0d3ec35a58e4f884b3acc9e25efe67c2a7ab06a999d2d61aba0033f69821e137[.]zip[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

0d3ec35a58e4f884b3acc9e25efe67c2a7ab06a999d2d61aba0033f69821e137.zip.zip
Size

1.9MB
MD5

64d48e18809291620677ed95a7fbef10
SHA1

9b9aa101b331438058e5a2372d29d94cb51b9a91
SHA256

aaf0b46bbd0dc6c83b96f2f0045248b5110d12edd01a0c98ec2dbc0cc8a576ed
SHA512

82210a7011cb66db99a5646761f0679f58169859a4dc9af3ac9e0c4a8ecf5ebbc512111d1e406eeef8c7805897c5c98f805529a8c27435d231e8b415239a5849
SSDEEP

24576:LzVuMkKzvGiw8MRYiPpsoDbwRM79uq+3QXdQbrEFlGB6zJn0ytvPQEJ8nVX68Q7V:wMkwv+80hRZgLdw+BytnNEBS

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack002/wsusoffline/UpdateGenerator.exe	upx
static1/unpack002/wsusoffline/client/UpdateInstaller.exe	upx

AutoIT Executable 2 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
static1/unpack003/out.upx	autoit_exe
static1/unpack004/out.upx	autoit_exe

Unsigned PE 11 IoCs

Checks for missing Authenticode signature.

resource
unpack002/wsusoffline/UpdateGenerator.exe
unpack003/out.upx
unpack002/wsusoffline/bin/gsort.exe
unpack002/wsusoffline/bin/join.exe
unpack002/wsusoffline/bin/unzip.exe
unpack002/wsusoffline/bin/wget.exe
unpack002/wsusoffline/client/UpdateInstaller.exe
unpack004/out.upx
unpack002/wsusoffline/client/bin/IfAdmin.exe
unpack002/wsusoffline/client/bin/hashdeep.exe
unpack002/wsusoffline/client/bin/hashdeep64.exe

Files

0d3ec35a58e4f884b3acc9e25efe67c2a7ab06a999d2d61aba0033f69821e137.zip.zip
.zip

Password: infected
0d3ec35a58e4f884b3acc9e25efe67c2a7ab06a999d2d61aba0033f69821e137.zip
.zip
wsusoffline/UpdateGenerator.au3
.ps1
wsusoffline/UpdateGenerator.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 596KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 343KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 567KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wsusoffline/bin/DownloadLinks.txt
wsusoffline/bin/Info-Zip-License.txt
wsusoffline/bin/gsort.exe
.exe windows:4 windows x86

9653f3d648c148b092db8db2f905dab5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

_fdopen
_fstat
_getcwd
_getpid
_open
_read
_close
_stat
_strdup
_unlink
_assert
_cexit
_errno
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
_stricmp
_strnicmp
_wcsicmp
abort
atexit
bsearch
calloc
clearerr
exit
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fputs
fread
free
fwrite
getenv
isalnum
isalpha
isdigit
islower
isprint
isspace
__p__environ
localeconv
malloc
memchr
memcpy
memmove
printf
putc
puts
qsort
realloc
setlocale
signal
sprintf
strchr
strcmp
strcoll
strcpy
strerror
strncmp
strtod
tolower
toupper
vfprintf
__set_app_type

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wsusoffline/bin/join.exe
.exe windows:4 windows x86

2b537f8b8f3b84663f3194edaefc4245

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

_fstat
_getcwd
_open
_read
_close
_strdup
_assert
_cexit
_errno
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
_stricmp
_strnicmp
_wcsicmp
atexit
bsearch
calloc
exit
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fputs
free
fwrite
getc
getenv
isalnum
isalpha
isdigit
isspace
__p__environ
malloc
memcpy
printf
putc
putchar
puts
qsort
realloc
setlocale
signal
strchr
strcmp
strcoll
strcpy
strerror
strncmp
strpbrk
strtol
tolower
toupper
vfprintf
__set_app_type

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wsusoffline/bin/unzip.exe
.exe windows:4 windows x86

a748a7b40b99ec291d54c001001fb23e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetDriveTypeA
GetVolumeInformationA
GetFullPathNameA
GetLocaleInfoA
GetConsoleScreenBufferInfo
GetStdHandle
ReadFile
SetConsoleMode
GetConsoleMode
WideCharToMultiByte
DosDateTimeToFileTime
SetFileAttributesA
GetFileAttributesA
GetFileTime
SetFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetCurrentProcess
InitializeCriticalSection
ReleaseMutex
WaitForSingleObject
InterlockedExchange
CreateMutexA
lstrcpynA
lstrcmpiA
LeaveCriticalSection
EnterCriticalSection
lstrlenA
CloseHandle
SetFilePointer
GetLastError
SetEndOfFile
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocalTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetVersion
FindClose
FindNextFileA
SetVolumeLabelA
FindFirstFileA
CreateDirectoryA
DeleteFileA
SetEnvironmentVariableW
SetConsoleCtrlHandler
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
MoveFileA
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
HeapReAlloc
GetCommandLineA
GetVersionExA
GetACP
GetOEMCP
GetCPInfo
WriteFile
UnhandledExceptionFilter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetStartupInfoA
FlushFileBuffers
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetCurrentDirectoryA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
CompareStringA
CompareStringW
SetEnvironmentVariableA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
VirtualProtect
GetSystemInfo
VirtualQuery
HeapSize
LoadLibraryA
RtlUnwind
GetLocaleInfoW

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetKernelObjectSecurity
SetKernelObjectSecurity
IsValidSecurityDescriptor
GetSecurityDescriptorDacl
IsValidAcl
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
IsValidSid
GetSecurityDescriptorGroup
GetSecurityDescriptorControl

user32

OemToCharA
CharToOemA

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 846KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
wsusoffline/bin/wget.exe
.exe windows:4 windows x86

781917821079332f35babc001ccf886c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
CreateEventA
CreateFileMappingA
CreateProcessA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetConsoleScreenBufferInfo
GetCurrentProcessId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetTickCount
MapViewOfFile
OpenFileMappingA
QueryPerformanceCounter
QueryPerformanceFrequency
ResumeThread
SetConsoleCtrlHandler
SetConsoleTitleA
SetEvent
SetUnhandledExceptionFilter
SleepEx
TerminateProcess
TerminateThread
UnmapViewOfFile
WaitForMultipleObjects
WaitForSingleObject

msvcrt

_chmod
_close
_fdopen
_getpid
_isatty
_mkdir
_open
_read
_strdup
_unlink
_utime
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_flsbuf
_fstati64
_iob
_isctype
_onexit
_pctype
_setmode
_snprintf
_stati64
_sys_nerr
_vsnprintf
abort
atexit
atoi
calloc
exit
fclose
fflush
fgetc
fgets
fopen
fprintf
fputc
fputs
fread
free
fwrite
getenv
localeconv
localtime
malloc
memchr
memcpy
memmove
memset
mktime
perror
printf
putchar
puts
qsort
rand
realloc
rename
setlocale
signal
sprintf
srand
sscanf
strcat
strchr
strcmp
strcpy
strerror
strftime
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtok
time
vfprintf

wsock32

WSACleanup
WSAGetLastError
WSASetLastError
WSAStartup
accept
bind
closesocket
connect
gethostbyname
getpeername
getsockname
htons
inet_addr
inet_ntoa
listen
ntohs
recv
select
send
setsockopt
socket

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wsusoffline/client/Autorun.inf
wsusoffline/client/Update.cmd
wsusoffline/client/UpdateInstaller.au3
wsusoffline/client/UpdateInstaller.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 584KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 343KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 567KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wsusoffline/client/UpdateInstaller.ini
wsusoffline/client/bin/DownloadLinks.txt
wsusoffline/client/bin/IfAdmin.exe
.exe windows:4 windows x86

5368cd59b68d51f90e5c95bfaf577884

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid
CheckTokenMembership
AllocateAndInitializeSid

kernel32

HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
wsusoffline/client/bin/hashdeep.exe
.exe windows:4 windows x86

f74c56afdabcbde17dd922df2ae879bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateEventA
CreateFileW
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
FormatMessageW
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileAttributesW
GetFileInformationByHandle
GetHandleInformation
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetStartupInfoA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReleaseSemaphore
ResetEvent
ResumeThread
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte

msvcrt

__argv
__dllonexit
__doserrno
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__pioinfo
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_atoi64
_beginthreadex
_cexit
_endthreadex
_errno
_exit
_filelengthi64
_fileno
_findclose
_fmode
_fstat64
_ftime
_gmtime64
_initterm
_iob
_lock
_lseeki64
_onexit
_setjmp3
_snwprintf
_wstat64
time
gmtime
_stricmp
_strnicmp
_unlock
calloc
clearerr
exit
fclose
feof
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
fsetpos
fwprintf
fwrite
getc
getenv
getwc
islower
isprint
isspace
isupper
iswalpha
iswctype
iswdigit
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
perror
printf
putc
putwc
raise
realloc
rewind
setlocale
setvbuf
signal
sprintf
strchr
strcmp
strcoll
strcpy
strerror
strftime
strlen
strncmp
strncpy
strxfrm
_wcsnicmp
_wfindnext
_wfopen
_wfullpath
_wgetcwd
_wopen
_write
abort
atoi
tolower
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
wcscat
wcscoll
wcscpy
wcsftime
wcslen
wcsxfrm
_wfindfirst
longjmp
_write
_unlink
_strdup
_setmode
_read
_open
_mktemp
_fileno
_fdopen
_close

shell32

CommandLineToArgvW

user32

MessageBoxW

Sections

.text
Size: 661KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wsusoffline/client/bin/hashdeep64.exe
.exe windows:4 windows x64

fecb7be4a881ad58800a41cf6a18b6c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateEventA
CreateFileW
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
FormatMessageW
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileAttributesW
GetFileInformationByHandle
GetHandleInformation
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetStartupInfoA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReleaseSemaphore
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte

msvcrt

__C_specific_handler
___lc_codepage_func
__argv
__dllonexit
__doserrno
__getmainargs
__initenv
__iob_func
__lconv_init
__mb_cur_max
__pioinfo
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_atoi64
_beginthreadex
_cexit
_endthreadex
_errno
_exit
_filelengthi64
_fileno
_findclose
_fmode
_fstat64
_ftime
_gmtime64
_initterm
_lock
_lseeki64
_onexit
_setjmp
_stricmp
_strnicmp
_time64
_unlock
_wcsnicmp
_wfindfirst64
_wfopen
_wfullpath
_wgetcwd
_wopen
_write
_wstat64
abort
atoi
calloc
clearerr
exit
fclose
feof
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
fsetpos
fwprintf
fwrite
getc
getenv
getwc
islower
isprint
isspace
isupper
iswalpha
iswctype
iswdigit
isxdigit
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
perror
printf
putc
putwc
raise
realloc
rewind
setlocale
setvbuf
signal
sprintf
strchr
strcmp
strcoll
strcpy
strerror
strftime
strlen
strncmp
strncpy
strxfrm
tolower
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
wcscat
wcscoll
wcscpy
wcsftime
wcslen
wcsxfrm
_wfindnext64
_snwprintf
_write
_unlink
_strdup
_setmode
_read
_open
_mktemp
_fileno
_fdopen
_close

shell32

CommandLineToArgvW

user32

MessageBoxW

ws2_32

gethostname

Sections

.text
Size: 581KB - Virtual size: 581KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wsusoffline/client/cmd/CleanupRecall.cmd
wsusoffline/client/cmd/CreateUpdateAdminAndEnableAutoLogon.vbs
.vbs
wsusoffline/client/cmd/DeleteUpdateAdmin.vbs
.vbs
wsusoffline/client/cmd/DetermineFileVersion.vbs
.vbs
wsusoffline/client/cmd/DetermineRegVersion.vbs
.vbs
wsusoffline/client/cmd/DetermineSystemProperties.vbs
.vbs
wsusoffline/client/cmd/DetermineTempAdminSID.vbs
.vbs
wsusoffline/client/cmd/DoUpdate.cmd
.cmd .vbs
wsusoffline/client/cmd/InstallListedUpdates.cmd
wsusoffline/client/cmd/InstallOSUpdate.cmd
wsusoffline/client/cmd/InstallOfficeUpdate.cmd
wsusoffline/client/cmd/ListInstalledUpdateIds.vbs
.vbs
wsusoffline/client/cmd/ListMissingUpdateIds.vbs
.vbs
wsusoffline/client/cmd/ListUpdateFile.cmd
wsusoffline/client/cmd/ListUpdatesToInstall.cmd
wsusoffline/client/cmd/PrepareRecall.cmd
wsusoffline/client/cmd/PrepareShowLogFile.cmd
wsusoffline/client/cmd/RecallStub.cmd
wsusoffline/client/cmd/SafeRmDir.cmd
wsusoffline/client/cmd/SetTargetEnvVars.cmd
.cmd .vbs
wsusoffline/client/cmd/Sleep.vbs
.vbs
wsusoffline/client/cmd/TouchMSITree.cmd
wsusoffline/client/cmd/custom/SetUpdatesPerStage.cmdt
wsusoffline/client/exclude/ExcludeList.txt
wsusoffline/client/opt/OptionList-Q.txt
wsusoffline/client/opt/OptionList-qn.txt
wsusoffline/client/static/StaticUpdateIds-dotnet35.txt
wsusoffline/client/static/StaticUpdateIds-ie10-w61.txt
wsusoffline/client/static/StaticUpdateIds-ie9-w60.txt
wsusoffline/client/static/StaticUpdateIds-rdc-w61.txt
wsusoffline/client/static/StaticUpdateIds-w60-x64.txt
wsusoffline/client/static/StaticUpdateIds-w61-x64.txt
wsusoffline/client/static/StaticUpdateIds-w62-x64.txt
wsusoffline/client/static/StaticUpdateIds-w63-upd1.txt
wsusoffline/client/static/StaticUpdateIds-w63-upd2.txt
wsusoffline/client/static/StaticUpdateIds-w63-x64.txt
wsusoffline/client/static/StaticUpdateIds-w63-x86.txt
wsusoffline/client/static/StaticUpdateIds-wupre-w60.txt
wsusoffline/client/static/StaticUpdateIds-wupre-w61.txt
wsusoffline/client/static/StaticUpdateIds-wupre-w63.txt
wsusoffline/cmd/ActivateAllLanguageServicePacks.cmd
wsusoffline/cmd/ActivateAria2Downloads.cmd
.cmd .vbs
wsusoffline/cmd/ActivateFiveLanguageServicePacks.cmd
wsusoffline/cmd/AddCustomLanguageSupport.cmd
wsusoffline/cmd/AddOffice2010x64Support.cmd
wsusoffline/cmd/CheckOUVersion.cmd
.cmd .vbs
wsusoffline/cmd/CopyToTarget.cmd
wsusoffline/cmd/CreateDownloadTable.vbs
.vbs
wsusoffline/cmd/CreateISOImage.cmd
.cmd .vbs
wsusoffline/cmd/DownloadUpdates.cmd
.cmd .vbs
wsusoffline/cmd/ExtractIdsAndFileNames.vbs
.vbs
wsusoffline/cmd/IntegrateSourcesSxsFolder.cmd
.cmd .vbs
wsusoffline/cmd/RemoveCustomLanguageSupport.cmd
wsusoffline/cmd/RemoveEnglishLanguageSupport.cmd
wsusoffline/cmd/RemoveGermanLanguageSupport.cmd
wsusoffline/cmd/RemoveOffice2010x64Support.cmd
wsusoffline/cmd/UpdateOU.new
.vbs
wsusoffline/cmd/XSLT.vbs
.vbs
wsusoffline/doc/coverage.txt
wsusoffline/doc/faq-deu.txt
wsusoffline/doc/faq-enu.txt
wsusoffline/doc/history.txt
wsusoffline/doc/license.txt
wsusoffline/exclude/ExcludeList-SPs.txt
wsusoffline/exclude/ExcludeList-dotnet-x64.txt
wsusoffline/exclude/ExcludeList-dotnet-x86.txt
wsusoffline/exclude/ExcludeList-msse.txt
wsusoffline/exclude/ExcludeList-ofc-glb.txt
wsusoffline/exclude/ExcludeList-ofc.txt
wsusoffline/exclude/ExcludeList-software.txt
wsusoffline/exclude/ExcludeList-superseded-exclude.txt
wsusoffline/exclude/ExcludeList-w100-x64.txt
wsusoffline/exclude/ExcludeList-w60-x64.txt
wsusoffline/exclude/ExcludeList-w60-x86.txt
wsusoffline/exclude/ExcludeList-w61-x64.txt
wsusoffline/exclude/ExcludeList-w61-x86.txt
wsusoffline/exclude/ExcludeList-w62-x64.txt
wsusoffline/exclude/ExcludeList-w63-x64.txt
wsusoffline/exclude/ExcludeList-w63-x86.txt
wsusoffline/exclude/ExcludeList-wddefs.txt
wsusoffline/exclude/ExcludeList-win-x86.txt
wsusoffline/exclude/ExcludeList-wle.txt
wsusoffline/exclude/ExcludeListISO-all-x64.txt
wsusoffline/exclude/ExcludeListISO-all-x86.txt
wsusoffline/exclude/ExcludeListISO-all.txt
wsusoffline/exclude/ExcludeListISO-dotnet.txt
wsusoffline/exclude/ExcludeListISO-ofc.txt
wsusoffline/exclude/ExcludeListISO-w100-x64.txt
wsusoffline/exclude/ExcludeListISO-w100-x86.txt
wsusoffline/exclude/ExcludeListISO-w60-x64.txt
wsusoffline/exclude/ExcludeListISO-w60-x86.txt
wsusoffline/exclude/ExcludeListISO-w61-x64.txt
wsusoffline/exclude/ExcludeListISO-w61-x86.txt
wsusoffline/exclude/ExcludeListISO-w62-x64.txt
wsusoffline/exclude/ExcludeListISO-w63-x64.txt
wsusoffline/exclude/ExcludeListISO-w63-x86.txt
wsusoffline/exclude/ExcludeListUSB-all-x64.txt
wsusoffline/exclude/ExcludeListUSB-all-x86.txt
wsusoffline/exclude/ExcludeListUSB-all.txt
wsusoffline/exclude/ExcludeListUSB-ofc.txt
wsusoffline/exclude/ExcludeListUSB-w100-x64.txt
wsusoffline/exclude/ExcludeListUSB-w100-x86.txt
wsusoffline/exclude/ExcludeListUSB-w60-x64.txt
wsusoffline/exclude/ExcludeListUSB-w60-x86.txt
wsusoffline/exclude/ExcludeListUSB-w61-x64.txt
wsusoffline/exclude/ExcludeListUSB-w61-x86.txt
wsusoffline/exclude/ExcludeListUSB-w62-x64.txt
wsusoffline/exclude/ExcludeListUSB-w63-x64.txt
wsusoffline/exclude/ExcludeListUSB-w63-x86.txt
wsusoffline/sh/CreateISOImage.sh
.sh linux
wsusoffline/sh/DownloadUpdates.sh
.sh linux
wsusoffline/sh/RemoveGermanAndEnglishLanguageSupport.sh
wsusoffline/sh/commonparts.inc
wsusoffline/static/StaticDownloadLink-mkisofs.txt
wsusoffline/static/StaticDownloadLink-this.txt
wsusoffline/static/StaticDownloadLink-wddefs-x64-glb.txt
wsusoffline/static/StaticDownloadLink-wddefs-x86-glb.txt
wsusoffline/static/StaticDownloadLinks-aria2.txt
wsusoffline/static/StaticDownloadLinks-cpp-x64-glb.txt
wsusoffline/static/StaticDownloadLinks-cpp-x86-glb.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-ara.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-chs.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-cht.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-csy.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-dan.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-deu.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-ell.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-esn.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-fin.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-fra.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-glb.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-heb.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-hun.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-ita.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-jpn.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-kor.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-nld.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-nor.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-plk.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-ptb.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-ptg.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-rus.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-sve.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x64-trk.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-ara.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-chs.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-cht.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-csy.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-dan.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-deu.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-ell.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-esn.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-fin.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-fra.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-glb.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-heb.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-hun.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-ita.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-jpn.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-kor.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-nld.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-nor.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-plk.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-ptb.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-ptg.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-rus.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-sve.txt
wsusoffline/static/StaticDownloadLinks-dotnet-x86-trk.txt
wsusoffline/static/StaticDownloadLinks-dotnet.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-ara.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-chs.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-cht.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-csy.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-dan.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-deu.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-ell.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-enu.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-esn.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-fin.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-fra.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-heb.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-hun.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-ita.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-jpn.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-kor.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-nld.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-nor.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-plk.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-ptb.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-ptg.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-rus.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-sve.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x64-trk.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-ara.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-chs.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-cht.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-csy.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-dan.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-deu.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-ell.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-enu.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-esn.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-fin.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-fra.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-heb.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-hun.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-ita.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-jpn.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-kor.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-nld.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-nor.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-plk.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-ptb.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-ptg.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-rus.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-sve.txt
wsusoffline/static/StaticDownloadLinks-ie8-w60-x86-trk.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-ara.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-chs.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-cht.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-csy.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-dan.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-deu.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-ell.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-enu.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-esn.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-fin.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-fra.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-heb.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-hun.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-ita.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-jpn.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-kor.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-nld.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-nor.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-plk.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-ptb.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-ptg.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-rus.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-sve.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x64-trk.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-ara.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-chs.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-cht.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-csy.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-dan.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-deu.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-ell.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-enu.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-esn.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-fin.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-fra.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-heb.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-hun.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-ita.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-jpn.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-kor.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-nld.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-nor.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-plk.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-ptb.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-ptg.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-rus.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-sve.txt
wsusoffline/static/StaticDownloadLinks-ie9-w61-x86-trk.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-chs.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-cht.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-csy.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-dan.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-deu.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-ell.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-enu.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-esn.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-fin.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-fra.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-glb.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-hun.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-ita.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-jpn.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-kor.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-nld.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-nor.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-plk.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-ptb.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-ptg.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-rus.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-sve.txt
wsusoffline/static/StaticDownloadLinks-msse-x64-trk.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-chs.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-cht.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-csy.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-dan.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-deu.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-ell.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-enu.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-esn.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-fin.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-fra.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-glb.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-hun.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-ita.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-jpn.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-kor.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-nld.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-nor.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-plk.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-ptb.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-ptg.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-rus.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-sve.txt
wsusoffline/static/StaticDownloadLinks-msse-x86-trk.txt
wsusoffline/static/StaticDownloadLinks-o2k10-ara.txt
wsusoffline/static/StaticDownloadLinks-o2k10-chs.txt
wsusoffline/static/StaticDownloadLinks-o2k10-cht.txt
wsusoffline/static/StaticDownloadLinks-o2k10-csy.txt
wsusoffline/static/StaticDownloadLinks-o2k10-dan.txt
wsusoffline/static/StaticDownloadLinks-o2k10-deu.txt
wsusoffline/static/StaticDownloadLinks-o2k10-ell.txt
wsusoffline/static/StaticDownloadLinks-o2k10-enu.txt
wsusoffline/static/StaticDownloadLinks-o2k10-esn.txt
wsusoffline/static/StaticDownloadLinks-o2k10-fin.txt
wsusoffline/static/StaticDownloadLinks-o2k10-fra.txt
wsusoffline/static/StaticDownloadLinks-o2k10-glb.txt
wsusoffline/static/StaticDownloadLinks-o2k10-heb.txt
wsusoffline/static/StaticDownloadLinks-o2k10-hun.txt
wsusoffline/static/StaticDownloadLinks-o2k10-ita.txt
wsusoffline/static/StaticDownloadLinks-o2k10-jpn.txt
wsusoffline/static/StaticDownloadLinks-o2k10-kor.txt
wsusoffline/static/StaticDownloadLinks-o2k10-nld.txt
wsusoffline/static/StaticDownloadLinks-o2k10-nor.txt
wsusoffline/static/StaticDownloadLinks-o2k10-plk.txt
wsusoffline/static/StaticDownloadLinks-o2k10-ptb.txt
wsusoffline/static/StaticDownloadLinks-o2k10-ptg.txt
wsusoffline/static/StaticDownloadLinks-o2k10-rus.txt
wsusoffline/static/StaticDownloadLinks-o2k10-sve.txt
wsusoffline/static/StaticDownloadLinks-o2k10-trk.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-ara.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-chs.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-cht.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-csy.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-dan.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-deu.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-ell.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-enu.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-esn.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-fin.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-fra.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-glb.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-heb.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-hun.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-ita.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-jpn.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-kor.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-nld.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-nor.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-plk.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-ptb.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-ptg.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-rus.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-sve.txt
wsusoffline/static/StaticDownloadLinks-o2k10-x64-trk.txt
wsusoffline/static/StaticDownloadLinks-o2k13-ara.txt
wsusoffline/static/StaticDownloadLinks-o2k13-chs.txt
wsusoffline/static/StaticDownloadLinks-o2k13-cht.txt
wsusoffline/static/StaticDownloadLinks-o2k13-csy.txt
wsusoffline/static/StaticDownloadLinks-o2k13-dan.txt
wsusoffline/static/StaticDownloadLinks-o2k13-deu.txt
wsusoffline/static/StaticDownloadLinks-o2k13-ell.txt
wsusoffline/static/StaticDownloadLinks-o2k13-enu.txt
wsusoffline/static/StaticDownloadLinks-o2k13-esn.txt
wsusoffline/static/StaticDownloadLinks-o2k13-fin.txt
wsusoffline/static/StaticDownloadLinks-o2k13-fra.txt
wsusoffline/static/StaticDownloadLinks-o2k13-glb.txt
wsusoffline/static/StaticDownloadLinks-o2k13-heb.txt
wsusoffline/static/StaticDownloadLinks-o2k13-hun.txt
wsusoffline/static/StaticDownloadLinks-o2k13-ita.txt
wsusoffline/static/StaticDownloadLinks-o2k13-jpn.txt
wsusoffline/static/StaticDownloadLinks-o2k13-kor.txt
wsusoffline/static/StaticDownloadLinks-o2k13-nld.txt
wsusoffline/static/StaticDownloadLinks-o2k13-nor.txt
wsusoffline/static/StaticDownloadLinks-o2k13-plk.txt
wsusoffline/static/StaticDownloadLinks-o2k13-ptb.txt
wsusoffline/static/StaticDownloadLinks-o2k13-ptg.txt
wsusoffline/static/StaticDownloadLinks-o2k13-rus.txt
wsusoffline/static/StaticDownloadLinks-o2k13-sve.txt
wsusoffline/static/StaticDownloadLinks-o2k13-trk.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-ara.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-chs.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-cht.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-csy.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-dan.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-deu.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-ell.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-enu.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-esn.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-fin.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-fra.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-glb.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-heb.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-hun.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-ita.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-jpn.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-kor.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-nld.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-nor.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-plk.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-ptb.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-ptg.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-rus.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-sve.txt
wsusoffline/static/StaticDownloadLinks-o2k13-x64-trk.txt
wsusoffline/static/StaticDownloadLinks-o2k16-glb.txt
wsusoffline/static/StaticDownloadLinks-o2k16-x64-glb.txt
wsusoffline/static/StaticDownloadLinks-o2k7-ara.txt
wsusoffline/static/StaticDownloadLinks-o2k7-chs.txt
wsusoffline/static/StaticDownloadLinks-o2k7-cht.txt
wsusoffline/static/StaticDownloadLinks-o2k7-csy.txt
wsusoffline/static/StaticDownloadLinks-o2k7-dan.txt
wsusoffline/static/StaticDownloadLinks-o2k7-deu.txt
wsusoffline/static/StaticDownloadLinks-o2k7-ell.txt
wsusoffline/static/StaticDownloadLinks-o2k7-enu.txt
wsusoffline/static/StaticDownloadLinks-o2k7-esn.txt
wsusoffline/static/StaticDownloadLinks-o2k7-fin.txt
wsusoffline/static/StaticDownloadLinks-o2k7-fra.txt
wsusoffline/static/StaticDownloadLinks-o2k7-glb.txt
wsusoffline/static/StaticDownloadLinks-o2k7-heb.txt
wsusoffline/static/StaticDownloadLinks-o2k7-hun.txt
wsusoffline/static/StaticDownloadLinks-o2k7-ita.txt
wsusoffline/static/StaticDownloadLinks-o2k7-jpn.txt
wsusoffline/static/StaticDownloadLinks-o2k7-kor.txt
wsusoffline/static/StaticDownloadLinks-o2k7-nld.txt
wsusoffline/static/StaticDownloadLinks-o2k7-nor.txt
wsusoffline/static/StaticDownloadLinks-o2k7-plk.txt
wsusoffline/static/StaticDownloadLinks-o2k7-ptb.txt
wsusoffline/static/StaticDownloadLinks-o2k7-ptg.txt
wsusoffline/static/StaticDownloadLinks-o2k7-rus.txt
wsusoffline/static/StaticDownloadLinks-o2k7-sve.txt
wsusoffline/static/StaticDownloadLinks-o2k7-trk.txt
wsusoffline/static/StaticDownloadLinks-ofc-glb.txt
wsusoffline/static/StaticDownloadLinks-sysinternals.txt
wsusoffline/static/StaticDownloadLinks-w60-x64-5lg.txt
wsusoffline/static/StaticDownloadLinks-w60-x64-glb.txt
wsusoffline/static/StaticDownloadLinks-w60-x86-5lg.txt
wsusoffline/static/StaticDownloadLinks-w60-x86-glb.txt
wsusoffline/static/StaticDownloadLinks-w61-x64-glb.txt
wsusoffline/static/StaticDownloadLinks-w61-x86-glb.txt
wsusoffline/static/StaticDownloadLinks-w62-x64-glb.txt
wsusoffline/static/StaticDownloadLinks-w63-x64-glb.txt
wsusoffline/static/StaticDownloadLinks-w63-x86-glb.txt
wsusoffline/static/StaticDownloadLinks-win-glb.txt
wsusoffline/static/StaticDownloadLinks-wle-ara.txt
wsusoffline/static/StaticDownloadLinks-wle-chs.txt
wsusoffline/static/StaticDownloadLinks-wle-cht.txt
wsusoffline/static/StaticDownloadLinks-wle-csy.txt
wsusoffline/static/StaticDownloadLinks-wle-dan.txt
wsusoffline/static/StaticDownloadLinks-wle-deu.txt
wsusoffline/static/StaticDownloadLinks-wle-ell.txt
wsusoffline/static/StaticDownloadLinks-wle-enu.txt
wsusoffline/static/StaticDownloadLinks-wle-esn.txt
wsusoffline/static/StaticDownloadLinks-wle-fin.txt
wsusoffline/static/StaticDownloadLinks-wle-fra.txt
wsusoffline/static/StaticDownloadLinks-wle-glb.txt
wsusoffline/static/StaticDownloadLinks-wle-heb.txt
wsusoffline/static/StaticDownloadLinks-wle-hun.txt
wsusoffline/static/StaticDownloadLinks-wle-ita.txt
wsusoffline/static/StaticDownloadLinks-wle-jpn.txt
wsusoffline/static/StaticDownloadLinks-wle-kor.txt
wsusoffline/static/StaticDownloadLinks-wle-nld.txt
wsusoffline/static/StaticDownloadLinks-wle-nor.txt
wsusoffline/static/StaticDownloadLinks-wle-plk.txt
wsusoffline/static/StaticDownloadLinks-wle-ptb.txt
wsusoffline/static/StaticDownloadLinks-wle-ptg.txt
wsusoffline/static/StaticDownloadLinks-wle-rus.txt
wsusoffline/static/StaticDownloadLinks-wle-sve.txt
wsusoffline/static/StaticDownloadLinks-wle-trk.txt
wsusoffline/static/StaticDownloadLinks-wsus.txt
wsusoffline/xslt/ExtractDownloadLinks-dotnet-x64-glb.xsl
wsusoffline/xslt/ExtractDownloadLinks-dotnet-x86-glb.xsl
wsusoffline/xslt/ExtractDownloadLinks-w100-x64-glb.xsl
wsusoffline/xslt/ExtractDownloadLinks-w100-x86-glb.xsl
wsusoffline/xslt/ExtractDownloadLinks-w60-x64-glb.xsl
wsusoffline/xslt/ExtractDownloadLinks-w60-x86-glb.xsl
wsusoffline/xslt/ExtractDownloadLinks-w61-x64-glb.xsl
wsusoffline/xslt/ExtractDownloadLinks-w61-x86-glb.xsl
wsusoffline/xslt/ExtractDownloadLinks-w62-x64-glb.xsl
wsusoffline/xslt/ExtractDownloadLinks-w63-x64-glb.xsl
wsusoffline/xslt/ExtractDownloadLinks-w63-x86-glb.xsl
wsusoffline/xslt/ExtractSupersededUpdateRelations.xsl
wsusoffline/xslt/ExtractSupersedingRevisionIds.xsl
wsusoffline/xslt/ExtractUpdateCabExeIdsAndLocations.xsl
wsusoffline/xslt/ExtractUpdateCategoriesAndFileIds.xsl
wsusoffline/xslt/ExtractUpdateRevisionAndFileIds.xsl
wsusoffline/xslt/ExtractUpdateRevisionIds.xsl

Sharing

General

Malware Config

Signatures

Files

Password: infected

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 596KB

UPX1 Size: 343KB - Virtual size: 344KB

.rsrc Size: 80KB - Virtual size: 80KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 567KB - Virtual size: 567KB

.rdata Size: 184KB - Virtual size: 184KB

.data Size: 20KB - Virtual size: 35KB

.rsrc Size: 87KB - Virtual size: 87KB

.reloc Size: 28KB - Virtual size: 28KB

9653f3d648c148b092db8db2f905dab5

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 34KB - Virtual size: 33KB

.data Size: 512B - Virtual size: 116B

.bss Size: - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 1KB

2b537f8b8f3b84663f3194edaefc4245

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 23KB - Virtual size: 22KB

.data Size: 512B - Virtual size: 104B

.bss Size: - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 1KB

a748a7b40b99ec291d54c001001fb23e

Headers

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 140KB - Virtual size: 139KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 8KB - Virtual size: 846KB

.rsrc Size: 4KB - Virtual size: 968B

781917821079332f35babc001ccf886c

Headers

File Characteristics

Imports

kernel32

msvcrt

wsock32

Sections

.text Size: 177KB - Virtual size: 176KB

.data Size: 12KB - Virtual size: 11KB

.rdata Size: 34KB - Virtual size: 34KB

.bss Size: - Virtual size: 35KB

.idata Size: 4KB - Virtual size: 3KB

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 584KB

UPX1 Size: 343KB - Virtual size: 344KB

.rsrc Size: 67KB - Virtual size: 68KB

Headers

DLL Characteristics

File Characteristics

Sections

UPX0
Size: - Virtual size: 596KB

UPX1
Size: 343KB - Virtual size: 344KB

.rsrc
Size: 80KB - Virtual size: 80KB

.text
Size: 567KB - Virtual size: 567KB

.rdata
Size: 184KB - Virtual size: 184KB

.data
Size: 20KB - Virtual size: 35KB

.rsrc
Size: 87KB - Virtual size: 87KB

.reloc
Size: 28KB - Virtual size: 28KB

.text
Size: 34KB - Virtual size: 33KB

.data
Size: 512B - Virtual size: 116B

.bss
Size: - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 22KB

.data
Size: 512B - Virtual size: 104B

.bss
Size: - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.text
Size: 140KB - Virtual size: 139KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 8KB - Virtual size: 846KB

.rsrc
Size: 4KB - Virtual size: 968B

.text
Size: 177KB - Virtual size: 176KB

.data
Size: 12KB - Virtual size: 11KB

.rdata
Size: 34KB - Virtual size: 34KB

.bss
Size: - Virtual size: 35KB

.idata
Size: 4KB - Virtual size: 3KB

UPX0
Size: - Virtual size: 584KB

UPX1
Size: 343KB - Virtual size: 344KB

.rsrc
Size: 67KB - Virtual size: 68KB

.text
Size: 567KB - Virtual size: 567KB

.rdata
Size: 184KB - Virtual size: 184KB

.data
Size: 20KB - Virtual size: 35KB

.rsrc
Size: 75KB - Virtual size: 74KB

.reloc
Size: 28KB - Virtual size: 28KB

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 176B

.text
Size: 661KB - Virtual size: 661KB

.data
Size: 25KB - Virtual size: 24KB

.rdata
Size: 77KB - Virtual size: 76KB

.bss
Size: - Virtual size: 4KB

.idata
Size: 5KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 56B

.tls
Size: 512B - Virtual size: 32B

.text
Size: 581KB - Virtual size: 581KB

.data
Size: 85KB - Virtual size: 84KB

.rdata
Size: 88KB - Virtual size: 87KB

.pdata
Size: 34KB - Virtual size: 33KB

.xdata
Size: 51KB - Virtual size: 50KB

.bss
Size: - Virtual size: 5KB

.idata
Size: 7KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 112B

.tls
Size: 512B - Virtual size: 104B