schet-build-local[.]zip

resource
unpack001/schet-build-local/Schet.dll
unpack001/schet-build-local/SchetDiagnose.exe
unpack001/schet-build-local/SchetPreview.exe
unpack001/schet-build-local/schetloader.exe

schet-build-local.zip

SHA256 fc10c3c1c3a6a413a54dbc9f677915823e5828cd0fcb2e51652f135750413216
MD5 1daf804232bd065ac5a3010a75ee252d
SHA1 b59f59c4b511c86fdc2cb7b91dfd0b4e8cf661e8
SHA512 6eb903722b047670b281fa88e1bac9cdab50e786a9190f64214c79f19ffbf3dae422bfa2120adf7fd604d7a9787e3c0eeb5fa1a2125ace1a0f33f74b5159f453
SSDEEP 393216:RvOQZnnm7ZeI4VL7bkleuoGyRRKbj5HVw8l4AXZwk:1PxnmVwhwoeyR2j5HVw1qCk
TLSH
T11AD63373AB163A4DD882B17B3C45D287D06C2BA69C061CF473ACE7153D69BEF2548E84
MD5 SHA1 SHA512 SSDEEP TLSH

schet-build-local/LICENSE

SHA256 c0ea4a896d2c8c394b29f9427589996db826cd501c512279ff0ed3ef48fabbe5
MD5 c263925d3d7846ff52334a1e30eb0760
SHA1 a9e449c0eab14714ad886b485a09f97f7a6c6a01
SHA512 deaef00d71db60377189e5cdc70439a2c8c557271ab2503dc99bb3e3d5b29b0df39720f1583a31827ca36c0a95f1ed3c04ec6484bace9497cd199d144331b7e1
SSDEEP 96:RyUNMA4GwsA4G2yRMlk4neGzaa32z4Ov80TeH:Rgnszk4jb32z428oC
TLSH
T11F91665AB705137313C303A05B4B64DFF61FF6BCB61E5697281A70282373A2252BA798
MD5 SHA1 SHA512 SSDEEP TLSH

schet-build-local/Load.cmd

SHA256 04449ba3b2ce80a816f4284cc3766008e07a7225b0e147ef0a5d5ba97be5d154
MD5 fb7b53406b8720bbf4c0266beadd14f5
SHA1 0bc1fdc83a15224499bcc0f9dcdaeb71a3946942
SHA512 78cf578cb7e2e6afab00e678d4045eec97eeee8e2647826dca106d634e74b9a2692826564688804d20060560381e282ad0e2ba449b23bedcac5e884892a8eecc
TLSH
T1D49002438A1F44C461A785519557A48DAD8EE05366078A236092102D68CF4925654596
MD5 SHA1 SHA512 TLSH

schet-build-local/README.md

SHA256 e6b3254856f8e3aa39db28b287e03013299ee8f88b057ec7183e8de85a0c2473
MD5 f6bd62bd98b1d24bc1b969e1e3cd6bb0
SHA1 8b949a454148cd7848b3185ad7d04464010692c2
SHA512 82872219a44b2f506c525179a0590be962df24c27ca94b0f5d419ce4e0b12a14207df8ed623df4992a8bf6216a31918cdd0b46f4047519d477fe7a378cc5bfa0
TLSH
T1E32165BBFB0497FA1ED30265951F15B0B70ED0092991E09801ED414C73A26AB05FF9F9
MD5 SHA1 SHA512 TLSH

schet-build-local/START-HERE.txt

SHA256 4528e72192cfeeccf99959b5e7847d494d948b917a4f8af9481015f11e53040a
MD5 d1a705edca36764c2c15265705289427
SHA1 7a41b727ee8161c6f43eaefadc5c9b824c577a8c
SHA512 a5d5858cea5fdc23e97c4d7f771fa43ec7a37e861357ba76d913cae4df213ca0faa86d696a94fc06b1990402de08b6703fedd2a9a71b89d37725dc10695fb8ed
TLSH
T1F1F0029BA56E92FE58511466CF4721915D6CC15D16A94D621D9C109C27125C347B70E0
MD5 SHA1 SHA512 TLSH

schet-build-local/Schet.dll

IMPHASH 999788046c8dbfabbbfa947880b6be84
SHA256 e10e31517acdb5771cf9a63df9a020f677395f0a42d0e4b7df1cc6cdf8d311c6
MD5 b2385d6d2d8ec9ce267aaf06f68c6953
SHA1 7f125fb1eae0e5d65e6ad6d93c76a5cf2e652aac
SHA512 36c84d9030907ee23abeeee668ee721f82e27659a5a5f593a48ac651defcfea8f734903634eebba8418bc16f211d926bce8c0ce0af9c09060edc23d3f4c9934d
SSDEEP 49152:neRN50KlczdLzP3WTHJH+pOyRYcgggFgbYW1HxAZ3LUzX744OYsU/OuiHl8pAEpy:eLsYHJHARmg4j3G+5hnsAJqeUvo5
TLSH
T1D5462A83A5DB0CE9CDD6A7B861DB6336A734FC7589291F3B9644C1302D637C06A2EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

comdlg32

GetOpenFileNameW GetSaveFileNameW

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

dcomp

DCompositionCreateDevice

dwmapi

DwmEnableBlurBehindWindow DwmGetColorizationColor DwmIsCompositionEnabled

dxgi

CreateDXGIFactory1

gdi32

CreateRectRgn DeleteObject GetDeviceCaps

kernel32

CloseHandle CreateEventA CreateEventW CreateFileW CreateHardLinkW CreateSemaphoreA CreateThread CreateToolhelp32Snapshot DeleteCriticalSection DeleteFileW DisableThreadLibraryCalls DuplicateHandle EnterCriticalSection FlushInstructionCache FormatMessageA FreeLibrary GetCPInfo GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceExW GetFileAttributesW GetFileInformationByHandle GetFileType GetFullPathNameW GetLastError GetLocaleInfoA GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessAffinityMask GetProcessHeap GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadPriority GetTickCount GetTickCount64 GetTimeZoneInformation GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapCreate HeapDestroy HeapFree HeapReAlloc InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadLibraryW LocalFree MoveFileExW MultiByteToWideChar OpenProcess OpenThread OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadProcessMemory ReleaseSemaphore RemoveDirectoryW ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetEvent SetFilePointer SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority Sleep SuspendThread Thread32First Thread32Next TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VerSetConditionMask VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteProcessMemory

mfplat

MFCreateAttributes MFCreateMediaType MFShutdown MFStartup

mfreadwrite

MFCreateSourceReaderFromURL

msvcrt

iswctype _assert ___lc_codepage_func ___mb_cur_max_func __iob_func __setusermatherr _amsg_exit _beginthreadex _close _endthreadex _errno _findclose _fstat64 _get_osfhandle _hypot _initterm _localtime64 _lock _lseeki64 _setjmp _setmode _telli64 _time64 _unlock _vscprintf _vsnprintf _wchdir _wchmod _wfopen _wfullpath _wgetcwd _wmkdir _wopen _wstat64 _wutime64 abort atof calloc fclose fflush fopen fprintf fputc fread free fseek ftell fwrite getc getenv isdigit isspace isxdigit ldexp localeconv longjmp malloc memchr memcmp memcpy memmove memset qsort realloc setlocale setvbuf strchr strcmp strcoll strerror strftime strlen strncmp strncpy strstr strtol strtoul strxfrm tan tolower toupper towlower towupper ungetc vfprintf wcscat wcscmp wcscoll wcscpy wcsftime wcslen wcstombs wcsxfrm _wfindnext _wfindfirst _strtoui64 _strtoi64 _lseeki64 _write _strdup _read _fileno _fdopen

ole32

CoCreateInstance CoInitializeEx CoUninitialize PropVariantClear

shell32

ShellExecuteW

user32

CallWindowProcW ClientToScreen ClipCursor CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EmptyClipboard EqualRect GetActiveWindow GetAsyncKeyState GetCapture GetClientRect GetClipboardData GetCursorPos GetDC GetForegroundWindow GetKeyNameTextA GetKeyState GetKeyboardLayout GetMessageExtraInfo GetMessageW GetWindowLongPtrW IsIconic IsWindowUnicode IsWindowVisible LoadCursorW MapVirtualKeyA MonitorFromWindow OpenClipboard PostMessageW PostQuitMessage RegisterClassW ReleaseCapture ReleaseDC ScreenToClient SendMessageTimeoutW SetCapture SetClipboardData SetCursor SetCursorPos SetProcessDPIAware SetWindowDisplayAffinity SetWindowLongPtrW SetWindowPos ShowWindow TrackMouseEvent TranslateMessage UnregisterClassW

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpCrackUrl WinHttpOpen WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpQueryHeaders WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest WinHttpSetTimeouts

winmm

waveOutClose waveOutOpen waveOutPrepareHeader waveOutReset waveOutUnprepareHeader waveOutWrite

Name

.text

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

371KB

Virtual Size

371KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

78KB

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

91B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

schet-build-local/SchetDiagnose.exe

IMPHASH 1e8fc959147ad3f548b040132e351dc1
SHA256 b1ce76d879b1d473309e49b8ffe22914a4b64ca1cc51015eb5ecce9bab10a9ca
MD5 3c64bc057fdd696fe32ba98053ecda64
SHA1 79090f7b613438b59864b8557bde730502bc16e7
SHA512 581d4a2b9281c22be3c8fc33ad8ee5eb74b3435457d4a58356c594ede3c2fc25889e89aa2faa0f1179857947c2d3bca19b4cafa1b4d6af1cf4ff4e675dbacebe
SSDEEP 49152:Q/nYxxRdDViyMGeyohfcd49u5hl8AJTUoPkD:unmdSu5hl8AJTUoPkD
TLSH
T1BBE5D64329DB0DA9DDD67BB861D71335A774FD71CA291F2BAA08C1312D636C0AD2EB10
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

CloseHandle CreateEventA CreateSemaphoreA DeleteCriticalSection DuplicateHandle EnterCriticalSection FormatMessageA FreeLibrary GetCPInfo GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetFileInformationByHandle GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessAffinityMask GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTickCount GetTickCount64 InitializeCriticalSection LeaveCriticalSection LoadLibraryExW LoadLibraryW LocalFree MultiByteToWideChar OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadProcessMemory ReleaseSemaphore ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEvent SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SuspendThread TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte

msvcrt

iswctype _assert __C_specific_handler ___lc_codepage_func ___mb_cur_max_func __iob_func __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _beginthreadex _cexit _commode _endthreadex _errno _filelengthi64 _fileno _fmode _fstat64 _get_osfhandle _hypot _initterm _setjmp _setmode _vscprintf _vsnprintf _wfopen abort atexit calloc exit fclose fflush fgetpos fopen fprintf fputc fread free fsetpos fwrite getc getenv getwc localeconv longjmp malloc memchr memcmp memcpy memmove memset putc putwc realloc setlocale setvbuf signal strchr strcmp strcoll strerror strftime strlen strncmp strtol strtoul strxfrm towlower towupper ungetc ungetwc vfprintf wcscoll wcsftime wcslen wcstombs wcsxfrm _strtoui64 _strtoi64 _lseeki64 _write _strdup _read _fileno _fdopen

Name

.text

Size

939KB

Virtual Size

939KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

82KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

73KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

schet-build-local/SchetPreview.exe

IMPHASH 3a93279f4ac8524712a663b942e4a89e
SHA256 ebe9539be1cff2fcac913db0fa7f3ccfdc5788e6fbcac4c9d6d8865712800c81
MD5 2d6c839fadc6a8137f08449c448da73a
SHA1 cc66625f04708d23367684c6f55fa7cf4b77ea5e
SHA512 d6c2721daca474b7f6fb8af0169adde7b10b8a02b8860bc94917a44ceff80172c756dbcc84126af58ea448bc665721fe36476068f631bb74129fc272f8cff39a
SSDEEP 49152:w/quQi+mEdM6LuV1eQ2CvegiMad/L9LxYL9WqByga0L0zoY6GZfiHl8p09p3qaPD:YlJUQ2CFa80LIC+5hTsAJm6VLNf
TLSH
T141462983A5DB0CE9CDD6A7B861DB6336A734FC7589291F3B9644C1302D636C06A2EF11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

comdlg32

GetOpenFileNameW GetSaveFileNameW

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

dcomp

DCompositionCreateDevice

dwmapi

DwmEnableBlurBehindWindow DwmGetColorizationColor DwmIsCompositionEnabled

dxgi

CreateDXGIFactory1

gdi32

CreateRectRgn DeleteObject GetDeviceCaps

kernel32

CloseHandle CreateEventA CreateEventW CreateFileW CreateHardLinkW CreateSemaphoreA CreateThread CreateToolhelp32Snapshot DeleteCriticalSection DeleteFileW DuplicateHandle EnterCriticalSection FlushInstructionCache FormatMessageA FreeLibrary GetCPInfo GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceExW GetFileAttributesW GetFileInformationByHandle GetFileType GetFullPathNameW GetLastError GetLocaleInfoA GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessAffinityMask GetProcessHeap GetStartupInfoW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadPriority GetTickCount GetTickCount64 GetTimeZoneInformation GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapCreate HeapDestroy HeapFree HeapReAlloc InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadLibraryW LocalFree MoveFileExW MultiByteToWideChar OpenProcess OpenThread OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadProcessMemory ReleaseSemaphore RemoveDirectoryW ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetEvent SetFilePointer SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SuspendThread Thread32First Thread32Next TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VerSetConditionMask VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteProcessMemory

mfplat

MFCreateAttributes MFCreateMediaType MFShutdown MFStartup

mfreadwrite

MFCreateSourceReaderFromURL

msvcrt

iswctype _assert __C_specific_handler ___lc_codepage_func ___mb_cur_max_func __iob_func __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _beginthreadex _cexit _close _commode _endthreadex _errno _findclose _fmode _fstat64 _get_osfhandle _hypot _initterm _localtime64 _lock _lseeki64 _setjmp _setmode _telli64 _time64 _unlock _vscprintf _vsnprintf _wchdir _wchmod _wcmdln _wfopen _wfullpath _wgetcwd _wmkdir _wopen _wstat64 _wtoi _wutime64 abort atexit atof calloc exit fclose fflush fopen fprintf fputc fread free fseek ftell fwrite getc getenv isdigit isspace isxdigit ldexp localeconv longjmp malloc memchr memcmp memcpy memmove memset qsort realloc setlocale setvbuf signal strchr strcmp strcoll strerror strftime strlen strncmp strncpy strstr strtol strtoul strxfrm tan tolower toupper towlower towupper ungetc vfprintf wcscat wcscmp wcscoll wcscpy wcsftime wcslen wcstombs wcsxfrm _wfindnext _wfindfirst _strtoui64 _strtoi64 _lseeki64 _write _strdup _read _fileno _fdopen

ole32

CoCreateInstance CoInitializeEx CoUninitialize PropVariantClear

shell32

ShellExecuteW

user32

AdjustWindowRect ClientToScreen ClipCursor CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EmptyClipboard EqualRect GetActiveWindow GetAsyncKeyState GetCapture GetClientRect GetClipboardData GetCursorPos GetDC GetForegroundWindow GetKeyNameTextA GetKeyState GetKeyboardLayout GetMessageExtraInfo GetMessageW IsIconic IsWindowUnicode IsWindowVisible LoadCursorW MapVirtualKeyA MonitorFromWindow OpenClipboard PeekMessageW PostMessageW PostQuitMessage RegisterClassW ReleaseCapture ReleaseDC ScreenToClient SetCapture SetClipboardData SetCursor SetCursorPos SetProcessDPIAware SetWindowDisplayAffinity SetWindowPos ShowWindow TrackMouseEvent TranslateMessage UnregisterClassW

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpCrackUrl WinHttpOpen WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpQueryHeaders WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest WinHttpSetTimeouts

winmm

waveOutClose waveOutOpen waveOutPrepareHeader waveOutReset waveOutUnprepareHeader waveOutWrite

Name

.text

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

373KB

Virtual Size

373KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

78KB

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

schet-build-local/SchetUpdate.ps1

SHA256 f947d365581cbbb0b2cbd524dcf727111d3520ab941566a3c5717e624f81649b
MD5 c88a96b54e295af92782c8040d6928eb
SHA1 a62b1f8ae4ebb858b8f68ef939dec5b3baffd19d
SHA512 62f9c1a9ce0d5d2cd8a203d9175a020055cbda7fcd2827a6900a78cd5623eb1c6738846d4cadfbc8ba1ba90f620abe0f6f5348721d3505d60d8dfde0546531e2
SSDEEP 96:mlUAw663zDvRQQrqvV3fUJT2uWsaaV+SgqAilQIb4CTfAQHMlXus47t:xXLRLYtuDyRilfb7TfZHMlB47t
TLSH
T117A15365367062F409C5576998A411810E2F80DF14651B04BFACB389AFF3B7A4FE93EE
MD5 SHA1 SHA512 SSDEEP TLSH

schet-build-local/Unload.cmd

SHA256 b29eaf436bc60d60f90efeb590d1744bb6cb98cc53e4649ef20e47df403462fe
MD5 b6e964a00f59bc0dab8814aa69167a0e
SHA1 a3bae863c725c805c0334e790a86e5f3bb1e34e2
SHA512 76e572391554e702a5dcfe8071c7b18037b5625489625aa884573ead8b962f374be7c2d0322bb9bd3cbb27820ba2061bf27a434b4a09595e4fb09b151c0d5a87
TLSH
T1BF902203080F00C020A380008003A08EAC0EE00322038A033082002C28CA0830380082
MD5 SHA1 SHA512 TLSH

schet-build-local/assets/ct-preview/0.png

SHA256 b31e4a955c268871229f7112e9d7f947572889553326cec1ab7cb2a5b023554c
MD5 4edad823cbe12f95065a4198f0bafa33
SHA1 fbaf4f73e9a3242b446c52f50566268ae1fa1c3c
SHA512 b0666e109edcd782b95763b2584e1ed67a73911ffe407ff222ac62f5e1f39c10b224bce7436fe26079f181cf33a1a83e8912a9ec17969cb8a7c288bced378e17
TLSH
T139B02BE3535898EC8989003302535200D17120EB10725D0D1C38801D0008D4044042C2
MD5 SHA1 SHA512 TLSH

schet-build-local/assets/ct-preview/1.png

SHA256 e41b01ada82824236e046d3fa562b3e50614b0a88b549c197d110f6f804cfa0d
MD5 f27aa0b970a6d78dc22e8893d37e354c
SHA1 1f003bad39703753f5ba51e49f95f5a38619226a
SHA512 59dfb8180979fecdc63fb83ed0874f25a33ead4050af76f6ce1448a9f600aafe71f1fd20ba3344a695e34adce7dedd98649654bf43dc23153e2aa5717b4a5ad5
SSDEEP 6144:6xRBKGBNhu10pXuBaRFzOw7foN4nnNNZfGOcDF5IoWyaACCLkSFcrH/N:6hKh5s6wjoNInNNAOntvivIF
TLSH
T19E5423EF414A1DAE394E47262E0D548C54D208B385A7EC1FE8B3A1EAD9785CFB3E5340
MD5 SHA1 SHA512 SSDEEP TLSH

schet-build-local/assets/ct-preview/2.png

SHA256 b25ba1bbdd25bc1acf8e56c1b98ec11e14991d3dc88a61638ea48fa9c86d47cc
MD5 043c20a3915f514ab9e22360d9e96cbb
SHA1 eaae4ed8117eb61ed30eeb6b06ffabcd785df55b
SHA512 36fb372ae0a3abc9f77b0703ed917ef2f2949fbe3bbe3bfc8a3950b5696ea90f945f2944f9d367c2ed73d527421bc94902665341c85704be2e8f6a46b5d86726
SSDEEP 12288:PnB0UZgfPgVT/Gdq/McEmMZh+1HdJNhu2y/hYQ4R74z1KdjP:vB0UZgfCydq/uhgfhYDA05y
TLSH
T18DD42381BE05A4A0B2815D83CDD361EEB1DC9E86462F6105B268E9FC4C347A7CF67397
MD5 SHA1 SHA512 SSDEEP TLSH

schet-build-local/assets/ct-preview/3.png

SHA256 477276fc560ca97c72cf12f1cc4818dc2405979e13840394f637d8ae28d3a5a7
MD5 c0e77d108f9d62a4ed5f3e99b8378080
SHA1 981cd47426ad8734e9a9cd2ce12a88d1cda168c3
SHA512 88c48a36d7c12efe8bee7c0e90c76efad24d18461871ca48b362f939bbeeb4a88d53f5b4a0c1d2bc596e7aad5b3624f657b5fc0e169e80123d5fce7400a5a035
SSDEEP 24576:msWjV7G8QdTO2l5mUNMN5SkPc9Fk/HDO2T6b8mETEK/uFC1a:dU0RiUhFqa2T6b6hWb
TLSH
T16C753311A581E05368B1611B5F45C03F6EE74F26FD255EA030CF6A235AFAFF40A86B29
MD5 SHA1 SHA512 SSDEEP TLSH

schet-build-local/assets/ct-preview/4.png

SHA256 61635aee4cea1d443313097a70062a2aba2134070dc4037723dbcd35869bb62f
MD5 25223265eccaf07b9a827eba0f3b12bd
SHA1 e5853a695f298faad49cea30a8f218fbfb66d651
SHA512 22ee2f206841db5585bbe2e5e43d0c2a117ce4b77c33086ed47870777cf842877670704f75bba73cbb9c169f138b1ea242d15d0594bdf97628fec9e89f13f748
SSDEEP 24576:Im1PKtYv+5jsqks9e3ovNH/JsuBriVTPwbr69ZBipRSXWIRsOK:9m5zL9e3oNHR5aTPkr2Z/GIm
TLSH
T123553350A6FEB8E310465C53A228D9DC550DE4792A633B08F467CB721D3931E8639BEF
MD5 SHA1 SHA512 SSDEEP TLSH

schet-build-local/assets/ct-preview/5.png

SHA256 a280d528b9aace1e6f05e46e5476a686cd4020356dcaa6c278ae83a489f90e59
MD5 51e36725acfdcb9d8ccffc8280824739
SHA1 55bca3fc71c3172766412b998af66f8f44420d69
SHA512 2f7d4573e596c3010f6ee60d30de2a5f6f24fa988f8a2cdef2023341337b509b0ad7e7a35d6e29bbf22f52a6b5b08085482368c23e6a1a67aaa53e779ff2b4c8
SSDEEP 24576:tXz2534u71fejj7OLEFJCBt4hMogP/ekulcikN/xnr0:tXz2l4uNlYFkBtR45kNJ0
TLSH
T1B80523A467ED4467F109BFFE243A7CE4755ECAD272B61088A29C0ACF0681BE0C55D5CE
MD5 SHA1 SHA512 SSDEEP TLSH

schet-build-local/assets/ct-preview/6.png

SHA256 168ce13cadf22f294e56d19eca427b2bb9b2ebe764affe4cad3158ff3c1b1bad
MD5 6390e9aa5240fecbfe23cce8a287f693
SHA1 84432bc171ed246fadb90eed353130a4ff8d207b
SHA512 4628b9952ef4d4e662678db749ec0f116656bb01e058579c4ecb64a3c3db9129f9b80285219a394974059c3e4d49ec6ff33141de5837167f63aae6e1db5105a8
SSDEEP 12288:f3zFglao8VKx+3SwUm/zTpAODiISmfdhfYQQQBcSSqhdsJXwgatwjV5wBTxc83Zc:alGes3DiISm1dY1FysJAgawOBTxDpPyT
TLSH
T14B1533982EC56BCEBC4D336B3D69D99278173274E266CFD083725702AB1E19723C49C6
MD5 SHA1 SHA512 SSDEEP TLSH

schet-build-local/assets/ct-preview/7.png

SHA256 a767154f681985ba41279ce653b217666b2596d8da5eddf30c1e5a8c9883fcb6
MD5 137ca848d86ac52b82684739f87c4aff
SHA1 97445c60fe5f54a6266ea81dee77ab5c59bbd83d
SHA512 c05db886b3507f90a2d2007ae330131777a8bf9530e0d2d1f82d9200639f64b97c51dec0792ed1133b97ce434c4b3139f147834207a522e07ddcdc1cb8a73679
SSDEEP 3072:Jq2QMIm9hZlQLhhaFMDhD/MoiDnTo9vz+ZedJeR2EDGKjPjlg3Z9cvGB9WXWIaVt:JqQICl0hDiLTo9hXeR2lKNg3Z9cvVhYt
TLSH
T1C114128BBD1E8217A45AB8BDA0DCE3BA3233E0E4480758DC10D5F638679D857667F187
MD5 SHA1 SHA512 SSDEEP TLSH

schet-build-local/assets/ct-preview/model.bin

SHA256 ba392b6756756eed4e8a3ec3193bc0fab9e12999e3a398e7e4cf211801c15c0b
MD5 f3fa7ccd49659cef4dcacfced9627c3f
SHA1 e746e4797661b5616574db63c7880e43c285b92f
SHA512 0a6aa377d1e5a51ab1afd08012835d8600d1732ef391a71fe3b55a8fd1b9350c5761295e3c6af1b422bb89a1124d7548ba803bdbb4b3a9f10cbc881798f5b331
SSDEEP 24576:54Zte2m4Zte23k4Zte25qwTrC5/+hvSBFRwaF+hQ3:R242K25TexBBFRwaFf
TLSH
T12815794AFDC29F57C16F29B8D4AB846A062ED4597B60DD4B372C82A67A5737027C330C
MD5 SHA1 SHA512 SSDEEP TLSH

schet-build-local/assets/musor-drop.mp4

SHA256 d4bea15b49c09952086986726e9a1afa883aa9b82d754f504443cd7d4b1011b4
MD5 003afe19df5f70fac6a054662390dfbe
SHA1 703381175963ef81499624afd470edb59254d667
SHA512 cf76b5189a18b65de66569e962304b783b0c1631affdbbf3d59079b25db445b653f2e5ec86cf5cdadffa70f8f798a9e93c3d17c7348052622f28c2a3ef1a94fd
SSDEEP 6144:qprXKjhoWdlgJrHm4kxv0+26ipJYyZE42i46niD:wMgJrgyL6k2h
TLSH
T1AD4412297FE2CE4EC274963C28D50A45E5CAD276FEC6E3D38B7250215A31B912F1F842
MD5 SHA1 SHA512 SSDEEP TLSH

schet-build-local/assets/schet-sc.svg

SHA256 577c165bde039e281553038e9fd5b41ad3342b2d51c2105d0ea14a00fdd3a6b0
MD5 249e1eb2c6608b0b7cfc6683f0db952d
SHA1 8e297e17430fc8668f62529510fc65db36e56ce6
SHA512 40cb82089fb2a81e63bf0b4d4fd2c63c4f320c81a2637a636b70a74c06878a92ac22d6d2699828ac64791d6818e78e93efa7f483c47720f0c2b0789b51bc2d79
TLSH
T14AC0C02C07040D3A82B50900E9B8FD2444F310B2610D1449D212383E22080879D77DCC
MD5 SHA1 SHA512 TLSH

svg

schet-build-local/assets/schet-st.svg

SHA256 8e8c0889292e3d2d8afeafd21b290abd0c4a5acd1149483faab881729bcf63cd
MD5 dd60e701d2846727d5219b85c3de1195
SHA1 8cfea929a1241b91f1181a8207eeb190b4fe084b
SHA512 993d83e3ef141bd10c380cef96603ce4bb72aa3464a53e7fd05b07526d05b87b3aa8a817489b1944ee0db97928059f9a2d9961199edee3da3a432af7ebfec4ef
TLSH
T142D0221A931C0C3CB4358A24FB7D3132807520A3454C2792C87A29F962084AEEA3BEED
MD5 SHA1 SHA512 TLSH

svg

schet-build-local/assets/skins/catalog.json

SHA256 9bcf4f3b002540cc12be3a13b5e0fd79d4ac971fa7da4dbfa14822901142841e
MD5 b1cf06891bcab18914a3add4e6a16929
SHA1 f05f632d82462c599438da5cc4beac1fca66f755
SHA512 44a9769dfffa6ee4f34d5b2a49f52211a1f0428a1563a7e1ad9e06e6b81b3046033149df48c10af99ba8f4b4b059bea290d184d10c93e13777f783bf22b65752
SSDEEP 1536:sdqeFFo6OiHwi4PmVRcOJvWlCJfyncgtH62a/VxslAn1/cEkmOn+HJ4LkysY5pes:XAHwuv+8JfY/rgxso1/cEkmOGCj1l
TLSH
T1AE94CDB4E0744DA7822D34ED699B4A46BC21411F5C9CBC847E1C05CE6F9CD2E3CB97AA
MD5 SHA1 SHA512 SSDEEP TLSH

schet-build-local/game_data.json

SHA256 d116aecd409f550a07f6092402c0761d83b778d1527fe9dbcb14ba9b88af0769
MD5 a0b6e5b32527471c896061e65a294e26
SHA1 c00b3535e1508468456602a52feb7f27a822c0f0
SHA512 5474ebe0921125c383517f30f8085bac101831fe24fbf13af038bc464a5ee4346726f5b126218ed939268b75cc9849c8411ca82f3136a659bb196083577a37e3
TLSH
T190F0AB20C62C4DAA5AF40080263A4637C0806B234018585B3670490C0F31E2F0627B97
MD5 SHA1 SHA512 TLSH

schet-build-local/licenses/ImGui.txt

SHA256 c80c5789748d955c4a650562baa0d750494e2c7128c2ca66aaebe2e3c4e198bf
MD5 5ef20940e74d064639c66f32813613b0
SHA1 0bc9fc60e6e4a03691ca7af4b58a56fd5ffb7865
SHA512 bbd823dc11d068102d56dc7f3acbe755a06877308d7eaeeda0eaf0f96290e435a7b06dab8018aaa691f9f92a13a5f25e7f6fc601e3a4cf3db075999f26e8f00d
TLSH
T16E11821EB2510B62289A13605578A8D8F23FB25F7A6F2A85246DF241232A0ACC1FB844
MD5 SHA1 SHA512 TLSH

schet-build-local/licenses/MinHook.txt

SHA256 d5c2224982b0b95a16b098a561335fa93f3eaf4d0aa964b7843edb986df78dc8
MD5 5620d973e3f8da2318fc18a5cbc098c4
SHA1 6c30d77b67f44704514f77c27fa93175b5370796
SHA512 9db8569e94c43a9933ce6eac503d336f0bd3efab00fb5d36a55b770a35bd3591795c85c715d045ae67b829c39e3995920cbe400f587dad75fbccd7ba7513f65b
SSDEEP 96:EKYrYJ0rYJ7N383d9uQ9nYrYJ0rYJ7N3V3d9ub4ZnYrYJ0rYJ7N3V3d9uP:RYrs0rs7N383buQ9nYrs0rs7N3V3bubL
TLSH
T1D29154971E444FA75AD2D7813652AA84E58E903E3F136D041C7AB3856B3B32EE4BF411
MD5 SHA1 SHA512 SSDEEP TLSH

schet-build-local/licenses/nlohmann-json.txt

SHA256 46a65cffd1ea955132d95a8dd921640714a8d6b537d2e4e482d31145ae95b603
MD5 3b489645de9825cca5beeb9a7e18b6eb
SHA1 8dfc756770a15a88a19e9dbc62529dd11258be8b
SHA512 6403831c95682ad5fd02fce207712ec8acad48ea1e947fd3b7838be84d65c044d36ec2da59a462cf2b44afaca0786b67d27edb0d2ffba14e297778a4f4085e11
TLSH
T12011821EB29147621C9B13605678A8D5F23BB25F7A9F2A84246EF241233A06CD1FF844
MD5 SHA1 SHA512 TLSH

schet-build-local/manifest.json

SHA256 6f21156a92a2c2845b378b1e67af973f81031c56683e2a8e46096f79038ef1df
MD5 5da94a61d4993a55afb285516c61d5ad
SHA1 f2117771d85ad87bb1dcfd4f7a1a6dfc9f5cc120
SHA512 767527a0b48318f4d50780262968149976e6d754ff6f3d90f923138e101c340d0964e6d8884793a46bd13c02686d487aaa1c636a8dfc14332a1a677b0b354a8e
TLSH
T10681CA36C0FACCEB69F4331566384653FAA597BB04804A4736F414DECFB306684A6DAC
MD5 SHA1 SHA512 TLSH

schet-build-local/schetloader.exe

IMPHASH 87a2972d5c26e8918c23145f965a561f
SHA256 23aedfb28221a992ea6b06d7e59c02b64460035b424c323e0b813a1d91a5f90d
MD5 f5366794f29a004fd0b7f2bf5b19638f
SHA1 02d1b77a8f65161dcd039d97f8379a1e084e6152
SHA512 1767290196eb3696672b6b3cb7dd60cc24142b2b33dba2a484c8767c6bf04dd00631f01cf98cf376b15b83465f8f46968d8932fb46ac0ab6c352c4a0772708e1
SSDEEP 49152:llRw/rImJCH/XaSIeVmrKVYFOhbbbsTu9JA4dXhpCVjiVY:lTmrkJA45jCVjY
TLSH
T1EEE58D2BA3E901ACC0B3C07D89475507E7B2344653B1AADB5AA085665FB7BE01F7E730
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

2106676

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ntdll

RtlLookupFunctionEntry RtlVirtualUnwind RtlPcToFileHeader RtlInitUnicodeString RtlUnwindEx RtlCaptureContext RtlUnwind

kernel32

SetFilePointer WriteConsoleW GetLastError ExitProcess GetModuleFileNameA GetModuleHandleW GetProcAddress GetFileAttributesA WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW Process32NextW CreateFileW DeleteFileW GetDriveTypeW GetLogicalDriveStringsW GetTempFileNameW SetFileAttributesW WriteFile GetTempPathW WaitForSingleObject FindResourceExW FreeLibrary GetModuleFileNameW LoadLibraryExW LoadResource LockResource SizeofResource EnumResourceNamesW QueryFullProcessImageNameW EnumResourceLanguagesW BeginUpdateResourceW UpdateResourceW EndUpdateResourceW GetVolumeInformationW GlobalMemoryStatusEx LocalFree GetComputerNameW LoadLibraryW GlobalAlloc GlobalUnlock GlobalLock GlobalFree FindClose FindFirstFileW FindNextFileW GetFileAttributesExW GetCurrentThreadId GetSystemTime SetUnhandledExceptionFilter ResetEvent CreateEventA ExitThread GetTickCount64 GetSystemInfo GetTimeZoneInformation GetLocalTime GetEnvironmentVariableW CreateDirectoryW GetFileAttributesW GetFileSizeEx GetLongPathNameW QueryDosDeviceW ReadFile RemoveDirectoryW CloseHandle SetEvent CreateMutexA OpenEventA GetCurrentProcess GetCurrentProcessId CreateThread TerminateThread CreateFileMappingW MapViewOfFile UnmapViewOfFile MoveFileExW MultiByteToWideChar SetDllDirectoryW CreateFileA GetDiskFreeSpaceExA GetDriveTypeA GetLogicalDrives SetFilePointerEx GetTempPathA SetErrorMode CreatePipe TerminateProcess CreateProcessA CreateProcessW OpenProcess MoveFileW FileTimeToSystemTime K32GetProcessMemoryInfo FlushFileBuffers GetTickCount QueryPerformanceCounter FormatMessageA GetSystemTimeAsFileTime SystemTimeToFileTime GetProcessHeap GetFileSize LockFileEx CreateFileMappingA UnlockFile HeapDestroy HeapCompact HeapAlloc HeapReAlloc DeleteFileA GetVersionExA WaitForSingleObjectEx LoadLibraryA FlushViewOfFile OutputDebugStringW GetDiskFreeSpaceA FormatMessageW Sleep HeapSize HeapValidate GetVersionExW CreateMutexW UnlockFileEx SetEndOfFile GetFullPathNameA SetEnvironmentVariableW LockFile OutputDebugStringA GetDiskFreeSpaceW GetFullPathNameW HeapFree HeapCreate AreFileApisANSI RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection ConnectNamedPipe PeekNamedPipe CreateNamedPipeW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage ReadConsoleW GetConsoleMode GetConsoleOutputCP ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetExitCodeThread InitOnceBeginInitialize InitOnceComplete QueryPerformanceFrequency SleepConditionVariableSRW WakeConditionVariable WakeAllConditionVariable GetLocaleInfoEx FindFirstFileExW GetFinalPathNameByHandleW GetFileInformationByHandleEx EncodePointer DecodePointer InitializeCriticalSectionEx CompareStringEx GetCPInfo LCMapStringEx GetStringTypeW UnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent GetStartupInfoW SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetStdHandle

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

757KB

Virtual Size

756KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

26KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

76KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer