c9c4a681405420c2ab6f7afc448d4d4844177ae378e84de9419134049a2e8625

Sharing

Copy URL Twitter E-mail

General

Target
c9c4a681405420c2ab6f7afc448d4d4844177ae378e84de9419134049a2e8625
Size 10.5MB
Sample261107-v1wlesfd95
SHA256 c9c4a681405420c2ab6f7afc448d4d4844177ae378e84de9419134049a2e8625
MD5 f953c6b3faa44065a15c225232dae7a1
SHA1 d70b7185417532d1c8694e0356e6268a956b528b
SHA512 30299ab2a9d5df83363ceb19c79611991ff43324c16de2485d472ff7a5d0c9710b7290938ccb8b6609cd480798d917a1c5e5887d0cb194ee071e4cb57d248a2a
SSDEEP 196608:5quR68RH52AVzeCWhSdtqn1yo8XQYAQB+B+FE937h6OZ/qC:EuR3HAS3qn1yo8LFEP8C
TLSH
T103B6E1217622C072E99120F4993CFFEF616CA6341FA059D3E3D81A6EDD705C22B36997
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
c9c4a681405420c2ab6f7afc448d4d4844177ae378e84de9419134049a2e8625

File Explorer

c9c4a681405420c2ab6f7afc448d4d4844177ae378e84de9419134049a2e8625

.exe 10.5MB

c9c4a681405420c2ab6f7afc448d4d4844177ae378e84de9419134049a2e8625

IMPHASH 48792c72d48cac31bba1afdb4b07573d
SHA256 c9c4a681405420c2ab6f7afc448d4d4844177ae378e84de9419134049a2e8625
MD5 f953c6b3faa44065a15c225232dae7a1
SHA1 d70b7185417532d1c8694e0356e6268a956b528b
SHA512 30299ab2a9d5df83363ceb19c79611991ff43324c16de2485d472ff7a5d0c9710b7290938ccb8b6609cd480798d917a1c5e5887d0cb194ee071e4cb57d248a2a
SSDEEP 196608:5quR68RH52AVzeCWhSdtqn1yo8XQYAQB+B+FE937h6OZ/qC:EuR3HAS3qn1yo8LFEP8C
TLSH
T103B6E1217622C072E99120F4993CFFEF616CA6341FA059D3E3D81A6EDD705C22B36997
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b6:4c:e8:54:49:08:c1:c4:5c:8c:08:4c:df:1c:f7:bf:2d:13:87:9e:30:5c:9f:48:68:9d:ca:6c:0e:9f:fd:d9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

NO CERTIFICATE

Chains

Jan 1, 0001

Minor OS version

Major OS version

Entry point

3245801

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Metin2\MSP2\worktree\client\files\bin\msp2client_dev.pdb

kernel32

HeapFree GetProcessHeap GetDriveTypeA GetVolumeInformationA IsProcessorFeaturePresent GetSystemInfo GetLogicalDriveStringsA GetCurrentDirectoryA CreateProcessA GetProcessAffinityMask ExitProcess GetCommandLineA GetEnvironmentVariableA SetEnvironmentVariableA SetUnhandledExceptionFilter Sleep TerminateProcess CreateThread GetLocalTime VirtualQuery GetModuleFileNameA GetLongPathNameW GetTempPathW CompareStringOrdinal CreateToolhelp32Snapshot Process32FirstW Process32NextW CreateDirectoryA QueryPerformanceCounter QueryPerformanceFrequency CreateMutexA GetModuleHandleA LocalFree Process32First Process32Next SetFileAttributesA FindFirstFileA FindNextFileA QueryFullProcessImageNameA GetStartupInfoA RtlCaptureStackBackTrace lstrlenA GetPrivateProfileStringA DeviceIoControl CreateFileA GetComputerNameA GetSystemFirmwareTable K32GetProcessMemoryInfo GetUserDefaultLocaleName WideCharToMultiByte MoveFileExW QueryUnbiasedInterruptTime GetProcAddress GetModuleHandleW GetModuleFileNameW IsWow64Process GetTickCount GlobalMemoryStatusEx OpenProcess SetThreadPriority GetCurrentThreadId GetCurrentThread GetExitCodeProcess GetCurrentProcessId GetCurrentProcess SetEndOfFile WriteConsoleW OutputDebugStringW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetFileAttributesW CreateProcessW GetFileAttributesExW SetStdHandle SetCurrentDirectoryW ReadConsoleW GetTimeZoneInformation GetConsoleMode GetConsoleOutputCP GetProcessTimes HeapQueryInformation HeapSize QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InitializeSListHead CreateMutexW ReleaseMutex TryEnterCriticalSection InitializeCriticalSectionAndSpinCount HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber FlsFree FlsSetValue FlsGetValue FlsAlloc GetCommandLineW GetStdHandle GetFullPathNameW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileType GetFileInformationByHandle GetDriveTypeW SetConsoleCtrlHandler GetModuleHandleExW FreeLibraryAndExitThread ExitThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc RtlUnwind RaiseException WaitNamedPipeW PeekNamedPipe GetThreadTimes OutputDebugStringA DebugBreak FindFirstFileExA Thread32Next Thread32First GetThreadContext ResumeThread SuspendThread OpenThread GetStartupInfoW IsDebuggerPresent UnhandledExceptionFilter GetCPInfo CompareStringEx GetStringTypeW CreateSymbolicLinkW GetFileInformationByHandleEx CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer FreeLibraryWhenCallbackReturns GetSystemTimeAsFileTime GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW SetFileInformationByHandle LCMapStringEx DecodePointer EncodePointer GetLocaleInfoEx SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive GetNativeSystemInfo GetExitCodeThread SwitchToThread WaitForSingleObjectEx SetFilePointer GetFileSize CreateFileMappingA UnmapViewOfFile MapViewOfFile GetLocaleInfoA CompareStringA lstrlenW GlobalLock GlobalUnlock FreeLibrary GetSystemDirectoryA FormatMessageA LocalAlloc LoadLibraryA GlobalAlloc GetTempFileNameA GetTempPathA RemoveDirectoryA DeleteFileA AllocConsole WriteFile SetFilePointerEx CloseHandle ReadFile GetFileTime GetFileSizeEx GetFileAttributesW GetFileAttributesA GetDiskFreeSpaceExW FindNextFileW FindFirstFileW FindClose DeleteFileW CreateFileW CreateDirectoryW GetCurrentDirectoryW GetEnvironmentVariableW MultiByteToWideChar GetTickCount64 WaitForMultipleObjects CreateEventW WaitForSingleObject ResetEvent SetEvent InitOnceExecuteOnce DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection SetLastError HeapAlloc GetLastError FlushFileBuffers

user32

GetGUIThreadInfo EnumDisplayDevicesW GetWindowThreadProcessId GetForegroundWindow DefWindowProcA UnregisterClassA CreateWindowExA IsWindow DestroyWindow ShowWindow MoveWindow SetFocus UpdateWindow GetClientRect PostQuitMessage GetSystemMetrics SystemParametersInfoA MessageBoxW SendMessageA FlashWindowEx PostThreadMessageA CharNextW EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard GetKeyboardLayout GetKeyboardLayoutNameA PeekMessageA LoadCursorA SetWindowLongA GetWindowLongA SetRect AdjustWindowRectEx GetWindowRect SetWindowTextA InvalidateRect GetMenu RegisterClassA CharPrevExA LoadStringA CharNextExA ReleaseDC GetDC SetWindowPos GetKeyState GetCursorPos ScreenToClient FindWindowA LoadIconA ShowCursor SetCursor DestroyCursor LoadImageA SetCursorPos ClientToScreen GetCapture SetCapture ReleaseCapture ChangeDisplaySettingsA GetMessageA TranslateMessage DispatchMessageA MessageBoxA RegisterClassExA

advapi32

RegSetValueExW RegCreateKeyExW CryptGenRandom CryptReleaseContext CryptAcquireContextA RegCloseKey RegOpenKeyExW RegQueryValueExW GetUserNameA RegOpenKeyExA RegQueryValueExA ConvertStringSecurityDescriptorToSecurityDescriptorA

shell32

SHGetSpecialFolderPathA ShellExecuteA

ole32

CoInitializeEx CoUninitialize CoCreateInstance

python27

_Py_ZeroStruct _Py_TrueStruct PyType_IsSubtype PyBool_FromLong PyDict_GetItemString PyDict_DelItemString PyErr_Clear PyErr_Fetch PyErr_Restore PyErr_NoMemory PyErr_Format _PyArg_ParseTuple_SizeT _Py_BuildValue_SizeT PyModule_AddIntConstant Py_InitModule4 PyImport_GetModuleDict PyModule_Type PyExc_ImportError Py_BuildValue PyArg_ParseTuple Py_IncRef PyTuple_Size PyInt_AsLong PyLong_FromLongLong PyDict_Next PyDict_Size PyList_New PyList_Append PyString_FromString PyDict_SetItemString PyObject_CallFunction PyObject_GetAttrString PyString_AsString PyErr_SetString PyRun_SimpleStringFlags PyImport_ImportModule PyObject_CallMethod PyInstance_Type PyExc_RuntimeError PyTuple_GetItem _Py_NoneStruct PyTuple_New PyTuple_SetItem PyErr_Occurred PyErr_Print PyString_InternFromString PyCallable_Check PyLong_AsLongLong PyLong_AsUnsignedLongLong PyFloat_AsDouble PyErr_BadArgument PyObject_CallObject PyNumber_Check PyModule_GetDict Py_SetProgramName Py_Initialize Py_Finalize PyRun_StringFlags PyEval_SetTrace Py_FlushLine PyImport_GetMagicNumber PyImport_AddModule PyObject_AsCharBuffer PyCode_Addr2Line PyEval_EvalCode Py_OptimizeFlag PyCode_Type PyUnicodeUCS2_DecodeUTF8 PyInt_FromLong _PyLong_FromByteArray PyFloat_FromDouble PyComplex_FromCComplex PyString_FromStringAndSize PyList_SetItem PyDict_New PyDict_SetItem PyEval_GetRestricted PyCode_New PyMarshal_ReadObjectFromString _PyLong_New _Py_EllipsisObject PyExc_StopIteration PyExc_EOFError PyExc_ValueError PyModule_AddStringConstant PyObject_GetAttr

winhttp

WinHttpSetTimeouts WinHttpReadData WinHttpOpenRequest WinHttpSendRequest WinHttpCloseHandle WinHttpOpen WinHttpReceiveResponse WinHttpQueryHeaders WinHttpSetStatusCallback WinHttpCrackUrl WinHttpConnect WinHttpSetOption

bcrypt

BCryptGenRandom BCryptCloseAlgorithmProvider BCryptGetProperty BCryptCreateHash BCryptHashData BCryptFinishHash BCryptOpenAlgorithmProvider BCryptDestroyHash

winmm

timeBeginPeriod timeGetDevCaps timeGetTime timeEndPeriod

d3d9

Direct3DCreate9

d3dx9_43

D3DXCreateSphere D3DXMatrixRotationY D3DXLoadSurfaceFromSurface D3DXCreateTexture D3DXCreateTextureFromFileInMemoryEx D3DXSaveSurfaceToFileA D3DXPlaneNormalize D3DXQuaternionRotationYawPitchRoll D3DXMatrixTranspose D3DXAssembleShader D3DXGetFVFVertexSize D3DXVec4Transform D3DXMatrixRotationAxis D3DXMatrixOrthoOffCenterRH D3DXMatrixTransformation D3DXMatrixRotationX D3DXMatrixInverse D3DXMatrixRotationYawPitchRoll D3DXQuaternionMultiply D3DXQuaternionRotationAxis D3DXMatrixRotationQuaternion D3DXMatrixTranslation D3DXMatrixScaling D3DXMatrixMultiply D3DXMatrixRotationZ D3DXVec3TransformCoord D3DXVec3Normalize D3DXCreateMatrixStack D3DXVec3TransformNormal D3DXMatrixPerspectiveFovRH D3DXMatrixLookAtRH D3DXMatrixDeterminant D3DXVec2Normalize D3DXVec3Unproject D3DXMatrixOrthoRH D3DXVec3Project D3DXCreateCylinder

libcef

cef_urlrequest_create cef_process_message_create cef_request_create cef_string_multimap_free cef_string_multimap_alloc cef_string_wide_to_utf8 cef_log cef_create_context_shared cef_request_context_create_context cef_request_context_get_global_context cef_drag_data_create cef_dictionary_value_create cef_v8value_create_function cef_v8value_create_array_buffer cef_v8value_create_array cef_v8value_create_object cef_v8value_create_string cef_v8value_create_date cef_v8value_create_double cef_v8value_create_uint cef_v8value_create_int cef_v8value_create_bool cef_v8value_create_null cef_remove_cross_origin_whitelist_entry cef_v8value_create_undefined cef_task_runner_get_for_thread cef_task_runner_get_for_current_thread cef_string_multimap_append cef_string_multimap_value cef_string_multimap_key cef_string_multimap_size cef_string_map_append cef_string_map_value cef_string_map_key cef_string_map_size cef_string_list_append cef_string_list_value cef_string_list_size cef_value_create cef_binary_value_create cef_browser_host_create_browser_sync cef_browser_host_create_browser cef_command_line_get_global cef_command_line_create cef_string_map_free cef_string_map_alloc cef_v8context_in_context cef_v8context_get_entered_context cef_v8context_get_current_context cef_api_hash cef_execute_java_script_with_user_gesture_for_tests cef_register_widevine_cdm cef_is_web_plugin_unstable cef_register_web_plugin_crash cef_unregister_internal_web_plugin cef_refresh_web_plugins cef_visit_web_plugin_info cef_now_from_system_trace_time cef_list_value_create cef_begin_tracing cef_is_cert_status_error cef_launch_process cef_get_path cef_write_json cef_parse_jsonand_return_error cef_parse_json cef_uridecode cef_uriencode cef_base64decode cef_base64encode cef_get_extensions_for_mime_type cef_get_mime_type cef_format_url_for_security_display cef_post_data_create cef_menu_model_create cef_print_settings_create cef_post_data_element_create cef_stream_reader_create_for_file cef_stream_reader_create_for_data cef_stream_reader_create_for_handler cef_image_create cef_stream_writer_create_for_file cef_add_cross_origin_whitelist_entry cef_load_crlsets_file cef_zip_directory cef_delete_file cef_clear_cross_origin_whitelist cef_directory_exists cef_create_temp_directory_in_directory cef_create_new_temp_directory cef_get_temp_directory cef_create_directory cef_set_crash_key_value cef_crash_reporting_enabled cef_enable_highdpi_support cef_set_osmodal_loop cef_quit_message_loop cef_run_message_loop cef_do_message_loop_work cef_shutdown cef_initialize cef_execute_process cef_clear_scheme_handler_factories cef_register_scheme_handler_factory cef_register_extension cef_post_delayed_task cef_post_task cef_currently_on cef_string_list_free cef_string_list_alloc cef_string_userfree_utf16_free cef_string_utf16_set cef_stream_writer_create_for_handler cef_string_utf16_clear cef_string_utf8_to_utf16 cef_parse_url cef_create_url cef_string_utf8_clear cef_string_utf16_cmp cef_string_utf16_to_utf8 cef_cookie_manager_get_global_manager cef_media_router_get_global cef_v8stack_trace_get_current cef_end_tracing cef_response_create

iphlpapi

GetPerAdapterInfo GetAdaptersInfo

imm32

ImmIsIME ImmReleaseContext ImmAssociateContext ImmGetCompositionStringW ImmGetCandidateListW ImmGetConversionStatus ImmSetConversionStatus ImmGetOpenStatus ImmGetIMEFileNameA ImmSetCompositionStringW ImmGetContext ImmNotifyIME

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

imagehlp

StackWalk64 SymFunctionTableAccess64 SymGetModuleBase64 SymInitialize

devil

ilBindImage ilDeleteImages ilGenImages ilGetInteger ilLoad ilConvertImage ilInit ilEnable ilOriginFunc ilSave ilSetPixels ilTexImage ilCopyPixels

mss32

_AIL_open_stream@12 _AIL_open_digital_driver@16 _AIL_file_type@8 _AIL_decompress_ADPCM@12 _AIL_decompress_ASI@24 _AIL_WAV_info@8 _AIL_set_file_callbacks@16 _AIL_file_read@8 _AIL_mem_free_lock@4 _AIL_enumerate_3D_providers@12 _AIL_open_3D_provider@4 _AIL_close_3D_provider@4 _AIL_open_3D_listener@4 _AIL_close_3D_listener@4 _AIL_close_digital_driver@4 _AIL_set_3D_position@16 _AIL_set_3D_velocity@20 _AIL_set_3D_orientation@28 _AIL_startup@0 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_stream_status@4 _AIL_last_error@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_set_sample_file@12 _AIL_start_sample@4 _AIL_stop_sample@4 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_sample_volume_pan@12 _AIL_allocate_3D_sample_handle@4 _AIL_release_3D_sample_handle@4 _AIL_start_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_end_3D_sample@4 _AIL_set_3D_sample_file@8 _AIL_set_3D_sample_volume@8 _AIL_3D_sample_status@4 _AIL_3D_sample_volume@4 _AIL_update_3D_position@8 _AIL_auto_update_3D_position@8 _AIL_resume_sample@4 _AIL_set_3D_sample_loop_count@8

speedtreert

?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?GetLeafLodSizeAdjustments@CSpeedTreeRT@@QAEPBMXZ ?GetLeafBillboardTable@CSpeedTreeRT@@QBEPBMAAI@Z ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ??0CSpeedTreeRT@@QAE@XZ ??2CSpeedTreeRT@@SAPAXI@Z ??3CSpeedTreeRT@@SAXPAX@Z ?SetTime@CSpeedTreeRT@@SAXM@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ??0SGeometry@CSpeedTreeRT@@QAE@XZ ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ ?SetStaticLightingStyle@CSpeedTreeRT@@QAEXW4EStaticLightingStyle@1@@Z ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??1CSpeedTreeRT@@QAE@XZ ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?DeleteTransientData@CSpeedTreeRT@@QAEXXZ ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z

dinput8

DirectInput8Create

ws2_32

WSACleanup __WSAFDIsSet closesocket connect ioctlsocket recv sendto gethostname gethostbyname ntohs ntohl select htons htonl inet_addr WSAStartup WSAGetLastError socket send

gdi32

TextOutA GetTextExtentPoint32A CreateDIBSection SetDIBitsToDevice SetBkMode DeleteDC GetTextExtentPoint32W CreateCompatibleDC TextOutW SetTextColor SetBkColor EnumFontFamiliesExA GetStockObject CreateFontIndirectA DeleteObject GetCharABCWidthsFloatW SelectObject

oleaut32

VariantClear SysFreeString

discord_game_sdk

DiscordCreate

Name

.text

Size

5.0MB

Virtual Size

5.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

981KB

Virtual Size

980KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

168KB

Virtual Size

695KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdataa0

Size

4.1MB

Virtual Size

4.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

284KB

Virtual Size

284KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=49, id=259, version=33145,

count=214, id=261, version=33145,

count=4, id=170, productName=VS2010 build 30319, version=30319,

count=11, id=261, version=32824,

count=5, id=261, productName=VS2019 v16.11.1 build 30133, version=30133,

count=2, id=257, version=27045,

count=56, id=261, version=24247,

count=1, id=171, productName=VS2010 build 30319, version=30319,

count=1, id=29, version=9178,

count=1, id=262, version=33145,

count=58, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=7, id=206, productName=VS2012 UPD3 build 60610, version=60610,

count=125, id=207, productName=VS2012 UPD3 build 60610, version=60610,

count=2, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=117, id=261, productName=VS2019 v16.4.4 build 28316, version=28316,

count=2, productName=Unmarked objects (old),

count=7, id=261, version=35222,

count=2, id=156, version=21202,

count=2, id=123, productName=VS2005 build 50727, version=50727,

count=1, id=253, version=35207,

count=32, id=259, version=35207,

count=19, id=260, version=35207,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=260, version=35228,

count=45, id=260, version=33145,

count=33, id=257, version=33145,

count=714, id=1, productName=Unmarked objects,

count=104, id=261, version=35207,

count=321, id=261, version=35228,

count=1, id=255, version=35228,

count=1, id=151,

count=1, id=258, version=35228,