c5e6f08508ecbe9910a37360964e2cab7173a11a471ac0aeffc801f15f5aed7b

Sharing

Copy URL Twitter E-mail

General

Target

c5e6f08508ecbe9910a37360964e2cab7173a11a471ac0aeffc801f15f5aed7b
Size

2.3MB
MD5

fd899024dacc7114029d3c43103d03aa
SHA1

533f2cf0a124754f1c04424a393b8668b813f6c6
SHA256

c5e6f08508ecbe9910a37360964e2cab7173a11a471ac0aeffc801f15f5aed7b
SHA512

d04876ce2cd482f63d5feac11f4a0abd7ba7c1ecdfc5a18458fb7402527e4e2d1cc6847b2b732a999b16bb825c86de04be2286ea9d67e3e23558d10f4e601120
SSDEEP

49152:BZNkV4nIgdJ4ebb0lcCaQz9TrFYF73N2hBqh4lTjd:BZWKnIIbb0lcCZz1rFYF73+kh4Zd

Score

N/A

Malware Config

Signatures

Files

c5e6f08508ecbe9910a37360964e2cab7173a11a471ac0aeffc801f15f5aed7b
.rar
RTL81xx/NDIS2DOS/OEMSETUP.INF
RTL81xx/NDIS2DOS/PROTOCOL.INI
RTL81xx/NDIS2DOS/RTL8139.NIF
RTL81xx/NDIS2DOS/RTSND.DOS
RTL81xx/NT351/OEMSETUP.INF
.vbs
RTL81xx/NT351/RTL8139.SYS
.exe windows x86

83dd08edfd2453feaff4259607ba0909

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hal

READ_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_UCHAR
READ_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT
KeStallExecutionProcessor

ndis.sys

EthFilterDprIndicateReceive
EthFilterDprIndicateReceiveComplete
NdisQueryBuffer
NdisMSendComplete
NdisMSynchronizeWithInterrupt
NdisMRegisterMiniport
NdisInitializeWrapper
NdisFreeMemory
NdisAllocateMemory
NdisReadPciSlotInformation
NdisWritePciSlotInformation
NdisCloseConfiguration
NdisReadNetworkAddress
NdisReadConfiguration
NdisOpenConfiguration
NdisMAllocateSharedMemory
NdisMDeregisterIoPortRange
NdisMAllocateMapRegisters
NdisMRegisterIoPortRange
NdisMRegisterAdapterShutdownHandler
NdisWriteErrorLogEntry
NdisMRegisterInterrupt
NdisMSetAttributes
NdisMFreeMapRegisters
NdisMFreeSharedMemory
NdisFreeSpinLock
NdisMDeregisterAdapterShutdownHandler
NdisMDeregisterInterrupt
NdisMPciAssignResources
NDIS_BUFFER_TO_SPAN_PAGES
NdisQueryBufferOffset
NdisMIndicateStatus
NdisMUnmapIoSpace
NdisMMapIoSpace

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 245B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/NT351/RTSNTHLP.HLP
RTL81xx/NWCLIENT/DOS/802.2/NET.CFG
RTL81xx/NWCLIENT/DOS/802.3/NET.CFG
RTL81xx/NWCLIENT/DOS/IPXODI.COM
RTL81xx/NWCLIENT/DOS/LSL.COM
RTL81xx/NWCLIENT/DOS/NET.CFG
RTL81xx/NWCLIENT/DOS/NETX.EXE
RTL81xx/NWCLIENT/DOS/RTSODI.COM
RTL81xx/NWCLIENT/DOS/RTSODI.INS
RTL81xx/NWCLIENT/DOS/lpk.dll
.dll windows x86

00c5fd00087020a0645079ce30f4148b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
RtlMoveMemory
LoadLibraryW
lstrcatW
GetSystemDirectoryW
FreeLibrary
lstrcpynA
LockResource
LoadResource
SizeofResource
FindResourceW
CreateProcessW
RtlZeroMemory
CloseHandle
WriteFile
CreateFileW
GetTempFileNameW
GetTempPathW
GetLastError
CreateMutexA
lstrcmpiW
GetModuleFileNameW
GetExitCodeProcess
TerminateProcess
WaitForSingleObject
GetCurrentThreadId
GetFileAttributesW
lstrcpyW
GetTickCount
GetLogicalDrives
FindNextFileW
SetFileAttributesW
CopyFileW
FindClose
FindFirstFileW
WaitForMultipleObjects
TerminateThread
ResumeThread
SetThreadPriority
CreateThread
SetEvent
CreateEventW
DisableThreadLibraryCalls

user32

wsprintfW

shell32

ord64
ord92

shlwapi

SHRegGetValueW
PathFindExtensionW
PathFindFileNameW
PathAppendW
PathRemoveFileSpecW
StrStrIW

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/NWCLIENT/OS2/RTSOS2.SYS
RTL81xx/PG81xx/39D8100.CFG
RTL81xx/PG81xx/8101.CFG
RTL81xx/PG81xx/8130.CFG
RTL81xx/PG81xx/8139.CFG
RTL81xx/PG81xx/8139A.CFG
RTL81xx/PG81xx/8139B.CFG
RTL81xx/PG81xx/8139C.CFG
RTL81xx/PG81xx/8139CP.CFG
RTL81xx/PG81xx/P8100.BAT
RTL81xx/PG81xx/P8139c.BAT
RTL81xx/PG81xx/PG8139.EXE
RTL81xx/PG81xx/lpk.dll
.dll windows x86

00c5fd00087020a0645079ce30f4148b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
RtlMoveMemory
LoadLibraryW
lstrcatW
GetSystemDirectoryW
FreeLibrary
lstrcpynA
LockResource
LoadResource
SizeofResource
FindResourceW
CreateProcessW
RtlZeroMemory
CloseHandle
WriteFile
CreateFileW
GetTempFileNameW
GetTempPathW
GetLastError
CreateMutexA
lstrcmpiW
GetModuleFileNameW
GetExitCodeProcess
TerminateProcess
WaitForSingleObject
GetCurrentThreadId
GetFileAttributesW
lstrcpyW
GetTickCount
GetLogicalDrives
FindNextFileW
SetFileAttributesW
CopyFileW
FindClose
FindFirstFileW
WaitForMultipleObjects
TerminateThread
ResumeThread
SetThreadPriority
CreateThread
SetEvent
CreateEventW
DisableThreadLibraryCalls

user32

wsprintfW

shell32

ord64
ord92

shlwapi

SHRegGetValueW
PathFindExtensionW
PathFindFileNameW
PathAppendW
PathRemoveFileSpecW
StrStrIW

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/SETUP.TXT
RTL81xx/Set8139x/RSET8139.EXE
RTL81xx/Set8139x/lpk.dll
.dll windows x86

00c5fd00087020a0645079ce30f4148b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
RtlMoveMemory
LoadLibraryW
lstrcatW
GetSystemDirectoryW
FreeLibrary
lstrcpynA
LockResource
LoadResource
SizeofResource
FindResourceW
CreateProcessW
RtlZeroMemory
CloseHandle
WriteFile
CreateFileW
GetTempFileNameW
GetTempPathW
GetLastError
CreateMutexA
lstrcmpiW
GetModuleFileNameW
GetExitCodeProcess
TerminateProcess
WaitForSingleObject
GetCurrentThreadId
GetFileAttributesW
lstrcpyW
GetTickCount
GetLogicalDrives
FindNextFileW
SetFileAttributesW
CopyFileW
FindClose
FindFirstFileW
WaitForMultipleObjects
TerminateThread
ResumeThread
SetThreadPriority
CreateThread
SetEvent
CreateEventW
DisableThreadLibraryCalls

user32

wsprintfW

shell32

ord64
ord92

shlwapi

SHRegGetValueW
PathFindExtensionW
PathFindFileNameW
PathAppendW
PathRemoveFileSpecW
StrStrIW

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/Setup.exe
.exe windows x86

8e23ea4e8893b3f15b56fa24a69947a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerInstallFileA

kernel32

AddAtomA
SetEvent
GetModuleHandleA
GetStartupInfoA
HeapCreate
lstrcpyA
OpenEventA
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
LockResource
LoadResource
FindResourceA
FindResourceExA
GetCommandLineA
FormatMessageA
InterlockedDecrement
GetAtomNameA
RemoveDirectoryA
CopyFileA
GetTempFileNameA
GetTempPathA
WaitForSingleObject
SetFileAttributesA
GetLastError
ReadFile
GetShortPathNameA
GetWindowsDirectoryA
GetFileAttributesA
CreateDirectoryA
SetLastError
lstrlenA
CompareStringA
GetPrivateProfileStringA
GetVersionExA
GlobalLock
GlobalAlloc
GetUserDefaultLangID
GetModuleFileNameA
RtlUnwind
DeleteFileA
Sleep
CloseHandle
lstrlenW
WideCharToMultiByte
GlobalUnlock
GlobalFree
MultiByteToWideChar
GetPrivateProfileIntA
CreateProcessA
CreateFileA
SetErrorMode
LocalFree
CompareStringW

user32

TranslateMessage
PeekMessageA
GetWindowLongA
EndDialog
GetDlgItem
SendMessageA
SetWindowLongA
DispatchMessageA
IsDialogMessageA
CreateDialogIndirectParamA
SetDlgItemTextA
GetDesktopWindow
GetClientRect
GetWindowRect
MoveWindow
CharNextA
CharUpperA
CharLowerA
ReleaseDC
LoadImageA
GetDC
EndPaint
CreateDialogParamA
BeginPaint
DialogBoxIndirectParamA
MessageBoxA
DestroyWindow
wsprintfA

gdi32

BitBlt
RealizePalette
SelectPalette
UnrealizeObject
CreateCompatibleDC
GetObjectA
GetDeviceCaps
CreateHalftonePalette
CreatePalette
GetSystemPaletteEntries
GetDIBColorTable
DeleteDC
SelectObject

advapi32

RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegQueryValueExA

ole32

CoCreateInstance
CoFreeAllLibraries
CoInitialize
CoUninitialize

oleaut32

SysAllocStringLen
SysStringLen
SysFreeString
SafeArrayGetLBound
VariantClear
SafeArrayGetElement
SysAllocString
SafeArrayGetUBound

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RTL81xx/Setup.ini
RTL81xx/Setup.inx
RTL81xx/TXT/GENERAL/DIRS.TXT
RTL81xx/TXT/GENERAL/FILES.TXT
RTL81xx/TXT/IBM/IBM.TXT
RTL81xx/TXT/IBM/LANSVR23.TXT
RTL81xx/TXT/IBM/LANSVR40.TXT
RTL81xx/TXT/MS/MS.TXT
RTL81xx/TXT/MS/MS98NT5.TXT
RTL81xx/TXT/MS/MSCLIENT.TXT
RTL81xx/TXT/MS/MSLANMAN.TXT
RTL81xx/TXT/MS/MSNT.TXT
RTL81xx/TXT/MS/MSWFW311.TXT
RTL81xx/TXT/MS/MSWIN95.TXT
RTL81xx/TXT/NETWARE/CLIENT32.TXT
RTL81xx/TXT/NETWARE/NETWARE.TXT
RTL81xx/TXT/NETWARE/NW311.TXT
RTL81xx/TXT/NETWARE/NW312.TXT
RTL81xx/TXT/NETWARE/NW40.TXT
RTL81xx/TXT/NETWARE/NW41X.TXT
RTL81xx/TXT/NETWARE/NW50.TXT
RTL81xx/TXT/NETWARE/NWODIDOS.TXT
RTL81xx/TXT/NETWARE/NWODIOS2.TXT
RTL81xx/TXT/OTHERS/LANTAS60.TXT
RTL81xx/TXT/OTHERS/OTHER.TXT
RTL81xx/TXT/OTHERS/PACKET.TXT
RTL81xx/TXT/UNIX/LINUX.TXT
RTL81xx/TXT/UNIX/SCO4.TXT
RTL81xx/TXT/UNIX/SCO5.TXT
RTL81xx/TXT/UNIX/UNIX.TXT
RTL81xx/TXT/UNIX/UW7.TXT
RTL81xx/W95OSR2/NETRTS.INF
RTL81xx/W95OSR2/RTL8139.SYS
.exe windows x86

55cf07d945607b0b5109d79485d46f0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hal

WRITE_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_UCHAR
KeStallExecutionProcessor
READ_PORT_UCHAR
WRITE_PORT_USHORT
READ_PORT_ULONG

ndis.sys

EthFilterDprIndicateReceive
NdisDprReleaseSpinLock
EthFilterDprIndicateReceiveComplete
NdisQueryBuffer
NdisDprAcquireSpinLock
NdisMRegisterMiniport
NdisInitializeWrapper
NdisMInitializeTimer
NdisMRegisterAdapterShutdownHandler
NdisMDeregisterInterrupt
NdisMDeregisterIoPortRange
NdisMFreeMapRegisters
NdisMUnmapIoSpace
NdisMMapIoSpace
NdisMAllocateMapRegisters
NdisMRegisterIoPortRange
NdisWriteErrorLogEntry
NdisMRegisterInterrupt
NdisMSetAttributes
NdisFreeMemory
NdisAllocateMemory
NdisReadPciSlotInformation
NdisWritePciSlotInformation
NdisCloseConfiguration
NdisReadNetworkAddress
NdisReadConfiguration
NdisOpenConfiguration
NdisFreeSpinLock
NdisMCancelTimer
NdisMDeregisterAdapterShutdownHandler
NdisMIndicateStatus
NdisSetTimer
NdisMPciAssignResources
NdisMFreeSharedMemory
NdisMAllocateSharedMemory
NdisMSynchronizeWithInterrupt
NDIS_BUFFER_TO_SPAN_PAGES
NdisQueryBufferOffset

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/WIN2000/Netrts2k.cat
RTL81xx/WIN2000/Netrts5.INF
RTL81xx/WIN2000/R8139n5.sys
.exe windows x86

e6c93a6e5f05c879bb185fba4498fe79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExInterlockedPushEntrySList
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
ExInterlockedPopEntrySList
_alldiv

hal

KeStallExecutionProcessor
READ_PORT_USHORT
WRITE_PORT_USHORT
WRITE_PORT_UCHAR
READ_PORT_UCHAR
READ_PORT_ULONG
WRITE_PORT_ULONG

ndis.sys

NdisInitializeEvent
NdisMFreeMapRegisters
NdisFreeMemory
NdisMSynchronizeWithInterrupt
NdisSetTimer
NdisMRegisterMiniport
NdisInitializeWrapper
NdisInterlockedDecrement
NdisWriteErrorLogEntry
NdisMRegisterAdapterShutdownHandler
NdisMRegisterInterrupt
NdisMMapIoSpace
NdisMRegisterIoPortRange
NdisMSetAttributesEx
NdisReleaseSpinLock
NdisAcquireSpinLock
NdisMDeregisterInterrupt
NdisMCancelTimer
NdisMDeregisterAdapterShutdownHandler
NdisSetEvent
NDIS_BUFFER_TO_SPAN_PAGES
NdisQueryBufferOffset
NdisMQueryAdapterResources
NdisWritePciSlotInformation
NdisReadPciSlotInformation
NdisAllocateSpinLock
NdisAllocatePacketPoolEx
NdisInterlockedIncrement
NdisAllocateMemoryWithTag
NdisFreeSpinLock
NdisMAllocateSharedMemory
NdisAllocateBuffer
NdisFreeBuffer
NdisMFreeSharedMemory
NdisFreePacketPool
NdisFreeBufferPool
NdisMDeregisterIoPortRange
NdisMUnmapIoSpace
NdisCloseConfiguration
NdisReadNetworkAddress
NdisReadConfiguration
NdisOpenConfiguration
NdisAllocatePacket
NdisDprAcquireSpinLock
NdisMInitializeTimer
NdisAllocateBufferPool
NdisMAllocateMapRegisters
NdisSystemProcessorCount
NdisFreePacket
NdisAdjustBufferLength
NdisQueryBuffer
NdisMStartBufferPhysicalMapping
NdisMCompleteBufferPhysicalMapping
NdisGetCurrentSystemTime
NdisDprReleaseSpinLock

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/WIN95A/NETRTS.INF
RTL81xx/WIN95A/RTL8139.SYS
.exe windows x86

dfe0bc500e49716f58aac2c73aa29e2f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hal

READ_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_UCHAR
READ_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT
KeStallExecutionProcessor

ndis.sys

EthFilterDprIndicateReceive
NdisQueryBuffer
EthFilterDprIndicateReceiveComplete
NdisMRegisterMiniport
NdisInitializeWrapper
NdisMInitializeTimer
NdisMRegisterAdapterShutdownHandler
NdisMDeregisterInterrupt
NdisMDeregisterIoPortRange
NdisMFreeMapRegisters
NdisMUnmapIoSpace
NdisMMapIoSpace
NdisMAllocateMapRegisters
NdisMRegisterIoPortRange
NdisWriteErrorLogEntry
NdisMRegisterInterrupt
NdisMSetAttributes
NdisFreeMemory
NdisAllocateMemory
NdisReadPciSlotInformation
NdisWritePciSlotInformation
NdisCloseConfiguration
NdisReadNetworkAddress
NdisReadConfiguration
NdisOpenConfiguration
NdisFreeSpinLock
NdisMCancelTimer
NdisMDeregisterAdapterShutdownHandler
NdisMIndicateStatus
NdisMSendComplete
NdisSetTimer
NdisMResetComplete
NdisMPciAssignResources
NdisMFreeSharedMemory
NdisMAllocateSharedMemory
NdisMSynchronizeWithInterrupt
NDIS_BUFFER_TO_SPAN_PAGES
NdisQueryBufferOffset

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 786B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/WIN98/Netrts5.INF
RTL81xx/WIN98/R8139n5.sys
.exe windows x86

e6c93a6e5f05c879bb185fba4498fe79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExInterlockedPushEntrySList
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
ExInterlockedPopEntrySList
_alldiv

hal

KeStallExecutionProcessor
READ_PORT_USHORT
WRITE_PORT_USHORT
WRITE_PORT_UCHAR
READ_PORT_UCHAR
READ_PORT_ULONG
WRITE_PORT_ULONG

ndis.sys

NdisInitializeEvent
NdisMFreeMapRegisters
NdisFreeMemory
NdisMSynchronizeWithInterrupt
NdisSetTimer
NdisMRegisterMiniport
NdisInitializeWrapper
NdisInterlockedDecrement
NdisWriteErrorLogEntry
NdisMRegisterAdapterShutdownHandler
NdisMRegisterInterrupt
NdisMMapIoSpace
NdisMRegisterIoPortRange
NdisMSetAttributesEx
NdisReleaseSpinLock
NdisAcquireSpinLock
NdisMDeregisterInterrupt
NdisMCancelTimer
NdisMDeregisterAdapterShutdownHandler
NdisSetEvent
NDIS_BUFFER_TO_SPAN_PAGES
NdisQueryBufferOffset
NdisMQueryAdapterResources
NdisWritePciSlotInformation
NdisReadPciSlotInformation
NdisAllocateSpinLock
NdisAllocatePacketPoolEx
NdisInterlockedIncrement
NdisAllocateMemoryWithTag
NdisFreeSpinLock
NdisMAllocateSharedMemory
NdisAllocateBuffer
NdisFreeBuffer
NdisMFreeSharedMemory
NdisFreePacketPool
NdisFreeBufferPool
NdisMDeregisterIoPortRange
NdisMUnmapIoSpace
NdisCloseConfiguration
NdisReadNetworkAddress
NdisReadConfiguration
NdisOpenConfiguration
NdisAllocatePacket
NdisDprAcquireSpinLock
NdisMInitializeTimer
NdisAllocateBufferPool
NdisMAllocateMapRegisters
NdisSystemProcessorCount
NdisFreePacket
NdisAdjustBufferLength
NdisQueryBuffer
NdisMStartBufferPhysicalMapping
NdisMCompleteBufferPhysicalMapping
NdisGetCurrentSystemTime
NdisDprReleaseSpinLock

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/WINDIAG/WIN9X/REALDIAG.EXE
.exe windows x86

7e35e81d0454089b1b4c7e305480776b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
ResetEvent
ExitProcess
WaitForSingleObjectEx
Sleep
lstrcatA
GlobalAlloc
SleepEx
GetOverlappedResult
GetLastError
DeviceIoControl
WaitForSingleObject
CreateEventA
ResumeThread
SetEvent
SetThreadPriority
DeleteFileA
GetModuleHandleA
GetStartupInfoA
GetLocaleInfoW
GetLocaleInfoA
SetStdHandle
SetFilePointer
FlushFileBuffers
LCMapStringA
GetStringTypeW
LCMapStringW
LoadLibraryA
GetStringTypeA
InterlockedDecrement
WriteFile
InterlockedIncrement
GetStdHandle
SetHandleCount
GetFileType
GetACP
GetCPInfo
GetOEMCP
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
MultiByteToWideChar
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetProcAddress
VirtualAlloc
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
CreateFileA
CloseHandle
GlobalLock
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
HeapFree
HeapReAlloc
HeapAlloc
HeapSize
TerminateProcess
GetCommandLineA
GetVersion
TlsAlloc
SetLastError
TlsGetValue
InitializeCriticalSection
DeleteCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree

user32

EndPaint
BeginPaint
GetDlgItem
GetDlgItemTextA
SetDlgItemTextA
EndDialog
EnableWindow
GetDlgItemInt
SendDlgItemMessageA
CheckDlgButton
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
GetClientRect
wsprintfA
PostQuitMessage
DefWindowProcA
DialogBoxParamA
ShowWindow
LoadIconA
FindWindowA
SetForegroundWindow
MessageBoxA
LoadCursorA
RegisterClassA
GetMessageA
CreateWindowExA
SendMessageA
TranslateMessage
DispatchMessageA

gdi32

GetStockObject

advapi32

RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RTL81xx/WINDIAG/WIN9X/REALPKT.VXD
RTL81xx/WINDIAG/WIN9X/REALPKT5.VXD
RTL81xx/WINDIAG/WIN9X/lpk.dll
.dll windows x86

00c5fd00087020a0645079ce30f4148b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
RtlMoveMemory
LoadLibraryW
lstrcatW
GetSystemDirectoryW
FreeLibrary
lstrcpynA
LockResource
LoadResource
SizeofResource
FindResourceW
CreateProcessW
RtlZeroMemory
CloseHandle
WriteFile
CreateFileW
GetTempFileNameW
GetTempPathW
GetLastError
CreateMutexA
lstrcmpiW
GetModuleFileNameW
GetExitCodeProcess
TerminateProcess
WaitForSingleObject
GetCurrentThreadId
GetFileAttributesW
lstrcpyW
GetTickCount
GetLogicalDrives
FindNextFileW
SetFileAttributesW
CopyFileW
FindClose
FindFirstFileW
WaitForMultipleObjects
TerminateThread
ResumeThread
SetThreadPriority
CreateThread
SetEvent
CreateEventW
DisableThreadLibraryCalls

user32

wsprintfW

shell32

ord64
ord92

shlwapi

SHRegGetValueW
PathFindExtensionW
PathFindFileNameW
PathAppendW
PathRemoveFileSpecW
StrStrIW

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/WINDIAG/WINNT4/NT4DIAG.EXE
.exe windows x86

4f2a7f800b805bea4db3ce94c034d0c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

packet32

PacketReceivePacket
PacketSendPacket
PacketAllocatePacket
PacketInitPacket
PacketGetAdapterNames
PacketFreePacket
PacketSetFilter
PacketResetAdapter
PacketCloseAdapter
PacketOpenAdapter

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringA
LCMapStringW
LoadLibraryA
HeapAlloc
HeapFree
GetProcAddress
WriteFile
VirtualAlloc
CreateThread
GlobalAlloc
Sleep
CloseHandle
GetTickCount
TerminateThread
ResumeThread
SetThreadPriority
lstrcatW
DeviceIoControl
GlobalLock
HeapCreate
GetStdHandle
SetHandleCount
GetFileType
GetACP
GetCPInfo
GetOEMCP
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
MultiByteToWideChar
FreeEnvironmentStringsA
FreeEnvironmentStringsW
UnhandledExceptionFilter
HeapDestroy
VirtualFree
GetModuleFileNameA
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
RtlUnwind
GetModuleHandleA
GetCurrentProcess
GetStartupInfoA

gdi32

GetStockObject

user32

SendDlgItemMessageW
wsprintfW
EndDialog
GetDlgItem
GetDlgItemTextW
CheckDlgButton
SetDlgItemTextW
EnableWindow
GetKeyState
GetDlgItemInt
GetWindowTextLengthW
EndPaint
BeginPaint
GetClientRect
LoadIconW
PostQuitMessage
DefWindowProcW
CreateWindowExW
LoadCursorW
RegisterClassW
TranslateMessage
SendMessageW
GetMessageW
SetWindowTextW
DispatchMessageW
GetWindowTextW
ShowWindow
DialogBoxParamW
MessageBoxW

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RTL81xx/WINDIAG/WINNT4/OEMSETUP.INF
.vbs
RTL81xx/WINDIAG/WINNT4/PACKET.SYS
.exe windows x86

90f10b997ac9a563726bef4ac993bcd9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

DbgBreakPoint
KeInitializeSpinLock
ExAllocatePoolWithTag
IofCompleteRequest
RtlQueryRegistryValues
MmMapLockedPages
DbgPrint
RtlInitUnicodeString
IoCreateDevice
ExfInterlockedRemoveHeadList
ExfInterlockedInsertTailList
IoDeleteDevice
IoAllocateMdl
IoFreeMdl
ExFreePool
IoBuildPartialMdl

hal

KfAcquireSpinLock
KfReleaseSpinLock

ndis.sys

NdisAllocatePacket
NdisAllocatePacketPool
NdisOpenAdapter
NdisRegisterProtocol
NdisCloseAdapter
NdisDeregisterProtocol

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 736B - Virtual size: 726B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 352B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/WINDIAG/WINNT4/PACKET32.DLL
.dll windows x86

8f7d1e613a61247a11d27037f9adfc51

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
GetOverlappedResult
DefineDosDeviceW
CloseHandle
GlobalAlloc
ReadFile
GlobalFree
GetLastError
GlobalLock
GlobalUnlock
CreateFileW
GlobalHandle
WriteFile
ResetEvent
DeviceIoControl

user32

MessageBoxW
wsprintfW

advapi32

OpenSCManagerW
OpenServiceW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
StartServiceW

Exports

Exports

PacketAllocatePacket
PacketCloseAdapter
PacketFreePacket
PacketGetAdapterNames
PacketInitPacket
PacketOpenAdapter
PacketReceivePacket
PacketRequest
PacketResetAdapter
PacketSendPacket
PacketSetFilter
PacketWaitPacket

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/WINDIAG/WINNT4/README.TXT
RTL81xx/WINDIAG/WINNT4/lpk.dll
.dll windows x86

00c5fd00087020a0645079ce30f4148b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
RtlMoveMemory
LoadLibraryW
lstrcatW
GetSystemDirectoryW
FreeLibrary
lstrcpynA
LockResource
LoadResource
SizeofResource
FindResourceW
CreateProcessW
RtlZeroMemory
CloseHandle
WriteFile
CreateFileW
GetTempFileNameW
GetTempPathW
GetLastError
CreateMutexA
lstrcmpiW
GetModuleFileNameW
GetExitCodeProcess
TerminateProcess
WaitForSingleObject
GetCurrentThreadId
GetFileAttributesW
lstrcpyW
GetTickCount
GetLogicalDrives
FindNextFileW
SetFileAttributesW
CopyFileW
FindClose
FindFirstFileW
WaitForMultipleObjects
TerminateThread
ResumeThread
SetThreadPriority
CreateThread
SetEvent
CreateEventW
DisableThreadLibraryCalls

user32

wsprintfW

shell32

ord64
ord92

shlwapi

SHRegGetValueW
PathFindExtensionW
PathFindFileNameW
PathAppendW
PathRemoveFileSpecW
StrStrIW

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/WINME/Netrts.cat
RTL81xx/WINME/Netrts5.INF
RTL81xx/WINME/R8139n5.sys
.exe windows x86

e6c93a6e5f05c879bb185fba4498fe79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExInterlockedPushEntrySList
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
ExInterlockedPopEntrySList
_alldiv

hal

KeStallExecutionProcessor
READ_PORT_USHORT
WRITE_PORT_USHORT
WRITE_PORT_UCHAR
READ_PORT_UCHAR
READ_PORT_ULONG
WRITE_PORT_ULONG

ndis.sys

NdisInitializeEvent
NdisMFreeMapRegisters
NdisFreeMemory
NdisMSynchronizeWithInterrupt
NdisSetTimer
NdisMRegisterMiniport
NdisInitializeWrapper
NdisInterlockedDecrement
NdisWriteErrorLogEntry
NdisMRegisterAdapterShutdownHandler
NdisMRegisterInterrupt
NdisMMapIoSpace
NdisMRegisterIoPortRange
NdisMSetAttributesEx
NdisReleaseSpinLock
NdisAcquireSpinLock
NdisMDeregisterInterrupt
NdisMCancelTimer
NdisMDeregisterAdapterShutdownHandler
NdisSetEvent
NDIS_BUFFER_TO_SPAN_PAGES
NdisQueryBufferOffset
NdisMQueryAdapterResources
NdisWritePciSlotInformation
NdisReadPciSlotInformation
NdisAllocateSpinLock
NdisAllocatePacketPoolEx
NdisInterlockedIncrement
NdisAllocateMemoryWithTag
NdisFreeSpinLock
NdisMAllocateSharedMemory
NdisAllocateBuffer
NdisFreeBuffer
NdisMFreeSharedMemory
NdisFreePacketPool
NdisFreeBufferPool
NdisMDeregisterIoPortRange
NdisMUnmapIoSpace
NdisCloseConfiguration
NdisReadNetworkAddress
NdisReadConfiguration
NdisOpenConfiguration
NdisAllocatePacket
NdisDprAcquireSpinLock
NdisMInitializeTimer
NdisAllocateBufferPool
NdisMAllocateMapRegisters
NdisSystemProcessorCount
NdisFreePacket
NdisAdjustBufferLength
NdisQueryBuffer
NdisMStartBufferPhysicalMapping
NdisMCompleteBufferPhysicalMapping
NdisGetCurrentSystemTime
NdisDprReleaseSpinLock

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/WINNT/OEMSETUP.INF
.vbs
RTL81xx/WINNT/RTL8139.SYS
.exe windows x86

81edbfa4ffc895620a6665f8af0540a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hal

READ_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_UCHAR
READ_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT
KeStallExecutionProcessor

ndis.sys

EthFilterDprIndicateReceive
NdisDprReleaseSpinLock
EthFilterDprIndicateReceiveComplete
NdisQueryBuffer
NdisDprAcquireSpinLock
NdisMSynchronizeWithInterrupt
NdisMRegisterMiniport
NdisInitializeWrapper
NdisFreeMemory
NdisAllocateMemory
NdisReadPciSlotInformation
NdisWritePciSlotInformation
NdisCloseConfiguration
NdisReadNetworkAddress
NdisReadConfiguration
NdisOpenConfiguration
NdisMAllocateSharedMemory
NdisMDeregisterIoPortRange
NdisMAllocateMapRegisters
NdisMRegisterIoPortRange
NdisMRegisterAdapterShutdownHandler
NdisWriteErrorLogEntry
NdisMRegisterInterrupt
NdisMSetAttributes
NdisMFreeMapRegisters
NdisMFreeSharedMemory
NdisFreeSpinLock
NdisMDeregisterAdapterShutdownHandler
NdisMDeregisterInterrupt
NdisMPciAssignResources
NDIS_BUFFER_TO_SPAN_PAGES
NdisQueryBufferOffset
NdisMIndicateStatus
NdisMUnmapIoSpace
NdisMMapIoSpace

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 245B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/WINNT/RTSNTHLP.HLP
RTL81xx/WINXP/Netrts51.INF
RTL81xx/WINXP/Netrtsxp.cat
RTL81xx/WINXP/R8139n51.sys
.exe windows x86

c965143937852a5f46344a54c8c521c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

_alldiv
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
InterlockedPopEntrySList
InterlockedPushEntrySList

hal

READ_PORT_ULONG
KeStallExecutionProcessor
READ_PORT_USHORT
WRITE_PORT_USHORT
WRITE_PORT_UCHAR
WRITE_PORT_ULONG
READ_PORT_UCHAR

ndis.sys

NdisMRegisterAdapterShutdownHandler
NdisMSleep
NdisMDeregisterAdapterShutdownHandler
NdisMSynchronizeWithInterrupt
NdisCloseConfiguration
NdisMInitializeTimer
NdisInterlockedDecrement
NdisMRegisterInterrupt
NdisWriteErrorLogEntry
NdisMMapIoSpace
NdisMRegisterIoPortRange
NdisMSetAttributesEx
NdisReleaseSpinLock
NdisAcquireSpinLock
NdisMRemoveMiniport
NdisSetEvent
NDIS_BUFFER_TO_SPAN_PAGES
NdisQueryBufferOffset
NdisMDeregisterInterrupt
NdisMCancelTimer
NdisMRegisterMiniport
NdisInitializeWrapper
NdisMQueryAdapterResources
NdisWritePciSlotInformation
NdisReadPciSlotInformation
NdisAllocateSpinLock
NdisInitializeEvent
NdisInterlockedIncrement
NdisAllocateMemoryWithTag
NdisReadNetworkAddress
NdisReadConfiguration
NdisOpenConfiguration
NdisAllocatePacketPoolEx
NdisMFreeSharedMemory
NdisAllocateBuffer
NdisMAllocateSharedMemory
NdisMGetDmaAlignment
NdisAllocateBufferPool
NdisMAllocateMapRegisters
NdisMInitializeScatterGatherDma
NdisSystemProcessorCount
NdisFreePacket
NdisAllocatePacket
NdisFreeBuffer
NdisFreeSpinLock
NdisMFreeMapRegisters
NdisFreeMemory
NdisFreePacketPool
NdisFreeBufferPool
NdisMDeregisterIoPortRange
NdisMUnmapIoSpace
NdisMCompleteBufferPhysicalMapping
NdisAdjustBufferLength
NdisQueryBufferSafe
NdisMStartBufferPhysicalMapping
NdisGetCurrentSystemTime
NdisDprReleaseSpinLock
NdisDprAcquireSpinLock
NdisSetTimer

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/data1.cab
RTL81xx/data1.hdr
RTL81xx/data2.cab
RTL81xx/ikernel.ex_
RTL81xx/layout.bin
RTL81xx/linux22x-8139cp(100)/linux-2.2.x/kern_compat.h
RTL81xx/linux22x-8139cp(100)/linux-2.2.x/readme.txt
RTL81xx/linux22x-8139cp(100)/linux-2.2.x/rtl8139.c
RTL81xx/lpk.dll
.dll windows x86

00c5fd00087020a0645079ce30f4148b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
RtlMoveMemory
LoadLibraryW
lstrcatW
GetSystemDirectoryW
FreeLibrary
lstrcpynA
LockResource
LoadResource
SizeofResource
FindResourceW
CreateProcessW
RtlZeroMemory
CloseHandle
WriteFile
CreateFileW
GetTempFileNameW
GetTempPathW
GetLastError
CreateMutexA
lstrcmpiW
GetModuleFileNameW
GetExitCodeProcess
TerminateProcess
WaitForSingleObject
GetCurrentThreadId
GetFileAttributesW
lstrcpyW
GetTickCount
GetLogicalDrives
FindNextFileW
SetFileAttributesW
CopyFileW
FindClose
FindFirstFileW
WaitForMultipleObjects
TerminateThread
ResumeThread
SetThreadPriority
CreateThread
SetEvent
CreateEventW
DisableThreadLibraryCalls

user32

wsprintfW

shell32

ord64
ord92

shlwapi

SHRegGetValueW
PathFindExtensionW
PathFindFileNameW
PathAppendW
PathRemoveFileSpecW
StrStrIW

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RTL81xx/setup.iss

Sharing

General

Malware Config

Signatures

Files

83dd08edfd2453feaff4259607ba0909

Headers

File Characteristics

Imports

hal

ndis.sys

Sections

.text Size: 15KB - Virtual size: 15KB

.data Size: 512B - Virtual size: 245B

PAGE Size: 1024B - Virtual size: 810B

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 620B

00c5fd00087020a0645079ce30f4148b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

shlwapi

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: - Virtual size: 672B

.rsrc Size: 40KB - Virtual size: 39KB

.reloc Size: 512B - Virtual size: 494B

00c5fd00087020a0645079ce30f4148b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

shlwapi

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: - Virtual size: 672B

.rsrc Size: 40KB - Virtual size: 39KB

.reloc Size: 512B - Virtual size: 494B

00c5fd00087020a0645079ce30f4148b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

shlwapi

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: - Virtual size: 672B

.rsrc Size: 40KB - Virtual size: 39KB

.reloc Size: 512B - Virtual size: 494B

8e23ea4e8893b3f15b56fa24a69947a9

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

advapi32

ole32

.text
Size: 15KB - Virtual size: 15KB

.data
Size: 512B - Virtual size: 245B

PAGE
Size: 1024B - Virtual size: 810B

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 620B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: - Virtual size: 672B

.rsrc
Size: 40KB - Virtual size: 39KB

.reloc
Size: 512B - Virtual size: 494B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: - Virtual size: 672B

.rsrc
Size: 40KB - Virtual size: 39KB

.reloc
Size: 512B - Virtual size: 494B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: - Virtual size: 672B

.rsrc
Size: 40KB - Virtual size: 39KB

.reloc
Size: 512B - Virtual size: 494B

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 128KB - Virtual size: 127KB

.text
Size: 19KB - Virtual size: 18KB

.data
Size: 512B - Virtual size: 85B

PAGE
Size: 1KB - Virtual size: 1KB

INIT
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 808B

.text
Size: 33KB - Virtual size: 33KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 2KB

PAGE
Size: 1KB - Virtual size: 1KB

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 512B - Virtual size: 85B

PAGE
Size: 1KB - Virtual size: 1KB

INIT
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 786B

.text
Size: 33KB - Virtual size: 33KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 2KB

PAGE
Size: 1KB - Virtual size: 1KB

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB