Ɯ+a�~�4�2�0����rI�(��jzJ��+��PX�8P8nױ�#S��& H�栙 ���26ʲ2q�#WF�g����a���ar,�:���[6��!��Pi�m�&�/Q�[V]��&���reL���8#�/��u��b�}y�������m5��y�H���G�w�wf�+&��\��\�b�{DZ�;����H<$���I&�x�+�"\P�����\�0<�-�S6�0��>r�/�\��axH��\�?���?8��X�]4)��^�n�?ʤQ��n��ӕ����[wm�߯5�k :8�َ�̛9�=�e�H��V^mM�}�P��_�i0\��@��������փa5�c�44s���^YL#��� G�!"��>��z�mf80��j�w��<�}�8���l}���1��ӊ�T$|$�/�o�0o�B��|ט3+�c�[ TT�����<*_A�|�ȃ�L�^J���y@��\���,"���n��"�e���^���h�d���|���gpU���FN�g���beP[���[�LL�P���I�iD�b�W�3�o���ә �g�Z�C����i=�����)f��Q<'�ܢ������e�k"�i�nB�����ߐ55�;�h<飲`����to�k٪��2��u�.#q�h���O�����t�#Qr�ڡ�o�hGҭ� Oj��Z]/7��]��ŠG�?�;� �1�4�(G�����=C�D��+.�Ȼ���@��qg���@'�h���"��"A�9�+��5v�?D���Q���Ҝg�1,�UZ�8y�`&�Wb�W���3J����=����>floj��By|���]ݚ��l����z���T~�8�%a���IK����Z���I���l�'vB"_:\�0��ؠ����P"D�����@ߌ%����^n0U� 9u�+d0�tW0���� �`Ө|b���oť��3I��JQ��|qE���-!�߶���b�j�����ꑳD�+�5�m��iP ��%8�T�1�0���C 7�.̏�A�#vP*��GS�J����T�ض���Z�E`*+�1����NQ�W���=��IZ���m���.T�t �j�������P�vUXޡ�P����چ?y�o�'��XQ�7Hn��T�@ |;�I�c^�E� C��Kb<W�ꬔlt����L���L6A� 숎z�@sFA����d���Pb�:���Y=VVi���4"��/E{�� �h63 Ђ�K ?,4s��E�����d!��<�()����ӤR.35w$���]�i��H�]��s������O���{k)���sc��v���i���W=�R����v�kmQ��7�D��$9SBY��:н�9�ZmC��Y�x�]�we�,Zi��5���5��6�ė �'�V6��݄2f5������WB�B�W���;Aa�a�^\���bX�j�2�}�6��(X�(J$��!1������j��� �y�w����\��h�B�9�2�^f5pV���]�!|�3��B��J��W-/N�[#/l��e��9��Ṗդ݃��*�<���qy ,��c�fV�W/6|�m d kw�w}~b���a��4�0r�����j-j�H��%�Js��4AF�u��+�S�vPy��#��8�I<�GOYGE��1&}�qd��=��\�i�R�_@�Y���K@�9��jem����q�h29\^S����Th��MM��)�>�<R;ޢ�����S�"�uܤ��<��E��ى����q�G!��]�W�� U���\�� � kt!�M�x��v� L&��[�y+��*}�;�|N L�ñ�_>�B��p:�x�|�k�٫;>�DG��o��g'pÞy���u���z)��[VX�mNe�U:04��I>�K�V�A���S����b�Iܱߓ|��M�j�k �(��.>�Z��+L����!�����{����/����_1�������4�L�<��zjAxɑ�#~C� �m������R��gZ�VY���V�^���9���i�r6[�gH$G�kW^ޢ�����lSn���D]�9�Ĺ9�߬2EҀd���S����q5�w�K�R��Q<�xx@���g���7o�5C�7��,Ox��E�)�֨����#6�H�ȝ�U}�y�+�[���?fӅ<�-=�����1rkb�f�4\J�ܓK��<��@L5��uq�ȹ1�Se��N����^u#u������,���Kd����9��>�����0�N)�n��xX<>�Nsc��)Ul9��edJ�X�gD@_��3,�yM��㣡�6�k�,��E��$� �X |��>e��}�,ΖB��#��FJa[@)��u� H K�ny��g1ߌ��\�������Vɷ����"e3����5}� � ��)p�Ɋ�0хP��r�����p��Pbm�mo�����Fk�;B����HF�����O�)~ڭ���?p��.�z��!^����Jֿ��)�8o�]�Ϳ���n��C]08����` �M ������F~��t��F���ah\Y�0MS���`wu�-�y4��߁s����`�cV�ѹ�Y/埯aHH�M���d2��}-b��[���7=�.��1ϭeM������J5�H��oy�0/��<O�qap����g�DyI}��g���M����5�X$I�����,�3zT�I�W��IIqMD��P�H�i������<�|�#M�OV�8g��䧬(��nG��`Q�Wl� �{4�"߭)�8@����M_�\ݢ�����bC��R���;A ^�9���;����l�uK ����o�Ѳ̵�5� ��"�4.A��,i.F+'�%�H�|��Reҝ䐦u�n>�-��.���ϭ%-ڊb$��V��Nǀ"ްG1�2��^���FH#Bo���CK��=9A��v�6@g�j�����&1#�yJOW�G��l\a���x�ݫ���a\��~�K,#Y���@L�6���ˢ�~J�P�2ϩ?��v��KGWxX�0����D8�c�'��������-���:��F!۷g0�(D4�/�����d����9Q2D�3�
Static task
static1
Behavioral task
behavioral1
Sample
SplashPro.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
SplashPro.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Splash.PRO.1.3.3_(www.4DOWNLOADS.ir)/Splash.PRO.1.3.3_(www.4DOWNLOADS.ir)/splash_pro_1_3_3_setup.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
Splash.PRO.1.3.3_(www.4DOWNLOADS.ir)/Splash.PRO.1.3.3_(www.4DOWNLOADS.ir)/splash_pro_1_3_3_setup.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Splash.PRO.1.3.3_(www.4DOWNLOADS.ir)/[4Downloads.ir].url
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Splash.PRO.1.3.3_(www.4DOWNLOADS.ir)/[4Downloads.ir].url
Resource
win10v2004-20240226-en
General
-
Target
3a103d46d64c1caa7cdd635c672fb176_JaffaCakes118
-
Size
19.9MB
-
MD5
3a103d46d64c1caa7cdd635c672fb176
-
SHA1
7e83b207f5ceb517304eb106dd93a43ad6b3582c
-
SHA256
da8e72fdd273bc745ce6039e0048beb0958dcb60b16fdd979775e4f013325e0f
-
SHA512
bc762e62d3379b374c1db3a88d8bf579a5b52737c7cb68ec168a0e02756edadfacc7a1ec882468a9e33434ff9fc709c0122fe8502fedba2d6b98d4f79c1b3c0b
-
SSDEEP
393216:cvPk9t6R0/ydpNexLyahC+dYSTUwdgR6K0Tabaf2vPLB1bQcf6gJEed:cvCWXNeJQ1udgRVNGfWDBhPf6gJR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/SplashPro.exe
Files
-
3a103d46d64c1caa7cdd635c672fb176_JaffaCakes118.zip
-
Splash.PRO.1.3.3_(www.4DOWNLOADS.ir)/Password.txt
-
Splash.PRO.1.3.3_(www.4DOWNLOADS.ir)/Splash.PRO.1.3.3_(www.4DOWNLOADS.ir)/cr/SplashPro.rar.rar
-
SplashPro.exe.exe windows:5 windows x86 arch:x86
8b349c5860fe0ebf835b860934794fda
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
RaiseException
lstrcmpW
CreateEventW
SetCurrentDirectoryW
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FindClose
GetCurrentDirectoryW
GetTimeFormatW
FindFirstFileW
ResetEvent
WaitForMultipleObjects
GetThreadPriority
GetCurrentThread
FindNextFileW
GetDriveTypeW
MoveFileW
CopyFileW
GetUserDefaultUILanguage
GetSystemInfo
GetLocalTime
GetProcAddress
QueryDosDeviceW
ReadFile
SetFilePointer
GetFileSize
CreateThread
DeleteFileW
CloseHandle
CreateSemaphoreW
FlushFileBuffers
WritePrivateProfileStringW
ReleaseSemaphore
SetThreadPriority
CreateFileW
FreeConsole
OpenProcess
WaitForSingleObject
CompareStringW
LoadLibraryA
GetDateFormatW
SetErrorMode
CreateMutexW
ReleaseMutex
LocalFree
DeviceIoControl
LocalAlloc
GetSystemPowerStatus
LockFile
UnlockFile
ExitThread
GetLastError
VirtualProtect
IsBadReadPtr
VirtualAlloc
VirtualFree
QueryPerformanceFrequency
DeleteTimerQueueTimer
CreateTimerQueueTimer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetPrivateProfileIntW
MultiByteToWideChar
GetModuleFileNameW
GetFileAttributesW
GetVersionExW
LoadLibraryW
WideCharToMultiByte
WriteFile
GetPrivateProfileStringW
GetTickCount
GetModuleHandleW
CreateDirectoryW
FreeLibrary
GetVolumeInformationW
GetLogicalDriveStringsW
Sleep
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
RegisterClassExW
LoadIconW
SetWindowPos
BeginPaint
GetFocus
SetRect
LoadBitmapW
SetCursor
GetWindowTextLengthW
GetRawInputData
IsWindowEnabled
InsertMenuItemW
ShowCursor
GetCursorInfo
TrackPopupMenuEx
GetAsyncKeyState
GetWindowTextW
GetDlgItem
EndDialog
CheckDlgButton
CreatePopupMenu
IsDlgButtonChecked
CreateDialogParamW
GetMenuItemCount
GetCursor
CheckRadioButton
GetSystemMetrics
SetWindowTextW
wsprintfW
EnumDisplayDevicesW
IsWindow
ValidateRect
mouse_event
WaitMessage
PeekMessageW
ShowWindow
ClientToScreen
SetActiveWindow
MonitorFromPoint
GetParent
TranslateAcceleratorW
GetMessageW
SetForegroundWindow
FindWindowW
TranslateMessage
LoadAcceleratorsW
RegisterRawInputDevices
DispatchMessageW
LoadCursorW
TrackMouseEvent
CreateWindowExW
MsgWaitForMultipleObjects
PostThreadMessageW
SetCapture
WindowFromPoint
GetCapture
ReleaseCapture
MessageBoxW
DestroyWindow
SetWindowPlacement
PostQuitMessage
IsIconic
LoadImageW
PostMessageW
SetParent
GetDC
SetCursorPos
ReleaseDC
MonitorFromWindow
RedrawWindow
GetDesktopWindow
LoadStringW
IsWindowVisible
SendMessageW
GetMonitorInfoW
SetWindowRgn
SetTimer
GetWindowRect
UnregisterClassW
KillTimer
GetKeyState
GetClientRect
SetFocus
EndPaint
UpdateWindow
AdjustWindowRectEx
SetLayeredWindowAttributes
GetCursorPos
SetWindowLongW
GetWindowLongW
InvalidateRect
RegisterWindowMessageW
GetQueueStatus
DefWindowProcW
DrawTextW
EnableWindow
MessageBoxA
gdi32
Rectangle
CreateFontW
CreateRoundRectRgn
CreatePen
CreateSolidBrush
BitBlt
SetTextColor
DeleteDC
CreateDIBSection
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
LineTo
GetStretchBltMode
SetStretchBltMode
GetObjectW
SetBrushOrgEx
MoveToEx
CombineRgn
EnumFontFamiliesExW
CreateRectRgn
GetDeviceCaps
CreatePatternBrush
SetBkColor
GetTextColor
SetPixel
GetStockObject
StretchBlt
comdlg32
CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
shell32
SHGetPathFromIDListW
ShellExecuteW
SHGetFolderPathW
DragAcceptFiles
DragQueryFileW
DragFinish
SHAddToRecentDocs
SHBrowseForFolderW
msvcr90
printf
toupper
wcsncat_s
atoi
wcsncmp
__libm_sse2_asinf
??_V@YAXPAX@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
_purecall
__CxxFrameHandler3
memcpy
memset
_stricmp
wcsncpy_s
??3@YAXPAX@Z
_itow_s
wcscat_s
printf_s
exit
free
qsort
_wcsnicmp
malloc
_vsnwprintf
wprintf
rand
srand
_time64
??2@YAPAXI@Z
swprintf_s
__libm_sse2_powf
_aligned_free
_aligned_malloc
towupper
_wtoi
_wfopen_s
fgetws
fread
swscanf_s
fputws
realloc
wcscpy_s
fclose
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
__CxxFrameHandler
wcslen
strncmp
strstr
wcsstr
__iob_func
__RTDynamicCast
ldexp
_CxxThrowException
winmm
timeKillEvent
timeSetEvent
PlaySoundW
timeEndPeriod
timeBeginPeriod
timeGetTime
psapi
EnumProcesses
GetModuleBaseNameW
winhttp
WinHttpReceiveResponse
WinHttpReadData
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpConnect
WinHttpSendRequest
WinHttpOpenRequest
comctl32
ord413
ord412
ord410
msvcp90
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
advapi32
RegOpenKeyExW
CryptAcquireContextW
CryptImportKey
CryptDecrypt
IsTextUnicode
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
ole32
CoFreeUnusedLibraries
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
ddraw
DirectDrawCreateEx
d3d9
Direct3DCreate9
d3dx9_40
D3DXCreateFontW
D3DXMatrixPerspectiveFovLH
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateSprite
D3DXMatrixTransformation2D
D3DXMatrixLookAtLH
setupapi
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
Exports
Exports
Sections
.text Size: - Virtual size: 974KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 19.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Upx0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Upx1 Size: - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Upx2 Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Splash.PRO.1.3.3_(www.4DOWNLOADS.ir)/Splash.PRO.1.3.3_(www.4DOWNLOADS.ir)/splash_pro_1_3_3_setup.exe.exe windows:4 windows x86 arch:x86
80d73aa23cdddc5bbe09e8267af96f41
Code Sign
06:cb:7d:43:d6:58:1b:21:9e:68:43:ff:27:47:05:0cCertificate
IssuerCN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZANot Before23-06-2010 00:00Not After23-06-2011 23:59SubjectCN=Mirillis Ltd.,O=Mirillis Ltd.,L=Zielona Gora,ST=woj. Lubuskie,C=PLExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
01Certificate
IssuerCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6dNot Before01-08-1996 00:00Not After31-12-2020 23:59SubjectCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d0aCertificate
IssuerCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6dNot Before06-08-2003 00:00Not After05-08-2013 23:59SubjectCN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZAExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
6a:c8:2a:29:a3:6f:44:22:0c:31:95:8d:06:b5:7c:e5:4a:c8:b8:18Signer
Actual PE Digest6a:c8:2a:29:a3:6f:44:22:0c:31:95:8d:06:b5:7c:e5:4a:c8:b8:18Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyExA
RegSetValueExA
kernel32
AddAtomA
CloseHandle
CreateDirectoryW
CreateFileW
DeleteFileW
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetSystemTime
GetTempPathW
MoveFileExW
SetCurrentDirectoryW
SetUnhandledExceptionFilter
SystemTimeToFileTime
WriteFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_close
_iob
_lseek
_onexit
_open
_read
_setmode
_write
abort
atexit
fflush
fprintf
free
malloc
rand
signal
sprintf
srand
strcpy
strncpy
strrchr
swprintf
shell32
ShellExecuteW
user32
CreateWindowExA
DefWindowProcA
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassExA
ShowWindow
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13.9MB - Virtual size: 13.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Splash.PRO.1.3.3_(www.4DOWNLOADS.ir)/[4DownLoads.ir].jpg.jpg
-
Splash.PRO.1.3.3_(www.4DOWNLOADS.ir)/[4Downloads.ir].url.url