CraxsRat_V6[.]7[.]7z

Sharing

Copy URL

Twitter E-mail

General

Target

CraxsRat_V6.7.7z
Size

191.2MB
MD5

896860a1515203e998020715d9500ea3
SHA1

db17078c7771ed57cd761d88a48a1e4b5d2d79bb
SHA256

aa3909078e3b6f111adfb3b797b275fdbf20d61c6d294956a126ee55c205d46d
SHA512

b27e37b74ab37b6f3ae682d1db1ab2153c1a2146dc6777bb00bdbdd6ad4dd7561320a1ce593287bce2e4f19f2f2329637f4d9e24d4c0bc3ba48132eeeefb848b
SSDEEP

3145728:bLRgeKJl+MqkIYTDOJOOplTHD9bMnMliXcFNZz65P/tVTn0b2WJElsRff9Dt2nE8:PRJKJlXqkIYOOIVWhcN65P/tVz0bFtRU

Score

7^/10

agilenet

Malware Config

Signatures

Obfuscated with Agile.Net obfuscator 1 IoCs

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet

resource	yara_rule
static1/unpack001/CraxsRat_V6.7/LiveCharts.MAPS.dll	agile_net

Unsigned PE 13 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CraxsRat_V6.7/CraxsRat_V6.7.exe
unpack001/CraxsRat_V6.7/DrakeUI.Framework.dll
unpack001/CraxsRat_V6.7/GeoIPCitys.dll
unpack001/CraxsRat_V6.7/HVMRun64.dll
unpack001/CraxsRat_V6.7/HVMRuntm.dll
unpack001/CraxsRat_V6.7/LiveCharts.MAPS.dll
unpack001/CraxsRat_V6.7/LiveCharts.WinForms.dll
unpack001/CraxsRat_V6.7/LiveCharts.Wpf.dll
unpack001/CraxsRat_V6.7/LiveCharts.dll
unpack001/CraxsRat_V6.7/NAudio.dll
unpack001/CraxsRat_V6.7/WinMM.Net.dll
unpack001/CraxsRat_V6.7/res/Lib/7z.dll
unpack001/CraxsRat_V6.7/res/Lib/7z.exe

Files

CraxsRat_V6.7.7z
.7z
CraxsRat_V6.7/ChangeLog.html
CraxsRat_V6.7/Config.json
CraxsRat_V6.7/CraxsRat.exe.config
.xml
CraxsRat_V6.7/CraxsRat.xml
CraxsRat_V6.7/CraxsRat_V6.7.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 69.5MB - Virtual size: 69.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/DrakeUI.Framework.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/GeoIPCitys.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/HVMRun64.dll
.dll windows:4 windows x64

2843de49dbfe3d6c40e1db4b51e9fa5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
GetModuleFileNameA
__C_specific_handler
ReadFile
CloseHandle
CreateFileA
InitializeCriticalSection
GetModuleHandleA
IsBadReadPtr
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryA
WaitForSingleObject
GetCurrentThreadId
GetTickCount
CreateEventA
DisableThreadLibraryCalls
lstrcatA
VirtualProtect
lstrlenA
Sleep
SetEvent
GetVolumeInformationA
GetWindowsDirectoryA
GetCurrentProcessId
MultiByteToWideChar
GetLastError
CompareStringA
CompareStringW
HeapFree
GetProcessHeap
SetFilePointer
QueryPerformanceCounter
GetEnvironmentStringsW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
VirtualQuery
LeaveCriticalSection
EnterCriticalSection
SetEnvironmentVariableA
DeleteCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
HeapCreate
HeapSetInformation
SetStdHandle
WriteFile
IsValidCodePage
GetOEMCP
GetCPInfo
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetTimeZoneInformation
RtlVirtualUnwind
FlsAlloc
TlsSetValue
SetLastError
FlsFree
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
HeapDestroy
HeapAlloc
HeapReAlloc
HeapSize
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
GetSystemTimeAsFileTime
ExitThread
ResumeThread
CreateThread
ExitProcess
FlsSetValue
GetCommandLineA
FlsGetValue
TlsFree

user32

MessageBoxA
UnregisterClassA
wsprintfA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

oleaut32

SysAllocString
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayDestroyDescriptor
SafeArrayCreate
VariantCopyInd
VariantChangeType
SysStringLen
SafeArrayUnlock
SafeArrayLock
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElement
SafeArrayDestroy
SafeArrayPutElement
VariantInit
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
GetErrorInfo
VariantClear

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

VMRuntime

Sections

.text
Size: 353KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hvm0
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/HVMRuntm.dll
.dll windows:4 windows x86

b2ff0f091ba14e9fe411060ab1560c66

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
GetModuleFileNameA
ReadFile
CloseHandle
CreateFileA
InitializeCriticalSection
GetModuleHandleA
InterlockedDecrement
IsBadReadPtr
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryA
WaitForSingleObject
GetCurrentThreadId
GetTickCount
CreateEventA
DisableThreadLibraryCalls
lstrcatA
VirtualProtect
lstrlenA
Sleep
SetEvent
GetVolumeInformationA
GetWindowsDirectoryA
SetEnvironmentVariableA
GetCurrentProcessId
InterlockedExchange
MultiByteToWideChar
GetLastError
CompareStringA
CompareStringW
InterlockedIncrement
HeapFree
GetProcessHeap
SetFilePointer
QueryPerformanceCounter
GetEnvironmentStringsW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
VirtualQuery
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetStdHandle
GetConsoleMode
GetConsoleCP
HeapCreate
VirtualFree
WriteFile
IsValidCodePage
GetOEMCP
GetCPInfo
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetTimeZoneInformation
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
HeapDestroy
HeapAlloc
HeapReAlloc
HeapSize
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetSystemTimeAsFileTime
ExitThread
ResumeThread
CreateThread
ExitProcess
VirtualAlloc
GetCommandLineA

user32

MessageBoxA
UnregisterClassA
wsprintfA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

oleaut32

SysAllocString
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayDestroyDescriptor
SafeArrayCreate
VariantCopyInd
VariantChangeType
SysStringLen
SafeArrayUnlock
SafeArrayLock
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElement
SafeArrayDestroy
SafeArrayPutElement
VariantClear
VariantInit
SysFreeString
SysStringByteLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
GetErrorInfo
SysAllocStringByteLen

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

VMRuntime

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hvm0
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/LiveCharts.MAPS.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/LiveCharts.WinForms.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/LiveCharts.WinForms.pdb
CraxsRat_V6.7/LiveCharts.WinForms.xml
.xml
CraxsRat_V6.7/LiveCharts.Wpf.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/LiveCharts.Wpf.pdb
CraxsRat_V6.7/LiveCharts.Wpf.xml
.xml
CraxsRat_V6.7/LiveCharts.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/LiveCharts.pdb
CraxsRat_V6.7/LiveCharts.xml
.xml
CraxsRat_V6.7/NAudio.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/Newtonsoft.Json.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15-01-2021 00:00

Not After

14-01-2046 23:59

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15-07-2021 00:00

Not After

14-07-2031 23:59

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Not Before

13-08-2021 00:00

Not After

29-10-2024 23:59

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b
Signer

Actual PE Digest

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 681KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/Newtonsoft.Json.xml
.xml
CraxsRat_V6.7/System.IO.Compression.ZipFile.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-08-2016 20:17

Not After

02-11-2017 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28-10-2015 20:31

Not After

28-01-2017 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:e3:a3:2d:f8:71:76:9b:66:a7:70:02:ef:69:91:70:2e:1d:d6:c5:f3:f4:b4:cf:e9:62:5e:c5:de:66:cf:77
Signer

Actual PE Digest

2b:e3:a3:2d:f8:71:76:9b:66:a7:70:02:ef:69:91:70:2e:1d:d6:c5:f3:f4:b4:cf:e9:62:5e:c5:de:66:cf:77

Digest Algorithm

sha256

PE Digest Matches

true

14:b0:8e:4d:e3:ae:df:ee:dd:e1:6b:b6:23:93:9d:2a:c5:d1:47:94
Signer

Actual PE Digest

14:b0:8e:4d:e3:ae:df:ee:dd:e1:6b:b6:23:93:9d:2a:c5:d1:47:94

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/WinMM.Net.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/World.xml
CraxsRat_V6.7/res/Audio/1.wav
CraxsRat_V6.7/res/Audio/2.wav
CraxsRat_V6.7/res/Audio/3.wav
CraxsRat_V6.7/res/Audio/4.wav
CraxsRat_V6.7/res/Audio/5.wav
CraxsRat_V6.7/res/Audio/6.wav
CraxsRat_V6.7/res/Config/Pass.inf
CraxsRat_V6.7/res/Config/maps.inf
CraxsRat_V6.7/res/Config/supported_images.inf
CraxsRat_V6.7/res/Config/supported_text.inf
CraxsRat_V6.7/res/Config/supported_video.inf
CraxsRat_V6.7/res/Fonts/Hack-Bold.ttf
CraxsRat_V6.7/res/Fonts/Hack-BoldOblique.ttf
CraxsRat_V6.7/res/Fonts/Hack-Regular.ttf
CraxsRat_V6.7/res/Fonts/Hack-RegularOblique.ttf
CraxsRat_V6.7/res/GeoIP/Flags/-1.ico
CraxsRat_V6.7/res/GeoIP/Flags/AD.ico
CraxsRat_V6.7/res/GeoIP/Flags/AE.ico
CraxsRat_V6.7/res/GeoIP/Flags/AF.ico
CraxsRat_V6.7/res/GeoIP/Flags/AG.ico
CraxsRat_V6.7/res/GeoIP/Flags/AI.ico
CraxsRat_V6.7/res/GeoIP/Flags/AL.ico
CraxsRat_V6.7/res/GeoIP/Flags/AM.ico
CraxsRat_V6.7/res/GeoIP/Flags/AN.ico
CraxsRat_V6.7/res/GeoIP/Flags/AO.ico
CraxsRat_V6.7/res/GeoIP/Flags/AQ.ico
CraxsRat_V6.7/res/GeoIP/Flags/AR.ico
CraxsRat_V6.7/res/GeoIP/Flags/AS.ico
CraxsRat_V6.7/res/GeoIP/Flags/AT.ico
CraxsRat_V6.7/res/GeoIP/Flags/AU.ico
CraxsRat_V6.7/res/GeoIP/Flags/AW.ico
CraxsRat_V6.7/res/GeoIP/Flags/AX.ico
CraxsRat_V6.7/res/GeoIP/Flags/AZ.ico
CraxsRat_V6.7/res/GeoIP/Flags/BA.ico
CraxsRat_V6.7/res/GeoIP/Flags/BB.ico
CraxsRat_V6.7/res/GeoIP/Flags/BD.ico
CraxsRat_V6.7/res/GeoIP/Flags/BE.ico
CraxsRat_V6.7/res/GeoIP/Flags/BF.ico
CraxsRat_V6.7/res/GeoIP/Flags/BG.ico
CraxsRat_V6.7/res/GeoIP/Flags/BH.ico
CraxsRat_V6.7/res/GeoIP/Flags/BI.ico
CraxsRat_V6.7/res/GeoIP/Flags/BJ.ico
CraxsRat_V6.7/res/GeoIP/Flags/BL.ico
CraxsRat_V6.7/res/GeoIP/Flags/BM.ico
CraxsRat_V6.7/res/GeoIP/Flags/BN.ico
CraxsRat_V6.7/res/GeoIP/Flags/BO.ico
CraxsRat_V6.7/res/GeoIP/Flags/BR.ico
CraxsRat_V6.7/res/GeoIP/Flags/BS.ico
CraxsRat_V6.7/res/GeoIP/Flags/BT.ico
CraxsRat_V6.7/res/GeoIP/Flags/BW.ico
CraxsRat_V6.7/res/GeoIP/Flags/BY.ico
CraxsRat_V6.7/res/GeoIP/Flags/BZ.ico
CraxsRat_V6.7/res/GeoIP/Flags/CA.ico
CraxsRat_V6.7/res/GeoIP/Flags/CC.ico
CraxsRat_V6.7/res/GeoIP/Flags/CD.ico
CraxsRat_V6.7/res/GeoIP/Flags/CF.ico
CraxsRat_V6.7/res/GeoIP/Flags/CG.ico
CraxsRat_V6.7/res/GeoIP/Flags/CH.ico
CraxsRat_V6.7/res/GeoIP/Flags/CI.ico
CraxsRat_V6.7/res/GeoIP/Flags/CK.ico
CraxsRat_V6.7/res/GeoIP/Flags/CL.ico
CraxsRat_V6.7/res/GeoIP/Flags/CM.ico
CraxsRat_V6.7/res/GeoIP/Flags/CN.ico
CraxsRat_V6.7/res/GeoIP/Flags/CO.ico
CraxsRat_V6.7/res/GeoIP/Flags/CR.ico
CraxsRat_V6.7/res/GeoIP/Flags/CU.ico
CraxsRat_V6.7/res/GeoIP/Flags/CV.ico
CraxsRat_V6.7/res/GeoIP/Flags/CW.ico
CraxsRat_V6.7/res/GeoIP/Flags/CX.ico
CraxsRat_V6.7/res/GeoIP/Flags/CY.ico
CraxsRat_V6.7/res/GeoIP/Flags/CZ.ico
CraxsRat_V6.7/res/GeoIP/Flags/DE.ico
CraxsRat_V6.7/res/GeoIP/Flags/DJ.ico
CraxsRat_V6.7/res/GeoIP/Flags/DK.ico
CraxsRat_V6.7/res/GeoIP/Flags/DM.ico
CraxsRat_V6.7/res/GeoIP/Flags/DO.ico
CraxsRat_V6.7/res/GeoIP/Flags/DZ.ico
CraxsRat_V6.7/res/GeoIP/Flags/EC.ico
CraxsRat_V6.7/res/GeoIP/Flags/EE.ico
CraxsRat_V6.7/res/GeoIP/Flags/EG.ico
CraxsRat_V6.7/res/GeoIP/Flags/EH.ico
CraxsRat_V6.7/res/GeoIP/Flags/ER.ico
CraxsRat_V6.7/res/GeoIP/Flags/ES.ico
CraxsRat_V6.7/res/GeoIP/Flags/ET.ico
CraxsRat_V6.7/res/GeoIP/Flags/EU.ico
CraxsRat_V6.7/res/GeoIP/Flags/FI.ico
CraxsRat_V6.7/res/GeoIP/Flags/FJ.ico
CraxsRat_V6.7/res/GeoIP/Flags/FK.ico
CraxsRat_V6.7/res/GeoIP/Flags/FM.ico
CraxsRat_V6.7/res/GeoIP/Flags/FO.ico
CraxsRat_V6.7/res/GeoIP/Flags/FR.ico
CraxsRat_V6.7/res/GeoIP/Flags/GA.ico
CraxsRat_V6.7/res/GeoIP/Flags/GB.ico
CraxsRat_V6.7/res/GeoIP/Flags/GD.ico
CraxsRat_V6.7/res/GeoIP/Flags/GE.ico
CraxsRat_V6.7/res/GeoIP/Flags/GG.ico
CraxsRat_V6.7/res/GeoIP/Flags/GH.ico
CraxsRat_V6.7/res/GeoIP/Flags/GI.ico
CraxsRat_V6.7/res/GeoIP/Flags/GL.ico
CraxsRat_V6.7/res/GeoIP/Flags/GM.ico
CraxsRat_V6.7/res/GeoIP/Flags/GN.ico
CraxsRat_V6.7/res/GeoIP/Flags/GQ.ico
CraxsRat_V6.7/res/GeoIP/Flags/GR.ico
CraxsRat_V6.7/res/GeoIP/Flags/GS.ico
CraxsRat_V6.7/res/GeoIP/Flags/GT.ico
CraxsRat_V6.7/res/GeoIP/Flags/GU.ico
CraxsRat_V6.7/res/GeoIP/Flags/GW.ico
CraxsRat_V6.7/res/GeoIP/Flags/GY.ico
CraxsRat_V6.7/res/GeoIP/Flags/HK.ico
CraxsRat_V6.7/res/GeoIP/Flags/HN.ico
CraxsRat_V6.7/res/GeoIP/Flags/HR.ico
CraxsRat_V6.7/res/GeoIP/Flags/HT.ico
CraxsRat_V6.7/res/GeoIP/Flags/HU.ico
CraxsRat_V6.7/res/GeoIP/Flags/IC.ico
CraxsRat_V6.7/res/GeoIP/Flags/ID.ico
CraxsRat_V6.7/res/GeoIP/Flags/IE.ico
CraxsRat_V6.7/res/GeoIP/Flags/IL.ico
CraxsRat_V6.7/res/GeoIP/Flags/IM.ico
CraxsRat_V6.7/res/GeoIP/Flags/IN.ico
CraxsRat_V6.7/res/GeoIP/Flags/IQ.ico
CraxsRat_V6.7/res/GeoIP/Flags/IR.ico
CraxsRat_V6.7/res/GeoIP/Flags/IS.ico
CraxsRat_V6.7/res/GeoIP/Flags/IT.ico
CraxsRat_V6.7/res/GeoIP/Flags/JE.ico
CraxsRat_V6.7/res/GeoIP/Flags/JM.ico
CraxsRat_V6.7/res/GeoIP/Flags/JO.ico
CraxsRat_V6.7/res/GeoIP/Flags/JP.ico
CraxsRat_V6.7/res/GeoIP/Flags/KE.ico
CraxsRat_V6.7/res/GeoIP/Flags/KG.ico
CraxsRat_V6.7/res/GeoIP/Flags/KH.ico
CraxsRat_V6.7/res/GeoIP/Flags/KI.ico
CraxsRat_V6.7/res/GeoIP/Flags/KM.ico
CraxsRat_V6.7/res/GeoIP/Flags/KN.ico
CraxsRat_V6.7/res/GeoIP/Flags/KP.ico
CraxsRat_V6.7/res/GeoIP/Flags/KR.ico
CraxsRat_V6.7/res/GeoIP/Flags/KW.ico
CraxsRat_V6.7/res/GeoIP/Flags/KY.ico
CraxsRat_V6.7/res/GeoIP/Flags/KZ.ico
CraxsRat_V6.7/res/GeoIP/Flags/LA.ico
CraxsRat_V6.7/res/GeoIP/Flags/LB.ico
CraxsRat_V6.7/res/GeoIP/Flags/LC.ico
CraxsRat_V6.7/res/GeoIP/Flags/LI.ico
CraxsRat_V6.7/res/GeoIP/Flags/LK.ico
CraxsRat_V6.7/res/GeoIP/Flags/LR.ico
CraxsRat_V6.7/res/GeoIP/Flags/LS.ico
CraxsRat_V6.7/res/GeoIP/Flags/LT.ico
CraxsRat_V6.7/res/GeoIP/Flags/LU.ico
CraxsRat_V6.7/res/GeoIP/Flags/LV.ico
CraxsRat_V6.7/res/GeoIP/Flags/LY.ico
CraxsRat_V6.7/res/GeoIP/Flags/MA.ico
CraxsRat_V6.7/res/GeoIP/Flags/MC.ico
CraxsRat_V6.7/res/GeoIP/Flags/MD.ico
CraxsRat_V6.7/res/GeoIP/Flags/ME.ico
CraxsRat_V6.7/res/GeoIP/Flags/MF.ico
CraxsRat_V6.7/res/GeoIP/Flags/MG.ico
CraxsRat_V6.7/res/GeoIP/Flags/MH.ico
CraxsRat_V6.7/res/GeoIP/Flags/MK.ico
CraxsRat_V6.7/res/GeoIP/Flags/ML.ico
CraxsRat_V6.7/res/GeoIP/Flags/MM.ico
CraxsRat_V6.7/res/GeoIP/Flags/MN.ico
CraxsRat_V6.7/res/GeoIP/Flags/MO.ico
CraxsRat_V6.7/res/GeoIP/Flags/MP.ico
CraxsRat_V6.7/res/GeoIP/Flags/MQ.ico
CraxsRat_V6.7/res/GeoIP/Flags/MR.ico
CraxsRat_V6.7/res/GeoIP/Flags/MS.ico
CraxsRat_V6.7/res/GeoIP/Flags/MT.ico
CraxsRat_V6.7/res/GeoIP/Flags/MU.ico
CraxsRat_V6.7/res/GeoIP/Flags/MV.ico
CraxsRat_V6.7/res/GeoIP/Flags/MW.ico
CraxsRat_V6.7/res/GeoIP/Flags/MX.ico
CraxsRat_V6.7/res/GeoIP/Flags/MY.ico
CraxsRat_V6.7/res/GeoIP/Flags/MZ.ico
CraxsRat_V6.7/res/GeoIP/Flags/NA.ico
CraxsRat_V6.7/res/GeoIP/Flags/NC.ico
CraxsRat_V6.7/res/GeoIP/Flags/NE.ico
CraxsRat_V6.7/res/GeoIP/Flags/NF.ico
CraxsRat_V6.7/res/GeoIP/Flags/NG.ico
CraxsRat_V6.7/res/GeoIP/Flags/NI.ico
CraxsRat_V6.7/res/GeoIP/Flags/NL.ico
CraxsRat_V6.7/res/GeoIP/Flags/NO.ico
CraxsRat_V6.7/res/GeoIP/Flags/NP.ico
CraxsRat_V6.7/res/GeoIP/Flags/NR.ico
CraxsRat_V6.7/res/GeoIP/Flags/NU.ico
CraxsRat_V6.7/res/GeoIP/Flags/NZ.ico
CraxsRat_V6.7/res/GeoIP/Flags/OM.ico
CraxsRat_V6.7/res/GeoIP/Flags/PA.ico
CraxsRat_V6.7/res/GeoIP/Flags/PE.ico
CraxsRat_V6.7/res/GeoIP/Flags/PF.ico
CraxsRat_V6.7/res/GeoIP/Flags/PG.ico
CraxsRat_V6.7/res/GeoIP/Flags/PH.ico
CraxsRat_V6.7/res/GeoIP/Flags/PK.ico
CraxsRat_V6.7/res/GeoIP/Flags/PL.ico
CraxsRat_V6.7/res/GeoIP/Flags/PN.ico
CraxsRat_V6.7/res/GeoIP/Flags/PR.ico
CraxsRat_V6.7/res/GeoIP/Flags/PS.ico
CraxsRat_V6.7/res/GeoIP/Flags/PT.ico
CraxsRat_V6.7/res/GeoIP/Flags/PW.ico
CraxsRat_V6.7/res/GeoIP/Flags/PY.ico
CraxsRat_V6.7/res/GeoIP/Flags/QA.ico
CraxsRat_V6.7/res/GeoIP/Flags/RO.ico
CraxsRat_V6.7/res/GeoIP/Flags/RS.ico
CraxsRat_V6.7/res/GeoIP/Flags/RU.ico
CraxsRat_V6.7/res/GeoIP/Flags/RW.ico
CraxsRat_V6.7/res/GeoIP/Flags/SA.ico
CraxsRat_V6.7/res/GeoIP/Flags/SB.ico
CraxsRat_V6.7/res/GeoIP/Flags/SC.ico
CraxsRat_V6.7/res/GeoIP/Flags/SD.ico
CraxsRat_V6.7/res/GeoIP/Flags/SE.ico
CraxsRat_V6.7/res/GeoIP/Flags/SG.ico
CraxsRat_V6.7/res/GeoIP/Flags/SH.ico
CraxsRat_V6.7/res/GeoIP/Flags/SI.ico
CraxsRat_V6.7/res/GeoIP/Flags/SK.ico
CraxsRat_V6.7/res/GeoIP/Flags/SL.ico
CraxsRat_V6.7/res/GeoIP/Flags/SM.ico
CraxsRat_V6.7/res/GeoIP/Flags/SN.ico
CraxsRat_V6.7/res/GeoIP/Flags/SO.ico
CraxsRat_V6.7/res/GeoIP/Flags/SR.ico
CraxsRat_V6.7/res/GeoIP/Flags/SS.ico
CraxsRat_V6.7/res/GeoIP/Flags/ST.ico
CraxsRat_V6.7/res/GeoIP/Flags/SV.ico
CraxsRat_V6.7/res/GeoIP/Flags/SY.ico
CraxsRat_V6.7/res/GeoIP/Flags/SZ.ico
CraxsRat_V6.7/res/GeoIP/Flags/TC.ico
CraxsRat_V6.7/res/GeoIP/Flags/TD.ico
CraxsRat_V6.7/res/GeoIP/Flags/TF.ico
CraxsRat_V6.7/res/GeoIP/Flags/TG.ico
CraxsRat_V6.7/res/GeoIP/Flags/TH.ico
CraxsRat_V6.7/res/GeoIP/Flags/TJ.ico
CraxsRat_V6.7/res/GeoIP/Flags/TK.ico
CraxsRat_V6.7/res/GeoIP/Flags/TL.ico
CraxsRat_V6.7/res/GeoIP/Flags/TM.ico
CraxsRat_V6.7/res/GeoIP/Flags/TN.ico
CraxsRat_V6.7/res/GeoIP/Flags/TO.ico
CraxsRat_V6.7/res/GeoIP/Flags/TR.ico
CraxsRat_V6.7/res/GeoIP/Flags/TT.ico
CraxsRat_V6.7/res/GeoIP/Flags/TV.ico
CraxsRat_V6.7/res/GeoIP/Flags/TW.ico
CraxsRat_V6.7/res/GeoIP/Flags/TZ.ico
CraxsRat_V6.7/res/GeoIP/Flags/UA.ico
CraxsRat_V6.7/res/GeoIP/Flags/UG.ico
CraxsRat_V6.7/res/GeoIP/Flags/US.ico
CraxsRat_V6.7/res/GeoIP/Flags/UY.ico
CraxsRat_V6.7/res/GeoIP/Flags/UZ.ico
CraxsRat_V6.7/res/GeoIP/Flags/VA.ico
CraxsRat_V6.7/res/GeoIP/Flags/VC.ico
CraxsRat_V6.7/res/GeoIP/Flags/VE.ico
CraxsRat_V6.7/res/GeoIP/Flags/VG.ico
CraxsRat_V6.7/res/GeoIP/Flags/VI.ico
CraxsRat_V6.7/res/GeoIP/Flags/VN.ico
CraxsRat_V6.7/res/GeoIP/Flags/VU.ico
CraxsRat_V6.7/res/GeoIP/Flags/WF.ico
CraxsRat_V6.7/res/GeoIP/Flags/WS.ico
CraxsRat_V6.7/res/GeoIP/Flags/YE.ico
CraxsRat_V6.7/res/GeoIP/Flags/YT.ico
CraxsRat_V6.7/res/GeoIP/Flags/ZA.ico
CraxsRat_V6.7/res/GeoIP/Flags/ZM.ico
CraxsRat_V6.7/res/GeoIP/Flags/ZW.ico
CraxsRat_V6.7/res/GeoIP/Flags/_abkhazia.ico
CraxsRat_V6.7/res/GeoIP/Flags/_basque-country.ico
CraxsRat_V6.7/res/GeoIP/Flags/_british-antarctic-territory.ico
CraxsRat_V6.7/res/GeoIP/Flags/_commonwealth.ico
CraxsRat_V6.7/res/GeoIP/Flags/_england.ico
CraxsRat_V6.7/res/GeoIP/Flags/_gosquared.ico
CraxsRat_V6.7/res/GeoIP/Flags/_kosovo.ico
CraxsRat_V6.7/res/GeoIP/Flags/_mars.ico
CraxsRat_V6.7/res/GeoIP/Flags/_nagorno-karabakh.ico
CraxsRat_V6.7/res/GeoIP/Flags/_nato.ico
CraxsRat_V6.7/res/GeoIP/Flags/_northern-cyprus.ico
CraxsRat_V6.7/res/GeoIP/Flags/_olympics.ico
CraxsRat_V6.7/res/GeoIP/Flags/_red-cross.ico
CraxsRat_V6.7/res/GeoIP/Flags/_scotland.ico
CraxsRat_V6.7/res/GeoIP/Flags/_somaliland.ico
CraxsRat_V6.7/res/GeoIP/Flags/_south-ossetia.ico
CraxsRat_V6.7/res/GeoIP/Flags/_united-nations.ico
CraxsRat_V6.7/res/GeoIP/Flags/_wales.ico
CraxsRat_V6.7/res/GeoIP/GeoIP.dat
CraxsRat_V6.7/res/GeoIP/GeoIPCity.dat
CraxsRat_V6.7/res/Icons/Apps/air_translate.png
.png
CraxsRat_V6.7/res/Icons/Apps/alarm.png
.png
CraxsRat_V6.7/res/Icons/Apps/always_on_display.png
.png
CraxsRat_V6.7/res/Icons/Apps/appstore.png
.png
CraxsRat_V6.7/res/Icons/Apps/artcanvas.png
.png
CraxsRat_V6.7/res/Icons/Apps/backup_and_restore.png
.png
CraxsRat_V6.7/res/Icons/Apps/billing.png
.png
CraxsRat_V6.7/res/Icons/Apps/bixby.png
.png
CraxsRat_V6.7/res/Icons/Apps/bixby_vision.png
.png
CraxsRat_V6.7/res/Icons/Apps/bookmark.png
.png
CraxsRat_V6.7/res/Icons/Apps/calculator.png
.png
CraxsRat_V6.7/res/Icons/Apps/calendar.png
.png
CraxsRat_V6.7/res/Icons/Apps/camera.png
.png
CraxsRat_V6.7/res/Icons/Apps/capture.png
.png
CraxsRat_V6.7/res/Icons/Apps/car_mode.png
.png
CraxsRat_V6.7/res/Icons/Apps/clock.png
.png
CraxsRat_V6.7/res/Icons/Apps/clock_bg.png
.png
CraxsRat_V6.7/res/Icons/Apps/connect.png
.png
CraxsRat_V6.7/res/Icons/Apps/contacts.png
.png
CraxsRat_V6.7/res/Icons/Apps/device_maintenance.png
.png
CraxsRat_V6.7/res/Icons/Apps/document.png
.png
CraxsRat_V6.7/res/Icons/Apps/edge_screen.png
.png
CraxsRat_V6.7/res/Icons/Apps/email.png
.png
CraxsRat_V6.7/res/Icons/Apps/enhanced_features.png
.png
CraxsRat_V6.7/res/Icons/Apps/flow.png
.png
CraxsRat_V6.7/res/Icons/Apps/galaxy_apps.png
.png
CraxsRat_V6.7/res/Icons/Apps/gallery.png
.png
CraxsRat_V6.7/res/Icons/Apps/game_launcher.png
.png
CraxsRat_V6.7/res/Icons/Apps/gear_360.png
.png
CraxsRat_V6.7/res/Icons/Apps/gear_manager.png
.png
CraxsRat_V6.7/res/Icons/Apps/gtrans.png
.png
CraxsRat_V6.7/res/Icons/Apps/health.png
.png
CraxsRat_V6.7/res/Icons/Apps/home.png
.png
CraxsRat_V6.7/res/Icons/Apps/ic_bg_container.png
.png
CraxsRat_V6.7/res/Icons/Apps/ic_bg_container_mask.png
.png
CraxsRat_V6.7/res/Icons/Apps/ic_launcher.png
.png
CraxsRat_V6.7/res/Icons/Apps/image.png
.png
CraxsRat_V6.7/res/Icons/Apps/internet.png
.png
CraxsRat_V6.7/res/Icons/Apps/keyboard.png
.png
CraxsRat_V6.7/res/Icons/Apps/knox.png
.png
CraxsRat_V6.7/res/Icons/Apps/knox_2.png
.png
CraxsRat_V6.7/res/Icons/Apps/launcher.png
.png
CraxsRat_V6.7/res/Icons/Apps/led_icon_editor.png
.png
CraxsRat_V6.7/res/Icons/Apps/link_sharing.png
.png
CraxsRat_V6.7/res/Icons/Apps/live_drawing.png
.png
CraxsRat_V6.7/res/Icons/Apps/lockscreen.png
.png
CraxsRat_V6.7/res/Icons/Apps/members.png
.png
CraxsRat_V6.7/res/Icons/Apps/memo.png
.png
CraxsRat_V6.7/res/Icons/Apps/messaging.png
.png
CraxsRat_V6.7/res/Icons/Apps/milk.png
.png
CraxsRat_V6.7/res/Icons/Apps/music.png
.png
CraxsRat_V6.7/res/Icons/Apps/my_files.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_amr.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_apk.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_contact.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_eml.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_etc.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_gallery.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_html.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_hwp.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_memo.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_music.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_pdf.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_ppt.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_raw.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_s_planner.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_scrapbook.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_sdoc.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_snb.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_spd.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_storyalbum.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_task.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_txt.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_video.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_vtext.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_word.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_xls.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_list_zip.png
.png
CraxsRat_V6.7/res/Icons/Apps/myfiles_thumb_folder_home.png
.png
CraxsRat_V6.7/res/Icons/Apps/notes.png
.png
CraxsRat_V6.7/res/Icons/Apps/optical_reader.png
.png
CraxsRat_V6.7/res/Icons/Apps/pass.png
.png
CraxsRat_V6.7/res/Icons/Apps/pay.png
.png
CraxsRat_V6.7/res/Icons/Apps/penup.png
.png
CraxsRat_V6.7/res/Icons/Apps/phone.png
.png
CraxsRat_V6.7/res/Icons/Apps/phone_log.png
.png
CraxsRat_V6.7/res/Icons/Apps/photo360_editor.png
.png
CraxsRat_V6.7/res/Icons/Apps/photo_editor.png
.png
CraxsRat_V6.7/res/Icons/Apps/protect.png
.png
CraxsRat_V6.7/res/Icons/Apps/recorder_audio.png
.png
CraxsRat_V6.7/res/Icons/Apps/reminder.png
.png
CraxsRat_V6.7/res/Icons/Apps/s_health.png
.png
CraxsRat_V6.7/res/Icons/Apps/s_protect.png
.png
CraxsRat_V6.7/res/Icons/Apps/s_translator.png
.png
CraxsRat_V6.7/res/Icons/Apps/samsung_pay.png
.png
CraxsRat_V6.7/res/Icons/Apps/secure_folder.png
.png
CraxsRat_V6.7/res/Icons/Apps/settings.png
.png
CraxsRat_V6.7/res/Icons/Apps/smart_switch.png
.png
CraxsRat_V6.7/res/Icons/Apps/smart_view.png
.png
CraxsRat_V6.7/res/Icons/Apps/soundcamp.png
.png
CraxsRat_V6.7/res/Icons/Apps/story_album.png
.png
CraxsRat_V6.7/res/Icons/Apps/svoice.png
.png
CraxsRat_V6.7/res/Icons/Apps/tempmailicon.png
.png
CraxsRat_V6.7/res/Icons/Apps/theme_store.png
.png
CraxsRat_V6.7/res/Icons/Apps/translator.png
.png
CraxsRat_V6.7/res/Icons/Apps/video_editor.png
.png
CraxsRat_V6.7/res/Icons/Apps/video_library.png
.png
CraxsRat_V6.7/res/Icons/Apps/wallp.png
.png
CraxsRat_V6.7/res/Icons/Apps/ytlite.png
.png
CraxsRat_V6.7/res/Icons/FillEllipse/Account.png
.png
CraxsRat_V6.7/res/Icons/FillEllipse/CLICKED.png
.png
CraxsRat_V6.7/res/Icons/FillEllipse/FOCUSED.png
.png
CraxsRat_V6.7/res/Icons/FillEllipse/Incoming.png
.png
CraxsRat_V6.7/res/Icons/FillEllipse/LONG CLICKED.png
.png
CraxsRat_V6.7/res/Icons/FillEllipse/Missed.png
.png
CraxsRat_V6.7/res/Icons/FillEllipse/NA.png
.png
CraxsRat_V6.7/res/Icons/FillEllipse/NOTIFICATION.png
.png
CraxsRat_V6.7/res/Icons/FillEllipse/Outgoing.png
.png
CraxsRat_V6.7/res/Icons/FillEllipse/System.png
.png
CraxsRat_V6.7/res/Icons/FillEllipse/TEXT.png
.png
CraxsRat_V6.7/res/Icons/FillEllipse/User.png
.png
CraxsRat_V6.7/res/Icons/FillEllipse/WINDOW CHANGED.png
.png
CraxsRat_V6.7/res/Icons/FillEllipse/null.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/account.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/add.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/applications.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/callphone.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/calls.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/camera.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/clipboard.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/contacts.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/copy.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/cut.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/decode.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/delete.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/download.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/downloads.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/edit.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/encrypt.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/folder.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/hidden.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/info.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/keylogger.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/location.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/microphone.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/open.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/paste.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/paths.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/playsound.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/refresh.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/rename.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/server.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/show.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/sms.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/terminal.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/unzip.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/upload.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/viewfile.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/wallpaper.png
.png
CraxsRat_V6.7/res/Icons/Menu_Items/17/zip.png
.png
CraxsRat_V6.7/res/Icons/apk.ico
CraxsRat_V6.7/res/Icons/resoicons.zip
.zip
CraxsRat_V6.7/res/Icons/win/1.ico
CraxsRat_V6.7/res/Icons/win/10.ico
CraxsRat_V6.7/res/Icons/win/11.ico
CraxsRat_V6.7/res/Icons/win/12.ico
CraxsRat_V6.7/res/Icons/win/13.ico
CraxsRat_V6.7/res/Icons/win/14.ico
CraxsRat_V6.7/res/Icons/win/15.ico
CraxsRat_V6.7/res/Icons/win/16.ico
CraxsRat_V6.7/res/Icons/win/17.ico
CraxsRat_V6.7/res/Icons/win/18.ico
CraxsRat_V6.7/res/Icons/win/19.ico
CraxsRat_V6.7/res/Icons/win/2.ico
CraxsRat_V6.7/res/Icons/win/20.ico
CraxsRat_V6.7/res/Icons/win/3.ico
CraxsRat_V6.7/res/Icons/win/4.ico
CraxsRat_V6.7/res/Icons/win/5.ico
CraxsRat_V6.7/res/Icons/win/6.ico
CraxsRat_V6.7/res/Icons/win/7.ico
CraxsRat_V6.7/res/Icons/win/8.ico
CraxsRat_V6.7/res/Icons/win/9.ico
CraxsRat_V6.7/res/Lib/7z.dll
.dll windows:4 windows x86

f3dc956f72b38463817f1a764bf2b5a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

SysAllocStringByteLen
SysAllocStringLen
SysAllocString
SysFreeString
SysStringLen
VariantCopy
VariantClear

user32

CharPrevExA
CharUpperW

msvcrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
exit
strchr
strcat
strcpy
realloc
memset
free
malloc
strlen
wcscmp
strcmp
strstr
memmove
_CxxThrowException
memcpy
memcmp
_purecall
__CxxFrameHandler

kernel32

InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
ResetEvent
SetEvent
CreateEventW
SetThreadAffinityMask
ResumeThread
WaitForSingleObject
InterlockedIncrement
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
LoadLibraryW
FreeLibrary
QueryPerformanceCounter
GetOEMCP
DeleteCriticalSection
GetVersionExW
LocalFileTimeToFileTime
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
FileTimeToDosDateTime
DosDateTimeToFileTime
GlobalMemoryStatus
GetSystemInfo
GetCurrentProcess
GetProcessAffinityMask
FileTimeToLocalFileTime
FileTimeToSystemTime
CompareFileTime
GetLastError
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
GetProcAddress
GetModuleHandleW
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
GetModuleHandleA

Exports

Exports

CreateDecoder
CreateEncoder
CreateObject
GetHandlerProperty
GetHandlerProperty2
GetHashers
GetIsArc
GetMethodProperty
GetNumberOfFormats
GetNumberOfMethods
SetCaseSensitive
SetCodecs
SetLargePageMode

Sections

.text
Size: 932KB - Virtual size: 931KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/res/Lib/7z.exe
.exe windows:4 windows x86

b42d0ac4cbca0dc8c838e1de5e6e28b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysStringByteLen
SysAllocStringLen
SysAllocString
SysFreeString
SysStringLen
VariantCopy
VariantClear

user32

CharUpperW

advapi32

LookupPrivilegeValueW
GetFileSecurityW
SetFileSecurityW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
AdjustTokenPrivileges
OpenProcessToken

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
_beginthreadex
_ftol
memcmp
_purecall
memset
strlen
wcscmp
wcsstr
strcmp
memmove
fputs
fputc
fflush
fgetc
fclose
_iob
free
malloc
memcpy
_CxxThrowException
__CxxFrameHandler
_isatty
_fileno

kernel32

SetThreadAffinityMask
CreateEventW
SetEvent
InitializeCriticalSection
WaitForSingleObject
SetFileTime
VirtualFree
VirtualAlloc
SetConsoleMode
GetConsoleMode
GetVersionExW
SetFileApisToOEM
GetCommandLineW
GetConsoleScreenBufferInfo
SetConsoleCtrlHandler
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GetProcessTimes
OpenEventW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
SetProcessAffinityMask
GetStdHandle
GetSystemTimeAsFileTime
FileTimeToDosDateTime
IsProcessorFeaturePresent
GlobalMemoryStatus
GetSystemInfo
GetProcessAffinityMask
FileTimeToLocalFileTime
FileTimeToSystemTime
CompareFileTime
GetCurrentProcess
GetDiskFreeSpaceW
SetEndOfFile
WriteFile
ReadFile
DeviceIoControl
SetFilePointer
GetFileSize
GetLogicalDriveStringsW
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
LoadLibraryExW
LoadLibraryW
GetModuleFileNameW
LocalFree
FormatMessageW
CloseHandle
CreateFileW
SetFileAttributesW
RemoveDirectoryW
MoveFileW
GetProcAddress
GetModuleHandleW
CreateDirectoryW
DeleteFileW
SetLastError
SetCurrentDirectoryW
GetCurrentDirectoryW
GetTempPathW
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
FindClose
FindFirstFileW
FindNextFileW
GetModuleHandleA
GetFileAttributesW
GetFileInformationByHandle
ResumeThread

Sections

.text
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/res/Lib/APKEditor.jar
.jar
CraxsRat_V6.7/res/Lib/aapt.exe
.exe windows:6 windows x86

0b9c4ad2592e3a036b1d98d53a398ac2

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

02-07-2021 00:00

Not After

10-07-2024 23:59

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e3:4a:c1:88:95:30:3b:50:e7:ec:a3:a6:b6:77:92:92:a3:00:0d:c3:fe:c6:e9:0d:a4:39:fa:27:89:ac:b5:b4
Signer

Actual PE Digest

e3:4a:c1:88:95:30:3b:50:e7:ec:a3:a6:b6:77:92:92:a3:00:0d:c3:fe:c6:e9:0d:a4:39:fa:27:89:ac:b5:b4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AcquireSRWLockExclusive
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateFileMappingA
CreateFileMappingW
CreateMutexA
CreateSemaphoreA
CreateThread
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
FlsAlloc
FlsGetValue
FlsSetValue
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceExW
GetFileAttributesA
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetHandleInformation
GetLastError
GetModuleFileNameA
GetProcessAffinityMask
GetStartupInfoA
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetThreadId
GetThreadPriority
GetTickCount
GetTimeZoneInformation
GetVolumeInformationW
InitOnceExecuteOnce
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetEndOfFile
SetEvent
SetFilePointer
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
SignalObjectAndWait
Sleep
SleepConditionVariableSRW
SuspendThread
SwitchToThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte

api-ms-win-crt-convert-l1-1-0

_strtod_l
_strtoi64_l
_strtoui64_l
_ultoa
atof
atoi
mbstowcs
strtol
strtoul
wcrtomb_s
wcstol
wcstombs
wcstoul

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron
getenv

api-ms-win-crt-filesystem-l1-1-0

_findclose
_findfirst32
_findnext32
_fstat32i64
_fullpath
_lock_file
_mkdir
_stat32
_stat32i64
_unlock_file
_wmkdir
_wunlink
remove
_unlink
_rmdir
_access

api-ms-win-crt-heap-l1-1-0

_aligned_free
_aligned_malloc
calloc
free
malloc
realloc

api-ms-win-crt-math-l1-1-0

__setusermatherr
frexp
_fdopen

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
_fseeki64
_ftelli64
_get_osfhandle
_lseeki64
_telli64
_wfopen
_wmktemp_s
_wopen
fclose
feof
ferror
fflush
fgets
fgetwc
fopen
fputc
fputs
fputwc
fread
fseek
ftell
fwrite
getc
rewind
ungetc
_write
_read
_open
_fileno
_dup
_close

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
___mb_cur_max_func
__pctype_func
_configthreadlocale
_create_locale
_free_locale
localeconv
setlocale
__initialize_lconv_for_unsigned_char

api-ms-win-crt-string-l1-1-0

_isctype_l
_iswalpha_l
_iswcntrl_l
_iswdigit_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_strcoll_l
_strnicmp
_strxfrm_l
_tolower_l
_toupper_l
_towlower_l
_towupper_l
_wcscoll_l
_wcsxfrm_l
isalpha
islower
isspace
isupper
iswctype
isxdigit
memset
strcmp
strcpy
strcpy_s
strlen
strncmp
strncpy
strtok
tolower
toupper
wcslen
_stricmp
_strdup

api-ms-win-crt-private-l1-1-0

_setjmp3
longjmp
memchr
memcmp
memcpy
memmove
strchr
strrchr
strstr

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_gmtime32
_localtime32
_localtime32_s
_mktime32
_strftime_l
_time32
_tzset
strftime

api-ms-win-crt-utility-l1-1-0

rand_s

api-ms-win-crt-runtime-l1-1-0

_set_app_type
__p___argc
__p___argv
__p___wargv
__p__acmdln
__sys_nerr
_beginthreadex
_cexit
_configure_narrow_argv
_configure_wide_argv
_crt_atexit
_endthreadex
_errno
_initialize_narrow_environment
_initialize_wide_environment
_initterm
_set_invalid_parameter_handler
abort
exit
signal
strerror
strerror_s
_getpid

api-ms-win-crt-multibyte-l1-1-0

_mbtowc_l

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gcc_exc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/res/Lib/apksigner.jar
.jar
CraxsRat_V6.7/res/Lib/apktool.jar
.jar
CraxsRat_V6.7/res/Lib/certificate.pem
CraxsRat_V6.7/res/Lib/junk.smali
.ps1
CraxsRat_V6.7/res/Lib/key.pk8
CraxsRat_V6.7/res/Lib/libaapt2_jni.dll
.dll windows:6 windows x86

743bb9d054ef2817921fc7debb5907f2

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

02-07-2021 00:00

Not After

10-07-2024 23:59

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e6:8a:ac:f6:d0:02:33:a0:0b:58:a2:39:b7:f6:9d:14:38:f9:ee:f5:98:03:4b:bd:32:be:d9:32:8c:41:ed:7d
Signer

Actual PE Digest

e6:8a:ac:f6:d0:02:33:a0:0b:58:a2:39:b7:f6:9d:14:38:f9:ee:f5:98:03:4b:bd:32:be:d9:32:8c:41:ed:7d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

AcquireSRWLockExclusive
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateFileMappingA
CreateFileMappingW
CreateMutexA
CreateSemaphoreA
CreateThread
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
FlsAlloc
FlsGetValue
FlsSetValue
FormatMessageW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceExW
GetFileAttributesA
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetHandleInformation
GetLastError
GetModuleFileNameA
GetProcessAffinityMask
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetThreadId
GetThreadPriority
GetTickCount
GetTimeZoneInformation
GetVolumeInformationW
InitOnceExecuteOnce
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetEndOfFile
SetEvent
SetFilePointer
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
SignalObjectAndWait
Sleep
SleepConditionVariableSRW
SuspendThread
SwitchToThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte

api-ms-win-crt-convert-l1-1-0

_strtod_l
_strtoi64_l
_strtoui64_l
_ultoa
atof
atoi
mbstowcs
strtol
strtoul
wcrtomb_s
wcstol
wcstombs
wcstoul

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron
getenv

api-ms-win-crt-filesystem-l1-1-0

_findclose
_findfirst32
_findnext32
_fstat32i64
_fullpath
_lock_file
_stat32
_stat32i64
_unlock_file
_waccess
_wchdir
_wmkdir
_wstat32
_wunlink
remove
_unlink
_rmdir

api-ms-win-crt-heap-l1-1-0

_aligned_free
_aligned_malloc
calloc
free
malloc
realloc

api-ms-win-crt-math-l1-1-0

__setusermatherr
frexp
_fdopen

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
_close
_dup
_fseeki64
_ftelli64
_get_osfhandle
_lseeki64
_telli64
_wfopen
_wmktemp_s
_wopen
_write
fclose
feof
ferror
fflush
fgetwc
fopen
fputc
fputs
fputwc
fread
fseek
ftell
fwrite
getc
ungetc
_write
_setmode
_read
_read
_open
_fileno
_dup2
_dup
_close

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
___mb_cur_max_func
__pctype_func
_configthreadlocale
_create_locale
_free_locale
localeconv
setlocale

api-ms-win-crt-string-l1-1-0

_isctype_l
_iswalpha_l
_iswcntrl_l
_iswdigit_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_strcoll_l
_strnicmp
_strxfrm_l
_tolower_l
_toupper_l
_towlower_l
_towupper_l
_wcscoll_l
_wcsxfrm_l
isalnum
isalpha
islower
isspace
isupper
iswalpha
iswctype
isxdigit
memset
strcmp
strcpy
strcpy_s
strlen
strncmp
strncpy
strpbrk
tolower
toupper
wcslen
_stricmp
_strdup

api-ms-win-crt-private-l1-1-0

_setjmp3
longjmp
memchr
memcmp
memcpy
memmove
strchr
strrchr
strstr

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_gmtime32
_localtime32
_localtime32_s
_strftime_l
_time32
_tzset
strftime

api-ms-win-crt-utility-l1-1-0

rand_s

api-ms-win-crt-runtime-l1-1-0

_set_app_type
__p___argc
__p___argv
__p___wargv
__sys_nerr
_beginthreadex
_configure_narrow_argv
_configure_wide_argv
_crt_atexit
_endthreadex
_errno
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort
exit
strerror
strerror_s
_getpid

api-ms-win-crt-multibyte-l1-1-0

_mbtowc_l

Exports

Exports

@XmlUtf16Encode@8
@XmlUtf8Encode@8
Java_com_android_tools_aapt2_Aapt2Jni_nativeCompile
Java_com_android_tools_aapt2_Aapt2Jni_nativeLink
Java_com_android_tools_aapt2_Aapt2Jni_ping
XML_DefaultCurrent
XML_ErrorString
XML_ExpatVersion
XML_ExpatVersionInfo
XML_ExternalEntityParserCreate
XML_FreeContentModel
XML_GetBase
XML_GetBuffer
XML_GetCurrentByteCount
XML_GetCurrentByteIndex
XML_GetCurrentColumnNumber
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_GetFeatureList
XML_GetIdAttributeIndex
XML_GetInputContext
XML_GetParsingStatus
XML_GetSpecifiedAttributeCount
XML_MemFree
XML_MemMalloc
XML_MemRealloc
XML_Parse
XML_ParseBuffer
XML_ParserCreate
XML_ParserCreateNS
XML_ParserCreate_MM
XML_ParserFree
XML_ParserReset
XML_ResumeParser
XML_SetAttlistDeclHandler
XML_SetBase
XML_SetCdataSectionHandler
XML_SetCharacterDataHandler
XML_SetCommentHandler
XML_SetDefaultHandler
XML_SetDefaultHandlerExpand
XML_SetDoctypeDeclHandler
XML_SetElementDeclHandler
XML_SetElementHandler
XML_SetEncoding
XML_SetEndCdataSectionHandler
XML_SetEndDoctypeDeclHandler
XML_SetEndElementHandler
XML_SetEndNamespaceDeclHandler
XML_SetEntityDeclHandler
XML_SetExternalEntityRefHandler
XML_SetExternalEntityRefHandlerArg
XML_SetHashSalt
XML_SetNamespaceDeclHandler
XML_SetNotStandaloneHandler
XML_SetNotationDeclHandler
XML_SetParamEntityParsing
XML_SetProcessingInstructionHandler
XML_SetReturnNSTriplet
XML_SetSkippedEntityHandler
XML_SetStartCdataSectionHandler
XML_SetStartDoctypeDeclHandler
XML_SetStartElementHandler
XML_SetStartNamespaceDeclHandler
XML_SetUnknownEncodingHandler
XML_SetUnparsedEntityDeclHandler
XML_SetUserData
XML_SetXmlDeclHandler
XML_StopParser
XML_UseForeignDTD
XML_UseParserAsHandlerArg
XmlGetUtf16InternalEncoding
XmlGetUtf16InternalEncodingNS
XmlGetUtf8InternalEncoding
XmlGetUtf8InternalEncodingNS
XmlInitEncoding
XmlInitEncodingNS
XmlInitUnknownEncoding
XmlInitUnknownEncodingNS
XmlParseXmlDecl
XmlParseXmlDeclNS
XmlPrologStateInit
XmlPrologStateInitExternalEntity
XmlSizeOfUnknownEncoding
_INTERNAL_trim_to_complete_utf8_characters
_Unwind_Backtrace
_Unwind_DeleteException
_Unwind_FindEnclosingFunction
_Unwind_GetCFA
_Unwind_GetDataRelBase
_Unwind_GetGR
_Unwind_GetIP
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_SetGR
_Unwind_SetIP
_Unwind_SjLj_ForcedUnwind
_Unwind_SjLj_RaiseException
_Unwind_SjLj_Register
_Unwind_SjLj_Resume
_Unwind_SjLj_Resume_or_Rethrow
_Unwind_SjLj_Unregister
_Z10asprintf_lPPc8locale_tPKcz
_Z10snprintf_lPcj8locale_tPKcz
_Z11OpenArchivePKcPP10ZipArchive
_Z11mbsrtowcs_lPwPPKcjPi8locale_t
_Z11vasprintf_lPPc8locale_tPKcS_
_Z12CloseArchiveP10ZipArchive
_Z12EndIterationPv
_Z12MB_CUR_MAX_L8locale_t
_Z12localeconv_l8locale_t
_Z12mbsnrtowcs_lPwPPKcjjPi8locale_t
_Z12wcsnrtombs_lPcPPKwjjPi8locale_t
_Z13GetDefaultTagv
_Z13OpenArchiveFdiPKcPP10ZipArchiveb
_Z14GetArchiveInfoP10ZipArchive
_Z14StartIterationP10ZipArchivePPvNSt3__117basic_string_viewIcNS3_11char_traitsIcEEEES7_
_Z14StartIterationP10ZipArchivePPvNSt3__18functionIFbNS3_17basic_string_viewIcNS3_11char_traitsIcEEEEEEE
_Z15ErrorCodeStringi
_Z15ExtractToMemoryP10ZipArchivePK10ZipEntry64Phj
_Z15ExtractToMemoryP10ZipArchivePK8ZipEntryPhj
_Z16IsValidEntryNamePKhj
_Z17GetFileDescriptorP10ZipArchive
_Z18ExtractEntryToFileP10ZipArchivePK10ZipEntry64i
_Z18ExtractEntryToFileP10ZipArchivePK8ZipEntryi
_Z18OpenArchiveFdRangeiPKcPP10ZipArchivexxb
_Z18__libcpp_vasprintfPPcPKcS_
_Z21OpenArchiveFromMemoryPKvjPKcPP10ZipArchive
_Z23GetFileDescriptorOffsetP10ZipArchive
_Z24androidCreateThreadGetIDPFiPvES_Pj
_Z4NextPvP10ZipEntry64PNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE
_Z4NextPvP10ZipEntry64PNSt3__117basic_string_viewIcNS2_11char_traitsIcEEEE
_Z4NextPvP8ZipEntryPNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE
_Z4NextPvP8ZipEntryPNSt3__117basic_string_viewIcNS2_11char_traitsIcEEEE
_Z6sscanfPKcS0_z
_Z7btowc_li8locale_t
_Z7fprintfP6_iobufPKcz
_Z7sprintfPcPKcz
_Z7wctob_lt8locale_t
_Z8mbrlen_lPKcjPi8locale_t
_Z8snprintfPcjPKcz
_Z8strtof_lPKcPPc8locale_t
_Z8vfprintfP6_iobufPKcPc
_Z9FindEntryP10ZipArchiveNSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEP10ZipEntry64
_Z9FindEntryP10ZipArchiveNSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEP8ZipEntry
_Z9mbrtowc_lPwPKcjPi8locale_t
_Z9newlocaleiPKc8locale_t
_Z9strtold_lPKcPPc8locale_t
_Z9wcrtomb_lPcwPi8locale_t
_ZGVZN4aapt11DiffContext24GetSplitNameDependenciesEvE5empty
_ZGVZN4aapt14CompileContext21GetCompilationPackageEvE5empty
_ZGVZN4aapt14CompileContext24GetSplitNameDependenciesEvE5empty
_ZGVZN4aapt15OptimizeContext21GetCompilationPackageEvE5empty
_ZGVZN4aapt15OptimizeContext24GetSplitNameDependenciesEvE5empty
_ZGVZN4aapt15SignatureFilter4KeepERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEE15signature_regex
_ZGVZN4aapt7Context24GetSplitNameDependenciesEvE5empty
_ZGVZN6google8protobuf20FileDescriptorTables16GetEmptyInstanceEvE22file_descriptor_tables
_ZGVZN6google8protobuf8internal12ShutdownData3getEvE4data
_ZN10FileReaderD0Ev
_ZN10FileWriter6AppendEPhj
_ZN10FileWriter6CreateEiPK10ZipEntry64
_ZN10FileWriterC2Eiy
_ZN10FileWriterD0Ev
_ZN10ZipArchive26InitializeCentralDirectoryExj
_ZN10ZipArchiveC1EO13MappedZipFileb
_ZN10ZipArchiveC1EPKvj
_ZN10ZipArchiveC2EO13MappedZipFileb
_ZN10ZipArchiveC2EPKvj
_ZN10ZipArchiveD1Ev
_ZN10ZipArchiveD2Ev
_ZN10__cxxabiv116__enum_type_infoD0Ev
_ZN10__cxxabiv116__enum_type_infoD1Ev
_ZN10__cxxabiv116__enum_type_infoD2Ev
_ZN10__cxxabiv116__shim_type_infoD0Ev
_ZN10__cxxabiv116__shim_type_infoD1Ev
_ZN10__cxxabiv116__shim_type_infoD2Ev
_ZN10__cxxabiv117__array_type_infoD0Ev
_ZN10__cxxabiv117__array_type_infoD1Ev
_ZN10__cxxabiv117__array_type_infoD2Ev
_ZN10__cxxabiv117__class_type_infoD0Ev
_ZN10__cxxabiv117__class_type_infoD1Ev
_ZN10__cxxabiv117__class_type_infoD2Ev
_ZN10__cxxabiv117__pbase_type_infoD0Ev
_ZN10__cxxabiv117__pbase_type_infoD1Ev
_ZN10__cxxabiv117__pbase_type_infoD2Ev
_ZN10__cxxabiv119__getExceptionClassEPK17_Unwind_Exception
_ZN10__cxxabiv119__pointer_type_infoD0Ev
_ZN10__cxxabiv119__pointer_type_infoD1Ev
_ZN10__cxxabiv119__pointer_type_infoD2Ev
_ZN10__cxxabiv119__setExceptionClassEP17_Unwind_Exceptiony
_ZN10__cxxabiv120__free_with_fallbackEPv
_ZN10__cxxabiv120__function_type_infoD0Ev
_ZN10__cxxabiv120__function_type_infoD1Ev
_ZN10__cxxabiv120__function_type_infoD2Ev
_ZN10__cxxabiv120__si_class_type_infoD0Ev
_ZN10__cxxabiv120__si_class_type_infoD1Ev
_ZN10__cxxabiv120__si_class_type_infoD2Ev
_ZN10__cxxabiv121__isOurExceptionClassEPK17_Unwind_Exception
_ZN10__cxxabiv121__vmi_class_type_infoD0Ev
_ZN10__cxxabiv121__vmi_class_type_infoD1Ev
_ZN10__cxxabiv121__vmi_class_type_infoD2Ev
_ZN10__cxxabiv122__calloc_with_fallbackEjj
_ZN10__cxxabiv123__fundamental_type_infoD0Ev
_ZN10__cxxabiv123__fundamental_type_infoD1Ev
_ZN10__cxxabiv123__fundamental_type_infoD2Ev
_ZN10__cxxabiv128__aligned_free_with_fallbackEPv
_ZN10__cxxabiv129__pointer_to_member_type_infoD0Ev
_ZN10__cxxabiv129__pointer_to_member_type_infoD1Ev
_ZN10__cxxabiv129__pointer_to_member_type_infoD2Ev
_ZN10__cxxabiv130__aligned_malloc_with_fallbackEj
_ZN11EntryReaderD0Ev
_ZN11zip_archive15ExtractToWriterEP10ZipArchivePK10ZipEntry64PNS_6WriterE
_ZN11zip_archive6ReaderD0Ev
_ZN11zip_archive6ReaderD1Ev
_ZN11zip_archive6ReaderD2Ev
_ZN11zip_archive6WriterD0Ev
_ZN11zip_archive6WriterD1Ev
_ZN11zip_archive6WriterD2Ev
_ZN11zip_archive7InflateERKNS_6ReaderEyyPNS_6WriterEPy
_ZN12BufferReaderD0Ev
_ZN12BufferWriter6AppendEPhj
_ZN12BufferWriterD0Ev
_ZN12MemoryWriter6AppendEPhj
_ZN12MemoryWriterD0Ev
_ZN12TemporaryDir4initERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
_ZN12TemporaryDirC1Ev
_ZN12TemporaryDirC2Ev
_ZN12TemporaryDirD1Ev
_ZN12TemporaryDirD2Ev
_ZN13TemporaryFile4initERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
_ZN13TemporaryFile7releaseEv
_ZN13TemporaryFileC1ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
_ZN13TemporaryFileC1Ev
_ZN13TemporaryFileC2ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
_ZN13TemporaryFileC2Ev
_ZN13TemporaryFileD1Ev
_ZN13TemporaryFileD2Ev
_ZN14JniDiagnostics3LogEN4aapt12IDiagnostics5LevelERNS0_17DiagMessageActualE
_ZN14JniDiagnosticsD0Ev
_ZN15CdEntryMapZip3214ResetIterationEv
_ZN15CdEntryMapZip324NextEPKh
_ZN15CdEntryMapZip326CreateEt
_ZN15CdEntryMapZip328AddToMapENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEEPKh
_ZN15CdEntryMapZip32C1Et
_ZN15CdEntryMapZip32C2Et
_ZN15CdEntryMapZip32D0Ev
_ZN15CdEntryMapZip32D2Ev
_ZN15CdEntryMapZip6414ResetIterationEv
_ZN15CdEntryMapZip644NextEPKh
_ZN15CdEntryMapZip646CreateEv
_ZN15CdEntryMapZip648AddToMapENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEEPKh
_ZN15CdEntryMapZip64D0Ev
_ZN15CdEntryMapZip64D2Ev
_ZN16CentralDirectory10InitializeEPKvxj
_ZN4aapt10BeginTraceERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
_ZN4aapt10CloneEntryERKNS_5Style5EntryEPNS_10StringPoolE
_ZN4aapt10FlushTraceC1ERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES9_
_ZN4aapt10FlushTraceC1ERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES9_RKNS1_6vectorIN7android16BasicStringPieceIcEENS5_ISD_EEEE
_ZN4aapt10FlushTraceC1ERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES9_RKNS1_6vectorIS7_NS5_IS7_EEEE
_ZN4aapt10FlushTraceC2ERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES9_
_ZN4aapt10FlushTraceC2ERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES9_RKNS1_6vectorIN7android16BasicStringPieceIcEENS5_ISD_EEEE
_ZN4aapt10FlushTraceC2ERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES9_RKNS1_6vectorIS7_NS5_IS7_EEEE
_ZN4aapt10FlushTraceD1Ev
_ZN4aapt10FlushTraceD2Ev
_ZN4aapt10IdAssigner7ConsumeEPNS_12IAaptContextEPNS_13ResourceTableE
_ZN4aapt10IdAssignerD0Ev
_ZN4aapt10StringPool11FlattenUtf8EPNS_9BigBufferERKS0_PNS_12IDiagnosticsE
_ZN4aapt10StringPool11HintWillAddEjj
_ZN4aapt10StringPool11MakeRefImplERKN7android16BasicStringPieceIcEERKNS0_7ContextEb
_ZN4aapt10StringPool12FlattenUtf16EPNS_9BigBufferERKS0_PNS_12IDiagnosticsE
_ZN4aapt10StringPool15ReAssignIndicesEv
_ZN4aapt10StringPool3RefC1EPNS0_5EntryE
_ZN4aapt10StringPool3RefC1ERKS1_
_ZN4aapt10StringPool3RefC1Ev
_ZN4aapt10StringPool3RefC2EPNS0_5EntryE
_ZN4aapt10StringPool3RefC2ERKS1_
_ZN4aapt10StringPool3RefC2Ev
_ZN4aapt10StringPool3RefD1Ev
_ZN4aapt10StringPool3RefD2Ev
_ZN4aapt10StringPool3RefaSERKS1_
_ZN4aapt10StringPool4SortERKNSt3__18functionIFiRKNS0_7ContextES5_EEE
_ZN4aapt10StringPool5MergeEOS0_
_ZN4aapt10StringPool5PruneEv
_ZN4aapt10StringPool7FlattenEPNS_9BigBufferERKS0_bPNS_12IDiagnosticsE
_ZN4aapt10StringPool7MakeRefERKN7android16BasicStringPieceIcEE
_ZN4aapt10StringPool7MakeRefERKN7android16BasicStringPieceIcEERKNS0_7ContextE
_ZN4aapt10StringPool7MakeRefERKNS0_3RefE
_ZN4aapt10StringPool7MakeRefERKNS0_8StyleRefE
_ZN4aapt10StringPool7MakeRefERKNS_11StyleStringE
_ZN4aapt10StringPool7MakeRefERKNS_11StyleStringERKNS0_7ContextE
_ZN4aapt10StringPool8StyleRefC1EPNS0_10StyleEntryE
_ZN4aapt10StringPool8StyleRefC1ERKS1_
_ZN4aapt10StringPool8StyleRefC1Ev
_ZN4aapt10StringPool8StyleRefC2EPNS0_10StyleEntryE
_ZN4aapt10StringPool8StyleRefC2ERKS1_
_ZN4aapt10StringPool8StyleRefC2Ev
_ZN4aapt10StringPool8StyleRefD1Ev
_ZN4aapt10StringPool8StyleRefD2Ev
_ZN4aapt10StringPool8StyleRefaSERKS1_
_ZN4aapt10StringPoolD2Ev
_ZN4aapt10VisibilityaSERKS0_
_ZN4aapt11ClassMemberD0Ev
_ZN4aapt11ClassMemberD2Ev
_ZN4aapt11DiagMessageC2ERKN7android16BasicStringPieceIcEE
_ZN4aapt11DiagMessageC2ERKNS_6SourceE
_ZN4aapt11DiagMessageC2Ev
_ZN4aapt11DiagMessageD2Ev
_ZN4aapt11DiagMessagelsINS_10ResourceIdEEERS0_RKT_
_ZN4aapt11DiagMessagelsINSt3__112basic_stringIDsNS2_11char_traitsIDsEENS2_9allocatorIDsEEEEEERS0_RKT_
_ZN4aapt11DiagMessagelsINSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEEERS0_RKT_
_ZN4aapt11DiagMessagelsIPKcEERS0_RKT_
_ZN4aapt11DiffCommand6ActionERKNSt3__16vectorINS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS6_IS8_EEEE
_ZN4aapt11DiffCommandD0Ev
_ZN4aapt11DiffContext12GetPackageIdEv
_ZN4aapt11DiffContext14GetDiagnosticsEv
_ZN4aapt11DiffContext14GetNameManglerEv
_ZN4aapt11DiffContext14GetPackageTypeEv
_ZN4aapt11DiffContext16GetMinSdkVersionEv
_ZN4aapt11DiffContext18GetExternalSymbolsEv
_ZN4aapt11DiffContext21GetCompilationPackageEv
_ZN4aapt11DiffContext24GetSplitNameDependenciesEv
_ZN4aapt11DiffContext9IsVerboseEv
_ZN4aapt11DiffContextC2Ev
_ZN4aapt11DiffContextD0Ev
_ZN4aapt11DiffContextD2Ev
_ZN4aapt11FilterChain4KeepERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEE
_ZN4aapt11FilterChainD0Ev
_ZN4aapt11FilterChainD2Ev
_ZN4aapt11GetSafePathERKN7android16BasicStringPieceIcEE
_ZN4aapt11IPathFilterD2Ev
_ZN4aapt11LinkCommand6ActionERKNSt3__16vectorINS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS6_IS8_EEEE
_ZN4aapt11LinkCommandC2EPNS_12IDiagnosticsE
_ZN4aapt11LinkCommandD0Ev
_ZN4aapt11LinkCommandD2Ev
_ZN4aapt11LinkContext12GetPackageIdEv
_ZN4aapt11LinkContext14GetDiagnosticsEv
_ZN4aapt11LinkContext14GetNameManglerEv
_ZN4aapt11LinkContext14GetPackageTypeEv
_ZN4aapt11LinkContext16GetMinSdkVersionEv
_ZN4aapt11LinkContext18GetExternalSymbolsEv
_ZN4aapt11LinkContext20SetNameManglerPolicyERKNS_17NameManglerPolicyE
_ZN4aapt11LinkContext21GetCompilationPackageEv
_ZN4aapt11LinkContext21SetCompilationPackageERKN7android16BasicStringPieceIcEE
_ZN4aapt11LinkContext24GetSplitNameDependenciesEv
_ZN4aapt11LinkContext9IsVerboseEv
_ZN4aapt11LinkContextC2EPNS_12IDiagnosticsE
_ZN4aapt11LinkContextD0Ev
_ZN4aapt11LinkContextD2Ev
_ZN4aapt11LinkOptionsC2ERKS0_
_ZN4aapt11LinkOptionsD2Ev
_ZN4aapt11NameMangler10MangleNameERKNS_12ResourceNameE
_ZN4aapt11NameMangler11MangleEntryERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES9_
_ZN4aapt11NameMangler8UnmangleEPNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES8_
_ZN4aapt11NewResourceC2EOS0_
_ZN4aapt11NewResourceD2Ev
_ZN4aapt11Overlayable12kActorSchemeE
_ZN4aapt11OverlayableC2ERKN7android16BasicStringPieceIcEES5_
_ZN4aapt11OverlayableC2ERKN7android16BasicStringPieceIcEES5_RKNS_6SourceE
_ZN4aapt11ParseConfigERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEPNS_12IAaptContextEPNS_15OptimizeOptionsE
_ZN4aapt11SegmentNodeD0Ev
_ZN4aapt11SegmentNodeD2Ev
_ZN4aapt11SymbolTable10FindByNameERKNS_12ResourceNameE
_ZN4aapt11SymbolTable11SetDelegateENSt3__110unique_ptrINS_20ISymbolTableDelegateENS1_14default_deleteIS3_EEEE
_ZN4aapt11SymbolTable12AppendSourceENSt3__110unique_ptrINS_13ISymbolSourceENS1_14default_deleteIS3_EEEE
_ZN4aapt11SymbolTable13PrependSourceENSt3__110unique_ptrINS_13ISymbolSourceENS1_14default_deleteIS3_EEEE
_ZN4aapt11SymbolTable15FindByReferenceERKNS_9ReferenceE
_ZN4aapt11SymbolTable8FindByIdERKNS_10ResourceIdE
_ZN4aapt11SymbolTableC1EPNS_11NameManglerE
_ZN4aapt11SymbolTableC2EPNS_11NameManglerE
_ZN4aapt11TableMerger14MergeAndMangleERKNS_6SourceERKN7android16BasicStringPieceIcEEPNS_13ResourceTableE
_ZN4aapt11TableMerger18CloneAndMangleFileERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEERKNS_13FileReferenceE
_ZN4aapt11TableMerger5MergeERKNS_6SourceEPNS_13ResourceTableEb
_ZN4aapt11TableMerger7DoMergeERKNS_6SourceEPNS_20ResourceTablePackageEbbb
_ZN4aapt11TableMerger9MergeFileERKNS_12ResourceFileEbPNS_2io5IFileE
_ZN4aapt11TableMerger9MergeImplERKNS_6SourceEPNS_13ResourceTableEbb
_ZN4aapt11TableMergerC1EPNS_12IAaptContextEPNS_13ResourceTableERKNS_18TableMergerOptionsE
_ZN4aapt11TableMergerC2EPNS_12IAaptContextEPNS_13ResourceTableERKNS_18TableMergerOptionsE
_ZN4aapt11tracebuffer11AddWithTimeERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEcx
_ZN4aapt11tracebuffer3AddERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEc
_ZN4aapt11tracebuffer5FlushERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEE
_ZN4aapt12IAaptContextD2Ev
_ZN4aapt12IDiagnostics4NoteERKNS_11DiagMessageE
_ZN4aapt12IDiagnostics4WarnERKNS_11DiagMessageE
_ZN4aapt12IDiagnostics5ErrorERKNS_11DiagMessageE
_ZN4aapt12IDiagnosticsD2Ev
_ZN4aapt12ResourceFileD2Ev
_ZN4aapt12StyledStringC1ERKNS_10StringPool8StyleRefE
_ZN4aapt12StyledStringC2ERKNS_10StringPool8StyleRefE
_ZN4aapt12StyledStringD0Ev
_ZN4aapt12StyledStringD2Ev
_ZN4aapt12ValueVisitor5VisitEPNS_12StyledStringE
_ZN4aapt12ValueVisitor5VisitEPNS_13FileReferenceE
_ZN4aapt12ValueVisitor5VisitEPNS_15BinaryPrimitiveE
_ZN4aapt12ValueVisitor5VisitEPNS_2IdE
_ZN4aapt12ValueVisitor5VisitEPNS_5ArrayE
_ZN4aapt12ValueVisitor5VisitEPNS_5MacroE
_ZN4aapt12ValueVisitor5VisitEPNS_5StyleE
_ZN4aapt12ValueVisitor5VisitEPNS_6PluralE
_ZN4aapt12ValueVisitor5VisitEPNS_6StringE
_ZN4aapt12ValueVisitor5VisitEPNS_9AttributeE
_ZN4aapt12ValueVisitor5VisitEPNS_9RawStringE
_ZN4aapt12ValueVisitor5VisitEPNS_9ReferenceE
_ZN4aapt12ValueVisitor5VisitEPNS_9StyleableE
_ZN4aapt12ValueVisitor8VisitAnyEPNS_5ValueE
_ZN4aapt12ValueVisitor9VisitItemEPNS_4ItemE
_ZN4aapt12ValueVisitorD2Ev
_ZN4aapt12XmlFlattener7ConsumeEPNS_12IAaptContextEPKNS_3xml11XmlResourceE
_ZN4aapt12XmlFlattener7FlattenEPNS_12IAaptContextEPKNS_3xml4NodeE
_ZN4aapt13AutoVersioner7ConsumeEPNS_12IAaptContextEPNS_13ResourceTableE
_ZN4aapt13AutoVersionerD0Ev
_ZN4aapt13DominatorTree15BottomUpVisitor9VisitNodeEPNS0_4NodeE
_ZN4aapt13DominatorTree15BottomUpVisitor9VisitTreeERKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEPNS0_4NodeE
_ZN4aapt13DominatorTree4Node11TryAddChildENSt3__110unique_ptrIS1_NS2_14default_deleteIS1_EEEE
_ZN4aapt13DominatorTree4Node8AddChildENSt3__110unique_ptrIS1_NS2_14default_deleteIS1_EEEE
_ZN4aapt13DominatorTree6AcceptEPNS0_7VisitorE
_ZN4aapt13DominatorTree7VisitorD2Ev
_ZN4aapt13DominatorTreeC1ERKNSt3__16vectorINS1_10unique_ptrINS_19ResourceConfigValueENS1_14default_deleteIS4_EEEENS1_9allocatorIS7_EEEE
_ZN4aapt13DominatorTreeC2ERKNSt3__16vectorINS1_10unique_ptrINS_19ResourceConfigValueENS1_14default_deleteIS4_EEEENS1_9allocatorIS7_EEEE
_ZN4aapt13ExtractConfigERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEPNS_12IAaptContextEPNS_15OptimizeOptionsE
_ZN4aapt13FileReferenceC1ERKNS_10StringPool3RefE
_ZN4aapt13FileReferenceC2ERKNS_10StringPool3RefE
_ZN4aapt13FileReferenceD0Ev
_ZN4aapt13FileReferenceD2Ev
_ZN4aapt13ISymbolSource15FindByReferenceERKNS_9ReferenceE
_ZN4aapt13ISymbolSourceD2Ev
_ZN4aapt13ManifestFixer10BuildRulesEPNS_3xml17XmlActionExecutorEPNS_12IDiagnosticsE
_ZN4aapt13ManifestFixer7ConsumeEPNS_12IAaptContextEPNS_3xml11XmlResourceE
_ZN4aapt13ManifestFixerD0Ev
_ZN4aapt13ManifestFixerD2Ev
_ZN4aapt13ProductFilter19SelectProductToKeepERKNS_15ResourceNameRefENSt3__111__wrap_iterIPNS4_10unique_ptrINS_19ResourceConfigValueENS4_14default_deleteIS7_EEEEEESC_PNS_12IDiagnosticsE
_ZN4aapt13ProductFilter7ConsumeEPNS_12IAaptContextEPNS_13ResourceTableE
_ZN4aapt13ProductFilterD0Ev
_ZN4aapt13ProductFilterD2Ev
_ZN4aapt13ResourceEntry13FindAllValuesERKN7android17ConfigDescriptionE
_ZN4aapt13ResourceEntry17FindOrCreateValueERKN7android17ConfigDescriptionERKNS1_16BasicStringPieceIcEE
_ZN4aapt13ResourceEntry9FindValueERKN7android17ConfigDescriptionENS1_16BasicStringPieceIcEE
_ZN4aapt13ResourceEntryD2Ev
_ZN4aapt13ResourceTable11AddResourceEONS_11NewResourceEPNS_12IDiagnosticsE
_ZN4aapt13ResourceTable19FindOrCreatePackageERKN7android16BasicStringPieceIcEE
_ZN4aapt13ResourceTable21ResolveValueCollisionEPNS_5ValueES2_
_ZN4aapt13ResourceTableC1ENS0_10ValidationE
_ZN4aapt13ResourceTableC2ENS0_10ValidationE
_ZN4aapt13ResourceTableD2Ev
_ZN4aapt13ResourceUtils11IsReferenceERKN7android16BasicStringPieceIcEE
_ZN4aapt13ResourceUtils11TryParseIntERKN7android16BasicStringPieceIcEE
_ZN4aapt13ResourceUtils12TryParseBoolERKN7android16BasicStringPieceIcEE
_ZN4aapt13ResourceUtils13StringBuilder10AppendTextERKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE
_ZN4aapt13ResourceUtils13StringBuilder14ResetTextStateEv
_ZN4aapt13ResourceUtils13StringBuilder17EndUntranslatableEj
_ZN4aapt13ResourceUtils13StringBuilder19StartUntranslatableEv
_ZN4aapt13ResourceUtils13StringBuilder7EndSpanEj
_ZN4aapt13ResourceUtils13StringBuilder9StartSpanERKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE
_ZN4aapt13ResourceUtils13StringBuilderC1Eb
_ZN4aapt13ResourceUtils13StringBuilderC2Eb
_ZN4aapt13ResourceUtils13TryParseColorERKN7android16BasicStringPieceIcEE
_ZN4aapt13ResourceUtils13TryParseFloatERKN7android16BasicStringPieceIcEE
_ZN4aapt13ResourceUtils14ParseReferenceERKN7android16BasicStringPieceIcEEPNS_15ResourceNameRefEPbS8_
_ZN4aapt13ResourceUtils14ToResourceNameERKN7android13AssetManager212ResourceNameE
_ZN4aapt13ResourceUtils14ToResourceNameERKN7android8ResTable13resource_nameE
_ZN4aapt13ResourceUtils15ParseResourceIdERKN7android16BasicStringPieceIcEE
_ZN4aapt13ResourceUtils15ParseSdkVersionERKN7android16BasicStringPieceIcEE
_ZN4aapt13ResourceUtils17ParseResourceNameERKN7android16BasicStringPieceIcEEPNS_15ResourceNameRefEPb
_ZN4aapt13ResourceUtils17TryParseReferenceERKN7android16BasicStringPieceIcEEPb
_ZN4aapt13ResourceUtils18FlattenedXmlStringC2ERKS1_
_ZN4aapt13ResourceUtils18TryParseEnumSymbolEPKNS_9AttributeERKN7android16BasicStringPieceIcEE
_ZN4aapt13ResourceUtils18TryParseFlagSymbolEPKNS_9AttributeERKN7android16BasicStringPieceIcEE
_ZN4aapt13ResourceUtils19ParseBinaryResValueERKNS_12ResourceTypeERKN7android17ConfigDescriptionERKNS4_13ResStringPoolERKNS4_9Res_valueEPNS_10StringPoolE
_ZN4aapt13ResourceUtils19TryParseNullOrEmptyERKN7android16BasicStringPieceIcEE
_ZN4aapt13ResourceUtils20IsAttributeReferenceERKN7android16BasicStringPieceIcEE
_ZN4aapt13ResourceUtils21BuildResourceFileNameERKNS_12ResourceFileEPKNS_11NameManglerE
_ZN4aapt13ResourceUtils21ParseXmlAttributeNameERKN7android16BasicStringPieceIcEE
_ZN4aapt13ResourceUtils23ParseAttributeReferenceERKN7android16BasicStringPieceIcEEPNS_15ResourceNameRefE
_ZN4aapt13ResourceUtils24TryParseItemForAttributeERKN7android16BasicStringPieceIcEEPKNS_9AttributeERKNSt3__18functionIFbRKNS_12ResourceNameEEEE
_ZN4aapt13ResourceUtils24TryParseItemForAttributeERKN7android16BasicStringPieceIcEEjRKNSt3__18functionIFbRKNS_12ResourceNameEEEE
_ZN4aapt13ResourceUtils25ParseStyleParentReferenceERKN7android16BasicStringPieceIcEEPNSt3__112basic_stringIcNS6_11char_traitsIcEENS6_9allocatorIcEEEE
_ZN4aapt13ResourceUtils30AndroidTypeToAttributeTypeMaskEt
_ZN4aapt13ResourceUtils7MakeIntEj
_ZN4aapt13ResourceUtils8MakeBoolEb
_ZN4aapt13ResourceUtils8MakeNullEv
_ZN4aapt13ResourceUtils8ParseIntERKN7android16BasicStringPieceIcEE
_ZN4aapt13ResourceUtils9MakeEmptyEv
_ZN4aapt13ResourceUtils9ParseBoolERKN7android16BasicStringPieceIcEE
_ZN4aapt13TableSplitter10SplitTableEPNS_13ResourceTableE
_ZN4aapt13TableSplitter22VerifySplitConstraintsEPNS_12IAaptContextE
_ZN4aapt13TableSplitterC2ERKNSt3__16vectorINS_16SplitConstraintsENS1_9allocatorIS3_EEEERKNS_20TableSplitterOptionsE
_ZN4aapt13TableSplitterD2Ev
_ZN4aapt13configuration10AndroidSdkaSEOS1_
_ZN4aapt13configuration10ToBaseNameENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEERKN7android16BasicStringPieceIcEEPNS_12IDiagnosticsE
_ZN4aapt13configuration11AbiToStringENS0_3AbiE
_ZN4aapt13configuration12IsGroupValidIN7android17ConfigDescriptionEEEbRKNSt3__113unordered_mapINS4_12basic_stringIcNS4_11char_traitsIcEENS4_9allocatorIcEEEENS0_12OrderedEntryIT_EENS4_4hashISB_EENS4_8equal_toISB_EENS9_INS4_4pairIKSB_SE_EEEEEERSK_PNS_12IDiagnosticsE
_ZN4aapt13configuration12IsGroupValidINS0_3AbiEEEbRKNSt3__113unordered_mapINS3_12basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEENS0_12OrderedEntryIT_EENS3_4hashISA_EENS3_8equal_toISA_EENS8_INS3_4pairIKSA_SD_EEEEEERSJ_PNS_12IDiagnosticsE
_ZN4aapt13configuration12IsGroupValidINS0_9GlTextureEEEbRKNSt3__113unordered_mapINS3_12basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEENS0_12OrderedEntryIT_EENS3_4hashISA_EENS3_8equal_toISA_EENS8_INS3_4pairIKSA_SD_EEEEEERSJ_PNS_12IDiagnosticsE
_ZN4aapt13configuration12IsGroupValidINSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEEEbRKNS2_13unordered_mapIS8_NS0_12OrderedEntryIT_EENS2_4hashIS8_EENS2_8equal_toIS8_EENS6_INS2_4pairIKS8_SC_EEEEEERSI_PNS_12IDiagnosticsE
_ZN4aapt13configuration14OutputArtifactC2EOS1_
_ZN4aapt13configuration14OutputArtifactC2ERKS1_
_ZN4aapt13configuration14OutputArtifactD2Ev
_ZN4aapt13configuration18ConfiguredArtifactC2ERKS1_
_ZN4aapt13configuration18ConfiguredArtifactD2Ev

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gcc_exc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/res/Lib/libwinpthread-1.dll
.dll windows:4 windows x86

7558521c8fe6b78071bc407f14af1903

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

02-07-2021 00:00

Not After

10-07-2024 23:59

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e1:45:e4:ab:c6:70:81:65:9f:04:5c:e0:0d:fe:ee:39:74:9b:d6:75:b5:1c:6e:d2:ca:cc:64:04:e5:b5:a0:6c
Signer

Actual PE Digest

e1:45:e4:ab:c6:70:81:65:9f:04:5c:e0:0d:fe:ee:39:74:9b:d6:75:b5:1c:6e:d2:ca:cc:64:04:e5:b5:a0:6c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FileTimeToSystemTime
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetProcessAffinityMask
GetProcessTimes
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetThreadTimes
GetTickCount
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetEvent
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject

api-ms-win-crt-convert-l1-1-0

_ultoa

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc
realloc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vsprintf
fgetwc
fwrite
getc

api-ms-win-crt-string-l1-1-0

memset
strlen
strncmp
_strdup

api-ms-win-crt-private-l1-1-0

_setjmp3
longjmp
memcpy
memmove

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_tzset

api-ms-win-crt-runtime-l1-1-0

_set_app_type
__p___argc
__p___argv
__p___wargv
_beginthreadex
_configure_narrow_argv
_configure_wide_argv
_crt_atexit
_endthreadex
_errno
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort
exit

Exports

Exports

__pth_gpointer_locked
__pthread_clock_nanosleep
_pthread_cleanup_dest
_pthread_get_state
_pthread_invoke_cancel
_pthread_key_dest
_pthread_rel_time_in_ms
_pthread_set_state
_pthread_time_in_ms
_pthread_time_in_ms_from_timespec
_pthread_tryjoin
clock_getres
clock_gettime
clock_nanosleep
clock_settime
nanosleep
pthread_attr_destroy
pthread_attr_getdetachstate
pthread_attr_getinheritsched
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_setdetachstate
pthread_attr_setinheritsched
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_init
pthread_barrier_wait
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_timedwait_relative_np
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getclock
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setclock
pthread_condattr_setpshared
pthread_create
pthread_create_wrapper
pthread_delay_np
pthread_detach
pthread_equal
pthread_exit
pthread_get_concurrency
pthread_getclean
pthread_getconcurrency
pthread_getevent
pthread_gethandle
pthread_getname_np
pthread_getschedparam
pthread_getspecific
pthread_join
pthread_key_create
pthread_key_delete
pthread_kill
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_timedlock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getprioceiling
pthread_mutexattr_getprotocol
pthread_mutexattr_getpshared
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setprioceiling
pthread_mutexattr_setprotocol
pthread_mutexattr_setpshared
pthread_mutexattr_settype
pthread_num_processors_np
pthread_once
pthread_rwlock_destroy
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_set_concurrency
pthread_set_num_processors_np
pthread_setcancelstate
pthread_setcanceltype
pthread_setconcurrency
pthread_setname_np
pthread_setschedparam
pthread_setspecific
pthread_spin_destroy
pthread_spin_init
pthread_spin_lock
pthread_spin_trylock
pthread_spin_unlock
pthread_testcancel
pthread_timechange_handler_np
pthread_tls_init
sched_get_priority_max
sched_get_priority_min
sched_getscheduler
sched_setscheduler
sched_yield
sem_close
sem_destroy
sem_getvalue
sem_init
sem_open
sem_post
sem_post_multiple
sem_timedwait
sem_trywait
sem_unlink
sem_wait

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1012B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CraxsRat_V6.7/res/Lib/platformBinary.zip
.zip
CraxsRat_V6.7/res/Plugins/Android/gen-1.pl
.dex
CraxsRat_V6.7/res/Plugins/Android/gen-2.pl
CraxsRat_V6.7/res/Plugins/Android/gen-3.pl
CraxsRat_V6.7/res/Plugins/Android/gen-4.pl
.dex
CraxsRat_V6.7/res/Plugins/Android/gen-5.pl
.dex
CraxsRat_V6.7/res/Plugins/Android/gen-6.pl
CraxsRat_V6.7/res/Plugins/Android/gen-7.pl
CraxsRat_V6.7/res/Plugins/Android/gen-8.pl

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 69.5MB - Virtual size: 69.5MB

.rsrc Size: 235KB - Virtual size: 235KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 189KB - Virtual size: 189KB

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 512B - Virtual size: 12B

2843de49dbfe3d6c40e1db4b51e9fa5e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

Exports

Exports

Sections

.text Size: 353KB - Virtual size: 352KB

.rdata Size: 162KB - Virtual size: 161KB

.data Size: 115KB - Virtual size: 127KB

.pdata Size: 25KB - Virtual size: 25KB

.hvm0 Size: 3.7MB - Virtual size: 3.7MB

.reloc Size: 15KB - Virtual size: 15KB

.rsrc Size: 1024B - Virtual size: 1014B

b2ff0f091ba14e9fe411060ab1560c66

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

Exports

Exports

Sections

.text Size: 264KB - Virtual size: 263KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 112KB - Virtual size: 120KB

.hvm0 Size: 1.7MB - Virtual size: 1.7MB

.reloc Size: 32KB - Virtual size: 30KB

.rsrc Size: 4KB - Virtual size: 1010B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 50KB - Virtual size: 50KB

.text
Size: 69.5MB - Virtual size: 69.5MB

.rsrc
Size: 235KB - Virtual size: 235KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1.6MB - Virtual size: 1.6MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 189KB - Virtual size: 189KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 353KB - Virtual size: 352KB

.rdata
Size: 162KB - Virtual size: 161KB

.data
Size: 115KB - Virtual size: 127KB

.pdata
Size: 25KB - Virtual size: 25KB

.hvm0
Size: 3.7MB - Virtual size: 3.7MB

.reloc
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 1024B - Virtual size: 1014B

.text
Size: 264KB - Virtual size: 263KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 112KB - Virtual size: 120KB

.hvm0
Size: 1.7MB - Virtual size: 1.7MB

.reloc
Size: 32KB - Virtual size: 30KB

.rsrc
Size: 4KB - Virtual size: 1010B

.text
Size: 50KB - Virtual size: 50KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 17KB - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 210KB - Virtual size: 210KB

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 146KB - Virtual size: 146KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 496KB - Virtual size: 495KB

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 512B - Virtual size: 12B

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Certificate

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Certificate

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b
Signer

.text
Size: 681KB - Virtual size: 680KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B