d5240e25a9f03aeaaa03354de9b38d3279bc8d76e3c80b8323811f7ef01841b6

Sharing

Copy URL Twitter E-mail

General

Target

d5240e25a9f03aeaaa03354de9b38d3279bc8d76e3c80b8323811f7ef01841b6
Size

2.7MB
MD5

a45db3483ba9608fda853d82acdddbc4
SHA1

c4bc768d48d0301289b120f7cc1e56506a67d836
SHA256

d5240e25a9f03aeaaa03354de9b38d3279bc8d76e3c80b8323811f7ef01841b6
SHA512

3102db87e299ff57db58b58613492574eef62c47079a3da9bb586f57615191b14d1f65e50192ab98064ac0268533b212072d088a61856df6eedd27ed62a2f2b9
SSDEEP

49152:3329wWVCLFPUFfvuBHqBewiqtg/voHTTRWxGVrBlbYXeo:2mrRPUFMqBVtgHeTTRWErBl4

Score

10^/10

upx

Malware Config

Signatures

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
static1/unpack001/Azureus Turbo Accelerator.exe	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Azureus Turbo Accelerator.exe	upx

Unsigned PE 9 IoCs

Checks for missing Authenticode signature.

resource
d5240e25a9f03aeaaa03354de9b38d3279bc8d76e3c80b8323811f7ef01841b6
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack002/components/FFExternalAlert.dll
unpack002/components/npmozax.dll
unpack001/Azureus Turbo Accelerator.exe
unpack004/out.upx
unpack001/SkinMagic.dll
unpack001/packet.dll
unpack001/uninstall.exe

NSIS installer 4 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/uninstall.exe	nsis_installer_1
static1/unpack001/uninstall.exe	nsis_installer_2

Files

d5240e25a9f03aeaaa03354de9b38d3279bc8d76e3c80b8323811f7ef01841b6
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/P2P_Torrent.exe
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:ab:9b:2e:e6:79:14:b7:df:4c:47:95:40:de:c5:61
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/01/2007, 00:00

Not After

23/03/2010, 23:59

Subject

CN=Conduit Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Conduit Ltd.,ST=Israel,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/P2P_Torrent.xpi
.zip
META-INF/manifest.mf
META-INF/zigbert.rsa
META-INF/zigbert.sf
chrome.manifest
chrome/p2p_torrent.jar
.zip
content/ScrollbarBindings.xml
.xml
content/about.xul
.xml
content/alert-bindings.xml
.xml
content/alertAbout.xul
.xml
content/alertMain.xul
.xml
content/alertPreview.xul
.xml
content/alertSettings.xul
.xml
content/autocomplete-menulist.xml
.js .xml polyglot
content/chat-menu-button.xml
.js .xml polyglot
content/contents.rdf
.xml
content/ctoolbar.js
.js
content/enAddEdit.xul
.js .xml polyglot
content/enConfirm.xul
.js .xml polyglot
content/enSettings.xul
.js .xml polyglot
content/enTestAccount.xul
.xml
content/feed-bindings.xml
.js .xml polyglot
content/manageMenu.xul
.xml
content/multicommunity.xul
.xml
content/multicommunity_detected.xul
.js .xml polyglot
content/multicommunity_download.xul
.xml
content/myGadgets_detected.xul
.xml
content/myGadgets_tooltip.xul
.xml
content/oldapi/weather_oldapi.xul
.xml
content/options.xul
.xml
content/popup.xul
.js .xml polyglot
content/popup_chat.xul
.js .xml polyglot
content/popup_miniipage.xul
.js .xml polyglot
content/popup_miniipage_gadget.xul
.js .xml polyglot
content/radio.xml
.xml
content/radio_addEdit.xul
.js .xml polyglot
content/radio_menu.xul
.xml
content/radio_search.xul
.xml
content/radio_volume.xul
.xml
content/toolbarOverlay.xul
.xml
content/toolbarbutton-mirrored-icon.xml
.js .xml polyglot
content/truste.xul
.xml
content/uninstall.xul
.js .xml polyglot
content/weather.xul
.xml
content/weatherRTL.xul
.js .xml polyglot
content/welcome.xul
.xml
content/welcomeRTL.xul
.xml
skin/about_bg.png
.png
skin/about_icon.png
.png
skin/alert/AboutTitleBarImage.gif
.gif
skin/alert/BottomStrip.gif
.gif
skin/alert/CloseButtonAll.gif
.gif
skin/alert/NextAll.gif
.gif
skin/alert/OptionsTitleBarImage.gif
.gif
skin/alert/PrevAll.gif
.gif
skin/alert/SettingsButtonAll.gif
.gif
skin/alert/TopStrip.gif
.gif
skin/alert/TrayIcon.ico
skin/alert/TrayIconAnimated.gif
.gif
skin/alert/TrayIconBlocked.ico
skin/alert/about.css
skin/alert/aboutAll.gif
.gif
skin/alert/alert.css
skin/alert/btn.gif
.gif
skin/alert/btn_dn.gif
.gif
skin/alert/btn_hover.gif
.gif
skin/alert/dot.gif
.gif
skin/alert/faqAll.gif
.gif
skin/alert/feedbackAll.gif
.gif
skin/alert/preview.css
skin/alert/privacyAll.gif
.gif
skin/alert/settings.css
skin/alert/viewRecentTitleBarImage.gif
.gif
skin/blank.png
.png
skin/block.png
.png
skin/chat/HasUsersOnline.gif
.gif
skin/chevron.png
.png
skin/chevron_rtl.png
.png
skin/contents.rdf
.xml
skin/ebdialogstyle.css
skin/ebtoolbarstyle.css
skin/email.png
.png
skin/emailnew.png
.png
skin/emailnewsmall.png
.png
skin/enSound.wav
skin/feed.css
skin/feedRTL_bg.png
.png
skin/feed_bg.png
.png
skin/feed_comment_all.png
.png
skin/feed_delete_all.png
.png
skin/feed_env_read.png
.png
skin/feed_env_unread.png
.png
skin/feed_read_all.png
.png
skin/feed_refresh_all.png
.png
skin/feed_unread_all.png
.png
skin/gadgets/MyStuff.png
.png
skin/gadgets/MyStuffBlinkAndHighlight.gif
.gif
skin/gadgets/MyStuffHighlight.png
.png
skin/gadgets/chat/Close.gif
.gif
skin/gadgets/chat/CloseHover.gif
.gif
skin/gadgets/chat/ClosePressed.gif
.gif
skin/gadgets/chat/EditDown.gif
.gif
skin/gadgets/chat/EditDownHover.gif
.gif
skin/gadgets/chat/EditDownPressed.gif
.gif
skin/gadgets/chat/EditUp.gif
.gif
skin/gadgets/chat/EditUpHover.gif
.gif
skin/gadgets/chat/EditUpPressed.gif
.gif
skin/gadgets/chat/GadgetWindow.css
skin/gadgets/chat/Minimized.gif
.gif
skin/gadgets/chat/MinimizedHover.gif
.gif
skin/gadgets/chat/MinimizedPressed.gif
.gif
skin/gadgets/chat/WindowTop.gif
.gif
skin/gadgets/gadget/Close.gif
.gif
skin/gadgets/gadget/CloseHover.gif
.gif
skin/gadgets/gadget/ClosePressed.gif
.gif
skin/gadgets/gadget/GadgetWindow.css
skin/gadgets/gadget/WindowTop.gif
.gif
skin/gadgets/miniipage/Close.gif
.gif
skin/gadgets/miniipage/CloseHover.gif
.gif
skin/gadgets/miniipage/ClosePressed.gif
.gif
skin/gadgets/miniipage/GadgetWindow.css
skin/gadgets/miniipage/WindowTop.gif
.gif
skin/gadgets/miniipagegadget/Close.gif
.gif
skin/gadgets/miniipagegadget/CloseHover.gif
.gif
skin/gadgets/miniipagegadget/ClosePressed.gif
.gif
skin/gadgets/miniipagegadget/EditDown.gif
.gif
skin/gadgets/miniipagegadget/EditDownHover.gif
.gif
skin/gadgets/miniipagegadget/EditDownPressed.gif
.gif
skin/gadgets/miniipagegadget/EditUp.gif
.gif
skin/gadgets/miniipagegadget/EditUpHover.gif
.gif
skin/gadgets/miniipagegadget/EditUpPressed.gif
.gif
skin/gadgets/miniipagegadget/GadgetWindow.css
skin/gadgets/miniipagegadget/WindowTop.gif
.gif
skin/go_btn.gif
.gif
skin/go_btnRTL.gif
.gif
skin/highlighter.png
.png
skin/highlighterDisabled.png
.png
skin/highlighterSearchTerm.png
.png
skin/highlighter_chevron.png
.png
skin/loading.gif
.gif
skin/manage.gif
.gif
skin/mc_add_active.png
.png
skin/mc_add_candidate.png
.png
skin/mc_add_flashing.gif
.gif
skin/mc_add_inactive.png
.png
skin/mc_community.png
.png
skin/mc_community_dialog.png
.png
skin/mc_community_dialog_over.png
.png
skin/mc_community_selected.png
.png
skin/mc_community_starred.png
.png
skin/mc_options.png
.png
skin/mc_search.png
.png
skin/mc_tooltip_addTo.gif
.gif
skin/mc_tooltip_addTo_dn.gif
.gif
skin/mc_tooltip_addTo_over.gif
.gif
skin/mc_tooltip_close.gif
.gif
skin/mc_tooltip_close_dn.gif
.gif
skin/mc_tooltip_close_over.gif
.gif
skin/mc_tooltip_next.gif
.gif
skin/mc_tooltip_next_dis.gif
.gif
skin/mc_tooltip_next_dn.gif
.gif
skin/mc_tooltip_next_over.gif
.gif
skin/mc_tooltip_prev.gif
.gif
skin/mc_tooltip_prev_dis.gif
.gif
skin/mc_tooltip_prev_dn.gif
.gif
skin/mc_tooltip_prev_over.gif
.gif
skin/mc_tooltip_separator.gif
.gif
skin/minibrowser.png
.png
skin/multicommunityDialog_bg.png
.png
skin/myGadgets_detect_x.png
.png
skin/myGadgets_detect_x_dn.png
.png
skin/myGadgets_detect_x_hover.png
.png
skin/radio/Podcast.png
.png
skin/radio/RadioCombo.gif
.gif
skin/radio/RadioEqualizerLoading.gif
.gif
skin/radio/RadioEqualizerPause.gif
.gif
skin/radio/RadioEqualizerPlay.gif
.gif
skin/radio/RadioEqualizerReal.ico
skin/radio/RadioEqualizerSilent.gif
.gif
skin/radio/RadioError.gif
.gif
skin/radio/RadioErrow.ico
skin/radio/RadioErrowRTL.ico
skin/radio/RadioImgChev.ico
skin/radio/RadioMaxi.gif
.gif
skin/radio/RadioMaxi_dn.gif
.gif
skin/radio/RadioMaxi_on.gif
.gif
skin/radio/RadioMini.gif
.gif
skin/radio/RadioMini_dn.gif
.gif
skin/radio/RadioMini_on.gif
.gif
skin/radio/RadioPause.gif
.gif
skin/radio/RadioPauseChev.ico
skin/radio/RadioPause_dn.gif
.gif
skin/radio/RadioPause_on.gif
.gif
skin/radio/RadioPlay.gif
.gif
skin/radio/RadioPlayChev.ico
skin/radio/RadioPlay_dn.gif
.gif
skin/radio/RadioPlay_on.gif
.gif
skin/radio/RadioSliderBG.gif
.gif
skin/radio/RadioSliderBall.gif
.gif
skin/radio/RadioStop.gif
.gif
skin/radio/RadioStopChev.ico
skin/radio/RadioStop_dn.gif
.gif
skin/radio/RadioStop_on.gif
.gif
skin/radio/RadioStrip.gif
.gif
skin/radio/RadioTooltipPlaying.gif
.gif
skin/radio/RadioTooltipStopped.gif
.gif
skin/radio/RadioVolume.gif
.gif
skin/radio/RadioVolume_dn.gif
.gif
skin/radio/RadioVolume_on.gif
.gif
skin/radio/RealLogo.png
.png
skin/radio/WMPLogo.png
.png
skin/radio/default_skin.xml
.xml
skin/radio/defaultskin/RadioImgChev.ico
skin/radio/defaultskin/RadioPlayChev.ico
skin/radio/defaultskin/RadioStopChev.ico
skin/radio/defaultskin/display.gif
.gif
skin/radio/defaultskin/equalizer_buffering.gif
.gif
skin/radio/defaultskin/equalizer_error.gif
.gif
skin/radio/defaultskin/equalizer_playing.gif
.gif
skin/radio/defaultskin/equalizer_stopped.gif
.gif
skin/radio/defaultskin/equalizer_stopped1.gif
.gif
skin/radio/defaultskin/maxi.png
.png
skin/radio/defaultskin/maxi_dn.png
.png
skin/radio/defaultskin/maxi_over.png
.png
skin/radio/defaultskin/minimize.png
.png
skin/radio/defaultskin/minimize_dn.png
.png
skin/radio/defaultskin/minimize_over.png
.png
skin/radio/defaultskin/pause.gif
.gif
skin/radio/defaultskin/pause_dn.gif
.gif
skin/radio/defaultskin/pause_over.gif
.gif
skin/radio/defaultskin/play.gif
.gif
skin/radio/defaultskin/play_dn.gif
.gif
skin/radio/defaultskin/play_over.gif
.gif
skin/radio/defaultskin/slider.gif
.gif
skin/radio/defaultskin/slider_bg.png
.png
skin/radio/defaultskin/slider_dn.gif
.gif
skin/radio/defaultskin/slider_over.gif
.gif
skin/radio/defaultskin/stop.png
.png
skin/radio/defaultskin/stop_dn.png
.png
skin/radio/defaultskin/stop_over.png
.png
skin/radio/defaultskin/vol.gif
.gif
skin/radio/defaultskin/vol_dn.gif
.gif
skin/radio/defaultskin/vol_over.gif
.gif
skin/resize.gif
.gif
skin/scrollbar/down-active.png
.png
skin/scrollbar/down.png
.png
skin/scrollbar/horizontal-background.png
.png
skin/scrollbar/horizontal-gripper.png
.png
skin/scrollbar/horizontal-thumb-end.png
.png
skin/scrollbar/horizontal-thumb-start.png
.png
skin/scrollbar/horizontal-thumb.png
.png
skin/scrollbar/left-active.png
.png
skin/scrollbar/left.png
.png
skin/scrollbar/right-active.png
.png
skin/scrollbar/right.png
.png
skin/scrollbar/slider.gif
.gif
skin/scrollbar/up-active.png
.png
skin/scrollbar/up.png
.png
skin/scrollbar/vertical-background.png
.png
skin/scrollbar/vertical-gripper.png
.png
skin/scrollbar/vertical-thumb-end.png
.png
skin/scrollbar/vertical-thumb-start.png
.png
skin/scrollbar/vertical-thumb.png
.png
skin/scrollbars.css
skin/searchBox-suggest.xml
.js .xml polyglot
skin/separator.png
.png
skin/splitter.ico
skin/star.png
.png
skin/truste_about.gif
.gif
skin/truste_welcome.gif
.gif
skin/v.png
.png
skin/warning.png
.png
skin/weather.png
.png
skin/weather_bg.png
.png
skin/weather_bg_rtl.png
.png
skin/weather_bullet.png
.png
skin/weather_close.png
.png
skin/weather_close_dn.png
.png
skin/weather_na.png
.png
skin/welcome-rtl/corner_ld.png
.png
skin/welcome-rtl/corner_lup.png
.png
skin/welcome-rtl/corner_rd.png
.png
skin/welcome-rtl/corner_rup.png
.png
skin/welcome-rtl/emailNotifier.gif
.gif
skin/welcome-rtl/grad_dn.png
.png
skin/welcome-rtl/radio.gif
.gif
skin/welcome-rtl/side_left_shadow.png
.png
skin/welcome-rtl/upper_border.png
.png
skin/welcome-rtl/weather.gif
.gif
skin/welcome-rtl/welcomeDialog.css
skin/welcome.bmp
skin/welcome/corner_ld.png
.png
skin/welcome/corner_lup.png
.png
skin/welcome/corner_rd.png
.png
skin/welcome/corner_rup.png
.png
skin/welcome/emailNotifier.gif
.gif
skin/welcome/grad_dn.png
.png
skin/welcome/radio.gif
.gif
skin/welcome/side_left_shadow.png
.png
skin/welcome/upper_border.png
.png
skin/welcome/weather.gif
.gif
skin/welcome/welcomeDialog.css
skin/x.png
.png
components/Conduit.js
.js
components/Conduit.xpt
components/ConduitAutoCompleteSearch.js
.js
components/ConduitAutoCompleteSearch.xpt
components/ConduitToolbar.idl
components/ConduitToolbar.js
.js
components/ConduitToolbar.xpt
components/FFExternalAlert.dll
.dll windows:5 windows x86 arch:x86

1a81604248824a41212cc16521fba112

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Products\WinApplications\FirefoxXPIGenerator\XPISource\components\FFExternalAlert.pdb

Imports

user32

RegisterWindowMessageW

ole32

CoCreateInstance
CLSIDFromString
IIDFromString

nspr4

PR_AtomicIncrement
PR_AtomicDecrement

xpcom

NS_Alloc

kernel32

GetEnvironmentStrings
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
RaiseException
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount

Exports

Exports

NSGetModule

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
components/FFExternalAlert.xpt
components/npmozax.dll
.dll windows:4 windows x86 arch:x86

ac6ed45b5728b3b041051857bb0ebaee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

xpcom_core

?AppendUTF16toUTF8@@YAXPBGAAVnsACString_internal@@@Z
NS_Alloc_P
?NS_NewByteArrayInputStream@@YAIPAPAVnsIByteArrayInputStream@@PADK@Z
NS_Free_P
?Assign@nsSubstring@@QAEXPBGI@Z
?assign_from_gs_cid_with_error@nsCOMPtr_base@@QAEXABVnsGetServiceByCIDWithError@@ABUnsID@@@Z
?AppendUTF16toUTF8@@YAXABVnsAString_internal@@AAVnsACString_internal@@@Z
??0nsGetInterface@@QAE@PAVnsISupports@@PAI@Z
??0nsCreateInstanceByContractID@@QAE@PBDPAVnsISupports@@PAI@Z
?assign_from_helper@nsCOMPtr_base@@QAEXABVnsCOMPtr_helper@@ABUnsID@@@Z
?sCanonicalVTable@nsObsoleteAString@@2PBXB
?sEmptyBuffer@?$nsCharTraits@D@@2PBDB
?Adopt@nsCSubstring@@QAEXPADI@Z
?AssignWithConversion@nsString@@QAEXABVnsACString_internal@@@Z
??1nsAString_internal@@QAE@XZ
?sEmptyBuffer@?$nsCharTraits@G@@2PBGB
?Adopt@nsSubstring@@QAEXPAGI@Z
?AssignWithConversion@nsString@@QAEXPBDH@Z
?CopyUTF8toUTF16@@YAXABVnsACString_internal@@AAVnsAString_internal@@@Z
?sCanonicalVTable@nsObsoleteACString@@2PBXB
?assign_from_qi@nsCOMPtr_base@@QAEXVnsQueryInterface@@ABUnsID@@@Z
?Equals@nsSubstring@@QBEHABV1@@Z
?ToNewUnicode@@YAPAGABVnsAString_internal@@@Z
??_7nsGetInterface@@6B@
?CallGetService@@YAIPBDABUnsID@@PAPAX@Z
?GetWeakReference@nsSupportsWeakReference@@UAGIPAPAVnsIWeakReference@@@Z
??1nsSupportsWeakReference@@IAE@XZ
??_7nsSupportsWeakReference@@6B@
?assign_from_qi_with_error@nsCOMPtr_base@@QAEXABVnsQueryInterfaceWithError@@ABUnsID@@@Z
??1nsACString_internal@@QAE@XZ
?assign_from_gs_contractid_with_error@nsCOMPtr_base@@QAEXABVnsGetServiceByContractIDWithError@@ABUnsID@@@Z
?assign_from_gs_contractid@nsCOMPtr_base@@QAEXVnsGetServiceByContractID@@ABUnsID@@@Z
?assign_with_AddRef@nsCOMPtr_base@@QAEXPAVnsISupports@@@Z
??1nsCOMPtr_base@@QAE@XZ

plc4

PL_strcmp

js3250

JS_GetGlobalObject
JS_CompileScriptForPrincipals
JS_DropPrincipals

kernel32

LocalFree
DebugBreak
WideCharToMultiByte
lstrcpyA
lstrlenW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetProcAddress
FreeLibrary
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
DisableThreadLibraryCalls
CreateEventA
CloseHandle
lstrlenA
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement

user32

TranslateMessage
GetMessageA
MsgWaitForMultipleObjects
PeekMessageA
SetWindowLongA
GetWindowLongA
GetClientRect
LoadStringA
GetSysColor
FillRect
GetWindowDC
ReleaseDC
InvalidateRect
IntersectRect
GetDC
InvalidateRgn
DispatchMessageA

gdi32

SetViewportOrgEx
SelectObject
CreateCompatibleBitmap
DeleteDC
BitBlt
CreateRectRgnIndirect
DPtoLP
LPtoDP
SetMapMode
SelectClipRgn
CreateSolidBrush
CreateCompatibleDC
CombineRgn
DeleteObject

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ole32

ProgIDFromCLSID
CLSIDFromString
CoCreateInstance
StringFromCLSID
CreateBindCtx
CoTaskMemFree

oleaut32

VariantClear
SysStringLen
SysAllocString
SysFreeString
VariantCopy
VariantInit
LoadRegTypeLi
SetErrorInfo
CreateErrorInfo
SafeArrayUnlock
SafeArrayLock
VariantChangeType
SysAllocStringLen

urlmon

CoGetClassObjectFromURL
CreateURLMoniker
RegisterBindStatusCallback
RevokeBindStatusCallback
CreateAsyncBindCtx

msvcrt

_ftol
wcsrchr
swscanf
memset
__CxxFrameHandler
free
??2@YAPAXI@Z
strncpy
_snprintf
strlen
wcscmp
strcmp
realloc
malloc
memcpy
memcmp
wcsncpy
wcslen
_purecall
_wcsicmp
_CxxThrowException
_except_handler3
?terminate@@YAXXZ
_initterm
_adjust_fdiv
__dllonexit
_onexit
_wcsnicmp
??1type_info@@UAE@XZ
sprintf
_strdup
_strnicmp
_stricmp
_wcsdup

plds4

PL_HashTableRemove
PL_NewHashTable
PL_HashTableLookup
PL_HashTableDestroy
PL_HashTableAdd

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
components/nsAxSecurityPolicy.js
.js
components/nsIMozAxPlugin.xpt
defaults/default_radio_skin.xml
.xml
install.rdf
.xml
lib/xpcom.js
.js
searchplugin/conduit.PNG
.png
searchplugin/conduit.gif
.gif
searchplugin/conduit.ico
searchplugin/conduit.src
searchplugin/conduit.xml
version.txt
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/p2p-toolbar-screenshot.bmp
$PLUGINSDIR/setup.ini
Azureus Turbo Accelerator.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 356KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 525KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SkinMagic.dll
.dll windows:4 windows x86 arch:x86

73311293c21223a65c49aac91966fa84

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEnvironmentVariableA
lstrcpynA
CompareStringA
lstrcmpiA
CompareStringW
GetLocaleInfoW
GetTimeZoneInformation
LockResource
LoadResource
lstrcmpA
lstrlenA
GetTempFileNameA
GetTempPathA
FreeLibrary
GetProcessHeap
GlobalUnlock
SizeofResource
FindResourceA
GetTickCount
CreateEventA
CloseHandle
SetEvent
WaitForSingleObject
CreateThread
EnumSystemLocalesA
GetUserDefaultLCID
GetSystemInfo
GetCurrentProcessId
VirtualQuery
WriteProcessMemory
VirtualProtect
FlushInstructionCache
GetWindowsDirectoryA
DeleteFileA
RaiseException
HeapSize
ReadFile
SetFilePointer
SetUnhandledExceptionFilter
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CreateFileA
CreateFileW
SetConsoleCtrlHandler
SetEndOfFile
InterlockedExchange
ExitProcess
GetVersion
GetCommandLineA
lstrcpyA
GetModuleHandleA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
Sleep
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
LoadLibraryA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
HeapAlloc
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapFree
WriteFile
GetProcAddress
HeapDestroy
VirtualFree
HeapCreate
GetEnvironmentStrings
GetEnvironmentVariableA
GetEnvironmentStringsW
FreeEnvironmentStringsA
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoA
GetModuleFileNameA
DeleteCriticalSection
SetHandleCount
GetFileType
GetStdHandle
TlsGetValue
GetCurrentThread
GetLastError
TlsAlloc
SetLastError
TlsFree
GetCurrentProcess
TlsSetValue
GetCurrentThreadId
MulDiv
TerminateProcess
GetSystemTime
GlobalLock
GlobalAlloc
GetVersionExA

user32

GetIconInfo
DrawIconEx
GetClassLongA
InflateRect
EnableScrollBar
GetScrollInfo
GetScrollPos
GetScrollRange
SetScrollInfo
SetScrollPos
SetScrollRange
ShowScrollBar
EnableMenuItem
GetSystemMenu
GetCursor
SetWindowLongA
CharUpperBuffA
IsWindowEnabled
LoadStringA
CallWindowProcA
CallWindowProcW
IsWindowUnicode
SetWindowLongW
GetWindowLongW
DrawFrameControl
DestroyIcon
GetDC
DrawStateA
SetFocus
GetFocus
EnableWindow
SetRect
GetWindowWord
DrawIcon
ValidateRect
GetSubMenu
GetMenuItemID
EqualRect
IsMenu
DrawMenuBar
CharLowerA
CharUpperA
DestroyCursor
LoadImageA
SetCursor
CopyIcon
CopyRect
MapWindowPoints
GetMessagePos
GetCapture
DrawTextExA
CreateIconIndirect
GetMenuItemCount
CreatePopupMenu
InsertMenuItemA
EnumChildWindows
GetMenuItemInfoA
LockWindowUpdate
ScreenToClient
IsWindowVisible
GetCursorPos
DestroyMenu
ReleaseCapture
DestroyWindow
DrawEdge
FillRect
BeginPaint
EndPaint
ClientToScreen
PtInRect
KillTimer
InvalidateRect
SetForegroundWindow
SetTimer
UpdateWindow
UnregisterClassA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetKeyState
CopyAcceleratorTableA
GetMenu
IsRectEmpty
GetWindowInfo
GetWindow
IsZoomed
MoveWindow
ShowWindow
PostMessageA
ReleaseDC
GetWindowDC
GetClientRect
GetWindowTextA
DrawTextA
SetWindowRgn
SetWindowPos
RemovePropA
SetPropA
RedrawWindow
DefWindowProcA
GetSysColorBrush
GetSysColor
GetMessageA
DispatchMessageA
IsWindow
UnhookWindowsHookEx
SetWindowsHookExA
GetParent
GetWindowLongA
GetActiveWindow
GetClassNameA
GetPropA
GetMenuState
GetDesktopWindow
SetCapture
SendMessageA
CallNextHookEx
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
SetMenu

gdi32

GetDCOrgEx
GetClipBox
SetTextColor
SetBkMode
CombineRgn
CreateFontIndirectA
OffsetRgn
CreateRectRgnIndirect
CreateRectRgn
GetStockObject
CreateSolidBrush
BitBlt
ExtCreateRegion
GetRegionData
GetTextExtentPointA
GetDIBits
CreateICA
DeleteDC
SetBkColor
CreateBitmap
GetObjectA
SelectPalette
GetDeviceCaps
RealizePalette
CreateCompatibleDC
StretchBlt
CreateCompatibleBitmap
RestoreDC
SaveDC
Polygon
CreateDIBitmap
CreateDIBSection
SetDIBitsToDevice
SetStretchBltMode
ExtSelectClipRgn
RectVisible
StretchDIBits
PtInRegion
ExcludeClipRect
GetPixel
SetPixel
LineTo
MoveToEx
Rectangle
CreatePen
SelectClipRgn
GetClipRgn
TextOutA
GetTextExtentPoint32A
IntersectClipRect
GetRgnBox
GetTextMetricsA
ExtTextOutA
UnrealizeObject
PatBlt
SetBrushOrgEx
DeleteObject
SelectObject
CreatePatternBrush

imagehlp

ImageDirectoryEntryToData

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueA

shell32

ExtractIconExA

comctl32

ImageList_Remove
ImageList_GetImageCount
ImageList_Destroy
ImageList_GetIcon
ImageList_Create
_TrackMouseEvent
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Draw
ImageList_AddMasked

Exports

Exports

CloseSkinData
CreateBitmapFromSkinImage
CreateImageList
CreateSkinImageRectRegion
CreateSkinImageSectionRegion
DisableWindowScrollbarSkin
DrawSkinImageRect
DrawSkinImageSection
DrawSkinTextEffect
EnableCaptionButtons
EnableWindowScrollbarSkin
ExitSkinMagicLib
GetCaptionButtonState
GetLibVersion
GetSkinBool
GetSkinClientRect
GetSkinColor
GetSkinControlBkColor
GetSkinControlColor
GetSkinControlFont
GetSkinControlID
GetSkinControlRect
GetSkinDWORD
GetSkinFont
GetSkinImageSectionMargins
GetSkinInt
GetSkinMagicErrorCode
GetSkinMenu
GetSkinObjectText
GetSkinString
GetSkinSysColor
GetSkinSysColorBrush
GetSkinTransparentColor
HideTooltip
InitSkinMagicLib
LoadSkinFile
LoadSkinFromResource
OpenSkinData
RedrawCaptionStatic
RegisterSkinWindow
RemoveDialogSkin
RemoveWindowSkin
SetCaptionButtonState
SetCaptionButtonTooltip
SetControlSkin
SetControlTooltip
SetDialogSkin
SetShapeWindowSkin
SetSingleDialogSkin
SetSkinMenu
SetSkinObjectText
SetSkinWindowAccelerator
SetWindowMainMenuImage
SetWindowSkin
ShowSkinObject
ShowTooltipPoint
TrackSkinPopupMenu
TrackSkinPopupMenuEx
UnregisterSkinWindow

Sections

.text
Size: 380KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
packet.dll
.dll windows:4 windows x86 arch:x86

dc8c0d40b34348cdabb47af1cd619332

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DefineDosDeviceW
GetSystemDirectoryW
SetLastError
GetFileAttributesW
CreateFileW
ReadFile
WaitForSingleObject
WriteFile
GetLastError
DeviceIoControl
CreateEventW
GlobalLock
CloseHandle
GlobalAlloc
GlobalFree
GlobalHandle
GlobalUnlock
GetCurrentDirectoryW
SetEvent
VirtualFree
TlsFree
TlsAlloc
HeapAlloc
HeapFree
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
MultiByteToWideChar
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetCPInfo
GetOEMCP
GetACP
GetProcAddress
LoadLibraryA
GetStringTypeA
GetStringTypeW

user32

wsprintfW
MessageBoxW

advapi32

QueryServiceStatus
StartServiceW
RegOpenKeyExW
OpenSCManagerW
OpenServiceW
RegCloseKey
CreateServiceW
CloseServiceHandle
ControlService
RegEnumKeyW
RegQueryValueExW

Exports

Exports

PacketAllocatePacket
PacketCloseAdapter
PacketFreePacket
PacketGetAdapterNames
PacketGetNetInfo
PacketGetNetInfoEx
PacketGetNetType
PacketGetReadEvent
PacketGetStats
PacketGetVersion
PacketInitPacket
PacketLibraryVersion
PacketOpenAdapter
PacketReceivePacket
PacketRequest
PacketSendPacket
PacketSetBpf
PacketSetBuff
PacketSetHwFilter
PacketSetMinToCopy
PacketSetMode
PacketSetNumWrites
PacketSetReadTimeout
PacketStopDriver

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
skin.smf
uninstall.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 36KB

.rsrc Size: 17KB - Virtual size: 17KB

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

81638d02019c0bfcaaf23a9c69f2f12c

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

59:ab:9b:2e:e6:79:14:b7:df:4c:47:95:40:de:c5:61Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 512B - Virtual size: 510B

.rdata Size: 1024B - Virtual size: 533B

.data Size: 512B - Virtual size: 20B

.rsrc Size: 1.4MB - Virtual size: 1.4MB

1a81604248824a41212cc16521fba112

Headers

File Characteristics

PDB Paths

Imports

user32

ole32

nspr4

xpcom

kernel32

Exports

Exports

Sections

.text Size: 30KB - Virtual size: 29KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 36KB

.rsrc
Size: 17KB - Virtual size: 17KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

59:ab:9b:2e:e6:79:14:b7:df:4c:47:95:40:de:c5:61
Certificate

.text
Size: 512B - Virtual size: 510B

.rdata
Size: 1024B - Virtual size: 533B

.data
Size: 512B - Virtual size: 20B

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 30KB - Virtual size: 29KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 6KB

.reloc
Size: 5KB - Virtual size: 4KB

.text
Size: 64KB - Virtual size: 61KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 9KB

UPX0
Size: - Virtual size: 1.4MB

UPX1
Size: 356KB - Virtual size: 360KB

.rsrc
Size: 7KB - Virtual size: 8KB

.text
Size: 525KB - Virtual size: 524KB

.rdata
Size: 124KB - Virtual size: 123KB

.data
Size: 18KB - Virtual size: 1.0MB

.rsrc
Size: 22KB - Virtual size: 21KB

.text
Size: 380KB - Virtual size: 376KB

.rdata
Size: 40KB - Virtual size: 38KB

.data
Size: 24KB - Virtual size: 96KB

.rsrc
Size: 4KB - Virtual size: 1000B

.reloc
Size: 24KB - Virtual size: 22KB