Fastman92_limit_adjuster by LaSKiMods[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

Fastman92_limit_adjuster by LaSKiMods.rar
Size

9.0MB
MD5

740b41dd505b2fbc67669016103edb9e
SHA1

ab2bfd2a7d9345807917f6efa4b4117182007f12
SHA256

9c7b415a243fdd97df013186a48a1b202f337da9aeb01d6945a4fda4b80fa069
SHA512

8f9b6ea6146196850e6d8bfe93e8bc6594e7e7bd9b16f8d1a3ddcb4f042437216c0b66561553ea5d14b09742b8a971d77e48e5fd5685534dcbbe2618a5d1f340
SSDEEP

196608:4a5UGldbMK/ED1lVPnHxSykUNsmYyvDOclGIU3TzrsDOfLU:F/yD9PnHxSykiSizqjsDOg

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with macros.

macro

resource
static1/unpack001/Fastman92_limit_adjuster by LaSKiMods/(documentation)/Documentation.xlsm

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/$fastman92limitAdjuster.asi
unpack001/Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/DllTricks.dll
unpack001/Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/III.VC.SA.LimitAdjuster.asi
unpack001/Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/MinHook.x86.dll
unpack001/Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/zlib1.dll

Office document contains embedded OLE objects 1 IoCs

Detected embedded OLE objects in Office documents.

resource	yara_rule
static1/unpack001/Fastman92_limit_adjuster by LaSKiMods/(documentation)/Documentation.docx	office_ole_embedded

Files

Fastman92_limit_adjuster by LaSKiMods.rar
.rar

Password: sdada
Fastman92_limit_adjuster by LaSKiMods/(documentation)/Documentation.csv
Fastman92_limit_adjuster by LaSKiMods/(documentation)/Documentation.docx
.docx office2007
Fastman92_limit_adjuster by LaSKiMods/(documentation)/Documentation.xlsm
.xlsm office2007

Ten_skoroszyt

Arkusz1

Arkusz2

Arkusz3

Arkusz4

Module1

Arkusz5

Ten_skoroszyt1

Features

SectionNames

SupportOptions

Informations

Internal

ThisWorkbook
Fastman92_limit_adjuster by LaSKiMods/(documentation)/paths/GTA San Andreas/path_grid_12000.txt
Fastman92_limit_adjuster by LaSKiMods/(documentation)/paths/GTA San Andreas/path_grid_24000.txt
Fastman92_limit_adjuster by LaSKiMods/(documentation)/paths/GTA San Andreas/path_grid_48000.txt
Fastman92_limit_adjuster by LaSKiMods/(documentation)/paths/GTA San Andreas/path_grid_6000.txt
Fastman92_limit_adjuster by LaSKiMods/(documentation)/radar/GTA San Andreas/radar_grid_12000.txt
Fastman92_limit_adjuster by LaSKiMods/(documentation)/radar/GTA San Andreas/radar_grid_24000.txt
Fastman92_limit_adjuster by LaSKiMods/(documentation)/radar/GTA San Andreas/radar_grid_48000.txt
Fastman92_limit_adjuster by LaSKiMods/(documentation)/radar/GTA San Andreas/radar_grid_6000.txt
Fastman92_limit_adjuster by LaSKiMods/(documentation)/radar/GTA San Andreas/radar_grid_6000.xls
.xls windows office2003
Fastman92_limit_adjuster by LaSKiMods/(documentation)/~$Documentation.xlsm
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/$fastman92limitAdjuster.asi
.dll windows x86

3e0ad200cd70bec346742c50b1b904a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
VirtualProtect
GetModuleHandleA
GetProcAddress
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
HeapAlloc
HeapFree
GetProcessHeap
LockResource
LoadResource
SizeofResource
GetSystemTime
FindResourceA
GetTempPathA
GetTempFileNameA
OutputDebugStringA
ExitProcess
GetModuleFileNameW
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GetCurrentDirectoryA
VirtualAlloc
VirtualQuery
GetSystemInfo
GetCurrentThread
GetCurrentProcess
GetCurrentProcessId
SetUnhandledExceptionFilter
GetCurrentThreadId
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetModuleFileNameA
CreateToolhelp32Snapshot
Module32First
GetVolumeInformationA
CreateThread
SetThreadPriority
GetThreadPriority
ResumeThread
FindClose
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreA
FlushInstructionCache
WideCharToMultiByte
HeapSize
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
SetEndOfFile
SetStdHandle
GetFullPathNameW
HeapReAlloc
DecodePointer
GetTimeZoneInformation
DeleteFileW
FindNextFileA
FindFirstFileA
GetFileAttributesW
GetFileAttributesA
CreateFileW
CreateFileA
GetFullPathNameA
GetCurrentDirectoryW
SetCurrentDirectoryW
SetCurrentDirectoryA
Module32Next
CloseHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
LCMapStringW
PeekNamedPipe
GetFileType
GetDriveTypeW
SetFilePointerEx
SetFilePointer
CompareStringW
GetTimeFormatW
GetDateFormatW
FlushFileBuffers
DeleteCriticalSection
GetFileSizeEx
QueryPerformanceFrequency
LoadLibraryExW
FreeLibrary
TlsFree
GetStringTypeW
GetACP
GetConsoleCP
ReadConsoleW
GetConsoleMode
GetStdHandle
MultiByteToWideChar
GetLastError
WriteFile
ReadFile
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
InterlockedCompareExchange
SetThreadContext
GetThreadContext
VirtualFree
SuspendThread
SetLastError
RaiseException
RtlUnwind
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
GetModuleHandleExW

user32

GetDlgItem
GetDlgCtrlID
EndDialog
DialogBoxParamA
PostMessageA
SetFocus
UpdateWindow
CreateIconIndirect
GetDC
ShowCursor
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
SetWindowLongA
GetWindowLongA
MessageBoxW
MessageBoxA
ReleaseDC
LoadBitmapA
GetSysColorBrush
MapWindowPoints
GetClientRect
SetWindowTextA
InvalidateRect
EndPaint
BeginPaint
SendMessageA

gdi32

GetObjectA
SetTextColor
SetDIBits
SetBkMode
SelectObject
GetDIBits
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt

shell32

SHCreateDirectoryExA
ShellExecuteA

psapi

GetModuleInformation
EnumProcessModules

comctl32

ord17

winmm

PlaySoundA

shlwapi

PathFindFileNameW

dlltricks

?GetAddressToCallDllMain@CTheDllTricks@@SAP6G_NPAP6G_NPAUHINSTANCE__@@KPAX@Z0K1@ZXZ

minhook.x86

MH_Initialize
MH_CreateHook
MH_EnableHook

zlib1

deflate
deflateEnd
compressBound
uncompress
deflateInit_
deflateInit2_
crc32

Exports

Exports

AreDifficultIDsExtended
AreVehicleColourIDsExtended
DoModLoaderAction
GetCountOfWeaponInfos
GetExtendedIDfrom16bitBefore
GetExtendedIDfrom8bitBefore
GetFileInfoNextFileID
GetFileInfoNextOnCDfileID
GetFileInfoPrevFileID
GetNumberOfFileIDs
GetNumberOfWeaponTypes
GetOffset_CRealTimeShadowManager_m_realTimeShadowPool
GetProjectVersion
GetWeaponHighestParentType
GetWeaponName
IsCLEOloadingImplementedByTheFLA
IsHandlingOfEnhancedIMGarchivesEnabled
LoadCdDirectoryInGTASA
LoadVehicleAudioSettings
SetCdStreamReleaseChannelfUsedByTheFLA
SetExtendedIDfrom16bitBefore
SetExtendedIDfrom8bitBefore
SetFileInfoNextFileID
SetFileInfoNextOnCDfileID
SetFileInfoPrevFileID
SetVehicleAudioSettingsPath

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/$fastman92limitAdjuster.exp
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/$fastman92limitAdjuster.lib
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/DllTricks.dll
.dll windows x86

ced6361aa3022de7f221a9c36098872c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetCurrentThreadId
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetLastError
InterlockedDecrement
GetProcAddress
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
LoadLibraryW
WriteFile
GetModuleFileNameW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
IsProcessorFeaturePresent

Exports

Exports

??4CTheDllTricks@@QAEAAV0@ABV0@@Z
?GetAddressToCallDllMain@CTheDllTricks@@SAP6G_NPAP6G_NPAUHINSTANCE__@@KPAX@Z0K1@ZXZ
?SearchForCallDllMain@CTheDllTricks@@SAP6G_NPAP6G_NPAUHINSTANCE__@@KPAX@Z0K1@ZPBXK@Z
?ms_callDllMainSearchSequenceArray@CTheDllTricks@@2QBUtSearchSequence@@B

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/III.VC.SA.LimitAdjuster.asi
.dll windows x86

2f5de5e178005e138427404005f708ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetModuleHandleA
GlobalMemoryStatusEx
WriteConsoleW
SetEndOfFile
ReadConsoleW
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
GetStdHandle
GetFileType
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
CreateFileW
SetFilePointerEx
HeapSize
HeapReAlloc
ReadFile
DecodePointer

user32

GetKeyState
MessageBoxA

Sections

.text
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/III.VC.SA.LimitAdjuster.ini
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/MinHook.x86.dll
.dll windows x86

85a26041791008113da06a95556027fe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadContext
HeapReAlloc
SetThreadContext
HeapAlloc
GetCurrentProcess
HeapFree
GetModuleHandleW
Thread32First
Sleep
HeapDestroy
HeapCreate
Thread32Next
FlushInstructionCache
GetProcAddress
OpenThread
VirtualProtect
CreateToolhelp32Snapshot
GetCurrentThreadId
CloseHandle
GetCurrentProcessId
SuspendThread
ResumeThread
VirtualQuery
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind

Exports

Exports

MH_ApplyQueued
MH_CreateHook
MH_CreateHookApi
MH_DisableHook
MH_EnableHook
MH_Initialize
MH_QueueDisableHook
MH_QueueEnableHook
MH_RemoveHook
MH_Uninitialize

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/data/Paths/gtasa_tracks_config.dat
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/data/cheatStrings.dat
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/data/gtasa_melee_config.dat
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/data/gtasa_radarBlipSpriteFilenames.dat
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/data/gtasa_trainTypeCarriages.dat
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/data/gtasa_vehicleAudioSettings.cfg
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/data/gtasa_weapon_config.dat
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/data/model_special_features.dat
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/fastman92limitAdjuster_GTASA.ini
Fastman92_limit_adjuster by LaSKiMods/Mover a Carpeta de GTA Sa/zlib1.dll
.dll windows x86

fd348b107c9a12537c4d666dc366ec5f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_close
_open
_read
_write
__dllonexit
__mb_cur_max
_amsg_exit
_errno
_initterm
_iob
_lock
_lseeki64
_onexit
_unlock
_vsnprintf
_wopen
abort
atoi
calloc
fputc
free
getenv
localeconv
malloc
memchr
memcpy
memset
setlocale
strchr
strerror
strlen
strncmp
wcslen
wcstombs

Exports

Exports

adler32
adler32_combine
adler32_combine64
compress
compress2
compressBound
crc32
crc32_combine
crc32_combine64
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePending
deflatePrime
deflateReset
deflateResetKeep
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
gzbuffer
gzclearerr
gzclose
gzclose_r
gzclose_w
gzdirect
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgetc_
gzgets
gzoffset
gzoffset64
gzopen
gzopen64
gzopen_w
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzseek64
gzsetparams
gztell
gztell64
gzungetc
gzvprintf
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateGetDictionary
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateResetKeep
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
uncompress
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fastman92_limit_adjuster by LaSKiMods/Readme (ORIGINAL).txt
Fastman92_limit_adjuster by LaSKiMods/Readme (or die).txt

Sharing

General

Malware Config

Signatures

Files

Password: sdada

Ten_skoroszyt

Arkusz1

Arkusz2

Arkusz3

Arkusz4

Module1

Arkusz5

Ten_skoroszyt1

Features

SectionNames

SupportOptions

Informations

Internal

ThisWorkbook

3e0ad200cd70bec346742c50b1b904a0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

psapi

comctl32

winmm

shlwapi

dlltricks

minhook.x86

zlib1

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 483KB - Virtual size: 483KB

.data Size: 127KB - Virtual size: 177KB

.rsrc Size: 8.9MB - Virtual size: 8.9MB

.reloc Size: 81KB - Virtual size: 80KB

ced6361aa3022de7f221a9c36098872c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 2KB - Virtual size: 1KB

2f5de5e178005e138427404005f708ac

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 316KB - Virtual size: 315KB

.rdata Size: 42KB - Virtual size: 41KB

.data Size: 3KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 18KB - Virtual size: 17KB

85a26041791008113da06a95556027fe

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 483KB - Virtual size: 483KB

.data
Size: 127KB - Virtual size: 177KB

.rsrc
Size: 8.9MB - Virtual size: 8.9MB

.reloc
Size: 81KB - Virtual size: 80KB

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 316KB - Virtual size: 315KB

.rdata
Size: 42KB - Virtual size: 41KB

.data
Size: 3KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 18KB - Virtual size: 17KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 604B

.text
Size: 76KB - Virtual size: 76KB

.data
Size: 512B - Virtual size: 128B

.rdata
Size: 19KB - Virtual size: 18KB

.bss
Size: - Virtual size: 3KB

.edata
Size: 2KB - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1024B - Virtual size: 900B

.reloc
Size: 2KB - Virtual size: 1KB