General

Malware Config

Signatures

Files

• Xdefiant_Cheats(UPDATED) (1).rar

  .rar

  Password: 2351

• Import.cfg
• Injector_v1.07.exe

  .exe windows:4 windows x86 arch:x86

  Password: 2351

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 10.0MB - Virtual size: 10.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 202KB - Virtual size: 201KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• libEGL.dll

  .dll windows:5 windows x64 arch:x64

  Password: 2351

  403d8cc0d31f841d5bbf6b82c1ea957d

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  libEGL.dll.pdb

  Imports

  kernel32

  AcquireSRWLockExclusive

  CloseHandle

  CompareStringW

  CreateEventW

  CreateFileW

  DeleteCriticalSection

  EncodePointer

  EnterCriticalSection

  EnumSystemLocalesW

  ExitProcess

  FindClose

  FindFirstFileExW

  FindNextFileW

  FlushFileBuffers

  FreeEnvironmentStringsW

  FreeLibrary

  GetACP

  GetCPInfo

  GetCommandLineA

  GetCommandLineW

  GetConsoleMode

  GetConsoleOutputCP

  GetCurrentProcess

  GetCurrentProcessId

  GetCurrentThreadId

  GetDateFormatW

  GetEnvironmentStringsW

  GetFileSizeEx

  GetFileType

  GetLastError

  GetLocaleInfoW

  GetModuleFileNameA

  GetModuleFileNameW

  GetModuleHandleA

  GetModuleHandleExA

  GetModuleHandleExW

  GetModuleHandleW

  GetOEMCP

  GetProcAddress

  GetProcessHeap

  GetStartupInfoW

  GetStdHandle

  GetStringTypeW

  GetSystemTimeAsFileTime

  GetTimeFormatW

  GetTimeZoneInformation

  GetUserDefaultLCID

  HeapAlloc

  HeapFree

  HeapReAlloc

  HeapSize

  InitializeCriticalSectionAndSpinCount

  InitializeSListHead

  InterlockedFlushSList

  IsDebuggerPresent

  IsProcessorFeaturePresent

  IsValidCodePage

  IsValidLocale

  LCMapStringW

  LeaveCriticalSection

  LoadLibraryA

  LoadLibraryExA

  LoadLibraryExW

  MultiByteToWideChar

  QueryPerformanceCounter

  RaiseException

  ReadConsoleW

  ReadFile

  ReleaseSRWLockExclusive

  ResetEvent

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlPcToFileHeader

  RtlUnwind

  RtlUnwindEx

  RtlVirtualUnwind

  SetEnvironmentVariableW

  SetEvent

  SetFilePointerEx

  SetLastError

  SetStdHandle

  SetUnhandledExceptionFilter

  SleepConditionVariableSRW

  TerminateProcess

  TlsAlloc

  TlsFree

  TlsGetValue

  TlsSetValue

  UnhandledExceptionFilter

  WaitForSingleObjectEx

  WakeAllConditionVariable

  WideCharToMultiByte

  WriteConsoleW

  WriteFile

  Exports

  Exports

  eglBindAPI

  eglBindTexImage

  eglChooseConfig

  eglClientWaitSync

  eglClientWaitSyncKHR

  eglCopyBuffers

  eglCreateContext

  eglCreateDeviceANGLE

  eglCreateImage

  eglCreateImageKHR

  eglCreateNativeClientBufferANDROID

  eglCreatePbufferFromClientBuffer

  eglCreatePbufferSurface

  eglCreatePixmapSurface

  eglCreatePlatformPixmapSurface

  eglCreatePlatformPixmapSurfaceEXT

  eglCreatePlatformWindowSurface

  eglCreatePlatformWindowSurfaceEXT

  eglCreateStreamKHR

  eglCreateStreamProducerD3DTextureANGLE

  eglCreateSync

  eglCreateSyncKHR

  eglCreateWindowSurface

  eglDebugMessageControlKHR

  eglDestroyContext

  eglDestroyImage

  eglDestroyImageKHR

  eglDestroyStreamKHR

  eglDestroySurface

  eglDestroySync

  eglDestroySyncKHR

  eglDupNativeFenceFDANDROID

  eglGetCompositorTimingANDROID

  eglGetCompositorTimingSupportedANDROID

  eglGetConfigAttrib

  eglGetConfigs

  eglGetCurrentContext

  eglGetCurrentDisplay

  eglGetCurrentSurface

  eglGetDisplay

  eglGetError

  eglGetFrameTimestampSupportedANDROID

  eglGetFrameTimestampsANDROID

  eglGetMscRateANGLE

  eglGetNativeClientBufferANDROID

  eglGetNextFrameIdANDROID

  eglGetPlatformDisplay

  eglGetPlatformDisplayEXT

  eglGetProcAddress

  eglGetSyncAttrib

  eglGetSyncAttribKHR

  eglGetSyncValuesCHROMIUM

  eglHandleGPUSwitchANGLE

  eglInitialize

  eglLabelObjectKHR

  eglMakeCurrent

  eglPostSubBufferNV

  eglPresentationTimeANDROID

  eglProgramCacheGetAttribANGLE

  eglProgramCachePopulateANGLE

  eglProgramCacheQueryANGLE

  eglProgramCacheResizeANGLE

  eglQueryAPI

  eglQueryContext

  eglQueryDebugKHR

  eglQueryDeviceAttribEXT

  eglQueryDeviceStringEXT

  eglQueryDisplayAttribANGLE

  eglQueryDisplayAttribEXT

  eglQueryStreamKHR

  eglQueryStreamu64KHR

  eglQueryString

  eglQueryStringiANGLE

  eglQuerySurface

  eglQuerySurfacePointerANGLE

  eglReacquireHighPowerGPUANGLE

  eglReleaseDeviceANGLE

  eglReleaseHighPowerGPUANGLE

  eglReleaseTexImage

  eglReleaseThread

  eglSetBlobCacheFuncsANDROID

  eglSignalSyncKHR

  eglStreamAttribKHR

  eglStreamConsumerAcquireKHR

  eglStreamConsumerGLTextureExternalAttribsNV

  eglStreamConsumerGLTextureExternalKHR

  eglStreamConsumerReleaseKHR

  eglStreamPostD3DTextureANGLE

  eglSurfaceAttrib

  eglSwapBuffers

  eglSwapBuffersWithDamageKHR

  eglSwapBuffersWithFrameTokenANGLE

  eglSwapInterval

  eglTerminate

  eglWaitClient

  eglWaitGL

  eglWaitNative

  eglWaitSync

  eglWaitSyncKHR

  Sections

  .text

  Size: 275KB - Virtual size: 274KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 94KB - Virtual size: 94KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .00cfg

  Size: 512B - Virtual size: 40B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .tls

  Size: 512B - Virtual size: 289B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  _RDATA

  Size: 512B - Virtual size: 148B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• rc4.cfg
• scripting/Addition.dll
• scripting/Autoupdater.ini
• scripting/Cracker.dll
• scripting/DebugPPF.tmp
• scripting/DebugPPT.tmp
• scripting/Helper.dll
• scripting/Management.log
• scripting/Resource.dll
• scripting/main.ini