9710d0cb8d395af64a0cfb2b3068ae9be7d8aa1620e66b3b59cc4016dd44bbff

Sharing

Copy URL Twitter E-mail

General

Target

9710d0cb8d395af64a0cfb2b3068ae9be7d8aa1620e66b3b59cc4016dd44bbff
Size

588KB
MD5

a2e32b5a47388a0789ae8fe3cb8089d0
SHA1

9a1932b6ef987e093b544bf0abd9785e80c338f3
SHA256

9710d0cb8d395af64a0cfb2b3068ae9be7d8aa1620e66b3b59cc4016dd44bbff
SHA512

3939877e1088ebd176f15fb648416c370c45638c0c6ee8e962c169e3ecc3fa7f7ba09070dbfe9a1c727ba83e51b1c90c6fa245deaa33014d81387f578778f29c
SSDEEP

12288:/rmgOjeSks3Mv+M0aieD11NFQNePITIX444gz:qnjeDv+M/7QNeQsX444y

Score

N/A

Malware Config

Signatures

Files

9710d0cb8d395af64a0cfb2b3068ae9be7d8aa1620e66b3b59cc4016dd44bbff
.dll windows x86

ca5804e01639e5b779a7acc07ac47fa2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconA
SHFormatDrive
ShellExecuteA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetFileInfoA
SHGetMalloc

avgtmgr

AvgTMgrShowTest
??0CDlgBrowsePath@@QAE@PAVCWnd@@@Z
?EnableEdit@CDlgBrowsePath@@QAEHH@Z
??1CDlgBrowsePath@@UAE@XZ
?DoModal@CDlgBrowsePath@@UAEHXZ
?SetStartButton@CDlgBrowsePath@@QAEHH@Z

avgabout

AvgRegisterAvg
VirInfoDlg

avgtres

AvgTResDetail

avgset

DoUpdateDlg

avgctrl

??0CPathItemArray@@QAE@XZ
??1CPathItemArray@@UAE@XZ
??0CAvgList@@QAE@XZ
??1CAvgList@@UAE@XZ
?GetThisMessageMap@CAvgList@@KGPBUAFX_MSGMAP@@XZ
?InsertLine@CAvgList@@QAAHHJHPBDZZ
?PreTranslateMessage@CAvgList@@UAEHPAUtagMSG@@@Z
?PreSubclassWindow@CAvgList@@MAEXXZ
?DrawItem@CAvgList@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?NotifyParent@CAvgList@@UAEXIHH@Z
?NotifyParent@CAvgList@@UAEXIH@Z
?NotifyParent@CAvgList@@UAEXH@Z
?SetupColumns@CAvgList@@UAEHPBDPAUtagCOLUMN_DEF@@@Z
?GetReciper@CAvgList@@QAEPAVCWnd@@XZ
?OnDestroy@CDlgBase@@IAEXXZ
?PreCreateWindow@CDlgBase@@MAEHAAUtagCREATESTRUCTA@@@Z
?PreTranslateMessage@CDlgBase@@UAEHPAUtagMSG@@@Z
?GetTextWidth@CResizeDlg@@UAEHPBD@Z
?TranslateDialog@CResizeDlg@@UAEHXZ
?AssignParent@CDlgBase@@UAEHPAVCWnd@@PAVCWndBase@@@Z
?SetDefBtn@CDlgBase@@UAEXI@Z
?MoveData@CDlgBase@@UAEHH@Z
?IsDataValid@CDlgBase@@UAEHXZ
?AdjustToolTips@CDlgBase@@MAEHXZ
?SetupToolTips@CDlgBase@@MAEHXZ
?CaptureTexts@CDlgBase@@MAEXXZ
?SetButtonSize@CDlgBase@@MAE?AVCSize@@I@Z
?LoadSize@CDlgBase@@MAEXXZ
?SaveSize@CDlgBase@@MAEXXZ
?OnHelpBut@CDlgBase@@MAEXXZ
?ListSave@CDlgBase@@UAEHPAUHWND__@@@Z
?ListPrint@CDlgBase@@UAEHPAUHWND__@@@Z
?HasListMenu@CDlgBase@@UAEHXZ
?CanChangeLanguage@CDlgBase@@UAEHXZ
?ReloadData@CDlgBase@@UAEKXZ
?OnChangeLanguage@CDlgBase@@UAEHJ@Z
?RecalcSizes@CDlgBase@@UAE?AVCSize@@XZ
?SetInitialFocus@CDlgBase@@UAEPAVCWnd@@XZ
?EnableControls@CDlgBase@@UAEXH@Z
?EnableToolbar@CDlgBase@@UAEHH@Z
?GetToolBar@CDlgBase@@UAEPAVCToolBar@@XZ
??0CAvgButton@@QAE@XZ
?GetButtonSize@CAvgButton@@SA?AVCSize@@PAVCWnd@@H@Z
??1CAvgButton@@UAE@XZ
??0WINRECT@@QAE@GIJ@Z
??0CDIBStatic@@QAE@XZ
??1CDIBStatic@@UAE@XZ
??0CFmtText@@QAE@XZ
??1CFmtText@@UAE@XZ
?LoadDib@CDIBStatic@@QAEHPAUHINSTANCE__@@I@Z
?WM_WINMGR@CResizeDlg@@2IA
?PreSubclassWindow@CDlgBase@@MAEXXZ
?GetTextSize@CResizeDlg@@SA?AVCSize@@PAVCWnd@@HHH@Z
?ExcludeCtrl@CDlgBase@@QAEHPAVCDC@@IH@Z
?SetText@CFmtText@@QAEAAV1@PBD@Z
?UpdateText@CFmtText@@QAEXXZ
?Create@CFmtText@@QAEHAAVCRect@@PAVCWnd@@KI@Z
?SetTransparent@CFmtText@@QAEAAV1@H@Z
?SetButton@CFmtText@@QAEHH@Z
?DoModal@CDlgBase@@UAEHXZ
?InsertItem@CAvgList@@QAAHHKHPBDZZ
?Create@CDlgBase@@QAEHIHPAVCWnd@@PBUtagRECT@@@Z
?OnSize@CDlgBase@@IAEXIHH@Z
?EnableDocking@CDlgBase@@QAEHH@Z
??1CHelpButton@@UAE@XZ
??0CHelpButton@@QAE@XZ
?GetSize@CHelpButton@@SA?BVCSize@@XZ
?GetDibSize@CDIBStatic@@QAE?AVCSize@@XZ
??0CDlgBase@@QAE@IHPAVCWnd@@PAVWINRECT@@@Z
?DoDataExchange@CDlgBase@@MAEXPAVCDataExchange@@@Z
?GetThisMessageMap@CDlgBase@@KGPBUAFX_MSGMAP@@XZ
?OnInitDialog@CDlgBase@@MAEHXZ
?RecalcWinManager@CResizeDlg@@QAEXXZ
?OnCancel@CDlgBase@@MAEXXZ
?AvgMessageBox@@YGHPBDIHI@Z
?OnOK@CDlgBase@@MAEXXZ
?GetRuntimeClass@CDlgBase@@UBEPAUCRuntimeClass@@XZ
?StopAction@CDlgBase@@UAEHH@Z
?PauseAction@CDlgBase@@UAEHH@Z
?ContinueAction@CDlgBase@@UAEHH@Z
?IsRunAction@CDlgBase@@UAEHXZ
?IsPauseAction@CDlgBase@@UAEHXZ
??1CDlgBase@@UAE@XZ
?SetTransparent@CDIBStatic@@QAEXH@Z
??1CLabel@@UAE@XZ
??0CLabel@@QAE@XZ
?AutoSize@CDIBStatic@@QAEHKPAVCWnd@@@Z
?LoadDib@CDibButton@@QAEHPAUHINSTANCE__@@I@Z
?GetThisClass@CDlgBase@@SGPAUCRuntimeClass@@XZ
??0CLabel3D@@QAE@XZ
??1CLabel3D@@UAE@XZ
??0CDibButton@@QAE@H@Z
??1CDibButton@@UAE@XZ
?Set3DText@CLabel3D@@QAEXKK@Z
?SetAvgFont@CLabel3D@@QAEXPAUHFONT__@@@Z
?SetText@CLabel@@QAEAAV1@PBD@Z
?Create@CDibButton@@QAEHIKABUtagRECT@@PAVCWnd@@I@Z
?PumpMessages@CDlgBase@@QAEXXZ
??0CStartCtrl@@QAE@XZ
?SetOffsetText@CStartCtrl@@QAEAAVCSize@@HH@Z
?SetTitleFont@CStartCtrl@@QAEXPAUHFONT__@@@Z
?Create@CStartCtrl@@QAEHVCRect@@PAVCWnd@@I@Z
?SetText@CStartCtrl@@QAEXPBD@Z
?SetColorText@CStartCtrl@@QAEXKK@Z
?SetThinButton@CStartCtrl@@QAEXH@Z
?SetTitle@CStartCtrl@@QAEXPBD@Z
??1CStartCtrl@@QAE@XZ
?SetWidth@CStartCtrl@@QAEHHPAVCPoint@@PAVCWnd@@@Z
?ExcludeClipRect@CStartCtrl@@QAEXPAVCWnd@@PAVCDC@@@Z
?OnGetMinMaxInfo@CResizeDlg@@IAEXPAUtagMINMAXINFO@@@Z
?GetMinSize@CStartCtrl@@QAE?AVCSize@@XZ
?SetBitmapSize@CStartCtrl@@QAEXUtagSIZE@@@Z
?GetHwnd@CStartCtrl@@QAEPAUHWND__@@XZ
??0CAvgMessageBox@@QAE@PAVCWnd@@@Z
??1CAvgMessageBox@@UAE@XZ
?SetAvgMessageBox@CAvgMessageBox@@QAEXPBD0II@Z
?SetTimeOut@CAvgMessageBox@@QAEXH@Z
?SetCountdownButtonTextAuto@CAvgMessageBox@@QAEXHH@Z
?DoModal@CAvgMessageBox@@UAEHXZ
?DrawTextA@CLabel3D@@QAEXPAVCDC@@@Z
?ModifyStyle@CFmtText@@QAEHKKI@Z
?SetBreakMode@CFmtText@@QAEXH@Z
?GetRuntimeClass@CAvgButton@@UBEPAUCRuntimeClass@@XZ
?GetMessageMap@CAvgButton@@MBEPBUAFX_MSGMAP@@XZ
?PreSubclassWindow@CAvgButton@@MAEXXZ
?PreCreateWindow@CAvgButton@@MAEHAAUtagCREATESTRUCTA@@@Z
?PreTranslateMessage@CAvgButton@@UAEHPAUtagMSG@@@Z
?DrawItem@CAvgButton@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?BeginWaitCursor@CDlgBase@@QAEXXZ
?GetButtonSize@CDlgBase@@SA?AVCSize@@XZ
?GetSize@CLabel3D@@QAE?AVCSize@@XZ
?SetBitmap@CAvgMessageBox@@QAEXPAUHBITMAP__@@@Z
?GetThisClass@CWizardPage@@SGPAUCRuntimeClass@@XZ
??0CWizardPage@@QAE@IPAVWINRECT@@@Z
??1CWizardPage@@UAE@XZ
?SetMode@CWizardPage@@UAEHK@Z
?DoDataExchange@CWizardPage@@MAEXPAVCDataExchange@@@Z
?GetThisMessageMap@CWizardPage@@KGPBUAFX_MSGMAP@@XZ
?OnInitDialog@CWizardPage@@MAEHXZ
?Create@CResizePage@@UAEHIPAVCWnd@@@Z
?OnCancel@CWizardPage@@UAEXXZ
?OnApply@CResizePage@@UAEHXZ
?OnKillActive@CResizePage@@UAEHXZ
?OnQueryCancel@CWizardPage@@UAEHXZ
?OnWizardBack@CWizardPage@@UAEJXZ
?OnWizardFinish@CWizardPage@@UAEHXZ
?DoHelp@CResizePage@@UAEHPAUHWND__@@@Z
?DoHelp@CResizePage@@UAEHPAUtagHELPINFO@@@Z
?GetMinSize@CResizePage@@UAE?AVCSize@@XZ
?GetMaxSize@CResizePage@@UAE?AVCSize@@XZ
?ReportError@CResizePage@@UAEHIPBD@Z
?SetEditMode@CResizePage@@UAEHH@Z
?EnableControls@CResizePage@@UAEXH@Z
?IsDataValid@CResizePage@@UAEHXZ
?MoveData@CResizePage@@UAEHH@Z
?OnChangeLanguage@CWizardPage@@UAEHJ@Z
?CaptureTexts@CWizardPage@@UAEXXZ
?OnCreatePage@CWizardPage@@UAEHXZ
?OnDestroyPage@CWizardPage@@UAEXXZ
?GetAccessData@CWizardPage@@UAEPAUtagCDEF_EDIT_VAL@@XZ
?AutoEnableButtons@CWizardPage@@UBEHXZ
?HasDefaults@CResizePage@@UAEHXZ
?OnDefault@CResizePage@@UAEHXZ
?OnWizardNext@CWizardPage@@UAEJXZ
?GetSummary@CWizardPage@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?SetNextText@CWizardPage@@QAEHPBD@Z
?GetHelpIDs@CDlgBase@@MAEPBKXZ
?FixColumns@CAvgList@@QAEHHH@Z
AvgCtrlGetInstance
?SelectString@CAvgList@@QAEHPBDHHH@Z
?FindItemByData@CAvgList@@QAEHK@Z
?AddItem@CAvgList@@QAAHKHPBDZZ
?SetItemImage@CAvgList@@QAEHHH@Z
?GetItemImage@CAvgList@@QAEHH@Z
?MakeList@CPathItemArray@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVCStringArray@@0@Z
?WM_WINMGR@CResizePage@@1IB
?TextToFmtText@CFmtText@@SAHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SetTextNoMonkey@CFmtText@@QAEAAV1@PBD@Z
?OnWinMgr@CWizardPage@@IAEJIJ@Z
?EnableFinish@CWizardPage@@QAEHH@Z
?EnableCancel@CWizardPage@@QAEHH@Z
?EnableBack@CWizardPage@@QAEHH@Z
?EnableNext@CWizardPage@@QAEHH@Z
?PumpMessages@CResizePage@@QAEXXZ
?ExcludeCtrl@CResizePage@@QAEHPAVCDC@@IH@Z
?OnEraseBkgnd@CWizardPage@@IAEHPAVCDC@@@Z
?DoWizardNext@CWizardPage@@QAEHXZ
?DoModal@CWizardDlg@@UAEHXZ
??1CWizardDlg@@UAE@XZ
??0CWizardDlg@@QAE@PAVCWnd@@PAVWINRECT@@@Z
?WizardDlgNullMap@CWizardDlg@@1PAVWINRECT@@A
?DoDataExchange@CWizardDlg@@MAEXPAVCDataExchange@@@Z
?GetThisMessageMap@CWizardDlg@@KGPBUAFX_MSGMAP@@XZ
?AddPage@CWizardDlg@@QAEXPAVCWizardPage@@I@Z
?SetTitle@CWizardDlg@@QAEXPBD@Z
?OnInitDialog@CWizardDlg@@MAEHXZ
?SetFirstPage@CWizardDlg@@QAEHXZ
?OnGetMinMaxInfo@CWizardDlg@@IAEXPAUtagMINMAXINFO@@@Z
?GetActivePage@CWizardDlg@@IBEPAVCWizardPage@@XZ
?OnWinMgr@CWizardDlg@@IAEJIJ@Z
?OnOK@CWizardDlg@@MAEXXZ
?OnCancel@CWizardDlg@@MAEXXZ
?MoveData@CWizardDlg@@UAEHH@Z
?IsDataValid@CWizardDlg@@UAEHXZ
?OnChangeLanguage@CWizardDlg@@UAEHJ@Z
?LoadLV@CWizardDlg@@UAEHAAVCAvgList@@H@Z
?LoadLB@CWizardDlg@@UAEHAAVCListBox@@H@Z
?GetSummary@CWizardDlg@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?OnWizardFinish@CWizardDlg@@MAEXXZ
?OnWizardBack@CWizardDlg@@MAEXXZ
?OnDefault@CWizardDlg@@MAEXXZ
?OnWizardNext@CWizardDlg@@MAEXXZ
?SetSuccess@CWizardDlg@@UAEXH@Z
?WizardSucceeded@CWizardDlg@@UAEHXZ
?GetHelpIDs@CWizardDlg@@MAEPBKXZ
?SetNextPage@CWizardDlg@@QAEXXZ
?SetDefaultText@CWizardDlg@@QAEXPBD@Z
?GetPageIndex@CWizardDlg@@QBEHPBVCWizardPage@@@Z
?GetPageCount@CWizardDlg@@QBEHXZ
?GetPage@CWizardDlg@@QBEPAVCWizardPage@@H@Z
?ShowGripper@CResizeDlg@@QAEXH@Z
?EnableCancel@CWizardDlg@@QAEXH@Z
?OnEraseBkgnd@CWizardDlg@@IAEHPAVCDC@@@Z
?GetMessageMap@CWizardPage@@MBEPBUAFX_MSGMAP@@XZ
?GetHelpIDs@CResizePage@@UAEPBKXZ
?OnSysCommand@CDlgBase@@QAEXIJ@Z
?ParseList@CPathItemArray@@QAEHPAVCStringArray@@HH@Z
?OnClose@CDlgBase@@IAEXXZ
??0CPathTreeCtrl2@@QAE@XZ
??1CPathTreeCtrl2@@UAE@XZ
?MakeString@CPathItemArray@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HH@Z
?SetFontName@CLabel@@QAEAAV1@ABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SetFontSizeDirect@CLabel@@QAEAAV1@H@Z
?ParseString@CPathItemArray@@QAEHPBDHH@Z

mfc71

ord2018
ord2063
ord4326
ord6276
ord3801
ord6278
ord4014
ord4038
ord1551
ord1671
ord3761
ord1395
ord6090
ord6144
ord1063
ord5185
ord1199
ord313
ord1198
ord1096
ord1631
ord3401
ord5570
ord6065
ord1917
ord5142
ord1903
ord4262
ord4244
ord1401
ord5912
ord1670
ord4890
ord5182
ord416
ord651
ord1930
ord1794
ord3875
ord2370
ord2657
ord6067
ord2168
ord1110
ord314
ord1091
ord2468
ord5403
ord5563
ord6174
ord5529
ord865
ord266
ord265
ord5491
ord6236
ord5613
ord4125
ord1729
ord2020
ord6119
ord6223
ord5803
ord5833
ord2367
ord2368
ord2131
ord2086
ord5214
ord5200
ord2991
ord3164
ord572
ord587
ord1793
ord2719
ord567
ord758
ord1308
ord2176
ord5526
ord2164
ord4232
ord1545
ord299
ord1489
ord2933
ord4081
ord2292
ord4720
ord5211
ord4736
ord4844
ord4867
ord1554
ord3195
ord620
ord5807
ord741
ord3684
ord501
ord709
ord347
ord602
ord3161
ord1279
ord5637
ord5642
ord3317
ord4240
ord1591
ord2095
ord1643
ord1581
ord3292
ord715
ord3339
ord3989
ord3920
ord4035
ord5871
ord557
ord745
ord1185
ord1916
ord4508
ord4096
ord2087
ord1546
ord4233
ord922
ord2412
ord2407
ord2941
ord3167
ord1397
ord6266
ord1933
ord1484
ord4099
ord2091
ord1570
ord4237
ord3229
ord657
ord5744
ord2494
ord3406
ord1873
ord1892
ord4353
ord1024
ord4085
ord6179
ord3086
ord908
ord4109
ord1486
ord1931
ord1483
ord4098
ord2089
ord1547
ord4234
ord3171
ord5583
ord2899
ord5446
ord5203
ord6180
ord1564
ord1565
ord3109
ord3110
ord6305
ord6306
ord2451
ord5490
ord3850
ord782
ord6006
ord5716
ord5419
ord1123
ord2371
ord2938
ord2654
ord298
ord6286
ord5320
ord6297
ord5331
ord3255
ord5715
ord2403
ord2415
ord2392
ord2396
ord2398
ord2400
ord2390
ord5233
ord5235
ord300
ord783
ord2389
ord3806
ord1010
ord5102
ord6219
ord5382
ord3832
ord1920
ord2931
ord5224
ord5226
ord3948
ord4568
ord5230
ord5213
ord2838
ord4481
ord3333
ord1084
ord1160
ord2248
ord1054
ord3830
ord757
ord566
ord3683
ord907
ord911
ord2271
ord2272
ord581
ord1167
ord1092
ord1209
ord1177
ord1175
ord1201
ord1120
ord371
ord1098
ord1208
ord1206
ord1037
ord315
ord765
ord6173
ord4108
ord3997
ord2322
ord1482
ord1641
ord1571
ord5915
ord1620
ord1617
ord3946
ord1402
ord4238
ord5152
ord1908
ord5073
ord6275
ord4185
ord3403
ord4722
ord4282
ord1600
ord5960
ord923
ord928
ord932
ord930
ord934
ord2410
ord2394
ord2413
ord2408
ord2385
ord2387
ord2405
ord2178
ord2172
ord1522
ord6279
ord3802
ord6277
ord3345
ord4967
ord1362
ord5175
ord1964
ord1656
ord1655
ord1599
ord2537
ord2731
ord2835
ord4307
ord2714
ord2862
ord2540
ord2646
ord2533
ord3718
ord3719
ord3709
ord2644
ord3949
ord4486
ord4261
ord3230
ord5873
ord781
ord4115
ord2794
ord1955
ord3795
ord1283
ord3244
ord2094
ord4100
ord1280
ord3210
ord1934
ord2866
ord2873
ord2264
ord2372
ord3204
ord4394
ord784
ord310
ord762
ord764
ord297
ord304
ord305
ord578
ord6178
ord6172
ord1191
ord1187
ord5566
ord591

msvcr71

_mbsicmp
free
malloc
_resetstkoflw
_mbschr
??0exception@@QAE@XZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0bad_cast@@QAE@PBD@Z
??0bad_cast@@QAE@ABV0@@Z
??1bad_cast@@UAE@XZ
toupper
_access
_wtol
_wtoi
memmove
srand
time
atol
difftime
strstr
_strdup
_mbsnbcpy
islower
_mbsupr
_mbstok
setlocale
wcslen
_mbsstr
strncmp
_mbsnbicmp
_except_handler3
__CxxFrameHandler
_CxxThrowException
_purecall
memset
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
_initterm
_adjust_fdiv
__CppXcptFilter
__security_error_handler
strtol

kernel32

CreateDirectoryA
FormatMessageA
LocalFree
GetWindowsDirectoryA
GetSystemDirectoryA
InterlockedDecrement
FindClose
FindFirstFileA
DeviceIoControl
GetDriveTypeA
ReadFile
SetLastError
SetErrorMode
DeleteFileA
SetFileAttributesA
CreateFileA
GetProcAddress
IsBadReadPtr
WaitForSingleObject
ResetEvent
SystemTimeToFileTime
GetLocalTime
GetModuleHandleA
CloseHandle
CreateMutexA
CreateEventA
OpenEventA
LockResource
LoadResource
FindResourceA
lstrcpynA
GetModuleFileNameA
IsBadWritePtr
GetFileAttributesA
GetExitCodeThread
GetVersionExA
GetThreadLocale
GetLastError
InterlockedExchange
lstrlenW
MultiByteToWideChar
GetACP
GetEnvironmentVariableA
WideCharToMultiByte
GetLocaleInfoA
lstrlenA
GetCurrentProcess
GetCurrentThreadId
GetTempPathA
GetLogicalDrives
GetSystemTime
GetCurrentProcessId
ExitProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetEvent
GetVolumeInformationA
InterlockedIncrement
ResumeThread
SuspendThread
Sleep
MulDiv
InitializeCriticalSection
DeleteCriticalSection
GetVersion
GetDateFormatA
LocalAlloc
ExpandEnvironmentStringsA
GetComputerNameA
CreateProcessA
RemoveDirectoryA
FindNextFileA
GetTickCount
FreeLibrary
LoadLibraryA
GetTimeFormatA

user32

ExitWindowsEx
WinHelpA
GetDlgCtrlID
GetSubMenu
FindWindowA
SetWindowTextA
MsgWaitForMultipleObjects
GetKeyState
GetMenuItemID
IsMenu
IsDialogMessageA
SetWindowContextHelpId
SetCursor
DispatchMessageA
TranslateMessage
PeekMessageA
DrawTextExA
SetWindowPos
ReleaseDC
GetDC
DestroyWindow
GetWindow
GetWindowContextHelpId
PtInRect
SetRect
InvalidateRect
SetFocus
GetClassNameA
KillTimer
SetWindowLongA
SetTimer
GetDlgItem
ShowWindow
GetClientRect
GetWindowLongA
SetActiveWindow
GetActiveWindow
IsWindowEnabled
BringWindowToTop
AppendMenuA
SetForegroundWindow
IsWindowVisible
GetCursorPos
DestroyIcon
IsIconic
GetDesktopWindow
GetSystemMetrics
LoadImageA
RegisterWindowMessageA
PostMessageA
LoadCursorA
LoadIconA
DefWindowProcA
GetClassInfoA
UnregisterClassA
EnableWindow
SendMessageA
TrackPopupMenu
GetParent
GetSysColor
OffsetRect
InsertMenuA
GetMenuItemCount
wsprintfA
GetWindowRect
SetMenuDefaultItem
CheckMenuItem
RemoveMenu
ScreenToClient
CreatePopupMenu
IsWindow
GetFocus
SystemParametersInfoA

gdi32

GetDeviceCaps
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetTextExtentPoint32A

advapi32

RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetUserNameA

comctl32

ImageList_AddMasked
ImageList_ReplaceIcon

ole32

CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree

oleaut32

SafeArrayCreate
VariantCopy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayDestroy
SafeArrayCopy
VariantTimeToSystemTime
SysAllocStringLen
VariantChangeType
SystemTimeToVariantTime
VariantInit
GetErrorInfo
VariantClear
SysStringLen
SysAllocString
SysFreeString

msvcp71

?id@?$ctype@D@std@@2V0locale@2@A
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
??1locale@std@@QAE@XZ
?freeze@strstreambuf@std@@QAEX_N@Z
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??1ostrstream@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?overflow@strstreambuf@std@@MAEHH@Z
?pbackfail@strstreambuf@std@@MAEHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@strstreambuf@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?seekoff@strstreambuf@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?rend@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$reverse_iterator@Viterator@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$reverse_iterator@Viterator@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0locale@std@@QAE@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@V312@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?_Register@facet@locale@std@@QAEXXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??Bid@locale@std@@QAEIXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Init@strstreambuf@std@@IAEXHPAD0H@Z
??1strstreambuf@std@@UAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

shfolder

SHGetFolderPathA

Exports

Exports

??0CDlgHeal@@QAE@PAVCWnd@@@Z
??0CDlgSelDev@@QAE@HPAVCWnd@@@Z
??0CDlgSelTarget@@QAE@HPAVCWnd@@@Z
??0CDlgTStat@@QAE@PAVCWnd@@@Z
??0CHVDlgProgress@@QAE@PAVCWnd@@@Z
??0CHVPHeal@@QAE@XZ
??0CHVPStart@@QAE@XZ
??0CHVPSummary@@QAE@XZ
??0CHVPVault@@QAE@XZ
??0CHVPWipe@@QAE@XZ
??0CHVWizard@@QAE@PAVCWnd@@@Z
??1CDlgHeal@@UAE@XZ
??1CDlgSelDev@@UAE@XZ
??1CDlgSelTarget@@UAE@XZ
??1CDlgTStat@@UAE@XZ
??1CHVDlgProgress@@UAE@XZ
??1CHVPHeal@@UAE@XZ
??1CHVPStart@@UAE@XZ
??1CHVPSummary@@UAE@XZ
??1CHVPVault@@UAE@XZ
??1CHVPWipe@@UAE@XZ
??1CHVWizard@@UAE@XZ
??_7CDlgHeal@@6B@
??_7CDlgSelDev@@6B@
??_7CDlgSelTarget@@6B@
??_7CDlgTStat@@6B@
??_7CHVDlgProgress@@6B@
??_7CHVWizard@@6B@
??_FCDlgHeal@@QAEXXZ
??_FCDlgTStat@@QAEXXZ
??_FCHVDlgProgress@@QAEXXZ
??_FCHVWizard@@QAEXXZ
?AddButton@CDlgSelDev@@IAEXIHPBD0VCRect@@@Z
?AddReport@CHVWizard@@IAEHAAVCAvgList@@PAUtagOBJINFO@@J@Z
?AddReport@CHVWizard@@IAEHAAVCAvgList@@V?$CComPtr@UIAvgResult@@@ATL@@J@Z
?AvgRunOnce@@YGHPAUHWND__@@@Z
?CheckDrive@CDlgSelDev@@IAEHH@Z
?CheckPathList@CDlgSelTarget@@IAEHAAVCStringArray@@PAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?Create@CDlgSelDev@@QAEHIHPAVCWnd@@@Z
?Create@CDlgSelTarget@@QAEHIHPAVCWnd@@@Z
?DoDataExchange@CDlgHeal@@MAEXPAVCDataExchange@@@Z
?DoDataExchange@CDlgSelDev@@MAEXPAVCDataExchange@@@Z
?DoDataExchange@CDlgSelTarget@@MAEXPAVCDataExchange@@@Z
?DoDataExchange@CDlgTStat@@MAEXPAVCDataExchange@@@Z
?DoDataExchange@CHVDlgProgress@@MAEXPAVCDataExchange@@@Z
?DoDataExchange@CHVWizard@@MAEXPAVCDataExchange@@@Z
?DoModal@CDlgSelDev@@UAEHXZ
?EnableEdit@CDlgSelTarget@@QAEHH@Z
?FilterResult@CHVWizard@@IAEHK@Z
?GetHelpIDs@CDlgHeal@@MAEPBKXZ
?GetHelpIDs@CDlgSelDev@@MAEPBKXZ
?GetHelpIDs@CDlgSelTarget@@MAEPBKXZ
?GetHelpIDs@CDlgTStat@@UAEPBKXZ
?GetHelpIDs@CHVDlgProgress@@MAEPBKXZ
?GetMessageMap@CDlgHeal@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CDlgSelDev@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CDlgSelTarget@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CDlgTStat@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CHVDlgProgress@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CHVWizard@@MBEPBUAFX_MSGMAP@@XZ
?GetMinSize@CDlgSelDev@@QAE?AVCSize@@XZ
?GetRuntimeClass@CDlgSelDev@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@CDlgTStat@@UBEPAUCRuntimeClass@@XZ
?GetTestID@CDlgSelDev@@QBEKXZ
?GetTestID@CDlgSelTarget@@QBEKXZ
?GetThisClass@CDlgSelDev@@SGPAUCRuntimeClass@@XZ
?GetThisClass@CDlgTStat@@SGPAUCRuntimeClass@@XZ
?GetThisMessageMap@CDlgHeal@@KGPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CDlgSelDev@@KGPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CDlgSelTarget@@KGPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CDlgTStat@@KGPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CHVDlgProgress@@KGPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CHVWizard@@KGPBUAFX_MSGMAP@@XZ
?IsDataValid@CDlgHeal@@UAEHXZ
?IsDataValid@CHVDlgProgress@@UAEHXZ
?IsExpired@CDlgTStat@@QAEHXZ
?LoadDevices@CDlgSelDev@@IAEXXZ
?LoadLV@CHVWizard@@UAEHAAVCAvgList@@H@Z
?MoveData@CDlgHeal@@UAEHH@Z
?MoveData@CDlgTStat@@UAEHH@Z
?MoveData@CHVDlgProgress@@UAEHH@Z
?OnBackBtn@CDlgSelDev@@QAEXXZ
?OnBnClickedShowresult@CDlgTStat@@IAEXXZ
?OnCancel@CDlgSelDev@@UAEXXZ
?OnCancel@CDlgSelTarget@@MAEXXZ
?OnCancel@CHVDlgProgress@@MAEXXZ
?OnClose@CDlgSelTarget@@IAEXXZ
?OnCommandButtons@CDlgSelDev@@QAEXI@Z
?OnContextMenu@CDlgSelDev@@IAEXPAVCWnd@@VCPoint@@@Z
?OnDestroy@CDlgTStat@@IAEXXZ
?OnDetail@CDlgTStat@@IAEXXZ
?OnEditchangePath@CDlgSelTarget@@IAEXXZ
?OnEditupdatePath@CDlgSelTarget@@IAEXXZ
?OnEraseBkgnd@CDlgHeal@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CDlgSelDev@@QAEHPAVCDC@@@Z
?OnEraseBkgnd@CHVDlgProgress@@IAEHPAVCDC@@@Z
?OnGetMinMaxInfo@CDlgSelDev@@QAEXPAUtagMINMAXINFO@@@Z
?OnGetMinMaxInfo@CDlgSelTarget@@IAEXPAUtagMINMAXINFO@@@Z
?OnInitDialog@CDlgHeal@@MAEHXZ
?OnInitDialog@CDlgSelDev@@UAEHXZ
?OnInitDialog@CDlgSelTarget@@MAEHXZ
?OnInitDialog@CDlgTStat@@MAEHXZ
?OnInitDialog@CHVDlgProgress@@MAEHXZ
?OnInitDialog@CHVWizard@@MAEHXZ
?OnLButtonDown@CDlgTStat@@IAEXIVCPoint@@@Z
?OnNcLButtonDown@CDlgTStat@@IAEXIVCPoint@@@Z
?OnOK@CDlgSelTarget@@MAEXXZ
?OnOK@CDlgTStat@@MAEXXZ
?OnPause@CHVDlgProgress@@IAEXXZ
?OnRunTest@CDlgTStat@@IAEXXZ
?OnSelendcancelPath@CDlgSelTarget@@IAEXXZ
?OnSelendokPath@CDlgSelTarget@@IAEXXZ
?OnSize@CDlgSelDev@@QAEXIHH@Z
?OnTimer@CDlgTStat@@IAEXI@Z
?OnWinMgr@CDlgHeal@@IAEJIJ@Z
?OnWinMgr@CDlgSelDev@@QAEJIJ@Z
?OnWinMgr@CDlgSelTarget@@IAEJIJ@Z
?OnWinMgr@CHVDlgProgress@@IAEJIJ@Z
?OnWindowPosChanged@CDlgTStat@@IAEXPAUtagWINDOWPOS@@@Z
?PreTranslateMessage@CDlgSelTarget@@UAEHPAUtagMSG@@@Z
?PreTranslateMessage@CDlgTStat@@UAEHPAUtagMSG@@@Z
?RemoveAllButtons@CDlgSelDev@@IAEXXZ
?SetButtonWidth@CDlgSelDev@@IAEHH@Z
?SetQuickTestMode@CDlgTStat@@QAEXH@Z
?SetReport@CDlgTStat@@QAEXK@Z
?SetTestID@CDlgSelDev@@QAEKK@Z
?SetTestID@CDlgSelTarget@@QAEKK@Z
?SetTestID@CDlgTStat@@QAEXK@Z
?SetTimeout@CDlgTStat@@QAEXH@Z
?StartTimer@CDlgTStat@@AAEXXZ
?StopTimer@CDlgTStat@@AAEXXZ
?TextCallBack@CDlgSelTarget@@IAEXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?UpdateState@CDlgSelTarget@@IAEXPBD@Z
?UpdateWindowTitle@CDlgTStat@@AAEXXZ
?_messageEntries@CDlgHeal@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CDlgSelDev@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CDlgSelTarget@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CDlgTStat@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CHVDlgProgress@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CHVWizard@@0QBUAFX_MSGMAP_ENTRY@@B
?classCDlgSelDev@CDlgSelDev@@2UCRuntimeClass@@B
?classCDlgTStat@CDlgTStat@@2UCRuntimeClass@@B
?m_nHelpIDs@CDlgHeal@@1QBKB
?m_nHelpIDs@CDlgSelDev@@1QBKB
?m_nHelpIDs@CDlgSelTarget@@1QBKB
?m_nHelpIDs@CDlgTStat@@2QBKB
?m_nHelpIDs@CHVDlgProgress@@1QBKB
?messageMap@CDlgHeal@@1UAFX_MSGMAP@@B
?messageMap@CDlgSelDev@@1UAFX_MSGMAP@@B
?messageMap@CDlgSelTarget@@1UAFX_MSGMAP@@B
?messageMap@CDlgTStat@@1UAFX_MSGMAP@@B
?messageMap@CHVDlgProgress@@1UAFX_MSGMAP@@B
?messageMap@CHVWizard@@1UAFX_MSGMAP@@B
AvgCreateRescue
AvgGetProxy
AvgHasProxy
AvgInitProxy
AvgShowDialog
AvgShowVirusA
AvgShowVirusExA
AvgShowVirusExW
AvgShowVirusW
AvgTestFormatDisk
AvgTestGetInstance
AvgTestReleaseCOM
DllGetVersion
RunTestDlg
RunTestEx
RunTestIDlg
apiAvgShowDialog
apiAvgShowVirusA
apiAvgShowVirusExA
apiAvgShowVirusExW
apiAvgShowVirusW

Sections

.text
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ca5804e01639e5b779a7acc07ac47fa2

Headers

File Characteristics

Imports

shell32

avgtmgr

avgabout

avgtres

avgset

avgctrl

mfc71

msvcr71

kernel32

user32

gdi32

advapi32

comctl32

ole32

oleaut32

msvcp71

version

shfolder

Exports

Exports

Sections

.text Size: 276KB - Virtual size: 276KB

.rdata Size: 106KB - Virtual size: 105KB

.data Size: 7KB - Virtual size: 45KB

.rsrc Size: 25KB - Virtual size: 24KB

.reloc Size: 57KB - Virtual size: 56KB

.text Size: 116KB - Virtual size: 116KB

.text
Size: 276KB - Virtual size: 276KB

.rdata
Size: 106KB - Virtual size: 105KB

.data
Size: 7KB - Virtual size: 45KB

.rsrc
Size: 25KB - Virtual size: 24KB

.reloc
Size: 57KB - Virtual size: 56KB

.text
Size: 116KB - Virtual size: 116KB