utbnp-v4[.]2[.]4[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

utbnp-v4.2.4.zip
Size

157.8MB
MD5

3d5f9c27f2af4bacfb712091a0b4ead9
SHA1

7279e4d582b5b5099b0e1aff0a2533d16df87840
SHA256

bd3dc94a11edebb75ceff179cc71e86e2a2f58e3de6feedf1ea304a611be5e5f
SHA512

39a75b9e0f1781732954baad8073e8a784ba4a1606f0f4b0648f94cea9636dde1241bf3016ddde16b6dbd538c3c8cda2f4e7221f4f565d4c481330211fdd880d
SSDEEP

3145728:yr5gnAkhzhZ9C2iJkGsPkKAYn5fvxx3co07uSmNLg5F+3yl9vs:yrKnAMzb42iJz2kanRvx07uSmNMnl1s

Score

1^/10

Malware Config

Signatures

Files

utbnp-v4.2.4.zip
.zip
DeltaPatcher/DeltaPatcher.exe
.exe windows x86

ae9ad6e53fd4e90a69526ad746c15111

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetConsoleCP
ReadConsoleW
GetConsoleMode
FlushFileBuffers
FreeLibraryAndExitThread
ExitThread
DeleteFileW
MoveFileExW
GetFullPathNameW
HeapReAlloc
GetModuleHandleExW
LoadLibraryExW
RtlUnwind
InitializeSListHead
GetStartupInfoW
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStringTypeW
LCMapStringW
CompareStringW
SwitchToThread
InitializeCriticalSectionAndSpinCount
DecodePointer
EncodePointer
SetEndOfFile
GetCurrentDirectoryW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
FindFirstFileExA
FindNextFileA
GetCommandLineA
GetProcessHeap
CreateFileA
GetStartupInfoA
FormatMessageA
SystemTimeToFileTime
GetLocalTime
SetFilePointerEx
GetFileSizeEx
VirtualFree
VirtualAlloc
IsBadStringPtrA
IsBadReadPtr
GetUserDefaultUILanguage
SetThreadLocale
FindNextFileW
GetDriveTypeW
GetLogicalDriveStringsW
InterlockedExchange
QueryPerformanceFrequency
QueryPerformanceCounter
PeekNamedPipe
EnumSystemLocalesW
ReadFile
WriteFile
WaitForMultipleObjects
CreateThread
ExpandEnvironmentStringsW
CreateEventW
SetEvent
GetProcAddress
GetCPInfo
IsValidCodePage
GetVersionExW
FindResourceW
GetEnvironmentVariableW
GetModuleFileNameW
GetNativeSystemInfo
SizeofResource
LoadResource
IsDebuggerPresent
TerminateProcess
LockResource
GetSystemTimeAsFileTime
OutputDebugStringW
GetModuleHandleW
GetCurrentProcessId
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
WaitForSingleObject
ResumeThread
TerminateThread
SetThreadPriority
GetCurrentThread
RaiseException
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
CopyFileW
SetCurrentDirectoryW
GetFileType
WideCharToMultiByte
FormatMessageW
MultiByteToWideChar
FindFirstFileW
GetFileAttributesW
CreateFileW
GetTempFileNameW
GetTempPathW
CloseHandle
FindClose
HeapSize
GetLongPathNameW
GetThreadLocale
GetLocaleInfoW
GetACP
SetErrorMode
GlobalHandle
GlobalSize
LoadLibraryW
FreeLibrary
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SetLastError
GetLastError
GetCurrentThreadId
ExitProcess
MulDiv
WriteConsoleW
WriteConsoleA
AttachConsole
FreeConsole
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterW
ReadConsoleOutputCharacterA
GetStdHandle
GetCommandLineW
SetStdHandle
LocalFree

user32

MonitorFromPoint
EnumDisplaySettingsW
ChangeDisplaySettingsExW
SetMenu
GetClipboardFormatNameW
RegisterClipboardFormatW
FindWindowExW
ChildWindowFromPoint
GetComboBoxInfo
GetDesktopWindow
UnionRect
EndPaint
BeginPaint
GetWindowDC
ValidateRgn
TranslateAcceleratorW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetCaretBlinkTime
GetDoubleClickTime
DrawIconEx
ValidateRect
PostThreadMessageW
GetMessageW
GetClassNameW
MessageBeep
GetWindowTextW
IsRectEmpty
GetClassInfoW
PostMessageW
HideCaret
GetWindowTextLengthW
keybd_event
IsMenu
OffsetRect
MonitorFromWindow
SetRectEmpty
DrawFocusRect
DrawTextW
DestroyCursor
InsertMenuItemW
SetMenuInfo
RemoveMenu
ModifyMenuW
AppendMenuW
InsertMenuW
DestroyMenu
CreatePopupMenu
CreateMenu
DdePostAdvise
SetRect
GetSysColorBrush
DrawStateW
SetMenuItemInfoW
GetMenuItemID
GetSubMenu
CheckMenuItem
GetMenuState
DrawFrameControl
DdeFreeDataHandle
DestroyIcon
SetForegroundWindow
EnableMenuItem
GetSystemMenu
DrawMenuBar
GetDialogBaseUnits
CreateDialogIndirectParamW
IsZoomed
DdeCreateStringHandleW
IsIconic
DdeQueryStringW
RegisterClassW
UnregisterClassW
GetKeyState
MessageBoxW
GetMonitorInfoW
EnumDisplayMonitors
wsprintfW
MsgWaitForMultipleObjects
SetTimer
KillTimer
DdeInitializeW
DdeUninitialize
DdeConnect
CopyRect
DdeDisconnect
FlashWindowEx
SetLayeredWindowAttributes
GetWindowPlacement
SetWindowRgn
GetDlgItem
IsClipboardFormatAvailable
SystemParametersInfoW
GetScrollInfo
SetScrollInfo
IsDialogMessageW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetProcessDefaultLayout
LoadCursorW
LoadBitmapW
LoadIconW
GetIconInfo
LoadImageW
GetDC
ReleaseDC
CreateIconIndirect
TranslateMessage
DispatchMessageW
PeekMessageW
RegisterHotKey
UnregisterHotKey
GetMessagePos
DdeNameService
DdeClientTransaction
DdeCreateDataHandle
CheckMenuRadioItem
DdeGetData
SetParent
GetParent
SetWindowLongW
GetWindowLongW
PtInRect
InflateRect
FillRect
GetSysColor
ChildWindowFromPointEx
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
GetMessageTime
SendMessageW
DefWindowProcW
PostQuitMessage
DrawEdge
DdeGetLastError
CallWindowProcW
CreateWindowExW
IsWindow
DestroyWindow
ShowWindow
AnimateWindow
MoveWindow
SetWindowPos
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
SetFocus
GetActiveWindow
GetFocus
GetAsyncKeyState
VkKeyScanW
MapVirtualKeyW
GetCapture
SetCapture
DdeFreeStringHandle
BringWindowToTop
CreateDialogParamW
SetCursorPos
GetWindowRect
GetClientRect
SetWindowTextW
EnableScrollBar
ScrollWindow
RedrawWindow
InvalidateRect
GetUpdateRgn
UpdateWindow
GetMenuItemInfoW
TrackPopupMenu
GetMenuItemCount
GetSystemMetrics
IsWindowEnabled
EnableWindow
ReleaseCapture

gdi32

ExtFloodFill
GetBkColor
LineTo
MoveToEx
ExtTextOutW
Arc
Ellipse
GetClipBox
GetObjectType
GetPixel
GetStockObject
MaskBlt
Pie
PolyPolygon
Rectangle
RoundRect
ExtSelectClipRgn
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPixel
SetPolyFillMode
StretchDIBits
SetROP2
GetWorldTransform
SetWorldTransform
ModifyWorldTransform
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
PolyBezier
SetViewportExtEx
SetWindowExtEx
CreatePatternBrush
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePen
ExtCreatePen
CreateHatchBrush
CreateDIBitmap
GetDIBits
CreateDIBSection
GetDIBColorTable
SetDIBColorTable
EqualRgn
GetRgnBox
PtInRegion
GetCharABCWidthsW
GetTextExtentExPointW
CreateICW
CreateDCW
GetSystemPaletteEntries
SetViewportOrgEx
CloseEnhMetaFile
CreateEnhMetaFileW
DeleteEnhMetaFile
GetEnhMetaFileW
GetEnhMetaFileHeader
PlayEnhMetaFile
EnumFontFamiliesExW
SetAbortProc
StartDocW
EndDoc
StartPage
EndPage
SelectClipRgn
RectInRegion
CreateRectRgnIndirect
CombineRgn
GetWindowExtEx
GetGraphicsMode
GetViewportExtEx
SetStretchBltMode
StretchBlt
SetTextColor
SetBkMode
GetTextExtentPoint32W
CreateSolidBrush
OffsetRgn
GetRegionData
ExtCreateRegion
GdiFlush
SetBrushOrgEx
SelectPalette
RealizePalette
CreateRectRgn
ExcludeClipRect
DeleteObject
GetObjectW
BitBlt
CreateBitmap
CreateBitmapIndirect
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
SelectObject
SetBkColor
CreateFontIndirectW
GetDeviceCaps
GetOutlineTextMetricsW
SetWindowOrgEx
GetTextMetricsW

comdlg32

PrintDlgW
ChooseFontW
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
PageSetupDlgW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetPrinterW

shell32

ExtractIconW
ExtractIconExW
SHGetFolderPathW
ord6
SHGetFileInfoW
CommandLineToArgvW
ShellExecuteExW
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW

shlwapi

SHAutoComplete

comctl32

ord16
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_Replace
ImageList_Draw
ImageList_SetBkColor
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
ord17

ole32

ReleaseStgMedium
CoTaskMemAlloc
RevokeDragDrop
OleFlushClipboard
OleSetClipboard
CoLockObjectExternal
CoTaskMemFree
OleUninitialize
OleInitialize
RegisterDragDrop
OleIsCurrentClipboard
OleGetClipboard
CoCreateInstance

rpcrt4

UuidToStringW
RpcStringFreeW

advapi32

RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
GetUserNameW

oleacc

LresultFromObject

uxtheme

IsThemePartDefined
IsAppThemed
IsThemeActive
GetCurrentThemeName
SetWindowTheme
GetThemeBackgroundExtent
GetThemeFont
GetThemeSysFont
GetThemeSysColor
GetThemeMargins
GetThemeInt
GetThemePartSize
DrawThemeParentBackground
GetThemeColor
IsThemeBackgroundPartiallyTransparent
GetThemeBackgroundContentRect
DrawThemeBackground
CloseThemeData
OpenThemeData

msimg32

AlphaBlend
GradientFill

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1017KB - Virtual size: 1016KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 387KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DeltaPatcher/[[README_DP]].txt
FileManager.dll
.dll regsvr32 windows x86

ff517ac33b6b2b30b698c445a8cbee22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileA
FindFirstFileExA
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
GetStringTypeW
GetStdHandle
LCMapStringW
GetEnvironmentStringsW
SetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
VirtualQuery
VirtualAlloc
GetSystemInfo
InterlockedFlushSList
RtlUnwind
OutputDebugStringW
IsValidCodePage
FreeEnvironmentStringsW
SetEnvironmentVariableA
ExitProcess
WriteConsoleW
CreateFileW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
Sleep
SearchPathA
GetProfileIntA
GetTickCount
GetTempFileNameA
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
FindResourceExW
lstrcpyA
GetACP
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCPInfo
GetOEMCP
VirtualProtect
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
CreateFileA
DeleteFileA
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryA
GlobalFlags
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
LoadLibraryA
FreeResource
GetSystemDirectoryW
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalSize
GetCurrentProcessId
GlobalAddAtomA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CompareStringA
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
LoadLibraryW
FindResourceW
LockResource
LoadLibraryExW
GetVersionExA
GetCurrentThread
SetLastError
OutputDebugStringA
ResumeThread
SetThreadPriority
GetCurrentThreadId
WaitForSingleObject
SetEvent
CloseHandle
MoveFileW
CopyFileW
GetModuleFileNameW
GetFullPathNameW
GetFileAttributesW
DeleteFileW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetThreadLocale
GetThreadLocale
IsDBCSLeadByte
WideCharToMultiByte
MultiByteToWideChar
FindResourceA
lstrcmpiA
SizeofResource
LoadResource
LoadLibraryExA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
GetLastError
RaiseException
GetFileType

user32

GetIconInfo
DrawIconEx
LoadImageA
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
LoadImageW
TrackMouseEvent
IntersectRect
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
OffsetRect
SetRectEmpty
InflateRect
GetMenuItemInfoA
DestroyMenu
CharUpperA
DestroyIcon
FillRect
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
InvalidateRect
KillTimer
SetTimer
DeleteMenu
SystemParametersInfoA
CopyImage
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetSystemMetrics
RealChildWindowFromPoint
GetDesktopWindow
ClientToScreen
IsDialogMessageA
SetWindowTextA
SendDlgItemMessageA
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
GetWindow
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EnableScrollBar
HideCaret
InvertRect
GetComboBoxInfo
PostThreadMessageA
WaitMessage
UnregisterClassA
CharNextA
GetDlgItem
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
LoadCursorW
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyA
GetKeyNameTextA
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongA
SetWindowRgn
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
GetSystemMenu
BringWindowToTop
MessageBeep
CharNextW
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
SendMessageA
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExA
CallNextHookEx
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
GetParent
LoadBitmapW
PostMessageA
PostQuitMessage
ShowOwnedPopups
SetCursor
EnableWindow
IsWindowEnabled
MessageBoxA
GetWindowLongA
GetWindowThreadProcessId
GetLastActivePopup
GetMenuStringA
GetMenuState
ReuseDDElParam
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
UnhookWindowsHookEx
RegisterWindowMessageA
GetMessagePos
GetMessageTime
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
RegisterClipboardFormatA
CharUpperBuffA
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
MonitorFromPoint
UpdateLayeredWindow
UnionRect
DrawIcon
FrameRect
CopyIcon
SetCursorPos

gdi32

GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectA
GetTextExtentPoint32A
CombineRgn
CreateRectRgnIndirect
ExcludeClipRect
SetRectRgn
DPtoLP
GetTextMetricsA
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
DeleteObject
GetObjectA
SetTextColor
SetBkColor
CreateDCA
CopyMetaFileA
CreateBitmap
PatBlt
GetDeviceCaps
DeleteDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegQueryValueExA
RegSetValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey

shell32

SHFileOperationW
SHGetFileInfoA
ShellExecuteA
SHAppBarMessage
SHBrowseForFolderA
DragFinish
DragQueryFileA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA

shlwapi

PathFindFileNameA
PathIsUNCA
StrFormatKBSizeA
PathStripToRootA
PathRemoveFileSpecW
PathFindExtensionA

uxtheme

GetThemeSysColor
GetCurrentThemeName
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
IsThemeBackgroundPartiallyTransparent
GetWindowTheme
IsAppThemed
GetThemePartSize

ole32

OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CoInitialize
CoCreateGuid
CoUninitialize
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CoDisconnectObject

oleaut32

VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringByteLen
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
LoadRegTypeLi
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
SysStringLen
SysAllocString
SysFreeString

gdiplus

GdipCreateFromHDC
GdipDrawImageRectI
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
directory_copy
directory_create
directory_destroy
directory_exists
directory_rename
file_copy
file_delete
file_exists
file_rename
program_directory
set_working_directory
working_directory

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 302KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mac_to_Win.xdelta
NekoPresence.dll
.dll windows x86

f36cc14b5731466655d2122e9f12a36b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetLastError
WriteFile
WaitNamedPipeW
GetCurrentProcessId
ReadFile
CreateFileW
MultiByteToWideChar
lstrlenW
PeekNamedPipe
GetModuleFileNameW
DeleteCriticalSection
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegSetValueExW

msvcp140

_Cnd_timedwait
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
_Thrd_start
_Xtime_get_ticks
_Thrd_join
_Thrd_id
_Mtx_init
_Mtx_destroy
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_current_owns
_Mtx_lock
_Cnd_wait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Cnd_destroy
_Cnd_init
_Mtx_unlock
_Cnd_broadcast

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__vcrt_InitializeCriticalSectionEx
memset
memcpy
__CxxFrameHandler3
_purecall
__std_terminate
memmove

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_cexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_initterm_e
terminate
_execute_onexit_table
_initterm

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-math-l1-1-0

_except1
log2
floor
ceil

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vfprintf
__acrt_iob_func

Exports

Exports

RegisterCallbacks
np_clearpresence
np_initdiscord
np_initdll
np_registergame
np_registergame_steam
np_respond
np_setpresence
np_setpresence_clearsecrets
np_setpresence_more
np_setpresence_partyparams
np_setpresence_secrets
np_setpresence_timestamps
np_shutdown
np_update

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Redone OST 'n More/Alternatives/Soundtrack Cover.png
.png
Redone OST 'n More/Alternatives/[[README_ALT]].txt
Redone OST 'n More/Alternatives/mus_date.ogg
Redone OST 'n More/Alternatives/mus_papyrusboss.ogg
Redone OST 'n More/Alternatives/mus_starroom.ogg
Redone OST 'n More/Alternatives/mus_vsasgore.ogg
Redone OST 'n More/Alternatives/mus_zz_megalovania.ogg
Redone OST 'n More/Bonus Tracks/Soundtrack Cover.png
.png
Redone OST 'n More/Bonus Tracks/[[README_BNS]].txt
Redone OST 'n More/Bonus Tracks/mus_mkid.ogg
Redone OST 'n More/Bonus Tracks/mus_sfx_17.ogg
Redone OST 'n More/Bonus Tracks/mus_underevent_papyrusboss.ogg
Redone OST 'n More/Bonus Tracks/mus_vibe.ogg
Redone OST 'n More/Soundtrack Cover.png
.png
Redone OST 'n More/[[README_MUS]].txt
Redone OST 'n More/desktop.ini
Redone OST 'n More/mus_ambientwater.ogg
Redone OST 'n More/mus_bgflameA.ogg
Redone OST 'n More/mus_core_ambience.ogg
Redone OST 'n More/mus_cymbal.ogg
Redone OST 'n More/mus_dogsong.ogg
Redone OST 'n More/mus_doorclose.ogg
Redone OST 'n More/mus_dooropen.ogg
Redone OST 'n More/mus_flowey.ogg
Redone OST 'n More/mus_menu0.ogg
Redone OST 'n More/mus_menu1.ogg
Redone OST 'n More/mus_menu2.ogg
Redone OST 'n More/mus_menu3.ogg
Redone OST 'n More/mus_menu4.ogg
Redone OST 'n More/mus_menu5.ogg
Redone OST 'n More/mus_menu6.ogg
Redone OST 'n More/mus_menu7.ogg
Redone OST 'n More/mus_mtgameshow.ogg
Redone OST 'n More/mus_muscle.ogg
Redone OST 'n More/mus_musicbox.ogg
Redone OST 'n More/mus_mysteriousroom2.ogg
Redone OST 'n More/mus_napstahouse.ogg
Redone OST 'n More/mus_papyrus.ogg
Redone OST 'n More/mus_ruins.ogg
Redone OST 'n More/mus_story.ogg
Redone OST 'n More/mus_tension.ogg
Redone OST 'n More/mus_toriel.ogg
Redone OST 'n More/mus_town.ogg
Redone OST 'n More/mus_wind.ogg
Redone OST 'n More/snd_ballchime.ogg
Redone OST 'n More/snd_mushroomdance.ogg
Soundtrack Cover.png
.png
Steam Library Images/[[README_IMG]].txt
Steam Library Images/capsule.png
.png
Steam Library Images/hero_banner.png
.png
Steam Library Images/product_logo.png
.png
UNDERTALEBNP.exe
.exe windows x86

2c5dca54550e34b8f3cc00484192539b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetReadFile
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
InternetOpenA
InternetCanonicalizeUrlA
InternetWriteFile
InternetConnectA
InternetCrackUrlA
HttpEndRequestW
HttpQueryInfoA
InternetGetConnectedState

dxgi

CreateDXGIFactory1

d3d11

D3D11CreateDevice

dbghelp

MiniDumpWriteDump
SymInitialize
SymFromAddr

winmm

mciSendStringA
joyGetPosEx
joyGetPos
joyGetDevCapsA
mciGetErrorStringA

ws2_32

gethostname
socket
shutdown
setsockopt
send
recvfrom
recv
listen
inet_ntoa
inet_addr
WSAStartup
ioctlsocket
connect
closesocket
bind
accept
getpeername
select
__WSAFDIsSet
ntohs
ntohl
htons
htonl
WSACleanup
WSAGetLastError
WSAAddressToStringA
getaddrinfo
getsockopt
freeaddrinfo
sendto

gdiplus

GdiplusStartup
GdiplusShutdown

comctl32

InitCommonControlsEx

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

FindNextFileA
FindFirstFileExA
GetFullPathNameA
SetCurrentDirectoryW
HeapReAlloc
GetTimeZoneInformation
MoveFileExW
SetFilePointerEx
SetStdHandle
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
DecodePointer
EncodePointer
GetStringTypeW
GetACP
WriteFile
GetStdHandle
GetModuleFileNameA
PeekNamedPipe
GetFileType
GetDriveTypeW
GetTempPathW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
ReadFile
SetFileAttributesW
GetFileAttributesExW
GetModuleHandleExW
HeapWalk
HeapValidate
SetLastError
RtlUnwind
LoadLibraryExW
InterlockedFlushSList
InterlockedPushEntrySList
VirtualQuery
IsValidCodePage
GetOEMCP
GetProcessHeap
HeapFree
HeapAlloc
InitializeSListHead
GetProcAddress
LoadLibraryW
WideCharToMultiByte
CloseHandle
WaitForSingleObjectEx
CreateEventExW
MultiByteToWideChar
GetConsoleWindow
GetLastError
GetCurrentDirectoryW
GetCPInfo
GetFullPathNameW
CreateThread
GetExitCodeThread
GetModuleHandleW
LocalFree
FormatMessageW
SetCurrentDirectoryA
GetCurrentDirectoryA
FreeLibrary
GetEnvironmentVariableW
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
Sleep
GetExitCodeProcess
CreateProcessW
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
GetTickCount
CreateWaitableTimerW
GetCurrentProcess
GetCurrentThread
SetThreadPriority
SetPriorityClass
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalMemoryStatusEx
GetSystemInfo
GetVersionExW
GetLocaleInfoW
GetUserDefaultLCID
ExitProcess
lstrlenA
GetCommandLineW
ExpandEnvironmentStringsW
CreateFileW
SetUnhandledExceptionFilter
SetErrorMode
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
MoveFileA
TlsAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
RtlCaptureStackBackTrace
TlsSetValue
TlsFree
IsProcessorFeaturePresent
UnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
RaiseException
GetSystemTimeAsFileTime
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetConsoleCtrlHandler
OutputDebugStringA
OutputDebugStringW
WriteConsoleW
SetEndOfFile
DeleteFileW
HeapSize
TlsGetValue

user32

DrawTextW
GetDC
ReleaseDC
SetWindowTextW
ScreenToClient
MoveWindow
SetCursorPos
ClientToScreen
MapWindowPoints
GetActiveWindow
GetCursorPos
wsprintfW
GetMessageW
TranslateMessage
DispatchMessageW
GetAsyncKeyState
keybd_event
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetDlgItemTextW
SetWindowTextA
MessageBoxA
SetDlgItemTextA
PeekMessageW
IsDialogMessageW
SetProcessDPIAware
GetForegroundWindow
UpdateWindow
SetWindowLongW
ChangeDisplaySettingsW
EnumDisplaySettingsW
DialogBoxParamW
CreateDialogParamW
LoadImageW
LoadCursorW
CallNextHookEx
SetCursor
AdjustWindowRectEx
GetWindowRect
GetClientRect
SetForegroundWindow
GetSystemMetrics
ReleaseCapture
SetDlgItemTextW
GetDlgItem
GetFocus
SetCapture
GetKeyState
SetFocus
BringWindowToTop
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
PostMessageW
SendMessageW
MessageBoxW
GetRawInputDeviceList
GetRawInputDeviceInfoA
EndDialog

gdi32

GetDeviceCaps
DeleteObject
SelectObject
CreateFontA

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

SHGetFolderPathW
ShellExecuteW

ole32

CoInitialize
CoCreateInstance
CoTaskMemFree
CoCreateFreeThreadedMarshaler

dwmapi

DwmGetCompositionTimingInfo

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 913KB - Virtual size: 912KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 553KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

minATL
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mydata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
[[README]].txt
abc_123_a.ogg
mus_badsongintro.ogg
mus_battle3.ogg
mus_brattycatty_shop.ogg
mus_burger_shop.ogg
mus_core_meltdown.ogg
mus_deltalegend.ogg
mus_dog_casino.ogg
mus_doggers.ogg
mus_dogshrine_1.ogg
mus_dogshrine_2.ogg
mus_dogtarune.ogg
mus_dogtroid.ogg
mus_dogtroid_intro.ogg
mus_gerson_shop.ogg
mus_glyde.ogg
mus_glyde_intro.ogg
mus_grillby_01.ogg
mus_grillby_02.ogg
mus_guard_battle.ogg
mus_guard_intro.ogg
mus_homereprise.ogg
mus_hometown.ogg
mus_hotlandheights.ogg
mus_mewmew.ogg
mus_minigame.ogg
mus_mtgameshow.ogg
mus_napstahouse_alt.ogg
mus_papyrus_preboss.ogg
mus_prebattle2.ogg
mus_quiet_autumn.ogg
mus_rurus.ogg
mus_sfx_dogseal.ogg
mus_starroom.ogg
mus_troublebattle.ogg
mus_troubleintro.ogg
mus_unknown.ogg
mus_unknown2.ogg
mus_unknown3.ogg
snd_core_meltdown.ogg
snd_coretransition_geno.ogg
snd_hotel_geno.ogg
snd_hotel_geno_outside.ogg
snd_okdesuka.ogg
splash.png
.png
utbnp_v4.2.4.xdelta
utbnp_v4.2.4_prev_version.xdelta
v1.08_Windows_Collectors_Edition_to_Steam.xdelta
window_command_hook.dll
.dll windows x86

b18ec719488285e00fae2942475235eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowLongW
GetSystemMenu
GetMenuState
CallWindowProcW
SetWindowPos
SendMessageW
SetWindowLongW
EnableMenuItem

kernel32

HeapAlloc
CreateFileW
DecodePointer
WriteConsoleW
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx

Exports

Exports

window_command_bind_raw
window_command_check
window_command_cleanup
window_command_get_active_raw
window_command_hook_raw
window_command_init_raw
window_command_run_raw
window_command_set_active_raw
window_command_unhook_raw
window_get_background_redraw
window_get_taskbar_button_visible_raw
window_set_background_redraw_raw
window_set_taskbar_button_visible_raw
window_set_topmost_raw

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae9ad6e53fd4e90a69526ad746c15111

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

shlwapi

comctl32

ole32

rpcrt4

advapi32

oleacc

uxtheme

msimg32

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 1017KB - Virtual size: 1016KB

.data Size: 59KB - Virtual size: 235KB

.rsrc Size: 387KB - Virtual size: 387KB

.reloc Size: 261KB - Virtual size: 261KB

ff517ac33b6b2b30b698c445a8cbee22

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

oleacc

imm32

winmm

Exports

Exports

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 302KB - Virtual size: 301KB

.data Size: 22KB - Virtual size: 46KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 119KB - Virtual size: 119KB

f36cc14b5731466655d2122e9f12a36b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 37KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 5KB - Virtual size: 220KB

.gfids Size: 512B - Virtual size: 76B

.tls Size: 512B - Virtual size: 9B

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 1017KB - Virtual size: 1016KB

.data
Size: 59KB - Virtual size: 235KB

.rsrc
Size: 387KB - Virtual size: 387KB

.reloc
Size: 261KB - Virtual size: 261KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 302KB - Virtual size: 301KB

.data
Size: 22KB - Virtual size: 46KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 119KB - Virtual size: 119KB

.text
Size: 37KB - Virtual size: 37KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 5KB - Virtual size: 220KB

.gfids
Size: 512B - Virtual size: 76B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 913KB - Virtual size: 912KB

.data
Size: 553KB - Virtual size: 3.4MB

minATL
Size: 512B - Virtual size: 12B

.mydata
Size: 512B - Virtual size: 8B

.gfids
Size: 512B - Virtual size: 372B

_RDATA
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 170KB - Virtual size: 170KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 256B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB