mspaint Win95 OSR2 English[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

mspaint Win95 OSR2 English.zip
Size

426KB
MD5

084180b4b9cd672c619a5caf765c69b2
SHA1

57d9660fc585bae32ac38837f69f4bebcff2dc8e
SHA256

5ef27a42f540ddfe5d43e77301f994b207f2b9398286e5fc9268ec4dc5bff804
SHA512

038e195a0b983ddfe4c52c2b12ea3223ba27b0643ba132642ef75367f616a951c2d39b0f02e7d5201b090c7d73425786a0f04eadae8c73ebb467ae13cd0b9895
SSDEEP

12288:Xz0TqfHwPrLfOY+xM6yUyumKjDG1h0a+p2Nmzo:XwTqfIrLOXLuKvFp20o

Score

1^/10

Malware Config

Signatures

Files

mspaint Win95 OSR2 English.zip
.zip
Win95 OSR2 English/mfc30.dll
.dll windows x86

b8d7d0b8abe152e7e664f67290552bda

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt20

atoi
gmtime
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_onexit
__dllonexit
_mbsnbcmp
_setmbcp
_beginthreadex
_endthreadex
?set_terminate@@YAP6AXXZP6AXXZ@Z
__p___mb_cur_max
_isctype
__p__pctype
_mbsdec
_expand
_gcvt
strtod
strtol
strtoul
abs
_strdup
calloc
_purecall
_msize
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
__CxxFrameHandler
strftime
__p__mbctype
localtime
time
_open_osfhandle
mktime
_ismbcspace
??3@YAXPAX@Z
_ismbcdigit
_mbclen
vsprintf
_mbsstr
_mbsrchr
_mbscspn
_mbsspn
_mbspbrk
_mbschr
wcslen
strlen
_mbscmp
free
realloc
malloc
fclose
fflush
fseek
fgetpos
fgets
fputs
fwrite
fread
clearerr
_fdopen
_get_osfhandle
_mbsinc
__doserrno
abort
memmove
memset
_CxxThrowException
??2@YAPAXI@Z
memcpy

kernel32

TlsGetValue
MultiByteToWideChar
FileTimeToSystemTime
WideCharToMultiByte
GetFileAttributesA
FileTimeToLocalFileTime
LocalAlloc
LocalFree
SetLastError
Sleep
TlsSetValue
GlobalAddAtomA
FreeLibrary
FreeResource
LockResource
LoadResource
GlobalGetAtomNameA
lstrcatA
lstrcpyA
LeaveCriticalSection
EnterCriticalSection
GetVersion
GetCurrentThreadId
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
FindResourceA
TlsAlloc
LocalUnlock
LocalLock
GetTempFileNameA
GetTempPathA
LoadLibraryA
SearchPathA
ResumeThread
SetThreadPriority
GetCurrentThread
GlobalDeleteAtom
SetErrorMode
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
GetSystemDirectoryA
LocalFileTimeToFileTime
GetProfileIntA
GlobalFree
GetFileTime
GetFileSize
GlobalAlloc
GlobalUnlock
GlobalReAlloc
GetModuleFileNameA
GlobalLock
GlobalSize
GetFullPathNameA
GetShortPathNameA
lstrcmpiA
MoveFileA
GetVolumeInformationA
DeleteFileA
LockFile
SetEndOfFile
UnlockFile
SetFilePointer
CloseHandle
FlushFileBuffers
CreateFileA
WriteFile
ReadFile
GetLastError
GetCurrentProcess
DuplicateHandle
lstrlenA
lstrcmpA
OutputDebugStringA
IsBadStringPtrA
IsBadReadPtr
IsBadWritePtr
TlsFree
IsBadStringPtrW
MulDiv
FindClose
FindFirstFileA

gdi32

GetTextFaceA
ExcludeClipRect
SetMapperFlags
SetMapMode
LPtoDP
SetAbortProc
ScaleWindowExtEx
StartPage
EndPage
DPtoLP
AbortDoc
CreateRectRgnIndirect
EndDoc
CombineRgn
GetMapMode
SetRectRgn
ExtCreatePen
PlayMetaFile
CreateHatchBrush
PlayMetaFileRecord
GetObjectType
EnumMetaFile
SelectClipPath
CreateRectRgn
ExtSelectClipRgn
PolyBezierTo
SetColorAdjustment
GetClipRgn
PolyDraw
SetArcDirection
GetObjectA
SetTextColor
SetBkColor
SelectObject
MoveToEx
SetWindowExtEx
GetTextMetricsA
CreateCompatibleDC
CreateFontIndirectA
BitBlt
CreateSolidBrush
ExtTextOutA
GetTextExtentPointA
CreateDIBitmap
GetStockObject
TextOutA
StretchDIBits
PatBlt
CreateBitmap
DeleteObject
CreateCompatibleBitmap
CreatePatternBrush
GetBkColor
SaveDC
RestoreDC
GetStretchBltMode
GetNearestColor
GetTextColor
GetBkMode
GetPolyFillMode
GetTextAlign
GetWindowExtEx
GetROP2
GetViewportExtEx
SetViewportOrgEx
CreatePen
PolylineTo
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportExtEx
GetCharWidthA
GetCurrentPositionEx
Escape
GetDeviceCaps
SetWindowOrgEx
GetWindowOrgEx
GetViewportOrgEx
IntersectClipRect
PtVisible
RectVisible
DeleteMetaFile
CloseMetaFile
GetClipBox
SetROP2
UnrealizeObject
Rectangle
CreateDCA
DeleteDC
StartDocA
SelectPalette
SetBkMode
SetPolyFillMode
LineTo
SetStretchBltMode
OffsetWindowOrgEx
SelectClipRgn
OffsetClipRgn
SetTextAlign
SetTextJustification
SetTextCharacterExtra
ArcTo

user32

GetLastActivePopup
GetMessageTime
GetMessagePos
GetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
CallNextHookEx
SetPropA
SetWindowsHookExA
DestroyWindow
UnhookWindowsHookEx
CreateWindowExA
GetWindowTextLengthA
DefWindowProcA
GetWindowTextA
GetSubMenu
TrackPopupMenu
GetMenuItemID
RegisterClassA
GetMenuItemCount
GetMenu
GetCapture
GetClassInfoA
WinHelpA
IsChild
GetDlgCtrlID
GetParent
AdjustWindowRectEx
IsZoomed
GetDlgItem
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
EnableWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
DeferWindowPos
EqualRect
ScreenToClient
GetTopWindow
SetFocus
SetActiveWindow
GetFocus
CharLowerBuffA
GetNextDlgGroupItem
GetSysColor
SetRect
SystemParametersInfoA
SendDlgItemMessageA
IsDialogMessageA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
PostMessageA
PeekMessageA
SetCursor
GetDesktopWindow
IsWindow
ShowWindow
GetActiveWindow
DestroyMenu
LoadMenuA
LoadIconA
SetMenu
ReuseDDElParam
UnpackDDElParam
UpdateWindow
SetWindowTextA
GetKeyState
InvalidateRect
SendMessageA
SetForegroundWindow
BringWindowToTop
IntersectRect
LoadCursorA
SetCapture
WaitMessage
GetCursorPos
wsprintfA
WindowFromPoint
ClientToScreen
DispatchMessageA
TranslateMessage
GetMessageA
DefFrameProcA
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
RedrawWindow
LoadBitmapA
InflateRect
PtInRect
ReleaseDC
InvertRect
GetWindowDC
OffsetRect
FillRect
KillTimer
LoadStringA
SetTimer
GetDC
CreateDialogParamA
PostQuitMessage
SetParent
GetDCEx
LockWindowUpdate
GetTabbedTextExtentA
DrawTextA
GrayStringA
IsDlgButtonChecked
EndDialog
CreateDialogIndirectParamA
DialogBoxIndirectParamA
DialogBoxParamA
wvsprintfA
GetNextDlgTabItem
GetClassNameA
DrawFocusRect
SetDlgItemTextA
CallMsgFilterA
IsRectEmpty
MapDialogRect
DeleteMenu
GetSystemMenu
MoveWindow
RegisterWindowMessageA
BeginPaint
EndPaint
TabbedTextOutA
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
SetCursorPos
DestroyCursor
ScrollWindow
IsClipboardFormatAvailable
MessageBeep
RemoveMenu
ValidateRect
GetSystemMetrics
SetMessageQueue
ShowOwnedPopups
MessageBoxA
InsertMenuA
GetWindow
GetWindowLongA
IsWindowEnabled
GetWindowRect
OemToCharA
SetWindowLongA
SetWindowPos
CharUpperA
CharToOemA
IsIconic
IsWindowVisible
GetWindowThreadProcessId

shell32

DragQueryFileA
DragFinish

comdlg32

ChooseColorA
ChooseFontA
FindTextA
GetSaveFileNameA
GetFileTitleA
ReplaceTextA
CommDlgExtendedError
PrintDlgA
GetOpenFileNameA

advapi32

RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegSetValueA
RegOpenKeyExA
RegCloseKey
RegQueryValueA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Sections

.text
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Win95 OSR2 English/mfcans32.dll
.dll windows x86

8469b006a32202bc464c60a4efa8e8d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ole32

OleSaveToStream
CoUnmarshalInterface
CoMarshalInterface
OleLockRunning
OleConvertIStorageToOLESTREAM
OleConvertOLESTREAMToIStorage
CoRevokeClassObject
CoTaskMemFree
CreateDataCache
GetRunningObjectTable
SetConvertStg
GetConvertStg
OleDoAutoConvert
CreateStreamOnHGlobal
GetHGlobalFromStream
CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
OleRegEnumVerbs
OleRegEnumFormatEtc
OleRegGetUserType
OleMetafilePictFromIconAndLabel
OleGetIconOfClass
OleGetIconOfFile
CreateOleAdviseHolder
OleIsRunning
OleTranslateAccelerator
OleSetMenuDescriptor
OleIsCurrentClipboard
OleGetClipboard
OleSetClipboard
DoDragDrop
RegisterDragDrop
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateLink
OleCreateStaticFromData
OleCreateLinkFromData
ReleaseStgMedium
OleQueryCreateFromData
OleQueryLinkFromData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
WriteClassStm
ReadClassStm
WriteClassStg
ReadClassStg
OleSetContainedObject
OleRun
OleNoteObjectVisible
OleDraw
OleCreateDefaultHandler
CreateItemMoniker
CreateFileMoniker
GetClassFile
CreateGenericComposite
CreateBindCtx
MonikerCommonPrefixWith
MonikerRelativePathTo
MkParseDisplayName
BindMoniker
CreateDataAdviseHolder
StgSetTimes
StgIsStorageILockBytes
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfileOnILockBytes
StgCreateDocfile
StringFromIID
StringFromGUID2
StringFromCLSID
ProgIDFromCLSID
IIDFromString
CoDisconnectObject
CoLockObjectExternal
CoLoadLibrary
CoRegisterClassObject
CoGetClassObject
OleLoadFromStream
CLSIDFromString
OleCreateFromData
CoCreateInstance
CreateAntiMoniker
CreatePointerMoniker
OleCreate
RevokeDragDrop
CLSIDFromProgID
CoTaskMemAlloc

oleaut32

SysAllocString
SafeArrayDestroy
SysAllocStringLen
SafeArrayGetUBound
SafeArrayPutElement
SafeArrayCreate
LHashValOfNameSys
GetActiveObject
SafeArrayDestroyData
VarBstrFromR8
VarI2FromStr
VarI4FromStr
VarI2FromDisp
SafeArrayUnlock
SafeArrayGetElement
SafeArrayGetDim
CreateDispTypeInfo
RegisterActiveObject
CreateStdDispatch
DispGetParam
DispInvoke
LHashValOfNameSysA
CreateTypeLi
RegisterTypeLi
QueryPathOfRegTypeLi
LoadRegTypeLi
LoadTypeLi
VarBoolFromDisp
VarBoolFromStr
VarBstrFromBool
VarBstrFromDisp
VarBstrFromDate
VarBstrFromCy
SafeArrayAllocData
VarBstrFromR4
VarBstrFromI4
VarBstrFromI2
VarBstrFromUI1
VarCyFromDisp
VarCyFromStr
VarDateFromDisp
VarDateFromStr
VarR8FromDisp
VarR8FromStr
VarR4FromDisp
VarR4FromStr
VarI4FromDisp
VarUI1FromDisp
VarUI1FromStr
VariantChangeTypeEx
VariantChangeType
CreateErrorInfo
GetErrorInfo
SetErrorInfo
SafeArrayCopy
SysFreeString
SysStringByteLen
SysStringLen
SysAllocStringByteLen
VariantCopy
VariantCopyInd
VariantInit
VariantClear
SafeArrayAllocDescriptor
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayLock
SafeArrayDestroyDescriptor
SafeArrayRedim
SafeArrayGetElemsize
DispGetIDsOfNames
SafeArrayGetLBound

kernel32

InitializeCriticalSection
InterlockedIncrement
LoadLibraryA
GetProcAddress
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WideCharToMultiByte
GetLocaleInfoA
lstrlenA
MultiByteToWideChar
InterlockedDecrement
DisableThreadLibraryCalls
TlsFree
DeleteCriticalSection
lstrcmpiA
TlsSetValue
TlsAlloc
GetVersion
EnterCriticalSection
LeaveCriticalSection
lstrcpyA
lstrcatA
TlsGetValue
FreeLibrary
LocalFree
LocalAlloc

user32

SetPropA
RegisterClipboardFormatA
GetPropA

advapi32

RegQueryValueA

Exports

Exports

BindMoniker
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoDisconnectObject
CoGetClassObject
CoLoadLibrary
CoLockObjectExternal
CoMarshalInterface
CoRegisterClassObject
CoRevokeClassObject
CoUnmarshalInterface
ConvertExcepInfoToA
ConvertExcepInfoToW
CreateAntiMoniker
CreateBindCtx
CreateDataAdviseHolder
CreateDataCache
CreateDispTypeInfo
CreateErrorInfo
CreateFileMoniker
CreateGenericComposite
CreateILockBytesOnHGlobal
CreateItemMoniker
CreateOleAdviseHolder
CreatePointerMoniker
CreateStdDispatch
CreateStreamOnHGlobal
CreateTypeLib
DispGetIDsOfNames
DispGetIDsOfNamesW
DispGetParam
DispInvoke
DispInvokeW
DoDragDrop
GetActiveObject
GetClassFile
GetConvertStg
GetErrorInfo
GetHGlobalFromILockBytes
GetHGlobalFromStream
GetRunningObjectTable
IIDFromString
LHashValOfNameSys
LHashValOfNameSysW
LoadRegTypeLib
LoadTypeLib
LoadTypeLibW
MkParseDisplayName
MonikerCommonPrefixWith
MonikerRelativePathTo
Ole2AnsiAFromW
Ole2AnsiDispAFromW
Ole2AnsiDispWFromA
Ole2AnsiGetFlags
Ole2AnsiSetFlags
Ole2AnsiSetHashSizes
Ole2AnsiVariantAFromW
Ole2AnsiVariantWFromA
Ole2AnsiWFromA
OleConvertIStorageToOLESTREAM
OleConvertOLESTREAMToIStorage
OleCreate
OleCreateDefaultHandler
OleCreateFontIndirect
OleCreateFromData
OleCreateFromFile
OleCreateLink
OleCreateLinkFromData
OleCreateLinkToFile
OleCreatePropertyFrame
OleCreatePropertyFrameIndirect
OleCreateStaticFromData
OleDoAutoConvert
OleDraw
OleGetClipboard
OleGetIconOfClass
OleGetIconOfFile
OleIsCurrentClipboard
OleIsRunning
OleLoad
OleLoadFromStream
OleLockRunning
OleMetafilePictFromIconAndLabel
OleNoteObjectVisible
OleQueryCreateFromData
OleQueryLinkFromData
OleRegEnumFormatEtc
OleRegEnumVerbs
OleRegGetUserType
OleRun
OleSave
OleSaveToStream
OleSetClipboard
OleSetContainedObject
OleSetMenuDescriptor
OleTranslateAccelerator
ProgIDFromCLSID
QueryPathOfRegTypeLib
ReadClassStg
ReadClassStm
ReadFmtUserTypeStg
RegisterActiveObject
RegisterDragDrop
RegisterTypeLib
RegisterTypeLibW
ReleaseStgMedium
RevokeDragDrop
SafeArrayAccessData
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayCreate
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayGetDim
SafeArrayGetElement
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayLock
SafeArrayPutElement
SafeArrayRedim
SafeArrayUnaccessData
SafeArrayUnlock
SetConvertStg
SetErrorInfo
StgCreateDocfile
StgCreateDocfileOnILockBytes
StgIsStorageFile
StgIsStorageILockBytes
StgOpenStorage
StgOpenStorageOnILockBytes
StgSetTimes
StringFromCLSID
StringFromGUID2
StringFromIID
SysAllocString
SysAllocStringA
SysAllocStringLen
SysAllocStringLenA
SysAllocStringLenW
SysAllocStringW
SysFreeString
SysReAllocString
SysReAllocStringA
SysReAllocStringLen
SysReAllocStringLenA
SysStringLen
SysStringLenA
VarBoolFromDisp
VarBoolFromStr
VarBstrFromBool
VarBstrFromCy
VarBstrFromDate
VarBstrFromDisp
VarBstrFromI2
VarBstrFromI4
VarBstrFromR4
VarBstrFromR8
VarBstrFromUI1
VarCyFromDisp
VarCyFromStr
VarDateFromDisp
VarDateFromStr
VarI2FromDisp
VarI2FromStr
VarI4FromDisp
VarI4FromStr
VarR4FromDisp
VarR4FromStr
VarR8FromDisp
VarR8FromStr
VarUI1FromDisp
VarUI1FromStr
VariantChangeType
VariantChangeTypeEx
VariantChangeTypeW
VariantClear
VariantCopy
VariantCopyInd
VariantInit
WrapIDispatchAFromW
WrapIDispatchWFromA
WrapIStorageAFromW
WrapIStorageWFromA
WrapIUnknownAFromW
WrapIUnknownWFromA
WriteClassStg
WriteClassStm
WriteFmtUserTypeStg

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.olebrk
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Win95 OSR2 English/mfco30.dll
.dll windows x86

280b1914ec8ff0ddb23ef1647edb9217

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

mfcuia32

ord7
ord5
ord9
ord3
ord4
ord6
ord1
ord8

mfcans32

ord4
ord54
ord28
ord47
ord46
ord108
ord149
ord10
ord65
ord70
ord31
ord51
ord67
ord150
ord8
ord45
ord148
ord43
ord44
ord17
ord13
ord40
ord38
ord30
ord64
ord151
ord1
ord20
ord107
ord110
ord112
ord142
ord137
ord114
ord139
ord109
ord140
ord66
ord29
ord56
ord193
ord73
ord22
ord23
ord75
ord61
ord62
ord24
ord26
ord27
ord14
ord55
ord18
ord57
ord42
ord152
ord33
ord36
ord71
ord41
ord39
ord48
ord21

mfc30

ord1704
ord930
ord1876
ord615
ord1908
ord1459
ord1659
ord680
ord1480
ord472
ord1169
ord1604
ord2173
ord635
ord1982
ord895
ord432
ord1342
ord1047
ord1972
ord1073
ord831
ord638
ord2077
ord1289
ord1394
ord1290
ord696
ord375
ord577
ord1782
ord416
ord1777
ord1059
ord722
ord601
ord1953
ord703
ord1494
ord1456
ord1067
ord1743
ord298
ord588
ord400
ord579
ord604
ord2145
ord888
ord1522
ord900
ord1794
ord1397
ord558
ord1499
ord1421
ord1888
ord420
ord1201
ord1481
ord1123
ord1800
ord1485
ord1816
ord535
ord312
ord1043
ord1044
ord1140
ord526
ord1708
ord1507
ord1113
ord1748
ord1745
ord1071
ord871
ord1424
ord981
ord830
ord752
ord519
ord690
ord1844
ord1343
ord1363
ord271
ord759
ord393
ord1196
ord1475
ord1690
ord560
ord1663
ord1652
ord364
ord573
ord598
ord1925
ord2139
ord2023
ord993
ord544
ord295
ord330
ord437
ord410
ord1568
ord1120
ord2063
ord1093
ord1151
ord1467
ord1907
ord662
ord923
ord906
ord1072
ord1070
ord1087
ord685
ord583
ord587
ord622
ord899
ord288
ord910
ord1183
ord564
ord405
ord619
ord1368
ord554
ord642
ord597
ord973
ord1807
ord1791
ord586
ord1479
ord1118
ord1806
ord1814
ord2127
ord1796
ord1098
ord683
ord576
ord1358
ord695
ord302
ord1222
ord1193
ord716
ord594
ord1061
ord898
ord454
ord305
ord356
ord2006
ord562
ord641
ord972
ord958
ord474
ord665
ord574
ord1040
ord584
ord1276
ord1159
ord1275
ord2076
ord1420
ord590
ord281
ord369
ord460
ord1178
ord1346
ord1333
ord325
ord580
ord1008
ord2134
ord988
ord617
ord1838
ord614
ord873
ord605
ord602
ord1567
ord1115
ord268
ord656
ord608
ord1158
ord2104
ord1041
ord1292
ord2000
ord866
ord331
ord932
ord438
ord1391
ord285
ord793
ord450
ord403
ord1478
ord1569
ord1078
ord1103
ord1506
ord1102
ord821
ord893
ord1798
ord870
ord1257
ord2129
ord1488
ord1656
ord1272
ord1813
ord2126
ord869
ord1792
ord1471
ord1344
ord838
ord1352
ord1848
ord644
ord1340
ord915
ord1476
ord890
ord952
ord553
ord1466
ord1096

msvcrt20

_mbscmp
_mbschr
realloc
_strdup
free
__p__mbctype
?terminate@@YAXXZ
_purecall
_CxxThrowException
_mbsnbcmp
memmove
memcpy
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
_adjust_fdiv
_initterm
malloc
memset
memcmp

kernel32

DisableThreadLibraryCalls
GetVersion
lstrcpyA
GlobalSize
lstrcmpA
GetCurrentThreadId
GetTickCount
EnterCriticalSection
GetProfileIntA
LeaveCriticalSection
lstrcmpiA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrlenA

gdi32

SetBrushOrgEx
GetWindowExtEx
CreateMetaFileA
DeleteMetaFile
DeleteDC
CloseMetaFile
GetWindowOrgEx
CreateDCA
CopyMetaFileA

user32

GetDlgCtrlID
GetMenuState
ClientToScreen
GetParent
ClipCursor
SendMessageA
SetRectEmpty
wsprintfA
IsWindowEnabled
GetWindowLongA
CopyAcceleratorTableA
GetWindowRect
GetClientRect
IsRectEmpty
IntersectRect
DefWindowProcA
IsWindow
PostMessageA
CopyRect
SetRect
IsClipboardFormatAvailable
EnableWindow
InSendMessage
ReleaseCapture
InflateRect
GetCursorPos
PeekMessageA
SetCapture
DispatchMessageA
PostThreadMessageA
DestroyMenu
GetDlgItem
CreateMenu
InsertMenuA
GetMenuItemID
GetMenuItemCount
GetMenuStringA
ScreenToClient
GetSubMenu
RemoveMenu
IsWindowVisible
SetForegroundWindow
GetLastActivePopup
SetActiveWindow
ShowWindow
SetScrollRange
GetFocus
SetParent
DestroyIcon
DeleteMenu
PtInRect
GetCapture
RegisterClipboardFormatA
SetFocus
GetActiveWindow
UpdateWindow

shell32

ExtractIconA

advapi32

RegQueryValueA
RegOpenKeyA
RegSetValueA
RegCloseKey

ole32

OleUninitialize
IsAccelerator
OleInitialize
OleRegGetMiscStatus
CoGetMalloc
OleFlushClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleDuplicateData
CoTreatAsClass

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 184B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Win95 OSR2 English/mfcuia32.dll
.dll windows x86

b5db0742870099e986261953021b54d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oledlg

ord10
ord7
ord11
ord3
ord4
ord5
ord2
ord12
ord6
ord9
ord8
ord1

mfcans32

ord143
ord144

kernel32

IsBadReadPtr
IsBadWritePtr

Exports

Exports

OleUIAddVerbMenu
OleUIBusy
OleUICanConvertOrActivateAs
OleUIChangeIcon
OleUIChangeSource
OleUIConvert
OleUIEditLinks
OleUIInsertObject
OleUIObjectProperties
OleUIPasteSpecial
OleUIPromptUser
OleUIUpdateLinks

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 381B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Win95 OSR2 English/mspaint.exe
.exe windows x86

33fab4e98f6442852dffc969baf12414

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc30

ord1794
ord1941
ord724
ord268
ord2073
ord1335
ord1047
ord2031
ord756
ord1413
ord1823
ord470
ord389
ord607
ord2060
ord1260
ord2036
ord1069
ord579
ord1386
ord946
ord1215
ord2107
ord1158
ord1040
ord637
ord889
ord1582
ord1591
ord981
ord1424
ord871
ord1071
ord1745
ord1748
ord1507
ord1708
ord526
ord1140
ord1044
ord1043
ord1225
ord572
ord1485
ord1800
ord1481
ord1726
ord1472
ord1921
ord703
ord1397
ord1113
ord1849
ord1363
ord1816
ord420
ord312
ord808
ord1499
ord1727
ord2167
ord2166
ord1087
ord906
ord1467
ord1151
ord1093
ord2063
ord1568
ord518
ord1004
ord364
ord923
ord615
ord1196
ord393
ord616
ord522
ord759
ord271
ord302
ord1193
ord973
ord642
ord1343
ord922
ord1743
ord1494
ord1589
ord619
ord1522
ord1554
ord1713
ord1701
ord2162
ord2114
ord1774
ord1564
ord1412
ord1516
ord928
ord908
ord1920
ord1299
ord550
ord1345
ord1837
ord874
ord1111
ord1828
ord1832
ord1821
ord1915
ord1251
ord1115
ord1567
ord1198
ord467
ord384
ord554
ord531
ord2041
ord357
ord597
ord2029
ord982
ord2128
ord1599
ord598
ord1559
ord1711
ord1459
ord1659
ord911
ord1195
ord306
ord1280
ord577
ord1560
ord515
ord752
ord1411
ord1449
ord1551
ord1737
ord1535
ord1528
ord1529
ord1527
ord1694
ord1692
ord1806
ord1814
ord1256
ord655
ord1813
ord2126
ord1805
ord726
ord919
ord833
ord920
ord1164
ord1458
ord1676
ord1683
ord1505
ord1525
ord1453
ord1483
ord1359
ord1456
ord280
ord965
ord1562
ord1563
ord437
ord330
ord544
ord1876
ord993
ord930
ord683
ord644
ord329
ord1976
ord1955
ord1176
ord398
ord2042
ord279
ord1061
ord536
ord1313
ord999
ord1316
ord744
ord1408
ord1740
ord1804
ord458
ord360
ord2021
ord1156
ord2009
ord818
ord1645
ord647
ord1947
ord649
ord1706
ord1157
ord917
ord979
ord1106
ord2022
ord1723
ord435
ord2044
ord617
ord1356
ord1423
ord840
ord865
ord995
ord1063
ord2118
ord845
ord859
ord847
ord860
ord749
ord686
ord2132
ord1987
ord618
ord1108
ord879
ord770
ord1384
ord944
ord1469
ord1139
ord1180
ord401
ord899
ord638
ord1410
ord1294
ord1107
ord1477
ord918
ord1741
ord648
ord464
ord381
ord1988
ord1360
ord820
ord1738
ord645
ord406
ord291
ord803
ord693
ord1191
ord413
ord2133
ord805
ord1986
ord684
ord1064
ord1931
ord2071
ord1928
ord2065
ord1442
ord2068
ord2012
ord1910
ord1922
ord1859
ord1857
ord2018
ord1981
ord1118
ord1791
ord1807
ord416
ord1041
ord760
ord305
ord1777
ord1166
ord1167
ord1367
ord2140
ord2141
ord564
ord909
ord283
ord1839
ord2135
ord1172
ord1222
ord369
ord1368
ord1388
ord460
ord584
ord1346
ord2127
ord1796
ord910
ord1704
ord1660
ord1460
ord1392
ord275
ord1617
ord331
ord438
ord866
ord1391
ord285
ord403
ord1181
ord1478
ord1569
ord1078
ord1103
ord1506
ord1102
ord821
ord893
ord1798
ord656
ord1257
ord2129
ord1488
ord1656
ord1272
ord385
ord468
ord1914
ord399
ord365
ord516
ord1913
ord1355
ord511
ord958
ord474
ord269
ord472
ord621
ord1270
ord1862
ord1906
ord1512
ord1628
ord1533
ord288
ord1604
ord1183
ord405
ord903
ord1479
ord964
ord869
ord1792
ord1471
ord1344
ord870
ord1352
ord1848
ord1340
ord915
ord838
ord1476
ord890
ord1950
ord1945
ord1946
ord1771
ord1038
ord2052
ord1984
ord895
ord896
ord1949
ord635
ord1039
ord1943
ord878
ord287
ord404
ord1235
ord881
ord1057
ord1858
ord517
ord366
ord1889
ord636
ord1202
ord1174
ord466
ord383
ord1347
ord1795
ord523
ord2146

msvcrt20

memcmp
_mkdir
_controlfp
??3@YAXPAX@Z
_stat
_mbscmp
free
_getdcwd
memcpy
memset
abs
rand
_purecall
_CxxThrowException
__p___argc
__p___argv
_mbsicmp
atoi
strncpy
_itoa
__dllonexit
_onexit
?terminate@@YAXXZ
_exit
_XcptFilter
exit
__p__acmdln
_initterm
__getmainargs
_adjust_fdiv
__p__commode
__p__fmode
_except_handler3
??2@YAPAXI@Z
_splitpath
__CxxFrameHandler

kernel32

GetModuleHandleA
GetVersion
GetStartupInfoA
GlobalHandle
GlobalLock
Sleep
RtlMoveMemory
FreeLibrary
GlobalUnlock
GetProcAddress
lstrcpyA
LoadLibraryA
lstrcmpA
GetTickCount
MulDiv
FindClose
GetModuleFileNameA
FindFirstFileA
GetLastError
GetFileAttributesA
GetShortPathNameA
GlobalFree
SetErrorMode
lstrcmpiA
GetTempPathA
GetTempFileNameA
IsDBCSLeadByte
lstrlenA
lstrcatA

user32

GrayStringA
GetParent
MessageBoxA
wvsprintfA
GetSysColor
ReleaseDC
GetDC
SetRectEmpty
UpdateWindow
ShowWindow
PtInRect
SetRect
InflateRect
FillRect
GetClientRect
GetCapture
FrameRect
InvalidateRect
OffsetRect
EnableWindow
GetDlgItem
SetDlgItemInt
CheckDlgButton
SetFocus
GetDlgItemInt
GetWindowTextLengthA
DrawFocusRect
CopyRect
SendMessageA
CharNextA
CharUpperA
IntersectRect
WindowFromPoint
ScreenToClient
GetCursorPos
IsWindow
LoadBitmapA
UnionRect
GetKeyState
IsRectEmpty
MessageBeep
OpenClipboard
GetClipboardData
CloseClipboard
IsClipboardFormatAvailable
DestroyWindow
SetTimer
TabbedTextOutA
EnableScrollBar
CheckMenuItem
GetCaretPos
RedrawWindow
ValidateRect
GetUpdateRect
DrawTextA
SetDlgItemTextA
CheckRadioButton
WinHelpA
GetWindowDC
MoveWindow
GetMenu
IsMenu
EnableMenuItem
SetWindowTextA
DestroyIcon
SystemParametersInfoA
wsprintfA
IsWindowVisible
SetWindowPlacement
GetWindowPlacement
GetClassInfoA
LoadIconA
RegisterClassA
SetWindowPos
RegisterClipboardFormatA
PostMessageA
GetSystemMenu
RemoveMenu
GetWindowRect
LoadMenuA
GetSubMenu
ClientToScreen
SetCapture
ReleaseCapture
GetFocus
SetActiveWindow
BringWindowToTop
LoadCursorA
SetCursor
GetSystemMetrics
GetWindowLongA
EqualRect
KillTimer

gdi32

CreateBitmap
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
RealizePalette
SelectPalette
FillRgn
GetStockObject
PatBlt
SetDIBColorTable
GetDIBColorTable
SetTextColor
SetBkColor
Rectangle
SelectObject
CreateDIBSection
GetDeviceCaps
DeleteObject
DeleteDC
CreatePalette
CreateHalftonePalette
GetDIBits
GetObjectA
CreateDIBitmap
GetNearestColor
StretchDIBits
SetPixel
LineTo
MoveToEx
CreatePen
OffsetRgn
Polygon
Ellipse
GetPixel
StretchBlt
SetStretchBltMode
GetPaletteEntries
RoundRect
SetBrushOrgEx
ExtFloodFill
EnumFontFamiliesExA
CreatePolygonRgn
GetNearestPaletteIndex
CreateFontIndirectA
CreateDCA
GetTextExtentPointA
GetTextMetricsA
CreateICA
CreateRectRgnIndirect
ExtTextOutA
SetTextAlign
SetBkMode
Polyline
SetROP2
PolyBezier
CreateSolidBrush
EnumFontFamiliesA
PtVisible
RectVisible
TextOutA
Escape
SetDIBits
SetPaletteEntries
ResizePalette
RestoreDC
SetMapMode
LPtoDP
SaveDC
PlayMetaFile
SetViewportExtEx
CreatePatternBrush

advapi32

RegSetValueExA
RegSetValueA
RegCreateKeyA
RegCloseKey
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
RegEnumKeyA

shell32

ExtractIconA
ShellAboutA
DragAcceptFiles

mfco30

ord786
ord432
ord831
ord834
ord266
ord542
ord797
ord856
ord813
ord851
ord792
ord283
ord460
ord459
ord318
ord785
ord592
ord701
ord870
ord776
ord771
ord846
ord790
ord820
ord880
ord801
ord828
ord850
ord608
ord844
ord412
ord314
ord363
ord360
ord362
ord422
ord980
ord979
ord934
ord285
ord647
ord590
ord758
ord765
ord858
ord886
ord284
ord451
ord1054
ord417
ord369
ord323
ord421
ord319
ord523
ord520
ord522
ord795
ord987
ord388
ord965
ord842
ord815
ord808
ord282
ord317
ord751
ord1027
ord464
ord750
ord560
ord559
ord889
ord798
ord659
ord620
ord331
ord962
ord631
ord862
ord612
ord547
ord440
ord935
ord873
ord746
ord852
ord859
ord762
ord853
ord821
ord787
ord809
ord816
ord843
ord693
ord725
ord411
ord864
ord966
ord754
ord433
ord930
ord275
ord281
ord272
ord307
ord316
ord310
ord890
ord714
ord929
ord756
ord855
ord382
ord466
ord578
ord835
ord723
ord405
ord753
ord872
ord740
ord731
ord570
ord837
ord769
ord465

mfcans32

ord10
ord31
ord65

Sections

.text
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Win95 OSR2 English/mspaint.hlp

Sharing

General

Malware Config

Signatures

Files

b8d7d0b8abe152e7e664f67290552bda

Headers

File Characteristics

Imports

msvcrt20

kernel32

gdi32

user32

shell32

comdlg32

advapi32

winspool.drv

Sections

.text Size: 216KB - Virtual size: 216KB

.bss Size: - Virtual size: 4KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 5KB - Virtual size: 5KB

.idata Size: 11KB - Virtual size: 10KB

.edata Size: 8KB - Virtual size: 7KB

.rsrc Size: 23KB - Virtual size: 23KB

.reloc Size: 17KB - Virtual size: 17KB

8469b006a32202bc464c60a4efa8e8d3

Headers

File Characteristics

Imports

ole32

oleaut32

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.orpc Size: 97KB - Virtual size: 97KB

.olebrk Size: 512B - Virtual size: 1B

.bss Size: - Virtual size: 3KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 610B

.idata Size: 4KB - Virtual size: 4KB

.edata Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 952B

.reloc Size: 7KB - Virtual size: 7KB

280b1914ec8ff0ddb23ef1647edb9217

Headers

File Characteristics

Imports

mfcuia32

mfcans32

mfc30

msvcrt20

kernel32

gdi32

user32

shell32

advapi32

ole32

Sections

.text Size: 86KB - Virtual size: 86KB

.bss Size: - Virtual size: 184B

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 1KB - Virtual size: 1KB

.idata Size: 6KB - Virtual size: 5KB

.edata Size: 3KB - Virtual size: 3KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 7KB

b5db0742870099e986261953021b54d3

Headers

File Characteristics

Imports

oledlg

mfcans32

kernel32

Exports

Exports

.text
Size: 216KB - Virtual size: 216KB

.bss
Size: - Virtual size: 4KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 5KB - Virtual size: 5KB

.idata
Size: 11KB - Virtual size: 10KB

.edata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 17KB - Virtual size: 17KB

.text
Size: 3KB - Virtual size: 3KB

.orpc
Size: 97KB - Virtual size: 97KB

.olebrk
Size: 512B - Virtual size: 1B

.bss
Size: - Virtual size: 3KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 610B

.idata
Size: 4KB - Virtual size: 4KB

.edata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 952B

.reloc
Size: 7KB - Virtual size: 7KB

.text
Size: 86KB - Virtual size: 86KB

.bss
Size: - Virtual size: 184B

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 1KB - Virtual size: 1KB

.idata
Size: 6KB - Virtual size: 5KB

.edata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 2KB - Virtual size: 1KB

.idata
Size: 512B - Virtual size: 324B

.edata
Size: 512B - Virtual size: 381B

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 512B - Virtual size: 92B

.text
Size: 182KB - Virtual size: 181KB

.bss
Size: - Virtual size: 3KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 5KB - Virtual size: 4KB

.idata
Size: 10KB - Virtual size: 10KB

.edata
Size: 512B - Virtual size: 52B

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 22KB - Virtual size: 22KB