AssassinsCreedIIGame[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
AssassinsCreedIIGame.exe
Size 33.1MB
Sample260724-yqmsbasvey
SHA256 fd2ffd308d74fad9da271cf8255beb8f5c22b6d4872b280f80ad535df7b11217
MD5 f3ab19103d513a0e1560d4d03bdb0424
SHA1 49d47eb55a91f3586ab133766379786307224f87
SHA512 3ab3e17235a087ddf32087d4e2c613dc0d77d76be8c6cc2465bd001c55a10ff5c6a800491f70657504a09e41941f0db487ace47e0f0138ca6214780f21da6f90
SSDEEP 393216:QB2B7CQGy+fnnXVUEepmLhU1SbI56NxSdq1Thhhhhhhhhhhhh2fPwX:QcvGyennOEepmVU1l6mdq1SO
TLSH
T175777D607D98C175EFCA12BFCAFD7E5A16ADD9140B1856C321D8098E5DB73E22E32183
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
AssassinsCreedIIGame.exe

File Explorer

AssassinsCreedIIGame.exe

.exe 33.1MB

AssassinsCreedIIGame.exe

IMPHASH b2dca26c91d24e1afc958cd292f9fdba
SHA256 fd2ffd308d74fad9da271cf8255beb8f5c22b6d4872b280f80ad535df7b11217
MD5 f3ab19103d513a0e1560d4d03bdb0424
SHA1 49d47eb55a91f3586ab133766379786307224f87
SHA512 3ab3e17235a087ddf32087d4e2c613dc0d77d76be8c6cc2465bd001c55a10ff5c6a800491f70657504a09e41941f0db487ace47e0f0138ca6214780f21da6f90
SSDEEP 393216:QB2B7CQGy+fnnXVUEepmLhU1SbI56NxSdq1Thhhhhhhhhhhhh2fPwX:QcvGyennOEepmVU1l6mdq1SO
TLSH
T175777D607D98C175EFCA12BFCAFD7E5A16ADD9140B1856C321D8098E5DB73E22E32183
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

ae:13:00:bd:b8:50:4b:1e:7e:cf:6d:fe:05:7f:ca:f0

Digest Algorithm

md5

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=UBISOFT ENTERTAINMENT INC.,OU=UBI.COM,O=UBISOFT ENTERTAINMENT INC.,L=montreal,ST=quebec,C=CA

Chains

Jan 1, 0001

Minor OS version

Major OS version

Entry point

8476683

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\assassin\960\assassin\pc\patch\output\win32\exe\scimitar_f.pdb

kernel32

GetModuleHandleA SetPriorityClass GetCurrentProcess CloseHandle GetLastError CreateSemaphoreA FindFirstFileA SetErrorMode SetCurrentDirectoryA GetModuleFileNameA GetTickCount WritePrivateProfileStringA ExpandEnvironmentStringsA TerminateThread CreateMutexA ReleaseMutex CreateProcessA GetEnvironmentVariableA ReadProcessMemory IsBadReadPtr GetThreadContext ConnectNamedPipe OpenProcess CreateNamedPipeA SetNamedPipeHandleState WaitNamedPipeA GetCommandLineW InterlockedCompareExchange GetSystemInfo PeekNamedPipe GetVersionExA GetPrivateProfileStringA GetPrivateProfileSectionNamesA GetPrivateProfileIntA InterlockedExchangeAdd GetExitCodeThread WaitForMultipleObjectsEx SleepEx CreateEventW SetEnvironmentVariableA CompareStringW CompareStringA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetLocaleInfoW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA GetTimeZoneInformation HeapSize SetStdHandle GetCurrentProcessId HeapCreate HeapDestroy GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings DisconnectNamedPipe GetCurrentDirectoryA FreeEnvironmentStringsA GetFileType SetHandleCount GetConsoleMode GetConsoleCP LCMapStringW LCMapStringA InterlockedExchange SetConsoleCtrlHandler FatalAppExitA GetStdHandle TlsFree IsValidCodePage GetOEMCP GetACP InterlockedDecrement GetCPInfo HeapReAlloc CreateThread ExitThread SystemTimeToFileTime LocalFileTimeToFileTime SetFileTime GetDriveTypeA FileTimeToLocalFileTime FileTimeToSystemTime GetStartupInfoA GetProcessHeap HeapAlloc HeapFree GetCommandLineA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess RtlUnwind WideCharToMultiByte GetPrivateProfileSectionA FreeLibrary GetSystemTimeAsFileTime GetFullPathNameA InterlockedIncrement GetSystemTime UnlockFile LockFileEx LockFile SetEndOfFile GetTempPathA FormatMessageA LocalFree GetOverlappedResult OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency GetLocalTime GetLogicalDriveStringsA GetCurrentThreadId Sleep SwitchToThread WaitForSingleObject OpenThread SetLastError VirtualQuery GetCurrentThread GetFileTime CreateFileA SetFilePointer GetFileSizeEx GetProcessTimes VirtualAlloc VirtualFree TlsAlloc TlsSetValue TlsGetValue InitializeCriticalSectionAndSpinCount InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection WaitForMultipleObjects CreateEventA PulseEvent SetEvent ResetEvent ReleaseSemaphore SetThreadAffinityMask GetVersion SetThreadPriority SetThreadPriorityBoost ReadFile DebugBreak SetFileAttributesA GetFileAttributesA WriteFile RaiseException SuspendThread ResumeThread CreateDirectoryA FindClose RemoveDirectoryA FindNextFileA DeleteFileA CopyFileA MoveFileA DuplicateHandle GetGeoInfoA GetUserGeoID MultiByteToWideChar CreateFileW GetProcAddress LoadLibraryA GetFileSize ReadFileEx WriteFileEx CancelIo ExitProcess FlushFileBuffers GetFileInformationByHandle

user32

TranslateMessage DispatchMessageA EnumDisplayDevicesA MessageBoxA wsprintfW MessageBoxW PeekMessageA EnumDisplayMonitors GetWindowRect SetWindowsHookExA UnhookWindowsHookEx LoadImageA IsWindowVisible LoadIconA RegisterClassExA CreateWindowExA ShowWindow UpdateWindow DestroyWindow PostQuitMessage IsIconic GetAsyncKeyState DefWindowProcA CallNextHookEx SystemParametersInfoA ShowCursor CharUpperBuffW CharLowerBuffW GetSystemMetrics IsWindow LoadCursorA GetForegroundWindow

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey GetUserNameA

shell32

CommandLineToArgvW ShellExecuteA SHGetSpecialFolderPathA SHCreateDirectoryExA

dbghelp

SymFunctionTableAccess64 MiniDumpWriteDump StackWalk64 SymGetModuleInfo64

binkw32

_BinkSetMemory@8 _BinkWait@4 _BinkDoFrame@4 _BinkShouldSkip@4 _BinkNextFrame@4 _BinkSetSoundTrack@8 _BinkOpenDirectSound@4 _BinkOpen@8 _BinkCopyToBufferRect@44 _BinkCopyToBuffer@28 _BinkSetSoundSystem@8 _BinkGoto@12 _BinkPause@8 _BinkGetFrameBuffersInfo@8 _BinkClose@4 _BinkSetVolume@12

d3d9

Direct3DCreate9

d3dx9_42

D3DXCheckTextureRequirements D3DXGetShaderConstantTable

dinput8

DirectInput8Create

ws2_32

getpeername ioctlsocket WSAGetLastError closesocket WSACleanup inet_ntoa ntohl setsockopt __WSAFDIsSet WSAStartup WSAIoctl connect htonl socket bind listen gethostbyname WSACloseEvent inet_addr sendto recv htons recvfrom send accept WSAAsyncSelect gethostname ntohs WSASetLastError getsockopt getsockname WSAConnect WSAEventSelect WSASendTo WSAResetEvent WSARecvFrom WSAGetOverlappedResult WSASocketA WSAWaitForMultipleEvents WSACreateEvent select

wininet

InternetGetCookieExA InternetSetCookieExA

winmm

timeGetTime timeBeginPeriod

xinput1_3

ord4 ord2 ord3

ole32

CoCreateInstance CoUninitialize CoInitializeEx

iphlpapi

GetBestInterface GetIfEntry

?Break@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z ?BypassEnvironment@SoundEngine@AK@@YA?AW4AKRESULT@@K_N@Z ?CancelBankCallbackCookie@SoundEngine@AK@@YAXPAX@Z ?CancelEventCallback@SoundEngine@AK@@YAXK@Z ?CancelEventCallbackCookie@SoundEngine@AK@@YAXPAX@Z ?CheckPoolId@MemoryMgr@AK@@YA?AW4AKRESULT@@J@Z ?ClearBanks@SoundEngine@AK@@YA?AW4AKRESULT@@XZ ?ClearPreparedEvents@SoundEngine@AK@@YA?AW4AKRESULT@@XZ ?Close@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z ?Create@StreamMgr@AK@@YAPAVIAkStreamMgr@2@ABUAkStreamMgrSettings@@@Z ?CreateDevice@StreamMgr@AK@@YAKABUAkDeviceSettings@@PAVIAkLowLevelIOHook@12@@Z ?CreatePool@MemoryMgr@AK@@YAJPAXKKKK@Z ?DestroyDevice@StreamMgr@AK@@YA?AW4AKRESULT@@K@Z ?DestroyPool@MemoryMgr@AK@@YA?AW4AKRESULT@@J@Z ?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KW4AkActionOnEventType@12@KJW4AkCurveInterpolation@@@Z ?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PBDW4AkActionOnEventType@12@KJW4AkCurveInterpolation@@@Z ?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WW4AkActionOnEventType@12@KJW4AkCurveInterpolation@@@Z ?Falign@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z ?Free@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z ?GetBlock@MemoryMgr@AK@@YAPAXJ@Z ?GetDefaultDeviceSettings@StreamMgr@AK@@YAXAAUAkDeviceSettings@@@Z ?GetDefaultInitSettings@MusicEngine@AK@@YAXAAUAkMusicSettings@@@Z ?GetDefaultInitSettings@SoundEngine@AK@@YAXAAUAkInitSettings@@@Z ?GetDefaultPlatformInitSettings@SoundEngine@AK@@YAXAAUAkPlatformInitSettings@@@Z ?GetDefaultSettings@StreamMgr@AK@@YAXAAUAkStreamMgrSettings@@@Z ?GetFileLocationResolver@StreamMgr@AK@@YAPAVIAkFileLocationResolver@12@XZ ?GetIDFromString@SoundEngine@AK@@YAKPBD@Z ?GetIDFromString@SoundEngine@AK@@YAKPB_W@Z ?GetMaxPools@MemoryMgr@AK@@YAJXZ ?GetNumPools@MemoryMgr@AK@@YAJXZ ?GetPoolAttributes@MemoryMgr@AK@@YA?AW4AkMemPoolAttributes@@J@Z ?GetPoolMemoryUsed@MemoryMgr@AK@@YAXJAAUPoolMemInfo@12@@Z ?GetPoolName@MemoryMgr@AK@@YAPA_WJ@Z ?GetPoolStats@MemoryMgr@AK@@YA?AW4AKRESULT@@JAAUPoolStats@12@@Z ?GetSourcePlayPosition@SoundEngine@AK@@YA?AW4AKRESULT@@KPAJ@Z ?GetSpeakerConfiguration@SoundEngine@AK@@YAKXZ ?GetTimeStamp@Monitor@AK@@YAJXZ ?Init@MusicEngine@AK@@YA?AW4AKRESULT@@PAUAkMusicSettings@@@Z ?Init@SoundEngine@AK@@YA?AW4AKRESULT@@PAUAkInitSettings@@PAUAkPlatformInitSettings@@@Z ?IsInitialized@MemoryMgr@AK@@YA_NXZ ?IsInitialized@SoundEngine@AK@@YA_NXZ ?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KJ@Z ?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KP6AXKW43@JPAX@Z1J@Z ?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDJAAK@Z ?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDP6AXKW43@JPAX@Z2JAAK@Z ?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBXKAAK@Z ?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBXKP6AXKW43@JPAX@Z2AAK@Z ?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WJAAK@Z ?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WP6AXKW43@JPAX@Z2JAAK@Z ?LockPlaylist@DynamicSequence@SoundEngine@AK@@YAPAVPlaylist@123@K@Z ?Malign@MemoryMgr@AK@@YAPAXJIK@Z ?Malloc@MemoryMgr@AK@@YAPAXJI@Z ?Open@DynamicSequence@SoundEngine@AK@@YAKKKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXW4DynamicSequenceType@123@@Z ?Pause@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z ?Play@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z ?PostCode@Monitor@AK@@YA?AW4AKRESULT@@W4ErrorCode@12@W4ErrorLevel@12@@Z ?PostEvent@SoundEngine@AK@@YAKKKKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAX@Z ?PostEvent@SoundEngine@AK@@YAKPBDKKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAX@Z ?PostEvent@SoundEngine@AK@@YAKPB_WKKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAX@Z ?PostString@Monitor@AK@@YA?AW4AKRESULT@@PBDW4ErrorLevel@12@@Z ?PostString@Monitor@AK@@YA?AW4AKRESULT@@PB_WW4ErrorLevel@12@@Z ?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@KK@Z ?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@PBDK@Z ?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WK@Z ?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@KP6AXKW43@JPAX@Z2W4AkBankContent@12@@Z ?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@KW4AkBankContent@12@@Z ?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PBDP6AXKW43@JPAX@Z3W4AkBankContent@12@@Z ?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PBDW4AkBankContent@12@@Z ?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PB_WP6AXKW43@JPAX@Z3W4AkBankContent@12@@Z ?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PB_WW4AkBankContent@12@@Z ?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAKK@Z ?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAKKP6AXKW43@JPAX@Z3@Z ?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPBDK@Z ?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPBDKP6AXKW43@JPAX@Z3@Z ?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPB_WK@Z ?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPB_WKP6AXKW43@JPAX@Z3@Z ?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@KPAKK@Z ?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@KPAKKP6AXKW43@JPAX@Z4@Z ?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PBDPAPBDK@Z ?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PBDPAPBDKP6AXKW43@JPAX@Z5@Z ?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PB_WPAPB_WK@Z ?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PB_WPAPB_WKP6AXKW43@JPAX@Z5@Z ?RegisterCodec@SoundEngine@AK@@YA?AW4AKRESULT@@KKP6APAVIAkSoftwareCodec@@PAX@Z1@Z ?RegisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z ?RegisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@KPBD@Z ?RegisterPlugin@SoundEngine@AK@@YA?AW4AKRESULT@@W4AkPluginType@@KKP6APAVIAkPlugin@2@PAVIAkPluginMemAlloc@2@@ZP6APAVIAkPluginParam@2@1@Z@Z ?ReleaseBlock@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z ?RenderAudio@SoundEngine@AK@@YA?AW4AKRESULT@@XZ ?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@KK@Z ?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PBDK@Z ?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WK@Z ?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKKPAKK@Z ?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKPBDPAPBDK@Z ?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKPB_WPAPB_WK@Z ?Resume@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z ?SetActiveListeners@SoundEngine@AK@@YA?AW4AKRESULT@@KK@Z ?SetAttenuationScalingFactor@SoundEngine@AK@@YA?AW4AKRESULT@@KM@Z ?SetBankLoadIOSettings@SoundEngine@AK@@YA?AW4AKRESULT@@MD@Z ?SetEnvironmentVolume@SoundEngine@AK@@YA?AW4AKRESULT@@KM@Z ?SetEnvironmentVolumes@SoundEngine@AK@@YA?AW4AKRESULT@@KABUAkSpeakerVolumes@@@Z ?SetFileLocationResolver@StreamMgr@AK@@YAXPAVIAkFileLocationResolver@12@@Z ?SetGameObjectDryLevelValue@SoundEngine@AK@@YA?AW4AKRESULT@@KM@Z ?SetGameObjectEnvironmentsValues@SoundEngine@AK@@YA?AW4AKRESULT@@KPAUAkEnvironmentValue@@K@Z ?SetListenerPipeline@SoundEngine@AK@@YA?AW4AKRESULT@@K_N0@Z ?SetListenerPosition@SoundEngine@AK@@YA?AW4AKRESULT@@ABUAkListenerPosition@@K@Z ?SetListenerScalingFactor@SoundEngine@AK@@YA?AW4AKRESULT@@KM@Z ?SetListenerSpatialization@SoundEngine@AK@@YA?AW4AKRESULT@@K_NPAUAkSpeakerVolumes@@@Z ?SetLocalOutput@Monitor@AK@@YA?AW4AKRESULT@@KP6AXW4ErrorCode@12@PB_WW4ErrorLevel@12@KK@Z@Z ?SetMonitoring@MemoryMgr@AK@@YA?AW4AKRESULT@@J_N@Z ?SetMultiplePositions@SoundEngine@AK@@YA?AW4AKRESULT@@KPBUAkSoundPosition@@GW4MultiPositionType@12@@Z ?SetObjectObstructionAndOcclusion@SoundEngine@AK@@YA?AW4AKRESULT@@KKMM@Z ?SetPoolName@MemoryMgr@AK@@YA?AW4AKRESULT@@JPBD@Z ?SetPoolName@MemoryMgr@AK@@YA?AW4AKRESULT@@JPB_W@Z ?SetPosition@SoundEngine@AK@@YA?AW4AKRESULT@@KABUAkSoundPosition@@K@Z ?SetPositionInternal@SoundEngine@AK@@YA?AW4AKRESULT@@KABUAkSoundPosition@@K@Z ?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@KMK@Z ?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PBDMK@Z ?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WMK@Z ?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@KK@Z ?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@PBD0@Z ?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W0@Z ?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@KKK@Z ?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@PBD0K@Z ?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W0K@Z ?SetVolumeThreshold@SoundEngine@AK@@YA?AW4AKRESULT@@M@Z ?StartOutputCapture@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W@Z ?Stop@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z ?StopAll@SoundEngine@AK@@YAXK@Z ?StopOutputCapture@SoundEngine@AK@@YA?AW4AKRESULT@@XZ ?StopPlayingID@SoundEngine@AK@@YAXK@Z ?Term@MemoryMgr@AK@@YAXXZ ?Term@MusicEngine@AK@@YAXXZ ?Term@SoundEngine@AK@@YAXXZ ?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KP6AXKW43@JPAX@Z1@Z ?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KPAJ@Z ?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDP6AXKW43@JPAX@Z2@Z ?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDPAJ@Z ?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WP6AXKW43@JPAX@Z2@Z ?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WPAJ@Z ?UnlockPlaylist@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z ?UnregisterAllGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@XZ ?UnregisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z ?m_pStreamMgr@IAkStreamMgr@AK@@1PAV12@A

Name

.text

Size

24.6MB

Virtual Size

24.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.8MB

Virtual Size

3.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.6MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

4KB

Virtual Size

137B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

AssassinsCreedIIGame.exe

PE Signature issue

kernel32

user32

advapi32

shell32

dbghelp

binkw32

d3d9

d3dx9_42

dinput8

ws2_32

wininet

winmm

xinput1_3

ole32

iphlpapi

generic