c5d0178b71a12e7a1a25110bc67186a861d88410ac9060a436a118176bc8ed86

Sharing

Copy URL Twitter E-mail

General

Target

c5d0178b71a12e7a1a25110bc67186a861d88410ac9060a436a118176bc8ed86
Size

4.1MB
MD5

66def6321d6161b79765c9622fc44f56
SHA1

81c4ecff5c5efb543f8a53220f9caa60c7461812
SHA256

c5d0178b71a12e7a1a25110bc67186a861d88410ac9060a436a118176bc8ed86
SHA512

bbfdfb948c7c6125c777e12ade8a88b6a2b890fcbb5f293098acce97d263f78a50d992437be91cd8259dbdbd184d5c497194ea3af36f7b3361ee22887f158b75
SSDEEP

98304:LDggvksMUbuz3zDzCgM/2RidTcujjdoMuoYxZo:LsAbuDfuDeid4QnYxy

Score

N/A

Malware Config

Signatures

Files

c5d0178b71a12e7a1a25110bc67186a861d88410ac9060a436a118176bc8ed86
.rar
RD-EB/API/Mwic_32.dll
.dll .ps1 windows x86
RD-EB/API/Mwic_32.h
RD-EB/API/Mwic_32.lib
RD-EB/API函数说明/mwrdhelp.chm
.chm
RD-EB/Demo/Demo.exe
.exe windows x86

bcbba4a207a1d5af7c87cf12d82e373a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hhctrl.ocx

ord14

mwic_32

eral_ssf1101
swr_ssf1101
srd_ssf1101
chk_ssf1101
swr_4442
swr_4432
srd_4442
srd_4432
rsc_4442
rsct_4442
swr_4428
swr_4418
srd_4428
srd_4418
ser_4404
eswc_4406
swr_4404
swr_4406
srd_4404
srd_4406
wsc_1608
wsc_153
pwr_4442
pwr_4432
prd_4442
wsc_4442
csc_4442
csc_4428
pwr_4428
pwr_4418
wrwpb_4428
wrwpb_4418
srd_1604b
srd_1604
srd_102
swr_1604b
swr_1604
swr_102
ser_1604b
ser_1604
ser_102
auto_pull
srd_1608
srdconfig_1608
srd_153
srdconfig_153
swr_1608
swrconfig_1608
swr_153
swrconfig_153
init_auth_1608
srfus_1608
csc_1608
init_auth_153
Authenticate
SetInit
srfus_153
csc_153
reset_1608
reset_153
srd_24c64
srd_24c32
srd_24c16
srd_24c08
srd_24c04
srd_24c02
srd_24c01a
swr_24c64
swr_24c32
swr_24c16
swr_24c08
swr_24c04
swr_24c02
swr_24c01a
srd_45d041
swr_45d041
srd_93c46
srd_93c46a
swr_93c46
swr_93c46a
wsc_4428
eral_93c46
eral_93c46a
exp_dis
get_status
ic_decrypt
ic_encrypt
sam_slt_reset
sam_slt_protocol
val_read
srd_snr
srd_ver
chk_baud
get_status0
ic_init
ic_exit
set_baud
swr_eeprom
srd_eeprom
dv_beep
setsc_md
srd_dvsc
swr_dvsc
cmp_dvsc
set_code
cpu_reset
chk_card
csc_102
csc_1604b
csc_1604
cesc_102
cesc_1604b
cesc_1604
wsc_102
wsc_1604b
wsc_1604
wesc_102
wesc_1604b
wesc_1604
fakefus_4404
fakefus_1604b
fakefus_1604
fakefus_102
psnl_4406
psnl_4404
psnl_153
psnl_1608
psnl_1604b
psnl_1604
psnl_102
csc_4404
cesc_4404
wsc_4404
wesc_4404
csc_4406
wsc_4406
rdwpb_4418
rdwpb_4428

kernel32

SetEnvironmentVariableA
CompareStringW
CompareStringA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
ReleaseMutex
WaitForSingleObject
GetWindowsDirectoryA
GetTickCount
CreateMutexA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetLastError
CreateFileA
Sleep
DeleteFileA
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GlobalLock
GetProcAddress
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
FreeLibrary
LoadLibraryA
SetLastError
MulDiv
lstrcpynA
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
CreateEventA
InterlockedIncrement
InterlockedDecrement
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
DuplicateHandle
GetCurrentProcess
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
GetModuleFileNameA
LocalFree
GetCurrentThread
lstrcmpA
GlobalAlloc
GetFileAttributesA
GetTempFileNameA
SetFileTime
GetFileTime
GetDiskFreeSpaceA
GlobalFlags
SizeofResource
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
GetFileSize
LocalFileTimeToFileTime
SystemTimeToFileTime
SetErrorMode
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
RaiseException
CreateThread
ExitThread
HeapAlloc
HeapFree
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
GetProfileStringA

user32

GetMenuCheckMarkDimensions
wvsprintfA
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
InflateRect
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
CharUpperA
PostQuitMessage
ShowOwnedPopups
SetCursor
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
GetDesktopWindow
DestroyMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
LoadStringA
InsertMenuA
DeleteMenu
GetMenuStringA
DestroyIcon
ShowWindow
IsDialogMessageA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
LoadBitmapA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
GetCapture
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
SetWindowPos
ScreenToClient
GetWindowRect
UnregisterClassA
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowEnabled
SetActiveWindow
GetClassInfoA
LoadIconA
GetSysColor
RegisterWindowMessageA
GetFocus
SetFocus
GetCaretPos
EnableWindow
ShowCaret
HideCaret
SetCaretPos
InvalidateRect
GetKeyboardState
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
SetScrollInfo
EnableMenuItem
SendMessageA
WinHelpA
DestroyCaret
CreateCaret
wsprintfA
FindWindowA
GetWindow
LoadMenuA
SetMenu
SetWindowTextA
GetDlgItem
IsWindowUnicode
DefWindowProcA

gdi32

BitBlt
CreateCompatibleDC
LPtoDP
CreateDIBitmap
GetTextExtentPointA
PatBlt
Escape
ExtTextOutA
RectVisible
PtVisible
CreateSolidBrush
DeleteObject
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
TextOutA

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegQueryValueExA

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
DragAcceptFiles
ExtractIconA

comctl32

ord17

Sections

.text
Size: 424KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RD-EB/Demo/Mwic_32.dll
.dll .ps1 windows x86
RD-EB/Example/C#.net/mw_rdp/Backup/mw_rdp.sln
RD-EB/Example/C#.net/mw_rdp/Backup/mw_rdp.suo
RD-EB/Example/C#.net/mw_rdp/Backup/mw_rdp/App.ico
RD-EB/Example/C#.net/mw_rdp/Backup/mw_rdp/AssemblyInfo.cs
RD-EB/Example/C#.net/mw_rdp/Backup/mw_rdp/Form1.cs
RD-EB/Example/C#.net/mw_rdp/Backup/mw_rdp/Form1.resx
.xml .vbs
RD-EB/Example/C#.net/mw_rdp/Backup/mw_rdp/IC.cs
RD-EB/Example/C#.net/mw_rdp/Backup/mw_rdp/IC4442.cs
RD-EB/Example/C#.net/mw_rdp/Backup/mw_rdp/mw_rdp.csproj
RD-EB/Example/C#.net/mw_rdp/Backup/mw_rdp/mw_rdp.csproj.user
RD-EB/Example/C#.net/mw_rdp/UpgradeLog.XML
.xml
RD-EB/Example/C#.net/mw_rdp/_UpgradeReport_Files/UpgradeReport.css
RD-EB/Example/C#.net/mw_rdp/_UpgradeReport_Files/UpgradeReport.xslt
.xml .js
RD-EB/Example/C#.net/mw_rdp/_UpgradeReport_Files/UpgradeReport_Minus.gif
.gif
RD-EB/Example/C#.net/mw_rdp/_UpgradeReport_Files/UpgradeReport_Plus.gif
.gif
RD-EB/Example/C#.net/mw_rdp/mw_rdp.sln
RD-EB/Example/C#.net/mw_rdp/mw_rdp.suo
RD-EB/Example/C#.net/mw_rdp/mw_rdp/App.ico
RD-EB/Example/C#.net/mw_rdp/mw_rdp/AssemblyInfo.cs
RD-EB/Example/C#.net/mw_rdp/mw_rdp/Form1.cs
RD-EB/Example/C#.net/mw_rdp/mw_rdp/Form1.resx
.xml .vbs
RD-EB/Example/C#.net/mw_rdp/mw_rdp/IC.cs
RD-EB/Example/C#.net/mw_rdp/mw_rdp/IC4442.cs
RD-EB/Example/C#.net/mw_rdp/mw_rdp/bin/Release/Mwic_32.dll
.dll .ps1 windows x86
RD-EB/Example/C#.net/mw_rdp/mw_rdp/bin/Release/mw_rdp.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RD-EB/Example/C#.net/mw_rdp/mw_rdp/bin/Release/mw_rdp.vshost.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RD-EB/Example/C#.net/mw_rdp/mw_rdp/mw_rdp.csproj
RD-EB/Example/C#.net/mw_rdp/mw_rdp/mw_rdp.csproj.user
RD-EB/Example/C#.net/mw_rdp/mw_rdp/obj/Release/mw_rdp.Form1.resources
RD-EB/Example/C#.net/mw_rdp/mw_rdp/obj/Release/mw_rdp.csproj.GenerateResource.Cache
RD-EB/Example/C#.net/mw_rdp/mw_rdp/obj/Release/mw_rdp.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RD-EB/Example/C#.net/mw_rdp/mw_rdp/obj/Release/mw_rdp.projdata
RD-EB/Example/C#.net/mw_rdp/mw_rdp/obj/mw_rdp.csproj.FileList.txt
RD-EB/Example/C#.net/mw_rdp/mw_rdp/obj/mw_rdp.csproj.FileListAbsolute.txt
RD-EB/Example/Delphi 7/Mwic_32.dll
.dll .ps1 windows x86
RD-EB/Example/Delphi 7/Project1.cfg
RD-EB/Example/Delphi 7/Project1.dof
RD-EB/Example/Delphi 7/Project1.dpr
RD-EB/Example/Delphi 7/Project1.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RD-EB/Example/Delphi 7/Project1.res
RD-EB/Example/Delphi 7/Project1.~dpr
RD-EB/Example/Delphi 7/Unit1.dcu
RD-EB/Example/Delphi 7/Unit1.ddp
RD-EB/Example/Delphi 7/Unit1.dfm
RD-EB/Example/Delphi 7/Unit1.pas
RD-EB/Example/Delphi 7/Unit1.~ddp
RD-EB/Example/Delphi 7/Unit1.~dfm
RD-EB/Example/Delphi 7/Unit1.~pas
RD-EB/Example/Delphi3/Mc32_102/MC32_10p.dcu
RD-EB/Example/Delphi3/Mc32_102/MC32_10p.dfm
RD-EB/Example/Delphi3/Mc32_102/MC32_10p.pas
RD-EB/Example/Delphi3/Mc32_102/Mc32_10d.dpr
RD-EB/Example/Delphi3/Mc32_102/Mc32_10d.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RD-EB/Example/Delphi3/Mc32_102/Mwic_32.dll
.dll .ps1 windows x86
RD-EB/Example/Delphi3/Mc32_28/MC32_42p.dcu
RD-EB/Example/Delphi3/Mc32_28/MC32_42p.ddp
RD-EB/Example/Delphi3/Mc32_28/MC32_42p.dfm
RD-EB/Example/Delphi3/Mc32_28/MC32_42p.pas
RD-EB/Example/Delphi3/Mc32_28/MC32_42p.~ddp
RD-EB/Example/Delphi3/Mc32_28/MC32_42p.~dfm
RD-EB/Example/Delphi3/Mc32_28/MC32_42p.~pas
RD-EB/Example/Delphi3/Mc32_28/Mc32_42d.dpr
RD-EB/Example/Delphi3/Mc32_28/Mc32_42d.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RD-EB/Example/Delphi3/Mc32_28/Mwic_32.dll
.dll .ps1 windows x86
RD-EB/Example/Delphi3/Mc32_cpu/MC32_GLP.dcu
RD-EB/Example/Delphi3/Mc32_cpu/MC32_GLP.dfm
RD-EB/Example/Delphi3/Mc32_cpu/MC32_GLP.pas
RD-EB/Example/Delphi3/Mc32_cpu/Mc32_gld.cfg
RD-EB/Example/Delphi3/Mc32_cpu/Mc32_gld.dof
RD-EB/Example/Delphi3/Mc32_cpu/Mc32_gld.dpr
RD-EB/Example/Delphi3/Mc32_cpu/Mc32_gld.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 341KB - Virtual size: 341KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RD-EB/Example/Delphi3/Mc32_cpu/Mc32_gld.res
RD-EB/Example/Delphi3/Mc32_cpu/Mwic_32.dll
.dll .ps1 windows x86
RD-EB/Example/VB.net/mw_rdp/Backup/mw_rdp.sln
RD-EB/Example/VB.net/mw_rdp/Backup/mw_rdp.suo
RD-EB/Example/VB.net/mw_rdp/Backup/mw_rdp/AssemblyInfo.vb
RD-EB/Example/VB.net/mw_rdp/Backup/mw_rdp/Form1.resx
.xml .vbs
RD-EB/Example/VB.net/mw_rdp/Backup/mw_rdp/Form1.vb
.vbs
RD-EB/Example/VB.net/mw_rdp/Backup/mw_rdp/IC.vb
.vbs
RD-EB/Example/VB.net/mw_rdp/Backup/mw_rdp/IC4442.vb
.vbs
RD-EB/Example/VB.net/mw_rdp/Backup/mw_rdp/mw_rdp.vbproj
RD-EB/Example/VB.net/mw_rdp/Backup/mw_rdp/mw_rdp.vbproj.user
RD-EB/Example/VB.net/mw_rdp/UpgradeLog.XML
.xml
RD-EB/Example/VB.net/mw_rdp/_UpgradeReport_Files/UpgradeReport.css
RD-EB/Example/VB.net/mw_rdp/_UpgradeReport_Files/UpgradeReport.xslt
.xml .js
RD-EB/Example/VB.net/mw_rdp/_UpgradeReport_Files/UpgradeReport_Minus.gif
.gif
RD-EB/Example/VB.net/mw_rdp/_UpgradeReport_Files/UpgradeReport_Plus.gif
.gif
RD-EB/Example/VB.net/mw_rdp/mw_rdp.sln
RD-EB/Example/VB.net/mw_rdp/mw_rdp.suo
RD-EB/Example/VB.net/mw_rdp/mw_rdp/AssemblyInfo.vb
RD-EB/Example/VB.net/mw_rdp/mw_rdp/Form1.resx
.xml .vbs
RD-EB/Example/VB.net/mw_rdp/mw_rdp/Form1.vb
.vbs
RD-EB/Example/VB.net/mw_rdp/mw_rdp/IC.vb
.vbs
RD-EB/Example/VB.net/mw_rdp/mw_rdp/IC4442.vb
.vbs
RD-EB/Example/VB.net/mw_rdp/mw_rdp/Mwic_32.dll
.dll .ps1 windows x86
RD-EB/Example/VB.net/mw_rdp/mw_rdp/Mwic_32.h
RD-EB/Example/VB.net/mw_rdp/mw_rdp/Mwic_32.lib
RD-EB/Example/VB.net/mw_rdp/mw_rdp/bin/Mwic_32.dll
.dll .ps1 windows x86
RD-EB/Example/VB.net/mw_rdp/mw_rdp/bin/mw_rdp.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RD-EB/Example/VB.net/mw_rdp/mw_rdp/bin/mw_rdp.vshost.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RD-EB/Example/VB.net/mw_rdp/mw_rdp/bin/mw_rdp.xml
RD-EB/Example/VB.net/mw_rdp/mw_rdp/mw_rdp.vbproj
RD-EB/Example/VB.net/mw_rdp/mw_rdp/mw_rdp.vbproj.user
RD-EB/Example/VB.net/mw_rdp/mw_rdp/obj/Release/Mwic_32.dll
.dll .ps1 windows x86
RD-EB/Example/VB.net/mw_rdp/mw_rdp/obj/Release/mw_rdp.Form1.resources
RD-EB/Example/VB.net/mw_rdp/mw_rdp/obj/Release/mw_rdp.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RD-EB/Example/VB.net/mw_rdp/mw_rdp/obj/Release/mw_rdp.vbproj.GenerateResource.Cache
RD-EB/Example/VB.net/mw_rdp/mw_rdp/obj/Release/mw_rdp.xml
RD-EB/Example/VB.net/mw_rdp/mw_rdp/obj/mw_rdp.vbproj.FileList.txt
RD-EB/Example/VB.net/mw_rdp/mw_rdp/obj/mw_rdp.vbproj.FileListAbsolute.txt
RD-EB/Example/Vb5/Mc32_102/MC32_10.frm
.vbs
RD-EB/Example/Vb5/Mc32_102/Mc32_10.bas
RD-EB/Example/Vb5/Mc32_102/Mc32_10.vbp
RD-EB/Example/Vb5/Mc32_102/Mc32_10.vbw
RD-EB/Example/Vb5/Mc32_102/Mc32_gl.bas
RD-EB/Example/Vb5/Mc32_24/MC32_24.frm
.vbs
RD-EB/Example/Vb5/Mc32_24/Mc32_24.bas
RD-EB/Example/Vb5/Mc32_24/Mc32_24.vbp
RD-EB/Example/Vb5/Mc32_24/Mc32_24.vbw
RD-EB/Example/Vb5/Mc32_24/Mc32_gl.bas
RD-EB/Example/Vb5/Mc32_4442/MC32_42.frm
RD-EB/Example/Vb5/Mc32_4442/Mc32_42.bas
RD-EB/Example/Vb5/Mc32_4442/Mc32_42.vbp
RD-EB/Example/Vb5/Mc32_4442/Mc32_42.vbw
RD-EB/Example/Vb5/Mc32_4442/Mc32_gl.bas
RD-EB/Example/Vb5/Mc32_4442/Mssccprj.scc
RD-EB/Example/Vb5/Mc32_cpu/Cpu_32.vbp
RD-EB/Example/Vb5/Mc32_cpu/Cpu_32.vbw
RD-EB/Example/Vb5/Mc32_cpu/Mwic32.bas
RD-EB/Example/Vb5/Mc32_cpu/cpu_32.frm
.vbs
RD-EB/Example/Vc6/Debug/Mwic_32.dll
.dll .ps1 windows x86
RD-EB/Example/Vc6/Debug/StdAfx.obj
RD-EB/Example/Vc6/Debug/mwic_rd.exe
.exe windows x86

93ffc5c131acbcbdf06d2d2fbc161662

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mwic_32

chk_24c04
swr_24c04
srd_24c04
chk_24c02
swr_24c16
chk_24c16
srd_24c64
swr_24c64
chk_24c64
get_status
ic_init
prd_4442
srd_4442
swr_4442
rsct_4442
wsc_4442
hex_asc
rsc_4442
csc_4442
chk_4442
cpu_protocol
cpu_reset
ic_decrypt
ic_encrypt
swr_24c02
srd_24c02
chk_24c01a
srd_24c01a
swr_24c01a
sam_slt_protocol
sam_slt_reset
srd_24c16
ic_exit

mfc42d

ord1190
ord1041
ord4118
ord4391
ord3304
ord3365
ord413
ord2993
ord4475
ord454
ord2324
ord5072
ord3201
ord1906
ord646
ord3960
ord4053
ord3070
ord492
ord3447
ord3355
ord1212
ord880
ord684
ord4676
ord1096
ord1757
ord381
ord1087
ord3432
ord3803
ord3552
ord5077
ord3702
ord1880
ord1860
ord4415
ord3231
ord1033
ord4130
ord1789
ord2661
ord4227
ord4229
ord2104
ord3366
ord3826
ord4239
ord4215
ord4408
ord2340
ord2481
ord2584
ord3691
ord2473
ord2585
ord2341
ord2432
ord2339
ord3143
ord3144
ord3142
ord2431
ord3367
ord3784
ord3657
ord2021
ord1285
ord4492
ord2986
ord528
ord728
ord706
ord1862
ord2052
ord4195
ord3629
ord3948
ord4017
ord3831
ord4753
ord3362
ord1364
ord3651
ord4176
ord1781
ord1100
ord5076
ord3618
ord4208
ord2078
ord1310
ord3069
ord3944
ord3670
ord2076
ord1566
ord5078
ord3002
ord4064
ord1344
ord4191
ord1830
ord1631
ord4205
ord3786
ord3658
ord1952
ord1228
ord2875
ord317
ord574
ord1857
ord3524
ord618

msvcrtd

_setmbcp
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
memset
memcpy
__CxxFrameHandler
_chkesp
_itoa

kernel32

GetStartupInfoA
GetModuleHandleA

user32

LoadMenuA
SetMenu
GetSystemMetrics

mfco42d

ord798

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RD-EB/Example/Vc6/Debug/mwic_rd.ilk
RD-EB/Example/Vc6/Debug/mwic_rd.obj
RD-EB/Example/Vc6/Debug/mwic_rd.pch
RD-EB/Example/Vc6/Debug/mwic_rd.pdb
RD-EB/Example/Vc6/Debug/mwic_rd.res
RD-EB/Example/Vc6/Debug/mwic_rdDlg.obj
RD-EB/Example/Vc6/Debug/vc60.idb
RD-EB/Example/Vc6/Debug/vc60.pdb
RD-EB/Example/Vc6/Mwic_32.dll
.dll .ps1 windows x86
RD-EB/Example/Vc6/Mwic_32.h
RD-EB/Example/Vc6/Mwic_32.lib
RD-EB/Example/Vc6/StdAfx.cpp
RD-EB/Example/Vc6/StdAfx.h
RD-EB/Example/Vc6/mwic_rd.aps
RD-EB/Example/Vc6/mwic_rd.clw
RD-EB/Example/Vc6/mwic_rd.cpp
RD-EB/Example/Vc6/mwic_rd.dsp
RD-EB/Example/Vc6/mwic_rd.dsw
RD-EB/Example/Vc6/mwic_rd.h
RD-EB/Example/Vc6/mwic_rd.ncb
RD-EB/Example/Vc6/mwic_rd.opt
RD-EB/Example/Vc6/mwic_rd.plg
.html
RD-EB/Example/Vc6/mwic_rd.rc
RD-EB/Example/Vc6/mwic_rdDlg.cpp
RD-EB/Example/Vc6/mwic_rdDlg.h
RD-EB/Example/Vc6/res/mwic_rd.ico
RD-EB/Example/Vc6/res/mwic_rd.rc2
RD-EB/Example/Vc6/resource.h
RD-EB/Example/Vfp/Mc32_102/Mwic_32.dll
.dll .ps1 windows x86
RD-EB/Example/Vfp/Mc32_102/rd32_102.FXP
RD-EB/Example/Vfp/Mc32_102/rd32_102.prg
RD-EB/Example/Vfp/Mc32_cpu/Mwic_32.dll
.dll .ps1 windows x86
RD-EB/Example/Vfp/Mc32_cpu/cpudemo.FXP
RD-EB/Example/Vfp/Mc32_cpu/cpudemo.PRG
RD-EB/RD-EB产品规格书V1.00.pdf
.pdf
RD-EB/Thumbs.db

Sharing

General

Malware Config

Signatures

Files

bcbba4a207a1d5af7c87cf12d82e373a

Headers

File Characteristics

Imports

hhctrl.ocx

mwic_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 424KB - Virtual size: 420KB

.rdata Size: 60KB - Virtual size: 56KB

.data Size: 24KB - Virtual size: 46KB

.rsrc Size: 36KB - Virtual size: 36KB

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 28KB - Virtual size: 24KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 28KB - Virtual size: 24KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

Headers

File Characteristics

Sections

CODE Size: 328KB - Virtual size: 328KB

DATA Size: 4KB - Virtual size: 4KB

BSS Size: - Virtual size: 3KB

.idata Size: 8KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 24KB - Virtual size: 23KB

.rsrc Size: 59KB - Virtual size: 59KB

Headers

File Characteristics

Sections

CODE Size: 342KB - Virtual size: 342KB

DATA Size: 5KB - Virtual size: 4KB

BSS Size: - Virtual size: 3KB

.idata Size: 8KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 25KB - Virtual size: 24KB

.rsrc Size: 59KB - Virtual size: 59KB

Headers

File Characteristics

Sections

CODE Size: 342KB - Virtual size: 342KB

.text
Size: 424KB - Virtual size: 420KB

.rdata
Size: 60KB - Virtual size: 56KB

.data
Size: 24KB - Virtual size: 46KB

.rsrc
Size: 36KB - Virtual size: 36KB

.text
Size: 28KB - Virtual size: 24KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 28KB - Virtual size: 24KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

CODE
Size: 328KB - Virtual size: 328KB

DATA
Size: 4KB - Virtual size: 4KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 8KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 59KB - Virtual size: 59KB

CODE
Size: 342KB - Virtual size: 342KB

DATA
Size: 5KB - Virtual size: 4KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 8KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 59KB - Virtual size: 59KB

CODE
Size: 342KB - Virtual size: 342KB

DATA
Size: 5KB - Virtual size: 4KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 8KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 59KB - Virtual size: 59KB

CODE
Size: 341KB - Virtual size: 341KB

DATA
Size: 5KB - Virtual size: 4KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 60KB - Virtual size: 59KB

.text
Size: 36KB - Virtual size: 33KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 36KB - Virtual size: 33KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 2KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 1KB