Static task
static1
General
-
Target
DIC_20201231_BA.zip
-
Size
1.1MB
-
MD5
71807ea448a05987cbfdbf0ea327f2ea
-
SHA1
d3c8c796ece2958a4c1b206098d82653495e2cb1
-
SHA256
922bb5279d7e5ebc3d7009b93facdb957db2d93aa54960d06062a3a3081b2638
-
SHA512
ea922eee00d09184cb42da1467706b87d890fccaeeb71fe0cc23326e1219f85aaa193a5d50cffc73cd16f50de8a533a59ab8053b1839c9620bfec100f26f2d96
-
SSDEEP
24576:KtE4rnVFsnMyfVG/NI/wJqlijbi7yjDwdhCHtPh7sdN9Fk8cAUFp:sRrjEwJVbi7saheh7IFkvVr
Malware Config
Signatures
-
Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
resource unpack001/DIC/DVDAuth.exe unpack001/DIC/DiscImageCreator.exe unpack001/DIC/E_WISE_W.EXE unpack001/DIC/EccEdc.exe unpack001/DIC/i6comp.exe unpack001/DIC/unscrambler.exe
Files
-
DIC_20201231_BA.zip.zip
Password: BetaArchive
-
DIC/C2ErrorProtect.txt
-
DIC/DVDAuth.exe.exe windows:5 windows x86 arch:x86
Password: BetaArchive
c65e5ab66aa2633e3d3ec84b7a32698a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
GetLastError
CloseHandle
FormatMessageA
CreateFileA
SetLastError
DeviceIoControl
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
vcruntime140
__CxxFrameHandler3
memcpy
memset
strstr
_CxxThrowException
__current_exception
_except_handler4_common
__current_exception_context
api-ms-win-crt-string-l1-1-0
isprint
strncmp
_strnicmp
strncpy
api-ms-win-crt-heap-l1-1-0
free
malloc
_set_new_mode
calloc
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
fclose
__p__commode
_set_fmode
fread
fopen
__stdio_common_vfprintf
__stdio_common_vsprintf
api-ms-win-crt-runtime-l1-1-0
_exit
_seh_filter_exe
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
exit
_configure_narrow_argv
_set_app_type
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_initterm_e
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
DIC/DiscImageCreator.exe.exe windows:5 windows x86 arch:x86
Password: BetaArchive
c6e238a8560d6d87ed6013677ba4ce1c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathRemoveFileSpecW
PathRemoveFileSpecA
PathRenameExtensionA
PathAppendA
PathAppendW
SHCreateStreamOnFileW
PathFileExistsA
imagehlp
MakeSureDirectoryPathExists
setupapi
SetupIterateCabinetA
kernel32
InitializeSListHead
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
CreateEventW
GetModuleHandleW
SetLastError
CloseHandle
Beep
GetCurrentDirectoryA
GetLastError
Sleep
ReadFile
DeviceIoControl
SetFilePointer
SetFilePointerEx
WideCharToMultiByte
CopyFileA
MoveFileExA
FindClose
lstrcpyA
lstrcatA
RemoveDirectoryA
SetFileAttributesA
GetFileAttributesA
DeleteFileA
FindFirstFileA
FindNextFileA
SetTapePosition
PrepareTape
GetTapeStatus
GetTapeParameters
CreateFileA
GetModuleFileNameA
GetProcAddress
LocalFree
GetCurrentProcess
FormatMessageA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetModuleFileNameW
MultiByteToWideChar
IsDebuggerPresent
OutputDebugStringW
QueryPerformanceCounter
UnhandledExceptionFilter
xmllite
CreateXmlWriter
CreateXmlReader
vcruntime140
_except_handler4_common
_CxxThrowException
__current_exception_context
memcpy
wcsrchr
memset
__CxxFrameHandler3
__current_exception
strstr
api-ms-win-crt-stdio-l1-1-0
fopen
setvbuf
ferror
ftell
__stdio_common_vswprintf
rewind
__acrt_iob_func
__stdio_common_vfprintf
fgets
fclose
_fseeki64
fread
fseek
feof
fwrite
__p__commode
__stdio_common_vsprintf
getchar
_set_fmode
fflush
_ftelli64
__stdio_common_vfscanf
api-ms-win-crt-string-l1-1-0
_strnicmp
isupper
isdigit
wcsncmp
isprint
strncmp
strncat
wcsncpy
strtok
tolower
strncpy
api-ms-win-crt-heap-l1-1-0
malloc
_set_new_mode
free
calloc
api-ms-win-crt-convert-l1-1-0
strtoul
atoi
strtol
api-ms-win-crt-filesystem-l1-1-0
_splitpath
remove
_makepath
api-ms-win-crt-runtime-l1-1-0
_controlfp_s
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
__p___argc
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_cexit
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
system
api-ms-win-crt-multibyte-l1-1-0
_mbsnbcpy
_mbscmp
_mbsrchr
_mbstok
_mbsnbcmp
_mbsnbcat
api-ms-win-crt-time-l1-1-0
strftime
_localtime64
_gmtime64
_time64
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 342KB - Virtual size: 341KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
DIC/Doc/ChangeLog.txt
-
DIC/Doc/Firmware&Tool.md
-
DIC/Doc/KnownIssue.txt
-
DIC/Doc/Reference.md
-
DIC/Doc/TestedDrive.txt
-
DIC/Doc/Todo.txt
-
DIC/E_WISE.INI
-
DIC/E_WISE_W.EXE.exe windows:1 windows x86 arch:x86
Password: BetaArchive
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
CODE32 Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
CONST32 Size: 3KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
DIC/EccEdc.exe.exe windows:5 windows x86 arch:x86
Password: BetaArchive
58b4759702bdbf5b8d24ce9abcfcd77d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
GetLastError
FormatMessageA
GetFileSize
CloseHandle
CreateFileA
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
msvcp140
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0_Lockit@std@@QAE@H@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1_Lockit@std@@QAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
shlwapi
StrCmpNIA
vcruntime140
memcpy
_except_handler4_common
_CxxThrowException
__current_exception_context
__std_exception_destroy
__std_exception_copy
__std_terminate
__current_exception
memset
memmove
__CxxFrameHandler3
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
_set_app_type
system
_initialize_onexit_table
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
terminate
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_controlfp_s
_crt_atexit
_invalid_parameter_noinfo_noreturn
_register_onexit_function
api-ms-win-crt-heap-l1-1-0
_callnewh
free
calloc
malloc
_set_new_mode
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_splitpath
_unlock_file
_makepath
api-ms-win-crt-stdio-l1-1-0
fsetpos
_set_fmode
fgetpos
__p__commode
fgetc
fflush
_get_stream_buffer_pointers
__stdio_common_vsprintf
fwrite
_fseeki64
ftell
fseek
fread
fputc
fopen
__acrt_iob_func
setvbuf
ungetc
__stdio_common_vfprintf
fclose
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
DIC/ReadErrorProtect.txt
-
DIC/default.dat
-
DIC/driveOffset.txt
-
DIC/i6comp.exe.exe windows:4 windows x86 arch:x86
Password: BetaArchive
c864d080fcaf84514f5d269dff0ec965
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
HeapFree
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
SetFilePointer
DeleteFileA
HeapSize
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
HeapReAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapAlloc
GetProcAddress
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
FlushFileBuffers
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
CloseHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
ReadFile
CreateDirectoryA
SetEndOfFile
GetDriveTypeA
SetFileAttributesA
GetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
GetFullPathNameA
GetCurrentDirectoryA
GetSystemTime
GetLocalTime
Sections
.text Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
DIC/unscrambler.exe.exe windows:5 windows x86 arch:x86
Password: BetaArchive
0ea5d7193b5bbd66b662f766c659ed25
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
vcruntime140
memset
_except_handler4_common
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
_set_fmode
fclose
ferror
fopen
__stdio_common_vfprintf
fwrite
fread
__p__commode
feof
api-ms-win-crt-time-l1-1-0
_time64
_difftime64
api-ms-win-crt-runtime-l1-1-0
_controlfp_s
_crt_atexit
_seh_filter_exe
_set_app_type
_register_onexit_function
_configure_narrow_argv
terminate
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_initialize_onexit_table
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_narrow_environment
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Dump CD (Safedisc Protected).bat
-
Dump CD (Securom Protected).bat
-
Dump CD.bat
-
Dump DVD.bat
-
ProtectionID/Protection_ID.eXe.exe windows:4 windows x86 arch:x86
Password: BetaArchive
ed4b65132f44b56562f4a64fb52c3786
Code Sign
71:ca:bc:22:cd:98:1a:a2:43:5d:40:c9:2a:72:63:8dCertificate
IssuerCN=ProtectionID Team,OU=ProtectionID Team,1.2.840.113549.1.9.1=#0c1c70726f74656374696f6e69647465616d406f75746c6f6f6b2e636f6dNot Before06/01/2013, 01:36Not After31/12/2039, 23:59SubjectCN=ProtectionID Team,OU=ProtectionID Team,1.2.840.113549.1.9.1=#0c1c70726f74656374696f6e69647465616d406f75746c6f6f6b2e636f6d7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before21/12/2012, 00:00Not After30/12/2020, 23:59SubjectCN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate
IssuerCN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=USNot Before18/10/2012, 00:00Not After29/12/2020, 23:59SubjectCN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
bf:8a:24:72:e3:6d:d6:6d:29:d8:00:44:84:5f:b0:3f:2b:31:b2:00Signer
Actual PE Digestbf:8a:24:72:e3:6d:d6:6d:29:d8:00:44:84:5f:b0:3f:2b:31:b2:00Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
IsBadReadPtr
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LocalAlloc
LocalFree
MapViewOfFile
MulDiv
MultiByteToWideChar
OpenEventA
OpenProcess
QueryDosDeviceA
ReadFile
RemoveDirectoryA
ResetEvent
SetErrorMode
SetEvent
SetFileAttributesA
SetFilePointer
GetEnvironmentStringsW
InterlockedDecrement
SetPriorityClass
SetThreadAffinityMask
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpiA
lstrcmpiW
lstrlenA
GetEnvironmentStringsA
GetDriveTypeA
InitializeCriticalSection
GlobalUnlock
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryW
GetWindowsDirectoryA
GetVolumeInformationA
GetVersionExA
GetVersion
GetTickCount
GetTempPathW
GetTempPathA
GetTempFileNameW
GetSystemTime
GetSystemPowerStatus
GetSystemInfo
GetSystemDirectoryW
GetSystemDirectoryA
GetStartupInfoW
GetStartupInfoA
GetProcessAffinityMask
GetProcAddress
GetPriorityClass
GetModuleHandleA
GetModuleFileNameA
GetLogicalDriveStringsA
GetLocalTime
GetLastError
GetFileTime
GetFileSize
GetFileAttributesW
GetFileAttributesA
GetExitCodeProcess
SetLastError
GetEnvironmentVariableA
GetDiskFreeSpaceA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetComputerNameA
GetCommandLineA
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageA
FlushInstructionCache
FlushFileBuffers
FindNextFileA
FindNextChangeNotification
FindFirstFileA
FindFirstChangeNotificationW
FindFirstChangeNotificationA
FindCloseChangeNotification
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitThread
ExitProcess
EnterCriticalSection
DeviceIoControl
DeleteFileW
DeleteFileA
CreateThread
CreateProcessW
CreateProcessA
CreateFileW
CreateFileMappingA
CreateFileA
CreateEventA
CreateDirectoryA
SetFileTime
CloseHandle
user32
SetCursor
SetDlgItemInt
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetMenuDefaultItem
SetMenuItemInfoA
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
SystemParametersInfoA
TrackPopupMenu
UpdateWindow
WindowFromPoint
wsprintfA
RegisterClassExA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
OpenClipboard
MoveWindow
MessageBoxA
LockWindowUpdate
LoadImageA
LoadIconA
SetClipboardData
LoadBitmapA
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsDlgButtonChecked
IsClipboardFormatAvailable
InvertRect
InvalidateRect
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowLongA
GetWindowDC
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetScrollRange
GetScrollPos
GetParent
GetMenuStringA
GetMenuItemInfoA
GetKeyState
GetFocus
GetDlgItemTextA
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
SetClassLongA
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScreenToClient
RemoveMenu
ReleaseDC
ReleaseCapture
LoadCursorA
RegisterWindowMessageA
GetDC
GetCursorPos
GetClientRect
GetClassNameA
FrameRect
FindWindowA
FillRect
EnumDisplaySettingsA
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextA
DrawStateA
DrawFrameControl
DrawFocusRect
DrawEdge
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DeferWindowPos
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CreateDialogParamA
CloseClipboard
ClientToScreen
CheckRadioButton
CheckDlgButton
CharLowerBuffA
CallWindowProcA
BeginPaint
AppendMenuA
BeginDeferWindowPos
GetMenuItemCount
comctl32
ord17
ImageList_Remove
ImageList_AddIcon
ImageList_GetIcon
ImageList_Create
ImageList_AddMasked
ImageList_GetImageCount
advapi32
RegDeleteKeyA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
AccessCheck
AddAccessAllowedAce
AllocateAndInitializeSid
DeleteService
FreeSid
GetLengthSid
GetUserNameA
ImpersonateSelf
InitializeAcl
InitializeSecurityDescriptor
IsValidSecurityDescriptor
OpenProcessToken
OpenThreadToken
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyExA
RegEnumKeyExW
RegFlushKey
RegOpenKeyA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RevertToSelf
RegSetValueExA
shell32
ShellExecuteW
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetFileInfoA
SHBrowseForFolderA
SHAddToRecentDocs
DragQueryFileA
DragFinish
Shell_NotifyIconA
gdi32
DeleteDC
DeleteObject
ExcludeClipRect
GetDeviceCaps
GetObjectA
GetPath
GetPixel
GetStockObject
GetTextExtentPoint32A
CreateSolidBrush
LineTo
MoveToEx
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetTextColor
StretchBlt
TextOutA
CreatePen
CreateFontIndirectA
CreateFontA
CreateDIBSection
CreateDCA
CreateCompatibleDC
IntersectClipRect
BitBlt
CreateCompatibleBitmap
comdlg32
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
FindTextA
ChooseFontA
ChooseColorA
GetSaveFileNameW
ole32
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
oleaut32
VariantInit
VariantClear
Exports
Exports
report_pid_version
Sections
.text Size: 459KB - Virtual size: 458KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.plugins Size: - Virtual size: 65B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.plgcore Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 332KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sehnam Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sehdat Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddcccc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.config Size: 512B - Virtual size: 308B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
ProtectionID/file_id.diz
-
ProtectionID/license.txt
-
ProtectionID/readme.txt