Mars_Explorer[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Mars_Explorer.zip
Size

7.7MB
MD5

e1109e629fda45b0aa875ba062b15eac
SHA1

c30982aa55b9251d87e07606c59b10d319d74dc9
SHA256

df1c2188742b8cd83d16cd059c6d72cd01e72efd3b48304735c254c292fa4398
SHA512

ec294739c6a65073d395f61d8c07022b312d4d9e0f187b6053ceb2ea6b55273243fbdaa16c5fa269eec2ad9076f6e4965d4d6806d2ce79ef9682c9733686481b
SSDEEP

196608:GpIWBCvWISFImpx/7x2g+Hwq/f8ML4t/5ETNI/S/IzygHrC3o:Gp7CvWoS7Ig+Qq/f8+4UpkSgzvLao

Score

3^/10

Malware Config

Signatures

Unsigned PE 20 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mars Explorer/Mars Explorer.exe
unpack001/Mars Explorer/Mars Explorer_Data/Assembly - CSharp - first pass.dll
unpack001/Mars Explorer/Mars Explorer_Data/Assembly - CSharp.dll
unpack001/Mars Explorer/Mars Explorer_Data/Assembly - UnityScript - first pass.dll
unpack001/Mars Explorer/Mars Explorer_Data/Assembly - UnityScript.dll
unpack001/Mars Explorer/Mars Explorer_Data/Ionic.Zlib.dll
unpack001/Mars Explorer/Mars Explorer_Data/TerrainControllerData.dll
unpack001/Mars Explorer/Mars Explorer_Data/lib/Boo.Lang.dll
unpack001/Mars Explorer/Mars Explorer_Data/lib/Mono.Security.dll
unpack001/Mars Explorer/Mars Explorer_Data/lib/System.Configuration.dll
unpack001/Mars Explorer/Mars Explorer_Data/lib/System.Core.dll
unpack001/Mars Explorer/Mars Explorer_Data/lib/System.Security.dll
unpack001/Mars Explorer/Mars Explorer_Data/lib/System.Xml.dll
unpack001/Mars Explorer/Mars Explorer_Data/lib/System.dll
unpack001/Mars Explorer/Mars Explorer_Data/lib/UnityDomainLoad.exe
unpack001/Mars Explorer/Mars Explorer_Data/lib/UnityEngine.dll
unpack001/Mars Explorer/Mars Explorer_Data/lib/UnityScript.Lang.dll
unpack001/Mars Explorer/Mars Explorer_Data/lib/mscorlib.dll
unpack001/Mars Explorer/Mars Explorer_Data/unity/mono-1-vc.dll
unpack001/Mars Explorer/Uninstall.exe

Files

Mars_Explorer.zip
.zip
Mars Explorer/Mars Explorer.exe
.exe windows x86

4ed78ea335cf44d2476429c204fc5ca0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetFileSize
WriteFile
FindClose
DeleteFileW
RemoveDirectoryW
SetFileAttributesW
FindNextFileW
FindFirstFileW
DeleteFileA
GetModuleFileNameW
CreateEventA
GetCurrentProcessId
lstrcpynA
lstrcpyA
lstrcpynW
LocalFree
GetCommandLineW
CreateFileW
ExpandEnvironmentStringsA
GetCurrentProcess
GetModuleHandleA
GetVersionExA
GetSystemInfo
GlobalMemoryStatusEx
GetUserDefaultLangID
SetThreadAffinityMask
GetCurrentThread
GetProcessAffinityMask
MultiByteToWideChar
OutputDebugStringA
FormatMessageA
GetTickCount
CopyFileW
MoveFileExW
LoadLibraryW
SetEndOfFile
SetFilePointer
InterlockedCompareExchange
InterlockedIncrement
ExitThread
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateThread
GetCurrentThreadId
GetProcessHeap
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetCurrentDirectoryA
SetStdHandle
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
SetHandleCount
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
HeapSize
HeapCreate
GetCPInfo
LCMapStringW
LCMapStringA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
SetConsoleCtrlHandler
GetDriveTypeA
PeekNamedPipe
GetFileInformationByHandle
FileTimeToSystemTime
HeapWalk
HeapValidate
GetStartupInfoA
GetCommandLineA
ExitProcess
GetModuleHandleW
TerminateProcess
UnhandledExceptionFilter
HeapReAlloc
RtlUnwind
HeapAlloc
HeapFree
WritePrivateProfileStringW
GetTempPathW
SetErrorMode
IsDebuggerPresent
CreateProcessW
CreateThread
SetThreadPriority
ReleaseMutex
CreateMutexA
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
ReleaseSemaphore
WaitForSingleObject
CloseHandle
CreateSemaphoreA
CreateDirectoryW
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
SetLastError
GetSystemTimeAsFileTime
GetModuleFileNameA
GetFileTime
RaiseException
lstrlenA
SetUnhandledExceptionFilter
FileTimeToLocalFileTime
FileTimeToDosDateTime
FlushConsoleInputBuffer
FindFirstFileA
GetStdHandle
GetFileType
GlobalMemoryStatus
GetVersion
GetExitCodeThread
DuplicateHandle
SleepEx
GetSystemDirectoryA
CreateWaitableTimerA
SetWaitableTimer
OpenEventA
VirtualQuery
VirtualAlloc
VirtualFree
UnmapViewOfFile
CreateFileA
CreateFileMappingA
MapViewOfFile
lstrcmpiA
GetFullPathNameA
InterlockedExchange
InterlockedDecrement
WaitForMultipleObjects
SetEvent
ResetEvent
GetLastError

user32

SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
GetClipboardData
IsClipboardFormatAvailable
GetSystemMetrics
MsgWaitForMultipleObjects
GetCursorPos
ScreenToClient
GetAsyncKeyState
GetWindowThreadProcessId
DefWindowProcW
MessageBoxW
wvsprintfA
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
GetDC
CreateWindowExW
GetKeyState
WindowFromPoint
DestroyWindow
ReleaseDC
GetCaretBlinkTime
GetWindowRect
GetMessageA
TrackMouseEvent
ValidateRect
SetFocus
LoadImageA
DialogBoxParamA
IsDlgButtonChecked
SetWindowTextW
CheckDlgButton
EnableWindow
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SetWindowTextA
SetCursorPos
ClipCursor
ShowCursor
RegisterClassW
RegisterWindowMessageW
TrackPopupMenuEx
PostQuitMessage
LoadMenuW
GetSubMenu
SetMenuDefaultItem
DestroyMenu
LoadIconW
SetWindowLongW
GetWindowLongW
LoadCursorA
RegisterClassExW
DialogBoxParamW
EndDialog
LoadIconA
SendDlgItemMessageW
SetDlgItemTextA
SetDlgItemTextW
CopyRect
OffsetRect
GetAncestor
UnregisterClassW
GetDesktopWindow
EnumDisplaySettingsA
AdjustWindowRectEx
ChangeDisplaySettingsA
GetDlgItem
SetWindowLongA
CreateDialogParamA
GetClientRect
SetWindowPos
GetWindowLongA
GetParent
GetThreadDesktop
GetUserObjectInformationA
RegisterWindowMessageA
IsIconic
ShowWindow
SetForegroundWindow
SendMessageA
EnumWindows
SendMessageTimeoutA
wsprintfA
MsgWaitForMultipleObjectsEx

gdi32

DeleteDC
GetBitmapBits
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
SwapBuffers
SetPixelFormat
ChoosePixelFormat
GetObjectA
DeleteObject
GetDeviceCaps

advapi32

CryptAcquireContextA
CryptImportKey
CryptCreateHash
CryptHashData
CryptVerifySignatureA
CryptDestroyHash
CryptDestroyKey
CryptReleaseContext
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
DeregisterEventSource
GetUserNameA
RegisterEventSourceA
ReportEventA

shell32

ShellExecuteW
Shell_NotifyIconW
CommandLineToArgvW
SHGetFolderPathW

ole32

CoTaskMemAlloc
CoCreateGuid
CoSetProxyBlanket
CoCreateInstance
CoInitialize
PropVariantClear
CoUninitialize
CoTaskMemFree

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueA

opengl32

glBindTexture
glTexGenfv
glColor4ubv
glTexParameteri
glTexParameterfv
glLightfv
glLightf
glLightModelfv
glFogfv
glFogf
glFogi
glIsTexture
glDeleteTextures
glFinish
glVertex3f
glNormal3f
glColor4f
glTexCoord3f
glBegin
glEnd
glReadPixels
glLightModelf
glHint
glMaterialf
glMaterialfv
glGetError
wglMakeCurrent
wglDeleteContext
glGetString
glGetIntegerv
wglGetCurrentDC
glDrawArrays
wglGetCurrentContext
wglShareLists
glTexEnvfv
glCopyTexSubImage2D
glFlush
glReadBuffer
glDrawBuffer
glTexImage2D
glPixelStorei
glTexSubImage2D
glVertex4f
wglGetProcAddress
glColor4fv
glColorMaterial
glTexGeni
glDrawElements
glTexCoordPointer
glNormalPointer
glVertexPointer
glColorPointer
glEnableClientState
glDisableClientState
glTexEnvf
glTexEnvi
glClear
glClearDepth
glClearColor
glDepthMask
glDisable
glEnable
glDepthFunc
glPolygonOffset
glColorMask
glAlphaFunc
glLightModeli
glBlendFunc
glScissor
wglCreateContext
glViewport
glLoadIdentity
glPopMatrix
glPushMatrix
glMultMatrixf
glGetFloatv
glMatrixMode
glLoadMatrixf
glFrontFace
glCullFace

winmm

waveOutWrite
waveOutClose
waveOutReset
waveOutGetPosition
waveOutPrepareHeader
waveOutOpen
waveOutUnprepareHeader
waveOutGetDevCapsA
waveOutGetNumDevs
waveInGetNumDevs
timeGetTime

ws2_32

WSAStartup
htonl
closesocket
getsockname
socket
WSACleanup
gethostbyname
inet_ntoa
WSAGetLastError
htons
inet_addr
connect
shutdown
__WSAFDIsSet
bind
ioctlsocket
setsockopt
send
ntohs
recvfrom
sendto
getsockopt
select
WSACancelAsyncRequest
WSAAsyncGetHostByName
listen
accept
recv
WSASetLastError
gethostname

shlwapi

PathIsDirectoryW
PathFileExistsW
SHDeleteKeyA

dinput

DirectInputCreateA

oleaut32

SysFreeString
SysAllocString

msacm32

acmFormatSuggest
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
acmStreamOpen
acmStreamSize

Exports

Exports

NxCreateCoreSDK

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 635KB - Virtual size: 635KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 179KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/Assembly - CSharp - first pass.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/Assembly - CSharp.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/Assembly - UnityScript - first pass.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/Assembly - UnityScript.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/Ionic.Zlib.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/ScreenSelector.bmp
Mars Explorer/Mars Explorer_Data/TerrainControllerData.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/etc/mono/2.0/machine.config
.xml
Mars Explorer/Mars Explorer_Data/etc/mono/config
Mars Explorer/Mars Explorer_Data/level0
Mars Explorer/Mars Explorer_Data/level1
Mars Explorer/Mars Explorer_Data/level2
Mars Explorer/Mars Explorer_Data/lib/Boo.Lang.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/lib/Mono.Security.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/lib/System.Configuration.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/lib/System.Core.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/lib/System.Security.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/lib/System.Xml.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/lib/System.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/lib/UnityDomainLoad.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/lib/UnityEngine.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 298KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/lib/UnityScript.Lang.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/lib/mscorlib.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/mainData
Mars Explorer/Mars Explorer_Data/output_log.txt
Mars Explorer/Mars Explorer_Data/sharedassets0.assets
Mars Explorer/Mars Explorer_Data/sharedassets1.assets
Mars Explorer/Mars Explorer_Data/sharedassets2.assets
Mars Explorer/Mars Explorer_Data/sharedassets3.assets
Mars Explorer/Mars Explorer_Data/unity/mono-1-vc.dll
.dll windows x86

f6105f22420c8c0946068ee7279a0e33

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnlockFile
LockFile
SetFileTime
WriteFile
GetFileAttributesW
ReadFile
CreateFileW
FlushFileBuffers
GetTempPathW
GetStdHandle
GetLastError
GetCurrentDirectoryW
MoveFileW
FindClose
SetCurrentDirectoryW
RemoveDirectoryW
CreatePipe
FindNextFileW
GetFileAttributesExW
SetFileAttributesW
SetEvent
ResetEvent
CreateEventW
SystemTimeToFileTime
GetLogicalDriveStringsW
SetEnvironmentVariableW
GetComputerNameW
OutputDebugStringW
GetTimeZoneInformation
GetSystemTime
GlobalAlloc
InterlockedExchange
GlobalFree
GlobalReAlloc
ReleaseSemaphore
CreateSemaphoreW
CreateProcessW
GetProcessTimes
OpenProcess
CreateDirectoryW
TerminateProcess
GetProcessWorkingSetSize
SetProcessWorkingSetSize
GetCurrentProcessId
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
GetCurrentProcess
GetCurrentThread
LocalFree
GetVolumeInformationW
WaitForSingleObject
Sleep
CreateMutexW
SleepEx
WaitForMultipleObjectsEx
ExitThread
OpenMutexW
QueueUserAPC
OpenThread
OpenEventW
DuplicateHandle
OpenSemaphoreW
ReleaseMutex
SetUnhandledExceptionFilter
GetThreadContext
VirtualQuery
VirtualFree
VirtualAlloc
GetModuleHandleW
LoadLibraryW
FormatMessageW
GetProcAddress
VirtualProtect
MultiByteToWideChar
SetEndOfFile
SetFilePointer
FindFirstFileW
GetFileSize
GetSystemInfo
GetVersionExW
TlsFree
TlsAlloc
TlsSetValue
TlsGetValue
GetFileType
GetCurrentThreadId
DeleteCriticalSection
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
ResumeThread
DeleteFileW
CloseHandle
EnterCriticalSection
LeaveCriticalSection
CopyFileW
InitializeCriticalSection
GetTickCount
WaitForSingleObjectEx
GetExitCodeProcess
InterlockedCompareExchange
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CompareStringW
CompareStringA
HeapSize
SetEnvironmentVariableA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RtlUnwind
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
RaiseException
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
HeapDestroy
HeapCreate
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetStartupInfoA
SetHandleCount
IsDebuggerPresent
GetCPInfo
GetFullPathNameA
GetFullPathNameW
FindNextFileA
GetEnvironmentVariableW
ExpandEnvironmentStringsA
GetWindowsDirectoryA
GetSystemDirectoryW
GetSystemDirectoryA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetCurrentDirectoryA
GetWindowsDirectoryW
GetVersion
ExpandEnvironmentStringsW
GetFileAttributesA
FormatMessageA
GetThreadLocale
CreateEventA
SetThreadPriority
CreateMutexA
GetSystemTimeAsFileTime
CreateSemaphoreA
GetACP
DebugBreak
SetLastError
GetExitCodeThread
SuspendThread
CreateThread
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetDriveTypeA
FindFirstFileA
ExitProcess
HeapFree
HeapAlloc
SetStdHandle
HeapReAlloc
UnhandledExceptionFilter
GetCommandLineA
WideCharToMultiByte
GetProcessHeap

advapi32

GetUserNameW
GetLengthSid
FreeSid
RevertToSelf
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW
BuildTrusteeWithSidW
ImpersonateLoggedOnUser
LookupAccountSidW
SetNamedSecurityInfoW
DuplicateToken
CopySid
GetTokenInformation
GetEffectiveRightsFromAclW
OpenThreadToken
OpenProcessToken
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
GetUserNameA

shell32

SHGetFolderPathW
ShellExecuteExW
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetPathFromIDListW

ole32

CoTaskMemAlloc
CoUninitialize
CoInitializeEx
CoTaskMemFree
CoTaskMemRealloc

oleaut32

SysFreeString
SysAllocStringLen
SysStringLen

ws2_32

ntohs
getsockname
shutdown
htons
setsockopt
sendto
WSACleanup
recv
bind
gethostbyaddr
gethostbyname
send
getsockopt
listen
accept
WSAGetLastError
WSASocketW
htonl
inet_addr
ntohl
recvfrom
WSAStartup
connect
gethostname
WSAIoctl
ioctlsocket
getpeername
socket
__WSAFDIsSet
select
getprotobyname
closesocket

psapi

GetModuleBaseNameW
EnumProcessModules
EnumProcesses

winmm

timeBeginPeriod
timeGetDevCaps
timeEndPeriod
timeSetEvent

user32

MessageBoxA

Exports

Exports

GC_free
GC_malloc_uncollectable
SetNativeSigsegvHandlerWin
g_free
g_mem_set_vtable
g_strdup
mono_activate_security_manager
mono_add_internal_call
mono_array_class_get
mono_array_new
mono_array_new_full
mono_assembly_close
mono_assembly_foreach
mono_assembly_get_image
mono_assembly_get_object
mono_assembly_load_from
mono_assembly_load_from_full
mono_assembly_open
mono_assembly_preload_references
mono_class_array_element_size
mono_class_from_mono_type
mono_class_from_name
mono_class_get_byref_type
mono_class_get_field_from_name
mono_class_get_fields
mono_class_get_flags
mono_class_get_image
mono_class_get_interfaces
mono_class_get_method_from_name
mono_class_get_methods
mono_class_get_name
mono_class_get_namespace
mono_class_get_nesting_type
mono_class_get_parent
mono_class_get_properties
mono_class_get_property_from_name
mono_class_get_type
mono_class_instance_size
mono_class_is_enum
mono_class_is_subclass_of
mono_class_is_valuetype
mono_class_vtable
mono_custom_attrs_free
mono_custom_attrs_from_class
mono_custom_attrs_from_field
mono_custom_attrs_from_method
mono_custom_attrs_get_attr
mono_custom_attrs_has_attr
mono_debug_init
mono_debug_open_image_from_memory
mono_domain_assembly_open
mono_domain_get
mono_domain_get_id
mono_domain_set
mono_exception_from_name_msg
mono_field_get_flags
mono_field_get_name
mono_field_get_type
mono_field_get_value
mono_field_set_value
mono_field_static_get_value
mono_gc_collect
mono_gc_disable
mono_gc_max_generation
mono_gchandle_free
mono_gchandle_get_target
mono_gchandle_is_in_domain
mono_gchandle_new
mono_gchandle_new_weakref
mono_get_array_class
mono_get_corlib
mono_get_enum_class
mono_get_exception_class
mono_get_object_class
mono_get_root_domain
mono_get_string_class
mono_image_close
mono_image_get_assembly
mono_image_get_filename
mono_image_get_name
mono_image_open_from_data_full
mono_jit_cleanup
mono_jit_exec
mono_jit_init
mono_method_get_class
mono_method_get_flags
mono_method_get_last_managed
mono_method_get_name
mono_method_get_object
mono_method_signature
mono_object_get_class
mono_object_new
mono_object_new_alloc_specific
mono_object_new_specific
mono_object_unbox
mono_parse_default_optimizations
mono_property_get_get_method
mono_raise_exception
mono_runtime_delegate_invoke
mono_runtime_exec_main
mono_runtime_invoke
mono_runtime_object_init
mono_set_assembly_paths
mono_set_defaults
mono_set_dirs
mono_set_find_plugin_callback
mono_set_unhandled_exception_handler
mono_set_unity_pinvoke_enabled
mono_set_unity_secure_callback
mono_set_unity_secure_enabled
mono_signature_get_param_count
mono_signature_get_params
mono_signature_get_return_type
mono_signature_is_instance
mono_string_new_wrapper
mono_string_to_utf8
mono_thread_attach
mono_thread_current
mono_thread_detach
mono_thread_exit
mono_thread_pop_appdomain_ref
mono_thread_push_appdomain_ref
mono_thread_set_main
mono_type_get_class
mono_type_get_name
mono_type_get_object
mono_type_get_type
mono_value_box
unity_mono_close_output
unity_mono_redirect_output
ves_icall_System_AppDomain_InternalUnload
ves_icall_System_AppDomain_createDomain

Sections

.text
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 719KB - Virtual size: 718KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mars Explorer/Mars Explorer_Data/unity/unity default resources
Mars Explorer/Uninstall.exe
.exe windows x86

197d9363c60b08ab88d705738d8454ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

user32

SendMessageA
GetPropA
ShowWindow
SetFocus
SetWindowLongA
SetForegroundWindow
BeginPaint
FillRect
EndPaint
DefWindowProcA
IsDlgButtonChecked
CheckDlgButton
LoadIconA
LoadBitmapA
SetWindowsHookExA
IsWindow
UnhookWindowsHookEx
CallNextHookEx
MessageBoxA
LoadStringA
GetDesktopWindow
GetDC
ReleaseDC
SendMessageTimeoutA
SetWindowTextA
SetDlgItemTextA
DialogBoxParamA
EndDialog
SetPropA
PostMessageA
GetSystemMetrics
EnableWindow
DestroyWindow
CreateDialogParamA
GetDlgItem
GetWindowRect
ScreenToClient
SetWindowPos

gdi32

TranslateCharsetInfo
GetObjectA
CreateFontIndirectA
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject
CreateSolidBrush
GetTextCharsetInfo

advapi32

RegSetValueExA
OpenServiceA
ControlService
QueryServiceStatus
DeleteService
OpenSCManagerA
CloseServiceHandle
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA

shell32

ShellExecuteA

kernel32

GetACP
GetCPInfo
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FreeEnvironmentStringsW
GetOEMCP
DeleteCriticalSection
GetFileType
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
TerminateProcess
InterlockedDecrement
GetEnvironmentStrings
IsValidCodePage
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapSize
InitializeCriticalSection
FreeEnvironmentStringsA
SetStdHandle
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetLocaleInfoA
GetTimeZoneInformation
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
GetCurrentDirectoryA
SetLastError
InterlockedIncrement
GetStdHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
GetWindowsDirectoryA
CloseHandle
CreateFileA
GetLastError
GetVersionExA
GetSystemTimeAsFileTime
CreateEventA
SetEvent
ResetEvent
WaitForSingleObject
CreateProcessA
LoadLibraryA
GetCurrentProcess
FreeLibrary
GetProcAddress
SetCurrentDirectoryA
GetTempPathA
GetFullPathNameA
GetModuleFileNameA
GetModuleHandleA
FindClose
FindNextFileA
FindFirstFileA
MultiByteToWideChar
IsValidLocale
GetThreadLocale
SetThreadLocale
WideCharToMultiByte
GetCurrentThreadId
Sleep
ResumeThread
CreateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
RtlUnwind
RaiseException
RemoveDirectoryA
FileTimeToSystemTime
FileTimeToLocalFileTime
DeleteFileA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetDriveTypeA
ReadFile
WriteFile
GetConsoleCP
GetConsoleMode
SetEndOfFile
HeapFree
HeapAlloc
GetProcessHeap
SetFilePointer
SetFileAttributesA
GetFileAttributesA
SetEnvironmentVariableA

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Mars Explorer/install.log

Sharing

General

Malware Config

Signatures

Files

4ed78ea335cf44d2476429c204fc5ca0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

version

opengl32

winmm

ws2_32

shlwapi

dinput

oleaut32

msacm32

Exports

Exports

Sections

.text Size: 4.2MB - Virtual size: 4.2MB

.rdata Size: 635KB - Virtual size: 635KB

.data Size: 179KB - Virtual size: 381KB

.rsrc Size: 25KB - Virtual size: 25KB

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

Imports

mscoree

Sections

.text Size: 36KB - Virtual size: 35KB

.rsrc Size: 1024B - Virtual size: 828B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

Imports

mscoree

Sections

.text Size: 20KB - Virtual size: 20KB

.rsrc Size: 1024B - Virtual size: 828B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

Imports

mscoree

Sections

.text Size: 7KB - Virtual size: 7KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

Imports

mscoree

Sections

.text Size: 236KB - Virtual size: 236KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 76KB - Virtual size: 75KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

Imports

mscoree

.text
Size: 4.2MB - Virtual size: 4.2MB

.rdata
Size: 635KB - Virtual size: 635KB

.data
Size: 179KB - Virtual size: 381KB

.rsrc
Size: 25KB - Virtual size: 25KB

.text
Size: 36KB - Virtual size: 35KB

.rsrc
Size: 1024B - Virtual size: 828B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 1024B - Virtual size: 828B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 7KB - Virtual size: 7KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 236KB - Virtual size: 236KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 76KB - Virtual size: 75KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 860B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 88KB - Virtual size: 84KB

.rsrc
Size: 4KB - Virtual size: 1000B

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 279KB - Virtual size: 278KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 113KB - Virtual size: 112KB

.rsrc
Size: 1024B - Virtual size: 980B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 202KB - Virtual size: 201KB

.rsrc
Size: 1024B - Virtual size: 848B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 127KB - Virtual size: 127KB

.rsrc
Size: 1024B - Virtual size: 960B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1.2MB - Virtual size: 1.2MB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1.4MB - Virtual size: 1.4MB

.rsrc
Size: 1024B - Virtual size: 868B

.reloc
Size: 512B - Virtual size: 12B