bf3d1e802931360b79e4e0a9ce711dc0

Sharing

Copy URL Twitter E-mail

General

Target

bf3d1e802931360b79e4e0a9ce711dc0
Size

2.2MB
MD5

bf3d1e802931360b79e4e0a9ce711dc0
SHA1

7bc48f487c958dcaca67f742d2ae5f405e2445dd
SHA256

32fffbc65040920166ba8b917a82533e5c7ebf79988bcd3f8c9a754721156625
SHA512

a30c316037160bd13ee99bc0b89bcc5fc0f9b58509b1147f26359c6f8cb06912030bc764c151fa772d51ba8d078e4e355bf91915745f7c66e92e7d40148d38fa
SSDEEP

49152:nFhn/GPnvN9BtM1GqZDJGF0DowLoIOT/jjn/wvyHlDqhbNqZTXzS44QJ:TOvnbMIqVJG5wRSv/wKFDqkTwQJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/Adapter.dll
unpack001/Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/Combiner.dll
unpack001/Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/General.dll
unpack001/Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/dskinliteud.dll

Files

bf3d1e802931360b79e4e0a9ce711dc0
.rar
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/Adapter.dll
.dll windows:4 windows x86 arch:x86

d7b850479a58157da33a7441f36fd7de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\Work\lonely2\trunk\bin\de_release\Adapter.pdb

Imports

log4cplus

?getInstance@Logger@log4cplus@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?forcedLog@Logger@log4cplus@@QBEXHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH@Z
?isEnabledFor@Logger@log4cplus@@QBE_NH@Z
??6@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@AAV01@PBD@Z
??1Logger@log4cplus@@UAE@XZ

kernel32

CreateFileW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetProcessHeap
ExitProcess
RtlUnwind
RaiseException
WriteConsoleW
GetFileType
GetStdHandle
HeapSize
Sleep
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStartupInfoA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
CreateFileA
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
InterlockedIncrement
GetModuleHandleA
WritePrivateProfileStringW
GlobalFlags
GlobalFindAtomW
GetVersionExA
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFree
InterlockedCompareExchange
GlobalUnlock
FormatMessageW
LocalFree
GetCurrentProcessId
SetLastError
GlobalAddAtomW
CloseHandle
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
GetModuleHandleW
GetModuleFileNameW
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
LoadLibraryW
FindResourceW
LockResource
SizeofResource
LoadResource
VirtualProtect
LoadLibraryA
GetProcAddress
lstrlenW
WideCharToMultiByte
GetLastError
GetModuleFileNameA
GetModuleHandleExA
GetTickCount
OutputDebugStringA
IsProcessorFeaturePresent
VirtualAlloc

user32

GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
LoadCursorW
GetDC
ReleaseDC
GetSysColorBrush
ClientToScreen
ShowWindow
SetWindowTextW
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
GetWindowTextW
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
DestroyMenu
GetForegroundWindow
GetWindowRect
GetSystemMetrics
GetWindow
UnregisterClassW
UnhookWindowsHookEx
UnregisterClassA
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
PostMessageW
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
SendMessageW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
MessageBoxA
MessageBoxW

gdi32

DeleteDC
GetStockObject
RectVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
GetDeviceCaps
PtVisible
SetMapMode
RestoreDC
SaveDC
DeleteObject
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
TextOutW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegQueryValueExA
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyA

shell32

ShellExecuteW

shlwapi

PathFindFileNameW
PathFindExtensionW

oleaut32

VariantChangeType
VariantClear
VariantInit

ws2_32

send

Exports

Exports

GetPlugin

Sections

.text
Size: 576KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/AdapterStatisticeTimes.txt
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/Combiner.dll
.dll windows:4 windows x86 arch:x86

eef81ba48775ace7b46b41b98c2fb39e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\Work\lonely2\trunk\bin\de_release\Combiner.pdb

Imports

kernel32

OutputDebugStringW
LoadLibraryW
GetLastError
FreeLibrary
GetModuleHandleW
Sleep
GetEnvironmentVariableW
SetEnvironmentVariableW
OutputDebugStringA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
TerminateProcess
InterlockedCompareExchange
InterlockedExchange

user32

CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW

msvcr80

_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
memcpy
memset

Exports

Exports

??0CCombiner@@QAE@XZ
??4CCombiner@@QAEAAV0@ABV0@@Z
?fnCombiner@@YAHXZ
?nCombiner@@3HA
InjectDll

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

InjectSh
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/D3dRenderer_debug.lib
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/Default.htm
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/General.dll
.dll windows:4 windows x86 arch:x86

274df1ae53ab5ef2b19a3ad82b62f8e1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\Work\lonely2\trunk\bin\de_release\General.pdb

Imports

psapi

GetModuleInformation

log4cplus

?isEnabledFor@Logger@log4cplus@@QBE_NH@Z
??1Logger@log4cplus@@UAE@XZ
??6@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@AAV01@PBD@Z
?forcedLog@Logger@log4cplus@@QBEXHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH@Z
?getInstance@Logger@log4cplus@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetParentHWnd@logWndAppender@log4cplus@@SAXPAUHWND__@@@Z
?doConfigure@PropertyConfigurator@log4cplus@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVHierarchy@2@I@Z
?getDefaultHierarchy@Logger@log4cplus@@SAAAVHierarchy@2@XZ

ws2_32

__WSAFDIsSet
socket
WSAStartup
listen
connect
inet_ntoa
bind
ioctlsocket
recv
ntohs
WSACleanup
send
select
htonl
accept
WSAGetLastError
htons
inet_addr
sendto
gethostbyname
gethostbyaddr
shutdown
closesocket

kernel32

LocalFree
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
SetLastError
GetModuleHandleW
lstrcmpW
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GlobalDeleteAtom
GlobalAddAtomW
GetVersionExA
LoadLibraryA
CompareStringW
GlobalFindAtomW
LocalAlloc
GlobalReAlloc
GlobalHandle
LocalReAlloc
SetErrorMode
WritePrivateProfileStringW
GlobalFlags
GetThreadLocale
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
CreateFileW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
GetFileAttributesA
GetCommandLineA
GetProcessHeap
ExitProcess
RtlUnwind
RaiseException
WriteConsoleW
GetFileType
GetStdHandle
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
MoveFileA
DeleteFileA
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringA
LCMapStringW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
SetEnvironmentVariableA
lstrcpyA
lstrcatA
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
GetPrivateProfileIntA
GetPrivateProfileStringA
CreateFileMappingA
Sleep
GetProcessVersion
VirtualProtectEx
ReadProcessMemory
VirtualAllocEx
WriteProcessMemory
IsBadReadPtr
ResumeThread
Thread32First
OpenThread
SuspendThread
Thread32Next
GetVersion
GetVersionExW
OpenProcess
WaitForSingleObject
TerminateProcess
lstrlenA
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetFileSize
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
VirtualProtect
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThread
GetModuleFileNameA
CreateFileA
GetCurrentProcess
CloseHandle
GetCurrentThreadId
InterlockedIncrement
OutputDebugStringA
InterlockedDecrement
FindResourceExW
FindNextFileW
FindFirstFileW
FreeLibrary
GetModuleHandleA
CreateDirectoryA
GetModuleFileNameW
GetCurrentProcessId
WideCharToMultiByte
GetLastError
lstrlenW
MultiByteToWideChar
GetProcAddress
LoadLibraryW
FindResourceW
LoadResource
LockResource
SizeofResource
OutputDebugStringW
GetTickCount
InterlockedCompareExchange
ReleaseMutex
ReadFile

user32

TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
ClientToScreen
DestroyMenu
LoadCursorW
GetSysColorBrush
UnregisterClassW
ReleaseDC
GetDC
ShowWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
SetCursor
PostQuitMessage
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowTextW
SetWindowTextW
EnumChildWindows
MessageBoxA
EnumWindows
GetClassNameW
GetWindowThreadProcessId
IsWindow
GetClientRect
EnableWindow
PostMessageW
SendMessageW
KillTimer
SetTimer
CloseWindow
UnregisterClassA
SetWindowsHookExW

gdi32

SetMapMode
DeleteObject
DeleteDC
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
GetStockObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
ScaleWindowExtEx

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
ReportEventA
RegisterEventSourceA
RegSetValueExA
RegCreateKeyExA
DeregisterEventSource
RegCloseKey

shell32

SHFileOperationA

shlwapi

PathFindFileNameW
PathFindExtensionW

oleaut32

VariantInit
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeType
VariantClear

winmm

timeGetTime

Exports

Exports

GetShareData

Sections

.text
Size: 736KB - Virtual size: 732KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/AIConfig/config.map
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/default/NPC.cfg
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/default/Potion.cfg
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/itemOverlapping.txt
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/lang/chinese.ini
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/lang/english.ini
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/lang/lang.ini
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/lang/mode_impetus.ini
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/lang/mode_launcher.ini
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/maps/atlasinfo.txt
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/maps/local_map.txt
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/Down.png
.png
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/Left.png
.png
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/Right.png
.png
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/Up.png
.png
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/circle.png
.png
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/circle_solid.png
.png
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/default_font.fnt
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/default_font.png
.png
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/flagdown.png
.png
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/flagup.png
.png
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/infodlgscript.py
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/logo_down.dds
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/logo_hover.dds
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/logo_normal.dds
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/role.png
.png
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/skillassassin.bmp
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/skillcommon.bmp
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/skillshaman.bmp
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/skillsura.bmp
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/skillwarrior.bmp
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/res/taskbar.bmp
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/serCfg.ini
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/urconfig.properties
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/a_17.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/add_level.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/an_img/login_banner.jpg
.jpg
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/an_img/luncher_an.jpg
.jpg
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/assist.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/auto.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/bg_b_w.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/btn.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/btn_bg.jpg
.jpg
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/btn_down_bg.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/btn_mini.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/btn_op.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/btn_op_bg.jpg
.jpg
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/btn_start.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/close_on.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/close_on_medium.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/contenter_b.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/contenter_m.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/contenter_t.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/delete_account.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/delete_account_hover.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/e-logo.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/exp.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/exp_speed.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/float_window.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/hp.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/ico_d.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/ico_doff.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/ico_home.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/ico_m.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/level.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/log.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/login_bg.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/login_bg_bottom.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/login_main_bg.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/login_oprate_bg.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/login_top_bg.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/luncher_b.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/luncher_close_on.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/luncher_mute_on.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/main_bar_bg.jpg
.jpg
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/main_bar_top_bg.jpg
.jpg
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/medium_bg.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/medium_w_b_bg.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/no_use.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/plus.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/role_b.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/role_b_error.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/role_b_restart.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/role_close.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/role_m.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/role_m_error.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/role_m_restart.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/role_tag.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/role_tag_error.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/role_tag_restart.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/sand_box.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/saved_name_bg.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/select_arror.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/select_arror_hover.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/stop_game.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/title_bar_bg.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/tooltip_corner.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/user_info_b.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/user_info_hide.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/user_info_m.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/user_info_show.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/user_info_t.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/img/user_name_bg.gif
.gif
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/base.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/controller.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/controls.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/dragdrop.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/effects.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/initialize.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/launcher.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/login.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/macro.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/note.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/prototype.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/register.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/testBase.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/tooltip.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/javascripts/webarg.js
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/language/Chinese.xml
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/language/English.xml
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/launcher.html
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/log/WebData
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/login.html
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/note.html
.html .js polyglot
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/partials/_action_result.html
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/partials/_client_unit.html
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/partials/_saved_account_unit.html
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/rake_spec/test_spec.html
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/register.html
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/stylesheets/TestSpec.css
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/stylesheets/global.css
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/stylesheets/launcher.css
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/stylesheets/login.css
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/stylesheets/register.css
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/stylesheets/tooltip.css
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/test/launcher_spec.html
.html .js polyglot
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/test/login_spec.html
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/test/webarg_spec.html
.html .js polyglot
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/tool.htm
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/cfg/web/tooltip.html
.js
Metin2 ExpBot (PL Version) (Handluje oraz opcja LUROWANIA!)/new de version/dskinliteud.dll
.dll windows:4 windows x86 arch:x86

5802cec2d726e3e7a3f13a8aec0b7b9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemInfo
UnmapViewOfFile
OpenEventA
SetEvent
HeapSize
GetThreadLocale
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
CreateFileA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
GetLocaleInfoW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
GetLocaleInfoA
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetDriveTypeA
GetFullPathNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
InterlockedExchange
InitializeCriticalSection
SetFilePointer
CloseHandle
lstrlenA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MapViewOfFile
GetStartupInfoA
SetHandleCount
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapReAlloc
GetModuleFileNameA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
GetACP
SetConsoleCtrlHandler
ExitProcess
OutputDebugStringW
OutputDebugStringA
WriteFile
DebugBreak
GetCurrentThread
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
FatalAppExitA
DeleteCriticalSection
GetStdHandle
GetFileType
WriteConsoleW
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
IsBadReadPtr
HeapValidate
RaiseException
GetFullPathNameW
RtlUnwind
CreateFileMappingA
OpenFileMappingA
WaitForSingleObject
Sleep
MultiByteToWideChar
GetModuleHandleA
VirtualQuery
LoadLibraryA
GetCurrentProcess
FlushInstructionCache
VirtualProtect
GetVersionExW
GlobalReAlloc
GetCurrentThreadId
WideCharToMultiByte
GetPrivateProfileIntW
GetPrivateProfileStringW
LocalAlloc
LocalLock
LocalFree
LocalUnlock
GetModuleHandleW
FreeLibrary
LoadLibraryW
GetProcAddress
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
CreateFileW
GetFileSize
GetVersion
ReadFile
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
GetModuleFileNameW
FindNextFileW
lstrlenW
SetLastError
FindFirstFileW
GetLastError
FindClose
MulDiv
HeapFree
GetProcessHeap
HeapAlloc
FreeEnvironmentStringsA

user32

GetMenuStringW
GetMenuItemCount
GetMenuItemInfoW
SetMenuItemInfoW
GetSubMenu
TrackPopupMenu
WindowFromDC
AdjustWindowRectEx
CallNextHookEx
GetForegroundWindow
GetClassLongW
SetClassLongW
SetWindowsHookExW
IsMenu
ClientToScreen
UnionRect
ShowWindow
GetMenu
EnumChildWindows
LoadCursorW
GetMenuState
PostMessageW
SystemParametersInfoW
MonitorFromWindow
GetMonitorInfoW
GetWindowRgn
GetMenuItemID
GetDC
IsZoomed
SetWindowRgn
GetDesktopWindow
IsRectEmpty
ValidateRect
GetDlgCtrlID
RegisterWindowMessageW
UnhookWindowsHookEx
IsIconic
GetComboBoxInfo
GetNextDlgGroupItem
UpdateWindow
GetFocus
DrawFocusRect
IsWindowEnabled
CreateWindowExW
IsWindowVisible
GetWindowTextLengthW
BeginPaint
EndPaint
CreateDialogIndirectParamW
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
WaitMessage
PostQuitMessage
DestroyWindow
GetAsyncKeyState
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetDlgItem
EnableWindow
GetSystemMenu
EnableMenuItem
CheckDlgButton
SetFocus
SetForegroundWindow
MoveWindow
SetWindowTextW
WinHelpW
GetWindowTextW
RedrawWindow
GetDialogBaseUnits
LoadIconW
DrawIcon
MessageBoxW
GetActiveWindow
GetLastActivePopup
MessageBeep
IsWindow
GetTopWindow
GetClassNameW
GetWindow
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
DestroyIcon
DrawIconEx
LoadImageW
SetCursor
DrawTextW
InvalidateRect
GetCursorPos
ScreenToClient
GetMessagePos
ReleaseCapture
KillTimer
SetTimer
SetCapture
PtInRect
SetRect
OffsetRect
CallWindowProcW
GetParent
MapWindowPoints
CopyRect
DrawFrameControl
GetSysColor
ReleaseDC
GetWindowDC
GetSystemMetrics
GetWindowRect
DrawEdge
GetSysColorBrush
FillRect
RemovePropW
ShowScrollBar
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
SendMessageW
SetWindowPos
EnableScrollBar
GetClientRect
GetScrollInfo
GetWindowLongW
SetPropW
SetWindowLongW
UnregisterClassA
SetRectEmpty
EqualRect
InflateRect
IntersectRect
SubtractRect
DispatchMessageA
GetMessageA
GetMessageW
IsWindowUnicode
PeekMessageA
MsgWaitForMultipleObjects
GetPropW
GetKeyState

gdi32

CreateCompatibleBitmap
BitBlt
SetTextColor
GetStockObject
DeleteObject
DeleteDC
SetBkColor
ExtTextOutW
ExcludeClipRect
PatBlt
SetBrushOrgEx
CreatePatternBrush
CreateDIBSection
SetDIBitsToDevice
GetClipBox
StretchDIBits
SetStretchBltMode
CreateSolidBrush
GetTextExtentPoint32W
CreatePen
SetBkMode
SelectObject
CreateFontIndirectW
GetObjectW
CreateDCW
GetTextMetricsW
CombineRgn
CreateRoundRectRgn
CreateEllipticRgnIndirect
CreateRectRgnIndirect
RectInRegion
OffsetRgn
ExtSelectClipRgn
CreateRectRgn
SelectClipRgn
RestoreDC
LineTo
MoveToEx
SaveDC
RoundRect
ExtCreateRegion
StretchBlt
UnrealizeObject
SetViewportOrgEx
CreateBitmap
CreateFontW
CreateCompatibleDC

shell32

DuplicateIcon

ole32

CreateStreamOnHGlobal
CoReleaseMarshalData
CoMarshalInterface
CoUnmarshalInterface
CoRevokeClassObject
CoRegisterClassObject

oleaut32

OleLoadPicture

shlwapi

PathIsDirectoryW
PathFileExistsW
PathRemoveFileSpecW
PathCombineW

advapi32

RevertToSelf
SetThreadToken
OpenThreadToken

Exports

Exports

dsAddMenuBar
dsAddStyleFile
dsAdjustColor
dsDrawImage
dsEnableMenuNoBorder
dsExitSkin
dsGetClientRect
dsGetColor
dsGetFont
dsGetIcon
dsGetLastError
dsInitKeys
dsInvalidateRect
dsLoadSkin
dsLoadSkinFromRes
dsLockState
dsMessageBox
dsResetAnimate
dsSetAnimateFrame
dsSetAnimatePlay
dsSetDrawItemValue
dsSetDrawItemValueEx
dsSetDrawItemVisible
dsSetDrawItemVisibleEx
dsSetDrawItemVisibleEx2
dsSetHighLight
dsSetItemStyle
dsSetProgressItemPos
dsSetProgressItemRange
dsSetSelfPaint
dsSkinWindow
dsTrackPopupMenu

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d7b850479a58157da33a7441f36fd7de

Headers

File Characteristics

PDB Paths

Imports

log4cplus

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

oleaut32

ws2_32

Exports

Exports

Sections

.text Size: 576KB - Virtual size: 572KB

.rdata Size: 112KB - Virtual size: 108KB

.data Size: 40KB - Virtual size: 71KB

.data1 Size: 4KB - Virtual size: 2KB

.rsrc Size: 16KB - Virtual size: 14KB

.reloc Size: 56KB - Virtual size: 54KB

eef81ba48775ace7b46b41b98c2fb39e

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcr80

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 3KB

InjectSh Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 428B

.reloc Size: 2KB - Virtual size: 1KB

274df1ae53ab5ef2b19a3ad82b62f8e1

Headers

File Characteristics

PDB Paths

Imports

psapi

log4cplus

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

oleaut32

winmm

Exports

Exports

Sections

.text Size: 736KB - Virtual size: 732KB

.rdata Size: 116KB - Virtual size: 112KB

.data Size: 24KB - Virtual size: 93KB

.rsrc Size: 16KB - Virtual size: 14KB

.reloc Size: 72KB - Virtual size: 68KB

5802cec2d726e3e7a3f13a8aec0b7b9f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

.text
Size: 576KB - Virtual size: 572KB

.rdata
Size: 112KB - Virtual size: 108KB

.data
Size: 40KB - Virtual size: 71KB

.data1
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 16KB - Virtual size: 14KB

.reloc
Size: 56KB - Virtual size: 54KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 3KB

InjectSh
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 428B

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 736KB - Virtual size: 732KB

.rdata
Size: 116KB - Virtual size: 112KB

.data
Size: 24KB - Virtual size: 93KB

.rsrc
Size: 16KB - Virtual size: 14KB

.reloc
Size: 72KB - Virtual size: 68KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 296KB - Virtual size: 295KB

.data
Size: 16KB - Virtual size: 23KB

.idata
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 56KB - Virtual size: 52KB