335fdb1592e37fdcfd0bd5c348dece43_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

335fdb1592e37fdcfd0bd5c348dece43_JaffaCakes118
Size

7.8MB
MD5

335fdb1592e37fdcfd0bd5c348dece43
SHA1

26c2103a17357925cb4b00c4a14ec47964489837
SHA256

30909809bc93c9d337ada0a5fa8663c5c9912c69694e89c974ffbcf5947d12c4
SHA512

839b1860bbc1023fc05c0a510b878e2f72c50fe0d7401949d92feee6d416ca705a798160c661a52031909e751e66993dcecbd65f7f1838f5d5b6809d4d9b0fc1
SSDEEP

196608:Y7M8M7gpt1F3l8p4u8vuPeleLwuBqGQZ/u6GNAhW:Y7MX0ptz3vu8XeLLc267W

Score

3^/10

Malware Config

Signatures

Unsigned PE 19 IoCs

Checks for missing Authenticode signature.

resource
unpack001/振远电子/AdjustTime(网络）/AdjustTime.exe
unpack001/振远电子/AdjustTime（串口）/AdjustTime.exe
unpack002/LEDShow(new)/LEDShow.exe
unpack001/振远电子/C卡软件/LEDShow(new)/LEDShow.exe
unpack001/振远电子/Interface.dll
unpack001/振远电子/VisionShow.exe
unpack001/振远电子/WordConvert.exe
unpack001/振远电子/作战时间VisionShow/VisionShow.exe
unpack001/振远电子/振远　链接库2[1].1/Delphi/LEDSender.dll
unpack001/振远电子/振远　链接库2[1].1/Delphi/Project2.exe
unpack003/LEDSender.dll
unpack003/Project1.exe
unpack001/振远电子/振远　链接库2[1].1/Delphi/led20A(新)/LEDSender.dll
unpack001/振远电子/振远　链接库2[1].1/Delphi/led20A(新)/Project1.exe
unpack001/振远电子/振远　链接库2[1].1/VB/LEDSender.dll
unpack001/振远电子/振远　链接库2[1].1/VB/工程1.exe
unpack001/振远电子/振远　链接库2[1].1/VC6例程(B卡)/Debug/armsend.exe
unpack001/振远电子/振远　链接库2[1].1/VC6例程(B卡)/LEDSender.dll
unpack001/振远电子/振远　链接库2[1].1/c/LEDSender.dll

Files

335fdb1592e37fdcfd0bd5c348dece43_JaffaCakes118
.rar
振远电子/AdjustTime(网络）/AdjustTime.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
振远电子/AdjustTime（串口）/AdjustTime.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
振远电子/AutoSend.Lst
振远电子/C卡软件/Card-C通讯协议.doc
.doc windows office2003
振远电子/C卡软件/LEDShow(new).rar
.rar
LEDShow(new)/LEDShow.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 473KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 153KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LEDShow(new)/Project.dat
LEDShow(new)/演示文件.VSC
振远电子/C卡软件/LEDShow(new)/LEDShow.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 473KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 153KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
振远电子/C卡软件/LEDShow(new)/Project.dat
振远电子/C卡软件/LEDShow(new)/演示文件.VSC
振远电子/C卡软件/异步显示屏使用说明.doc
.doc windows office2003
振远电子/Default.spj
振远电子/Interface.dll
.dll windows:4 windows x86 arch:x86

5cbf4ee9e9103091bb70b33b149bc2f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GetFileSize
CreateFileA
GlobalFree
GlobalLock
GetLocalTime
ReadFile
GlobalUnlock
CloseHandle
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

user32

GetDC
ReleaseDC

gdi32

GetDeviceCaps
SetDIBitsToDevice

winmm

timeGetTime

Exports

Exports

Display_Create
Display_Destroy
Display_Step

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
振远电子/Param.ini
振远电子/SoftScanFont.Dat
振远电子/Tips.txt
振远电子/VisionShow.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 421KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
振远电子/WordConvert.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 119KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
振远电子/作战时间VisionShow/Param.ini
振远电子/作战时间VisionShow/VisionShow.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 421KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
振远电子/协议例程/Send.c
振远电子/协议例程/crc.c
振远电子/协议例程/main.c
振远电子/协议例程/packet.h
振远电子/协议例程/system.h
振远电子/协议例程/uart.c
振远电子/协议例程/uart.h
振远电子/协议例程/协议例程.dsp
振远电子/协议例程/协议例程.dsw
振远电子/协议例程/协议例程.ncb
振远电子/协议例程/协议例程.opt
振远电子/协议例程/显示屏通讯协议.doc
.doc windows office2003
振远电子/振远　链接库2[1].1/11/11.aps
振远电子/振远　链接库2[1].1/11/11.cpp
振远电子/振远　链接库2[1].1/11/11.def
振远电子/振远　链接库2[1].1/11/11.dsp
振远电子/振远　链接库2[1].1/11/11.dsw
振远电子/振远　链接库2[1].1/11/11.h
振远电子/振远　链接库2[1].1/11/11.idl
振远电子/振远　链接库2[1].1/11/11.ncb
振远电子/振远　链接库2[1].1/11/11.opt
振远电子/振远　链接库2[1].1/11/11.plg
.html
振远电子/振远　链接库2[1].1/11/11.rc
振远电子/振远　链接库2[1].1/11/11.tlb
振远电子/振远　链接库2[1].1/11/11_i.c
振远电子/振远　链接库2[1].1/11/11ps.def
振远电子/振远　链接库2[1].1/11/11ps.mk
振远电子/振远　链接库2[1].1/11/Debug/11.obj
振远电子/振远　链接库2[1].1/11/Debug/11.pch
振远电子/振远　链接库2[1].1/11/Debug/11.res
振远电子/振远　链接库2[1].1/11/Debug/StdAfx.obj
振远电子/振远　链接库2[1].1/11/Debug/vc60.idb
振远电子/振远　链接库2[1].1/11/Debug/vc60.pdb
振远电子/振远　链接库2[1].1/11/Resource.h
振远电子/振远　链接库2[1].1/11/StdAfx.cpp
振远电子/振远　链接库2[1].1/11/StdAfx.h
振远电子/振远　链接库2[1].1/11/jjw.cpp
振远电子/振远　链接库2[1].1/Delphi/LEDSender.dll
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

AddCountDown
AddCountUp
AddDateTime
AddLeaf
AddMovie
AddString
AddText
AddWindow
LED_AdjustTime
LED_Close
LED_DownLoadFontSet
LED_GetBrightness
LED_GetNotifyMessage
LED_GetPower
LED_Open
LED_Query
LED_SendToScreen
LED_SetBrightness
LED_SetPower
MakeRoot

Sections

CODE
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
振远电子/振远　链接库2[1].1/Delphi/LedAPI.dcu
振远电子/振远　链接库2[1].1/Delphi/LedAPI.pas
振远电子/振远　链接库2[1].1/Delphi/Project2.cfg
振远电子/振远　链接库2[1].1/Delphi/Project2.dof
振远电子/振远　链接库2[1].1/Delphi/Project2.dpr
振远电子/振远　链接库2[1].1/Delphi/Project2.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 334KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
振远电子/振远　链接库2[1].1/Delphi/Project2.res
振远电子/振远　链接库2[1].1/Delphi/Unit2.dcu
振远电子/振远　链接库2[1].1/Delphi/Unit2.ddp
振远电子/振远　链接库2[1].1/Delphi/Unit2.dfm
振远电子/振远　链接库2[1].1/Delphi/Unit2.pas
振远电子/振远　链接库2[1].1/Delphi/Unit2.~ddp
振远电子/振远　链接库2[1].1/Delphi/Unit2.~dfm
振远电子/振远　链接库2[1].1/Delphi/Unit2.~pas
振远电子/振远　链接库2[1].1/Delphi/led20A(新).rar
.rar
LEDSender.dll
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

AddCountDown
AddCountUp
AddDateTime
AddLeaf
AddMovie
AddString
AddText
AddWindow
LED_AdjustTime
LED_Close
LED_DownLoadFontSet
LED_GetBrightness
LED_GetNotifyMessage
LED_GetOption
LED_GetPower
LED_Open
LED_Query
LED_SendToScreen
LED_SetBrightness
LED_SetOption
LED_SetPower
MakeRoot

Sections

CODE
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LedAPI.pas
Project1.dpr
Project1.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Project1.res
Unit1.dfm
led20A.bin
振远电子/振远　链接库2[1].1/Delphi/led20A(新)/LEDSender.dll
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

AddCountDown
AddCountUp
AddDateTime
AddLeaf
AddMovie
AddString
AddText
AddWindow
LED_AdjustTime
LED_Close
LED_DownLoadFontSet
LED_GetBrightness
LED_GetNotifyMessage
LED_GetOption
LED_GetPower
LED_Open
LED_Query
LED_SendToScreen
LED_SetBrightness
LED_SetOption
LED_SetPower
MakeRoot

Sections

CODE
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
振远电子/振远　链接库2[1].1/Delphi/led20A(新)/LedAPI.pas
振远电子/振远　链接库2[1].1/Delphi/led20A(新)/Project1.dpr
振远电子/振远　链接库2[1].1/Delphi/led20A(新)/Project1.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
振远电子/振远　链接库2[1].1/Delphi/led20A(新)/Project1.res
振远电子/振远　链接库2[1].1/Delphi/led20A(新)/Unit1.dfm
振远电子/振远　链接库2[1].1/Delphi/led20A(新)/led20A.bin
振远电子/振远　链接库2[1].1/LED动态链接库函数说明2.1.doc
.doc windows office2003
振远电子/振远　链接库2[1].1/VB/Form1.frm
振远电子/振远　链接库2[1].1/VB/Form1.frx
振远电子/振远　链接库2[1].1/VB/Form2.frm
振远电子/振远　链接库2[1].1/VB/LEDApi.bas
振远电子/振远　链接库2[1].1/VB/LEDSender.dll
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

AddCountDown
AddCountUp
AddDateTime
AddLeaf
AddMovie
AddString
AddText
AddWindow
LED_AdjustTime
LED_Close
LED_DownLoadFontSet
LED_GetBrightness
LED_GetNotifyMessage
LED_GetOption
LED_GetPower
LED_Open
LED_Query
LED_SendToScreen
LED_SetBrightness
LED_SetOption
LED_SetPower
MakeRoot

Sections

CODE
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
振远电子/振远　链接库2[1].1/VB/Module1.bas
.vbs
振远电子/振远　链接库2[1].1/VB/工程1.exe
.exe windows:4 windows x86 arch:x86

bfa37ac277e1bb2926bf62e7bf558241

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord595
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
__vbaStrToAnsi
__vbaFpI4
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
振远电子/振远　链接库2[1].1/VB/工程1.vbp
振远电子/振远　链接库2[1].1/VB/工程1.vbw
振远电子/振远　链接库2[1].1/VC6例程(B卡)/Debug/armsend.bsc
振远电子/振远　链接库2[1].1/VC6例程(B卡)/Debug/armsend.exe
.exe windows:4 windows x86 arch:x86

deb01b8726df267e443f84339e0d24b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
FreeLibrary
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
SetConsoleCtrlHandler
HeapValidate
IsBadReadPtr
SetStdHandle
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
GetLastError
SetFilePointer
IsBadWritePtr
CloseHandle

user32

LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowTextA
SetTimer
MessageBoxA
SetRect
ReleaseDC
PostQuitMessage
DefWindowProcA

gdi32

GetStockObject

Sections

.text
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
振远电子/振远　链接库2[1].1/VC6例程(B卡)/Debug/armsend.ilk
振远电子/振远　链接库2[1].1/VC6例程(B卡)/Debug/armsend.pch
振远电子/振远　链接库2[1].1/VC6例程(B卡)/Debug/armsend.pdb
振远电子/振远　链接库2[1].1/VC6例程(B卡)/Debug/main.obj
振远电子/振远　链接库2[1].1/VC6例程(B卡)/Debug/vc60.idb
振远电子/振远　链接库2[1].1/VC6例程(B卡)/Debug/vc60.pdb
振远电子/振远　链接库2[1].1/VC6例程(B卡)/LEDApi.h
振远电子/振远　链接库2[1].1/VC6例程(B卡)/LEDSender.dll
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

AddCountDown
AddCountUp
AddDateTime
AddLeaf
AddMovie
AddString
AddText
AddWindow
LED_AdjustTime
LED_Close
LED_DownLoadFontSet
LED_GetBrightness
LED_GetNotifyMessage
LED_GetOption
LED_GetPower
LED_Open
LED_Query
LED_SendToScreen
LED_SetBrightness
LED_SetOption
LED_SetPower
MakeRoot

Sections

CODE
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
振远电子/振远　链接库2[1].1/VC6例程(B卡)/armsend.dsp
振远电子/振远　链接库2[1].1/VC6例程(B卡)/armsend.dsw
振远电子/振远　链接库2[1].1/VC6例程(B卡)/armsend.ncb
振远电子/振远　链接库2[1].1/VC6例程(B卡)/armsend.opt
振远电子/振远　链接库2[1].1/VC6例程(B卡)/armsend.plg
.html
振远电子/振远　链接库2[1].1/VC6例程(B卡)/main.c
振远电子/振远　链接库2[1].1/c/LEDApi.dsp
振远电子/振远　链接库2[1].1/c/LEDApi.dsw
振远电子/振远　链接库2[1].1/c/LEDApi.h
振远电子/振远　链接库2[1].1/c/LEDApi.ncb
振远电子/振远　链接库2[1].1/c/LEDApi.opt
振远电子/振远　链接库2[1].1/c/LEDSender.dll
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

AddCountDown
AddCountUp
AddDateTime
AddLeaf
AddMovie
AddString
AddText
AddWindow
LED_AdjustTime
LED_Close
LED_DownLoadFontSet
LED_GetBrightness
LED_GetNotifyMessage
LED_GetOption
LED_GetPower
LED_Open
LED_Query
LED_SendToScreen
LED_SetBrightness
LED_SetOption
LED_SetPower
MakeRoot

Sections

CODE
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
振远电子/振远　链接库2[1].1/c/LedAPI.pas
振远电子/振远　链接库2[1].1/c/armsend.dsp
振远电子/振远　链接库2[1].1/c/armsend.dsw
振远电子/振远　链接库2[1].1/c/armsend.ncb
振远电子/振远　链接库2[1].1/c/ledsender.lib
振远电子/振远　链接库2[1].1/c/main.c
振远电子/振远　链接库2[1].1/~$D动态链接库函数说明2.1.doc
振远电子/调试文件.fmt

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 252KB - Virtual size: 252KB

DATA Size: 4KB - Virtual size: 3KB

BSS Size: - Virtual size: 2KB

.idata Size: 8KB - Virtual size: 7KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 17KB - Virtual size: 17KB

.rsrc Size: 13KB - Virtual size: 13KB

.debug Size: 2.0MB - Virtual size: 2.0MB

Headers

File Characteristics

Sections

CODE Size: 254KB - Virtual size: 253KB

DATA Size: 4KB - Virtual size: 3KB

BSS Size: - Virtual size: 2KB

.idata Size: 8KB - Virtual size: 7KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 17KB - Virtual size: 17KB

.rsrc Size: 12KB - Virtual size: 12KB

Headers

File Characteristics

Sections

CODE Size: 473KB - Virtual size: 472KB

DATA Size: 5KB - Virtual size: 4KB

BSS Size: - Virtual size: 153KB

.idata Size: 9KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 32KB - Virtual size: 32KB

.rsrc Size: 30KB - Virtual size: 30KB

Headers

File Characteristics

Sections

CODE Size: 473KB - Virtual size: 472KB

DATA Size: 5KB - Virtual size: 4KB

BSS Size: - Virtual size: 153KB

.idata Size: 9KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 32KB - Virtual size: 32KB

.rsrc Size: 30KB - Virtual size: 30KB

5cbf4ee9e9103091bb70b33b149bc2f7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 9KB

.reloc Size: 8KB - Virtual size: 4KB

Headers

File Characteristics

Sections

CODE Size: 1.3MB - Virtual size: 1.3MB

DATA Size: 15KB - Virtual size: 15KB

BSS Size: - Virtual size: 421KB

.idata Size: 12KB - Virtual size: 11KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 86KB - Virtual size: 86KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

Headers

File Characteristics

Sections

CODE Size: 284KB - Virtual size: 283KB

CODE
Size: 252KB - Virtual size: 252KB

DATA
Size: 4KB - Virtual size: 3KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 7KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 17KB - Virtual size: 17KB

.rsrc
Size: 13KB - Virtual size: 13KB

.debug
Size: 2.0MB - Virtual size: 2.0MB

CODE
Size: 254KB - Virtual size: 253KB

DATA
Size: 4KB - Virtual size: 3KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 7KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 17KB - Virtual size: 17KB

.rsrc
Size: 12KB - Virtual size: 12KB

CODE
Size: 473KB - Virtual size: 472KB

DATA
Size: 5KB - Virtual size: 4KB

BSS
Size: - Virtual size: 153KB

.idata
Size: 9KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 32KB - Virtual size: 32KB

.rsrc
Size: 30KB - Virtual size: 30KB

CODE
Size: 473KB - Virtual size: 472KB

DATA
Size: 5KB - Virtual size: 4KB

BSS
Size: - Virtual size: 153KB

.idata
Size: 9KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 32KB - Virtual size: 32KB

.rsrc
Size: 30KB - Virtual size: 30KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 9KB

.reloc
Size: 8KB - Virtual size: 4KB

CODE
Size: 1.3MB - Virtual size: 1.3MB

DATA
Size: 15KB - Virtual size: 15KB

BSS
Size: - Virtual size: 421KB

.idata
Size: 12KB - Virtual size: 11KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 86KB - Virtual size: 86KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

CODE
Size: 284KB - Virtual size: 283KB

DATA
Size: 4KB - Virtual size: 3KB

BSS
Size: - Virtual size: 119KB

.idata
Size: 9KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 19KB - Virtual size: 18KB

.rsrc
Size: 13KB - Virtual size: 13KB

CODE
Size: 1.3MB - Virtual size: 1.3MB

DATA
Size: 15KB - Virtual size: 15KB

BSS
Size: - Virtual size: 421KB

.idata
Size: 12KB - Virtual size: 11KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 86KB - Virtual size: 86KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

CODE
Size: 94KB - Virtual size: 94KB

DATA
Size: 3KB - Virtual size: 3KB

BSS
Size: - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 508B

.reloc
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 5KB - Virtual size: 5KB

CODE
Size: 334KB - Virtual size: 333KB

DATA
Size: 5KB - Virtual size: 4KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 24KB - Virtual size: 24KB

.rsrc
Size: 22KB - Virtual size: 22KB

CODE
Size: 94KB - Virtual size: 94KB

DATA
Size: 3KB - Virtual size: 3KB

BSS
Size: - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 4KB