dialog
initDialog
show
Overview
overview
10Static
static
75bcf88e68b...e3.exe
windows7-x64
35bcf88e68b...e3.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3114IE.exe
windows7-x64
10114IE.exe
windows10-2004-x64
10bin/114Web.exe
windows7-x64
1bin/114Web.exe
windows10-2004-x64
1bin/Addr.dll
windows7-x64
3bin/Addr.dll
windows10-2004-x64
3bin/CameraDll.dll
windows7-x64
1bin/CameraDll.dll
windows10-2004-x64
1bin/SnapShot.exe
windows7-x64
1bin/SnapShot.exe
windows10-2004-x64
1bin/TGHistory.dll
windows7-x64
1bin/TGHistory.dll
windows10-2004-x64
1bin/TGMail.dll
windows7-x64
1bin/TGMail.dll
windows10-2004-x64
1bin/TGNetWork.dll
windows7-x64
3bin/TGNetWork.dll
windows10-2004-x64
3bin/TGRes.dll
windows7-x64
1bin/TGRes.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
5bcf88e68bb81946998a3734506d48e3.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
5bcf88e68bb81946998a3734506d48e3.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
114IE.exe
Resource
win7-20231129-en
windows7-x64
11 signatures
150 seconds
Behavioral task
behavioral6
Sample
114IE.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral7
Sample
bin/114Web.exe
Resource
win7-20231129-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
bin/114Web.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
bin/Addr.dll
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
bin/Addr.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
bin/CameraDll.dll
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
bin/CameraDll.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
bin/SnapShot.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
bin/SnapShot.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
bin/TGHistory.dll
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
bin/TGHistory.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
bin/TGMail.dll
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
bin/TGMail.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
bin/TGNetWork.dll
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
bin/TGNetWork.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral21
Sample
bin/TGRes.dll
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
bin/TGRes.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
5bcf88e68bb81946998a3734506d48e3
-
Size
2.1MB
-
MD5
5bcf88e68bb81946998a3734506d48e3
-
SHA1
1c07627fa6c54f2c8018a9ec76894dde40667c3b
-
SHA256
f802d378bd08a77618bdc0226ae218aa0725cce1096317ede5ed87c15d2f0cd7
-
SHA512
731e95aadeef5961d0f84e39384862f4acc39981510cb79c4c53e2f7c4ae9682da63427b9678385a99434768f2c574c931024109900e6924d0bf525e2c072001
-
SSDEEP
49152:Xu2c2eE/1UKQbjEhyV0Cl6ExRO90OJkIzyS/G8L+mDe3FlmB4:+H1EpQbwhyiClJcaSQs+m4Cy
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/bin/CameraDll.dll aspack_v212_v242 static1/unpack001/bin/SnapShot.exe aspack_v212_v242 -
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource 5bcf88e68bb81946998a3734506d48e3 unpack001/$PLUGINSDIR/InstallOptions.dll unpack001/bin/TGRes.dll -
NSIS installer 2 IoCs
resource yara_rule sample nsis_installer_1 sample nsis_installer_2
Files
-
5bcf88e68bb81946998a3734506d48e3.exe windows:4 windows x86 arch:x86
099c0646ea7282d232219f8807883be0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/InstallOptions.dll.dll windows:4 windows x86 arch:x86
b1cd0d78f652ce5fc63f0879371af012
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
user32
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
gdi32
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/ioSpecial.ini
-
$PLUGINSDIR/modern-wizard.bmp
-
114IE.exe.exe windows:4 windows x86 arch:x86
d422e2381e7c230e8caa7f4bbd9c7f0b
Code Sign
10:22:0c:14:75:9d:d8:14:4c:51:5b:3f:d5:4a:55:bcCertificate
IssuerCN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=USNot Before22/08/2011, 00:00Not After20/10/2014, 23:59SubjectCN=xiamen chinasource internet service co.\,ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology development center,O=xiamen chinasource internet service co.\,ltd.,L=Xiamen,ST=Fujian,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
4f:aa:9f:b1:3a:09:f9:91:b8:e2:b5:01:51:b6:b1:01:07:f7:49:84Signer
Actual PE Digest4f:aa:9f:b1:3a:09:f9:91:b8:e2:b5:01:51:b6:b1:01:07:f7:49:84Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
GetMappedFileNameA
GetModuleFileNameExW
EnumProcessModules
EnumProcesses
wininet
FindFirstUrlCacheEntryExW
FindNextUrlCacheEntryExW
InternetCanonicalizeUrlW
FindCloseUrlCache
InternetSetOptionW
DeleteUrlCacheEntryW
InternetGetCookieW
GetUrlCacheEntryInfoW
FindFirstUrlCacheEntryW
FindNextUrlCacheEntryW
InternetCrackUrlW
kernel32
VirtualProtect
VirtualAlloc
VirtualQuery
HeapReAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
ExitProcess
ExitThread
RtlUnwind
RaiseException
HeapSize
SetStdHandle
GetFileType
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
TlsFree
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentDirectoryA
GetDriveTypeA
SetEnvironmentVariableA
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
GetProfileIntW
InterlockedDecrement
lstrlenA
lstrcmpA
LocalAlloc
GetShortPathNameW
GetFullPathNameW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
GetModuleHandleA
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryA
lstrcmpW
GetVersionExA
GetSystemInfo
MoveFileExW
DeleteCriticalSection
InitializeCriticalSection
ResumeThread
DeviceIoControl
CreateFileA
lstrcmpiW
lstrcatW
WritePrivateProfileStringA
GetPrivateProfileStringA
MulDiv
FreeResource
lstrcpyW
DeleteAtom
GlobalAddAtomW
WritePrivateProfileStringW
LocalFileTimeToFileTime
GetCurrentDirectoryW
GlobalReAlloc
LoadLibraryExW
WinExec
TerminateProcess
GetVersion
InterlockedIncrement
GetACP
SetProcessWorkingSetSize
Thread32Next
TerminateThread
OpenThread
Thread32First
ResetEvent
UnmapViewOfFile
GetLongPathNameW
GetSystemDefaultLCID
CompareStringW
GetWindowsDirectoryW
WriteFile
SetFilePointer
GetFileSize
GetFileAttributesW
GetModuleFileNameW
HeapFree
GetProcessHeap
HeapAlloc
ReadFile
CreateProcessW
GetStartupInfoW
CreatePipe
GetSystemDirectoryW
GetModuleFileNameA
ReadProcessMemory
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
ExpandEnvironmentStringsW
LocalFree
FormatMessageW
GetCurrentProcess
GetVolumeInformationW
GetLogicalDrives
RemoveDirectoryW
CreateDirectoryW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
SetFileTime
SystemTimeToFileTime
CreateFileW
GlobalMemoryStatus
GetVersionExW
GetCurrentThread
SetThreadPriority
CreateEventW
CreateThread
WaitForSingleObject
CloseHandle
OpenProcess
lstrcpynW
WideCharToMultiByte
GlobalSize
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
CopyFileW
Sleep
Beep
GetModuleHandleW
MapViewOfFile
CreateFileMappingW
GetCurrentProcessId
GetSystemDefaultLangID
GetTickCount
GlobalUnlock
GlobalLock
GlobalAlloc
GetProcAddress
LoadLibraryW
GetDriveTypeW
GetTempPathW
MoveFileW
SetFileAttributesW
FreeLibrary
GlobalFree
GetCurrentThreadId
GetLastError
SetEvent
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
lstrlenW
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
SetErrorMode
GlobalFlags
GetLocalTime
FreeEnvironmentStringsW
user32
EnableMenuItem
CheckMenuItem
ShowWindow
IsDialogMessageW
SetDlgItemTextW
SetDlgItemInt
GetDlgItemInt
EndPaint
BeginPaint
GetWindowDC
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetFocus
GetWindowTextLengthW
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MapWindowPoints
SetScrollPos
GetScrollPos
RegisterClassW
AdjustWindowRectEx
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
SystemParametersInfoA
GetWindowPlacement
CreateWindowExW
DestroyWindow
UnionRect
IsWindowEnabled
ChildWindowFromPoint
GetClassInfoW
DestroyCursor
CopyIcon
CreateIconIndirect
GetIconInfo
GetDlgItemTextA
SetDlgItemTextA
IntersectRect
RemovePropW
CallWindowProcW
GetPropW
GetDlgItem
SetPropW
SetWindowTextW
GetMessagePos
DrawFrameControl
wsprintfW
DestroyMenu
RegisterClassExW
DefWindowProcW
GetClassInfoExW
ModifyMenuW
DrawEdge
WindowFromPoint
GetCapture
RegisterClipboardFormatW
IsHungAppWindow
RedrawWindow
DrawAnimatedRects
EnumChildWindows
TrackPopupMenu
SetMenuItemInfoW
LoadMenuW
WaitForInputIdle
GetWindowTextW
GetClassNameW
SendMessageTimeoutW
GetSystemMenu
GetAsyncKeyState
GetDesktopWindow
GetWindow
SetWindowLongW
UnregisterClassA
SetMenuItemBitmaps
CharUpperW
EndDialog
GetNextDlgTabItem
GetUpdateRect
AttachThreadInput
GetForegroundWindow
SetWindowPos
SetActiveWindow
SetForegroundWindow
IsRectEmpty
SetWindowRgn
GetMonitorInfoW
MonitorFromPoint
EqualRect
IsIconic
GetMenuState
IsWindow
UnregisterHotKey
RegisterHotKey
SetParent
LoadIconW
AllowSetForegroundWindow
FindWindowExW
FindWindowW
MessageBoxW
ExitWindowsEx
SetClipboardData
EmptyClipboard
DispatchMessageW
TranslateMessage
GetMessageW
IsChild
PeekMessageW
GetDoubleClickTime
GetWindowThreadProcessId
GetWindowLongW
EnumWindows
RegisterWindowMessageW
FillRect
SetRect
CreateCursor
SetMenuDefaultItem
GetCursor
GetMenuItemID
CreateDialogIndirectParamW
GetActiveWindow
GetDCEx
ValidateRect
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
GetSubMenu
GetMenuItemCount
GetMenu
IsClipboardFormatAvailable
GetKeyState
MoveWindow
GetSysColor
GetCursorPos
DrawFocusRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
PostThreadMessageW
UnregisterClassW
GetSysColorBrush
GetNextDlgGroupItem
GetDialogBaseUnits
ScreenToClient
GetClientRect
InvalidateRect
MessageBeep
KillTimer
SetTimer
IsWindowVisible
ClientToScreen
TrackMouseEvent
GetDC
ReleaseDC
GetFocus
SendMessageW
EnableWindow
DrawTextW
PostMessageW
LoadImageW
DrawIconEx
DestroyIcon
GetWindowRect
SetRectEmpty
TabbedTextOutW
DrawTextExW
GrayStringW
PtInRect
CopyRect
OffsetRect
GetSystemMetrics
SystemParametersInfoW
UpdateWindow
OpenClipboard
GetClipboardData
CloseClipboard
CreatePopupMenu
AppendMenuW
LockWindowUpdate
GetParent
SetCursor
InflateRect
LoadBitmapW
ReleaseCapture
SetCapture
LoadCursorW
GetMenuCheckMarkDimensions
gdi32
GetTextColor
GetRgnBox
CreatePolygonRgn
DPtoLP
PatBlt
SetRectRgn
ExtCreatePen
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
IntersectClipRect
ExcludeClipRect
SetMapMode
SetDIBColorTable
SelectObject
RestoreDC
SaveDC
GetDIBColorTable
StretchBlt
DeleteObject
CreateDIBSection
BitBlt
CreateCompatibleDC
GetBkColor
DeleteDC
CreateRoundRectRgn
SelectClipRgn
FillRgn
FrameRgn
SetTextJustification
SetBkColor
SetBkMode
GetTextMetricsW
SetTextColor
GetTextExtentPoint32W
GetDeviceCaps
ExtCreateRegion
OffsetRgn
SetROP2
Rectangle
SetPixel
CreateRectRgnIndirect
SetBitmapBits
CreateBitmap
CombineRgn
CreateRectRgn
GetDIBits
CreateDCW
LineTo
MoveToEx
CreateSolidBrush
GetCurrentObject
EnumFontsW
GetStockObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetMapMode
CreatePen
CreateFontIndirectW
CreateCompatibleBitmap
GetObjectW
GetClipBox
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
FreeSid
RegSetValueExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegSetValueW
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegQueryValueW
RegEnumValueW
RegDeleteKeyW
RegQueryValueExA
GetUserNameW
RegQueryInfoKeyW
RegSetKeySecurity
RegCreateKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAce
InitializeAcl
AllocateAndInitializeSid
RegGetKeySecurity
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
CopySid
GetLengthSid
GetTokenInformation
RegSetValueExA
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyW
RegEnumKeyW
shell32
Shell_NotifyIconW
SHGetSpecialFolderPathW
ExtractIconW
SHGetFileInfoW
ExtractIconExW
SHEmptyRecycleBinW
DragAcceptFiles
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHAppBarMessage
ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
comctl32
InitCommonControlsEx
_TrackMouseEvent
ord17
ImageList_GetImageCount
ImageList_GetIcon
ImageList_GetIconSize
shlwapi
SHGetValueW
SHDeleteKeyW
SHDeleteValueW
PathStripToRootW
PathIsUNCW
UrlUnescapeW
PathFindExtensionW
PathFindFileNameW
oledlg
OleUIBusyW
ole32
CoTaskMemAlloc
CoCreateInstance
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoUnmarshalInterface
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoTaskMemFree
StringFromCLSID
StringFromGUID2
CLSIDFromString
CoRegisterClassObject
CoRevokeClassObject
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CoGetClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
SysFreeString
VariantClear
SysAllocString
VariantInit
VarUdateFromDate
VarDateFromStr
OleLoadPicture
SysStringLen
SysStringByteLen
SysAllocStringLen
VariantChangeType
VariantCopy
SafeArrayDestroy
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
ws2_32
socket
ioctlsocket
send
connect
recv
__WSAFDIsSet
select
WSAStartup
gethostname
gethostbyname
inet_ntoa
WSACleanup
closesocket
WSAGetLastError
WSAAsyncGetHostByName
WSACancelAsyncRequest
htons
gdiplus
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipAlloc
GdipFree
GdipGetImagePixelFormat
imm32
ImmReleaseContext
ImmSetOpenStatus
ImmGetOpenStatus
ImmGetContext
ImmGetDefaultIMEWnd
iphlpapi
GetIfTable
GetAdaptersInfo
secur32
AcquireCredentialsHandleW
FreeContextBuffer
InitializeSecurityContextW
CompleteAuthToken
QuerySecurityPackageInfoW
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 380KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
bin/114Web.exe.exe windows:4 windows x86 arch:x86
87d230d1edaa25f5471fbc5edb987968
Code Sign
10:22:0c:14:75:9d:d8:14:4c:51:5b:3f:d5:4a:55:bcCertificate
IssuerCN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=USNot Before22/08/2011, 00:00Not After20/10/2014, 23:59SubjectCN=xiamen chinasource internet service co.\,ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology development center,O=xiamen chinasource internet service co.\,ltd.,L=Xiamen,ST=Fujian,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
63:40:6d:69:48:c5:44:f8:39:d3:d1:3b:fa:d9:09:4d:dd:2e:fb:66Signer
Actual PE Digest63:40:6d:69:48:c5:44:f8:39:d3:d1:3b:fa:d9:09:4d:dd:2e:fb:66Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
WritePrivateProfileStringW
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
VirtualAlloc
HeapReAlloc
RtlUnwind
CreateThread
SetStdHandle
GetFileType
HeapSize
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
GetFileTime
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetFileAttributesW
GlobalFlags
SuspendThread
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
lstrlenA
lstrcmpA
CreateFileW
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetVersionExA
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageW
LocalFree
MulDiv
SetLastError
UnmapViewOfFile
GetTempPathW
DeleteFileW
GlobalFree
GlobalSize
CopyFileW
WaitForSingleObject
ResetEvent
CreateEventW
SetEvent
SetProcessWorkingSetSize
SetUnhandledExceptionFilter
RaiseException
GetModuleFileNameW
GetModuleHandleW
ExitThread
VirtualProtect
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
lstrcmpiW
ReadProcessMemory
GetCurrentThreadId
TerminateThread
OpenProcess
MapViewOfFile
OpenFileMappingW
Sleep
CreateProcessW
GetVersionExW
CreateDirectoryW
GetTickCount
FreeLibrary
FindClose
FindFirstFileW
WideCharToMultiByte
GetLastError
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
LoadLibraryExW
LoadLibraryExA
LoadLibraryW
LoadLibraryA
WriteProcessMemory
lstrcmpiA
GetCurrentProcessId
VirtualQuery
GetProcAddress
GetModuleHandleA
GetSystemInfo
Module32NextW
Module32FirstW
GetCurrentProcess
CreateToolhelp32Snapshot
CloseHandle
GetWindowsDirectoryW
ExitProcess
HeapDestroy
GetModuleFileNameA
user32
PostThreadMessageW
GetMessageW
TranslateMessage
ValidateRect
MapDialogRect
DestroyMenu
PostQuitMessage
CharUpperW
MoveWindow
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextW
GetLastActivePopup
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetMenuState
IntersectRect
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
IsChild
GetParent
CharLowerBuffW
CharUpperBuffW
GetDesktopWindow
GetWindowLongW
OffsetRect
ActivateKeyboardLayout
GetKeyboardLayout
CreatePopupMenu
MessageBoxW
RegisterClipboardFormatW
ScreenToClient
SetMenuItemInfoW
TrackPopupMenu
SetWindowLongW
GetMenuItemID
InsertMenuW
LoadMenuW
AppendMenuW
MessageBoxA
GetActiveWindow
UnregisterClassA
TabbedTextOutW
DrawTextW
DrawTextExW
CreateMenu
CallWindowProcW
GetSubMenu
GetMenuItemCount
EnableMenuItem
IsWindow
GetKeyState
CharNextW
ReleaseCapture
LoadCursorW
SetCursor
UpdateWindow
MessageBeep
GetSystemMetrics
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetNextDlgGroupItem
SystemParametersInfoW
SetCapture
UnregisterClassW
GetSysColorBrush
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableW
GrayStringW
GetClientRect
PtInRect
PostMessageW
TrackMouseEvent
InvalidateRect
EnableWindow
GetClassNameW
RegisterWindowMessageW
SendMessageTimeoutW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetDC
PrintWindow
ReleaseDC
SetTimer
SendMessageW
KillTimer
FindWindowW
GetWindowThreadProcessId
LoadImageW
LoadIconW
SetRect
DestroyIcon
AllowSetForegroundWindow
GetForegroundWindow
AttachThreadInput
IsWindowEnabled
SetWindowPos
CopyRect
GetWindowRect
GetWindow
IsWindowVisible
EqualRect
SetFocus
SetActiveWindow
SetForegroundWindow
ShowWindow
InflateRect
GetCursorPos
SetWindowContextHelpId
gdi32
CreateBitmap
GetDeviceCaps
CreatePen
CreateRectRgnIndirect
GetRgnBox
GetBkColor
GetTextColor
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetClipBox
SetMapMode
SetTextColor
SetStretchBltMode
SetBkColor
RestoreDC
SaveDC
Ellipse
GetStockObject
GetBitmapBits
SetBrushOrgEx
GetCurrentObject
SetDIBColorTable
SelectObject
GetDIBColorTable
DeleteObject
CreateDIBSection
DeleteDC
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateCompatibleBitmap
StretchBlt
GetViewportExtEx
GetObjectW
GetMapMode
CreateCompatibleDC
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
advapi32
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegEnumKeyW
RegQueryValueW
RegOpenKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteW
DragQueryFileW
DragFinish
SHGetSpecialFolderPathW
comctl32
InitCommonControlsEx
shlwapi
PathFindExtensionW
StrStrIW
UrlUnescapeW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
StrRetToStrW
oledlg
OleUIBusyW
ole32
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoUnmarshalInterface
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CLSIDFromString
CoGetMarshalSizeMax
CoMarshalInterface
CoGetClassObject
CLSIDFromProgID
OleGetClipboard
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoDisconnectObject
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
oleaut32
SysFreeString
VarUI4FromStr
SysAllocStringLen
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysStringLen
VariantInit
VariantChangeType
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
VarBstrCmp
VariantCopy
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
LoadTypeLi
urlmon
CoInternetGetSession
RegisterBindStatusCallback
CoInternetSetFeatureEnabled
imagehlp
ImageDirectoryEntryToData
winmm
waveOutGetVolume
dsound
ord1
gdiplus
GdipCreateBitmapFromFile
GdipCreateBitmapFromHBITMAP
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipFree
GdipAlloc
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipSaveImageToFile
wininet
GetUrlCacheEntryInfoW
InternetSetOptionW
InternetCrackUrlW
InternetCanonicalizeUrlW
Sections
.text Size: 448KB - Virtual size: 447KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 472KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
bin/Addr.dll.dll windows:4 windows x86 arch:x86
5d2fbe384826cfea5c00a3f0df419660
Code Sign
10:22:0c:14:75:9d:d8:14:4c:51:5b:3f:d5:4a:55:bcCertificate
IssuerCN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=USNot Before22/08/2011, 00:00Not After20/10/2014, 23:59SubjectCN=xiamen chinasource internet service co.\,ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology development center,O=xiamen chinasource internet service co.\,ltd.,L=Xiamen,ST=Fujian,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
56:e5:71:25:e0:00:2a:8d:f5:49:a1:45:02:62:04:6d:ef:25:e2:e7Signer
Actual PE Digest56:e5:71:25:e0:00:2a:8d:f5:49:a1:45:02:62:04:6d:ef:25:e2:e7Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
WSACleanup
recv
WSAStartup
connect
socket
closesocket
htons
send
gethostbyname
kernel32
LocalReAlloc
DeleteCriticalSection
TlsFree
SetErrorMode
GlobalFlags
WritePrivateProfileStringW
InterlockedIncrement
GetFileAttributesW
GetFileTime
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteFileA
GetSystemTimeAsFileTime
GetCommandLineA
HeapAlloc
GetProcessHeap
RtlUnwind
ExitProcess
RaiseException
HeapReAlloc
HeapSize
TlsSetValue
HeapCreate
VirtualFree
VirtualAlloc
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
GetTimeFormatA
GetDateFormatA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetCurrentDirectoryA
GetDriveTypeA
SetEnvironmentVariableA
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
CreateFileW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
MoveFileW
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetVersionExW
GetProfileIntW
FormatMessageW
LocalFree
MulDiv
GetModuleHandleA
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GlobalUnlock
GlobalFree
FreeResource
InterlockedDecrement
lstrlenW
CloseHandle
GlobalAddAtomW
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
GetModuleFileNameW
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
MultiByteToWideChar
SuspendThread
GetCurrentThreadId
WritePrivateProfileStringA
GetPrivateProfileStringA
GetSystemWindowsDirectoryA
WinExec
LockResource
SizeofResource
WideCharToMultiByte
LoadResource
FindResourceW
CreateDirectoryA
CreateThread
GetProcAddress
SetLastError
GetLastError
SetThreadPriority
LoadLibraryW
GetModuleHandleW
InterlockedCompareExchange
HeapDestroy
user32
SetWindowTextW
MoveWindow
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
BeginPaint
EndPaint
GetDCEx
LoadCursorW
CharUpperW
UnregisterClassW
GetSysColorBrush
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
GetMenu
GetSubMenu
GetMenuItemID
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
DestroyMenu
IsDialogMessageW
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
UnregisterClassA
EndDialog
UnhookWindowsHookEx
CopyRect
IsWindow
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
GetActiveWindow
IsWindowVisible
ValidateRect
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetWindowLongW
GetParent
SetFocus
MessageBoxA
SetActiveWindow
KillTimer
SetWindowLongW
GetDesktopWindow
PostMessageW
SetParent
SetForegroundWindow
AttachThreadInput
GetForegroundWindow
GetWindowThreadProcessId
SetWindowTextA
GetDlgItemTextA
SetDlgItemTextA
FillRect
DrawIconEx
GetClientRect
SetRectEmpty
GetDC
InflateRect
OffsetRect
SetRect
ReleaseDC
GetSysColor
UpdateWindow
DestroyIcon
SetCursor
SetCapture
GetKeyState
CreateCursor
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
GetCursorPos
GetMenuItemCount
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetCursor
SetMenuDefaultItem
ReleaseCapture
SetTimer
GetDlgItemTextW
SetDlgItemTextW
GetWindowRect
ShowWindow
ClientToScreen
ScreenToClient
MsgWaitForMultipleObjects
PtInRect
LoadIconW
InvalidateRect
AppendMenuW
PeekMessageW
CreatePopupMenu
MessageBoxW
SendMessageW
EnableWindow
DispatchMessageW
SetMenuItemBitmaps
GetNextDlgTabItem
gdi32
PtVisible
RectVisible
TextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
SelectClipRgn
CreatePatternBrush
GetDeviceCaps
CreatePen
CreateSolidBrush
SetRectRgn
CombineRgn
DeleteObject
ExtTextOutW
GetObjectW
PatBlt
CreateRectRgnIndirect
CreateBitmap
GetStockObject
CreateCompatibleDC
CreateRectRgn
CreateCompatibleBitmap
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegQueryValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
shell32
SHGetPathFromIDListA
DragQueryFileA
ShellExecuteA
DragAcceptFiles
SHGetSpecialFolderLocation
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsDirectoryA
PathIsUNCW
oleaut32
VariantChangeType
VariantClear
VariantInit
Exports
Exports
CreateAddrBookWnd
CreateAddrTaskWnd
DeleteAddrBookWndPtr
DeleteTaskWndPtr
GetAddrFiles
GetPtr
ImportAddrBook
MDALogOut
MailConfig
MoveAddrBookWnd
MoveAddrTaskWnd
NewAddrBookWnd
NewAddrTaskWnd
OutportAddrBook
SearchAddr
SendMailToMyself
SetAddrFiles
SetMainWndHWND
ShowLog
ShowSendMail
ShowSendMailDlg
Sections
.text Size: 456KB - Virtual size: 452KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/CameraDll.dll.dll windows:4 windows x86 arch:x86
Code Sign
10:22:0c:14:75:9d:d8:14:4c:51:5b:3f:d5:4a:55:bcCertificate
IssuerCN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=USNot Before22/08/2011, 00:00Not After20/10/2014, 23:59SubjectCN=xiamen chinasource internet service co.\,ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology development center,O=xiamen chinasource internet service co.\,ltd.,L=Xiamen,ST=Fujian,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
8c:8e:cb:91:a5:f8:89:da:4b:02:87:91:f4:d9:39:0b:4e:93:26:f0Signer
Actual PE Digest8c:8e:cb:91:a5:f8:89:da:4b:02:87:91:f4:d9:39:0b:4e:93:26:f0Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxImage@@QAE@ABV0@_N11@Z
??0CxImage@@QAE@K@Z
??0CxImage@@QAE@KKKK@Z
??0CxImage@@QAE@PAEKK@Z
??0CxImage@@QAE@PAU_iobuf@@K@Z
??0CxImage@@QAE@PAVCxFile@@K@Z
??0CxImage@@QAE@PBDK@Z
??0CxImageGIF@@QAE@ABV0@@Z
??0CxImageGIF@@QAE@XZ
??0CxImageJPG@@QAE@ABV0@@Z
??0CxImageJPG@@QAE@XZ
??0CxImagePNG@@QAE@ABV0@@Z
??0CxImagePNG@@QAE@XZ
??0CxMemFile@@QAE@ABV0@@Z
??0CxMemFile@@QAE@PAEK@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??1CxImageGIF@@UAE@XZ
??1CxImageJPG@@UAE@XZ
??1CxImagePNG@@UAE@XZ
??1CxMemFile@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxImage@@QAEAAV0@ABV0@@Z
??4CxImageGIF@@QAEAAV0@ABV0@@Z
??4CxImageJPG@@QAEAAV0@ABV0@@Z
??4CxImagePNG@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxImageGIF@@6B@
??_7CxImageJPG@@6B@
??_7CxImagePNG@@6B@
??_7CxMemFile@@6B@
??_C@_0L@BGJF@Read?5Error?$AA@
??_C@_0M@GIHK@Flush?5Error?$AA@
??_C@_0M@KPPG@Write?5Error?$AA@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXABV0@@Z
?Alloc@CxMemFile@@IAEXK@Z
?AlphaClear@CxImage@@QAEXXZ
?AlphaCopy@CxImage@@QAE_NAAV1@@Z
?AlphaCreate@CxImage@@QAEXXZ
?AlphaDelete@CxImage@@QAEXXZ
?AlphaFlip@CxImage@@QAE_NXZ
?AlphaGet@CxImage@@QAEEJJ@Z
?AlphaGetMax@CxImage@@QBEEXZ
?AlphaInvert@CxImage@@QAEXXZ
?AlphaIsValid@CxImage@@QAE_NXZ
?AlphaMirror@CxImage@@QAE_NXZ
?AlphaPaletteClear@CxImage@@QAEXXZ
?AlphaPaletteEnable@CxImage@@QAEX_N@Z
?AlphaPaletteIsEnabled@CxImage@@QAE_NXZ
?AlphaPaletteIsValid@CxImage@@QAE_NXZ
?AlphaPaletteSplit@CxImage@@QAE_NPAV1@@Z
?AlphaSet@CxImage@@QAEXE@Z
?AlphaSet@CxImage@@QAEXJJE@Z
?AlphaSet@CxImage@@QAE_NAAV1@@Z
?AlphaSetMax@CxImage@@QAEXE@Z
?AlphaSplit@CxImage@@QAE_NPAV1@@Z
?AlphaStrip@CxImage@@QAEXXZ
?Bitfield2RGB@CxImage@@IAEXPAEGGGE@Z
?BlendPalette@CxImage@@QAEXKJ@Z
?Clear@CxImage@@QAEXE@Z
?Close@CxIOFile@@UAE_NXZ
?Close@CxMemFile@@UAE_NXZ
?CompareColors@CxImage@@KAHPBX0@Z
?Copy@CxImage@@QAEXABV1@_N11@Z
?CopyInfo@CxImage@@IAEXABV1@@Z
?CopyToHandle@CxImage@@QAEPAXXZ
?Create@CxImage@@QAEPAXKKKK@Z
?CreateFromARGB@CxImage@@QAE_NKKPAE@Z
?CreateFromHANDLE@CxImage@@QAE_NPAX@Z
?CreateFromHBITMAP@CxImage@@QAEXPAUHBITMAP__@@@Z
?CreateFromHICON@CxImage@@QAEXPAUHICON__@@@Z
?Crop@CxImage@@QAE_NABUtagRECT@@PAV1@@Z
?Crop@CxImage@@QAE_NJJJJPAV1@@Z
?Decode@CxImage@@QAE_NPAEKK@Z
?Decode@CxImage@@QAE_NPAU_iobuf@@K@Z
?Decode@CxImage@@QAE_NPAVCxFile@@K@Z
?Decode@CxImageGIF@@QAE_NPAU_iobuf@@@Z
?Decode@CxImageGIF@@QAE_NPAVCxFile@@@Z
?Decode@CxImageJPG@@QAE_NPAU_iobuf@@@Z
?Decode@CxImageJPG@@QAE_NPAVCxFile@@@Z
?Decode@CxImagePNG@@QAE_NPAU_iobuf@@@Z
?Decode@CxImagePNG@@QAE_NPAVCxFile@@@Z
?DecodeExif@CxImageJPG@@QAE_NPAU_iobuf@@@Z
?DecodeExif@CxImageJPG@@QAE_NPAVCxFile@@@Z
?DecodeExtension@CxImageGIF@@IAE_NPAVCxFile@@@Z
?DecreaseBpp@CxImage@@QAE_NK_NPAUtagRGBQUAD@@@Z
?Destroy@CxImage@@QAEXXZ
?Dither@CxImage@@QAE_NJ@Z
?Draw2@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@@Z
?Draw2@CxImage@@QAEJPAUHDC__@@JJJJ@Z
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@@Z
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@@Z
?DrawTextA@CxImage@@QAEJPAUHDC__@@JJPBDUtagRGBQUAD@@1JJEE@Z
?Enable@CxImage@@QAEX_N@Z
?Encode@CxImage@@QAE_NAAPAEAAJK@Z
?Encode@CxImage@@QAE_NPAU_iobuf@@K@Z
?Encode@CxImage@@QAE_NPAU_iobuf@@PAPAV1@HK@Z
?Encode@CxImage@@QAE_NPAVCxFile@@K@Z
?Encode@CxImage@@QAE_NPAVCxFile@@PAPAV1@HK@Z
?Encode@CxImageGIF@@QAE_NPAU_iobuf@@@Z
?Encode@CxImageGIF@@QAE_NPAU_iobuf@@PAPAVCxImage@@H_N@Z
?Encode@CxImageGIF@@QAE_NPAVCxFile@@@Z
?Encode@CxImageGIF@@QAE_NPAVCxFile@@PAPAVCxImage@@H_N@Z
?Encode@CxImageJPG@@QAE_NPAU_iobuf@@@Z
?Encode@CxImageJPG@@QAE_NPAVCxFile@@@Z
?Encode@CxImagePNG@@QAE_NPAU_iobuf@@@Z
?Encode@CxImagePNG@@QAE_NPAVCxFile@@@Z
?EncodeBody@CxImageGIF@@IAEXPAVCxFile@@_N@Z
?EncodeComment@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeExtension@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeHeader@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeLoopExtension@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeRGB@CxImageGIF@@IAE_NPAVCxFile@@@Z
?EncodeSafeCheck@CxImage@@IAE_NPAVCxFile@@@Z
?Eof@CxIOFile@@UAE_NXZ
?Eof@CxMemFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Error@CxMemFile@@UAEJXZ
?Flip@CxImage@@QAE_NXZ
?Flush@CxIOFile@@UAE_NXZ
?Flush@CxMemFile@@UAE_NXZ
?Free@CxMemFile@@IAEXXZ
?GetBits@CxImage@@QAEPAEXZ
?GetBpp@CxImage@@QBEGXZ
?GetBuffer@CxMemFile@@QAEPAEXZ
?GetC@CxIOFile@@UAEJXZ
?GetC@CxMemFile@@UAEJXZ
?GetColorType@CxImage@@QAEEXZ
?GetComment@CxImageGIF@@QAEXPAD@Z
?GetDIB@CxImage@@QBEPAXXZ
?GetDisposalMethod@CxImageGIF@@QAEJXZ
?GetEffWidth@CxImage@@QBEKXZ
?GetEncodeOption@CxImage@@QBEKXZ
?GetEscape@CxImage@@QBEJXZ
?GetFlags@CxImage@@QBEKXZ
?GetFrame@CxImage@@QBEJXZ
?GetFrameDelay@CxImage@@QBEKXZ
?GetHeight@CxImage@@QBEKXZ
?GetJpegQuality@CxImage@@QBEEXZ
?GetLastError@CxImage@@QAEPADXZ
?GetLoops@CxImageGIF@@QAEJXZ
?GetNearestIndex@CxImage@@QAEEUtagRGBQUAD@@@Z
?GetNumColors@CxImage@@QBEKXZ
?GetNumFrames@CxImage@@QBEJXZ
?GetNumLayers@CxImage@@QBEJXZ
?GetOffset@CxImage@@QAEXPAJ0@Z
?GetPalette@CxImage@@QBEPAUtagRGBQUAD@@XZ
?GetPaletteColor@CxImage@@QAE?AUtagRGBQUAD@@E@Z
?GetPaletteColor@CxImage@@QAE_NEPAE00@Z
?GetPaletteSize@CxImage@@QAEKXZ
?GetParent@CxImage@@QBEPAV1@XZ
?GetPixelColor@CxImage@@QAE?AUtagRGBQUAD@@JJ_N@Z
?GetPixelGray@CxImage@@QAEEJJ@Z
?GetPixelIndex@CxImage@@QAEEJJ@Z
?GetProgress@CxImage@@QBEJXZ
?GetSize@CxImage@@QAEJXZ
?GetTransColor@CxImage@@QAE?AUtagRGBQUAD@@XZ
?GetTransIndex@CxImage@@QBEJXZ
?GetType@CxImage@@QBEKXZ
?GetVersion@CxImage@@QAEPBDXZ
?GetWidth@CxImage@@QBEKXZ
?GetXDPI@CxImage@@QBEJXZ
?GetYDPI@CxImage@@QBEJXZ
?Ghost@CxImage@@IAEXPAV1@@Z
?GifMix@CxImageGIF@@IAEXAAVCxImage@@AAUtag_image@1@@Z
?GifNextPixel@CxImageGIF@@IAEHXZ
?GrayScale@CxImage@@QAE_NXZ
?IncreaseBpp@CxImage@@QAE_NK@Z
?IsEnabled@CxImage@@QBE_NXZ
?IsGrayScale@CxImage@@QAE_NXZ
?IsIndexed@CxImage@@QAE_NXZ
?IsInside@CxImage@@QAE_NJJ@Z
?IsTransparent@CxImage@@QBE_NXZ
?IsValid@CxImage@@QBE_NXZ
?Load@CxImage@@QAE_NPBDK@Z
?Load@CxImage@@QAE_NPBGK@Z
?LoadResource@CxImage@@QAE_NPAUHRSRC__@@KPAUHINSTANCE__@@@Z
?MakeBitmap@CxImage@@QAEPAUHBITMAP__@@PAUHDC__@@@Z
?Mirror@CxImage@@QAE_NXZ
?Negative@CxImage@@QAE_NXZ
?Open@CxIOFile@@QAE_NPBD0@Z
?Open@CxMemFile@@QAE_NXZ
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?PutC@CxMemFile@@UAE_NE@Z
?Putword@CxImageGIF@@IAEXHPAVCxFile@@@Z
?RGBQUADtoRGB@CxImage@@QAEKUtagRGBQUAD@@@Z
?RGBtoBGR@CxImage@@IAEXPAEH@Z
?RGBtoRGBQUAD@CxImage@@QAE?AUtagRGBQUAD@@K@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Read@CxMemFile@@UAEIPAXII@Z
?Resample@CxImage@@QAE_NJJHPAV1@@Z
?Rotate180@CxImage@@QAE_NPAV1@@Z
?Rotate@CxImage@@QAE_NMPAV1@@Z
?RotateLeft@CxImage@@QAE_NPAV1@@Z
?RotateRight@CxImage@@QAE_NPAV1@@Z
?Save@CxImage@@QAE_NPBDK@Z
?Save@CxImage@@QAE_NPBGK@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Seek@CxMemFile@@UAE_NJH@Z
?SelectionAddColor@CxImage@@QAE_NUtagRGBQUAD@@@Z
?SelectionAddEllipse@CxImage@@QAE_NUtagRECT@@@Z
?SelectionAddPolygon@CxImage@@QAE_NPAUtagPOINT@@J@Z
?SelectionAddRect@CxImage@@QAE_NUtagRECT@@@Z
?SelectionClear@CxImage@@QAE_NXZ
?SelectionCopy@CxImage@@QAE_NAAV1@@Z
?SelectionCreate@CxImage@@QAE_NXZ
?SelectionDelete@CxImage@@QAE_NXZ
?SelectionGetBox@CxImage@@QAEXAAUtagRECT@@@Z
?SelectionInvert@CxImage@@QAE_NXZ
?SelectionIsInside@CxImage@@QAE_NJJ@Z
?SelectionIsValid@CxImage@@QAE_NXZ
?SelectionToHRGN@CxImage@@QAE_NAAPAUHRGN__@@@Z
?SetComment@CxImageGIF@@QAEXPBD@Z
?SetDisposalMethod@CxImageGIF@@QAEXH@Z
?SetEncodeOption@CxImage@@QAEXK@Z
?SetEscape@CxImage@@QAEXJ@Z
?SetFlags@CxImage@@QAEXK_N@Z
?SetFrame@CxImage@@QAEXJ@Z
?SetFrameDelay@CxImage@@QAEXK@Z
?SetGrayPalette@CxImage@@QAEXXZ
?SetJpegQuality@CxImage@@QAEXE@Z
?SetLoops@CxImageGIF@@QAEXH@Z
?SetOffset@CxImage@@QAEXJJ@Z
?SetPalette@CxImage@@QAEXKPAE00@Z
?SetPalette@CxImage@@QAEXPAUrgb_color@@K@Z
?SetPalette@CxImage@@QAEXPAUtagRGBQUAD@@K@Z
?SetPaletteColor@CxImage@@QAEXEEEEE@Z
?SetPaletteColor@CxImage@@QAEXEK@Z
?SetPaletteColor@CxImage@@QAEXEUtagRGBQUAD@@@Z
?SetPixelColor@CxImage@@QAEXJJK@Z
?SetPixelColor@CxImage@@QAEXJJUtagRGBQUAD@@_N@Z
?SetPixelIndex@CxImage@@QAEXJJE@Z
?SetProgress@CxImage@@QAEXJ@Z
?SetStdPalette@CxImage@@QAEXXZ
?SetTransColor@CxImage@@QAEXUtagRGBQUAD@@@Z
?SetTransIndex@CxImage@@QAEXJ@Z
?SetXDPI@CxImage@@QAEXJ@Z
?SetYDPI@CxImage@@QAEXJ@Z
?Size@CxIOFile@@UAEJXZ
?Size@CxMemFile@@UAEJXZ
?Skew@CxImage@@QAE_NMMJJ@Z
?Startup@CxImage@@IAEXK@Z
?Stretch@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@@Z
?Stretch@CxImage@@QAEJPAUHDC__@@JJJJ@Z
?SwapIndex@CxImage@@QAEXEE@Z
?Tell@CxIOFile@@UAEJXZ
?Tell@CxMemFile@@UAEJXZ
?Tile@CxImage@@QAEJPAUHDC__@@PAUtagRECT@@@Z
?Transfer@CxImage@@QAEXAAV1@@Z
?Write@CxIOFile@@UAEIPBXII@Z
?Write@CxMemFile@@UAEIPBXII@Z
?b3spline@CxImage@@IAEMM@Z
?char_out@CxImageGIF@@IAEXH@Z
?cl_hash@CxImageGIF@@IAEXJ@Z
?compressLZW@CxImageGIF@@IAEXHPAVCxFile@@@Z
?compressNONE@CxImageGIF@@IAEXHPAVCxFile@@@Z
?compressRLE@CxImageGIF@@IAEXHPAVCxFile@@@Z
?decoder@CxImageGIF@@IAEFPAVCxFile@@PAVCImageIterator@@FAAH@Z
?expand2to4bpp@CxImagePNG@@IAEXPAE@Z
?flush_char@CxImageGIF@@IAEXXZ
?get_byte@CxImageGIF@@IAEHPAVCxFile@@@Z
?get_next_code@CxImageGIF@@IAEFPAVCxFile@@@Z
?get_num_frames@CxImageGIF@@IAEHPAVCxFile@@PAUtag_TabCol@1@PAUtag_dscgif@1@@Z
?ima_png_error@CxImagePNG@@IAEXPAUpng_struct_def@@PAD@Z
?init_exp@CxImageGIF@@IAEFF@Z
?out_line@CxImageGIF@@IAEHPAVCImageIterator@@PAEH@Z
?output@CxImageGIF@@IAEXF@Z
?rle_block_flush@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_block_out@CxImageGIF@@IAEXEPAUtag_RLE@1@@Z
?rle_clear@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_compute_triangle_count@CxImageGIF@@IAEIII@Z
?rle_flush@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_flush_clearorrep@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_flush_fromclear@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_flush_withtable@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_isqrt@CxImageGIF@@IAEII@Z
?rle_output@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_output_flush@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_output_plain@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_reset_out_clear@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_write_block@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?seek_next_image@CxImageGIF@@IAEJPAVCxFile@@J@Z
?user_error_fn@CxImagePNG@@KAXPAUpng_struct_def@@PBD@Z
?user_flush_data@CxImagePNG@@KAXPAUpng_struct_def@@@Z
?user_read_data@CxImagePNG@@KAXPAUpng_struct_def@@PAEI@Z
?user_write_data@CxImagePNG@@KAXPAUpng_struct_def@@PAEI@Z
CameraSubArea
CameraWindow
CameraWindowLikeSpy
Sections
.text Size: 143KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MYSHARE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
bin/SnapShot.exe.exe windows:4 windows x86 arch:x86
Code Sign
10:22:0c:14:75:9d:d8:14:4c:51:5b:3f:d5:4a:55:bcCertificate
IssuerCN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=USNot Before22/08/2011, 00:00Not After20/10/2014, 23:59SubjectCN=xiamen chinasource internet service co.\,ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology development center,O=xiamen chinasource internet service co.\,ltd.,L=Xiamen,ST=Fujian,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
87:4a:32:1f:25:3e:a7:54:eb:d4:11:7a:ad:99:0f:54:c7:a6:ce:6dSigner
Actual PE Digest87:4a:32:1f:25:3e:a7:54:eb:d4:11:7a:ad:99:0f:54:c7:a6:ce:6dDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
bin/TGHistory.dll.dll regsvr32 windows:4 windows x86 arch:x86
4cfc4003dbe546235bf9847add8e3ece
Code Sign
10:22:0c:14:75:9d:d8:14:4c:51:5b:3f:d5:4a:55:bcCertificate
IssuerCN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=USNot Before22/08/2011, 00:00Not After20/10/2014, 23:59SubjectCN=xiamen chinasource internet service co.\,ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology development center,O=xiamen chinasource internet service co.\,ltd.,L=Xiamen,ST=Fujian,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
00:c3:62:e9:63:f4:76:93:6b:ca:25:32:44:e4:21:4d:d9:83:7c:f7Signer
Actual PE Digest00:c3:62:e9:63:f4:76:93:6b:ca:25:32:44:e4:21:4d:d9:83:7c:f7Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetFileTime
WritePrivateProfileStringW
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetCommandLineA
GetProcessHeap
HeapReAlloc
RtlUnwind
RaiseException
ExitProcess
HeapSize
SetStdHandle
GetFileType
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
Sleep
HeapDestroy
GetFileAttributesW
VirtualFree
VirtualAlloc
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GlobalFlags
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedIncrement
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
LocalAlloc
GetModuleHandleA
GetProfileIntW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
FreeLibrary
InterlockedDecrement
GetCurrentProcessId
GetModuleFileNameW
GlobalFree
FormatMessageW
LocalFree
lstrlenW
FindNextFileW
GlobalUnlock
GlobalLock
GlobalAlloc
FindClose
FindFirstFileW
GetCurrentThread
SetThreadPriority
CreateEventW
CreateThread
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetEvent
GetModuleHandleW
GetProcAddress
LoadLibraryW
GetLastError
SetLastError
MultiByteToWideChar
FileTimeToLocalFileTime
FileTimeToSystemTime
CloseHandle
MapViewOfFile
CreateFileMappingW
CreateFileW
ExpandEnvironmentStringsW
FindResourceW
LoadResource
LockResource
SizeofResource
HeapCreate
WideCharToMultiByte
user32
DrawTextExW
DrawTextW
TabbedTextOutW
GetDCEx
ShowWindow
MoveWindow
SetWindowTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
CheckMenuItem
DestroyMenu
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextW
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
SetForegroundWindow
IsWindowVisible
GetMenu
PostMessageW
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
UnhookWindowsHookEx
IsWindow
GetWindowThreadProcessId
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
GetMenuState
GetMenuItemID
GetSubMenu
GetWindowRect
GetFocus
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetSysColorBrush
UnregisterClassW
GetActiveWindow
ValidateRect
LoadCursorW
DispatchMessageW
PostQuitMessage
CharUpperW
EndPaint
BeginPaint
GrayStringW
TranslateMessage
GetMessageW
CopyRect
EnableMenuItem
LoadImageW
GetSysColor
UpdateWindow
DestroyIcon
OffsetRect
DrawIconEx
FillRect
SetRect
ReleaseDC
SetRectEmpty
GetDC
InflateRect
InvalidateRect
PtInRect
GetClientRect
EnableWindow
ClientToScreen
CreateCursor
SendMessageW
GetMenuItemCount
SetMenuDefaultItem
AppendMenuW
CreatePopupMenu
GetKeyState
ScreenToClient
GetCursorPos
ReleaseCapture
SetCursor
SetCapture
GetCursor
GetClassInfoW
UnregisterClassA
gdi32
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
SetViewportOrgEx
CreateSolidBrush
SetRectRgn
CombineRgn
MoveToEx
LineTo
SelectObject
Escape
TextOutW
RectVisible
PtVisible
CreateRectRgn
SelectClipRgn
CreateCompatibleDC
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreatePatternBrush
DeleteObject
CreatePen
CreateBitmap
ExtTextOutW
SetBkColor
SetTextColor
GetClipBox
PatBlt
CreateRectRgnIndirect
GetDeviceCaps
CreateCompatibleBitmap
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
advapi32
RegEnumKeyW
RegSetValueExW
RegQueryValueW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyW
RegCloseKey
RegQueryValueExW
shell32
ExtractIconExW
ShellExecuteExW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetMalloc
SHGetFileInfoW
SHGetSpecialFolderPathW
comctl32
ImageList_GetIconSize
shlwapi
UrlUnescapeW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
StrRetToStrW
PathFindFileNameW
ole32
CoInitialize
CoUninitialize
StringFromGUID2
oleaut32
VariantClear
VariantChangeType
VariantInit
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
wininet
DeleteUrlCacheEntryW
GetUrlCacheEntryInfoW
FindFirstUrlCacheEntryExW
FindNextUrlCacheEntryExW
FindCloseUrlCache
InternetCrackUrlW
InternetCanonicalizeUrlW
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TGHistoryCreate
TGHistoryCreateWnd
TGHistoryDelete
TGHistoryDllTest
TGHistoryGetMaxHits
TGHistoryKillThread
TGHistoryMoveWindow
TGHistoryPreTranslateMsg
TGHistorySearchKeywordChange
TGHistorySetAppName
TGHistorySetCallBack
TGHistorySetFillType
TGHistorySetIconDir
TGHistorySetLineColor
Sections
.text Size: 260KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/TGMail.dll.dll windows:5 windows x86 arch:x86
ebfcd97d25c02abbcd30845dd81787ad
Code Sign
10:22:0c:14:75:9d:d8:14:4c:51:5b:3f:d5:4a:55:bcCertificate
IssuerCN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=USNot Before22/08/2011, 00:00Not After20/10/2014, 23:59SubjectCN=xiamen chinasource internet service co.\,ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology development center,O=xiamen chinasource internet service co.\,ltd.,L=Xiamen,ST=Fujian,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
4c:20:66:1c:6a:6a:96:30:a3:b2:26:97:f1:6e:b4:07:74:4b:a0:53Signer
Actual PE Digest4c:20:66:1c:6a:6a:96:30:a3:b2:26:97:f1:6e:b4:07:74:4b:a0:53Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualProtect
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
ole32
CoCreateInstance
msvcr90
__clean_type_info_names_internal
_unlock
_crt_debugger_hook
_lock
_onexit
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
__dllonexit
Exports
Exports
SetMail
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 366B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/TGNetWork.dll.dll windows:4 windows x86 arch:x86
40095c1612fe96c686d5db66d20cf510
Code Sign
10:22:0c:14:75:9d:d8:14:4c:51:5b:3f:d5:4a:55:bcCertificate
IssuerCN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=USNot Before22/08/2011, 00:00Not After20/10/2014, 23:59SubjectCN=xiamen chinasource internet service co.\,ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology development center,O=xiamen chinasource internet service co.\,ltd.,L=Xiamen,ST=Fujian,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
9c:ca:c3:82:c6:a6:56:50:e5:3e:c0:73:9c:b0:bc:85:37:9d:d9:cdSigner
Actual PE Digest9c:ca:c3:82:c6:a6:56:50:e5:3e:c0:73:9c:b0:bc:85:37:9d:d9:cdDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DeleteCriticalSection
TlsFree
SetErrorMode
GlobalFlags
InterlockedIncrement
GetFileAttributesW
WritePrivateProfileStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetSystemTimeAsFileTime
HeapFree
GetCommandLineA
GetProcessHeap
RtlUnwind
RaiseException
HeapReAlloc
VirtualAlloc
HeapSize
VirtualFree
HeapDestroy
HeapCreate
LocalReAlloc
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
SetStdHandle
GetCurrentDirectoryA
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetThreadLocale
DeleteFileW
MoveFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
GlobalFree
FormatMessageW
LocalFree
MulDiv
GetModuleHandleA
GetProfileIntW
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
FreeLibrary
InterlockedDecrement
GetModuleFileNameW
lstrlenW
ExitProcess
GetTickCount
GetPrivateProfileStringA
GetSystemWindowsDirectoryA
CreateDirectoryA
GetLongPathNameW
WaitForSingleObject
GetModuleFileNameA
GetVersionExW
CreateThread
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileTime
Sleep
SetFileTime
WriteFile
ExitThread
SetThreadPriority
WinExec
ResumeThread
SuspendThread
CloseHandle
FindClose
CreateFileW
WideCharToMultiByte
FindFirstFileW
GetFileSize
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentThreadId
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
GetModuleHandleW
GetProcAddress
LoadLibraryW
GetLastError
GetStdHandle
SetLastError
user32
GetSysColorBrush
GetMessageW
LoadCursorW
GetDCEx
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
DestroyMenu
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetLastActivePopup
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
UnregisterClassW
PeekMessageW
MapWindowPoints
TrackPopupMenu
IsWindowVisible
GetMenu
GetSubMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetParent
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
UnhookWindowsHookEx
CopyRect
IsWindow
GetAsyncKeyState
GetActiveWindow
SetWindowPos
FindWindowW
MessageBoxA
LoadIconW
MessageBoxW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
KillTimer
SetActiveWindow
GetDlgItemTextA
PostMessageW
TranslateMessage
ValidateRect
PostQuitMessage
CharUpperW
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
EndPaint
SetForegroundWindow
AttachThreadInput
BeginPaint
GrayStringW
DrawTextExW
DrawTextW
GetMessagePos
TabbedTextOutW
GetWindowThreadProcessId
GetForegroundWindow
SetTimer
SetWindowLongW
GetWindowRect
GetSysColor
UpdateWindow
DestroyIcon
OffsetRect
DrawIconEx
FillRect
SetRect
ReleaseDC
SetRectEmpty
GetDC
InflateRect
InvalidateRect
PtInRect
GetClientRect
EnableWindow
ClientToScreen
CreateCursor
SendMessageW
GetMenuItemCount
SetMenuDefaultItem
AppendMenuW
CreatePopupMenu
GetKeyState
ScreenToClient
GetCursorPos
ReleaseCapture
SetCursor
SetCapture
GetCursor
GetMenuItemID
UnregisterClassA
gdi32
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
GetDeviceCaps
CreateSolidBrush
SetRectRgn
CombineRgn
SelectClipRgn
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
CreateCompatibleDC
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreatePatternBrush
DeleteObject
CreatePen
CreateBitmap
ExtTextOutW
GetObjectW
SetBkColor
SetTextColor
GetClipBox
PatBlt
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateRectRgn
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegEnumKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
GetUserNameA
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
DragAcceptFiles
DragQueryFileA
DragQueryFileW
ShellExecuteA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteW
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathIsDirectoryA
PathFindFileNameW
ole32
CoUninitialize
CoInitialize
oleaut32
VariantClear
VariantChangeType
VariantInit
ws2_32
recvfrom
sendto
WSACleanup
ioctlsocket
inet_ntoa
gethostbyname
gethostname
accept
__WSAFDIsSet
select
recv
htonl
WSAStartup
socket
htons
bind
listen
closesocket
WSAAsyncSelect
setsockopt
inet_addr
connect
send
netapi32
NetApiBufferFree
NetWkstaGetInfo
Exports
Exports
TGNetWordDllSetMainHWND
TGNetWorkDllAddFileToUserWnd
TGNetWorkDllAdvanceSend
TGNetWorkDllCreateTaskTreeWnd
TGNetWorkDllCreateUserTreeWnd
TGNetWorkDllDeleteTask
TGNetWorkDllDeleteTaskTreeWnd
TGNetWorkDllDeleteUserTreeWnd
TGNetWorkDllGetIpPort
TGNetWorkDllGetPtr
TGNetWorkDllGetTransRate
TGNetWorkDllIsTaskFinish
TGNetWorkDllMoveTaskWindow
TGNetWorkDllMoveUserWindow
TGNetWorkDllMoveWindow
TGNetWorkDllNewTaskTreeWnd
TGNetWorkDllNewUserTreeWnd
TGNetWorkDllRefreshUser
TGNetWorkDllSearchUser
TGNetWorkDllSendExitMessage
TGNetWorkDllSetLogFile
TGNetWorkDllSetSoftName
TGNetWorkDllShowLog
TGNetWorkDllShowSendDlg
TGNetWorkDllStopTask
TGNetWorkDllTest
Sections
.text Size: 288KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/TGRes.dll.dll .js windows:4 windows x86 arch:x86 polyglot
7c89263619d2d7957f0c8ac998f4d14c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcr80
_lock
__dllonexit
_except_handler4_common
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
free
_encoded_null
_malloc_crt
_onexit
_encode_pointer
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 572B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
custom.ini
-
initsearcheng.txt
-
inittgfilter.txt
-
inittoolbarurls.txt
-
initwebguide.txt
-
plugin.txt