2026-07-05_6efcb2e44f5ae4f314ccc85b244bd400_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_6efcb2e44f5ae4f314ccc85b244bd400_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 15.7MB
Sample260705-lcb3fabt5w
SHA256 f16e104fa640bf2b76866779bdb7f7cac90db919d2b16b98ddece3ad4ba55c69
MD5 6efcb2e44f5ae4f314ccc85b244bd400
SHA1 2ce98a515a866c0297132b12ac3fcbbbda1096eb
SHA512 ab74bce6509b5b6d16c93a785973b2c5f5c3e45f85ccec80f03dcf71e03c2795a2c070ff1609e4c28f999339ef6a7ecc8a7d11692502a8758d35600e85da5e34
SSDEEP 196608:t9OHFLRpnaq9lwLv6NRGOAArCnD+rHDJFF2B24KJvQSrK3rowDu+TS:XOHpK9mNRGur8B2JvdQJu
TLSH
T12AF64A102905B19BE6D53BB9B3D33AF009E7AA9463368AC3D1E91D1DE2117C399391CF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-07-05_6efcb2e44f5ae4f314ccc85b244bd400_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-05_6efcb2e44f5ae4f314ccc85b244bd400_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 15.7MB

2026-07-05_6efcb2e44f5ae4f314ccc85b244bd400_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 103b3c23ffba5d1f4c7de84db34f2d5e
SHA256 f16e104fa640bf2b76866779bdb7f7cac90db919d2b16b98ddece3ad4ba55c69
MD5 6efcb2e44f5ae4f314ccc85b244bd400
SHA1 2ce98a515a866c0297132b12ac3fcbbbda1096eb
SHA512 ab74bce6509b5b6d16c93a785973b2c5f5c3e45f85ccec80f03dcf71e03c2795a2c070ff1609e4c28f999339ef6a7ecc8a7d11692502a8758d35600e85da5e34
SSDEEP 196608:t9OHFLRpnaq9lwLv6NRGOAArCnD+rHDJFF2B24KJvQSrK3rowDu+TS:XOHpK9mNRGur8B2JvdQJu
TLSH
T12AF64A102905B19BE6D53BB9B3D33AF009E7AA9463368AC3D1E91D1DE2117C399391CF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

f7:8a:1b:f7:66:2d:0c:8d:52:b1:2b:f4:e6:86:c2:c2:43:4b:2c:97:1c:05:61:cd:19:39:f3:d3:84:f2:46:e9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

NO CERTIFICATE

Chains

Jan 1, 0001

Minor OS version

Major OS version

Entry point

2154226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

iphlpapi

GetIpNetTable

kernel32

GetPrivateProfileStringA lstrlenA GlobalFree LoadLibraryA FreeLibrary HeapQueryInformation HeapSize SetEndOfFile OutputDebugStringW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW SetStdHandle GetTimeZoneInformation CreateProcessW GetExitCodeProcess ReadConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc DeleteFileA GetCurrentDirectoryA GetTickCount GetFileAttributesExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapAlloc HeapFree WriteConsoleW GetStdHandle GetCommandLineW GetCommandLineA GetFileType FreeLibraryAndExitThread ExitThread GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree TlsSetValue GetCurrentDirectoryW TlsAlloc InitializeCriticalSectionAndSpinCount InterlockedPushEntrySList RtlUnwind RaiseException GetComputerNameW SetFileAttributesW GetVolumeInformationW GetFileSizeEx FindFirstFileW CreateDirectoryW CreateSemaphoreW ResetEvent GetFileInformationByHandle GetModuleFileNameW WaitNamedPipeW PeekNamedPipe SetLastError GetStartupInfoW IsDebuggerPresent InitializeSListHead TerminateProcess UnhandledExceptionFilter Thread32Next Thread32First GetThreadContext ResumeThread SuspendThread OpenThread CreateFileW IsProcessorFeaturePresent GetProcessHeap HeapValidate GetCPInfo GetModuleHandleW GetTickCount64 GetSystemTimeAsFileTime SleepConditionVariableSRW WakeAllConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive GetModuleFileNameA RtlCaptureStackBackTrace ReadProcessMemory GetCurrentProcessId GetCurrentProcess GetLastError FindNextFileA FindFirstFileA FindClose MultiByteToWideChar SetFileAttributesA Module32Next Module32First QueryPerformanceFrequency LCMapStringEx DecodePointer EncodePointer LocalFree InitializeCriticalSectionEx GetStringTypeW GetExitCodeThread CreateToolhelp32Snapshot GetSystemInfo SetThreadPriority CreateEventA WaitForSingleObject SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle GetFileAttributesA WaitForSingleObjectEx QueryPerformanceCounter ReleaseSemaphore GetLocaleInfoA CompareStringA WideCharToMultiByte lstrlenW GlobalLock GlobalUnlock GetVersionExA GetSystemDirectoryA WriteFile ReadFile GetCurrentThreadId SetUnhandledExceptionFilter GetFileSize CreateFileA CreateFileMappingA UnmapViewOfFile MapViewOfFile OutputDebugStringA GlobalAlloc CreateDirectoryA GetProcAddress GetModuleHandleA CreateThread Sleep TlsGetValue

user32

CreatePopupMenu DestroyMenu InsertMenuA TrackPopupMenu SetForegroundWindow ChangeDisplaySettingsA ReleaseCapture RegisterClassExA PeekMessageA GetDC ReleaseDC DestroyWindow CharNextExA CharPrevExA RegisterClassA GetMenu SetWindowTextA GetWindowRect AdjustWindowRectEx GetWindowLongA SetWindowLongA LoadCursorA GetKeyboardLayoutNameA GetKeyboardLayout OpenClipboard CloseClipboard GetClipboardData CharNextW IntersectRect PostThreadMessageA SetCapture GetCapture ClientToScreen SetCursorPos LoadImageA DestroyCursor SetCursor ShowCursor GetKeyState SystemParametersInfoA DestroyIcon LoadIconA GetWindow GetTopWindow FindWindowA ScreenToClient GetCursorPos GetWindowTextLengthA GetAsyncKeyState IsWindowVisible SetWindowPos FlashWindowEx SendMessageA PostQuitMessage GetClientRect UpdateWindow SetFocus MoveWindow ShowWindow CreateWindowExA IsWindow GetSystemMetrics InvalidateRect FillRect SetRect OffsetRect LoadStringA GetMessageA TranslateMessage DispatchMessageA MessageBoxA UnregisterClassA DefWindowProcA GetWindowTextA IsIconic

gdi32

TextOutW StretchBlt DeleteObject CreateSolidBrush EnumFontFamiliesExA GetStockObject CreateCompatibleDC DeleteDC SelectObject SetBkColor SetBkMode SetTextColor CreateDIBSection GetTextExtentPoint32A TextOutA CreateFontIndirectA GetCharABCWidthsFloatW GetTextExtentPoint32W

shell32

Shell_NotifyIconA SHGetSpecialFolderPathA SHGetKnownFolderPath ShellExecuteA

ole32

CoUninitialize CoInitialize CoCreateInstance CoInitializeEx CoTaskMemFree

winmm

timeBeginPeriod timeGetDevCaps timeGetTime timeEndPeriod

d3d8

Direct3DCreate8

python27

PyClass_Type PyExc_ImportError PyExc_NameError PyExc_TypeError _PyThreadState_Current PyInt_FromSsize_t PyInt_AsSsize_t PyDict_Contains PyFile_WriteObject PyFile_SoftSpace PyFile_WriteString PyErr_Restore PyErr_GivenExceptionMatches PyErr_NormalizeException PySys_GetObject PyObject_Size PyNumber_Index PyNumber_InPlaceSubtract PySequence_GetSlice PyInt_Type PyExc_AttributeError PyExc_UnboundLocalError PyType_IsSubtype PyUnicodeUCS2_AsUTF8String PyLong_FromString PyErr_SetNone PyEval_GetBuiltins PyEval_MergeCompilerFlags PySequence_Contains PyObject_IsInstance PyTraceBack_Type PyExc_BaseException PyList_Type PyObject_DelItem PyNumber_Divmod PyTuple_GetSlice PyNumber_Absolute PyExc_ZeroDivisionError PySequence_Tuple PyDict_Items PyObject_CallMethodObjArgs PyIter_Next PySequence_SetSlice PyDict_Type PyList_Sort PyNumber_Negative PyObject_SelfIter PyObject_GenericGetAttr PySet_New PyErr_WriteUnraisable PyArg_UnpackTuple _PyObject_CallFunction_SizeT _PyObject_CallMethod_SizeT PyExc_GeneratorExit PyNumber_InPlaceMultiply PySequence_DelSlice PyNumber_And PyTuple_Type PyString_Type _Py_TrueStruct _Py_ZeroStruct PyUnicode_Type PyFrame_New PyNumber_InPlaceAdd PyNumber_Remainder PyNumber_FloorDivide PyNumber_Divide PyNumber_Multiply PyNumber_Subtract PyNumber_Add PyObject_GetIter PyObject_SetItem PyObject_GetItem PyObject_CallFunctionObjArgs PyObject_Call Py_GetVersion PyOS_snprintf PyErr_Format PyErr_ExceptionMatches PyErr_SetObject PyErr_WarnEx PyTraceBack_Here PyMethod_New PyCFunction_Call PyDict_GetItem PyTuple_Pack _PyString_Eq PyString_FromFormat PyFloat_FromString PyInt_FromString PyUnicodeUCS2_Compare PyObject_GC_Del PyObject_GC_UnTrack PyObject_GC_Track _PyObject_GC_New PyObject_ClearWeakRefs PyObject_IsTrue PyObject_HasAttr PyObject_SetAttr PyObject_SetAttrString PyObject_RichCompare PyType_Ready PyMem_Free PyMem_Realloc PyMem_Malloc PyNumber_Check PyCode_New PyExc_ValueError PyErr_NoMemory PyDict_SetItem PyString_FromStringAndSize PyFloat_FromDouble PyUnicodeUCS2_DecodeUTF8 PyCode_Type PyEval_EvalCode PyExc_StopIteration PyExc_AssertionError PyImport_AddModule Py_FlushLine Py_CompileStringFlags PyRun_StringFlags Py_BuildValue Py_InitModule4 PyModule_AddIntConstant PyLong_AsLong PyTuple_Size PyTuple_GetItem PyDict_GetItemString PyArg_ParseTuple PyObject_GetAttrString PyObject_HasAttrString Py_IncRef PyInt_FromLong PyInt_FromSize_t PyBool_FromLong PyLong_FromLongLong PyString_FromString PyString_AsString PyTuple_New PyList_New PyList_Size PyList_GetItem PyList_Append PyDict_New PyDict_SetItemString PyImport_ImportModule _Py_NoneStruct PyTuple_SetItem PyInt_AsLong PyDict_Next PyDict_Size PyErr_SetString PyExc_RuntimeError PyErr_Occurred PyModule_AddStringConstant PyImport_GetModuleDict PyExc_SystemError PyString_InternFromString PyObject_GetAttr PyCallable_Check PyLong_AsLongLong PyLong_AsUnsignedLongLong PyFloat_AsDouble PyErr_Clear PyErr_BadArgument PyErr_Print PyModule_GetDict PyObject_CallObject PyErr_Fetch Py_SetProgramName Py_Initialize PyFloat_Type Py_Finalize

wininet

InternetOpenUrlA InternetReadFile HttpQueryInfoA InternetOpenA InternetCloseHandle

libcef

cef_string_utf16_cmp cef_string_utf8_clear cef_string_multimap_free cef_string_multimap_alloc cef_log cef_string_multimap_append cef_string_multimap_value cef_string_multimap_key cef_string_multimap_size cef_string_map_append cef_string_map_value cef_string_map_key cef_string_map_size cef_string_list_append cef_string_list_value cef_string_list_size cef_browser_host_create_browser cef_command_line_get_global cef_string_map_free cef_string_map_alloc cef_v8context_get_current_context cef_api_hash cef_run_message_loop cef_shutdown cef_initialize cef_execute_process cef_register_extension cef_string_list_free cef_string_list_alloc cef_string_userfree_utf16_free cef_string_utf16_set cef_string_utf16_clear cef_string_utf8_to_utf16 cef_string_utf16_to_utf8

imm32

ImmGetIMEFileNameA ImmIsIME ImmGetContext ImmReleaseContext ImmAssociateContext ImmGetCompositionStringW ImmSetCompositionStringW ImmGetCandidateListW ImmGetConversionStatus ImmSetConversionStatus ImmGetOpenStatus ImmNotifyIME

shlwapi

PathRemoveFileSpecA

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

imagehlp

StackWalk64 SymInitialize SymFunctionTableAccess64 SymGetModuleBase64

devil

ilBindImage ilDeleteImages ilGetInteger ilInit ilTexImage ilSetPixels ilSave ilShutDown ilOriginFunc ilEnable ilCopyPixels ilConvertImage ilLoad ilGenImages

granny2

_GrannyReadEntireFileFromMemory@8 _GrannyConvertSingleObject@20 _GrannyFindMatchingMember@16 _GrannyGetMaterialTextureByType@8 _GrannySetLogCallback@4 _GrannySetControlSpeed@8 _GrannyGetControlLocalDuration@4 _GrannySetControlEaseIn@8 _GrannyFreeFileSection@8 _GrannySetControlEaseOut@8 _GrannyFreeFile@4 _GrannyGetFileInfo@4 _GrannyGetSourceSkeleton@4 _GrannySetModelClock@8 _GrannyFreeCompletedModelControls@4 _GrannySampleModelAnimationsAccelerated@20 _GrannySetControlEaseOutCurve@28 _GrannyGetControlRawLocalClock@4 _GrannySetControlRawLocalClock@8 _GrannyPlayControlledAnimation@12 _GrannyGetMeshTriangleGroupCount@4 _GrannyGetMeshTriangleGroups@4 _GrannyUpdateModelMatrix@20 _GrannyNewLocalPose@4 _GrannyFreeLocalPose@4 _GrannyGetWorldPoseComposite4x4Array@4 _GrannyInstantiateModel@4 _GrannyFreeModelInstance@4 _GrannyGetMeshVertexType@4 _GrannyCopyMeshVertices@12 _GrannyGetMeshVertices@4 _GrannyCopyMeshIndices@12 _GrannyNewMeshDeformer@16 _GrannyFreeMeshDeformer@4 _GrannyDeformVertices@24 GrannyPNT332VertexType _GrannySetControlLoopCount@8 _GrannyGetControlLoopCount@4 _GrannyNewMeshBinding@12 _GrannyFreeMeshBinding@4 _GrannyGetMeshBindingToBoneIndices@4 _GrannyFindBoneByName@12 _GrannyNewWorldPose@4 _GrannyFreeWorldPose@4 _GrannyGetWorldPose4x4@8 _GrannyGetWorldPoseComposite4x4@8 _GrannyGetTotalTypeSize@4 _GrannyGetMeshVertexCount@4 _GrannyMeshIsRigid@4 _GrannyGetMeshIndexCount@4 _GrannyFreeControl@4 _GrannyFreeControlOnceUnused@4 _GrannyCompleteControlAt@8 _GrannyControlIsComplete@4 _GrannyFreeControlIfComplete@4 _GrannySetControlEaseInCurve@28 _GrannyGetControlSpeed@4

mss32

_AIL_decompress_ASI@24 _AIL_WAV_info@8 _AIL_file_read@8 _AIL_decompress_ADPCM@12 _AIL_file_type@8 _AIL_auto_update_3D_position@8 _AIL_open_digital_driver@16 _AIL_open_stream@12 _AIL_3D_sample_volume@4 _AIL_mem_free_lock@4 _AIL_3D_sample_status@4 _AIL_set_3D_sample_loop_count@8 _AIL_set_3D_sample_volume@8 _AIL_set_3D_sample_file@8 _AIL_end_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_start_3D_sample@4 _AIL_release_3D_sample_handle@4 _AIL_allocate_3D_sample_handle@4 _AIL_sample_volume_pan@12 _AIL_sample_status@4 _AIL_set_sample_loop_count@8 _AIL_set_sample_volume_pan@12 _AIL_end_sample@4 _AIL_resume_sample@4 _AIL_stop_sample@4 _AIL_start_sample@4 _AIL_set_sample_file@12 _AIL_init_sample@4 _AIL_release_sample_handle@4 _AIL_allocate_sample_handle@4 _AIL_last_error@0 _AIL_stream_status@4 _AIL_set_stream_loop_count@8 _AIL_stream_volume_levels@12 _AIL_set_stream_volume_levels@12 _AIL_pause_stream@8 _AIL_start_stream@4 _AIL_close_stream@4 _AIL_set_redist_directory@4 _AIL_shutdown@0 _AIL_startup@0 _AIL_set_3D_orientation@28 _AIL_set_3D_velocity@20 _AIL_set_3D_position@16 _AIL_close_3D_listener@4 _AIL_open_3D_listener@4 _AIL_close_3D_provider@4 _AIL_open_3D_provider@4 _AIL_enumerate_3D_providers@12 _AIL_close_digital_driver@4 _AIL_set_file_callbacks@16

speedtreert

?SetTime@CSpeedTreeRT@@SAXM@Z ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ??3CSpeedTreeRT@@SAXPAX@Z ??2CSpeedTreeRT@@SAPAXI@Z ??1CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0SGeometry@CSpeedTreeRT@@QAE@XZ ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z

dinput8

DirectInput8Create

ws2_32

socket WSAStartup send select recv ioctlsocket connect closesocket __WSAFDIsSet gethostbyname inet_addr WSAGetLastError WSACleanup htons

ddraw

DirectDrawCreate

bcrypt

BCryptGenRandom

crypt32

CryptProtectData CryptUnprotectData

advapi32

RegCloseKey RegOpenKeyExA RegGetValueW RegDeleteValueW RegQueryValueExA RegOpenKeyA RegQueryValueExW RegOpenKeyExW RegSetValueExW RegCreateKeyExW

oleaut32

SysFreeString VariantClear

??0VoiceChat@amun@@QAE@ABV01@@Z ??4VoiceChat@amun@@QAEAAV01@ABV01@@Z ??_7VoiceChat@amun@@6B@ initaurabonusemis initaurayukselt initautoselldialog initblackmarket initbosstime initbotcontrol initcaptchanewwindow initcuberenewalwindow initdeleteitem initfishingbot initfishingwindow initintroLogin initloginwindow initlompasswindow initlottery initluckyboxwindow initmenusystemdialog initnpcekran initoffer_banner initoffer_window initpatchnotes initpetfeedwindow initpethatchingwindow initpetinformationwindow initpetminiinformationwindow initranking initroyalpasswindow initsupportequipmentwindow initsupportinformationwindow initsystem inittpwizarddropwindow inittpwizardinfowindow inituiAffectShower inituialignmentpanel inituiarenaleague inituiareyouinornot inituiaurayukselt inituiautohunt inituiautosell inituibiyolog inituiblackmarket inituibossranking inituibosstime inituibotcontrol inituicuberenewal inituidcitemshop inituidcitemshopadmin inituideleteitem inituieventcalendarnew inituiikashop inituilottery inituiluckybox inituimenusystem inituinpcekran inituioffergui inituipatchnotes inituipetfeed inituipetincubatrice inituipetsystem inituiprivateshopsearch inituipublisherinfo inituirank inituireward inituiroyalpass inituisupportsystem inituitanakaevent inituitpwizardinfo inituiwheeloffortune

Name

.text

Size

10.4MB

Virtual Size

10.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

636KB

Virtual Size

636KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

931KB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdataa0

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

899KB

Virtual Size

898KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

200KB

Virtual Size

199KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=2, id=261, version=34435,

count=25, id=260, version=34435,

count=50, id=259, version=35215,

count=227, id=261, version=35215,

count=4, id=170, productName=VS2010 build 30319, version=30319,

count=68, id=260, version=35227,

count=38, id=261, version=30146,

count=2, id=261, version=35213,

count=4, id=260, version=32822,

count=1, id=261, version=35221,

count=58, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=2, id=203, productName=VS2012 UPD3 build 60610, version=60610,

count=2, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=48, id=265, version=35227,

count=117, id=261, productName=VS2019 v16.4.4 build 28316, version=28316,

count=2, id=253, version=35207,

count=37, id=259, version=35207,

count=20, id=260, version=35207,

count=9, id=261, version=35222,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=28, version=9178,

count=76, id=29, version=9178,

count=1, id=18, version=8444,

count=10, productName=Unmarked objects (old),

count=4, id=25, version=9210,

count=44, id=260, version=35215,

count=3, id=262, version=35215,

count=37, id=257, version=35215,

count=835, id=1, productName=Unmarked objects,

count=104, id=261, version=35207,

count=326, id=261, version=35227,

count=1, id=256, version=35227,

count=1, id=255, version=35227,

count=1, id=258, version=35227,