53f20b6130682a6cdcd567a49abdb722

Sharing

Copy URL Twitter E-mail

General

Target

53f20b6130682a6cdcd567a49abdb722
Size

1.2MB
MD5

53f20b6130682a6cdcd567a49abdb722
SHA1

9a81366e0a875b9730e63dc4ce39d3b71fa848fb
SHA256

3bcead0fc0a7a475b9033a762b837f135f6bff41f3758307a613107a96479a4b
SHA512

9b40333c09d246f41a96138a17125669ed5b2e87d6cea459c4c91bff51b5ce090a2b333ddde6e463367a74bf98cdb2df9b89c6d8e46bf0645794e35e1377bc12
SSDEEP

24576:KUVv+10DpGCtP5bczCJxMhkHKoPly58uKMdZ377wu6pNCNvhg44IS0qnlb1NG6:K+OMGCtdtKoP28WZAuACQ44IS9nlb1T

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/$PLUGINSDIR/nsRandom.dll	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/$PLUGINSDIR/nsRandom.dll	upx

Unsigned PE 19 IoCs

Checks for missing Authenticode signature.

resource
53f20b6130682a6cdcd567a49abdb722
unpack001/$PLUGINSDIR/Base64.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/blowfish.dll
unpack001/$PLUGINSDIR/inetc.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsRandom.dll
unpack002/out.upx
unpack001/PBDWE115.DLL
unpack001/atl71.dll
unpack001/dxjrl.dll
unpack001/dxjsoft.dll
unpack001/dxjxh.pbd
unpack001/libjcc.dll
unpack001/libjutils.dll
unpack001/ͻ/atl71.dll
unpack001/ͻ/libjcc.dll
unpack001/ͻ/libjutils.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

53f20b6130682a6cdcd567a49abdb722
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/Baidubar.bmp
$PLUGINSDIR/Base64.dll
.dll windows:4 windows x86 arch:x86

1ba6926a1ee4e4cda118768081f528d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrcpyA
lstrcpynA
GlobalAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcess
TerminateProcess

msvcr80

memset
atoi
_crt_debugger_hook

Exports

Exports

Decrypt
Encrypt

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/blowfish.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Decrypt
Encrypt

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 89B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/inetc.dll
.dll windows:4 windows x86 arch:x86

3f1149a3053980fe6b461521d2b55a2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_mbschr
_adjust_fdiv
malloc
_initterm
free
_mbsrchr
strtoul
memset
_mbsstr
strtol

kernel32

CloseHandle
CreateThread
WaitForSingleObject
TerminateThread
GetModuleHandleA
MulDiv
lstrcpyA
GlobalAlloc
LoadLibraryA
GetProcAddress
lstrlenA
WriteFile
ReadFile
lstrcmpA
lstrcpynA
GetLastError
GlobalFree
lstrcmpiA
DeleteFileA
SleepEx
SetFilePointer
GetTickCount
lstrcatA
GetFileSize
CreateFileA

user32

MessageBoxA
GetParent
ShowWindow
PostMessageA
SetWindowTextA
GetWindowTextA
IsWindow
GetDlgItem
SetDlgItemTextA
SendDlgItemMessageA
SetWindowPos
SystemParametersInfoA
GetClientRect
GetWindowRect
SetTimer
LoadIconA
SetWindowLongA
GetWindowLongA
UpdateWindow
DestroyWindow
KillTimer
RedrawWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
IsWindowVisible
EnableWindow
CreateDialogParamA
FindWindowExA
wsprintfA
SendMessageA

wininet

HttpSendRequestA
HttpSendRequestExA
HttpQueryInfoA
FtpCreateDirectoryA
FtpOpenFileA
InternetGetLastResponseInfoA
InternetSetFilePointer
InternetSetOptionA
InternetQueryOptionA
InternetCloseHandle
InternetErrorDlg
HttpOpenRequestA
HttpAddRequestHeadersA
HttpEndRequestA
InternetConnectA
InternetCrackUrlA
InternetOpenA
InternetReadFile
InternetWriteFile

comctl32

ord17

Exports

Exports

get
head
post
put

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/left.bmp
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
GetProcessHeap
SetCurrentDirectoryA

user32

GetPropA
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
RemovePropA
CharPrevA
GetWindowLongA
DrawTextA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
MapDialogRect
GetClientRect
CharNextA
SendMessageA
DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsRandom.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetRandom

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PBDWE115.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 396KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 856KB - Virtual size: 852KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
atl71.dll
.dll windows:4 windows x86 arch:x86

7c3004ebf21f282412fa952c164aa2bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
lstrlenW
lstrcpyW
GetLastError
DisableThreadLibraryCalls
GetVersionExA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
lstrcpynW
CloseHandle
ReadFile
GetFileSize
CreateFileW
GetModuleHandleW
GetModuleFileNameW
WideCharToMultiByte
HeapFree
GetProcessHeap
WaitForSingleObject
GlobalAlloc
FindResourceA
MulDiv
lstrcatW
HeapAlloc
FlushInstructionCache
GetCurrentProcess
GlobalUnlock
GlobalLock
lstrcmpW
SetLastError
GlobalFree
GlobalHandle
LockResource
lstrcmpA
GetModuleHandleA
GetTickCount
GetProcAddress
ExitProcess
HeapSize
DebugBreak
HeapReAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcatA
lstrcpyA
lstrlenA
GetModuleFileNameA
RtlUnwind
VirtualQuery
LocalAlloc
LoadLibraryA

shlwapi

PathFindExtensionW

Exports

Exports

AtlAdvise
AtlAxAttachControl
AtlAxCreateControl
AtlAxCreateControlEx
AtlAxCreateControlLic
AtlAxCreateControlLicEx
AtlAxCreateDialogA
AtlAxCreateDialogW
AtlAxDialogBoxA
AtlAxDialogBoxW
AtlAxGetControl
AtlAxGetHost
AtlAxWinInit
AtlCallTermFunc
AtlComModuleGetClassObject
AtlComModuleRegisterClassObjects
AtlComModuleRegisterServer
AtlComModuleRevokeClassObjects
AtlComModuleUnregisterServer
AtlComPtrAssign
AtlComQIPtrAssign
AtlCreateRegistrar
AtlCreateTargetDC
AtlDevModeW2A
AtlFreeMarshalStream
AtlGetObjectSourceInterface
AtlGetVersion
AtlHiMetricToPixel
AtlIPersistPropertyBag_Load
AtlIPersistPropertyBag_Save
AtlIPersistStreamInit_Load
AtlIPersistStreamInit_Save
AtlInternalQueryInterface
AtlLoadTypeLib
AtlMarshalPtrInProc
AtlModuleAddTermFunc
AtlPixelToHiMetric
AtlRegisterClassCategoriesHelper
AtlRegisterTypeLib
AtlSetErrorInfo
AtlUnRegisterTypeLib
AtlUnadvise
AtlUnmarshalPtr
AtlUpdateRegistryFromResourceD
AtlWaitWithMessageLoop
AtlWinModuleAddCreateWndData
AtlWinModuleExtractCreateWndData
AtlWinModuleInit
AtlWinModuleRegisterClassExA
AtlWinModuleRegisterClassExW
AtlWinModuleRegisterWndClassInfoA
AtlWinModuleRegisterWndClassInfoW
AtlWinModuleTerm

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data.dat
dwud.pbd
dwuo.pbd
dxcx.pbd
dxjm.pbd
dxjrl.dll
.dll windows:4 windows x86 arch:x86

68f2ad7558cfce7f22019a7563efc21c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCPInfo
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapAlloc
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Exports

Exports

MyFormatLunarYear
MyGetLunarDate
getjieqi

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 971B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dxjsoft.dll
.dll windows:4 windows x86 arch:x86

bed70185f8672c7a99d37171dfb0f4d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetFilePointer
DeviceIoControl
CreateFileA
GetVersionExA
GetModuleFileNameA
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
RtlUnwind

Exports

Exports

DiskID32

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dxjxh.pbd
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetBufferSize
GetCylinders
GetHeads
GetIdeDiskInfo
GetModelNumber
GetRevisionNo
GetSectors
GetSerialNumber

Sections

.Upack
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dxuw.pbd
libjcc.dll
.dll windows:4 windows x86 arch:x86

1b0a346547e8b86414e28a4684240aa7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

ioctlsocket
gethostbyname
send
select
__WSAFDIsSet
recv
setsockopt
WSAStartup
connect
closesocket
WSAGetLastError
ntohs
ntohl
htons
htonl
socket

libjutils

log_FormatI18NMessage_v
log_GetI18NMessageId_v
_log_MemoryFree@4
log_GetLogger
_log_FormatI18NMessage_va@8
_log_FormatMessage_va@8

kernel32

CloseHandle
CreateEventA
DisableThreadLibraryCalls
TlsAlloc
TlsSetValue
Sleep
SetEvent
WaitForSingleObject
TlsGetValue
GetTickCount
ResetEvent
DeleteCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
GetSystemInfo
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
SetErrorMode
LoadLibraryA
GetLastError
FormatMessageA
LocalFree
SetThreadPriority

msvcrt

fputs
perror
fopen
getenv
fflush
vfprintf
strpbrk
strncpy
strtok
abort
fputc
malloc
free
realloc
memmove
_beginthreadex
_endthreadex
printf
fclose
fread
_initterm
_adjust_fdiv
_putenv
fprintf
memcmp
sprintf
strlen
_stricmp
strcmp
strchr
tolower
memset
strncmp
strstr
time
memcpy
strcpy
_strnicmp
sscanf
strrchr
_ftol
vsprintf
strcat
atoi
_errno
_pctype
_isctype
__mb_cur_max
toupper
_iob

Exports

Exports

JagAny_endValue
JagAny_getValue
JagAny_putValue
JagAny_tc
JagBCD_BinaryToString
JagBCD_StringToBinary
JagCSIIOP_dup_csi_sec_mech_list
JagCSI_GSSUP_ExportName
JagCSI_GSSUP_ImportName
JagCSI_GSSUP_get
JagCSI_GSSUP_put
JagCSI_Get_ITTPrincipalName
JagCSI_SASContextBody_getStream
JagCSI_SASContextBody_putStream
JagClient_CPPLoadLibrary
JagClient_FuncLookup
JagClient_LoadLibrary
JagClient_LoadLibraryEx
JagCodesetConvert
JagCosTS_pack_PropCtx
JagCosTS_registerCallbacks
JagCosTS_setNoUnpack
JagCosTS_unpack_PropCtx
JagFastHash
JagGetQOP
JagGetSupportedAssertedIdentities
JagHash
JagHashTableTS_fast_get
JagHashTableTS_fast_put
JagHashTableTS_fast_remove
JagHashTableTS_get
JagHashTableTS_getByValue
JagHashTableTS_getKeyValPairs
JagHashTableTS_put
JagHashTableTS_remove
JagHashTableTS_removeAllByValue
JagHashTableTS_retrieve
JagHashTableTS_size
JagHashTable_fast_get
JagHashTable_fast_put
JagHashTable_fast_remove
JagHashTable_get
JagHashTable_getByValue
JagHashTable_getKeyValPairs
JagHashTable_put
JagHashTable_remove
JagHashTable_removeAllByValue
JagHashTable_size
JagHashV
JagIIOPStream_asParent
JagIIOPStream_decodeIOR
JagIIOPStream_encodeIOR
JagIIOPStream_endMessage
JagIIOPStream_endPutEncapsulation
JagIIOPStream_getBuffer
JagIIOPStream_getByteOrder
JagIIOPStream_getEndian
JagIIOPStream_getGIOPVersion
JagIIOPStream_getIIOPVersion
JagIIOPStream_getIfFragmented
JagIIOPStream_getJavaBuffer
JagIIOPStream_getJavaInput
JagIIOPStream_getLocateReply
JagIIOPStream_getLocateRequest
JagIIOPStream_getMessage
JagIIOPStream_getRequest
JagIIOPStream_getRequestId
JagIIOPStream_getResponseServiceContextList
JagIIOPStream_getServiceContextList
JagIIOPStream_getTxnContext
JagIIOPStream_inheritByteOrder
JagIIOPStream_initLogFile
JagIIOPStream_initMaxSize
JagIIOPStream_insertServiceContext
JagIIOPStream_isOTSClient
JagIIOPStream_isSharedTxn
JagIIOPStream_isTransactional
JagIIOPStream_isValidGIOPHeader
JagIIOPStream_newBuffer
JagIIOPStream_putByteOrder
JagIIOPStream_putEncapsulation
JagIIOPStream_putJavaOutput
JagIIOPStream_putLocateReply
JagIIOPStream_putLocateRequest
JagIIOPStream_putMessageError
JagIIOPStream_putReplySystemException
JagIIOPStream_putRequest
JagIIOPStream_putServiceContextList
JagIIOPStream_regetServiceContextList
JagIIOPStream_resetOffset
JagIIOPStream_setAsParent
JagIIOPStream_setBuffer
JagIIOPStream_setEndian
JagIIOPStream_setIIOPVersion
JagIIOPStream_setOTSClient
JagIIOPStream_setSharedTxn
JagIIOPStream_setTransactional
JagIIOPStream_toWString
JagIIOPStream_unsetTransactional
JagIIOPStream_useCodeSets
JagMemory__alloc
JagMemory__free
JagMemory_checkOff
JagMemory_checkOn
JagMemory_dump
JagMemory_log
JagMemory_setParent
JagMemory_size
JagMemory_traceOff
JagMemory_traceOn
JagORB_async
JagORB_getInstance
JagORB_getTransactionCurrent
JagORB_getTxnControlRef
JagORB_init
JagORB_initErrFunc
JagORB_initLogFile
JagORB_initLogger
JagORB_isClient
JagORB_isExPseudoJava
JagORB_isLocal
JagORB_isPseudo
JagORB_isPseudoJava
JagORB_lock
JagORB_log
JagORB_logServer
JagORB_object_to_string
JagORB_setTxnControlRef
JagORB_setenv
JagORB_string_to_object
JagORB_unlock
JagObjectRef_dup
JagObjectRef_isa
JagObjectRef_narrow
JagObjectRef_str
JagPseudoCompByteArrayToStream
JagPseudoCompJStringToString
JagPseudoCompPrepareException
JagPseudoCompStreamToByteArray
JagPseudoCompStringToJString
JagPseudoCompThrowException
JagPseudoJava_attach
JagPseudoJava_checkForException
JagPseudoJava_detach
JagPseudoJava_getJNIEnv
JagPseudoJava_getObjectRef
JagPseudoJava_setJNIEnv
JagPseudoJava_setReplyFunction
JagPseudo_createMethodTable
JagPseudo_fillMethodTable
JagPseudo_getMethod
JagPseudo_getMethodTable
JagPseudo_getObjectInstance
JagPseudo_getObjectRef
JagPseudo_setReplyFunction
JagQOPComparedToCipher
JagQOPCompatible
JagQOPToString
JagStream_JagPseudoGetBuffer
JagStream_JagPseudoGetOffset
JagStream_JagPseudoResetOffset
JagStream_getAny
JagStream_getReplyAsync
JagStream_getTypeCode
JagStream_getUnionDisc
JagStream_invoke
JagStream_local
JagStream_putAny
JagStream_putTypeCode
JagStream_putUnionDisc
JagStream_setInvoke
JagString_alloc
JagString_dup
JagTypeCode_bounds
JagTypeCode_eq
JagTypeCode_id
JagTypeCode_kind
JagTypeCode_labels
JagTypeCode_length
JagTypeCode_max
JagTypeCode_member
JagTypeCode_name
JagTypeCode_switch
JagTypeCode_type
JavaPseudoComp_JNILockMutex
JavaPseudoComp_JNIUnLockMutex
JavaPseudoComp_getMethodId
JavaPseudoComp_getSkeleton
Java_com_sybase_CORBA_PseudoCppProfile_deleteObjectRef
Java_com_sybase_CORBA_PseudoCppProfile_dupObjectRef
Java_com_sybase_CORBA_PseudoCppProfile_invoke
Java_com_sybase_CORBA_PseudoCppProfile_newObjectRef
_Java_com_sybase_CORBA_PseudoCppProfile_jvmShutdownCall@8
_Java_com_sybase_CORBA_PseudoCppProfile_setJVMVersion@12
_Java_com_sybase_CORBA_PseudoCppProfile_setLibraryLocation@12
__sybase_DLL_info2@0
__sybase_DLL_info3@0
__sybase_DLL_info@0
default_JagORB
delete_JagHashTable
delete_JagHashTableTS
delete_JagObjectRef
jag_client_dbg_stop
lookupCharset
lookupCharsetID
new_JagAny
new_JagHTTPSocket
new_JagHashTable
new_JagHashTableEx
new_JagHashTableTS
new_JagHashTableTSEx
new_JagIIOPSocket
new_JagIIOPStream
new_JagORB
new_JagObjectRef
new_JagPseudoStream
new_JagStream
new_JagStreamEx
new_JagTypeCode

Sections

.text
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libjutils.dll
.dll windows:4 windows x86 arch:x86

33ee2cba20d82f3820335a0a2b65bb83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetSystemInfo
VirtualAlloc
VirtualFree
LoadLibraryA
GetProcAddress
DisableThreadLibraryCalls

msvcrt

fflush
_iob
vsprintf
setvbuf
fopen
getenv
remove
fclose
sprintf
asctime
localtime
fprintf
strcpy
time
_ftol
strcmp
malloc
free
sscanf
_pctype
_isctype
__mb_cur_max
abort
fputc
fputs
memset
memcpy
memcmp
_initterm
_adjust_fdiv
strlen
_stricmp

Exports

Exports

SybHeap__alloc
SybHeap_adopt
SybHeap_alloc
SybHeap_allocPerm
SybHeap_calloc
SybHeap_check
SybHeap_checkAll
SybHeap_checkOff
SybHeap_checkOn
SybHeap_debugOff
SybHeap_debugOn
SybHeap_dump
SybHeap_error
SybHeap_exception
SybHeap_free
SybHeap_freeIfParent
SybHeap_init
SybHeap_initByte
SybHeap_initLogger
SybHeap_log
SybHeap_malloc
SybHeap_parent
SybHeap_realloc
SybHeap_resize
SybHeap_setCheckInterval
SybHeap_showBufferMaximumBytes
SybHeap_showFullPath
SybHeap_size
SybHeap_sizeEx
SybHeap_totalSizeVM
SybHeap_traceOff
SybHeap_traceOn
__sybase_DLL_info2@0
__sybase_DLL_info3@0
__sybase_DLL_info@0
_log_AddDefaultHandler@4
_log_DeleteHandler@4
_log_FormatI18NMessage@4
_log_FormatI18NMessage_va@8
_log_FormatMessage_va@8
_log_GetJNISubSystemStatus@0
_log_GetNativeSubSystem@0
_log_GetProperty@8
_log_MemoryAlloc@4
_log_MemoryFree@4
_log_RegisterJavaVM@4
_log_RemoveDefaultHandler@4
_log_RemoveProperty@4
_log_SetErrorMessageHandler@8
_log_SetNativeSubSystem@4
_log_SetProperty@8
_log_SwitchToJNI@0
log_FormatI18NMessage_v
log_FormatMessage_v
log_GetHandler
log_GetI18NMessageId_v
log_GetLogger
log_Init
log_MemoryDump

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pbdpl115.DLL
.dll windows:4 windows x86 arch:x86

daebdb43eef6bb1de7740ebaefecc2d9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:cf:22:5a:2c:96:48:31:69:63:13:76:dc:15:2a:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

23/06/2006, 00:00

Not After

22/06/2009, 23:59

Subject

CN=Sybase\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=ESD Engineering,O=Sybase\, Inc.,L=Concord,ST=MA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr71

isdigit
fopen
abort
fflush
fputc
fputs
sprintf
vsprintf
sscanf
free
_initterm
_adjust_fdiv
__CppXcptFilter
_except_handler3
__dllonexit
_onexit
getenv
_ui64tow
wcsncmp
_wtol
wcscmp
iswalnum
iswalpha
_wcsnicmp
wcsstr
iswdigit
_wtoi
wcsncpy
wcscat
wcschr
iswspace
wcstod
wcslen
_wcsicmp
wcscpy
malloc
_strcmpi

kernel32

GlobalMemoryStatus
VirtualFree
VirtualAlloc
InterlockedExchange
SwitchToThread
GetCurrentThreadId
GetProfileStringW
lstrcmpiW
LoadLibraryW
GetProcAddress
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
GetModuleHandleW
GetSystemInfo

user32

InvalidateRect
GetWindowLongW
SendMessageW
DestroyWindow
ShowWindow
PeekMessageW
TranslateMessage
DispatchMessageW
IsWindow
GetSysColor
LoadStringW
wsprintfW
LoadCursorW
SetCursor
ShowCursor
DialogBoxParamW
GetPropW
SetPropW
SetFocus
EndDialog
RemovePropW
GetDlgItem

gdi32

GetStockObject
SetBkColor

pbshr115

ord837
ord714
ord247
ord50
ord777
ord778
ord743
ord742
ord254
ord217
ord33
ord46
ord7
ord8
ord51
ord835
ord725
ord723
ord854
ord737
ord726
ord945
ord162
ord1035
ord252
ord396
ord5
ord9
ord6
ord324
ord207
ord218
ord108
ord37
ord749
ord748
ord759
ord214
ord215
ord721
ord840
ord730
ord780
ord716
ord717
ord231
ord765
ord747
ord793
ord764
ord809
ord750
ord736
ord722
ord753
ord746
ord727
ord796
ord841
ord812
ord205
ord238
ord206
ord766
ord241
ord244
ord395
ord242
ord245
ord813
ord853
ord754
ord728
ord745
ord719
ord45

Exports

Exports

DP_ApplyDDLSyntax
DP_ArgdProc
DP_BlocksToText
DP_BuildCreateBlks
DP_BuildCreateSyntax
DP_BuildDropSyntax
DP_BuildNdxBlks
DP_BuildNdxSyntax
DP_BuildPrimaryKeyBlks
DP_BuildPrimaryKeySyntax
DP_BuildTablename
DP_CheckKeytype
DP_CreateTable
DP_DestroyBindBuffer
DP_DestroyColumnList
DP_DestroyCreateBlks
DP_DestroyDPBlob
DP_DestroyDPBlobList
DP_DestroyDPinfo
DP_DestroyDPtable
DP_DestroySyntax
DP_ExecuteError
DP_ExecuteSelect
DP_MatchPBtype
DP_MatchTypeName
DP_Parsecname
DP_Parsetname
DP_RTCancelPipe
DP_RTClosePipe
DP_RTCreatePipe
DP_RTDWRegister
DP_RTRepairPipe
DP_RTRunPipe
DP_SetBlobs
DP_SetDefaultBind
DP_SetDefaultText
DP_TableStatus
DP_TextToBlocks
DP_TransferData
DP_dwCloseError
DP_dwCreate
DP_dwDestroy
DP_genSQLData
DP_getKeyDef
DP_getTblDef
DP_setKeys
PDP_AdjustBlobnames
PDP_AdjustBlobtypes
PDP_Adjustnames
PDP_Adjusttypes
WEP

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ͻ/atl71.dll
.dll windows:4 windows x86 arch:x86

7c3004ebf21f282412fa952c164aa2bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
lstrlenW
lstrcpyW
GetLastError
DisableThreadLibraryCalls
GetVersionExA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
lstrcpynW
CloseHandle
ReadFile
GetFileSize
CreateFileW
GetModuleHandleW
GetModuleFileNameW
WideCharToMultiByte
HeapFree
GetProcessHeap
WaitForSingleObject
GlobalAlloc
FindResourceA
MulDiv
lstrcatW
HeapAlloc
FlushInstructionCache
GetCurrentProcess
GlobalUnlock
GlobalLock
lstrcmpW
SetLastError
GlobalFree
GlobalHandle
LockResource
lstrcmpA
GetModuleHandleA
GetTickCount
GetProcAddress
ExitProcess
HeapSize
DebugBreak
HeapReAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcatA
lstrcpyA
lstrlenA
GetModuleFileNameA
RtlUnwind
VirtualQuery
LocalAlloc
LoadLibraryA

shlwapi

PathFindExtensionW

Exports

Exports

AtlAdvise
AtlAxAttachControl
AtlAxCreateControl
AtlAxCreateControlEx
AtlAxCreateControlLic
AtlAxCreateControlLicEx
AtlAxCreateDialogA
AtlAxCreateDialogW
AtlAxDialogBoxA
AtlAxDialogBoxW
AtlAxGetControl
AtlAxGetHost
AtlAxWinInit
AtlCallTermFunc
AtlComModuleGetClassObject
AtlComModuleRegisterClassObjects
AtlComModuleRegisterServer
AtlComModuleRevokeClassObjects
AtlComModuleUnregisterServer
AtlComPtrAssign
AtlComQIPtrAssign
AtlCreateRegistrar
AtlCreateTargetDC
AtlDevModeW2A
AtlFreeMarshalStream
AtlGetObjectSourceInterface
AtlGetVersion
AtlHiMetricToPixel
AtlIPersistPropertyBag_Load
AtlIPersistPropertyBag_Save
AtlIPersistStreamInit_Load
AtlIPersistStreamInit_Save
AtlInternalQueryInterface
AtlLoadTypeLib
AtlMarshalPtrInProc
AtlModuleAddTermFunc
AtlPixelToHiMetric
AtlRegisterClassCategoriesHelper
AtlRegisterTypeLib
AtlSetErrorInfo
AtlUnRegisterTypeLib
AtlUnadvise
AtlUnmarshalPtr
AtlUpdateRegistryFromResourceD
AtlWaitWithMessageLoop
AtlWinModuleAddCreateWndData
AtlWinModuleExtractCreateWndData
AtlWinModuleInit
AtlWinModuleRegisterClassExA
AtlWinModuleRegisterClassExW
AtlWinModuleRegisterWndClassInfoA
AtlWinModuleRegisterWndClassInfoW
AtlWinModuleTerm

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ͻ/libjcc.dll
.dll windows:4 windows x86 arch:x86

1b0a346547e8b86414e28a4684240aa7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

ioctlsocket
gethostbyname
send
select
__WSAFDIsSet
recv
setsockopt
WSAStartup
connect
closesocket
WSAGetLastError
ntohs
ntohl
htons
htonl
socket

libjutils

log_FormatI18NMessage_v
log_GetI18NMessageId_v
_log_MemoryFree@4
log_GetLogger
_log_FormatI18NMessage_va@8
_log_FormatMessage_va@8

kernel32

CloseHandle
CreateEventA
DisableThreadLibraryCalls
TlsAlloc
TlsSetValue
Sleep
SetEvent
WaitForSingleObject
TlsGetValue
GetTickCount
ResetEvent
DeleteCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
GetSystemInfo
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
SetErrorMode
LoadLibraryA
GetLastError
FormatMessageA
LocalFree
SetThreadPriority

msvcrt

fputs
perror
fopen
getenv
fflush
vfprintf
strpbrk
strncpy
strtok
abort
fputc
malloc
free
realloc
memmove
_beginthreadex
_endthreadex
printf
fclose
fread
_initterm
_adjust_fdiv
_putenv
fprintf
memcmp
sprintf
strlen
_stricmp
strcmp
strchr
tolower
memset
strncmp
strstr
time
memcpy
strcpy
_strnicmp
sscanf
strrchr
_ftol
vsprintf
strcat
atoi
_errno
_pctype
_isctype
__mb_cur_max
toupper
_iob

Exports

Exports

JagAny_endValue
JagAny_getValue
JagAny_putValue
JagAny_tc
JagBCD_BinaryToString
JagBCD_StringToBinary
JagCSIIOP_dup_csi_sec_mech_list
JagCSI_GSSUP_ExportName
JagCSI_GSSUP_ImportName
JagCSI_GSSUP_get
JagCSI_GSSUP_put
JagCSI_Get_ITTPrincipalName
JagCSI_SASContextBody_getStream
JagCSI_SASContextBody_putStream
JagClient_CPPLoadLibrary
JagClient_FuncLookup
JagClient_LoadLibrary
JagClient_LoadLibraryEx
JagCodesetConvert
JagCosTS_pack_PropCtx
JagCosTS_registerCallbacks
JagCosTS_setNoUnpack
JagCosTS_unpack_PropCtx
JagFastHash
JagGetQOP
JagGetSupportedAssertedIdentities
JagHash
JagHashTableTS_fast_get
JagHashTableTS_fast_put
JagHashTableTS_fast_remove
JagHashTableTS_get
JagHashTableTS_getByValue
JagHashTableTS_getKeyValPairs
JagHashTableTS_put
JagHashTableTS_remove
JagHashTableTS_removeAllByValue
JagHashTableTS_retrieve
JagHashTableTS_size
JagHashTable_fast_get
JagHashTable_fast_put
JagHashTable_fast_remove
JagHashTable_get
JagHashTable_getByValue
JagHashTable_getKeyValPairs
JagHashTable_put
JagHashTable_remove
JagHashTable_removeAllByValue
JagHashTable_size
JagHashV
JagIIOPStream_asParent
JagIIOPStream_decodeIOR
JagIIOPStream_encodeIOR
JagIIOPStream_endMessage
JagIIOPStream_endPutEncapsulation
JagIIOPStream_getBuffer
JagIIOPStream_getByteOrder
JagIIOPStream_getEndian
JagIIOPStream_getGIOPVersion
JagIIOPStream_getIIOPVersion
JagIIOPStream_getIfFragmented
JagIIOPStream_getJavaBuffer
JagIIOPStream_getJavaInput
JagIIOPStream_getLocateReply
JagIIOPStream_getLocateRequest
JagIIOPStream_getMessage
JagIIOPStream_getRequest
JagIIOPStream_getRequestId
JagIIOPStream_getResponseServiceContextList
JagIIOPStream_getServiceContextList
JagIIOPStream_getTxnContext
JagIIOPStream_inheritByteOrder
JagIIOPStream_initLogFile
JagIIOPStream_initMaxSize
JagIIOPStream_insertServiceContext
JagIIOPStream_isOTSClient
JagIIOPStream_isSharedTxn
JagIIOPStream_isTransactional
JagIIOPStream_isValidGIOPHeader
JagIIOPStream_newBuffer
JagIIOPStream_putByteOrder
JagIIOPStream_putEncapsulation
JagIIOPStream_putJavaOutput
JagIIOPStream_putLocateReply
JagIIOPStream_putLocateRequest
JagIIOPStream_putMessageError
JagIIOPStream_putReplySystemException
JagIIOPStream_putRequest
JagIIOPStream_putServiceContextList
JagIIOPStream_regetServiceContextList
JagIIOPStream_resetOffset
JagIIOPStream_setAsParent
JagIIOPStream_setBuffer
JagIIOPStream_setEndian
JagIIOPStream_setIIOPVersion
JagIIOPStream_setOTSClient
JagIIOPStream_setSharedTxn
JagIIOPStream_setTransactional
JagIIOPStream_toWString
JagIIOPStream_unsetTransactional
JagIIOPStream_useCodeSets
JagMemory__alloc
JagMemory__free
JagMemory_checkOff
JagMemory_checkOn
JagMemory_dump
JagMemory_log
JagMemory_setParent
JagMemory_size
JagMemory_traceOff
JagMemory_traceOn
JagORB_async
JagORB_getInstance
JagORB_getTransactionCurrent
JagORB_getTxnControlRef
JagORB_init
JagORB_initErrFunc
JagORB_initLogFile
JagORB_initLogger
JagORB_isClient
JagORB_isExPseudoJava
JagORB_isLocal
JagORB_isPseudo
JagORB_isPseudoJava
JagORB_lock
JagORB_log
JagORB_logServer
JagORB_object_to_string
JagORB_setTxnControlRef
JagORB_setenv
JagORB_string_to_object
JagORB_unlock
JagObjectRef_dup
JagObjectRef_isa
JagObjectRef_narrow
JagObjectRef_str
JagPseudoCompByteArrayToStream
JagPseudoCompJStringToString
JagPseudoCompPrepareException
JagPseudoCompStreamToByteArray
JagPseudoCompStringToJString
JagPseudoCompThrowException
JagPseudoJava_attach
JagPseudoJava_checkForException
JagPseudoJava_detach
JagPseudoJava_getJNIEnv
JagPseudoJava_getObjectRef
JagPseudoJava_setJNIEnv
JagPseudoJava_setReplyFunction
JagPseudo_createMethodTable
JagPseudo_fillMethodTable
JagPseudo_getMethod
JagPseudo_getMethodTable
JagPseudo_getObjectInstance
JagPseudo_getObjectRef
JagPseudo_setReplyFunction
JagQOPComparedToCipher
JagQOPCompatible
JagQOPToString
JagStream_JagPseudoGetBuffer
JagStream_JagPseudoGetOffset
JagStream_JagPseudoResetOffset
JagStream_getAny
JagStream_getReplyAsync
JagStream_getTypeCode
JagStream_getUnionDisc
JagStream_invoke
JagStream_local
JagStream_putAny
JagStream_putTypeCode
JagStream_putUnionDisc
JagStream_setInvoke
JagString_alloc
JagString_dup
JagTypeCode_bounds
JagTypeCode_eq
JagTypeCode_id
JagTypeCode_kind
JagTypeCode_labels
JagTypeCode_length
JagTypeCode_max
JagTypeCode_member
JagTypeCode_name
JagTypeCode_switch
JagTypeCode_type
JavaPseudoComp_JNILockMutex
JavaPseudoComp_JNIUnLockMutex
JavaPseudoComp_getMethodId
JavaPseudoComp_getSkeleton
Java_com_sybase_CORBA_PseudoCppProfile_deleteObjectRef
Java_com_sybase_CORBA_PseudoCppProfile_dupObjectRef
Java_com_sybase_CORBA_PseudoCppProfile_invoke
Java_com_sybase_CORBA_PseudoCppProfile_newObjectRef
_Java_com_sybase_CORBA_PseudoCppProfile_jvmShutdownCall@8
_Java_com_sybase_CORBA_PseudoCppProfile_setJVMVersion@12
_Java_com_sybase_CORBA_PseudoCppProfile_setLibraryLocation@12
__sybase_DLL_info2@0
__sybase_DLL_info3@0
__sybase_DLL_info@0
default_JagORB
delete_JagHashTable
delete_JagHashTableTS
delete_JagObjectRef
jag_client_dbg_stop
lookupCharset
lookupCharsetID
new_JagAny
new_JagHTTPSocket
new_JagHashTable
new_JagHashTableEx
new_JagHashTableTS
new_JagHashTableTSEx
new_JagIIOPSocket
new_JagIIOPStream
new_JagORB
new_JagObjectRef
new_JagPseudoStream
new_JagStream
new_JagStreamEx
new_JagTypeCode

Sections

.text
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ͻ/libjutils.dll
.dll windows:4 windows x86 arch:x86

33ee2cba20d82f3820335a0a2b65bb83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetSystemInfo
VirtualAlloc
VirtualFree
LoadLibraryA
GetProcAddress
DisableThreadLibraryCalls

msvcrt

fflush
_iob
vsprintf
setvbuf
fopen
getenv
remove
fclose
sprintf
asctime
localtime
fprintf
strcpy
time
_ftol
strcmp
malloc
free
sscanf
_pctype
_isctype
__mb_cur_max
abort
fputc
fputs
memset
memcpy
memcmp
_initterm
_adjust_fdiv
strlen
_stricmp

Exports

Exports

SybHeap__alloc
SybHeap_adopt
SybHeap_alloc
SybHeap_allocPerm
SybHeap_calloc
SybHeap_check
SybHeap_checkAll
SybHeap_checkOff
SybHeap_checkOn
SybHeap_debugOff
SybHeap_debugOn
SybHeap_dump
SybHeap_error
SybHeap_exception
SybHeap_free
SybHeap_freeIfParent
SybHeap_init
SybHeap_initByte
SybHeap_initLogger
SybHeap_log
SybHeap_malloc
SybHeap_parent
SybHeap_realloc
SybHeap_resize
SybHeap_setCheckInterval
SybHeap_showBufferMaximumBytes
SybHeap_showFullPath
SybHeap_size
SybHeap_sizeEx
SybHeap_totalSizeVM
SybHeap_traceOff
SybHeap_traceOn
__sybase_DLL_info2@0
__sybase_DLL_info3@0
__sybase_DLL_info@0
_log_AddDefaultHandler@4
_log_DeleteHandler@4
_log_FormatI18NMessage@4
_log_FormatI18NMessage_va@8
_log_FormatMessage_va@8
_log_GetJNISubSystemStatus@0
_log_GetNativeSubSystem@0
_log_GetProperty@8
_log_MemoryAlloc@4
_log_MemoryFree@4
_log_RegisterJavaVM@4
_log_RemoveDefaultHandler@4
_log_RemoveProperty@4
_log_SetErrorMessageHandler@8
_log_SetNativeSubSystem@4
_log_SetProperty@8
_log_SwitchToJNI@0
log_FormatI18NMessage_v
log_FormatMessage_v
log_GetHandler
log_GetI18NMessageId_v
log_GetLogger
log_Init
log_MemoryDump

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ͻ/pbdpl115.DLL
.dll windows:4 windows x86 arch:x86

daebdb43eef6bb1de7740ebaefecc2d9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:cf:22:5a:2c:96:48:31:69:63:13:76:dc:15:2a:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

23/06/2006, 00:00

Not After

22/06/2009, 23:59

Subject

CN=Sybase\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=ESD Engineering,O=Sybase\, Inc.,L=Concord,ST=MA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr71

isdigit
fopen
abort
fflush
fputc
fputs
sprintf
vsprintf
sscanf
free
_initterm
_adjust_fdiv
__CppXcptFilter
_except_handler3
__dllonexit
_onexit
getenv
_ui64tow
wcsncmp
_wtol
wcscmp
iswalnum
iswalpha
_wcsnicmp
wcsstr
iswdigit
_wtoi
wcsncpy
wcscat
wcschr
iswspace
wcstod
wcslen
_wcsicmp
wcscpy
malloc
_strcmpi

kernel32

GlobalMemoryStatus
VirtualFree
VirtualAlloc
InterlockedExchange
SwitchToThread
GetCurrentThreadId
GetProfileStringW
lstrcmpiW
LoadLibraryW
GetProcAddress
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
GetModuleHandleW
GetSystemInfo

user32

InvalidateRect
GetWindowLongW
SendMessageW
DestroyWindow
ShowWindow
PeekMessageW
TranslateMessage
DispatchMessageW
IsWindow
GetSysColor
LoadStringW
wsprintfW
LoadCursorW
SetCursor
ShowCursor
DialogBoxParamW
GetPropW
SetPropW
SetFocus
EndDialog
RemovePropW
GetDlgItem

gdi32

GetStockObject
SetBkColor

pbshr115

ord837
ord714
ord247
ord50
ord777
ord778
ord743
ord742
ord254
ord217
ord33
ord46
ord7
ord8
ord51
ord835
ord725
ord723
ord854
ord737
ord726
ord945
ord162
ord1035
ord252
ord396
ord5
ord9
ord6
ord324
ord207
ord218
ord108
ord37
ord749
ord748
ord759
ord214
ord215
ord721
ord840
ord730
ord780
ord716
ord717
ord231
ord765
ord747
ord793
ord764
ord809
ord750
ord736
ord722
ord753
ord746
ord727
ord796
ord841
ord812
ord205
ord238
ord206
ord766
ord241
ord244
ord395
ord242
ord245
ord813
ord853
ord754
ord728
ord745
ord719
ord45

Exports

Exports

DP_ApplyDDLSyntax
DP_ArgdProc
DP_BlocksToText
DP_BuildCreateBlks
DP_BuildCreateSyntax
DP_BuildDropSyntax
DP_BuildNdxBlks
DP_BuildNdxSyntax
DP_BuildPrimaryKeyBlks
DP_BuildPrimaryKeySyntax
DP_BuildTablename
DP_CheckKeytype
DP_CreateTable
DP_DestroyBindBuffer
DP_DestroyColumnList
DP_DestroyCreateBlks
DP_DestroyDPBlob
DP_DestroyDPBlobList
DP_DestroyDPinfo
DP_DestroyDPtable
DP_DestroySyntax
DP_ExecuteError
DP_ExecuteSelect
DP_MatchPBtype
DP_MatchTypeName
DP_Parsecname
DP_Parsetname
DP_RTCancelPipe
DP_RTClosePipe
DP_RTCreatePipe
DP_RTDWRegister
DP_RTRepairPipe
DP_RTRunPipe
DP_SetBlobs
DP_SetDefaultBind
DP_SetDefaultText
DP_TableStatus
DP_TextToBlocks
DP_TransferData
DP_dwCloseError
DP_dwCreate
DP_dwDestroy
DP_genSQLData
DP_getKeyDef
DP_getTblDef
DP_setKeys
PDP_AdjustBlobnames
PDP_AdjustBlobtypes
PDP_Adjustnames
PDP_Adjusttypes
WEP

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 56KB

.rsrc Size: 5KB - Virtual size: 4KB

1ba6926a1ee4e4cda118768081f528d5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcr80

Exports

Exports

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 512B - Virtual size: 503B

.data Size: 512B - Virtual size: 828B

.rsrc Size: 512B - Virtual size: 428B

.reloc Size: 512B - Virtual size: 166B

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 784B

.data Size: 512B - Virtual size: 100B

.reloc Size: 1024B - Virtual size: 520B

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 13KB - Virtual size: 13KB

DATA Size: 4KB - Virtual size: 4KB

BSS Size: - Virtual size: 1KB

.idata Size: 1024B - Virtual size: 906B

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 56KB

.rsrc
Size: 5KB - Virtual size: 4KB

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 503B

.data
Size: 512B - Virtual size: 828B

.rsrc
Size: 512B - Virtual size: 428B

.reloc
Size: 512B - Virtual size: 166B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 100B

.reloc
Size: 1024B - Virtual size: 520B

CODE
Size: 13KB - Virtual size: 13KB

DATA
Size: 4KB - Virtual size: 4KB

BSS
Size: - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 906B

.edata
Size: 512B - Virtual size: 89B

.reloc
Size: 1024B - Virtual size: 880B

.rsrc
Size: 512B - Virtual size: 512B

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 572B

UPX0
Size: - Virtual size: 44KB

UPX1
Size: 19KB - Virtual size: 20KB

.rsrc
Size: 1024B - Virtual size: 4KB

CODE
Size: 28KB - Virtual size: 28KB

DATA
Size: 1KB - Virtual size: 1KB

BSS
Size: - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 73B

.reloc
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 2KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 396KB - Virtual size: 392KB

.data
Size: 24KB - Virtual size: 49KB

.rsrc
Size: 856KB - Virtual size: 852KB

.reloc
Size: 108KB - Virtual size: 104KB