53123f2484e4d31d2108a15727a96a2e

Sharing

Copy URL

Twitter E-mail

General

Target

53123f2484e4d31d2108a15727a96a2e
Size

789KB
MD5

53123f2484e4d31d2108a15727a96a2e
SHA1

495228327ac80ec0e91082970dfce36c2a0929d8
SHA256

059d000959ec7b94678eee6b779594c8f8771760d4392af80df79e4cfb41eaa4
SHA512

8ad4bb0c6dd1ddaacbe809f464439f575c5a920122a72c57d96cf68c5419798fa852583bef9e9ed461a5df7825a1e2d1eb8ad6977cded7c0d488d15f2c3fb934
SSDEEP

12288:2xpJ/xOJ5iQ/817fkZZ3Yzboo9RM6RS3r8Qksh0+vhd00hx+9BWEXS3BNmn:Cppxs5iQ/817L0o9q6RSg0d0YJEi3BNs

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/$PLUGINSDIR/version.dll	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/$PLUGINSDIR/version.dll	upx

Unsigned PE 22 IoCs

Checks for missing Authenticode signature.

resource
53123f2484e4d31d2108a15727a96a2e
unpack001/$PLUGINSDIR/ButtonEvent.dll
unpack001/$PLUGINSDIR/FloatingProgress.dll
unpack001/$PLUGINSDIR/LuaBridge.dll
unpack001/$PLUGINSDIR/LuaSocket/mime/core.dll
unpack001/$PLUGINSDIR/LuaSocket/socket/core.dll
unpack001/$PLUGINSDIR/LuaXml_lib.dll
unpack001/$PLUGINSDIR/NotifyIcon.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UACInfo.dll
unpack001/$PLUGINSDIR/bit.dll
unpack001/$PLUGINSDIR/browserutils.dll
unpack001/$PLUGINSDIR/customNsWeb.dll
unpack001/$PLUGINSDIR/ffi.dll
unpack001/$PLUGINSDIR/lua51.dll
unpack001/$PLUGINSDIR/luacom.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsis7z.dll
unpack001/$PLUGINSDIR/nsisunz.dll
unpack001/$PLUGINSDIR/un.package.exe
unpack001/$PLUGINSDIR/version.dll
unpack002/out.upx

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

53123f2484e4d31d2108a15727a96a2e
.exe windows:5 windows x86 arch:x86

c86b02c21ff392ad6ffcf21dcd4a5588

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
CloseHandle
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
lstrcmpA
ExitProcess
GetWindowsDirectoryA
GetTempPathA
GetCommandLineA
SetErrorMode
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryA
CreateProcessA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
RemoveDirectoryA
ExpandEnvironmentStringsA
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
TlsSetValue
FindNextFileA
FindFirstFileA
DeleteFileA
MulDiv
TlsAlloc
TlsGetValue
GlobalAlloc
CopyFileA

user32

ScreenToClient
GetMessagePos
CallWindowProcA
IsWindowVisible
LoadBitmapA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuA
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
CheckDlgButton
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
FindWindowExA
LoadCursorA
SetCursor
GetWindowLongA
GetSysColor
CharNextA
DialogBoxParamA
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SendMessageTimeoutA

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegEnumKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegEnumValueA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/AdvancedTests.lua
$PLUGINSDIR/BrowserControl.lua
.js
$PLUGINSDIR/ButtonEvent.dll
.dll windows:4 windows x86 arch:x86

0ece15e7d9bb35972aec701f46192460

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA
GlobalAlloc
lstrcpyA
lstrcpynA
GlobalFree

user32

PostMessageA
CallWindowProcA
GetDlgItem
FindWindowExA
SetWindowLongA
wsprintfA

Exports

Exports

AddEventHandler
Unload
UnsetEventHandler
WhichButtonId

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/DownloadList.lua
.js
$PLUGINSDIR/DownloadThread.lua
$PLUGINSDIR/Events.lua
$PLUGINSDIR/FloatingProgress.dll
.dll windows:5 windows x86 arch:x86

6ef0ba2a59a41ea0d58313176f4f9149

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
SetEvent
CreateEventA
GetModuleHandleA
CreateThread
lstrcpynA
GlobalAlloc
GlobalFree
lstrcpyA

user32

CallWindowProcA
ShowWindow
SetWindowPos
DefWindowProcA
EndDialog
LoadCursorA
GetWindowLongA
SetWindowLongA
SetPropA
SendMessageA
LoadIconA
GetPropA
GetWindowRect
SetCursor
wsprintfA
DialogBoxParamA
GetDlgItem

shell32

ShellExecuteA

winmm

timeGetTime
timeSetEvent

Exports

Exports

getTrustTextWindow
hideFloatingProgress
hideFloatingProgressDelayed
hideTrusteVisuals
nonToolWindow
setEnableCancel
setHideClose
setTrusteUrl
showFloatingProgress
showTrusteVisuals
wasCancelled

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/GuiInit.lua
.js
$PLUGINSDIR/IntegratedOffer.lua
.js
$PLUGINSDIR/LuaBridge.dll
.dll windows:5 windows x86 arch:x86

d224073b022ad7f6039ec3ce0a091d35

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

luaL_optinteger
lua_newuserdata
lua_setmetatable
lua_pushcclosure
lua_pcall
lua_remove
lua_insert
lua_settable
luaL_checkinteger
luaL_checklstring
lua_pushlstring
luaL_checkudata
luaL_argerror
lua_touserdata
lua_getfield
lua_isuserdata
lua_type
lua_objlen
lua_pushnumber
lua_pushnil
lua_gettop
lua_checkstack
lua_pushboolean
lua_error
lua_tointeger
lua_tolstring
lua_pushinteger
lua_close
luaL_newstate
luaL_openlibs
lua_createtable
lua_settop
lua_concat
luaL_gsub
lua_load
lua_pushvalue
luaL_newmetatable
luaL_openlib
lua_gettable
luaL_checktype
lua_toboolean
luaL_loadstring
lua_next
lua_rawgeti
lua_tonumber
lua_pushstring
luaL_optlstring
lua_isnumber
lua_isstring
luaL_error
lua_pushfstring

advapi32

RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

winmm

timeGetTime

iphlpapi

GetAdaptersAddresses

msvcrt

free
vsprintf
malloc
_vscprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
strchr
fopen
fclose
_snprintf
sprintf

kernel32

CreateTimerQueueTimer
Sleep
GetModuleFileNameA
GetCurrentProcessId
GetCurrentProcess
SetUnhandledExceptionFilter
lstrcpyA
CreateFileA
GetFileSize
DebugBreak
GlobalFree
CreateDirectoryA
GetFileAttributesA
TerminateJobObject
WaitForMultipleObjects
AssignProcessToJobObject
ResumeThread
CreateJobObjectA
GetProcAddress
FreeLibrary
CreateProcessA
GetExitCodeProcess
GlobalAlloc
CreatePipe
ReadFile
GetLastError
ExpandEnvironmentStringsA
lstrlenA
LoadLibraryA
lstrcmpA
lstrcpynA
InitializeCriticalSection
CreateEventA
CreateMutexA
CreateSemaphoreA
CreateThread
CloseHandle
DeleteCriticalSection
OpenThread
lstrcmpiA
IsDebuggerPresent
LeaveCriticalSection
CreateTimerQueue
FindClose
FindFirstFileA
EnterCriticalSection
ReleaseMutex
ReleaseSemaphore
GetCurrentThreadId
GetStdHandle
OutputDebugStringA
WaitForSingleObject

user32

GetMessageA
DispatchMessageA
ClientToScreen
CharNextA
wsprintfA
IsDialogMessageA
FindWindowExA
CallWindowProcA
PeekMessageA
GetClientRect
BringWindowToTop
EnableWindow
ShowWindow
GetWindowRect
UpdateWindow
InvalidateRect
ReleaseCapture
MoveWindow
MapWindowPoints
GetWindowLongA
SetWindowLongA
SetWindowPos
PostMessageA
SendMessageA
GetParent
MessageBoxA
PostThreadMessageA
TranslateMessage

shell32

SHFileOperationA
ShellExecuteA

Exports

Exports

??0ArgTable@LuaBridge@@QAE@XZ
??0char_result_dynamic@LuaBridge@@QAE@XZ
??0log_record@logging@@QAE@HPBDH@Z
??1ArgTable@LuaBridge@@QAE@XZ
??1char_result_dynamic@LuaBridge@@QAE@XZ
??1log_record@logging@@QAE@XZ
??4ArgTable@LuaBridge@@QAEAAV01@ABV01@@Z
??4char_result_context@LuaBridge@@QAEAAU01@ABU01@@Z
??4char_result_dynamic@LuaBridge@@QAEAAU01@ABU01@@Z
??4log_record@logging@@QAEAAV01@ABV01@@Z
?add@ArgTable@LuaBridge@@QAEAAV12@ABV12@PBD@Z
?add@ArgTable@LuaBridge@@QAEAAV12@HPBD@Z
?add@ArgTable@LuaBridge@@QAEAAV12@JPBD@Z
?add@ArgTable@LuaBridge@@QAEAAV12@NPBD@Z
?add@ArgTable@LuaBridge@@QAEAAV12@PAUlua_State@@HPBD@Z
?add@ArgTable@LuaBridge@@QAEAAV12@PBD0@Z
?add@ArgTable@LuaBridge@@QAEAAV12@PBDI0@Z
?add@ArgTable@LuaBridge@@QAEAAV12@Q6AHPAUlua_State@@@ZPBD@Z
?add@ArgTable@LuaBridge@@QAEAAV12@Q6AHPAUlua_State@@@ZPBV12@PBD@Z
?add@ArgTable@LuaBridge@@QAEAAV12@_NPBD@Z
?addnil@ArgTable@LuaBridge@@QAEAAV12@PBD@Z
?apply@ArgTable@LuaBridge@@QBEXPAUlua_State@@@Z
?astable@ArgTable@LuaBridge@@QBEXPAUlua_State@@@Z
?begin@ArgTable@LuaBridge@@QBE?AViterator@12@XZ
?call@LuaBridge@@YAHPAUnamed_state_t@1@PBDPBVArgTable@1@P6AX0_NPAX@Z4@Z
?call@LuaBridge@@YA_NPAUnamed_state_t@1@PBDPBVArgTable@1@PADI@Z
?char_result_handler@LuaBridge@@YAXPAUnamed_state_t@1@_NPAX@Z
?closeState@LuaBridge@@YAXPAUnamed_state_t@1@@Z
?copy@ArgTable@LuaBridge@@QBEPAV12@XZ
?createInterp@LuaBridge@@YAPAUlua_State@@XZ
?createState@LuaBridge@@YAPAUnamed_state_t@1@PBDPAU21@@Z
?end@ArgTable@LuaBridge@@QBE?AViterator@12@XZ
?eval@LuaBridge@@YA_NPAUnamed_state_t@1@PBD@Z
?eval@LuaBridge@@YA_NPAUnamed_state_t@1@PBDPADI@Z
?execFile@LuaBridge@@YA_NPAUnamed_state_t@1@PBD@Z
?findOrCreateState@LuaBridge@@YAPAUnamed_state_t@1@PBD@Z
?findState@LuaBridge@@YAPAUnamed_state_t@1@PBDPAUlua_State@@@Z
?from_arguments@ArgTable@LuaBridge@@QAEXPAUlua_State@@H@Z
?from_stack@ArgTable@LuaBridge@@QAEXPAUlua_State@@HH@Z
?from_table@ArgTable@LuaBridge@@QAEXPAUlua_State@@H@Z
?getState@LuaBridge@@YAPAUlua_State@@PBD@Z
?processPipeCommands@LuaBridge@@YAHPAUnamed_state_t@1@PAX_N@Z
?push_cell@ArgTable@LuaBridge@@AAEAAV12@PAUarg_cell_t@2@@Z
?serveRemoteState@LuaBridge@@YAHPBD0@Z
?size@ArgTable@LuaBridge@@QBEHXZ
?startRemoteState@LuaBridge@@YAHPBD000J@Z
?stateFromState@LuaBridge@@YAPAUlua_State@@PAUnamed_state_t@1@@Z
?target@log_record@logging@@QAEAAVNullStream@2@XZ
?waitForState@LuaBridge@@YA_NPBD@Z
breakpoint
cancel_state
close_state
crash
enableMiniDump
eval
exec
execFile
finalize
init
initThreadedLua
pause_state
reset_state
resume_state
setErrorHandler
wait

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LuaSocket/lua/ltn12.lua
.js
$PLUGINSDIR/LuaSocket/lua/mime.lua
.js
$PLUGINSDIR/LuaSocket/lua/socket.lua
.js
$PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
.js
$PLUGINSDIR/LuaSocket/lua/socket/http.lua
.js
$PLUGINSDIR/LuaSocket/lua/socket/smtp.lua
$PLUGINSDIR/LuaSocket/lua/socket/tp.lua
.js
$PLUGINSDIR/LuaSocket/lua/socket/url.lua
$PLUGINSDIR/LuaSocket/mime/core.dll
.dll windows:4 windows x86 arch:x86

fe8e49b45d854066bc51a41f61066908

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

luaL_checkinteger
luaL_addlstring
lua_tolstring
lua_pushlstring
luaL_checknumber
luaL_optlstring
luaL_optnumber
lua_pushnil
luaL_buffinit
luaL_addstring
luaL_prepbuffer
luaL_pushresult
lua_pushnumber
luaL_openlib
lua_pushstring
lua_rawset

kernel32

GetEnvironmentStringsW
RtlUnwind
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar

Exports

Exports

luaopen_mime_core

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LuaSocket/socket/core.dll
.dll windows:4 windows x86 arch:x86

f7bb4b78321004f93f7e54fe50af1981

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
GetSystemTimeAsFileTime
CloseHandle
FlushFileBuffers
ReadFile
RtlUnwind
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSection
MultiByteToWideChar
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
InterlockedIncrement
InterlockedDecrement
WriteFile
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetLastError
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
ExitProcess
GetModuleHandleA
GetProcAddress
GetVersion
GetCommandLineA

lua51

lua_pushlstring
lua_newuserdata
lua_call
luaL_checknumber
luaL_checkinteger
luaL_openlib
lua_settable
lua_insert
lua_pcall
luaL_optlstring
luaL_buffinit
luaL_addlstring
luaL_pushresult
lua_pushvalue
lua_replace
lua_gettop
luaL_checklstring
lua_pushnil
luaL_optnumber
lua_isnumber
lua_tonumber
lua_pushnumber
luaL_checkudata
lua_rawget
lua_setmetatable
luaL_argerror
lua_typename
luaL_typerror
lua_toboolean
lua_getfield
lua_pushboolean
lua_getmetatable
lua_gettable
lua_type
lua_isstring
lua_error
lua_touserdata
lua_tolstring
lua_pushfstring
luaL_newmetatable
lua_pushstring
lua_createtable
lua_rawset
lua_pushcclosure
lua_settop
luaL_prepbuffer

ws2_32

getpeername
ntohs
htons
htonl
setsockopt
gethostname
inet_ntoa
gethostbyname
gethostbyaddr
ioctlsocket
recvfrom
recv
sendto
send
accept
listen
bind
connect
getsockopt
socket
shutdown
closesocket
select
WSAGetLastError
__WSAFDIsSet
WSAStartup
WSACleanup
getsockname

Exports

Exports

luaopen_socket_core

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LuaXml_lib.dll
.dll windows:4 windows x86 arch:x86

0e4b7cfc82eb1d2e2840274f1659b95a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

__dllonexit
__mb_cur_max
_errno
_iob
_isctype
_pctype
abort
fclose
fflush
fopen
fprintf
fread
free
fseek
ftell
malloc
memcpy
realloc
rewind
strcmp
strcpy
strncmp
strncpy
strstr

lua51

luaL_addlstring
luaL_addstring
luaL_buffinit
luaL_checklstring
luaL_error
luaL_gsub
luaL_prepbuffer
luaL_pushresult
luaL_register
lua_createtable
lua_getfield
lua_gettable
lua_gettop
lua_isuserdata
lua_objlen
lua_pushlightuserdata
lua_pushlstring
lua_pushnumber
lua_pushstring
lua_remove
lua_replace
lua_setmetatable
lua_settable
lua_settop
lua_tolstring
lua_touserdata

Exports

Exports

luaopen_LuaXML_lib

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 208B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/NotifyIcon.dll
.dll windows:5 windows x86 arch:x86

e043e246d8abcbb9de2ad82c6e18cd88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

Shell_NotifyIconA

kernel32

GetProcAddress
lstrcpyA
lstrlenA
lstrcpynA
GlobalAlloc
GlobalFree
GetModuleHandleA

user32

CallWindowProcA
LoadImageA
ShowWindow
GetDlgItem
GetWindowLongA
SetWindowLongA
SendMessageA
FindWindowExA
wsprintfA
KillTimer
IsIconic
OpenIcon
SetTimer

Exports

Exports

Icon

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 895B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

4ec328f99bdd944fc98d8a5cf11f7a62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/UACInfo.dll
.dll windows:5 windows x86 arch:x86

0603f1e5036bb7e26cc82e7875b30a9b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetVersionExA
GetProcAddress
GetProcessHeap
GetCurrentProcess
GlobalAlloc
CloseHandle
lstrcpynA
HeapAlloc

user32

wsprintfA

advapi32

FreeSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
CheckTokenMembership

Exports

Exports

IsRunningWithAdmin

Sections

.text
Size: 1024B - Virtual size: 765B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/bit.dll
.dll windows:5 windows x86 arch:x86

c386ea6b5416735e46724de400d1557d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

luaL_error
luaL_register
lua_type
lua_pushlstring
lua_gettop
lua_pushnumber
lua_tonumber
lua_isnumber
luaL_typerror

msvcrt

_XcptFilter
malloc
free
_initterm
_amsg_exit

kernel32

RtlUnwind
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter

Exports

Exports

luaopen_bit

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/browserutils.dll
.dll windows:5 windows x86 arch:x86

34caecee8c0e203bd180194e023fa488

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

lua_isuserdata
lua_pushinteger
lua_insert
lua_pushnil
lua_pushlightuserdata
lua_pushfstring
lua_pushstring
luaL_checklstring
lua_isstring
luaL_ref
lua_pushvalue
lua_type
lua_pcall
lua_rawgeti
luaL_unref
luaL_register
lua_tolstring
lua_objlen
luaL_error
lua_pushboolean
lua_touserdata

msvcrt

malloc
strlen
??2@YAPAXI@Z
??_V@YAXPAX@Z
??_U@YAPAXI@Z
wcstombs
mbstowcs
??3@YAXPAX@Z
strtol
free
memcmp

ole32

CLSIDFromString
CLSIDFromProgID

oleaut32

VariantClear
VariantCopy
VariantChangeType
VariantInit

Exports

Exports

luaopen_browserutils

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/bundleinstall.lua
.js
$PLUGINSDIR/callbackproxy.lua
.js
$PLUGINSDIR/customNsWeb.dll
.dll windows:5 windows x86 arch:x86

c406b41faef9d450d598369f4d24e810

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ord412
ord410
ord413

wininet

InternetAttemptConnect

kernel32

HeapReAlloc
lstrcpynA
MultiByteToWideChar
GlobalFree
GlobalAlloc
lstrcmpiA
HeapAlloc
GetProcessHeap
lstrcpyA

user32

BeginPaint
GetClassNameA
EnumChildWindows
UpdateWindow
ShowWindow
MoveWindow
EndPaint
SetLayeredWindowAttributes
DispatchMessageA
GetMessageA
TranslateMessage
PeekMessageA
CreateWindowExA
IsDialogMessageA
RegisterClassExA
RegisterClassA
GetClassInfoA
wsprintfA
wvsprintfA
SetWindowLongA
GetWindowLongA
GetClientRect
DestroyWindow
SendMessageA
DefWindowProcA
CreateDialogParamA

ole32

CreateFileMoniker
GetRunningObjectTable
OleSetContainedObject
OleCreate
OleInitialize

oleaut32

VariantInit
SysAllocString
VariantClear
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy
SysFreeString
SysAllocStringLen

Exports

Exports

Activate
CreateNestedBrowserTagged
DetachNestedBrowser
DoEvents
EnableLayeredWindow
GetBrowserWindow
GetNestedIDispatch
IsInet
NotifyReady
OleInit
ReleaseNestedIDispatch
SetExternalObject
Show
SingleBrowser

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/definitions.lua
.js
$PLUGINSDIR/downloads.lua
.js
$PLUGINSDIR/eagerinstall.lua
.js
$PLUGINSDIR/env.lua
$PLUGINSDIR/extension.tlb
$PLUGINSDIR/ffi.dll
.dll windows:5 windows x86 arch:x86

49243da65777aa40d71712f25e529629

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

lua_next
lua_setfenv
lua_newuserdata
lua_getmetatable
lua_tolstring
lua_isstring
lua_isuserdata
luaL_checkstack
lua_insert
lua_rawequal
lua_error
luaL_pushresult
luaL_prepbuffer
luaL_addstring
lua_typename
luaL_addvalue
lua_pushfstring
luaL_buffinit
lua_pushlightuserdata
lua_topointer
lua_tonumber
lua_toboolean
lua_tointeger
lua_replace
lua_pcall
luaL_checktype
luaL_argerror
lua_gettable
lua_pushstring
luaL_checkinteger
luaL_checklstring
lua_pushinteger
lua_pushvfstring
lua_concat
lua_isnumber
lua_rawget
lua_setfield
lua_setmetatable
lua_type
lua_pushvalue
luaL_ref
lua_rawseti
lua_getfenv
luaL_unref
lua_createtable
lua_pushlstring
lua_pushcclosure
lua_gettop
lua_rawset
lua_pushboolean
lua_pushnil
lua_remove
lua_getfield
lua_tocfunction
lua_objlen
lua_rawgeti
lua_touserdata
lua_settop
luaL_error
lua_pushnumber
lua_call
luaL_checknumber

msvcrt

_mbsdec
_ismbblead
_XcptFilter
_initterm
_amsg_exit
calloc
isdigit
isspace
mbtowc
__mb_cur_max
isleadbyte
isxdigit
localeconv
_unlock
_iob
_lock
_snprintf
_itoa
wctomb
ferror
iswctype
wcstombs
__dllonexit
_onexit
__badioinfo
__pioinfo
_read
_fileno
_lseeki64
_write
_isatty
ungetc
strchr
strtol
strtoul
malloc
_fmode
memchr
_CIpow
memcpy
sprintf
_assert
memmove
memset
free
realloc
_pwctype
__lc_collate_cp
_wcsupr
_wcslwr
_strupr
_strlwr
_ecvt
_gcvt
_mbsupr
_errno
_mbslwr
__CxxFrameHandler
exit

kernel32

GetLastError
SetLastError
GetProcAddress
VirtualAlloc
FlushInstructionCache
GetCurrentProcess
VirtualFree
LoadLibraryA
GetModuleHandleExA
GetModuleHandleA
GetSystemInfo
OutputDebugStringA
RtlUnwind
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersion
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect

Exports

Exports

luaopen_ffi

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/json.lua
$PLUGINSDIR/lua51.dll
.dll windows:4 windows x86 arch:x86

03897d00c9f26c4fa6b52b1c1b315d9b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_iob
fread
feof
strerror
_errno
realloc
free
fprintf
fputs
_pctype
__mb_cur_max
_isctype
strtoul
_ftol
floor
_CIpow
fgets
exit
longjmp
_setjmp3
_popen
tmpfile
clearerr
fscanf
fwrite
ftell
fseek
setvbuf
fflush
_pclose
localeconv
_CIsinh
_CIcosh
_CItanh
_CIasin
_CIacos
getc
_CIfmod
modf
frexp
ldexp
rand
srand
_HUGE
strrchr
getenv
strtod
sprintf
strncat
strcspn
strncpy
system
remove
rename
tmpnam
clock
strftime
localtime
gmtime
time
mktime
difftime
setlocale
tolower
toupper
strpbrk
memchr
strcoll
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
freopen
fopen
ungetc
ferror
fclose
strchr
ceil
strstr

kernel32

GetModuleFileNameA
FreeLibrary
GetProcAddress
GetLastError
FormatMessageA
LoadLibraryA
DisableThreadLibraryCalls

Exports

Exports

luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinit
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_error
luaL_findtable
luaL_getmetafield
luaL_gsub
luaL_loadbuffer
luaL_loadfile
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlib
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffer
luaL_pushresult
luaL_ref
luaL_register
luaL_typerror
luaL_unref
luaL_where
lua_atpanic
lua_call
lua_checkstack
lua_close
lua_concat
lua_cpcall
lua_createtable
lua_dump
lua_equal
lua_error
lua_gc
lua_getallocf
lua_getfenv
lua_getfield
lua_gethook
lua_gethookcount
lua_gethookmask
lua_getinfo
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_insert
lua_iscfunction
lua_isnumber
lua_isstring
lua_isuserdata
lua_lessthan
lua_load
lua_newstate
lua_newthread
lua_newuserdata
lua_next
lua_objlen
lua_pcall
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawset
lua_rawseti
lua_remove
lua_replace
lua_resume
lua_setallocf
lua_setfenv
lua_setfield
lua_sethook
lua_setlevel
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_status
lua_toboolean
lua_tocfunction
lua_tointeger
lua_tolstring
lua_tonumber
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_xmove
lua_yield
luaopen_base
luaopen_debug
luaopen_io
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/luacom.dll
.dll windows:4 windows x86 arch:x86

5f56694ee532c8969e60878f914fcebd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
FormatMessageA
WideCharToMultiByte
IsBadStringPtrA
GetCurrentDirectoryA
MultiByteToWideChar
lstrlenW
lstrcpyW
IsBadWritePtr
DebugBreak
GetModuleFileNameA
LocalFree
FatalAppExitA

user32

GetActiveWindow
MessageBoxA
wsprintfA
CreateWindowExA
TranslateMessage
DefWindowProcA
DispatchMessageA
WinHelpA
GetMessageA
RegisterClassA
CallWindowProcA
GetWindowLongA
GetClientRect
ShowWindow
IsWindowVisible
EqualRect
OffsetRect
SetWindowRgn
SetFocus
GetWindowRect
MapWindowPoints
SetWindowPos
IntersectRect

gdi32

DeleteObject
SetViewportOrgEx
SetWindowOrgEx
SetViewportExtEx
SetWindowExtEx
SetMapMode
CreateRectRgnIndirect

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueA
RegSetValueExA
RegCreateKeyExA

ole32

StringFromCLSID
CLSIDFromProgID
ProgIDFromCLSID
CLSIDFromString
CoCreateInstance
MkParseDisplayName
CreateBindCtx
CoRegisterClassObject
OleInitialize
OleUninitialize
CreateOleAdviseHolder
OleRegGetUserType
CoLockObjectExternal
StringFromIID
CoTaskMemAlloc
CoTaskMemFree
CoRevokeClassObject

oleaut32

SysAllocString
LoadRegTypeLi
DispGetIDsOfNames
SafeArrayGetDim
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreate
SafeArrayDestroy
SysFreeString
GetActiveObject
LoadTypeLibEx
UnRegisterTypeLi
LHashValOfNameSys
VariantClear
VariantInit
SysStringLen
VariantTimeToSystemTime
VariantChangeType
VariantCopyInd
SystemTimeToVariantTime
VariantCopy
SafeArrayPutElement
SafeArrayGetElement

shlwapi

SHDeleteKeyA

lua51

lua_gettable
lua_pushvalue
lua_pushnumber
luaL_argerror
luaL_ref
luaL_optlstring
luaL_checklstring
luaL_checknumber
lua_getfield
lua_rawset
lua_rawget
lua_remove
lua_touserdata
luaL_checktype
lua_call
lua_insert
lua_objlen
lua_pushlstring
lua_rawgeti
lua_topointer
lua_isuserdata
lua_close
luaL_openlib
lua_error
lua_pcall
lua_setmetatable
lua_newuserdata
lua_equal
lua_getmetatable
lua_pushlightuserdata
lua_pushboolean
lua_checkstack
lua_rawseti
luaL_loadfile
luaopen_package
luaopen_table
luaopen_string
luaopen_io
luaopen_math
luaopen_base
luaL_newstate
lua_setfield
lua_createtable
lua_pushstring
lua_settable
lua_pushcclosure
lua_pushnil
lua_next
lua_typename
lua_settop
lua_gettop
lua_type
lua_tonumber
lua_tolstring
lua_toboolean
luaL_unref

msvcrt

strncmp
_stricmp
??2@YAPAXI@Z
_ftol
malloc
mbstowcs
wcslen
wcstombs
strncpy
_purecall
fclose
fflush
vfprintf
fprintf
_spawnlp
sscanf
wprintf
__RTDynamicCast
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
fopen
_CxxThrowException
__CxxFrameHandler
free
sprintf
strncat
printf
??3@YAXPAX@Z

Exports

Exports

DllGetClassObject
luacom_IDispatch2LuaCOM
luacom_close
luacom_detectAutomation
luacom_open
luacom_openlib
luaopen_luacom

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/luaxml.lua
$PLUGINSDIR/notifyicon.lua
$PLUGINSDIR/nsDialogs.dll
.dll windows:5 windows x86 arch:x86

90eea478feb0667dcdd7bccb241e74b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
HeapFree
GetProcessHeap
HeapAlloc
MulDiv
GlobalFree
lstrcpynA
GlobalAlloc
lstrcmpiA
GetFileAttributesA
lstrcpyA
GetCurrentDirectoryA
HeapReAlloc
SetCurrentDirectoryA

user32

LoadCursorA
RemovePropA
DrawFocusRect
GetWindowLongA
GetPropA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetCursor
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
GetClientRect
CharPrevA
CallWindowProcA
SetPropA
DestroyWindow
MapDialogRect
CharNextA
SendMessageA
DrawTextA

gdi32

SetTextColor

shell32

SHGetPathFromIDListA
SHBrowseForFolderA

comdlg32

GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsis7z.dll
.dll windows:5 windows x86 arch:x86

4c04c20a976733bf789fead96eb58701

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryA
AreFileApisANSI
GetModuleFileNameA
SetLastError
CreateFileW
SetFileTime
CloseHandle
SetFileAttributesA
RemoveDirectoryA
MoveFileA
SetFileAttributesW
RemoveDirectoryW
MoveFileW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
GetFullPathNameA
lstrlenA
GetFullPathNameW
FindClose
FindFirstFileA
FindFirstFileW
CreateFileA
GetFileSize
SetFilePointer
ReadFile
WriteFile
SetEndOfFile
GetProcAddress
GetCurrentProcess
GetSystemInfo
GetStdHandle
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
DeleteCriticalSection
VirtualFree
VirtualAlloc
WaitForSingleObject
SetEvent
InitializeCriticalSection
CreateEventA
ResetEvent
SetFileApisToOEM
GetVersionExA
GlobalFree
lstrcpyA
lstrcpynA
GlobalAlloc
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
WriteConsoleW
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
VirtualQuery

user32

GetDlgItem
FindWindowExA
SetWindowTextA
wsprintfA
CharUpperW
CharUpperA
SendMessageA

oleaut32

VariantCopy
VariantClear
SysAllocString

Exports

Exports

Extract
ExtractWithCallback
ExtractWithDetails

Sections

.text
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsisunz.dll
.dll windows:4 windows x86 arch:x86

0f92772da9c737d2bac38919e9863980

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryA
lstrcpyA
lstrcmpA
lstrcmpiA
GlobalFree
lstrcpynA
GlobalAlloc
lstrcatA
lstrlenA
GetVersion
LeaveCriticalSection
EnterCriticalSection
GetStdHandle
HeapAlloc
GetProcessHeap
HeapFree
GetLastError
CreateFileA
WriteFile
ReadFile
CloseHandle
SetFilePointer

user32

MessageBoxA
DispatchMessageA
TranslateMessage
PeekMessageA
CharPrevA
wsprintfA
SendMessageA
GetDlgItem
FindWindowExA

Exports

Exports

Unzip
UnzipToLog
UnzipToStack
extract_RunDLL

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 706B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/packaged_app.lua
.js
$PLUGINSDIR/processfreefile.lua
$PLUGINSDIR/sandbox.lua
.js
$PLUGINSDIR/scheduler.lua
.js
$PLUGINSDIR/service_registry.lua
$PLUGINSDIR/skin/res/common.css
$PLUGINSDIR/skin/res/common.js
.js
$PLUGINSDIR/skin/res/jquery.js
.js
$PLUGINSDIR/skin/res/knockout.js
.js
$PLUGINSDIR/uistate.lua
$PLUGINSDIR/un.package.exe
.exe windows:5 windows x86 arch:x86

35b698a6fd5038f719a27b089cb1f48e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
HeapAlloc
GetProcessHeap
lstrlenA
GetCommandLineA
WriteFile
FormatMessageA
GetLastError
CloseHandle
ReadFile
CreateFileA
ExitProcess

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/utils.lua
.js
$PLUGINSDIR/version.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetWindowsVersion
IsWindows2000
IsWindows2003
IsWindows31
IsWindows95
IsWindows98
IsWindows98orLater
IsWindowsME
IsWindowsNT351
IsWindowsNT40
IsWindowsPlatform9x
IsWindowsPlatformNT
IsWindowsXP

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/win32_constants.lua
$PLUGINSDIR/wininet/compat.lua
.js
$PLUGINSDIR/wininet/core.lua
.js
$PLUGINSDIR/wininet/defs.lua
.js
$PLUGINSDIR/wininet/ftp.lua
.js
$PLUGINSDIR/wininet/http.lua
.js
$PLUGINSDIR/wininet/ltn12.lua
.js
$PLUGINSDIR/wininet/url.lua
$PLUGINSDIR/wininet/wininet_h.lua
$PLUGINSDIR/wininet/wintypes.lua

Sharing

General

Malware Config

Signatures

Files

c86b02c21ff392ad6ffcf21dcd4a5588

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 107KB

.ndata Size: - Virtual size: 176KB

.rsrc Size: 187KB - Virtual size: 187KB

.reloc Size: 3KB - Virtual size: 2KB

0ece15e7d9bb35972aec701f46192460

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 512B - Virtual size: 503B

.data Size: 512B - Virtual size: 128B

.reloc Size: 512B - Virtual size: 220B

6ef0ba2a59a41ea0d58313176f4f9149

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

winmm

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 532B

.rsrc Size: 20KB - Virtual size: 19KB

.reloc Size: 512B - Virtual size: 456B

d224073b022ad7f6039ec3ce0a091d35

Headers

DLL Characteristics

File Characteristics

Imports

lua51

advapi32

winmm

iphlpapi

msvcrt

kernel32

user32

shell32

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 2KB - Virtual size: 2KB

fe8e49b45d854066bc51a41f61066908

Headers

File Characteristics

Imports

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 107KB

.ndata
Size: - Virtual size: 176KB

.rsrc
Size: 187KB - Virtual size: 187KB

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 503B

.data
Size: 512B - Virtual size: 128B

.reloc
Size: 512B - Virtual size: 220B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 532B

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 512B - Virtual size: 456B

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 2KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 13KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 20KB

.reloc
Size: 8KB - Virtual size: 4KB

.text
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 48B

.rdata
Size: 512B - Virtual size: 512B

.bss
Size: - Virtual size: 208B

.edata
Size: 512B - Virtual size: 84B

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 440B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1024B - Virtual size: 895B

.data
Size: - Virtual size: 576B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 512B - Virtual size: 414B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 92B

.reloc
Size: 512B - Virtual size: 496B