Overview
overview
3Static
static
3F34569_ema.js
windows7-x64
1F34569_ema.js
windows10-2004-x64
1F34664_create_db.cmd
windows7-x64
1F34664_create_db.cmd
windows10-2004-x64
1F34694_delete_db.cmd
windows7-x64
1F34694_delete_db.cmd
windows10-2004-x64
1F34784_upgrade_db.cmd
windows7-x64
1F34784_upgrade_db.cmd
windows10-2004-x64
1F53690_boo...dle.js
windows7-x64
1F53690_boo...dle.js
windows10-2004-x64
1F53720_boo...dle.js
windows7-x64
1F53720_boo...dle.js
windows10-2004-x64
1F53750_boo...min.js
windows7-x64
1F53750_boo...min.js
windows10-2004-x64
1F53810_boo...esm.js
windows7-x64
1F53810_boo...esm.js
windows10-2004-x64
1F53840_boo...esm.js
windows7-x64
1F53840_boo...esm.js
windows10-2004-x64
1F53870_boo...min.js
windows7-x64
1F53870_boo...min.js
windows10-2004-x64
1F53930_bootstrap.js
windows7-x64
1F53930_bootstrap.js
windows10-2004-x64
1F53960_bootstrap.js
windows7-x64
1F53960_bootstrap.js
windows10-2004-x64
1F53990_boo...min.js
windows7-x64
1F53990_boo...min.js
windows10-2004-x64
1F58234_dat...ime.js
windows7-x64
1F58234_dat...ime.js
windows10-2004-x64
1F58264_dat...min.js
windows7-x64
1F58264_dat...min.js
windows10-2004-x64
1F58798_dat...min.js
windows7-x64
1F58798_dat...min.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
F34569_ema.js
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
F34569_ema.js
Resource
win10v2004-20231025-en
Behavioral task
behavioral3
Sample
F34664_create_db.cmd
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
F34664_create_db.cmd
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
F34694_delete_db.cmd
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
F34694_delete_db.cmd
Resource
win10v2004-20231020-en
Behavioral task
behavioral7
Sample
F34784_upgrade_db.cmd
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
F34784_upgrade_db.cmd
Resource
win10v2004-20231023-en
Behavioral task
behavioral9
Sample
F53690_bootstrap.bundle.js
Resource
win7-20231023-en
Behavioral task
behavioral10
Sample
F53690_bootstrap.bundle.js
Resource
win10v2004-20231025-en
Behavioral task
behavioral11
Sample
F53720_bootstrap.bundle.js
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
F53720_bootstrap.bundle.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral13
Sample
F53750_bootstrap.bundle.min.js
Resource
win7-20231020-en
Behavioral task
behavioral14
Sample
F53750_bootstrap.bundle.min.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
F53810_bootstrap.esm.js
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
F53810_bootstrap.esm.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
F53840_bootstrap.esm.js
Resource
win7-20231023-en
Behavioral task
behavioral18
Sample
F53840_bootstrap.esm.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
F53870_bootstrap.esm.min.js
Resource
win7-20231023-en
Behavioral task
behavioral20
Sample
F53870_bootstrap.esm.min.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
F53930_bootstrap.js
Resource
win7-20231023-en
Behavioral task
behavioral22
Sample
F53930_bootstrap.js
Resource
win10v2004-20231025-en
Behavioral task
behavioral23
Sample
F53960_bootstrap.js
Resource
win7-20231025-en
Behavioral task
behavioral24
Sample
F53960_bootstrap.js
Resource
win10v2004-20231025-en
Behavioral task
behavioral25
Sample
F53990_bootstrap.min.js
Resource
win7-20231025-en
Behavioral task
behavioral26
Sample
F53990_bootstrap.min.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral27
Sample
F58234_dataTables.dateTime.js
Resource
win7-20231020-en
Behavioral task
behavioral28
Sample
F58234_dataTables.dateTime.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral29
Sample
F58264_dataTables.dateTime.min.js
Resource
win7-20231020-en
Behavioral task
behavioral30
Sample
F58264_dataTables.dateTime.min.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
F58798_dataTables.editor.min.js
Resource
win7-20231020-en
Behavioral task
behavioral32
Sample
F58798_dataTables.editor.min.js
Resource
win10v2004-20231020-en
General
-
Target
c0b2739f36057e614c0192923b124c43396797bfee8f54f513989daaea7281d4.zip.zip
-
Size
3.6MB
-
MD5
5fda378896c1940d1eadbc0ca0a59d60
-
SHA1
4313f48e381730ee25b0787da4d5da83003f5b2d
-
SHA256
6c4251247e44cb8ceb1930426f49d1d4c82bf5053992664806f46e5649b6b2e5
-
SHA512
e25429d1bceedfa816d6314934728af7d4210951a33e9c3ad4f3a491a47bcecda07fd8461a11acb2fb4ede1b1f66f9edc4c116950a5c8eee7c6de1eb517c8800
-
SSDEEP
98304:y3r2LyvDptGwG7KauSnb7BIwH8aLRKbrA+zd0SV:yb0yvDpUwG7tbbNHhRKbMud0SV
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/instmsiw.exe unpack002/setup.exe
Files
-
c0b2739f36057e614c0192923b124c43396797bfee8f54f513989daaea7281d4.zip.zip.zip
Password: infected
-
c0b2739f36057e614c0192923b124c43396797bfee8f54f513989daaea7281d4.zip.zip
-
Data.Cab.cab
-
F34569_ema.php.js
-
F34664_create_db.cmd.cmd .vbs
-
F34694_delete_db.cmd.cmd .vbs
-
F34724_ema.sql
-
F34754_upgrade.sql
-
F34784_upgrade_db.cmd.cmd .vbs
-
F52702_bootstrapgrid.css
-
F52732_bootstrapgrid.css.map
-
F52762_bootstrapgrid.min.css
-
F52792_bootstrapgrid.min.css.map
-
F52822_bootstrapgrid.rtl.css
-
F52852_bootstrapgrid.rtl.css.map
-
F52882_bootstrapgrid.rtl.min.css
-
F52912_bootstrapgrid.rtl.min.css.map
-
F52942_bootstrapreboot.css
-
F52972_bootstrapreboot.css.map
-
F53002_bootstrapreboot.min.css
-
F53032_bootstrapreboot.min.css.map
-
F53062_bootstrapreboot.rtl.css
-
F53092_bootstrapreboot.rtl.css.map
-
F53122_bootstrapreboot.rtl.min.css
-
F53152_bootstrapreboot.rtl.min.css.map
-
F53182_bootstraputilities.css
-
F53212_bootstraputilities.css.map
-
F53242_bootstraputilities.min.css
-
F53272_bootstraputilities.min.css.map
-
F53302_bootstraputilities.rtl.css
-
F53332_bootstraputilities.rtl.css.map
-
F53362_bootstraputilities.rtl.min.css
-
F53392_bootstraputilities.rtl.min.css.map
-
F53422_bootstrap.css
-
F53452_bootstrap.css.map
-
F53482_bootstrap.min.css
-
F53512_bootstrap.min.css.map
-
F53542_bootstrap.rtl.css
-
F53572_bootstrap.rtl.css.map
-
F53602_bootstrap.rtl.min.css
-
F53632_bootstrap.rtl.min.css.map
-
F53690_bootstrap.bundle.js.js
-
F53720_bootstrap.bundle.js.map.js
-
F53750_bootstrap.bundle.min.js.js
-
F53780_bootstrap.bundle.min.js.map
-
F53810_bootstrap.esm.js.js
-
F53840_bootstrap.esm.js.map.js
-
F53870_bootstrap.esm.min.js.js
-
F53900_bootstrap.esm.min.js.map
-
F53930_bootstrap.js.js
-
F53960_bootstrap.js.map.js
-
F53990_bootstrap.min.js.js
-
F54020_bootstrap.min.js.map
-
F58146_dataTables.dateTime.css
-
F58176_dataTables.dateTime.min.css
-
F58234_dataTables.dateTime.js.js
-
F58264_dataTables.dateTime.min.js.js
-
F58352_editor.bootstrap5.min.css
-
F58382_editor.dataTables.min.css
-
F58440_bubble.scss
-
F58470_datatable.scss
-
F58500_datetime.scss
-
F58530_envelope.scss
-
F58560_fields.scss
-
F58590_inline.scss
-
F58620_lightbox.scss
-
F58650_main.scss
-
F58680_mixins.scss
-
F58710_processing.scss
-
F58740_upload.scss
-
F58798_dataTables.editor.min.js.js
-
F58828_editor.bootstrap5.min.js.js
-
F58886_Bootstrap.php
-
F58916_composer.json
-
F58946_composer.php
-
F58976_config.php
-
F59062_Db2Query.php
-
F59092_Db2Result.php
-
F59122_FirebirdQuery.php.js
-
F59152_FirebirdResult.php
-
F59182_MysqlQuery.php.js
-
F59212_MysqlResult.php
-
F59242_OracleQuery.php
-
F59272_OracleResult.php
-
F59302_PostgresQuery.php.js
-
F59332_PostgresResult.php
-
F59362_SqliteQuery.php.js
-
F59392_SqliteResult.php
-
F59422_SqlserverQuery.php.js
-
F59452_SqlserverResult.php
-
F59482_Query.php.ps1
-
F59512_Result.php
-
F59542_Database.php.ps1
-
F59572_DataTables.php
-
F59630_Field.php
-
F59660_Format.php
-
F59690_Join.php.ps1
-
F59720_Mjoin.php
-
F59750_Options.php.js
-
F59780_SearchPaneOptions.php.js
-
F59810_Upload.php
-
F59840_Validate.php.js
-
F59870_ValidateOptions.php
-
F59900_Editor.php.ps1
-
F59930_Ext.php
-
F59960_License.txt
-
F59990_phpdoc.dist.xml.xml
-
F60020_phpstanbaseline.neon
-
F60050_phpstan.neon.dist
-
F60168_Readme.txt
-
F60228_jquery3.6.0.min.js.js
-
F60288_jszip.min.js.js
-
F60348_dataTables.scrollResize.min.js.js
-
F62666_Htmlaw.php
-
F62696_Htmlawed.php
-
F62782_buttons.bootstrap.css
-
F62812_buttons.bootstrap.min.css
-
F62842_buttons.bootstrap4.css
-
F62872_buttons.bootstrap4.min.css
-
F62902_buttons.bootstrap5.css
-
F62932_buttons.bootstrap5.min.css
-
F62962_buttons.bulma.css
-
F62992_buttons.bulma.min.css
-
F63022_buttons.dataTables.css
-
F63052_buttons.dataTables.min.css
-
F63082_buttons.foundation.css
-
F63112_buttons.foundation.min.css
-
F63142_buttons.jqueryui.css
-
F63172_buttons.jqueryui.min.css
-
F63202_buttons.semanticui.css
-
F63232_buttons.semanticui.min.css
-
F63262_common.scss
-
F63292_mixins.scss
-
F63350_buttons.bootstrap.js.js
-
F63380_buttons.bootstrap.min.js.js
-
F63410_buttons.bootstrap4.js.js
-
F63440_buttons.bootstrap4.min.js.js
-
F63470_buttons.bootstrap5.js.js
-
F63500_buttons.bootstrap5.min.js.js
-
F63530_buttons.bulma.js.js
-
F63560_buttons.bulma.min.js.js
-
F63590_buttons.colVis.js.js
-
F63620_buttons.colVis.min.js.js
-
F63650_buttons.dataTables.js.js
-
F63680_buttons.dataTables.min.js.js
-
F63710_buttons.foundation.js.js
-
F63740_buttons.foundation.min.js.js
-
F63770_buttons.html5.js.js
-
F63800_buttons.html5.min.js.js
-
F63830_buttons.jqueryui.js.js
-
F63860_buttons.jqueryui.min.js.js
-
F63890_buttons.print.js.js
-
F63920_buttons.print.min.js.js
-
F63950_buttons.semanticui.js.js
-
F63980_buttons.semanticui.min.js.js
-
F64010_dataTables.buttons.js.js
-
F64040_dataTables.buttons.min.js.js
-
F64126_dataTables.bootstrap.css
-
F64156_dataTables.bootstrap.min.css
-
F64186_dataTables.bootstrap4.css
-
F64216_dataTables.bootstrap4.min.css
-
F64246_dataTables.bootstrap5.css
-
F64276_dataTables.bootstrap5.min.css
-
F64306_dataTables.bulma.css
-
F64336_dataTables.bulma.min.css
-
F64366_dataTables.dataTables.css
-
F64396_dataTables.dataTables.min.css
-
F64426_dataTables.foundation.css
-
F64456_dataTables.foundation.min.css
-
F64486_dataTables.jqueryui.css
-
F64516_dataTables.jqueryui.min.css
-
F64546_dataTables.semanticui.css
-
F64576_dataTables.semanticui.min.css
-
F64606_jquery.dataTables.css
-
F64636_jquery.dataTables.min.css
-
F64694_sort_asc.png.png
-
F64724_sort_asc_disabled.png.png
-
F64754_sort_both.png.png
-
F64784_sort_desc.png.png
-
F64814_sort_desc_disabled.png.png
-
F64872_dataTables.bootstrap.js.js
-
F64902_dataTables.bootstrap.min.js.js
-
F64932_dataTables.bootstrap4.js.js
-
F64962_dataTables.bootstrap4.min.js.js
-
F64992_dataTables.bootstrap5.js.js
-
F65022_dataTables.bootstrap5.min.js.js
-
F65052_dataTables.bulma.js.js
-
F65082_dataTables.bulma.min.js.js
-
F65112_dataTables.dataTables.js.js
-
F65142_dataTables.dataTables.min.js.js
-
F65172_dataTables.foundation.js.js
-
F65202_dataTables.foundation.min.js.js
-
F65232_dataTables.jqueryui.js.js
-
F65262_dataTables.jqueryui.min.js.js
-
F65292_dataTables.semanticui.js.js
-
F65322_dataTables.semanticui.min.js.js
-
F65352_jquery.dataTables.js.js
-
F65382_jquery.dataTables.min.js.js
-
F65468_scroller.bootstrap.css
-
F65498_scroller.bootstrap.min.css
-
F65528_scroller.bootstrap4.css
-
F65558_scroller.bootstrap4.min.css
-
F65588_scroller.bootstrap5.css
-
F65618_scroller.bootstrap5.min.css
-
F65648_scroller.bulma.css
-
F65678_scroller.bulma.min.css
-
F65708_scroller.dataTables.css
-
F65738_scroller.dataTables.min.css
-
F65768_scroller.foundation.css
-
F65798_scroller.foundation.min.css
-
F65828_scroller.jqueryui.css
-
F65858_scroller.jqueryui.min.css
-
F65888_scroller.semanticui.css
-
F65918_scroller.semanticui.min.css
-
F65976_dataTables.scroller.js.js
-
F66006_dataTables.scroller.min.js.js
-
F66036_scroller.bootstrap.js.js
-
F66066_scroller.bootstrap.min.js.js
-
F66096_scroller.bootstrap4.js.js
-
F66126_scroller.bootstrap4.min.js.js
-
F66156_scroller.bootstrap5.js.js
-
F66186_scroller.bootstrap5.min.js.js
-
F66216_scroller.bulma.js.js
-
F66246_scroller.bulma.min.js.js
-
F66276_scroller.dataTables.js.js
-
F66306_scroller.dataTables.min.js.js
-
F66336_scroller.foundation.js.js
-
F66366_scroller.foundation.min.js.js
-
F66396_scroller.jqueryui.js.js
-
F66426_scroller.jqueryui.min.js.js
-
F66456_scroller.semanticui.js.js
-
F66486_scroller.semanticui.min.js.js
-
F66572_select.bootstrap.css
-
F66602_select.bootstrap.min.css
-
F66632_select.bootstrap4.css
-
F66662_select.bootstrap4.min.css
-
F66692_select.bootstrap5.css
-
F66722_select.bootstrap5.min.css
-
F66752_select.bulma.css
-
F66782_select.bulma.min.css
-
F66812_select.dataTables.css
-
F66842_select.dataTables.min.css
-
F66872_select.foundation.css
-
F66902_select.foundation.min.css
-
F66932_select.jqueryui.css
-
F66962_select.jqueryui.min.css
-
F66992_select.semanticui.css
-
F67022_select.semanticui.min.css
-
F67080_dataTables.select.js.js
-
F67110_dataTables.select.min.js.js
-
F67140_select.bootstrap.js.js
-
F67170_select.bootstrap.min.js.js
-
F67200_select.bootstrap4.js.js
-
F67230_select.bootstrap4.min.js.js
-
F67260_select.bootstrap5.js.js
-
F67290_select.bootstrap5.min.js.js
-
F67320_select.bulma.js.js
-
F67350_select.bulma.min.js.js
-
F67380_select.dataTables.js.js
-
F67410_select.dataTables.min.js.js
-
F67440_select.foundation.js.js
-
F67470_select.foundation.min.js.js
-
F67500_select.jqueryui.js.js
-
F67530_select.jqueryui.min.js.js
-
F67560_select.semanticui.js.js
-
F67590_select.semanticui.min.js.js
-
F67665_DPL_2formaty.txt
-
F67666_DPL_lokacia.txt
-
F67667_DPL_majetok.txt
-
F67668_DPL_uzivatel.txt
-
F67669_index.php.js
-
F67670_phpinfo.php
-
F67671_task00.html.html .js
-
F67672_task01.html.js
-
F67673_task02.html.js
-
F67674_task03.html.js
-
F67675_task04.html.js
-
F67676_task05.html.js
-
F67677_task06.html.js
-
F67678_task07.html.js
-
F67679_task08.html.js
-
F67680_task09.html.js
-
F67681_task10.html.js
-
F67682_uibg_glass_65_ffffff_1x400.png
-
F67683_uibg_glass_75_dadada_1x400.png
-
F67684_uibg_glass_75_e6e6e6_1x400.png
-
F67685_bubble.scss
-
F67686_datatable.scss
-
F67687_datetime.scss
-
F67688_envelope.scss
-
F67689_fields.scss
-
F67690_inline.scss
-
F67691_lightbox.scss
-
F67692_main.scss
-
F67693_mixins.scss
-
F67694_processing.scss
-
F67695_upload.scss
-
F67696_editor.title.css
-
F67697_login_form.css
-
F67698_my.css
-
F67699_sweetalert2.min.css
-
F67700_collection.psd
-
F67701_copydocument.psd
-
F67702_file_types.psd
-
F67703_printer.psd
-
F67704_ajaxloadersmall.gif.gif
-
F67705_ajaxloader.gif.gif
-
F67706_logowebema48x48.ico
-
F67707_logowebema71x71.png.png
-
F67708_editor.title.js.js
-
F67709_exportdt.js.js
-
F67710_function.js.js
-
F67711_jquery.blockUI.js.js
-
F67712_jquery.i18n.properties.js.js
-
F67713_moment.min.js.js
-
F67714_processing.js.js
-
F67715_sweetalert2.min.js.js
-
F67716_ajax_my.php.js
-
F67717_login.php.js
-
F67718_openssl_enc_dec.php
-
F67719_settings.php.js
-
F67720_standalone.php
-
F67721_task01_processing.php
-
F67722_task02_processing.php
-
F67723_task03_processing.php
-
F67724_task04_processing.php
-
F67725_task05_processing.php
-
F67726_task06_processing.php
-
F67727_task07_processing.php
-
F67728_task08_processing.php
-
F67729_task09_processing.php
-
F67730_task10_processing.php
-
F67731_Czech.json
-
F67732_Slovak.json
-
F67734_Messages_cs.properties
-
instmsiw.exe.exe windows:5 windows x86
86f649127f320d79de0c023a60ef77bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
kernel32
lstrcatA
GetFileAttributesA
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentProcess
lstrlenA
lstrcmpiA
lstrcpyA
GetModuleFileNameA
FreeLibrary
LocalAlloc
GetLastError
GetSystemDirectoryA
LoadLibraryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
GetWindowsDirectoryA
GetProcAddress
RemoveDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
ExitProcess
GetModuleHandleA
CloseHandle
GetCommandLineA
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
CreateThread
ResetEvent
TerminateThread
GetVersionExA
LocalFree
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetStartupInfoA
CreateDirectoryA
GlobalFree
FormatMessageA
GetDiskFreeSpaceA
MulDiv
gdi32
GetDeviceCaps
user32
wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
EndDialog
GetDesktopWindow
CharPrevA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
SetWindowLongA
EnableWindow
SendMessageA
LoadStringA
MsgWaitForMultipleObjects
PeekMessageA
MessageBoxA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
SetDlgItemTextA
MessageBeep
GetDlgItemTextA
DispatchMessageA
comctl32
ord17
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
setup.exe.exe windows:4 windows x86
906067224c4001435aaf7d401e5e2cb3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
kernel32
ReadFile
GetLastError
lstrcmpA
IsValidCodePage
CreateFileA
WriteFile
SetFilePointer
CloseHandle
GetProcAddress
FreeLibrary
GlobalLock
_lclose
OpenFile
GetDriveTypeA
CreateDirectoryA
GetFileAttributesA
RemoveDirectoryA
GetExitCodeProcess
GetSystemInfo
GetVersionExA
GetCurrentThread
GetLocaleInfoA
GlobalHandle
GlobalUnlock
GlobalFree
GetUserDefaultLCID
GetTickCount
DeleteFileA
GetModuleFileNameA
lstrcmpiA
GetPrivateProfileIntA
GetTempPathA
SetErrorMode
GetWindowsDirectoryA
GetTempFileNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrlenA
lstrcpyA
lstrcatA
VerLanguageNameA
GlobalAlloc
CreateProcessA
GetCurrentProcess
LoadLibraryA
GetDiskFreeSpaceA
IsBadCodePtr
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
FlushFileBuffers
GetFileType
IsBadReadPtr
MultiByteToWideChar
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapFree
TerminateProcess
ExitProcess
RtlUnwind
LCMapStringA
LCMapStringW
SetStdHandle
user32
SetTimer
LoadIconA
GetWindowPlacement
PostQuitMessage
PostMessageA
KillTimer
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
DefWindowProcA
DialogBoxParamA
ShowWindow
GetDlgItem
EndDialog
CharNextA
CreateDialogParamA
DestroyWindow
IsWindow
IsDialogMessageA
PeekMessageA
SendMessageA
SendDlgItemMessageA
ExitWindowsEx
MsgWaitForMultipleObjects
CharPrevA
LoadStringA
GetDlgItemTextA
EnableWindow
SetCursor
GetParent
GetSystemMetrics
GetClientRect
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
ReleaseDC
GetWindowRect
CreateWindowExA
EndPaint
BeginPaint
DrawIcon
LoadCursorA
DestroyIcon
RegisterClassA
MoveWindow
GetDC
gdi32
GetStockObject
GetTextExtentPointA
TranslateCharsetInfo
CreateFontIndirectA
GetObjectA
DeleteObject
advapi32
AdjustTokenPrivileges
RegEnumValueA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
EqualSid
LookupPrivilegeValueA
OpenProcessToken
FreeSid
OpenThreadToken
AllocateAndInitializeSid
GetTokenInformation
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
setup.ini
-
webEMA - Evidencia majetku.msi.msi