6f2866da5b577a5b7e3fdeda465ebca1

Sharing

Copy URL Twitter E-mail

General

Target

6f2866da5b577a5b7e3fdeda465ebca1
Size

2.3MB
MD5

6f2866da5b577a5b7e3fdeda465ebca1
SHA1

7e94336e7f679f1d6ab9bcac777d95cb617ff0fd
SHA256

bec86e70ea9ae5ec6bb993fdea3d1abd2f2a57c53c84d119214d22704cb1b2c0
SHA512

a3c003b458cd23521661bb6ab8fd583c3a925c1252b7c6bd5e6a68f67a5bee63bd4f4383cef1e11acc7fe88b7a320ed5ab01309fb85fab16727ac46846c1f3d0
SSDEEP

49152:jQJvxDJIQd7LP6t8zRRyaaClNraySL7QGjO0O9mmeZ9JZkn3vAFOwq:jupSQdnP6qzR0aaUN2JO0O9mmhn/uDq

Score

7^/10

pdf link upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE(R) colorist.exe	upx
static1/unpack001/潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE(R) colorist_original.exe	upx

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Unsigned PE 13 IoCs

Checks for missing Authenticode signature.

resource
unpack001/潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/CCHook.dll
unpack001/潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/CPGD.dll
unpack001/潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/CPGD_original.dll
unpack001/潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE Coated Adobe 1998.dll
unpack001/潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE Coated sRGB.dll
unpack001/潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE matte Adobe 1998.dll
unpack001/潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE matte sRGB.dll
unpack001/潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE uncoated Adobe 1998.dll
unpack001/潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE uncoated sRGB.dll
unpack001/潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE(R) colorist.exe
unpack001/潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE(R) colorist_original.exe
unpack001/潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE(R) web-safe.dll
unpack001/潘通cum电子版/潘通cum电子版/pantone(r)_colorist/Usp10.dll

Files

6f2866da5b577a5b7e3fdeda465ebca1
.rar
潘通CUM电子版/CU TPX seka.jpg
.jpg
潘通CUM电子版/TPXdianziban.jpg
.jpg
潘通CUM电子版/dianzhiban-1.jpg
.jpg
潘通CUM电子版/打开有惊喜.txt
潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/CCHook.dll
.dll windows:4 windows x86 arch:x86

fac187e5466cc14ddffb576d5e3fe707

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
GetLastError
CreateFileMappingA
CloseHandle
UnmapViewOfFile
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
VirtualProtect
GetProcAddress
GetModuleHandleA
VirtualFree
SetHandleCount
HeapCreate
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
MapViewOfFile
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
IsBadCodePtr
GetEnvironmentStrings
WideCharToMultiByte
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
GetEnvironmentStringsW
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr

user32

SetWindowsHookExA
UnhookWindowsHookEx
IsWindow
GetClassLongA
MoveWindow
CallNextHookEx
SetForegroundWindow
ShowWindow
PostMessageA
RegisterWindowMessageA
SendMessageA

comdlg32

ChooseColorA

Exports

Exports

??4CCHook@@QAEAAV0@ABV0@@Z
?DisableHook@CCHook@@SA_NXZ
?EnableHook@CCHook@@SA_NXZ
?RegisterListenerWnd@CCHook@@SA_NPAUHWND__@@@Z

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/CPGD.dll
.dll windows:4 windows x86 arch:x86

c2b2646d37ac509ae7020d99e7154693

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
GetEnvironmentVariableA
GetVersionExA
GetProcAddress
GetOEMCP
LoadLibraryA
GetCPInfo
GetStringTypeW
GetACP
IsBadCodePtr
IsBadReadPtr
GetStringTypeA
WriteFile
GetEnvironmentStringsW
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetFileType
GetStdHandle
GetStartupInfoA
LCMapStringW
LCMapStringA
SetHandleCount
WideCharToMultiByte
HeapSize
MultiByteToWideChar
MulDiv
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
RaiseException
GetModuleHandleA
GetModuleFileNameA
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
IsBadWritePtr
ExitProcess
GetCurrentProcess

user32

ReleaseDC
GetWindowDC
BeginPaint
EndPaint
InflateRect
SendMessageA
GetClientRect
mouse_event
ShowWindow
InvalidateRect
IsWindowVisible
SetWindowTextA
SetDlgItemTextA
wsprintfA
GetWindowLongA
GetDlgItem
SetCapture
SetWindowLongA
CallWindowProcA
SetScrollPos
ReleaseCapture
DrawTextA
CreateDialogParamA
SetScrollInfo
GetWindowTextA
LoadStringA
SetFocus
DestroyWindow

gdi32

CreatePalette
Rectangle
SetTextColor
CreateCompatibleDC
GetDeviceCaps
CreateFontIndirectA
DeleteDC
SelectPalette
RealizePalette
SetBkMode
CreateSolidBrush
DeleteObject
GetStockObject
SelectObject

Exports

Exports

??0GridDlgProxy@@QAE@PAUHWND__@@ABK_NPADHHHHPAXPAURGBTriple@0@@Z
??1GridDlgProxy@@QAE@XZ
??4GridDlgProxy@@QAEAAV0@ABV0@@Z
?GetActualColor@GridDlgProxy@@QAEKXZ
?GetWindow@GridDlgProxy@@QAEPAUHWND__@@XZ

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/CPGD_original.dll
.dll windows:4 windows x86 arch:x86

c2b2646d37ac509ae7020d99e7154693

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
GetEnvironmentVariableA
GetVersionExA
GetProcAddress
GetOEMCP
LoadLibraryA
GetCPInfo
GetStringTypeW
GetACP
IsBadCodePtr
IsBadReadPtr
GetStringTypeA
WriteFile
GetEnvironmentStringsW
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetFileType
GetStdHandle
GetStartupInfoA
LCMapStringW
LCMapStringA
SetHandleCount
WideCharToMultiByte
HeapSize
MultiByteToWideChar
MulDiv
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
RaiseException
GetModuleHandleA
GetModuleFileNameA
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
IsBadWritePtr
ExitProcess
GetCurrentProcess

user32

ReleaseDC
GetWindowDC
BeginPaint
EndPaint
InflateRect
SendMessageA
GetClientRect
mouse_event
ShowWindow
InvalidateRect
IsWindowVisible
SetWindowTextA
SetDlgItemTextA
wsprintfA
GetWindowLongA
GetDlgItem
SetCapture
SetWindowLongA
CallWindowProcA
SetScrollPos
ReleaseCapture
DrawTextA
CreateDialogParamA
SetScrollInfo
GetWindowTextA
LoadStringA
SetFocus
DestroyWindow

gdi32

CreatePalette
Rectangle
SetTextColor
CreateCompatibleDC
GetDeviceCaps
CreateFontIndirectA
DeleteDC
SelectPalette
RealizePalette
SetBkMode
CreateSolidBrush
DeleteObject
GetStockObject
SelectObject

Exports

Exports

??0GridDlgProxy@@QAE@PAUHWND__@@ABK_NPADHHHHPAXPAURGBTriple@0@@Z
??1GridDlgProxy@@QAE@XZ
??4GridDlgProxy@@QAEAAV0@ABV0@@Z
?GetActualColor@GridDlgProxy@@QAEKXZ
?GetWindow@GridDlgProxy@@QAEPAUHWND__@@XZ

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE Coated Adobe 1998.dll
.dll windows:4 windows x86 arch:x86

2c5b5859ab9da6201e8a427e84b7980e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cpgd

??0GridDlgProxy@@QAE@PAUHWND__@@ABK_NPADHHHHPAXPAURGBTriple@0@@Z
?GetActualColor@GridDlgProxy@@QAEKXZ
??1GridDlgProxy@@QAE@XZ
?GetWindow@GridDlgProxy@@QAEPAUHWND__@@XZ

kernel32

LockResource
LoadResource
FindResourceA
GetStringTypeW
GetStringTypeA
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

user32

LoadStringA

Exports

Exports

GetPickerDlgStubList_V1

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE Coated sRGB.dll
.dll windows:4 windows x86 arch:x86

2c5b5859ab9da6201e8a427e84b7980e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cpgd

??0GridDlgProxy@@QAE@PAUHWND__@@ABK_NPADHHHHPAXPAURGBTriple@0@@Z
?GetActualColor@GridDlgProxy@@QAEKXZ
??1GridDlgProxy@@QAE@XZ
?GetWindow@GridDlgProxy@@QAEPAUHWND__@@XZ

kernel32

LockResource
LoadResource
FindResourceA
GetStringTypeW
GetStringTypeA
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

user32

LoadStringA

Exports

Exports

GetPickerDlgStubList_V1

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE matte Adobe 1998.dll
.dll windows:4 windows x86 arch:x86

2c5b5859ab9da6201e8a427e84b7980e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cpgd

??0GridDlgProxy@@QAE@PAUHWND__@@ABK_NPADHHHHPAXPAURGBTriple@0@@Z
?GetActualColor@GridDlgProxy@@QAEKXZ
??1GridDlgProxy@@QAE@XZ
?GetWindow@GridDlgProxy@@QAEPAUHWND__@@XZ

kernel32

LockResource
LoadResource
FindResourceA
GetStringTypeW
GetStringTypeA
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

user32

LoadStringA

Exports

Exports

GetPickerDlgStubList_V1

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE matte sRGB.dll
.dll windows:4 windows x86 arch:x86

2c5b5859ab9da6201e8a427e84b7980e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cpgd

??0GridDlgProxy@@QAE@PAUHWND__@@ABK_NPADHHHHPAXPAURGBTriple@0@@Z
?GetActualColor@GridDlgProxy@@QAEKXZ
??1GridDlgProxy@@QAE@XZ
?GetWindow@GridDlgProxy@@QAEPAUHWND__@@XZ

kernel32

LockResource
LoadResource
FindResourceA
GetStringTypeW
GetStringTypeA
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

user32

LoadStringA

Exports

Exports

GetPickerDlgStubList_V1

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE uncoated Adobe 1998.dll
.dll windows:4 windows x86 arch:x86

2c5b5859ab9da6201e8a427e84b7980e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cpgd

??0GridDlgProxy@@QAE@PAUHWND__@@ABK_NPADHHHHPAXPAURGBTriple@0@@Z
?GetActualColor@GridDlgProxy@@QAEKXZ
??1GridDlgProxy@@QAE@XZ
?GetWindow@GridDlgProxy@@QAEPAUHWND__@@XZ

kernel32

LockResource
LoadResource
FindResourceA
GetStringTypeW
GetStringTypeA
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

user32

LoadStringA

Exports

Exports

GetPickerDlgStubList_V1

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE uncoated sRGB.dll
.dll windows:4 windows x86 arch:x86

2c5b5859ab9da6201e8a427e84b7980e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cpgd

??0GridDlgProxy@@QAE@PAUHWND__@@ABK_NPADHHHHPAXPAURGBTriple@0@@Z
?GetActualColor@GridDlgProxy@@QAEKXZ
??1GridDlgProxy@@QAE@XZ
?GetWindow@GridDlgProxy@@QAEPAUHWND__@@XZ

kernel32

LockResource
LoadResource
FindResourceA
GetStringTypeW
GetStringTypeA
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

user32

LoadStringA

Exports

Exports

GetPickerDlgStubList_V1

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE(R) colorist Manual.pdf
.pdf
- http://atwww.pantone.com
- http://www.askpantone.com
- http://www.pantone.com
- http://pantone.com
- http://pantone.co.uk
- http://pantone.hk
- http://pantone.de
潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE(R) colorist.exe
.exe windows:4 windows x86 arch:x86

0a46b5399f02665dfd036e1b4bccfade

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cchook

?DisableHook@CCHook@@SA_NXZ
?EnableHook@CCHook@@SA_NXZ
?RegisterListenerWnd@CCHook@@SA_NPAUHWND__@@@Z

kernel32

GlobalAlloc
LockResource
LoadResource
SizeofResource
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
WideCharToMultiByte
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapSize
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GlobalLock
GlobalUnlock
MulDiv
CreateMutexA
GetLastError
GetCurrentThreadId
GetVersion
GetStartupInfoW
FreeLibrary
GetCurrentDirectoryA
FindFirstFileA
FindNextFileA
LoadLibraryA
GetProcAddress
GetModuleHandleA
RtlUnwind
RaiseException
GetStringTypeW

user32

PostQuitMessage
CreateWindowExA
RegisterClassA
CallWindowProcA
SetTimer
BeginPaint
EndPaint
KillTimer
SendMessageA
GetWindowLongA
SetWindowLongA
MessageBoxA
IsWindowVisible
GetMessageA
DestroyWindow
DispatchMessageA
RegisterWindowMessageA
TranslateMessage
GetWindowThreadProcessId
DefWindowProcA
GetParent
ShowWindow
MessageBeep
FindWindowA
GetCursorPos
SetForegroundWindow
CreatePopupMenu
AppendMenuA
TrackPopupMenuEx
DestroyMenu
PostMessageA
DestroyIcon
LoadImageA
LoadStringA

gdi32

SelectPalette
RealizePalette
CreateCompatibleDC
GetDeviceCaps
DeleteDC

comdlg32

ChooseColorA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegCreateKeyA
RegSetValueExA

shell32

Shell_NotifyIconA
ShellExecuteA
SHAppBarMessage

ole32

CreateStreamOnHGlobal

oleaut32

OleLoadPicture

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE(R) colorist_original.exe
.exe windows:4 windows x86 arch:x86

0a46b5399f02665dfd036e1b4bccfade

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cchook

?DisableHook@CCHook@@SA_NXZ
?EnableHook@CCHook@@SA_NXZ
?RegisterListenerWnd@CCHook@@SA_NPAUHWND__@@@Z

kernel32

GlobalAlloc
LockResource
LoadResource
SizeofResource
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
WideCharToMultiByte
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapSize
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GlobalLock
GlobalUnlock
MulDiv
CreateMutexA
GetLastError
GetCurrentThreadId
GetVersion
GetStartupInfoW
FreeLibrary
GetCurrentDirectoryA
FindFirstFileA
FindNextFileA
LoadLibraryA
GetProcAddress
GetModuleHandleA
RtlUnwind
RaiseException
GetStringTypeW

user32

PostQuitMessage
CreateWindowExA
RegisterClassA
CallWindowProcA
SetTimer
BeginPaint
EndPaint
KillTimer
SendMessageA
GetWindowLongA
SetWindowLongA
MessageBoxA
IsWindowVisible
GetMessageA
DestroyWindow
DispatchMessageA
RegisterWindowMessageA
TranslateMessage
GetWindowThreadProcessId
DefWindowProcA
GetParent
ShowWindow
MessageBeep
FindWindowA
GetCursorPos
SetForegroundWindow
CreatePopupMenu
AppendMenuA
TrackPopupMenuEx
DestroyMenu
PostMessageA
DestroyIcon
LoadImageA
LoadStringA

gdi32

SelectPalette
RealizePalette
CreateCompatibleDC
GetDeviceCaps
DeleteDC

comdlg32

ChooseColorA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegCreateKeyA
RegSetValueExA

shell32

Shell_NotifyIconA
ShellExecuteA
SHAppBarMessage

ole32

CreateStreamOnHGlobal

oleaut32

OleLoadPicture

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
潘通CUM电子版/潘通CUM电子版/PANTONE(R)_colorist/PANTONE(R) web-safe.dll
.dll windows:4 windows x86 arch:x86

91ddb91f5a921a2f2411468d1df7475b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cpgd

??0GridDlgProxy@@QAE@PAUHWND__@@ABK_NPADHHHHPAXPAURGBTriple@0@@Z
?GetActualColor@GridDlgProxy@@QAEKXZ
??1GridDlgProxy@@QAE@XZ
?GetWindow@GridDlgProxy@@QAEPAUHWND__@@XZ

kernel32

LoadResource
FindResourceA
LockResource
SetHandleCount
FreeEnvironmentStringsW
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
IsBadCodePtr
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetACP
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
GetCPInfo
MultiByteToWideChar
GetOEMCP
GetProcAddress
LoadLibraryA
GetStringTypeW
LCMapStringA
LCMapStringW
GetStringTypeA

user32

LoadStringA

Exports

Exports

GetPickerDlgStubList_V1

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
潘通cum电子版/潘通cum电子版/pantone(r)_colorist/Usp10.dll
.dll windows:4 windows x86 arch:x86

5095bcf25400ab3f92856bd5a8c4823c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtectEx
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetTickCount
WriteProcessMemory
SetFileTime
SetErrorMode
FreeLibrary
GetSystemDirectoryA
ReadProcessMemory
lstrcatA
ReadFile
WaitForSingleObject
CreateProcessA
GetLogicalDriveStringsA
GetWindowsDirectoryA
GetFileAttributesA
GetLastError
GetVolumeInformationA
CloseHandle
CreateThread
Sleep
WinExec
GetModuleFileNameA
SystemTimeToFileTime
DisableThreadLibraryCalls
IsBadReadPtr
SetFilePointer
CreateFileA
GetCurrentDirectoryA
LocalFileTimeToFileTime
CreateDirectoryA
WriteFile
FileTimeToSystemTime
GetLocalTime
GetFileSize
GetFileInformationByHandle
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
CompareStringW
CompareStringA
SetEndOfFile
GetTimeZoneInformation
HeapAlloc
RtlUnwind
DeleteFileA
FindFirstFileA
FindNextFileA
FileTimeToLocalFileTime
MoveFileA
ExitProcess
TerminateProcess
HeapFree
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapReAlloc
HeapSize
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
SetUnhandledExceptionFilter
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA

user32

SendMessageA
FindWindowA
ShowWindow
GetDesktopWindow
SetForegroundWindow
GetWindowLongA
SetWindowLongA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

Exports

Exports

AheadLib_LpkPresent
AheadLib_ScriptApplyDigitSubstitution
AheadLib_ScriptApplyLogicalWidth
AheadLib_ScriptBreak
AheadLib_ScriptCPtoX
AheadLib_ScriptCacheGetHeight
AheadLib_ScriptFreeCache
AheadLib_ScriptGetCMap
AheadLib_ScriptGetFontProperties
AheadLib_ScriptGetGlyphABCWidth
AheadLib_ScriptGetLogicalWidths
AheadLib_ScriptGetProperties
AheadLib_ScriptIsComplex
AheadLib_ScriptItemize
AheadLib_ScriptJustify
AheadLib_ScriptLayout
AheadLib_ScriptPlace
AheadLib_ScriptRecordDigitSubstitution
AheadLib_ScriptShape
AheadLib_ScriptStringAnalyse
AheadLib_ScriptStringCPtoX
AheadLib_ScriptStringFree
AheadLib_ScriptStringGetLogicalWidths
AheadLib_ScriptStringGetOrder
AheadLib_ScriptStringOut
AheadLib_ScriptStringValidate
AheadLib_ScriptStringXtoCP
AheadLib_ScriptString_pLogAttr
AheadLib_ScriptString_pSize
AheadLib_ScriptString_pcOutChars
AheadLib_ScriptTextOut
AheadLib_ScriptXtoCP
AheadLib_UspAllocCache
AheadLib_UspAllocTemp
AheadLib_UspFreeMem
LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkPresent
LpkTabbedTextOut
LpkUseGDIWidthCache
MemCode_LpkDllInitialize
MemCode_LpkDrawTextEx
MemCode_LpkEditControl
MemCode_LpkExtTextOut
MemCode_LpkGetCharacterPlacement
MemCode_LpkGetTextExtentExPoint
MemCode_LpkInitialize
MemCode_LpkPSMTextOut
MemCode_LpkTabbedTextOut
MemCode_LpkUseGDIWidthCache
MemCode_ftsWordBreak
ScriptApplyDigitSubstitution
ScriptApplyLogicalWidth
ScriptBreak
ScriptCPtoX
ScriptCacheGetHeight
ScriptFreeCache
ScriptGetCMap
ScriptGetFontProperties
ScriptGetGlyphABCWidth
ScriptGetLogicalWidths
ScriptGetProperties
ScriptIsComplex
ScriptItemize
ScriptJustify
ScriptLayout
ScriptPlace
ScriptRecordDigitSubstitution
ScriptShape
ScriptStringAnalyse
ScriptStringCPtoX
ScriptStringFree
ScriptStringGetLogicalWidths
ScriptStringGetOrder
ScriptStringOut
ScriptStringValidate
ScriptStringXtoCP
ScriptString_pLogAttr
ScriptString_pSize
ScriptString_pcOutChars
ScriptTextOut
ScriptXtoCP
UspAllocCache
UspAllocTemp
UspFreeMem
ftsWordBreak

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fac187e5466cc14ddffb576d5e3fe707

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 1016B

.reloc Size: 4KB - Virtual size: 1KB

c2b2646d37ac509ae7020d99e7154693

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 12KB - Virtual size: 10KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

c2b2646d37ac509ae7020d99e7154693

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 12KB - Virtual size: 10KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

2c5b5859ab9da6201e8a427e84b7980e

Headers

File Characteristics

Imports

cpgd

kernel32

user32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 11KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 4KB - Virtual size: 1KB

2c5b5859ab9da6201e8a427e84b7980e

Headers

File Characteristics

Imports

cpgd

kernel32

user32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 11KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 1016B

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 4KB - Virtual size: 1KB