8124536130[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

8124536130.zip
Size

43.7MB
MD5

e8256987413ff47ada68e71a593dfa39
SHA1

eb06aadf73072797cd9832353612b988cd9e3349
SHA256

24fac03b0e71a011f3e689c3de4423ad278f2865f5ab1f606f859f291a729fb0
SHA512

ba559f255b901e38a0cd18fd60375fede9ae91525eb27a32524f2d7d433948906843f48bf6ac01f91b9606c5557ddbb8fe275eda9f0a45cc1204fde40027e612
SSDEEP

786432:x2J2qX/FkAU1tW9IIbiC1apeZQIqZVfvYu0hcrNvLAz2Gn1DgjSwlTB/875WANtM:xs2qvFkfS9II2CVCIqZVX8hcKDwFasj

Score

N/A

Malware Config

Signatures

Files

8124536130.zip
.zip

Password: infected
05c771c6ab0fb3b75dcaa748750ec31de621e61a23e42b52431d67b1025a1e56
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
09600477ff392293e3fbef40b3ecdb489819f6f0c74c3c8ec90efa58a0e8bd6f
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
0f2fefe08d185e1a03d065ff45840b5bd3b9c0492b3b8434fc785e96eb981a23
.dll windows x86

ff095e1f97154e0ed27aa1449e546b14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTapePosition
VirtualUnlock
DebugActiveProcess
GetDiskFreeSpaceExW
GetDiskFreeSpaceExA
GetSystemDirectoryA
GetTapeStatus
GetStringTypeExA
GetPrivateProfileStringW
GetSystemInfo
EnumUILanguagesW
GetSystemWindowsDirectoryA
FindNextFileA
GetConsoleCP
GetStringTypeA
FindClose
GetCommMask
FindNextVolumeW
GetComputerNameA
FillConsoleOutputAttribute
DeleteCriticalSection
GetProcessTimes
GetStartupInfoW
GetWindowsDirectoryW
VirtualProtectEx
GetProfileIntA
GetUserDefaultLangID
GetProcessAffinityMask
LockResource
VirtualQuery
GetFileType
GetEnvironmentVariableW
GetLogicalDriveStringsA
GetTimeFormatA
GetProfileSectionW
GetModuleHandleA
GetModuleFileNameA
GetBinaryTypeA
FindFirstFileW
IsProcessInJob
DefineDosDeviceA
EnumTimeFormatsA
FillConsoleOutputCharacterW
FindActCtxSectionStringW
EnumSystemLocalesA
FreeEnvironmentStringsA
FindResourceExW
FindFirstVolumeMountPointW
GetCurrentThreadId
GetDriveTypeA
GetTempPathA
LocalAlloc
FindCloseChangeNotification
GetUserDefaultUILanguage
GetStringTypeW
FreeConsole
GetFileAttributesW
VirtualFreeEx
LoadLibraryExA
GlobalFree
FindAtomW
GetFileTime
GetCommandLineA
DeleteTimerQueueTimer
GetConsoleWindow
GetDefaultCommConfigW
GetShortPathNameA
GetPriorityClass
FindFirstFileA
GetCPInfo
GetCommProperties
GenerateConsoleCtrlEvent

comdlg32

GetFileTitleW
GetSaveFileNameW

advapi32

LookupPrivilegeNameA
FileEncryptionStatusW
EqualPrefixSid
DecryptFileW
IsTokenRestricted
InitializeSid
GetServiceKeyNameA
GetOldestEventLogRecord
LookupAccountSidW
LookupAccountSidA
GetTokenInformation
EnumServicesStatusExW
GetServiceKeyNameW
GetSecurityDescriptorDacl

oleaut32

GetRecordInfoFromTypeInfo
GetErrorInfo
LoadTypeLibEx

powrprof

GetCurrentPowerPolicies

secur32

GetComputerObjectNameW
FreeCredentialsHandle
DecryptMessage

user32

EnumWindows
GetUserObjectSecurity
MessageBoxW
DestroyCaret
GetWindowLongW
FlashWindow
GetPropA
DrawTextExA
GetCursorPos
DeleteMenu
DestroyWindow
DrawStateW
LoadImageA
GetFocus
GetClipboardSequenceNumber
GetDlgItemTextA
GetMenuContextHelpId
LockWindowUpdate
GetClipCursor
GetScrollRange
GetMessageTime
GetSysColorBrush
GetParent
LoadAcceleratorsW
InsertMenuW
GetLastInputInfo
GetLastActivePopup
GetClassInfoW
MessageBoxIndirectA
ExcludeUpdateRgn
GetKeyNameTextW
IsWindowEnabled
InsertMenuItemA
GetMenuItemInfoW
DestroyCursor
GetClassLongA
GetProcessDefaultLayout
LockSetForegroundWindow
LoadAcceleratorsA
GetSubMenu
FillRect
GetTabbedTextExtentW
DefFrameProcA
GetPriorityClipboardFormat
DrawStateA
GetKeyState
LoadMenuIndirectA
IsZoomed
GetComboBoxInfo
GetCapture
DrawFrameControl
GetClipboardFormatNameW

urlmon

GetClassFileOrMime

ws2_32

socket

wininet

GetUrlCacheEntryInfoA
FindNextUrlCacheEntryExA

version

GetFileVersionInfoSizeW

msvcrt

srand
ungetc
toupper
fgetwc
strtoul
fsetpos
free

winspool.drv

FindNextPrinterChangeNotification
DeletePrinterDriverExW
GetPrinterDriverW
DeletePrinterDriverW
GetPrinterDataExW

gdi32

GetCharWidthA
DeleteMetaFile
GetMiterLimit
GetMetaFileBitsEx
GetTextExtentExPointW
ExtEscape
GetCharWidth32W
GetWindowExtEx
GetStretchBltMode
GetTextColor
GetRegionData
GetRandomRgn
GetFontUnicodeRanges
GetObjectA
GetDIBColorTable

shell32

ExtractIconExA
ExtractIconW
FindExecutableW
ExtractAssociatedIconW

winmm

DefDriverProc

Sections

.text
Size: 544KB - Virtual size: 541KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 672KB - Virtual size: 669KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
1073d38346b39fb3d92f4cd814ea13d32ecf5b16c07c87560802343bd1605dfd
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
1d0191c5dc6cd12bc3718fbc1c7bff5dc037d79f6e0aa29441a9d2c717a81005
.dll windows x86

dd810217fd321ed61d3e2811624cf289

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscms

GetColorProfileElement

oleaut32

GetRecordInfoFromTypeInfo

user32

GetComboBoxInfo
GetClassLongA
IsWindow
GetClientRect
DrawTextA
GetDlgItemTextA
LoadAcceleratorsW
GetMenuCheckMarkDimensions
LoadIconA
GetCaretPos
FreeDDElParam
GetWindowPlacement
IsWinEventHookInstalled
LoadIconW
FindWindowExA
FindWindowExW
MessageBoxIndirectW
GetCapture
GetTopWindow
GetThreadDesktop
LoadCursorW
GetClipboardFormatNameW
GetClipCursor
GetProcessWindowStation

gdi32

GetBrushOrgEx
GetPolyFillMode
GetBitmapBits
GetFontUnicodeRanges
DeleteEnhMetaFile
GetCharWidthA
EqualRgn
FillRgn
GetRasterizerCaps
GetTextExtentPoint32A
GetTextExtentPointA
GetTextColor
GetRandomRgn
GetLayout
GetTextMetricsW

comdlg32

GetOpenFileNameW
GetSaveFileNameA

shell32

ExtractAssociatedIconExW
ExtractIconW

msvcrt

fseek
strncmp
ungetwc
vprintf
strtod
ftell
strftime
strlen

winspool.drv

DeletePrinterDriverW
GetPrinterDriverDirectoryW

ole32

GetConvertStg
GetClassFile

advapi32

LookupAccountNameA
GetServiceKeyNameA
GetOldestEventLogRecord
GetUserNameA
GetTokenInformation
GetWindowsAccountDomainSid
GetLengthSid
IsValidSecurityDescriptor
EqualSid
LockServiceDatabase
GetSidSubAuthorityCount
LogonUserA

wininet

GetUrlCacheEntryInfoExA

clusapi

GetClusterResourceNetworkName

ws2_32

shutdown

kernel32

GetLongPathNameA
FindResourceA
GetCPInfo
GetProcessTimes
GetCommState
GetCurrentProcess
GetUserDefaultUILanguage
GenerateConsoleCtrlEvent
GetTapeParameters
lstrcatW
GetFileAttributesA
GetPrivateProfileStringW
GetDriveTypeA
GlobalAlloc
GetLocaleInfoW
GetStringTypeA
GetTempFileNameW
GetWindowsDirectoryW
GetProcessAffinityMask
VirtualAlloc
IsValidLocale
DeleteTimerQueue
GetSystemPowerStatus
GetThreadTimes
GetVolumePathNamesForVolumeNameW
GetPrivateProfileIntW
VirtualQueryEx
GetTempPathA
EscapeCommFunction
GetCommMask
FlushFileBuffers
DeleteFiber
GetPrivateProfileStringA
GetCompressedFileSizeW
lstrlenW
Module32Next
GetTimeFormatW
GetStringTypeW
LocalFileTimeToFileTime
FillConsoleOutputAttribute
GetModuleHandleA
GetModuleFileNameA
GetBinaryTypeA
Module32FirstW
FileTimeToSystemTime
GetPrivateProfileSectionA
ExpandEnvironmentStringsA
FindNextVolumeW
EnumTimeFormatsA
WritePrivateProfileStructA
FindActCtxSectionGuid
WriteProfileStringW
GetFileSize
LoadLibraryExA

urlmon

MkParseDisplayNameEx
IsValidURL
GetClassFileOrMime

powrprof

IsPwrHibernateAllowed

Sections

.text
Size: 692KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 892KB - Virtual size: 888KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2011a4d44868c7ae5888e002e560bdefaee80fb1ebc475ab27cc087ceaba3421
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2d09627f1e18e10a84ee46a39393a475f2221646845619d0e91c53e55b6ced78
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
3258221c3cfe43e436dcdcd861094958fb3b2a0c6e6fbd480340a617bd6c6372
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
41a872cfc4d45bebd449c1f07df957003ce9e2b70f61723c87a11c9d3ad18a5c
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
4bdc63acbbdc6f332d710327cae95825e517e5023c8c3d708433d4adbd905565
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
4ec325580b1b5df51c1ce739795ba0bd791b87eb46b30d01f1720f1a4a4855f4
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
4f7d0d590e1beed28c106c4dfb0484621fceea018b9f655987b42a623e58b18e
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
641e899d788a5a12aaa9ce95a3b136ef69746ea41075364c545131b44a671150
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
7752fc97466c4d70051d078cfe0741655a0671881b04de7880baa6bd23a1aea7
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
825c881dd6061a1b181bdecd74da45a894e9ab6c5674f019172e4926d1e19b6e
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
8b9ea540f76c84460a5457b060489341b3374e0b17c24895b3df68e73bc12011
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
8c6eb7b3590a221d6e5dde90c1b3c1a46cc37ab5e0becf0c2fb96358856760d3
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
8d35efd658a4c648f1f0bda743b235ea298ba427aa9c24fe7d37b34f65029636
.dll windows x86

b34374021d23f69d605da8e4915a5822

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoW

user32

GetClassInfoA
GetWindowRgn
GetDlgItemTextW
GetKeyNameTextA
GetCursor
GetRawInputDeviceList
GetQueueStatus
GetKeyboardLayout
GetWindowTextW

winspool.drv

DeletePortW

shell32

FindExecutableW

kernel32

GetBinaryTypeA
GetModuleFileNameA
GetCommTimeouts
FindActCtxSectionStringW
GetThreadLocale
WritePrivateProfileStructA
GetVolumeInformationA
GetDiskFreeSpaceA
GetTickCount
GetComputerNameExA
LocalFree
FindVolumeClose
GetCalendarInfoW
FreeLibrary
GetCurrencyFormatA
DefineDosDeviceA
GetModuleHandleA
WriteProfileStringW
ExpandEnvironmentStringsW
GetFileTime
lstrcpynW
GetStringTypeA

urlmon

FindMimeFromData

gdi32

GetPaletteEntries
GetTextMetricsW
GetRandomRgn
GetTextCharset
GetWindowOrgEx
GetOutlineTextMetricsA
ExcludeClipRect

mscms

GetStandardColorSpaceProfileW

advapi32

DecryptFileW
InitializeSecurityDescriptor
GetSidIdentifierAuthority
IsValidSid

oleaut32

LoadRegTypeLi

msvcrt

towlower

Sections

.text
Size: 712KB - Virtual size: 709KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 912KB - Virtual size: 910KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
8ff280e6e5ce3d38fb92c687cfe7ad39538b041632ed018815eb126b24e5d491
.dll windows x86

7207b4368e6e34ddcdb3c51f17a1b990

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoW

oleaut32

LoadRegTypeLi

advapi32

DecryptFileW
IsValidSid
GetSidIdentifierAuthority
InitializeSecurityDescriptor

shell32

FindExecutableW

kernel32

GetThreadLocale
WritePrivateProfileStructA
GetVolumeInformationA
GetDiskFreeSpaceA
FindActCtxSectionStringW
GetComputerNameExA
LocalFree
FindVolumeClose
GetCalendarInfoW
FreeLibrary
GetCurrencyFormatA
DefineDosDeviceA
GetStringTypeA
WriteProfileStringW
ExpandEnvironmentStringsW
GetFileTime
lstrcpynW
GetCommTimeouts
GetModuleFileNameA
GetBinaryTypeA
GetTickCount
GetModuleHandleA

urlmon

FindMimeFromData

user32

GetKeyNameTextA
GetRawInputDeviceList
GetWindowRgn
GetClassInfoW
GetKeyboardLayout
GetCursor
GetQueueStatus
GetWindowTextW
GetDlgItemTextW

gdi32

GetTextMetricsW
GetOutlineTextMetricsA
ExcludeClipRect
GetRandomRgn
GetTextCharset
GetWindowOrgEx
GetPaletteEntries

winspool.drv

DeletePortW

mscms

GetStandardColorSpaceProfileW

msvcrt

towlower

Sections

.text
Size: 712KB - Virtual size: 709KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 912KB - Virtual size: 910KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
92491497b83a8ad213c15c3f43fc34358a6d7e5ccf3cfbc7e93bb3f436a96456
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
9254db5b18f53f25d68ab5a1e973a46590965403cb3b38ce0a0c171653e810b7
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
99c0c2111241b8ab416a7405a0453b77b3e5749bfd1fb182848b903d1adae15f
.dll windows x86

40fc54fc1b9e4c83d4e7833de25ce5a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

towlower

gdi32

GetTextMetricsW
GetOutlineTextMetricsA
ExcludeClipRect
GetPaletteEntries
GetRandomRgn
GetTextCharset
GetWindowOrgEx

mscms

GetStandardColorSpaceProfileW

kernel32

GetThreadLocale
FindActCtxSectionStringW
GetCommTimeouts
GetVolumeInformationA
GetDiskFreeSpaceA
GetTickCount
GetComputerNameExA
LocalFree
FindVolumeClose
GetCalendarInfoW
FreeLibrary
GetCurrencyFormatA
DefineDosDeviceA
GetStringTypeA
WriteProfileStringW
ExpandEnvironmentStringsW
GetFileTime
WritePrivateProfileStructA
GetModuleHandleA
GetModuleFileNameA
GetBinaryTypeA
lstrcpynW

urlmon

FindMimeFromData

user32

GetRawInputDeviceList
GetCursor
GetKeyNameTextA
GetDlgItemTextW
GetWindowRgn
GetClassInfoA
GetWindowTextW
GetKeyboardLayout
GetQueueStatus

winspool.drv

DeletePortW

wininet

GetUrlCacheEntryInfoW

oleaut32

LoadRegTypeLi

advapi32

GetSidIdentifierAuthority
DecryptFileA
InitializeSecurityDescriptor
IsValidSid

shell32

FindExecutableW

Sections

.text
Size: 712KB - Virtual size: 709KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 912KB - Virtual size: 910KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
a1b2435d7cc11d738419b0d1b9a2c7d6b8c071f17ac08f6dce5eb85771dc624c
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
a43a2e2351b2087f48c52d33b18e6278bd50d8e64c18462335988300c27febb9
.dll windows x86

156015a5c7290555d2efe1a2df4b1530

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameW
GetSaveFileNameA

clusapi

GetClusterResourceNetworkName

ws2_32

shutdown

oleaut32

GetRecordInfoFromTypeInfo

ole32

GetConvertStg
GetClassFile

mscms

GetColorProfileElement

powrprof

IsPwrHibernateAllowed

urlmon

IsValidURL
MkParseDisplayNameEx
GetClassFileOrMime

msvcrt

vprintf
strftime
fseek
strtod
ftell
strncmp
strlen
ungetwc

shell32

ExtractAssociatedIconExW
ExtractIconW

wininet

GetUrlCacheEntryInfoExA

gdi32

GetCharWidthA
GetPolyFillMode
GetBitmapBits
GetFontUnicodeRanges
DeleteEnhMetaFile
EqualRgn
FillRgn
GetRasterizerCaps
GetTextExtentPoint32A
GetTextExtentPointA
GetTextMetricsW
GetLayout
GetBrushOrgEx
GetRandomRgn
GetTextColor

user32

GetDlgItemTextA
DrawTextA
GetComboBoxInfo
GetMenuCheckMarkDimensions
MessageBoxIndirectW
GetProcessWindowStation
FindWindowExW
LoadIconW
LoadAcceleratorsW
GetWindowPlacement
FreeDDElParam
GetCaretPos
LoadIconA
GetCapture
GetClientRect
IsWindow
GetClassLongA
GetClipCursor
GetClipboardFormatNameW
GetTopWindow
GetThreadDesktop
LoadCursorW
IsWinEventHookInstalled
FindWindowExA

advapi32

GetServiceKeyNameA
GetOldestEventLogRecord
GetSidSubAuthorityCount
LockServiceDatabase
GetUserNameA
GetTokenInformation
GetWindowsAccountDomainSid
GetLengthSid
LookupAccountNameA
IsValidSecurityDescriptor
EqualSid
LogonUserA

kernel32

GetCommState
GetProcessAffinityMask
GetWindowsDirectoryW
GetTempFileNameW
GetCurrentProcess
GetUserDefaultUILanguage
GenerateConsoleCtrlEvent
GetTapeParameters
lstrcatW
GetFileAttributesA
lstrlenW
GetPrivateProfileStringW
GetDriveTypeA
GlobalAlloc
GetPrivateProfileStringA
GetProcessTimes
VirtualAlloc
IsValidLocale
DeleteTimerQueue
GetSystemPowerStatus
GetThreadTimes
GetVolumePathNamesForVolumeNameW
GetPrivateProfileIntW
VirtualQueryEx
GetTempPathA
EscapeCommFunction
GetCPInfo
GetCommMask
FlushFileBuffers
DeleteFiber
FileTimeToSystemTime
GetPrivateProfileSectionA
EnumTimeFormatsA
WritePrivateProfileStructA
LoadLibraryExA
FillConsoleOutputAttribute
Module32FirstW
ExpandEnvironmentStringsA
FindNextVolumeW
GetFileSize
WriteProfileStringW
Module32Next
GetStringTypeA
GetLocaleInfoW
GetTimeFormatW
GetStringTypeW
LocalFileTimeToFileTime
GetModuleHandleA
GetModuleFileNameA
GetLongPathNameA
FindResourceA
GetBinaryTypeA
GetCompressedFileSizeW
FindActCtxSectionGuid

winspool.drv

DeletePrinterDriverW
GetPrinterDriverDirectoryW

Sections

.text
Size: 712KB - Virtual size: 709KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 920KB - Virtual size: 916KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
a5b7f672907cc9716d3ccc20f2c783fef110dd1a92f0c03acf1e6b7cab121e76
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 504KB - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
b13823805b534d14f88fa2c017c469517e81d6aa19994ba432f683b1dc304d58
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
b4cb7640d4ecacaf554744229f5dd5d07fba70b72cc19d268b3fb70a7e4914a4
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bad38e743708ea746930e8f4b6663a162add4503821d998a6049961e82c48250
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
c158550e9871f0337417ab19111f233fb4fa653f63ac184922d3eb6e3eb720f9
.dll windows x86

88962f44ac4df570f9fdd98468062711

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

FindMimeFromData

advapi32

IsValidSid
DecryptFileW
InitializeSecurityDescriptor
GetSidIdentifierAuthority

kernel32

GetTickCount
GetComputerNameExA
LocalFree
FindVolumeClose
GetDiskFreeSpaceA
FreeLibrary
GetCurrencyFormatA
DefineDosDeviceA
GetStringTypeA
WriteProfileStringW
ExpandEnvironmentStringsW
GetFileTime
lstrcpynW
GetModuleHandleA
GetModuleFileNameA
GetVolumeInformationA
WritePrivateProfileStructA
GetThreadLocale
FindActCtxSectionStringW
GetCommTimeouts
GetCalendarInfoW
GetBinaryTypeA

shell32

FindExecutableW

oleaut32

LoadRegTypeLi

gdi32

ExcludeClipRect
GetTextCharset
GetRandomRgn
GetTextMetricsW
GetPaletteEntries
GetOutlineTextMetricsA
GetWindowOrgEx

user32

GetDlgItemTextW
GetWindowTextW
GetKeyboardLayout
GetQueueStatus
GetRawInputDeviceList
GetCursor
GetKeyNameTextA
GetClassInfoW
GetWindowRgn

wininet

GetUrlCacheEntryInfoW

msvcrt

towlower

winspool.drv

DeletePortW

mscms

GetStandardColorSpaceProfileW

Sections

.text
Size: 712KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 912KB - Virtual size: 910KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
c45cb46b5b052459a4e8d93377f22c482eafe2930a18571c92b4970d7f31da23
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cdb1485fc915ccc5359389f27780c8dce6e44e9c2623cf7ecf362d1ea13dd01d
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
d41af31a3d833b8470bd2fac52c258ada62819cdf212bee1ae4168e100c9438d
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
edea13bf957e4c450c1028a1071fdbd9efeec94717c172260912eaf022d32621
.dll windows x86

b34374021d23f69d605da8e4915a5822

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoW

user32

GetClassInfoA
GetWindowRgn
GetDlgItemTextW
GetKeyNameTextA
GetCursor
GetRawInputDeviceList
GetQueueStatus
GetKeyboardLayout
GetWindowTextW

winspool.drv

DeletePortW

shell32

FindExecutableW

kernel32

GetBinaryTypeA
GetModuleFileNameA
GetCommTimeouts
FindActCtxSectionStringW
GetThreadLocale
WritePrivateProfileStructA
GetVolumeInformationA
GetDiskFreeSpaceA
GetTickCount
GetComputerNameExA
LocalFree
FindVolumeClose
GetCalendarInfoW
FreeLibrary
GetCurrencyFormatA
DefineDosDeviceA
GetModuleHandleA
WriteProfileStringW
ExpandEnvironmentStringsW
GetFileTime
lstrcpynW
GetStringTypeA

urlmon

FindMimeFromData

gdi32

GetPaletteEntries
GetTextMetricsW
GetRandomRgn
GetTextCharset
GetWindowOrgEx
GetOutlineTextMetricsA
ExcludeClipRect

mscms

GetStandardColorSpaceProfileW

advapi32

DecryptFileW
InitializeSecurityDescriptor
GetSidIdentifierAuthority
IsValidSid

oleaut32

LoadRegTypeLi

msvcrt

towlower

Sections

.text
Size: 712KB - Virtual size: 709KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 912KB - Virtual size: 910KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
f0a7fc685747beb21d9339aed02eb9f7ee85996d79d226858fea8c2f83af36cc
.dll windows x86

3a5af4083d8188a5aa455f937dfce264

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LogonUserA
GetServiceKeyNameA
GetOldestEventLogRecord
GetSidSubAuthorityCount
LockServiceDatabase
EqualSid
IsValidSecurityDescriptor
LookupAccountNameA
GetLengthSid
GetWindowsAccountDomainSid
GetTokenInformation
GetUserNameA

oleaut32

GetRecordInfoFromTypeInfo

clusapi

GetClusterResourceNetworkName

wininet

GetUrlCacheEntryInfoExA

ws2_32

shutdown

shell32

ExtractIconW
ExtractAssociatedIconExW

mscms

GetColorProfileElement

winspool.drv

DeletePrinterDriverW
GetPrinterDriverDirectoryW

powrprof

IsPwrHibernateAllowed

msvcrt

strftime
ungetwc
strlen
strtod
fseek
vprintf
ftell
strncmp

user32

GetClipboardFormatNameW
GetTopWindow
GetClipCursor
LoadAcceleratorsW
GetDlgItemTextA
DrawTextA
GetComboBoxInfo
GetMenuCheckMarkDimensions
MessageBoxIndirectW
LoadCursorW
GetThreadDesktop
FindWindowExA
LoadIconW
IsWinEventHookInstalled
GetWindowPlacement
FreeDDElParam
GetCaretPos
LoadIconA
GetCapture
GetClientRect
IsWindow
GetClassLongA
FindWindowExW
GetProcessWindowStation

comdlg32

GetOpenFileNameW
GetSaveFileNameA

kernel32

DeleteTimerQueue
GetBinaryTypeA
GetModuleFileNameA
GetModuleHandleA
LocalFileTimeToFileTime
GetStringTypeW
GetTimeFormatW
Module32Next
lstrlenW
GetCompressedFileSizeW
GetPrivateProfileStringA
GlobalAlloc
GetDriveTypeA
GetPrivateProfileStringW
GetFileAttributesA
lstrcatW
GetTapeParameters
GenerateConsoleCtrlEvent
GetUserDefaultUILanguage
GetCurrentProcess
GetCommState
GetProcessTimes
GetCPInfo
FindResourceA
GetLongPathNameA
GetLocaleInfoW
GetStringTypeA
GetTempFileNameW
GetWindowsDirectoryW
GetProcessAffinityMask
VirtualAlloc
IsValidLocale
Module32FirstW
FindActCtxSectionGuid
WriteProfileStringW
GetFileSize
FindNextVolumeW
ExpandEnvironmentStringsA
GetSystemPowerStatus
FillConsoleOutputAttribute
LoadLibraryExA
WritePrivateProfileStructA
EnumTimeFormatsA
GetPrivateProfileSectionA
FileTimeToSystemTime
DeleteFiber
FlushFileBuffers
GetCommMask
EscapeCommFunction
GetTempPathA
VirtualQueryEx
GetPrivateProfileIntW
GetVolumePathNamesForVolumeNameW
GetThreadTimes

urlmon

IsValidURL
GetClassFileOrMime
MkParseDisplayNameEx

ole32

GetConvertStg
GetClassFile

gdi32

DeleteEnhMetaFile
GetCharWidthA
EqualRgn
FillRgn
GetRasterizerCaps
GetTextExtentPoint32A
GetTextExtentPointA
GetTextMetricsW
GetLayout
GetBrushOrgEx
GetRandomRgn
GetTextColor
GetBitmapBits
GetPolyFillMode
GetFontUnicodeRanges

Sections

.text
Size: 692KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 888KB - Virtual size: 887KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
fc2fdacbbb116992dcd444cbc4c65179a33277ca588f02f9c696129ffe341b9e
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fd843db504171aab5fbbc2955fda9471f726a4d006c28ad25174f729f4c8b874
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ExtractOne
ExtractThree
ExtractTwo

Sections

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.reloc Size: 512B - Virtual size: 38B

.data Size: 1.1MB - Virtual size: 1.1MB

.text Size: 98KB - Virtual size: 98KB

.edata Size: 512B - Virtual size: 117B

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.reloc Size: 512B - Virtual size: 38B

.data Size: 1.1MB - Virtual size: 1.1MB

.text Size: 98KB - Virtual size: 98KB

.edata Size: 512B - Virtual size: 117B

ff095e1f97154e0ed27aa1449e546b14

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

advapi32

oleaut32

powrprof

secur32

user32

urlmon

ws2_32

wininet

version

msvcrt

winspool.drv

gdi32

shell32

winmm

Sections

.text Size: 544KB - Virtual size: 541KB

.rdata Size: 672KB - Virtual size: 669KB

.data Size: 104KB - Virtual size: 106KB

.idata Size: 8KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 44KB - Virtual size: 43KB

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.reloc Size: 512B - Virtual size: 38B

.data Size: 1.1MB - Virtual size: 1.1MB

.text Size: 98KB - Virtual size: 98KB

.edata Size: 512B - Virtual size: 117B

dd810217fd321ed61d3e2811624cf289

Headers

DLL Characteristics

File Characteristics

Imports

mscms

oleaut32

user32

gdi32

comdlg32

shell32

msvcrt

winspool.drv

ole32

advapi32

wininet

.reloc
Size: 512B - Virtual size: 38B

.data
Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 98KB - Virtual size: 98KB

.edata
Size: 512B - Virtual size: 117B

.reloc
Size: 512B - Virtual size: 38B

.data
Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 98KB - Virtual size: 98KB

.edata
Size: 512B - Virtual size: 117B

.text
Size: 544KB - Virtual size: 541KB

.rdata
Size: 672KB - Virtual size: 669KB

.data
Size: 104KB - Virtual size: 106KB

.idata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 44KB - Virtual size: 43KB

.reloc
Size: 512B - Virtual size: 38B

.data
Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 98KB - Virtual size: 98KB

.edata
Size: 512B - Virtual size: 117B

.text
Size: 692KB - Virtual size: 689KB

.rdata
Size: 892KB - Virtual size: 888KB

.data
Size: 76KB - Virtual size: 80KB

.idata
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 512B - Virtual size: 38B

.data
Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 98KB - Virtual size: 98KB

.edata
Size: 512B - Virtual size: 117B

.reloc
Size: 512B - Virtual size: 38B

.data
Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 98KB - Virtual size: 98KB

.edata
Size: 512B - Virtual size: 117B

.reloc
Size: 512B - Virtual size: 38B

.data
Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 98KB - Virtual size: 98KB

.edata
Size: 512B - Virtual size: 117B

.reloc
Size: 512B - Virtual size: 38B

.data
Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 98KB - Virtual size: 98KB

.edata
Size: 512B - Virtual size: 117B

.reloc
Size: 512B - Virtual size: 38B

.data
Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 98KB - Virtual size: 98KB

.edata
Size: 512B - Virtual size: 117B