ExternalBrutal_Pack.rar
- SHA256 39b2e1d9f115076025f933337d5693cf34e69cbf373e4c12ddd9c856e5fbd9b4
Password
2
Overview
overview
8Static
static
3ExternalBr...ck.rar
windows10-2004-x64
8ExternalBr...AR.txt
windows10-2004-x64
1ExternalBr...ed.exe
windows10-2004-x64
1ExternalBr...og.exe
windows10-2004-x64
3ExternalBr...AR.bat
windows10-2004-x64
8ExternalBr...ME.txt
windows10-2004-x64
1ExternalBr...rt.dll
windows10-2004-x64
1ExternalBr...64.sys
windows10-2004-x64
3ExternalBr.../p.dll
windows10-2004-x64
5ExternalBr...er.cpp
windows10-2004-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ExternalBrutal_Pack.rar
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
ExternalBrutal_Pack/COMO-USAR.txt
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
ExternalBrutal_Pack/External Brutal_patched.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
ExternalBrutal_Pack/ExternalBrutal_Log.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
ExternalBrutal_Pack/INSTALAR.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral6
Sample
ExternalBrutal_Pack/LEIA-ME.txt
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
ExternalBrutal_Pack/mk/WinDivert.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
ExternalBrutal_Pack/mk/WinDivert64.sys
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
ExternalBrutal_Pack/mk/p.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
ExternalBrutal_Pack/src/launcher.cpp
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
General
- Target ExternalBrutal_Pack.rar
- Size 4.3MB
- Sample261110-1sln5sbf39
- SHA256 39b2e1d9f115076025f933337d5693cf34e69cbf373e4c12ddd9c856e5fbd9b4
- MD5 2e9f6b029f7b4d1f4f25bcd1b4295107
- SHA1 1f4881281307e808dce8d0b069deabcb2ce2afa1
- SHA512 5fab8911f5f2dd8f0e2e383b917631aac4cd7c7dbcffc0256101a00c007972f2e0bbff0c2ad47986c7d9b6b1b161235122b403490adee6cc14f8afd439fb9fae
- SSDEEP 98304:61u5l05toocnABUSvZ3rY6lS9AAhCLdU9yRDUnPCUis+lBSN2:VRokAaibY6lS9AddiIoPVH2
- TLSH T121263339E16BBA5A31E4B4574ECE645918F71FE0DC0985A633044BE3F52F23CA82916F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/ExternalBrutal_Pack/External Brutal_patched.exe unpack001/ExternalBrutal_Pack/ExternalBrutal_Log.exe unpack001/ExternalBrutal_Pack/mk/WinDivert.dll unpack001/ExternalBrutal_Pack/mk/p.dll
File Explorer
-
ExternalBrutal_Pack.rar.rar 4.3MB
-
ExternalBrutal_Pack/COMO-USAR.txt2KB
-
ExternalBrutal_Pack/External Brutal_patched.exe.exe 175KB
-
ExternalBrutal_Pack/ExternalBrutal_Log.exe.exe 205KB
-
ExternalBrutal_Pack/INSTALAR.bat.bat 2KB
-
ExternalBrutal_Pack/LEIA-ME.txt2KB
-
ExternalBrutal_Pack/mk/WinDivert.dll.dll 46KB
-
ExternalBrutal_Pack/mk/WinDivert64.sys.sys 91KB
-
ExternalBrutal_Pack/mk/p.dll.dll 5.3MB
-
ExternalBrutal_Pack/src/launcher.cpp12KB
ExternalBrutal_Pack/COMO-USAR.txt
- SHA256 a23b5675f5d2f192048cd5fc001f3a27620427e0c5d95bdfdd8d424c82c9a475
- MD5 26917e5359f7ee9728d594e32c7ef678
- SHA1 5684e864390efb420f69a23687945bf63b99a4dd
- SHA512 5a6b393969b73faa9d5510e88f0b4bdf06906ad2331b813d4e29740b24448f54644d76b981c7a0c2372b2c006fbdfe26354ac91b0a43e7ae8b204d14aadc2b54
- TLSH T1205192C7AECE0B248874C35C22BB8607F5DD04ABA12A2491B1DE42885FE074DC45E9CA
- MD5 SHA1 SHA512 TLSH
ExternalBrutal_Pack/External Brutal_patched.exe
- IMPHASH 9276f781b32c872e3873e82a6b4b0a3c
- SHA256 bb364d050083e5486616cb249a308222bffdc4a17699c9b1a311f10e0496ed3b
- MD5 eac64fe72c2315fa2764cfd02b867e5c
- SHA1 869c4e17e30c9d5214e5c6e9bd153c2574e478f7
- SHA512 78697c79d77a904fb6fc491b59723d781987f424674263f6721f8dd87a6a3e489bc8b88c93706eb045d994950982698d8f37ef4c12cdaeb1613db68ed5a59d05
- SSDEEP 3072:rqJOfacUYeRncsTlEVrp4BBccgSl+2m+gtA7BzR:bfac3OncOB++gtA91
- TLSH T1FE04AD1757A802ACE0A7937DC6F1D801F377782A4BB012CF074946669FA76D4ADBA703
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
2
Minor OS version
0
Major OS version
6
Entry point
38848
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\INJECTOR DLL novo c++ Brutal\x64\Release\External Brutal.pdb
kernel32
WaitForSingleObject
GetFileAttributesW
OpenProcess
SetFileAttributesW
CreateToolhelp32Snapshot
GetExitCodeThread
GetFileAttributesExW
Process32NextW
DeleteFileW
Process32FirstW
CloseHandle
SetCurrentConsoleFontEx
WriteConsoleW
GetProcAddress
VirtualAllocEx
CreateProcessW
GetModuleHandleW
CreateRemoteThread
SetConsoleOutputCP
VirtualFreeEx
SetConsoleTitleW
GetStdHandle
SetConsoleTextAttribute
GetNativeSystemInfo
WriteProcessMemory
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
Sleep
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
user32
MessageBoxW
advapi32
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
shell32
SHGetKnownFolderPath
ole32
CoUninitialize
CoInitializeEx
CoTaskMemFree
msvcp140
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
??7ios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Xbad_alloc@std@@YAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
_Query_perf_frequency
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
_Query_perf_counter
?_Xlength_error@std@@YAXPEBD@Z
urlmon
URLDownloadToFileW
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception
__std_exception_copy
memcpy
__current_exception_context
memset
__C_specific_handler
_CxxThrowException
__std_exception_destroy
memmove
api-ms-win-crt-stdio-l1-1-0
fsetpos
ungetc
setvbuf
fgetpos
fwrite
fread
_get_stream_buffer_pointers
fgetc
__p__commode
fclose
fflush
_set_fmode
_fseeki64
fputc
api-ms-win-crt-runtime-l1-1-0
_configure_wide_argv
_initialize_wide_environment
_get_initial_wide_environment
_seh_filter_exe
_initterm_e
exit
_exit
_cexit
__p___argc
__p___wargv
_c_exit
_register_thread_local_exe_atexit_callback
_crt_atexit
terminate
_register_onexit_function
_initialize_onexit_table
_set_app_type
_initterm
_invoke_watson
api-ms-win-crt-string-l1-1-0
wcscpy_s
_wcsicmp
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
_set_new_mode
free
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
113KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35207,
count=10, id=260, version=35207,
count=27, id=261, version=35207,
count=6, id=257, version=35207,
count=1, id=262, version=33145,
count=13, id=257, version=33145,
count=163, id=1, productName=Unmarked objects,
count=1, id=265, version=35228,
count=1, id=255, version=35228,
count=1, id=151,
count=1, id=258, version=35228,
ExternalBrutal_Pack/ExternalBrutal_Log.exe
- IMPHASH d46301b6ec210abce1720c2b381a6b43
- SHA256 526f460641f0bdd8675b6a8131dac6a52271913da5cc1b746d4a609bb9d3a46e
- MD5 09e6dc395063a02e23ee8401733cc1d2
- SHA1 0d517c39e828d668e492a7708dc5d70f11bb03ba
- SHA512 581d602c2ff02a5fb6c879519e5bc1b5c2fa44e20f7c430785861e5d5368e806d9fc105bdfa6b87a449bf32e3ab147dd53aae2433025021e97bcb8bd9b3f76fd
- SSDEEP 3072:Yi6dhyAsEUCsD0GQT/ykL4QaBsyL/cf3H5UxNsUPGbC9Yy187XrkUmf:Yi6dhyv7t0ZEQvJgvubv77k
- TLSH T107248D19B7A940F7E5778578CD524A06EA727C4247B0EACF03904BB29F236E49E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
2
Minor OS version
0
Major OS version
6
Entry point
17488
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetFileAttributesW
GetFileSizeEx
ReadFile
CloseHandle
GetHandleInformation
GetLastError
GetCurrentProcess
CreateProcessW
OpenProcess
GetLocalTime
VirtualAllocEx
CreateFileW
VirtualFreeEx
LocalFree
FormatMessageW
AllocConsole
AttachConsole
SetConsoleTitleW
GetConsoleWindow
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
WriteConsoleW
CreateDirectoryW
WriteProcessMemory
GetEnvironmentVariableW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
TerminateProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetCommandLineA
GetCommandLineW
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
VirtualProtect
LoadLibraryExW
CompareStringW
LCMapStringW
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
WaitForSingleObject
GetExitCodeProcess
GetFileAttributesExW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
SetFilePointerEx
ReadConsoleW
HeapSize
HeapReAlloc
SetEndOfFile
RtlUnwind
advapi32
OpenProcessToken
GetTokenInformation
Name
.text
Size
130KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=161, id=261, version=33145,
count=12, id=260, version=33145,
count=6, id=259, version=33145,
count=10, id=259, version=35721,
count=17, id=260, version=35721,
count=44, id=261, version=35721,
count=5, id=257, version=33145,
count=112, id=1, productName=Unmarked objects,
count=1, id=261, version=36260,
count=1, id=258, version=36260,
ExternalBrutal_Pack/INSTALAR.bat
- SHA256 d1119afd3aa4f49c7fe6704e15d9046565b40401a8cfc1c32ec457f0c97c9862
- MD5 e5acd8473467fa19196b8af8b3b12c69
- SHA1 2a9f8079cd649c5e77ccfbc5ca44c79d42ed82cd
- SHA512 6bab7f57c17061821c13e6eb52a1a7981ffefe587ea3891c2521d0e6c4a3b65c1682804c43b7915bc685863c8e9d540be5bfa1d75ad3d89f1805e4c67181b9a5
- TLSH T14451FC23397C8D6AD0546FD01AD1A4FE728B82D7A1591CD2B38FD3BAD7123C153EA984
- MD5 SHA1 SHA512 TLSH
ExternalBrutal_Pack/LEIA-ME.txt
- SHA256 137c1621ff5e5d230240b63e754e6e5acffed490286b3c7199a6c207cbe0863c
- MD5 1edaab7498aea0710c17c24db86158f4
- SHA1 627de77c041fa3df0380e232db20c2c5a7a2c929
- SHA512 26cf7f41c5bda9e2576cda6273ab46fdf73d021f63ce818281ba0e1bca692a7ede974715f73e4a4f67f6bc034e964945449edad2c396997deb82d0d49660688e
- TLSH T1215196950CE85D0AB0B1C75922E394DEF2DF08F3A226A8D1B69FD295EB903C5425D887
- MD5 SHA1 SHA512 TLSH
ExternalBrutal_Pack/mk/WinDivert.dll
- IMPHASH 0b649f8e17494bb31b47f6e959a1769c
- SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
- MD5 b2014d33ee645112d5dc16fe9d9fcbff
- SHA1 aa69498562d350f2de06954b133e59fac1e57002
- SHA512 37014a018b9cd91b2eaeeccc7c5af3838fcae4d4fe6bb50c7ae32cd5c99423965a3e3efb29499324f6885b8f0c2ee2952cb75ab73db4e8960811abcb46801f15
- SSDEEP 768:Qjf2rf/kxpxI+JEw2VWHDDjQSQX4zTtllgwBqWocwTicI:YuT/CXHDvVQatonTic
- TLSH T17423D803F74151B7C429C27083AED352AE22FCC56354F9EF82DEB7952D85E42DB1A606
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
2
Minor OS version
0
Major OS version
4
Entry point
31496
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
advapi32
CloseServiceHandle
CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegSetValueExW
StartServiceW
kernel32
CloseHandle
CreateEventW
CreateFileW
CreateMutexW
DeviceIoControl
GetLastError
GetModuleFileNameW
GetOverlappedResult
HeapAlloc
HeapCreate
HeapDestroy
ReleaseMutex
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WinDivertClose
WinDivertGetParam
WinDivertHelperCalcChecksums
WinDivertHelperCompileFilter
WinDivertHelperDecrementTTL
WinDivertHelperEvalFilter
WinDivertHelperFormatFilter
WinDivertHelperFormatIPv4Address
WinDivertHelperFormatIPv6Address
WinDivertHelperHashPacket
WinDivertHelperHtonIPv6Address
WinDivertHelperHtonIpv6Address
WinDivertHelperHtonl
WinDivertHelperHtonll
WinDivertHelperHtons
WinDivertHelperNtohIPv6Address
WinDivertHelperNtohIpv6Address
WinDivertHelperNtohl
WinDivertHelperNtohll
WinDivertHelperNtohs
WinDivertHelperParseIPv4Address
WinDivertHelperParseIPv6Address
WinDivertHelperParsePacket
WinDivertOpen
WinDivertRecv
WinDivertRecvEx
WinDivertSend
WinDivertSendEx
WinDivertSetParam
WinDivertShutdown
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
800B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
ExternalBrutal_Pack/mk/WinDivert64.sys
- IMPHASH db584dd0570594898805dd67d7ff391c
- SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
- MD5 89ed5be7ea83c01d0de33d3519944aa5
- SHA1 4c9b9c74529399abacc2284de1dead5f2332ee9b
- SHA512 be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138
- SSDEEP 1536:AsmCCzg4Klt7jh//NiRMwoGK0tmdsAXixJz48dJ/zuXR:Atzilt/iR5ojGmdsAXoz4k/8R
- TLSH T12E935B46B2E240C5F9F6C97895F59253EE31FA90A721C7DF11E0981E4F21BE1AD78322
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5a:de:d7:5d:6b:eb:31:58:49:f6:98:a7:8f:80:33:de:26:eb:15:19:55:a1:cb:c0:1e:30:37:32:0e:2a:0e:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 20, 2022
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
5a:de:d7:5d:6b:eb:31:58:49:f6:98:a7:8f:80:33:de:26:eb:15:19:55:a1:cb:c0:1e:30:37:32:0e:2a:0e:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Sep 20, 2022
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
01
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 1, 2004 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Serial Number
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 11, 2022 - Aug 10, 2033
Subject
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
61:50:19:91:b1:8f:32:38:04:52:51:37:dc:25:00:5a
Issuer
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2022 - May 25, 2023
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:57:ee:4d:65:9a:92:3e:7c:10:00:00:00:00:00:57
Issuer
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 7, 2022 - Jun 1, 2023
Subject
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 15, 2014 - Oct 15, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
4484
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\WinDivert-2.2.2\install\MSVC\amd64\WinDivert64.pdb
ntoskrnl.exe
RtlCopyUnicodeString
KeBugCheckEx
IoGetRequestorProcess
PsGetProcessId
ExUuidCreate
ObfDereferenceObject
ObfReferenceObject
IoWriteErrorLogEntry
IoGetCurrentProcess
IoFreeMdl
IoAllocateMdl
IoAllocateErrorLogEntry
MmMapLockedPagesSpecifyCache
MmBuildMdlForNonPagedPool
ExFreePoolWithTag
ExAllocatePoolWithTag
KeReleaseInStackQueuedSpinLock
KeAcquireInStackQueuedSpinLock
RtlGetVersion
RtlIntegerToUnicodeString
hal
KeQueryPerformanceCounter
ndis.sys
NdisAllocateNetBufferPool
NdisFreeNetBufferPool
NdisAllocateNetBufferListPool
NdisGetDataBuffer
NdisAdvanceNetBufferDataStart
NdisRetreatNetBufferDataStart
NdisFreeNetBufferListPool
fwpkclnt.sys
FwpmTransactionAbort0
FwpmTransactionBegin0
FwpmEngineClose0
FwpmEngineOpen0
FwpsQueryPacketInjectionState0
FwpmProviderAdd0
FwpmProviderDeleteByKey0
FwpsInjectNetworkReceiveAsync0
FwpmSubLayerAdd0
FwpmSubLayerDeleteByKey0
FwpmCalloutAdd0
FwpmCalloutDeleteByKey0
FwpmFilterAdd0
FwpmFilterDeleteByKey0
FwpmTransactionCommit0
FwpsCalloutRegister0
FwpsCalloutUnregisterByKey0
FwpsFlowAssociateContext0
FwpsFlowRemoveContext0
FwpsInjectionHandleCreate0
FwpsInjectionHandleDestroy0
FwpsAllocateNetBufferAndNetBufferList0
FwpsFreeNetBufferList0
FwpsInjectNetworkSendAsync0
FwpsInjectForwardAsync0
wdfldr.sys
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind
WdfVersionUnbind
Name
.text
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=262, version=24610,
count=3, id=136, version=30729,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=57, id=1, productName=Unmarked objects,
count=9, id=257, version=24610,
count=5, id=259, version=24610,
count=5, id=260, version=24610,
count=1, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
ExternalBrutal_Pack/mk/p.dll
- IMPHASH 0fb2b80f90afcc6e7f3269e23baab05b
- SHA256 f7d67acbbb417ef76815f5264616bfc580de6b025e47f01266c479a85e939868
- MD5 c38fe6bacfaf0174b09a869376338fbb
- SHA1 2e0c26eb3d6b4bc495211f2fdcc1248a6a4919d9
- SHA512 4ae9232239d7eee5b2bdfef5d7b811bd851b891ffe3748aea80d3f47c8bf446ddc1c5bcdb6414329157540f145e98b55e202de72dc96cb75a2f3f693848645dc
- SSDEEP 98304:2sQEwr8sQ8zxnQZlnxmp7bFvoeBgIaek3+/v3WN1WZfOCl:2sQx8sQ8zxnQZlxCwebaWHm7
- TLSH T1B6460195F2A2056DCF63A27985936223E6713CC80360E7D766AC89342F637F176BE740
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
2
Minor OS version
0
Major OS version
6
Entry point
1237188
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projeto FF ATT\MK CHETUS V7A V3\x64\Release\MK CHEATS.pdb
shlwapi
PathRemoveFileSpecA
ws2_32
ntohs
WSASetLastError
WSAGetLastError
closesocket
__WSAFDIsSet
WSAIoctl
socket
setsockopt
recv
htons
getsockname
WSAStartup
getsockopt
WSACleanup
accept
connect
getpeername
send
htonl
listen
WSACloseEvent
freeaddrinfo
recvfrom
sendto
ioctlsocket
gethostname
WSAResetEvent
WSACreateEvent
getaddrinfo
bind
WSAEnumNetworkEvents
select
WSAWaitForMultipleEvents
WSAEventSelect
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_47
D3DCompile
crypt32
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptProtectData
CryptUnprotectData
wldap32
ord45
ord50
ord41
ord22
ord27
ord211
ord33
ord35
ord79
ord30
ord200
ord301
ord46
ord143
ord60
ord32
ord217
ord26
normaliz
IdnToUnicode
IdnToAscii
opengl32
glDepthRange
wglGetCurrentContext
glTexImage2D
glEnable
glPolygonMode
glPopMatrix
glTexParameteri
glGenTextures
glBindTexture
glGetIntegerv
glGetFloatv
wglMakeCurrent
glPushMatrix
glDisable
glDrawElements
glVertex3f
glEnd
wglGetCurrentDC
glLineWidth
glColor3f
glBlendFunc
wglCreateContext
glColorMask
wglGetProcAddress
glBegin
wglDeleteContext
kernel32
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
InitOnceComplete
InitOnceBeginInitialize
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
GetFileSizeEx
VerifyVersionInfoW
WaitForMultipleObjects
GetFileType
GetStdHandle
GetEnvironmentVariableA
WaitForSingleObjectEx
MoveFileExA
SleepEx
GetSystemDirectoryA
LeaveCriticalSection
EnterCriticalSection
FormatMessageW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetExitCodeProcess
FlushFileBuffers
CheckRemoteDebuggerPresent
GetComputerNameA
VirtualQueryEx
IsDebuggerPresent
GetTickCount
CreateDirectoryA
SetThreadExecutionState
GlobalMemoryStatusEx
ReadProcessMemory
ExitProcess
DeleteCriticalSection
LocalFree
ReadFile
WriteFile
PeekNamedPipe
CreateFileA
CloseHandle
GetCurrentProcessId
WaitForSingleObject
GetFileAttributesA
CreateProcessA
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
GetModuleHandleA
GetLocaleInfoA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
VerSetConditionMask
FreeLibrary
QueryPerformanceCounter
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
GetLastError
HeapReAlloc
HeapAlloc
GetThreadContext
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
SetProcessPriorityBoost
GetModuleFileNameA
SizeofResource
InitOnceExecuteOnce
Process32First
WriteProcessMemory
SetHandleInformation
FindFirstFileA
SetLastError
SetPriorityClass
TerminateProcess
GetModuleFileNameW
FindNextFileA
SetThreadPriority
CreatePipe
InitializeCriticalSectionEx
FindResourceA
FindClose
GetVolumeInformationA
K32EmptyWorkingSet
OpenProcess
ProcessIdToSessionId
GetTempPathA
GetModuleHandleExA
GetTickCount64
CopyFileA
Process32NextW
QueryFullProcessImageNameA
DisableThreadLibraryCalls
GetCurrentThread
GetVersionExA
LockResource
DeleteFileA
Process32Next
Process32FirstW
CreateThread
LoadResource
GetLocalTime
VirtualProtectEx
GetPriorityClass
Beep
user32
SetCapture
SetClipboardData
GetWindowThreadProcessId
EnumDisplayDevicesA
DispatchMessageA
DestroyWindow
IsWindowVisible
SetWindowPos
EnumChildWindows
GetSystemMetrics
GetClassNameA
ShowWindow
IsWindow
SetWindowLongA
GetWindowTextA
MapWindowPoints
MoveWindow
RegisterClassA
EnumWindows
DefWindowProcA
CreateWindowExA
SetLayeredWindowAttributes
TranslateMessage
LoadIconA
PeekMessageA
GetWindowLongPtrA
UnregisterClassA
RealGetWindowClassA
PostQuitMessage
SetWindowLongPtrA
RegisterClassExA
UpdateWindow
SetForegroundWindow
LoadImageW
IsIconic
GetWindowTextW
GetKeyNameTextA
GetAsyncKeyState
MapVirtualKeyA
GetKeyState
GetMessageExtraInfo
LoadCursorA
GetDC
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetKeyboardLayout
GetForegroundWindow
GetClipboardData
SetCursor
GetClientRect
IsWindowUnicode
ReleaseCapture
SetCursorPos
ReleaseDC
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
gdi32
ChoosePixelFormat
SetPixelFormat
CreateSolidBrush
advapi32
CryptAcquireContextA
OpenServiceA
RegDeleteValueA
RegOpenKeyExA
CheckTokenMembership
FreeSid
RegSetValueExA
StartServiceA
ControlService
GetUserNameA
RegCreateKeyExA
OpenSCManagerA
AllocateAndInitializeSid
RegQueryValueExA
CloseServiceHandle
QueryServiceStatus
RegCloseKey
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptDestroyHash
shell32
SHGetFolderPathA
ole32
CoCreateInstance
msvcp140
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
?_Id_cnt@id@locale@std@@0HA
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exceptions@std@@YAHXZ
?_Throw_Cpp_error@std@@YAXH@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Query_perf_frequency
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
_Xtime_get_ticks
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$ctype@D@std@@2V0locale@2@A
?always_noconv@codecvt_base@std@@QEBA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
_Thrd_detach
_Query_perf_counter
_Cnd_do_broadcast_at_thread_exit
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?good@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
imm32
ImmGetContext
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionWindow
dwmapi
DwmExtendFrameIntoClientArea
DwmEnableMMCSS
d2d1
ord1
dwrite
DWriteCreateFactory
winmm
timeEndPeriod
timeBeginPeriod
urlmon
URLDownloadToFileA
powrprof
PowerSetActiveScheme
PowerReadACValueIndex
PowerReadDCValueIndex
PowerWriteDCValueIndex
PowerWriteACValueIndex
PowerGetActiveScheme
bcrypt
BCryptGenRandom
vcruntime140_1
__CxxFrameHandler4
vcruntime140
strchr
__std_type_info_destroy_list
__std_exception_destroy
__std_exception_copy
__std_terminate
strstr
__C_specific_handler
wcsstr
__current_exception_context
memcpy
_CxxThrowException
memset
strrchr
memcmp
memchr
memmove
__current_exception
api-ms-win-crt-heap-l1-1-0
realloc
free
_msize
calloc
_callnewh
malloc
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
terminate
_beginthreadex
_cexit
_getpid
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_errno
_invoke_watson
exit
_initialize_narrow_environment
abort
__sys_nerr
__sys_errlist
api-ms-win-crt-stdio-l1-1-0
_get_stream_buffer_pointers
_wfopen
fputs
__stdio_common_vsprintf
fputc
fopen
_open
_fseeki64
fgets
fsetpos
feof
_lseeki64
ungetc
__stdio_common_vfprintf
fseek
_read
fclose
setvbuf
fgetpos
__stdio_common_vswprintf
fflush
__acrt_iob_func
ftell
__stdio_common_vsscanf
fread
fwrite
_write
fgetc
_fileno
_close
__stdio_common_vsprintf_s
api-ms-win-crt-convert-l1-1-0
strtoll
wcstombs
atoi
strtoul
strtod
strtoull
strtol
api-ms-win-crt-utility-l1-1-0
rand
qsort
api-ms-win-crt-time-l1-1-0
_gmtime64
strftime
_mktime64
clock
_time64
api-ms-win-crt-string-l1-1-0
tolower
strncmp
_strdup
strcpy_s
strcmp
strncpy_s
strspn
strpbrk
strcspn
wcsncpy_s
strncpy
strcat_s
_wcsicmp
_wcslwr_s
_stricmp
isspace
api-ms-win-crt-math-l1-1-0
_fdopen
floorf
ldexp
fmodf
pow
ceilf
atan2f
sin
acosf
sinf
cosf
sqrt
_fdclass
_dclass
powf
sqrtf
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
_unlink
_stat64
_fstat64
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-environment-l1-1-0
getenv
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
456KB
Virtual Size
477KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=261, version=33145,
count=7, id=253, version=35207,
count=8, id=260, version=35207,
count=32, id=261, version=35207,
count=6, id=259, version=35207,
count=6, id=257, version=35207,
count=1, id=260, version=33145,
count=47, id=257, version=33145,
count=608, id=1, productName=Unmarked objects,
count=126, id=260, version=34120,
count=19, id=265, version=35229,
count=1, id=255, version=35229,
count=1, id=151,
count=1, id=258, version=35229,
ExternalBrutal_Pack/src/launcher.cpp
- SHA256 e6b08002b5962cd096aa29e60dba21e8054ce2ffdced964e85aba477a9033cb5
- MD5 79e8e09a90000da0a962aed334b9cbc6
- SHA1 786277da47638fba846a3d96797a855f8c161322
- SHA512 899db442b269624fb87d7687df7e18cd84c9e6387f518cf5d39b17ca2afc2735351a46643e68ea7e46e29282c79c257b8ffb19af28c4f9e2b0abaaef648d71dd
- SSDEEP 384:jYNnd2u+pd0PEpPQO1jCuhor8D8yKD8Gl:jUx+pd0PEpPQguhrHyKDTl
- TLSH T1044294415D9B162098B3D73A7F9351E3F69A45031729EB60BCAE43A01F4C1E87ABDBC1
- MD5 SHA1 SHA512 SSDEEP TLSH