DiscordCreate
DiscordVersion
rust_eh_personality
Static task
static1
Behavioral task
behavioral1
Sample
Aura (123).rar
Resource
win10v2004-20241007-en
Target
Aura (123).rar
Size
373KB
MD5
07548c2a5847ad0029f1e7562940e00b
SHA1
ecb87973af3fc481595169bd577a08bd22ef2f32
SHA256
73fc5919066a87f1310c3449d02dcce2249cdccede4a51f899cd7d43944d8159
SHA512
fc527e8c3f3a41ecbbd29a7babe9db2e8d065310213d93b1d36561c69c9dc1045983ebe5c4a5bce2cfbe8c95f16658d3e291e46d5bc491ea2ed67599b5803a36
SSDEEP
6144:YmnllS0FJv76N/MbPTfiYC7VNxYxAwJHbcVSlhFu2gpvzdzpBJI52BpiztRbhAFc:YUlFJv7WkbbiYtxAwygebdzXDB0ztRbr
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/Aura/Aura.exe |
unpack001/Aura/data/discord_game_sdk.dll |
unpack001/Aura/plugins/DiscordRPPlugin.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DiscordCreate
DiscordVersion
rust_eh_personality
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
E:\Projects\BPReview\2023.10.01\DiscordRPCPlugin\plugins\DiscordRPPlugin.pdb
?GetbOverTime@ServerWrapper@@QEAAKXZ
?setValue@CVarWrapper@@QEAAXH@Z
?getBoolValue@CVarWrapper@@QEAA_NXZ
??BCVarWrapper@@QEAA_NXZ
?getCvar@CVarManagerWrapper@@QEAA?AVCVarWrapper@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Execute@GameWrapper@@QEAAXV?$function@$$A6AXPEAVGameWrapper@@@Z@std@@@Z
?executeCommand@CVarManagerWrapper@@QEAAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?addOnValueChanged@CVarWrapper@@QEAAXV?$function@$$A6AXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VCVarWrapper@@@Z@std@@@Z
?bindTo@CVarWrapper@@QEAAXV?$shared_ptr@_N@std@@@Z
??1CVarWrapper@@QEAA@XZ
?registerCvar@CVarManagerWrapper@@QEAA?AVCVarWrapper@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00_N1M1M1@Z
?SetTimeout@GameWrapper@@QEAAXV?$function@$$A6AXPEAVGameWrapper@@@Z@std@@M@Z
??0ServerWrapper@@QEAA@_K@Z
?IsInGame@GameWrapper@@QEAA_NXZ
?IsInCustomTraining@GameWrapper@@QEAA_NXZ
?GetGameEventAsServer@GameWrapper@@QEAA?AVServerWrapper@@XZ
?IsInFreeplay@GameWrapper@@QEAA_NXZ
?GetOnlineGame@GameWrapper@@QEAA?AVServerWrapper@@XZ
?IsSpectator@PriWrapper@@QEAA_NXZ
?GetPRI@PlayerControllerWrapper@@QEAA?AVPriWrapper@@XZ
??1PlayerControllerWrapper@@QEAA@XZ
?GetPlayerController@GameWrapper@@QEAA?AVPlayerControllerWrapper@@XZ
?IsInOnlineGame@GameWrapper@@QEAA_NXZ
??1ReplayServerWrapper@@QEAA@XZ
?GetGameEventAsReplay@GameWrapper@@QEAA?AVReplayServerWrapper@@XZ
?IsInReplay@GameWrapper@@QEAA_NXZ
?GetTotalRounds@TrainingEditorWrapper@@QEAAHXZ
?GetTM_Name@TrainingEditorSaveDataWrapper@@QEAA?AVUnrealStringWrapper@@XZ
?GetActiveRoundNumber@GameEditorWrapper@@QEAAHXZ
??1TrainingEditorSaveDataWrapper@@QEAA@XZ
?GetTrainingData@GameEditorSaveDataWrapper@@QEAA?AVTrainingEditorSaveDataWrapper@@XZ
??BTrainingEditorSaveDataWrapper@@QEBA_NXZ
??1GameEditorSaveDataWrapper@@QEAA@XZ
?GetTrainingData@TrainingEditorWrapper@@QEAA?AVGameEditorSaveDataWrapper@@XZ
??BSaveDataWrapper@@QEBA_NXZ
??1UnrealStringWrapper@@QEAA@XZ
?GetTrainingFileName@TrainingEditorWrapper@@QEAA?AVUnrealStringWrapper@@XZ
?ToString@UnrealStringWrapper@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1TrainingEditorWrapper@@QEAA@XZ
??0TrainingEditorWrapper@@QEAA@_K@Z
??0ServerWrapper@@QEAA@AEBV0@@Z
?GetbMatchEnded@ServerWrapper@@QEAAKXZ
?GetPlayerMMR@MMRWrapper@@QEAAMVUniqueIDWrapper@@H@Z
??0UniqueIDWrapper@@QEAA@AEBV0@@Z
?GetPlayerRank@MMRWrapper@@QEAA?AUSkillRank@@VUniqueIDWrapper@@H@Z
??1MMRWrapper@@QEAA@XZ
?GetMMRWrapper@GameWrapper@@QEAA?AVMMRWrapper@@XZ
??1UniqueIDWrapper@@QEAA@XZ
?GetUniqueID@GameWrapper@@QEAA?AVUniqueIDWrapper@@XZ
?GetTeamNum@PlayerReplicationInfoWrapper@@QEAAEXZ
??1PriWrapper@@QEAA@XZ
?GetPRI@VehicleWrapper@@QEAA?AVPriWrapper@@XZ
??1CarWrapper@@QEAA@XZ
?GetLocalCar@GameWrapper@@QEAA?AVCarWrapper@@XZ
?GetScore@TeamInfoWrapper@@QEAAHXZ
??1TeamWrapper@@QEAA@XZ
?Get@?$ArrayWrapper@VTeamWrapper@@@@QEAA?AVTeamWrapper@@H@Z
??BActorWrapper@@QEAA_NXZ
??1?$ArrayWrapper@VTeamWrapper@@@@QEAA@XZ
?GetTeams@TeamGameEventWrapper@@QEAA?AV?$ArrayWrapper@VTeamWrapper@@@@XZ
?IsNull@?$ArrayWrapper@VTeamWrapper@@@@QEAA_NXZ
?GetPlaylistId@GameSettingPlaylistWrapper@@QEAAHXZ
?GetMaxTeamSize@TeamGameEventWrapper@@QEAAHXZ
??BGameSettingPlaylistWrapper@@QEBA_NXZ
??1GameSettingPlaylistWrapper@@QEAA@XZ
?GetPlaylist@GameEventWrapper@@QEAA?AVGameSettingPlaylistWrapper@@XZ
?GetCurrentMap@GameWrapper@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetSecondsRemaining@ServerWrapper@@QEAAHXZ
?GetbUnlimitedTime@ServerWrapper@@QEAAKXZ
??1ServerWrapper@@QEAA@XZ
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
FlushFileBuffers
LCMapStringW
GetFileSizeEx
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
GetFileType
GetStdHandle
HeapFree
HeapAlloc
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
SetLastError
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
GetStringTypeW
InitializeSListHead
GetStartupInfoW
GetEnvironmentStringsW
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
QueryPerformanceCounter
GetModuleHandleA
GetModuleFileNameA
GetModuleFileNameW
lstrlenW
MultiByteToWideChar
CreateFileW
ReadFile
WriteFile
CloseHandle
GetLastError
PeekNamedPipe
WaitNamedPipeW
GetCurrentProcessId
RtlLookupFunctionEntry
RtlCaptureContext
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
GetModuleHandleW
SetStdHandle
HeapSize
HeapReAlloc
WriteConsoleW
FreeEnvironmentStringsW
IsDebuggerPresent
GetProcessHeap
RtlUnwindEx
WaitForSingleObjectEx
GetCurrentThreadId
GetExitCodeThread
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
ShellExecuteA
??0BakkesModPlugin@Plugin@BakkesMod@@QEAA@$$QEAV012@@Z
??0BakkesModPlugin@Plugin@BakkesMod@@QEAA@AEBV012@@Z
??0BakkesModPlugin@Plugin@BakkesMod@@QEAA@XZ
??1BakkesModPlugin@Plugin@BakkesMod@@QEAA@XZ
??4BakkesModPlugin@Plugin@BakkesMod@@QEAAAEAV012@$$QEAV012@@Z
??4BakkesModPlugin@Plugin@BakkesMod@@QEAAAEAV012@AEBV012@@Z
??_7BakkesModPlugin@Plugin@BakkesMod@@6B@
?__autoclassinit2@BakkesModPlugin@Plugin@BakkesMod@@QEAAX_K@Z
?onLoad@BakkesModPlugin@Plugin@BakkesMod@@UEAAXXZ
?onUnload@BakkesModPlugin@Plugin@BakkesMod@@UEAAXXZ
deleteMe
exports
getPlugin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ