punkbuster-fix.rar
- SHA256 56ff9df40b50a8db31ffe361a18d109b20c7ba510dea2f378f4530e5c4edd2a3
Overview
overview
3Static
static
3pb/dll/wc001203.dll
windows10-2004-x64
3pb/dll/wc001203.dll
windows11-ltsc_2024-x64
3pb/dll/ws001105.dll
windows10-2004-x64
3pb/dll/ws001105.dll
windows11-ltsc_2024-x64
3pb/htm/lc001203.htm
windows10-2004-x64
3pb/htm/lc001203.htm
windows11-ltsc_2024-x64
3pb/htm/mc001203.htm
windows10-2004-x64
3pb/htm/mc001203.htm
windows11-ltsc_2024-x64
3pb/htm/wc001203.htm
windows10-2004-x64
3pb/htm/wc001203.htm
windows11-ltsc_2024-x64
3pb/htm/ws001105.htm
windows10-2004-x64
3pb/htm/ws001105.htm
windows11-ltsc_2024-x64
3pb/pbags.dll
windows10-2004-x64
3pb/pbags.dll
windows11-ltsc_2024-x64
3pb/pbcl.dll
windows10-2004-x64
3pb/pbcl.dll
windows11-ltsc_2024-x64
3pb/pbcls.dll
windows10-2004-x64
3pb/pbcls.dll
windows11-ltsc_2024-x64
3pb/pbsv.dll
windows10-2004-x64
3pb/pbsv.dll
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
pb/dll/wc001203.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
pb/dll/wc001203.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
pb/dll/ws001105.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
pb/dll/ws001105.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
pb/htm/lc001203.htm
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral6
Sample
pb/htm/lc001203.htm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral7
Sample
pb/htm/mc001203.htm
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral8
Sample
pb/htm/mc001203.htm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral9
Sample
pb/htm/wc001203.htm
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral10
Sample
pb/htm/wc001203.htm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral11
Sample
pb/htm/ws001105.htm
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral12
Sample
pb/htm/ws001105.htm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral13
Sample
pb/pbags.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
pb/pbags.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
pb/pbcl.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral16
Sample
pb/pbcl.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
pb/pbcls.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
pb/pbcls.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
pb/pbsv.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
pb/pbsv.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target punkbuster-fix.rar
- Size 1.2MB
- Sample260916-tkzgpsdk5v
- SHA256 56ff9df40b50a8db31ffe361a18d109b20c7ba510dea2f378f4530e5c4edd2a3
- MD5 007294ed4a29ebb9d476f84b7580925b
- SHA1 0a8286ca0fe4c7719b7cc901ee79ce1a2d804d85
- SHA512 a0982a42458add471889a7de8f2e7bfe5964ea2a709979e8b884b192e5ddf5e660e8406ecb1bdd4ff7eda00311d1d3ed6f2edc1c1879ecde398bee6fd70376e1
- SSDEEP 24576:hPGsMFRYv5U1E4o3zyk4RYcFFmFxMS/59FxWzCSCHPGsMmPGsMA3M:hPJ5pXzxcF6xh93Wz5CHPZPdc
- TLSH T144452352F2766BC4BEBEC3D645D5F23C8196CCBF58092672CCBE2CA320916E6D501786
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
resource unpack001/pb/dll/wc001203.dll unpack001/pb/dll/ws001105.dll unpack001/pb/pbags.dll unpack001/pb/pbcl.dll unpack001/pb/pbcls.dll unpack001/pb/pbsv.dll
File Explorer
-
punkbuster-fix.rar.rar 1.2MB
-
pb/dll/wc001203.dll.dll 492KB
-
pb/dll/ws001105.dll.dll 300KB
-
pb/htm/lc001203.htm17B
-
pb/htm/mc001203.htm17B
-
pb/htm/wc001203.htm.html 427KB
-
pb/htm/ws001105.htm.html 317KB
-
pb/pbags.dll.dll 56KB
-
pb/pbcl.db212B
-
pb/pbcl.dll.dll 492KB
-
pb/pbcls.dll.dll 492KB
-
pb/pbsv.dll.dll 300KB
pb/dll/wc001203.dll
- IMPHASH f450b7653edd157247fb1782d674abbd
- SHA256 62b220f6403c4a60f65856592a097e1a8a25512deb0a7a930006ed559cec7e65
- MD5 627aec7a23a36ac428dd252d3f9e7401
- SHA1 f71ae9598cdcb95cc0dc8b76eb7d3c80e4469708
- SHA512 4f8ecd88df9e06ccb769fea15d1662fc7b045b56d05db0613b3726b7896c5aa034b2b3768982e020895a0900e4f4151f04999647393c10958a4ec058ca41a9e3
- SSDEEP 12288:DH43b+91eTvhi6HlVnWYuytPnnNpiKSGh5D9QNPJErHlwGL9C/T97gQDirxg0zZE:DH43b+91eTvhi6HlVnWYuytPnnviKSGS
- TLSH T13FB47CE1D45330B2EAED0B7825D63322AE35FD65676504EB46DC24A4B4C1AC16CA83FF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
344455
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
r:\eb\source\pb-cod2\pbcldll\Release\pbcldll.pdb
wsock32
gethostbyname
closesocket
inet_ntoa
setsockopt
bind
recv
sendto
send
ioctlsocket
htons
connect
WSAGetLastError
socket
ddraw
DirectDrawCreate
kernel32
InitializeCriticalSection
VirtualProtect
SetStdHandle
SetUnhandledExceptionFilter
Sleep
LoadLibraryA
FreeLibrary
GetProcAddress
CloseHandle
OpenProcess
GetTickCount
VirtualQuery
GetCurrentProcessId
CreateFileA
DeviceIoControl
GetTempPathA
GetModuleFileNameA
ReadProcessMemory
IsBadReadPtr
IsBadCodePtr
VirtualQueryEx
GetCurrentProcess
GetSystemInfo
GetCurrentThreadId
GetVersionExA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetDriveTypeA
GetCurrentDirectoryA
GetLastError
FileTimeToSystemTime
CreateDirectoryA
DeleteFileA
ExitThread
ResumeThread
CreateThread
ExitProcess
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
SetFileAttributesA
GetFileAttributesA
RtlUnwind
FindClose
GetFullPathNameA
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
MoveFileA
GetCommandLineA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
TerminateProcess
UnhandledExceptionFilter
QueryPerformanceCounter
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WriteFile
FlushFileBuffers
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
ReadFile
InterlockedExchange
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetACP
GetOEMCP
GetCPInfo
user32
EnumWindows
GetWindowLongA
GetForegroundWindow
GetWindowThreadProcessId
GetWindowPlacement
GetDC
ReleaseDC
gdi32
GetSystemPaletteEntries
advapi32
StartServiceA
ca
cb
Name
.text
Size
376KB
Virtual Size
373KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
60KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=105, version=2067,
count=23, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=2, id=93, version=2067,
count=1, id=29, version=8830,
count=2, id=37, version=8755,
count=9, id=93, version=2179,
count=133, id=1, productName=Unmarked objects,
count=13, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=148, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
pb/dll/ws001105.dll
- IMPHASH ec344a6d4b20bea42948e8f5237a28d1
- SHA256 a9c91ff610a26480597782ec66a6171f591ba5750ab719b8017ff978ce2b624d
- MD5 21533bdbc9a808dd8c154098b903c4a2
- SHA1 2f52231074d3b5dcf29e617fd0d3b03232b2c67a
- SHA512 82f826a1909b7a01dbbbc1caed1382a62b61ce1cf5dc35d0a79f3bbde4f2d17ae85f38f2866a7787bbc7b235d2ec404e8381093a9bf9ba584e8247cf27458441
- SSDEEP 6144:IHZ6T8+SQj6rhAEiVePf4SmiJWBDCHn9V8M:IH8jSQj6r7iVePVmiJW5CHL7
- TLSH T1B364AEA3E781C0B4DC5816BA21692737697D700413B4D2C3B7E82CAA6C566D1AF793CF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
182848
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
r:\eb\source\pb-cod2\pbsvdll\Release\pbsvdll.pdb
wsock32
gethostbyname
closesocket
accept
listen
inet_ntoa
setsockopt
htons
ioctlsocket
bind
recv
inet_addr
ntohs
send
socket
kernel32
LeaveCriticalSection
GetCurrentDirectoryA
GetDriveTypeA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
CreateFileA
SetStdHandle
InitializeCriticalSection
LoadLibraryA
FreeLibrary
GetProcAddress
GetTickCount
Sleep
GetLastError
CreateDirectoryA
DeleteFileA
ExitThread
CloseHandle
ResumeThread
CreateThread
ExitProcess
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
SetFileAttributesA
GetFileAttributesA
MoveFileA
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
GetModuleFileNameA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
DeleteCriticalSection
GetFullPathNameA
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WriteFile
FlushFileBuffers
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
ReadFile
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetStringTypeA
GetStringTypeW
sa
sb
Name
.text
Size
220KB
Virtual Size
218KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
44KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
464KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=105, version=2067,
count=24, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=5, id=93, version=2179,
count=112, id=1, productName=Unmarked objects,
count=13, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=149, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
pb/htm/lc001203.htm
- SHA256 294518cc925310660f00a3f3d392effa3a8e8941de4750e748e1175f693c8b1b
- MD5 74df4244adcd334c1c7a77d0142d4f2d
- SHA1 480ea07442a226d60e2e6c643224e3021b48599e
- SHA512 f330d36a973c61a38011259ae5932b45f7fd7a6943d55c623105bb584066594780e8c408a22aa8c79bd0f47cc105c229cae26d6f7e427452de1646631ba3503d
- MD5 SHA1 SHA512
pb/htm/mc001203.htm
- SHA256 294518cc925310660f00a3f3d392effa3a8e8941de4750e748e1175f693c8b1b
- MD5 74df4244adcd334c1c7a77d0142d4f2d
- SHA1 480ea07442a226d60e2e6c643224e3021b48599e
- SHA512 f330d36a973c61a38011259ae5932b45f7fd7a6943d55c623105bb584066594780e8c408a22aa8c79bd0f47cc105c229cae26d6f7e427452de1646631ba3503d
- MD5 SHA1 SHA512
pb/htm/wc001203.htm
- SHA256 02ceda892716b488cda85ee8f20fc64db48402b1430493b102788b6397a497f1
- MD5 a9aa19c5a7e89c9b7ecdfc32cadc56e4
- SHA1 0bd3e5a8a6bcef9aa29096c055064daefcba5627
- SHA512 a9d439f022a9c697e0bff93e12a42a9fb85b6a059f37995eac3fc126489de51551a755e31a0efff1e6a15c14200024dde00ba387bd6ce3f6b4ff411dcfa9dd5d
- SSDEEP 6144:CmzPmwchUSM7JefxiRS4gyxgsT/a1AFzs3sATt4GuO+oF6:7fCu7IkC+gS5SDTDnF6
- TLSH T17A94BFCAD16D44D69C0A3AC684281BC3C7654B769B7400142DBFBD4D0B679EFC62EEE2
- MD5 SHA1 SHA512 SSDEEP TLSH
pb/htm/ws001105.htm
- SHA256 032655071c56112161e36d13879f0d62f729670c254ea7aec33e2759d1dcf3a7
- MD5 57595119caa5f02b6b8b4f6ccea0947c
- SHA1 807bc3b06092674c4a81ebf10f9bc9abc98dd3c5
- SHA512 0cd76b5cff06754f68f1ab5cc8447a510fa2276947b662899b62610f4f219688b9a5fdddcb4387038c49edeab644ab18f5a7d63d3d6324d3806259821234d0ff
- SSDEEP 6144:pEo+E9IC6shwYO99iTQtov+Y9mTsGdwC+0P3rVn8:/EhnYwEmD+6rVn8
- TLSH T16C64AEDAD16D88D66D0A3AC6D4281FC3C7150B729B7400142ABFBD484B775AFC16EEE2
- MD5 SHA1 SHA512 SSDEEP TLSH
pb/pbags.dll
- IMPHASH 39d7ca2f2dddedb657c9fb533db4061f
- SHA256 f3e3259568e390d708823e34482541d8c028cfebf7d10cf2e4adc4309e87c083
- MD5 9f13798c5da6060aa8a9f672a63a6de2
- SHA1 34e440c96fa7eb4f00b2ba47cace3bcf9713aaea
- SHA512 66b77488f7aed1c0f1779428b9b9f1748d7dffd4ea9a6d3edd53a18d987941bbd902285833a07074727076cce27c0094708ff652f0b45d8a37550320bc3d269b
- SSDEEP 768:il9bGF5/ynMzcejiZEwQ/DelXJhN+1bHvJkvmmh7QAMTJY9ld:il9Y52MzcejV7/KlXJ61bHvJCmFh2l
- TLSH T16A438D23B99181F3D98D51BC44999B76477B780807F540C36F9E06D9EA233E0EAF9382
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9008
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
r:\eb\source\pb-cod2\pbagdll\Release\pbagdll.pdb
kernel32
CloseHandle
OpenProcess
ReadProcessMemory
HeapFree
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LCMapStringW
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
SetFilePointer
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
GetLocaleInfoA
GetCPInfo
VirtualProtect
GetSystemInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
FlushFileBuffers
a
Name
.text
Size
32KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=105, version=2067,
count=20, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=87, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=3, id=93, version=2179,
count=77, id=1, productName=Unmarked objects,
count=3, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
pb/pbcl.db
- SHA256 dcbf0c7704d35d1974f858488b5dd4c3cc187df9ace11fd559530c5bf2474449
- MD5 0cfecfa9a0883e7597bffe602788a776
- SHA1 c48991331af9eee054afcc7fbb28ef89075af874
- SHA512 b726e3502376c5e77f3a10dcf21ca81b2afc1e82d7ebbbf0d784cf0c622d66113e6ec005a801f3fa124033ea3d8b4723ff5a51404f94bccaf37db2cba9974a1c
- TLSH T10ED0C9F5FD203C3062FA1F22F1B8144A33D30873BA8D5820270E6BB89CA1A0A3009E09
- MD5 SHA1 SHA512 TLSH
pb/pbcl.dll
- IMPHASH f450b7653edd157247fb1782d674abbd
- SHA256 62b220f6403c4a60f65856592a097e1a8a25512deb0a7a930006ed559cec7e65
- MD5 627aec7a23a36ac428dd252d3f9e7401
- SHA1 f71ae9598cdcb95cc0dc8b76eb7d3c80e4469708
- SHA512 4f8ecd88df9e06ccb769fea15d1662fc7b045b56d05db0613b3726b7896c5aa034b2b3768982e020895a0900e4f4151f04999647393c10958a4ec058ca41a9e3
- SSDEEP 12288:DH43b+91eTvhi6HlVnWYuytPnnNpiKSGh5D9QNPJErHlwGL9C/T97gQDirxg0zZE:DH43b+91eTvhi6HlVnWYuytPnnviKSGS
- TLSH T13FB47CE1D45330B2EAED0B7825D63322AE35FD65676504EB46DC24A4B4C1AC16CA83FF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
344455
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
r:\eb\source\pb-cod2\pbcldll\Release\pbcldll.pdb
wsock32
gethostbyname
closesocket
inet_ntoa
setsockopt
bind
recv
sendto
send
ioctlsocket
htons
connect
WSAGetLastError
socket
ddraw
DirectDrawCreate
kernel32
InitializeCriticalSection
VirtualProtect
SetStdHandle
SetUnhandledExceptionFilter
Sleep
LoadLibraryA
FreeLibrary
GetProcAddress
CloseHandle
OpenProcess
GetTickCount
VirtualQuery
GetCurrentProcessId
CreateFileA
DeviceIoControl
GetTempPathA
GetModuleFileNameA
ReadProcessMemory
IsBadReadPtr
IsBadCodePtr
VirtualQueryEx
GetCurrentProcess
GetSystemInfo
GetCurrentThreadId
GetVersionExA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetDriveTypeA
GetCurrentDirectoryA
GetLastError
FileTimeToSystemTime
CreateDirectoryA
DeleteFileA
ExitThread
ResumeThread
CreateThread
ExitProcess
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
SetFileAttributesA
GetFileAttributesA
RtlUnwind
FindClose
GetFullPathNameA
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
MoveFileA
GetCommandLineA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
TerminateProcess
UnhandledExceptionFilter
QueryPerformanceCounter
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WriteFile
FlushFileBuffers
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
ReadFile
InterlockedExchange
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetACP
GetOEMCP
GetCPInfo
user32
EnumWindows
GetWindowLongA
GetForegroundWindow
GetWindowThreadProcessId
GetWindowPlacement
GetDC
ReleaseDC
gdi32
GetSystemPaletteEntries
advapi32
StartServiceA
ca
cb
Name
.text
Size
376KB
Virtual Size
373KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
60KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=105, version=2067,
count=23, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=2, id=93, version=2067,
count=1, id=29, version=8830,
count=2, id=37, version=8755,
count=9, id=93, version=2179,
count=133, id=1, productName=Unmarked objects,
count=13, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=148, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
pb/pbcls.dll
- IMPHASH f450b7653edd157247fb1782d674abbd
- SHA256 62b220f6403c4a60f65856592a097e1a8a25512deb0a7a930006ed559cec7e65
- MD5 627aec7a23a36ac428dd252d3f9e7401
- SHA1 f71ae9598cdcb95cc0dc8b76eb7d3c80e4469708
- SHA512 4f8ecd88df9e06ccb769fea15d1662fc7b045b56d05db0613b3726b7896c5aa034b2b3768982e020895a0900e4f4151f04999647393c10958a4ec058ca41a9e3
- SSDEEP 12288:DH43b+91eTvhi6HlVnWYuytPnnNpiKSGh5D9QNPJErHlwGL9C/T97gQDirxg0zZE:DH43b+91eTvhi6HlVnWYuytPnnviKSGS
- TLSH T13FB47CE1D45330B2EAED0B7825D63322AE35FD65676504EB46DC24A4B4C1AC16CA83FF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
344455
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
r:\eb\source\pb-cod2\pbcldll\Release\pbcldll.pdb
wsock32
gethostbyname
closesocket
inet_ntoa
setsockopt
bind
recv
sendto
send
ioctlsocket
htons
connect
WSAGetLastError
socket
ddraw
DirectDrawCreate
kernel32
InitializeCriticalSection
VirtualProtect
SetStdHandle
SetUnhandledExceptionFilter
Sleep
LoadLibraryA
FreeLibrary
GetProcAddress
CloseHandle
OpenProcess
GetTickCount
VirtualQuery
GetCurrentProcessId
CreateFileA
DeviceIoControl
GetTempPathA
GetModuleFileNameA
ReadProcessMemory
IsBadReadPtr
IsBadCodePtr
VirtualQueryEx
GetCurrentProcess
GetSystemInfo
GetCurrentThreadId
GetVersionExA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetDriveTypeA
GetCurrentDirectoryA
GetLastError
FileTimeToSystemTime
CreateDirectoryA
DeleteFileA
ExitThread
ResumeThread
CreateThread
ExitProcess
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
SetFileAttributesA
GetFileAttributesA
RtlUnwind
FindClose
GetFullPathNameA
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
MoveFileA
GetCommandLineA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
TerminateProcess
UnhandledExceptionFilter
QueryPerformanceCounter
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WriteFile
FlushFileBuffers
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
ReadFile
InterlockedExchange
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetACP
GetOEMCP
GetCPInfo
user32
EnumWindows
GetWindowLongA
GetForegroundWindow
GetWindowThreadProcessId
GetWindowPlacement
GetDC
ReleaseDC
gdi32
GetSystemPaletteEntries
advapi32
StartServiceA
ca
cb
Name
.text
Size
376KB
Virtual Size
373KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
60KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=105, version=2067,
count=23, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=2, id=93, version=2067,
count=1, id=29, version=8830,
count=2, id=37, version=8755,
count=9, id=93, version=2179,
count=133, id=1, productName=Unmarked objects,
count=13, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=148, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
pb/pbsv.dll
- IMPHASH ec344a6d4b20bea42948e8f5237a28d1
- SHA256 7958c56df879ddadd98fae442b527bdebf3997836f467e16b4f2b7b7b06882a0
- MD5 4c1478df6e5dab80735f354acf1a95dc
- SHA1 606ca1aec0e900ee63d065e88202038370dd864c
- SHA512 69ba72689c4228a1ce1e87ab86a812e24dd398249fbe8a207a2b49019495af412eb9472a4f6e5dd18f2e221db5aa0538feb37463cf866ddb2bfd8e5bd551daeb
- SSDEEP 6144:qHUuIq3zrUQimv5q0K0vPPGLPUfBjJHnRiV:qHqszrUQimv5qovPoPUfZJHI
- TLSH T18F64AE92E781C0B5DC1812BA21692737697E700413B4D3C3B7E82DAA6C566D1AB793CF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
183120
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
r:\eb\source\pb-cod2\pbsvdll\Release\pbsvdll.pdb
wsock32
gethostbyname
closesocket
accept
listen
inet_ntoa
setsockopt
htons
ioctlsocket
bind
recv
inet_addr
ntohs
send
socket
kernel32
LeaveCriticalSection
GetCurrentDirectoryA
GetDriveTypeA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
CreateFileA
SetStdHandle
InitializeCriticalSection
LoadLibraryA
FreeLibrary
GetProcAddress
GetTickCount
Sleep
GetLastError
CreateDirectoryA
DeleteFileA
ExitThread
CloseHandle
ResumeThread
CreateThread
ExitProcess
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
SetFileAttributesA
GetFileAttributesA
MoveFileA
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
GetModuleFileNameA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
DeleteCriticalSection
GetFullPathNameA
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WriteFile
FlushFileBuffers
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
ReadFile
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetStringTypeA
GetStringTypeW
sa
sb
Name
.text
Size
220KB
Virtual Size
218KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
44KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
464KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=105, version=2067,
count=24, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=5, id=93, version=2179,
count=112, id=1, productName=Unmarked objects,
count=13, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=149, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,