kah-spam-macros.zip
- SHA256 9f6d35510d70fc5e64c4447f410521fc39ef140a2c89264bb0e24f20526cf2cc
Overview
overview
3Static
static
3kah-spam-m...in.bat
windows7-x64
1kah-spam-m...in.bat
windows10-2004-x64
1kah-spam-m...02.exe
windows7-x64
1kah-spam-m...02.exe
windows10-2004-x64
1kah-spam-m...er.bat
windows7-x64
1kah-spam-m...er.bat
windows10-2004-x64
1kah-spam-m...IT.exe
windows7-x64
1kah-spam-m...IT.exe
windows10-2004-x64
1kah-spam-m...v1.exe
windows7-x64
1kah-spam-m...v1.exe
windows10-2004-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kah-spam-macros/K.A.S (Original)/KAS Enhance main.bat
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
kah-spam-macros/K.A.S (Original)/KAS Enhance main.bat
Resource
win10v2004-20231222-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
kah-spam-macros/K.A.S (Original)/Kohls_Admin_Spammer_v2.02.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
kah-spam-macros/K.A.S (Original)/Kohls_Admin_Spammer_v2.02.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
kah-spam-macros/K.A.S (Original)/waitadder.bat
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
kah-spam-macros/K.A.S (Original)/waitadder.bat
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
kah-spam-macros/Synthex/Edit/SYNTHEX EDIT.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
kah-spam-macros/Synthex/Edit/SYNTHEX EDIT.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
kah-spam-macros/Synthex/Original/Synthex v1.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
kah-spam-macros/Synthex/Original/Synthex v1.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target kah-spam-macros.zip
- Size 1.6MB
- Sample240202-yevzjsgbel
- SHA256 9f6d35510d70fc5e64c4447f410521fc39ef140a2c89264bb0e24f20526cf2cc
- MD5 cd358e0cc5860c1897e3c7c0487871fc
- SHA1 9da2c4a8b4479eacd7902d753bfad4fff642268a
- SHA512 6a60accdae9e3f38787e0ab30017a225f3cfa4397c72b3803b920dae9ceeb421284cbaa27079159e44ffd2a524a77ca7ba394ec49956f1fc2598bd648a9dcd2f
- SSDEEP 24576:JLxlzqatjXEZU00DG9qksUbFgOQKjMjV7PjXu3QQ82OrA+w5RBxMptKEWaa:JdlhTFDG0CFP3sb+3K2Or1wLBxwex
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/kah-spam-macros/K.A.S (Original)/Kohls_Admin_Spammer_v2.02.exe unpack001/kah-spam-macros/Synthex/Edit/SYNTHEX EDIT.exe unpack001/kah-spam-macros/Synthex/Original/Synthex v1.exe
File Explorer
-
kah-spam-macros.zip.zip 1.6MB
-
kah-spam-macros/K.A.S (Original)/KAS Enhance main.bat705B
-
kah-spam-macros/K.A.S (Original)/Kohls_Admin_Spammer_v2.02.ahk.decompiled5KB
-
kah-spam-macros/K.A.S (Original)/Kohls_Admin_Spammer_v2.02.exe.exe 1.2MB
-
kah-spam-macros/K.A.S (Original)/waitadder.bat367B
-
kah-spam-macros/Synthex/Edit/SYNTHEX EDIT.exe.exe 1.3MB
-
kah-spam-macros/Synthex/Edit/Source.ahk13KB
-
kah-spam-macros/Synthex/Original/Images/OFFICIALSYNTHEX.ico30KB
-
kah-spam-macros/Synthex/Original/Images/Officialsynthexlogognp.scr.png 30KB
-
kah-spam-macros/Synthex/Original/ReadME.md1KB
-
kah-spam-macros/Synthex/Original/Synthex v1.ahk11KB
-
kah-spam-macros/Synthex/Original/Synthex v1.exe.exe 729KB
kah-spam-macros/K.A.S (Original)/KAS Enhance main.bat
- SHA256 a780cd969d897b7e5fecc38d5fcdc500ca9d4f195bc9ddec34e46c9fc1421ab0
- MD5 ccda0a6de93923aff9ca02cfb210deb9
- SHA1 08bf145b6d5dd1306f9ee39d9f62bea4d901c870
- SHA512 32e9388e1ffc9dcd93d91d017841868a70ff632bc6e13e32fe020c9d2914962ea3a8516bf27707686264a09cab7628159d26734732af8b54de6c605c24fad08d
- MD5 SHA1 SHA512
kah-spam-macros/K.A.S (Original)/Kohls_Admin_Spammer_v2.02.ahk.decompiled
- SHA256 a936662bbb3aea17d387a058451b23f5f1bed0f724a07cdacebdf6295757f534
- MD5 da66670113bc9ce9d2ec585d818da800
- SHA1 e71e89812ee8abc3186ab41870d8ae1dcdee1986
- SHA512 2128917ceda76a7753b11fe4b73a46fe913ac7f7f11f42c67c74dba0a75b2216a3f51fe90ccac3a6bfbb0d5b554b820a00a05580fbc951d1bce99911b38e780a
- SSDEEP 96:apOa51mHlT0XgzmkOzWvLsKCdDCgGn2o90TFiqxnNTH5OLJ0AOVkg6TH:0Oa51mHlT0wzs4sKaPGn2ocX1gL6AOV0
- MD5 SHA1 SHA512 SSDEEP
kah-spam-macros/K.A.S (Original)/Kohls_Admin_Spammer_v2.02.exe
- IMPHASH 2004a5f6f543f8c26e144c1ceb66f943
- SHA256 afd7658574f9d4e352353d43e0da07382771b6ec2858c1514f642139b06cebac
- MD5 228f30b9b7a183d1cbc28578d4b6adbf
- SHA1 1530c8f0641216943ae80caf209bd353a85d92fb
- SHA512 1feac69bd3a110aabdfa720b30f54a06e38729ea5770ced05c9738875b6664d42b3f3350a6ae5c2f2485b579d370ef2912f01b3110b6bf832d3e433f8e591c41
- SSDEEP 24576:CD7Xr5my0DPP23Iy5YAmRW6B8If0s83I4eqowSwa1X9tqY7JxiqQ+:CD7Xroy0DPP23Iy5YAmw6B8If0F3IwoH
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
836896
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
wsock32
gethostbyname
inet_addr
WSACleanup
gethostname
WSAStartup
winmm
mixerGetLineInfoW
mixerGetDevCapsW
mixerOpen
mciSendStringW
joyGetPosEx
mixerGetLineControlsW
mixerGetControlDetailsW
mixerSetControlDetails
waveOutGetVolume
mixerClose
waveOutSetVolume
joyGetDevCapsW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
comctl32
ImageList_Create
CreateStatusWindowW
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Destroy
ImageList_AddMasked
psapi
GetProcessImageFileNameW
GetModuleBaseNameW
GetModuleFileNameExW
wininet
InternetOpenW
InternetOpenUrlW
InternetCloseHandle
InternetReadFileExA
InternetReadFile
kernel32
GetModuleFileNameW
GetSystemTimeAsFileTime
FindResourceW
SizeofResource
LoadResource
LockResource
GetFullPathNameW
GetShortPathNameW
FindFirstFileW
FindNextFileW
FindClose
FileTimeToLocalFileTime
SetEnvironmentVariableW
Beep
MoveFileW
OutputDebugStringW
CreateProcessW
GetFileAttributesW
WideCharToMultiByte
MultiByteToWideChar
GetExitCodeProcess
WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
OpenProcess
TerminateProcess
SetPriorityClass
SetLastError
GetEnvironmentVariableW
GetLocalTime
GetDateFormatW
GetTimeFormatW
GetDiskFreeSpaceExW
SetVolumeLabelW
CreateFileW
DeviceIoControl
GetDriveTypeW
GetVolumeInformationW
GetDiskFreeSpaceW
GetCurrentDirectoryW
CreateDirectoryW
ReadFile
WriteFile
DeleteFileW
SetFileAttributesW
LocalFileTimeToFileTime
SetFileTime
DeleteCriticalSection
GetSystemTime
GetSystemDefaultUILanguage
GetComputerNameW
GetSystemWindowsDirectoryW
GetTempPathW
EnterCriticalSection
LeaveCriticalSection
VirtualProtect
QueryDosDeviceW
CompareStringW
RemoveDirectoryW
CopyFileW
GetCurrentProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
FormatMessageW
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
WritePrivateProfileSectionW
SetEndOfFile
GetACP
GetFileType
GetStdHandle
SetFilePointerEx
SystemTimeToFileTime
FileTimeToSystemTime
GetFileSize
IsWow64Process
VirtualAllocEx
VirtualFreeEx
EnumResourceNamesW
LoadLibraryExW
GlobalSize
HeapReAlloc
EncodePointer
HeapFree
DecodePointer
ExitProcess
HeapAlloc
IsValidCodePage
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
GetCPInfo
GetVersionExW
GetModuleHandleW
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
CreateMutexW
CloseHandle
GetExitCodeThread
SetThreadPriority
CreateThread
GetStringTypeExW
lstrcmpiW
GetCurrentThreadId
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
SetErrorMode
InitializeCriticalSection
SetCurrentDirectoryW
Sleep
GetTickCount
MulDiv
RtlCaptureContext
HeapSetInformation
GetVersion
HeapCreate
InitializeCriticalSectionAndSpinCount
HeapSize
HeapQueryInformation
GetCommandLineW
GetStartupInfoW
RtlUnwindEx
SetHandleCount
GetStringTypeW
RaiseException
RtlPcToFileHeader
LCMapStringW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetOEMCP
SetFilePointer
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetFileSizeEx
GetProcessHeap
user32
MessageBeep
ClientToScreen
GetCursorInfo
GetLastInputInfo
GetSystemMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuStringW
ExitWindowsEx
SetMenu
FlashWindow
GetPropW
SetPropW
RemovePropW
MapWindowPoints
RedrawWindow
SetWindowLongPtrW
SetParent
GetClassInfoExW
DefDlgProcW
GetAncestor
UpdateWindow
GetMessagePos
GetClassLongPtrW
CallWindowProcW
CheckRadioButton
IntersectRect
GetUpdateRect
PtInRect
CreateDialogIndirectParamW
GetWindowLongPtrW
CreateAcceleratorTableW
DestroyAcceleratorTable
InsertMenuItemW
SetMenuDefaultItem
RemoveMenu
SetMenuItemInfoW
IsMenu
GetMenuItemInfoW
CreateMenu
CreatePopupMenu
SetMenuInfo
AppendMenuW
DestroyMenu
TrackPopupMenuEx
GetDesktopWindow
CopyImage
CreateIconIndirect
CreateIconFromResourceEx
EnumClipboardFormats
GetWindow
BringWindowToTop
MessageBoxW
GetTopWindow
GetQueueStatus
SetDlgItemTextW
LoadAcceleratorsW
EnableMenuItem
GetMenu
CreateWindowExW
RegisterClassExW
LoadCursorW
DestroyIcon
IsCharAlphaW
IsZoomed
VkKeyScanExW
MapVirtualKeyExW
GetKeyboardLayoutNameW
ActivateKeyboardLayout
GetGUIThreadInfo
GetWindowTextW
mouse_event
WindowFromPoint
GetSystemMetrics
keybd_event
SetKeyboardState
GetKeyboardState
GetCursorPos
GetAsyncKeyState
AttachThreadInput
SendInput
UnregisterHotKey
RegisterHotKey
PostQuitMessage
SendMessageTimeoutW
UnhookWindowsHookEx
SetWindowsHookExW
PostThreadMessageW
IsCharAlphaNumericW
IsCharUpperW
IsCharLowerW
ToUnicodeEx
GetKeyboardLayout
CallNextHookEx
CharLowerW
ReleaseDC
GetDC
OpenClipboard
GetClipboardData
GetClipboardFormatNameW
CloseClipboard
SetClipboardData
EmptyClipboard
PostMessageW
FindWindowW
EndDialog
IsWindow
DispatchMessageW
TranslateMessage
ShowWindow
CountClipboardFormats
SetWindowLongW
ScreenToClient
IsDialogMessageW
GetDlgItem
SendDlgItemMessageW
DialogBoxParamW
SetForegroundWindow
DefWindowProcW
FillRect
DrawIconEx
GetSysColorBrush
GetSysColor
RegisterWindowMessageW
GetMonitorInfoW
EnumDisplayMonitors
SetClipboardViewer
IsIconic
SendMessageW
IsWindowEnabled
GetWindowLongW
GetKeyState
TranslateAcceleratorW
KillTimer
PeekMessageW
GetFocus
GetClassNameW
GetWindowThreadProcessId
GetForegroundWindow
EnumWindows
GetWindowTextLengthW
EnableWindow
InvalidateRect
SetLayeredWindowAttributes
SetWindowPos
SetWindowRgn
SetFocus
SetActiveWindow
EnumChildWindows
MoveWindow
GetWindowRect
GetClientRect
SystemParametersInfoW
AdjustWindowRectEx
DrawTextW
SetRect
GetIconInfo
SetWindowTextW
IsWindowVisible
BlockInput
GetMessageW
SetTimer
GetParent
GetDlgCtrlID
CharUpperW
IsClipboardFormatAvailable
CheckMenuItem
LoadImageW
MapVirtualKeyW
ChangeClipboardChain
DestroyWindow
gdi32
GetPixel
GetClipRgn
GetCharABCWidthsW
SetBkMode
CreatePatternBrush
SetBrushOrgEx
EnumFontFamiliesExW
CreateDIBSection
GdiFlush
SetBkColor
ExcludeClipRect
SetTextColor
GetClipBox
BitBlt
CreateCompatibleBitmap
GetSystemPaletteEntries
GetDIBits
CreateCompatibleDC
CreatePolygonRgn
CreateRectRgn
CreateRoundRectRgn
CreateEllipticRgn
DeleteDC
GetObjectW
GetTextMetricsW
GetTextFaceW
SelectObject
GetStockObject
CreateDCW
CreateSolidBrush
CreateFontW
FillRgn
GetDeviceCaps
DeleteObject
comdlg32
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerW
GetUserNameW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
RegConnectRegistryW
RegDeleteValueW
shell32
DragQueryPoint
SHEmptyRecycleBinW
SHFileOperationW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SHGetMalloc
SHGetFolderPathW
ShellExecuteExW
Shell_NotifyIconW
DragFinish
DragQueryFileW
ExtractIconW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
CoInitialize
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetObject
StringFromGUID2
CreateStreamOnHGlobal
oleaut32
SafeArrayGetLBound
GetActiveObject
SysStringLen
OleLoadPicture
SafeArrayUnaccessData
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnlock
SafeArrayPtrOfIndex
SafeArrayLock
SafeArrayGetDim
SafeArrayDestroy
SafeArrayGetUBound
VariantCopyInd
SafeArrayCopy
SysAllocString
VariantChangeType
VariantClear
SafeArrayCreate
SysFreeString
Name
.text
Size
883KB
Virtual Size
882KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
196KB
Virtual Size
195KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
Name
data
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
55KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=53, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=144, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=6, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=467, id=1, productName=Unmarked objects,
count=23, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=43, id=175, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
kah-spam-macros/K.A.S (Original)/waitadder.bat
- SHA256 cfd687ec6add18bdf68449b4977d0eead470d68a3ef0d5b03c48c6603a978ba8
- MD5 9aee429c01585b47e2acfb0024bd6e98
- SHA1 42910f1ef63cf623c476f933a5b610488c79ebc5
- SHA512 258cf1eca76881bf71564ec30cb2d0b09563ca37db0cc77bb6d753d51820e75d0637ee55793ca784030adc9bb23311a9558cb3e9af7e0b6c28ed9d2bb4ba8160
- MD5 SHA1 SHA512
kah-spam-macros/Synthex/Edit/SYNTHEX EDIT.exe
- IMPHASH b66b962f1654841b6655c9e59651771a
- SHA256 eaffbe45c9c575651b0f916322d2f8d23250e66097cfb5711656c35a0712831d
- MD5 fc282b69fdbbe728d3f431a31a4e2320
- SHA1 6c5015fae469c5cfa8cfd44fdd4b80d3c4ea6fb0
- SHA512 270427b00130a4ac8215f075b1c529e4e689a5999efef52544296a3f0b6113248dd72d2760d3dd3c603c30c1785899662fb33f8cef5ce130394af0de3ecdc098
- SSDEEP 24576:OvjFRcSK1e3DsWIG2pf8lEaPk2uERNo5MIkuJvj8lQnYCt4F1QS3C3SR2qyzG:OvjTfK1e3DsWI90ltPk2uERNo5R3J4l0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
840080
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
wsock32
gethostbyname
inet_addr
WSACleanup
gethostname
WSAStartup
winmm
mixerGetLineInfoW
mixerGetDevCapsW
mixerOpen
mciSendStringW
joyGetPosEx
mixerGetLineControlsW
mixerGetControlDetailsW
mixerSetControlDetails
waveOutGetVolume
mixerClose
waveOutSetVolume
joyGetDevCapsW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
comctl32
ImageList_Create
CreateStatusWindowW
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Destroy
ImageList_AddMasked
psapi
GetProcessImageFileNameW
GetModuleBaseNameW
GetModuleFileNameExW
wininet
InternetOpenW
InternetOpenUrlW
InternetCloseHandle
InternetReadFileExA
InternetReadFile
kernel32
GetModuleFileNameW
GetSystemTimeAsFileTime
FindResourceW
SizeofResource
LoadResource
LockResource
GetFullPathNameW
GetShortPathNameW
FindFirstFileW
FindNextFileW
FindClose
FileTimeToLocalFileTime
SetEnvironmentVariableW
Beep
MoveFileW
OutputDebugStringW
CreateProcessW
GetFileAttributesW
WideCharToMultiByte
MultiByteToWideChar
GetExitCodeProcess
WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
OpenProcess
TerminateProcess
SetPriorityClass
SetLastError
GetEnvironmentVariableW
GetLocalTime
GetDateFormatW
GetTimeFormatW
GetDiskFreeSpaceExW
SetVolumeLabelW
CreateFileW
DeviceIoControl
GetDriveTypeW
GetVolumeInformationW
GetDiskFreeSpaceW
GetCurrentDirectoryW
CreateDirectoryW
ReadFile
WriteFile
DeleteFileW
SetFileAttributesW
LocalFileTimeToFileTime
SetFileTime
DeleteCriticalSection
GetSystemTime
GetSystemDefaultUILanguage
GetComputerNameW
GetSystemWindowsDirectoryW
GetTempPathW
EnterCriticalSection
LeaveCriticalSection
VirtualProtect
QueryDosDeviceW
CompareStringW
RemoveDirectoryW
CopyFileW
GetCurrentProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
FormatMessageW
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
WritePrivateProfileSectionW
SetEndOfFile
GetACP
GetFileType
GetStdHandle
SetFilePointerEx
SystemTimeToFileTime
FileTimeToSystemTime
GetFileSize
IsWow64Process
VirtualAllocEx
VirtualFreeEx
EnumResourceNamesW
LoadLibraryExW
GlobalSize
HeapReAlloc
EncodePointer
HeapFree
DecodePointer
ExitProcess
HeapAlloc
IsValidCodePage
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
GetCPInfo
GetVersionExW
GetModuleHandleW
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
CreateMutexW
CloseHandle
GetExitCodeThread
SetThreadPriority
CreateThread
GetStringTypeExW
lstrcmpiW
GetCurrentThreadId
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
SetErrorMode
InitializeCriticalSection
SetCurrentDirectoryW
Sleep
GetTickCount
MulDiv
RtlCaptureContext
HeapSetInformation
GetVersion
HeapCreate
InitializeCriticalSectionAndSpinCount
HeapSize
HeapQueryInformation
GetCommandLineW
GetStartupInfoW
RtlUnwindEx
SetHandleCount
GetStringTypeW
RaiseException
RtlPcToFileHeader
LCMapStringW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetOEMCP
FlushFileBuffers
SetFilePointer
WriteConsoleW
SetStdHandle
GetFileSizeEx
GetProcessHeap
user32
GetDlgItem
SetDlgItemTextW
MessageBeep
GetCursorInfo
GetLastInputInfo
GetSystemMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuStringW
ExitWindowsEx
SetMenu
FlashWindow
GetPropW
SetPropW
RemovePropW
MapWindowPoints
RedrawWindow
SetWindowLongPtrW
SetParent
GetClassInfoExW
DefDlgProcW
GetAncestor
UpdateWindow
GetMessagePos
GetClassLongPtrW
CallWindowProcW
CheckRadioButton
IntersectRect
GetUpdateRect
PtInRect
CreateDialogIndirectParamW
GetWindowLongPtrW
CreateAcceleratorTableW
DestroyAcceleratorTable
InsertMenuItemW
SetMenuDefaultItem
RemoveMenu
SetMenuItemInfoW
IsMenu
GetMenuItemInfoW
CreateMenu
CreatePopupMenu
SetMenuInfo
AppendMenuW
DestroyMenu
TrackPopupMenuEx
CopyImage
CreateIconIndirect
CreateIconFromResourceEx
EnumClipboardFormats
GetWindow
BringWindowToTop
MessageBoxW
GetTopWindow
GetQueueStatus
SendDlgItemMessageW
LoadAcceleratorsW
EnableMenuItem
GetMenu
CreateWindowExW
RegisterClassExW
LoadCursorW
DestroyIcon
IsCharAlphaW
EnableWindow
VkKeyScanExW
MapVirtualKeyExW
GetKeyboardLayoutNameW
ActivateKeyboardLayout
GetGUIThreadInfo
GetWindowTextW
mouse_event
WindowFromPoint
GetSystemMetrics
keybd_event
SetKeyboardState
GetKeyboardState
GetCursorPos
GetAsyncKeyState
AttachThreadInput
SendInput
UnregisterHotKey
RegisterHotKey
PostQuitMessage
SendMessageTimeoutW
UnhookWindowsHookEx
SetWindowsHookExW
PostThreadMessageW
IsCharAlphaNumericW
IsCharUpperW
IsCharLowerW
ToUnicodeEx
GetKeyboardLayout
CallNextHookEx
CharLowerW
ReleaseDC
GetDC
OpenClipboard
GetClipboardData
GetClipboardFormatNameW
CloseClipboard
SetClipboardData
EmptyClipboard
PostMessageW
FindWindowW
EndDialog
IsWindow
DispatchMessageW
TranslateMessage
ShowWindow
CountClipboardFormats
SetWindowLongW
ScreenToClient
IsDialogMessageW
DialogBoxParamW
SetForegroundWindow
DefWindowProcW
FillRect
DrawIconEx
GetSysColorBrush
GetSysColor
RegisterWindowMessageW
EnumDisplayMonitors
IsIconic
IsZoomed
EnumWindows
SetClipboardViewer
GetWindowTextLengthW
SendMessageW
IsWindowEnabled
GetWindowLongW
GetKeyState
TranslateAcceleratorW
KillTimer
PeekMessageW
GetFocus
GetClassNameW
GetWindowThreadProcessId
GetForegroundWindow
InvalidateRect
SetLayeredWindowAttributes
SetWindowPos
SetWindowRgn
SetFocus
SetActiveWindow
ClientToScreen
EnumChildWindows
MoveWindow
GetWindowRect
GetMonitorInfoW
MonitorFromPoint
GetClientRect
SystemParametersInfoW
AdjustWindowRectEx
DrawTextW
SetRect
GetIconInfo
SetWindowTextW
IsWindowVisible
BlockInput
GetMessageW
SetTimer
GetParent
GetDlgCtrlID
CharUpperW
IsClipboardFormatAvailable
CheckMenuItem
LoadImageW
MapVirtualKeyW
ChangeClipboardChain
DestroyWindow
gdi32
GetPixel
GetClipRgn
GetCharABCWidthsW
SetBkMode
CreatePatternBrush
SetBrushOrgEx
EnumFontFamiliesExW
CreateDIBSection
GdiFlush
SetBkColor
ExcludeClipRect
SetTextColor
GetClipBox
BitBlt
CreateCompatibleBitmap
GetSystemPaletteEntries
GetDIBits
CreateCompatibleDC
CreatePolygonRgn
CreateRectRgn
CreateRoundRectRgn
CreateEllipticRgn
DeleteDC
GetObjectW
GetTextMetricsW
GetTextFaceW
SelectObject
GetStockObject
CreateDCW
CreateSolidBrush
CreateFontW
FillRgn
GetDeviceCaps
DeleteObject
comdlg32
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerW
GetUserNameW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
RegConnectRegistryW
RegDeleteValueW
shell32
DragQueryPoint
SHEmptyRecycleBinW
SHFileOperationW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SHGetMalloc
SHGetFolderPathW
ShellExecuteExW
Shell_NotifyIconW
DragFinish
DragQueryFileW
ExtractIconW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
CoInitialize
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetObject
StringFromGUID2
CreateStreamOnHGlobal
oleaut32
SafeArrayGetLBound
GetActiveObject
SysStringLen
OleLoadPicture
SafeArrayUnaccessData
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnlock
SafeArrayPtrOfIndex
SafeArrayLock
SafeArrayGetDim
SafeArrayDestroy
SafeArrayGetUBound
VariantCopyInd
SafeArrayCopy
SysAllocString
VariantChangeType
VariantClear
SafeArrayCreate
SysFreeString
Name
.text
Size
886KB
Virtual Size
886KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
196KB
Virtual Size
195KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
Name
data
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
146KB
Virtual Size
146KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=53, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=144, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=6, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=467, id=1, productName=Unmarked objects,
count=23, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=43, id=175, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
kah-spam-macros/Synthex/Edit/Source.ahk
- SHA256 ae6a8e3c96a379310269b02a94e8a22f916a7a393d1657d786497bf439552f09
- MD5 770bca730a05a3058360e43d1b01c48f
- SHA1 746c0f8db8a9c70acd81ab314989645abad3784b
- SHA512 81403fc1f4a5f78ace44c044e7741d803d082712c85d65a50239a4b19b2d7017a7b804e838a3982b7cb74b85b290c595b927c9c5afdbfa71bbb4363db8435652
- SSDEEP 192:VnQWnIlM7sgHgmdutUol87ox11gVnwidKuST5VaI4s3bco+0NMZwpL1DNADdigii:c0dIVaIsorNMZwpL1DNADatM/
- MD5 SHA1 SHA512 SSDEEP
kah-spam-macros/Synthex/Original/Images/OFFICIALSYNTHEX.ico
- SHA256 d3094c293378b5cb04b44e251a436722005088b4045a4be4b169556a5ca9787b
- MD5 1c240dedf5c156ff0556c65172e4ae1a
- SHA1 55cfd1aac7bdd45ef9b68d8e76cf4a751fafa3d2
- SHA512 82abff2780df88818ee707d43211262c2ece81f288d2d7d335282a52eb6d76081bdc297068a4aa703eaf132688b58f0866f0277e0cc9a29551cb9d82851eaac6
- SSDEEP 768:FU9LcKowSyNv3X/D8EH+R2jqhHiD0yNXX2:Fybo/yN/IEeWqhHsvNXX2
- MD5 SHA1 SHA512 SSDEEP
kah-spam-macros/Synthex/Original/Images/Officialsynthexlogognp.scr
- SHA256 d69ca466ea314cd396eaefe600b625e91edb533fbc049ebfcabf6a4f5f72be38
- MD5 6ff77e2520652a297b7960aa269a0641
- SHA1 92daeb4a3b21c64db5055e24715c81e789e03127
- SHA512 ec862945ca1e0bc527eb2998c94f42269e62d24bb7e5246a527e79d95f44e011d622458ba19276a8ff2cf7993596a1b9f766864cf737c2a81c7f9c290161983d
- SSDEEP 768:9U9LcKowSyNv3X/D8EH+R2jqhHiD0yNXX2:9ybo/yN/IEeWqhHsvNXX2
- MD5 SHA1 SHA512 SSDEEP
kah-spam-macros/Synthex/Original/ReadME.md
- SHA256 2906a1da7c4d4f8c70c569c00845f10f38641f71fad87ee23f095d06fe4d9986
- MD5 bc5d80fb1b90fd4580530442c38a2b5c
- SHA1 52a5bc3de9cbdd27684c8d2468234e237bc2aa8f
- SHA512 019056abd4910c046ce113f66ec9041f1d17e74e4bdc745d9ba97dd87ef67966ae17267e08798ae3152101aa61424e3db93435e7936e99541c45c30587eb176f
- MD5 SHA1 SHA512
kah-spam-macros/Synthex/Original/Synthex v1.ahk
- SHA256 7854eeb4a6bffdff92ef54be6c8b30f0fac52427d5a9d9f59e76049653da0559
- MD5 b72d08088a2130501a766ee2d7e37720
- SHA1 9b64f418084171e406db59989686a20adb731f2f
- SHA512 f38cf8663ab32820b24f23e0fdfaa25bb9fa1674935d7086e72f61b78d2a092bb351d1b89ab5db7d78146869d01269b7623f4cda1b5bd898b2a95ab5e4ad402d
- SSDEEP 192:VnQWnIlMrb+HgmdutUol87ox1mg283dS0GT5Vay3jcoeVtktJtQWtNt5tPktLtHS:KSdOVaboISP/
- MD5 SHA1 SHA512 SSDEEP
kah-spam-macros/Synthex/Original/Synthex v1.exe
- IMPHASH 9ff9e9f6ab5caab780768df74f57d5d0
- SHA256 8e6a67020083e5f7a79c8eb13a005e155819681e6433f2dcae8956f0b6f4facc
- MD5 fc9a94b1277ceba8d0eeb944c957c7b4
- SHA1 669b6976b24f8d3633fb057e1f6bc07f28edd6b4
- SHA512 f9c0a08e330ea3871ad91adb06b89e579ebbbd97f781b5224ed9d31b0480d9faf1d4dd6f675df50f6fbd51a79fb8fc32a275a47d9cb2e5460de0e97a9e8869b1
- SSDEEP 12288:4bIiH/aeCYInjw4V8VVyykJP3qzzSt+HyySPKFVH+JVSUKcv96gcBdinbwHyFkIa:4siHCC54ViVyJtqzqv9IdHHyGeQl561u
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
570420
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
wsock32
gethostbyname
inet_addr
WSACleanup
gethostname
WSAStartup
winmm
mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mciSendStringA
joyGetPosEx
mixerGetLineControlsA
mixerGetControlDetailsA
mixerSetControlDetails
waveOutGetVolume
mixerClose
waveOutSetVolume
joyGetDevCapsA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
comctl32
ImageList_Create
ord6
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_GetIconSize
ImageList_Destroy
ImageList_AddMasked
psapi
GetModuleBaseNameA
GetModuleFileNameExA
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFileExA
InternetReadFile
kernel32
DeleteCriticalSection
GetModuleFileNameA
GetSystemTimeAsFileTime
FindResourceA
SizeofResource
LoadResource
LockResource
GetFullPathNameA
GetShortPathNameA
FindFirstFileA
FindNextFileA
FindClose
FileTimeToLocalFileTime
SetEnvironmentVariableA
Beep
MoveFileA
OutputDebugStringA
CreateProcessA
GetFileAttributesA
GetExitCodeProcess
WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
OpenProcess
TerminateProcess
SetPriorityClass
SetLastError
GetEnvironmentVariableA
GetLocalTime
GetDateFormatA
GetTimeFormatA
GetDiskFreeSpaceExA
SetVolumeLabelA
CreateFileA
DeviceIoControl
GetDriveTypeA
GetVolumeInformationA
GetDiskFreeSpaceA
GetCurrentDirectoryA
CreateDirectoryA
ReadFile
GetACP
WriteFile
DeleteFileA
SetFileAttributesA
LocalFileTimeToFileTime
SetFileTime
GetFileSizeEx
InitializeCriticalSection
GetSystemDefaultUILanguage
GetComputerNameA
GetSystemWindowsDirectoryA
GetTempPathA
EnterCriticalSection
LeaveCriticalSection
VirtualProtect
QueryDosDeviceA
CompareStringA
GetFullPathNameW
RemoveDirectoryA
CopyFileA
GetCurrentProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
FormatMessageA
GetPrivateProfileStringA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
WritePrivateProfileSectionA
SetEndOfFile
GetFileType
GetStdHandle
SetFilePointerEx
SystemTimeToFileTime
FileTimeToSystemTime
GetFileSize
VirtualAllocEx
VirtualFreeEx
EnumResourceNamesA
LoadLibraryExA
GlobalSize
HeapSetInformation
GetCommandLineA
HeapQueryInformation
HeapSize
HeapReAlloc
ExitProcess
GetModuleHandleW
HeapAlloc
HeapFree
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
GetCPInfo
GetVersionExW
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetLastError
CreateMutexA
CloseHandle
GetExitCodeThread
SetThreadPriority
CreateThread
GetStringTypeExA
lstrcmpiA
WideCharToMultiByte
GetCurrentThreadId
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
SetErrorMode
SetCurrentDirectoryA
Sleep
GetTickCount
MulDiv
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
InterlockedIncrement
InterlockedDecrement
LoadLibraryW
IsProcessorFeaturePresent
GetStringTypeW
RaiseException
RtlUnwind
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
SetFilePointer
GetOEMCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetProcessHeap
CreateFileW
GetSystemTime
VirtualQuery
user32
SetWindowTextW
SetDlgItemTextA
MessageBeep
GetCursorInfo
GetLastInputInfo
GetSystemMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuStringA
ExitWindowsEx
SetMenu
FlashWindow
GetPropA
SetPropA
RemovePropA
MapWindowPoints
RedrawWindow
SetParent
SendMessageW
GetClassInfoExA
DefDlgProcA
GetAncestor
UpdateWindow
GetMessagePos
GetClassLongA
CallWindowProcA
CheckRadioButton
IntersectRect
GetUpdateRect
PtInRect
CreateDialogIndirectParamA
CreateAcceleratorTableA
DestroyAcceleratorTable
InsertMenuItemA
SetMenuDefaultItem
RemoveMenu
SetMenuItemInfoA
IsMenu
GetMenuItemInfoA
CreateMenu
CreatePopupMenu
SetMenuInfo
AppendMenuA
DestroyMenu
TrackPopupMenuEx
CopyImage
CreateIconIndirect
CreateIconFromResourceEx
EnumClipboardFormats
GetWindow
BringWindowToTop
MessageBoxA
GetTopWindow
GetQueueStatus
PostQuitMessage
GetDlgItem
ChangeClipboardChain
SetClipboardViewer
LoadAcceleratorsA
EnableMenuItem
GetMenu
CreateWindowExA
RegisterClassExA
DestroyIcon
DestroyWindow
GetWindowTextLengthA
MapVirtualKeyA
MapVirtualKeyExA
VkKeyScanExA
GetGUIThreadInfo
GetWindowTextA
mouse_event
WindowFromPoint
GetSystemMetrics
keybd_event
SetKeyboardState
GetKeyboardState
GetCursorPos
PostMessageW
GetAsyncKeyState
AttachThreadInput
SendInput
UnregisterHotKey
RegisterHotKey
SendMessageTimeoutA
UnhookWindowsHookEx
SetWindowsHookExA
PostThreadMessageA
IsCharAlphaNumericA
IsCharUpperA
IsCharLowerA
ToAsciiEx
GetKeyboardLayout
CallNextHookEx
CharLowerA
ReleaseDC
GetDC
OpenClipboard
GetClipboardData
GetClipboardFormatNameA
CloseClipboard
SetClipboardData
EmptyClipboard
PostMessageA
FindWindowA
EndDialog
IsWindow
DispatchMessageA
TranslateMessage
ShowWindow
CountClipboardFormats
SendDlgItemMessageA
DialogBoxParamA
SetForegroundWindow
DefWindowProcA
FillRect
DrawIconEx
GetSysColorBrush
GetSysColor
RegisterWindowMessageA
EnumDisplayMonitors
IsIconic
IsZoomed
LoadImageA
EnumWindows
SetWindowLongA
ScreenToClient
IsDialogMessageA
SendMessageA
IsWindowEnabled
GetWindowLongA
GetKeyState
TranslateAcceleratorA
KillTimer
PeekMessageA
GetFocus
EnableWindow
InvalidateRect
SetLayeredWindowAttributes
SetWindowPos
SetWindowRgn
SetFocus
SetActiveWindow
ClientToScreen
EnumChildWindows
MoveWindow
GetWindowRect
GetMonitorInfoA
MonitorFromPoint
GetClientRect
SystemParametersInfoA
AdjustWindowRectEx
DrawTextA
SetRect
GetIconInfo
SetWindowTextA
IsWindowVisible
GetClassNameA
GetWindowThreadProcessId
GetForegroundWindow
GetMessageA
SetTimer
GetParent
GetDlgCtrlID
CharUpperA
IsClipboardFormatAvailable
BlockInput
IsCharAlphaA
CheckMenuItem
LoadCursorA
gdi32
GetPixel
GetClipRgn
GetCharABCWidthsA
SetBkMode
CreatePatternBrush
SetBrushOrgEx
EnumFontFamiliesExA
CreateDIBSection
GdiFlush
SetBkColor
ExcludeClipRect
SetTextColor
GetClipBox
BitBlt
CreateCompatibleBitmap
GetSystemPaletteEntries
GetDIBits
CreateCompatibleDC
CreatePolygonRgn
CreateRectRgn
CreateRoundRectRgn
CreateEllipticRgn
DeleteDC
GetObjectA
GetTextMetricsA
GetTextFaceA
SelectObject
GetStockObject
CreateDCA
CreateSolidBrush
CreateFontA
FillRgn
GetDeviceCaps
DeleteObject
comdlg32
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerA
GetUserNameA
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegConnectRegistryA
RegDeleteValueA
shell32
DragQueryPoint
SHEmptyRecycleBinA
SHFileOperationA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
SHGetFolderPathA
ShellExecuteExA
Shell_NotifyIconA
DragFinish
DragQueryFileA
ExtractIconA
ole32
OleInitialize
OleUninitialize
CoCreateInstance
CoInitialize
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetObject
StringFromGUID2
CreateStreamOnHGlobal
oleaut32
SafeArrayGetLBound
GetActiveObject
OleLoadPicture
SafeArrayUnaccessData
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnlock
SafeArrayPtrOfIndex
SafeArrayLock
SafeArrayGetDim
SafeArrayDestroy
SafeArrayGetUBound
VariantCopyInd
SafeArrayCopy
SysAllocString
VariantChangeType
VariantClear
SafeArrayCreate
SysFreeString
SysStringLen
Name
.text
Size
608KB
Virtual Size
607KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=55, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=125, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=8, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=469, id=1, productName=Unmarked objects,
count=31, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=38, id=175, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,