv
_ZN10CldsPlayer6maxposE
_ZN10CldsPlayer6rewindEi
_ZN10CldsPlayer6updateEv
_ZN10CldsPlayer6vibtabE
_ZN10CldsPlayer7factoryEP4Copl
_ZN10CldsPlayer7gettypeB5cxx11Ev
_ZN10CldsPlayer7tremtabE
_ZN10CldsPlayer8getorderEv
_ZN10CldsPlayer8getspeedEv
_ZN10CldsPlayer8maxsoundE
_ZN10CldsPlayer9frequencyE
_ZN10CldsPlayer9getordersEv
_ZN10CldsPlayer9playsoundEiii
_ZN10CldsPlayerC1EP4Copl
_ZN10CldsPlayerC2EP4Copl
_ZN10CldsPlayerD0Ev
_ZN10CldsPlayerD1Ev
_ZN10CldsPlayerD2Ev
_ZN10CmadLoader10getrefreshEv
_ZN10CmadLoader13getinstrumentB5cxx11Ej
_ZN10CmadLoader14getinstrumentsEv
_ZN10CmadLoader4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CmadLoader6rewindEi
_ZN10CmadLoader7factoryEP4Copl
_ZN10CmadLoader7gettypeB5cxx11Ev
_ZN10CmadLoaderD0Ev
_ZN10CmadLoaderD1Ev
_ZN10CmdiPlayer10getrefreshEv
_ZN10CmdiPlayer14executeCommandEv
_ZN10CmdiPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CmdiPlayer6rewindEi
_ZN10CmdiPlayer6updateEv
_ZN10CmdiPlayer7factoryEP4Copl
_ZN10CmdiPlayer7gettypeB5cxx11Ev
_ZN10CmdiPlayer8SetTempoEj
_ZN10CmdiPlayer9GetVarValEv
_ZN10CmdiPlayerD0Ev
_ZN10CmdiPlayerD1Ev
_ZN10CmidPlayer10getrefreshEv
_ZN10CmidPlayer10midiprintfEPKcz
_ZN10CmidPlayer11adlib_opaddE
_ZN10CmidPlayer11getsubsongsEv
_ZN10CmidPlayer13midi_fm_resetEv
_ZN10CmidPlayer14getinstrumentsEv
_ZN10CmidPlayer14midi_fm_volumeEii
_ZN10CmidPlayer14percussion_mapE
_ZN10CmidPlayer15load_sierra_insERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CmidPlayer15midi_fm_endnoteEi
_ZN10CmidPlayer16midi_fm_playnoteEiii
_ZN10CmidPlayer16midi_write_adlibEjh
_ZN10CmidPlayer18midi_fm_instrumentEiPh
_ZN10CmidPlayer18midi_fm_percussionEiPh
_ZN10CmidPlayer19sierra_next_sectionEv
_ZN10CmidPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CmidPlayer5fnumsE
_ZN10CmidPlayer6getvalEv
_ZN10CmidPlayer6rewindEi
_ZN10CmidPlayer6updateEv
_ZN10CmidPlayer7factoryEP4Copl
_ZN10CmidPlayer7getdescB5cxx11Ev
_ZN10CmidPlayer7getnextEm
_ZN10CmidPlayer7gettypeB5cxx11Ev
_ZN10CmidPlayer8datalookEl
_ZN10CmidPlayer8getnextiEm
_ZN10CmidPlayer8gettitleB5cxx11Ev
_ZN10CmidPlayer8map_chanE
_ZN10CmidPlayer9getauthorB5cxx11Ev
_ZN10CmidPlayerC1EP4Copl
_ZN10CmidPlayerC2EP4Copl
_ZN10CmidPlayerD0Ev
_ZN10CmidPlayerD1Ev
_ZN10CmkjPlayer10getrefreshEv
_ZN10CmkjPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CmkjPlayer6rewindEi
_ZN10CmkjPlayer6updateEv
_ZN10CmkjPlayer7factoryEP4Copl
_ZN10CmkjPlayer7gettypeB5cxx11Ev
_ZN10CmkjPlayerD0Ev
_ZN10CmkjPlayerD1Ev
_ZN10CmodPlayer10getpatternEv
_ZN10CmodPlayer10getrefreshEv
_ZN10CmodPlayer10slide_downEhi
_ZN10CmodPlayer10vibratotabE
_ZN10CmodPlayer10vol_up_altEhi
_ZN10CmodPlayer11getpatternsEv
_ZN10CmodPlayer12set_opl_chipEh
_ZN10CmodPlayer12vol_down_altEhi
_ZN10CmodPlayer13init_trackordEv
_ZN10CmodPlayer13realloc_orderEm
_ZN10CmodPlayer13resolve_orderEv
_ZN10CmodPlayer13sa2_notetableE
_ZN10CmodPlayer13setvolume_altEh
_ZN10CmodPlayer14init_notetableEPKt
_ZN10CmodPlayer15init_specialarpEv
_ZN10CmodPlayer15tone_portamentoEhh
_ZN10CmodPlayer16dealloc_patternsEv
_ZN10CmodPlayer16realloc_patternsEmmm
_ZN10CmodPlayer19realloc_instrumentsEm
_ZN10CmodPlayer6getrowEv
_ZN10CmodPlayer6rewindEi
_ZN10CmodPlayer6updateEv
_ZN10CmodPlayer6vol_upEhi
_ZN10CmodPlayer7deallocEv
_ZN10CmodPlayer7setfreqEh
_ZN10CmodPlayer7setnoteEhi
_ZN10CmodPlayer7vibratoEhhh
_ZN10CmodPlayer8getorderEv
_ZN10CmodPlayer8getspeedEv
_ZN10CmodPlayer8playnoteEh
_ZN10CmodPlayer8slide_upEhi
_ZN10CmodPlayer8vol_downEhi
_ZN10CmodPlayer9getordersEv
_ZN10CmodPlayer9setvolumeEh
_ZN10CmodPlayerC1EP4Copl
_ZN10CmodPlayerC2EP4Copl
_ZN10CmodPlayerD0Ev
_ZN10CmodPlayerD1Ev
_ZN10CmodPlayerD2Ev
_ZN10CmscPlayer10getrefreshEv
_ZN10CmscPlayer11load_headerEP10binistreamPNS_10msc_headerE
_ZN10CmscPlayer12decode_octetEPh
_ZN10CmscPlayer13msc_signatureE
_ZN10CmscPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CmscPlayer6rewindEi
_ZN10CmscPlayer6updateEv
_ZN10CmscPlayer7factoryEP4Copl
_ZN10CmscPlayer7gettypeB5cxx11Ev
_ZN10CmscPlayerC1EP4Copl
_ZN10CmscPlayerC2EP4Copl
_ZN10CmscPlayerD0Ev
_ZN10CmscPlayerD1Ev
_ZN10CmscPlayerD2Ev
_ZN10CmtkLoader13getinstrumentB5cxx11Ej
_ZN10CmtkLoader14getinstrumentsEv
_ZN10CmtkLoader4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CmtkLoader7factoryEP4Copl
_ZN10CmtkLoader7gettypeB5cxx11Ev
_ZN10CmtkLoader8gettitleB5cxx11Ev
_ZN10CmtkLoader9getauthorB5cxx11Ev
_ZN10CmtkLoaderD0Ev
_ZN10CmtkLoaderD1Ev
_ZN10CmusPlayer10getrefreshEv
_ZN10CmusPlayer11InstsLoadedEv
_ZN10CmusPlayer13getinstrumentB5cxx11Ej
_ZN10CmusPlayer14LoadTimbreBankENSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CmusPlayer14executeCommandEv
_ZN10CmusPlayer14getinstrumentsEv
_ZN10CmusPlayer15FetchTimbreDataENSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CmusPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CmusPlayer6rewindEi
_ZN10CmusPlayer6updateEv
_ZN10CmusPlayer7factoryEP4Copl
_ZN10CmusPlayer7gettypeB5cxx11Ev
_ZN10CmusPlayer8GetTicksEv
_ZN10CmusPlayer8SetTempoEth
_ZN10CmusPlayer8gettitleB5cxx11Ev
_ZN10CmusPlayerD0Ev
_ZN10CmusPlayerD1Ev
_ZN10CrawPlayer10getrefreshEv
_ZN10CrawPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CrawPlayer6rewindEi
_ZN10CrawPlayer6updateEv
_ZN10CrawPlayer7factoryEP4Copl
_ZN10CrawPlayer7getdescB5cxx11Ev
_ZN10CrawPlayer7gettypeB5cxx11Ev
_ZN10CrawPlayer8gettitleB5cxx11Ev
_ZN10CrawPlayer9getauthorB5cxx11Ev
_ZN10CrawPlayerD0Ev
_ZN10CrawPlayerD1Ev
_ZN10CrixPlayer10ad_C0_offsE
_ZN10CrixPlayer10getrefreshEv
_ZN10CrixPlayer10ins_to_regEtPtt
_ZN10CrixPlayer11bd_reg_dataE
_ZN10CrixPlayer11getsubsongsEv
_ZN10CrixPlayer4loadERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERK13CFileProvider
_ZN10CrixPlayer6adflagE
_ZN10CrixPlayer6modifyE
_ZN10CrixPlayer6rewindEi
_ZN10CrixPlayer6updateEv
_ZN10CrixPlayer7factoryEP4Copl
_ZN10CrixPlayer7gettypeB5cxx11Ev
_ZN10CrixPlayer8for40regE
_ZN10CrixPlayer8mus_timeE
_ZN10CrixPlayer8reg_dataE
_ZN10CrixPlayer8rix_procEv
_ZN10CrixPlayerC1EP4Copl
_ZN10CrixPlayerC2EP4Copl
_ZN10CrixPlayerD0Ev
_ZN10CrixPlayerD1Ev
_ZN10CrixPlayerD2Ev

Sections

.text
Size: 355KB - Virtual size: 354KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 87KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d93e0c3c1d4b1138342d3cbb3d397d7

Headers

DLL Characteristics

File Characteristics

Imports

audcore5

libgcc_s_seh-1

libintl-8

kernel32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

libstdc++-6

Exports

Exports

Sections

.text Size: 355KB - Virtual size: 354KB

.data Size: 3KB - Virtual size: 2KB

.rdata Size: 55KB - Virtual size: 54KB

.pdata Size: 16KB - Virtual size: 16KB

.xdata Size: 18KB - Virtual size: 18KB

.bss Size: - Virtual size: 87KB

.edata Size: 71KB - Virtual size: 70KB

.idata Size: 7KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 355KB - Virtual size: 354KB

.data
Size: 3KB - Virtual size: 2KB

.rdata
Size: 55KB - Virtual size: 54KB

.pdata
Size: 16KB - Virtual size: 16KB

.xdata
Size: 18KB - Virtual size: 18KB

.bss
Size: - Virtual size: 87KB

.edata
Size: 71KB - Virtual size: 70KB

.idata
Size: 7KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 4KB - Virtual size: 4KB