953b606287e11ecbd6c9e55cfd41eaaa821dee012f6d2e3fb288c96a3fa5546b
- SHA256 953b606287e11ecbd6c9e55cfd41eaaa821dee012f6d2e3fb288c96a3fa5546b
Overview
overview
3Static
static
3LoaderDll.dll
windows10-2004-x64
3LoaderDll.dll
windows11-ltsc_2024-x64
3LocaleEmulator.dll
windows10-2004-x64
3LocaleEmulator.dll
windows11-ltsc_2024-x64
3winmm.dll
windows10-2004-x64
3winmm.dll
windows11-ltsc_2024-x64
3고혹의�...��.exe
windows10-2004-x64
3고혹의�...��.exe
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LoaderDll.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
LoaderDll.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
LocaleEmulator.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
LocaleEmulator.dll
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
winmm.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
winmm.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
고혹의각-AI번역.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
고혹의각-AI번역.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target 953b606287e11ecbd6c9e55cfd41eaaa821dee012f6d2e3fb288c96a3fa5546b
- Size 5.4MB
- Sample260702-vasf3se19k
- SHA256 953b606287e11ecbd6c9e55cfd41eaaa821dee012f6d2e3fb288c96a3fa5546b
- MD5 15b384286877c748a3ca30bbb17e053e
- SHA1 be9803e525ac24aa234378a1794b1059e55c98ad
- SHA512 a306f2b6dc748757867d3b44473cda28cfeb09192765581c42bfb77c8ea40887618c204ba9561bb2da0832d38b12dbfd94126f68981874be22a4d0c6a9379972
- SSDEEP 98304:X5bajqzr4LyMqXQNGKdeTfpN6WmgZtXhumYD+gFV/2MRpxUMPN6yFQkqQ8vF4u3:X9ktOQNGKdeTfpIWndMmeL2a7U4N9tqh
- TLSH T17146337528D4A09F7BA2E119DAA27C640C43A5C303ABF93B30D0635DF43BCD49E6E965
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/LoaderDll.dll unpack001/LocaleEmulator.dll unpack001/winmm.dll unpack001/고혹의각-AI번역.exe
File Explorer
-
953b606287e11ecbd6c9e55cfd41eaaa821dee012f6d2e3fb288c96a3fa5546b.zip 5.4MB
-
Arc01.dat5KB
-
Arc04.dat5.3MB
-
LoaderDll.dll.dll 6KB
-
LocaleEmulator.dll.dll 62KB
-
nogye3bET.ttf8.1MB
-
uif_config.json522B
-
winmm.dll.dll 381KB
-
고혹의각-AI번역.exe.exe 175KB
Arc01.dat
- SHA256 2c3a3b8d4bc57d74210a0ac533650e6a3227fc12c05e055f6d7c656e3170c49c
- MD5 e2ba8c1d31763259090dc05c43351522
- SHA1 1f87eb60a010cb3e819f6bdb5c608cdfcd6cc305
- SHA512 44f69c947e41ff45219355c7d8d3ae668c20e2699924c20b6bf6c2a99e3c59962edab94cae91e3bdd2f37126688a15765812080f14281a896ab4494fc766a2c4
- SSDEEP 96:5t01Ws1LY9jfH1Zkl9p3pVLn6hliHwhCZVF5Z/wT6kCqjf3Se:Cpm9OB9n6hlDMHh/dqL3Se
- TLSH T164B17D910381FCAC979353F800C69E5508179BB1384A42E4B53A73C7A5D8C6CDFAED9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Arc04.dat
- SHA256 e0d1f74c1149f6f022962eb79e64201aa3f14027f2180bc67dfcc6c26300b257
- MD5 cc5551e4a2c4a316bf333d71420b5841
- SHA1 be1649cc70b41fa6a0f7bd2b5810640a7d90d1d8
- SHA512 b7471d2a9feb784a7500a7c3ec652912de535e1ae2763c9f05b3c1f2d36acbe6c4789acbdf1fd481486f330582704e169d36fd61197a6bdacf1b800ebd8879d3
- SSDEEP 24576:KMNqVIXaGI3g7kyEQpSYnKsvI3TxNpKy1VXRDpPdR1lBazLSS0+GCiWx99NKoGxd:KmmV7PdGN3lcj5zni1m
- TLSH T19D46E2A6F66092DAD033CD324A8BE32D126FFE514E3F214774D26B6F7E612705E0A614
- MD5 SHA1 SHA512 SSDEEP TLSH
LoaderDll.dll
- IMPHASH 7b56b6bdc35f3b2666aa08133cc07ee9
- SHA256 82fae0f44f4ca0c9c37907df74cef2415eeb5fae1cf8d4f36f34ffcaf7e3cc0c
- MD5 4c9d31a794e5930708cd4622431c8e04
- SHA1 4becfa6a6b1f6e11e0029f9a63ff206b08b90c1d
- SHA512 1922f59f73641d55977b4f80f8c192f178c846f8b5d2e444c4a189bf6c83a68d6f1b741ff1d3bcf4c1edc4d24f1bfa367e4d32755562e72729bd905a48cce67e
- SSDEEP 96:t4/fGk+MevAaVwtcJKb+7eDOj6JV2IHqhiA3gxwTA8:G/fG2eB0c8+6SjeVBHmiA3gxw8
- TLSH T134C1092396889671D4EA15F75EEF989C93FDAE40033A62CF05C90C5A8950EC3F43CB02
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Paddy\Desktop\Locale-Emulator-Core\LoaderDll\Release\LoaderDll.pdb
ntdll
NtCreateSection
NtQueryInformationProcess
NtOpenProcess
RtlInitUnicodeString
LdrLoadDll
RtlPopFrame
NtClose
NtOpenDirectoryObject
NtDuplicateObject
RtlGetLastWin32Error
LdrFindEntryForAddress
NtUnmapViewOfSection
NtOpenSection
NtMapViewOfSection
RtlPushFrame
swprintf
kernel32
CreateProcessInternalW
LeCreateProcess
Name
.Asuna
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1024B
Virtual Size
570B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
LocaleEmulator.dll
- IMPHASH 2739894eb9a285a97b16eb70eddc0dc0
- SHA256 c79c175fdad174aa46a72197d148316299a56f950aaab1b84930d09ee1084a88
- MD5 3434299884d61fff4ab71460ecc03c0a
- SHA1 b978e8348d1f5bd3c34bfa9002835f6169f84922
- SHA512 d5fe1f50ea1bcd21a3047ae15e1842b4bd3c6ddaab56233c02a7b0772a9d82f6450fa0bbb858b6d902d3c46b56466cfd586ae966444dfcb5893a2b68d15943d4
- SSDEEP 1536:MwRu601S64au7kERxvsWhhssCbUei5QqkUfLGGf:MkuZY6jOsW/s1bUeUEo
- TLSH T185533B21F58681F0ECF718F9997E7D1C926E892413B85CC73B880D9A19669D33A3D387
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
42336
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Paddy\Desktop\Locale-Emulator-Core\LocaleEmulator\Release\LocaleEmulator.pdb
ntdll
_vsnwprintf
LdrUnregisterDllNotification
_vscwprintf
NtInitializeNlsFiles
LdrRegisterDllNotification
RtlInitializeCriticalSectionAndSpinCount
RtlUnicodeToMultiByteN
RtlPopFrame
RtlEnterCriticalSection
RtlMultiByteToUnicodeN
RtlLeaveCriticalSection
RtlPushFrame
RtlGetVersion
NtQueryKey
NtCreateSection
RtlEqualUnicodeString
NtOpenKey
RtlValidateUnicodeString
RtlFreeUnicodeString
LdrLoadDll
RtlInitCodePageTable
NtClose
NtOpenDirectoryObject
NtDuplicateObject
NtQueryDirectoryObject
RtlKnownExceptionFilter
NtUnmapViewOfSection
NtContinue
RtlCustomCPToUnicodeN
NtOpenSection
RtlCreateUnicodeString
NtMapViewOfSection
NtAddAtom
NtDeleteAtom
RtlMultiByteToUnicodeSize
RtlGetLastWin32Error
RtlUnicodeToMultiByteSize
RtlSetLastWin32Error
RtlCompareMemory
RtlDeleteCriticalSection
RtlDestroyHeap
RtlAllocateHeap
NtQueryVirtualMemory
NtQuerySystemInformation
LdrDisableThreadCalloutsForDll
RtlResetRtlTranslations
RtlInitNlsTables
RtlMoveMemory
RtlFreeHeap
RtlCreateHeap
RtlDuplicateUnicodeString
RtlAnsiStringToUnicodeString
NtFreeVirtualMemory
LdrGetProcedureAddress
NtFlushInstructionCache
NtOpenSymbolicLinkObject
LdrInitializeThunk
NtQueryInformationProcess
NtQuerySymbolicLinkObject
RtlUpcaseUnicodeString
NtOpenProcess
RtlInitUnicodeString
RtlDosPathNameToNtPathName_U
RtlGetFrame
NtReadFile
LdrLockLoaderLock
NtAllocateVirtualMemory
RtlReAllocateHeap
NtQueryAttributesFile
NtRaiseHardError
RtlImageNtHeader
NtReadVirtualMemory
RtlInitAnsiString
RtlFormatCurrentUserKeyPath
NtQueryInformationFile
NtProtectVirtualMemory
NtWriteVirtualMemory
LdrFindEntryForAddress
LdrUnlockLoaderLock
RtlOpenCurrentUser
RtlExpandEnvironmentStrings_U
NtQueryValueKey
RtlFreeAnsiString
swprintf
_wcsicmp
RtlUnwind
GetFileAttributesA
Name
.Asuna
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
nogye3bET.ttf
- SHA256 099b780db613b9ff16e6cc9b197f151221d2ef056d42a6173702caa83278576e
- MD5 4fb7ce7b86913539118ce650c17ef30e
- SHA1 faebb9e40b55c210c6117cf74118cef4be981f86
- SHA512 d4251a275672a06ff79b1291dedafbddee17d46419c5d767ab108ef8fd8343a9bebe6eaac9cb0d1571ec7e001c938b23f6383af838ed4cdacf075b0e3a9c9ed9
- SSDEEP 98304:TmGLfmu2gIckCZhAsHdEM4gFFUf+i8Iz1uWoZFWBPZZe9:TmYOsfEMRF6+i8IhuWoZyn
- TLSH T1FC866B83934D3D8B9261737D290112A8F1CBC42D6BEAE3E0EAC7FC5F45964D14D42EA6
- MD5 SHA1 SHA512 SSDEEP TLSH
uif_config.json
- SHA256 ee45ba339588a6c6b84805dec911149862b1135a6331f64ecf297409b4169505
- MD5 29cb298cbbe9426754bbcaef52db5e12
- SHA1 fdb1cc1b141cd013c1186e8f9516354debee6bfa
- SHA512 10e7c70c971c3cf5f48c895e9820cf09371f413fc664e3d1009a00ed3786c1033c3f7b697dbebaef20c774e4d411c2053301e7737aa81e808a79e2a93575569c
- TLSH T1D6F09E52CD244D3607F1E165A655B281E512075346610C3B39FC812C0F73F6663C6ED6
- MD5 SHA1 SHA512 TLSH
winmm.dll
- IMPHASH b11ecc9d9bb7bfa016979aaedeef6b18
- SHA256 e5c4f336e60c8543b1a88fec34f1c393e316a8b40aa82586bfe1a0e22e3d2d2d
- MD5 454e1dbcb4d53a43c790b20f972bf3f9
- SHA1 f92104e16c3e9e6aba761b9243d555e5a2533a30
- SHA512 67e18133a1eb3affaafab7951f15294e1f39c446aef7fd5003e7632ee8bb276d303cfe89d039dac9a0c06043b0c49d156d8ba707f9d5e06bf212c5c4aaac35a8
- SSDEEP 6144:k0IKmIk26zkJuw5HzIkgQ1PvfwvUUT54Y/j5rrM3fI90+7BsMCAXbjNnzfBIaAFI:dcIk7zkJuw5HzIkgQ1HfwvX/j5rrM3f0
- TLSH T16C844A30F906C436C98D02F56C69AF9A86784DA54FB140D3A7C8ADAFAD255C32F31E17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
269046
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\play\Game unpack\폰트\폰트1대1일본어강제변경\UniversalInjectorFramework-main\src\Build\UniversalInjectorFramework\Win32\winmm\winmm.pdb
kernel32
LocalFree
GetStdHandle
GetConsoleWindow
AttachConsole
AllocConsole
SetConsoleOutputCP
GetConsoleMode
SetConsoleMode
GetCurrentDirectoryW
GetCommandLineW
GetProcAddress
GetACP
WaitForSingleObject
Sleep
IsDBCSLeadByteEx
SetLastError
GetCurrentProcessId
FreeLibrary
FormatMessageA
HeapFree
HeapAlloc
RaiseException
IsDebuggerPresent
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
InitializeSListHead
WakeAllConditionVariable
GetTickCount64
SleepConditionVariableSRW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW
VirtualProtect
CreateFileW
ExitProcess
GetSystemDirectoryA
GetLastError
LoadLibraryA
GetModuleHandleW
WideCharToMultiByte
MultiByteToWideChar
DisableThreadLibraryCalls
DeleteFileA
GetModuleHandleA
CloseHandle
CreateFileA
GetProcessHeap
WriteFile
GetCurrentThreadId
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualFree
VirtualQuery
GetLocaleInfoEx
AreFileApisANSI
GetCurrentProcess
user32
DrawTextW
DrawTextExW
GrayStringA
GrayStringW
ModifyMenuW
InsertMenuItemW
TabbedTextOutW
SetMenuItemInfoW
MessageBoxW
MessageBoxExW
SetDlgItemTextW
MessageBoxIndirectW
DefWindowProcW
DefWindowProcA
DefDlgProcW
DefDlgProcA
InsertMenuW
GetWindowThreadProcessId
EnumWindows
MessageBoxA
AppendMenuW
GetWindowTextA
gdi32
ExtTextOutW
GetTextExtentPointW
GetTextExtentPoint32W
GetTextExtentExPointW
AddFontResourceExA
CreateFontIndirectExW
CreateFontIndirectExA
CreateFontIndirectW
CreateFontIndirectA
CreateFontW
CreateFontA
EnumFontFamiliesExW
EnumFontFamiliesExA
GetGlyphOutlineW
TextOutW
advapi32
RegGetValueW
RegOpenKeyA
RegCloseKey
msvcp140
?_Xbad_function_call@std@@YAXXZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?_Xinvalid_argument@std@@YAXPBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?uncaught_exceptions@std@@YAHXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?clog@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?id@?$collate@_W@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
_Wcsxfrm
_Wcscoll
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_lock
_Mtx_unlock
_Cnd_signal
_Thrd_join
_Thrd_id
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
_Cnd_do_broadcast_at_thread_exit
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
__crtLCMapStringW
??7ios_base@std@@QBE_NXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Id_cnt@id@locale@std@@0HA
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
vcruntime140
__RTDynamicCast
__vcrt_LoadLibraryExW
__vcrt_GetModuleFileNameW
__std_terminate
__std_exception_copy
__std_exception_destroy
_purecall
strrchr
__std_type_info_name
strchr
__RTtypeid
__std_type_info_compare
memcpy
memset
memmove
__current_exception
__current_exception_context
_CxxThrowException
__std_type_info_destroy_list
_except_handler4_common
__CxxFrameHandler3
api-ms-win-crt-heap-l1-1-0
malloc
free
realloc
_callnewh
api-ms-win-crt-stdio-l1-1-0
fflush
setvbuf
fsetpos
__acrt_iob_func
freopen_s
_fseeki64
fgetpos
fwrite
fread
fgetc
ungetc
__stdio_common_vsprintf
fclose
fputc
_get_stream_buffer_pointers
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-math-l1-1-0
ceil
_dsign
_dclass
api-ms-win-crt-runtime-l1-1-0
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_beginthreadex
_initterm
terminate
_errno
_initterm_e
_invalid_parameter_noinfo
api-ms-win-crt-convert-l1-1-0
strtoul
strtod
strtoll
strtoull
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
localeconv
setlocale
___lc_locale_name_func
api-ms-win-crt-string-l1-1-0
strcat_s
wcscpy_s
strcpy_s
tolower
isspace
isdigit
CloseDriver
DefDriverProc
DriverCallback
DrvGetModuleHandle
GetDriverModuleHandle
NotifyCallbackData
OpenDriver
PlaySound
PlaySoundA
PlaySoundW
SendDriverMessage
WOW32DriverCallback
WOW32ResolveMultiMediaHandle
WOWAppExit
aux32Message
auxGetDevCapsA
auxGetDevCapsW
auxGetNumDevs
auxGetVolume
auxOutMessage
auxSetVolume
joy32Message
joyConfigChanged
joyGetDevCapsA
joyGetDevCapsW
joyGetNumDevs
joyGetPos
joyGetPosEx
joyGetThreshold
joyReleaseCapture
joySetCapture
joySetThreshold
mci32Message
mciDriverNotify
mciDriverYield
mciExecute
mciFreeCommandResource
mciGetCreatorTask
mciGetDeviceIDA
mciGetDeviceIDFromElementIDA
mciGetDeviceIDFromElementIDW
mciGetDeviceIDW
mciGetDriverData
mciGetErrorStringA
mciGetErrorStringW
mciGetYieldProc
mciLoadCommandResource
mciSendCommandA
mciSendCommandW
mciSendStringA
mciSendStringW
mciSetDriverData
mciSetYieldProc
mid32Message
midiConnect
midiDisconnect
midiInAddBuffer
midiInClose
midiInGetDevCapsA
midiInGetDevCapsW
midiInGetErrorTextA
midiInGetErrorTextW
midiInGetID
midiInGetNumDevs
midiInMessage
midiInOpen
midiInPrepareHeader
midiInReset
midiInStart
midiInStop
midiInUnprepareHeader
midiOutCacheDrumPatches
midiOutCachePatches
midiOutClose
midiOutGetDevCapsA
midiOutGetDevCapsW
midiOutGetErrorTextA
midiOutGetErrorTextW
midiOutGetID
midiOutGetNumDevs
midiOutGetVolume
midiOutLongMsg
midiOutMessage
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutSetVolume
midiOutShortMsg
midiOutUnprepareHeader
midiStreamClose
midiStreamOpen
midiStreamOut
midiStreamPause
midiStreamPosition
midiStreamProperty
midiStreamRestart
midiStreamStop
mixerClose
mixerGetControlDetailsA
mixerGetControlDetailsW
mixerGetDevCapsA
mixerGetDevCapsW
mixerGetID
mixerGetLineControlsA
mixerGetLineControlsW
mixerGetLineInfoA
mixerGetLineInfoW
mixerGetNumDevs
mixerMessage
mixerOpen
mixerSetControlDetails
mmDrvInstall
mmGetCurrentTask
mmTaskBlock
mmTaskCreate
mmTaskSignal
mmTaskYield
mmioAdvance
mmioAscend
mmioClose
mmioCreateChunk
mmioDescend
mmioFlush
mmioGetInfo
mmioInstallIOProcA
mmioInstallIOProcW
mmioOpenA
mmioOpenW
mmioRead
mmioRenameA
mmioRenameW
mmioSeek
mmioSendMessage
mmioSetBuffer
mmioSetInfo
mmioStringToFOURCCA
mmioStringToFOURCCW
mmioWrite
mmsystemGetVersion
mod32Message
mxd32Message
sndPlaySoundA
sndPlaySoundW
tid32Message
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetSystemTime
timeGetTime
timeKillEvent
timeSetEvent
waveInAddBuffer
waveInClose
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetErrorTextA
waveInGetErrorTextW
waveInGetID
waveInGetNumDevs
waveInGetPosition
waveInMessage
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInStop
waveInUnprepareHeader
waveOutBreakLoop
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetErrorTextA
waveOutGetErrorTextW
waveOutGetID
waveOutGetNumDevs
waveOutGetPitch
waveOutGetPlaybackRate
waveOutGetPosition
waveOutGetVolume
waveOutMessage
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutSetPitch
waveOutSetPlaybackRate
waveOutSetVolume
waveOutUnprepareHeader
waveOutWrite
wid32Message
wod32Message
Name
.text
Size
282KB
Virtual Size
282KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
72KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.msvcjmc
Size
512B
Virtual Size
493B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=259, version=35403,
count=11, id=260, version=35403,
count=33, id=261, version=35403,
count=4, id=257, version=35403,
count=3, id=261, version=35725,
count=9, id=257, version=33145,
count=350, id=1, productName=Unmarked objects,
count=33, id=265, version=35725,
count=1, id=259, version=35725,
count=1, id=256, version=35725,
count=1, id=255, version=35725,
count=1, id=258, version=35725,
고혹의각-AI번역.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 3b96f65f3ae8cf7783e0c9750880813f69bc9a5cf5951b1e7c416c5e3e6eff6a
- MD5 57f0e934c40f75c2c6f886c6ceb31821
- SHA1 00162c251eeb04d8c5dd3dd965d006c511fc9a64
- SHA512 502caba56d9b2c0e4dbb670c352119233afa498ed68fd4550339e2f70acc1f5da99a2871ade79af86c9b4a2824787a37031d526962a7a827792fc8a27a00ffd1
- SSDEEP 3072:mEj7jMxLiqJnnDlceQ7dOixXCz20cbh8Jb1F2+1O1i0UysceNZ2niBI:J/8pJnn5+dnXCz2DKJbK+12i0TE
- TLSH T1D40412CA5B74023AEBAD467489F321640AF2A3A34213D78559EC774F1D2739A0787F72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24818
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\play\Game unpack\01. 로케일 자동실행 exe제작\작업물들\[TinkerBell] 고혹의관\GameLauncherJP-DL판\GameLauncherJP\obj\Release\GameLauncherJP.pdb
mscoree
_CorExeMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
158KB
Virtual Size
157KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ