LangDialog
Overview
overview
7Static
static
347ff60e20d...18.exe
windows7-x64
747ff60e20d...18.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...on.dll
windows7-x64
3$PLUGINSDI...on.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...14.dll
windows7-x64
1$PLUGINSDI...14.dll
windows10-2004-x64
1$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...nz.dll
windows7-x64
3$PLUGINSDI...nz.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
47ff60e20d966c4303514727170311cd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
47ff60e20d966c4303514727170311cd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NotifyIcon.dll
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NotifyIcon.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/__7bad6d7563e541d699e172d245f38f14.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/__7bad6d7563e541d699e172d245f38f14.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsisunz.dll
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsisunz.dll
Resource
win10v2004-20240426-en
General
-
Target
47ff60e20d966c4303514727170311cd_JaffaCakes118
-
Size
608KB
-
MD5
47ff60e20d966c4303514727170311cd
-
SHA1
474da16b33b1a8c1a0df984db3ba50775471f446
-
SHA256
03e5e923e50ca2426188d8b9c1c909b9185b1d669f5a555b0cd84ab7ae765b7e
-
SHA512
8c3ca4cb04a5cf24eb4553c7bf5d338056809fe5e03690e030b48f490fa7cd4075500c99a2a7959bcb2289056a6fc3a67066f8dd93ad74b287713047176ca017
-
SSDEEP
12288:J0g/A8x+qkuF35fpKE9E6ZNGMvMGAksruIWqGYuGBXzLnxqDaxyqPsLp3Ay8j:miA8xvkqRKE9wMELkZY33nnyqPCkj
Malware Config
Signatures
-
Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource 47ff60e20d966c4303514727170311cd_JaffaCakes118 unpack001/$PLUGINSDIR/LangDLL.dll unpack001/$PLUGINSDIR/NotifyIcon.dll unpack001/$PLUGINSDIR/System.dll unpack001/$PLUGINSDIR/__7bad6d7563e541d699e172d245f38f14.dll unpack001/$PLUGINSDIR/inetc.dll unpack001/$PLUGINSDIR/nsDialogs.dll unpack001/$PLUGINSDIR/nsisunz.dll
Files
-
47ff60e20d966c4303514727170311cd_JaffaCakes118.exe windows:5 windows x86 arch:x86
be41bf7b8cc010b614bd36bbca606973
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW
user32
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
advapi32
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 458KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/LangDLL.dll.dll windows:5 windows x86 arch:x86
e981c0ab92cb1f191bb5e23392e14796
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalFree
lstrlenW
GlobalAlloc
lstrcmpW
GetModuleHandleW
MulDiv
lstrcpyW
lstrcpynW
user32
SetWindowTextW
SetDlgItemTextW
EndDialog
SendDlgItemMessageW
DialogBoxParamW
LoadIconW
SendMessageW
ShowWindow
GetDC
gdi32
CreateFontIndirectW
GetDeviceCaps
DeleteObject
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 729B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 350B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/NotifyIcon.dll.dll windows:5 windows x86 arch:x86
78155e3314922676e9dbf9f4fff8568c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalFree
GlobalAlloc
GetProcAddress
GetModuleHandleW
lstrlenW
lstrcpyW
lstrcpynW
user32
ShowWindow
OpenIcon
KillTimer
IsIconic
CallWindowProcW
wsprintfW
GetDlgItem
FindWindowExW
GetWindowLongW
SetTimer
LoadImageW
SendMessageW
SetWindowLongW
shell32
Shell_NotifyIconW
Exports
Exports
Icon
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/System.dll.dll windows:5 windows x86 arch:x86
039bcbc605477e8e87ec550c2e60e748
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary
user32
wsprintfW
ole32
CLSIDFromString
StringFromGUID2
Exports
Exports
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/__7bad6d7563e541d699e172d245f38f14.dll.dll windows:5 windows x86 arch:x86
5d2abc5a2e41636665bf1f1d1e21bcd4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
PathFindFileNameW
wininet
InternetSetOptionW
InternetOpenA
InternetCloseHandle
InternetCanonicalizeUrlA
kernel32
WaitForSingleObject
CreateProcessA
GetLastError
CloseHandle
LocalFree
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
LoadLibraryW
lstrlenW
FindFirstFileW
GetSystemDefaultUILanguage
SystemTimeToFileTime
GetTickCount
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetFileAttributesW
CreateDirectoryA
SetCurrentDirectoryA
CopyFileA
EnterCriticalSection
CreateMutexA
FindNextFileW
GetCurrentDirectoryA
GetUserDefaultUILanguage
ReleaseMutex
GetTempPathA
GetSystemTime
DeleteFileA
CreateThread
SetFilePointer
CreateDirectoryW
SetFileTime
WriteFile
CreateFileW
MultiByteToWideChar
GetCurrentDirectoryW
LocalFileTimeToFileTime
GetProcAddress
InterlockedCompareExchange
GetLocalTime
FileTimeToSystemTime
GetFileInformationByHandle
GetFileAttributesA
GetCurrentProcessId
GetTempFileNameA
GetModuleFileNameA
GetCurrentProcess
GetModuleHandleW
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
GetVersionExA
ExpandEnvironmentStringsA
GetComputerNameW
GetVersionExW
GetUserDefaultLCID
GetFullPathNameA
SetStdHandle
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapSize
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ExitProcess
HeapDestroy
HeapCreate
GetStartupInfoW
SetHandleCount
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CompareStringW
GetCPInfo
LCMapStringW
FindFirstFileExA
GetDriveTypeA
FindClose
FileTimeToLocalFileTime
ExitThread
GetCurrentThreadId
GetFileSizeEx
ReadFile
Sleep
GetModuleFileNameW
GetUserDefaultLangID
GetFileSize
GetCommandLineW
CreateFileA
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
RaiseException
RtlUnwind
GetCommandLineA
HeapReAlloc
GetSystemTimeAsFileTime
GetDriveTypeW
HeapAlloc
HeapFree
InterlockedExchange
DecodePointer
EncodePointer
GetStdHandle
GetFileType
WaitForMultipleObjects
PeekNamedPipe
SleepEx
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
VerSetConditionMask
VerifyVersionInfoA
LoadLibraryA
FormatMessageA
SetLastError
WriteConsoleW
SetEnvironmentVariableA
SetEndOfFile
lstrlenA
GetProcessHeap
user32
SetCursor
IsCharAlphaW
CallWindowProcW
SendMessageW
CreateWindowExW
ShowWindow
SetWindowLongW
GetParent
DestroyWindow
DefWindowProcW
GetWindowLongW
RegisterClassExW
GetClientRect
GetPropW
SetPropW
LoadCursorW
RemovePropW
DispatchMessageW
MoveWindow
MapWindowPoints
MessageBoxA
TranslateMessage
wsprintfW
GetMessageW
GetWindowRect
UpdateWindow
BringWindowToTop
SetFocus
SetTimer
SetWindowPos
GetDesktopWindow
SetParent
KillTimer
gdi32
SetTextColor
CreateFontIndirectW
DeleteObject
GetObjectW
GetStockObject
advapi32
CryptCreateHash
CryptHashData
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
RegEnumValueA
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExW
CryptAcquireContextA
shell32
FindExecutableA
ShellExecuteA
ole32
OleInitialize
OleCreate
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoInitialize
OleSetContainedObject
OleUninitialize
oleaut32
SysAllocString
VariantClear
VariantInit
SysFreeString
ws2_32
WSACleanup
WSAStartup
WSASetLastError
recvfrom
sendto
getaddrinfo
WSAGetLastError
select
recv
send
WSAIoctl
gethostname
ioctlsocket
freeaddrinfo
listen
accept
connect
socket
setsockopt
closesocket
getsockname
ntohs
bind
getpeername
getsockopt
__WSAFDIsSet
htons
wldap32
ord200
ord35
ord32
ord30
ord26
ord50
ord60
ord143
ord211
ord22
ord33
ord301
ord79
ord27
ord46
ord41
normaliz
IdnToAscii
Exports
Exports
__047a5d636947433f9440e45f67411649
__069c61a025bc4fe9a2200fb3720c0376
__079ca69190a244dba674b4d585c6794d
__0885ced081d04a2ca63ea7340d428100
__0b4055d1df784359a5c5ff017086d0d3
__0e03494f3de44417ade0e68db82a8dbe
__0fcf96c7346a4f64a3b6e5427e5cd3f4
__108e1051f9fa4b48a72a65cd7e452d12
__13eec8e3b53c46fda17c5b8a7225ca22
__17e614b67223406182f22ef321be88b4
__17eb3f955958433fa06089df4069fb9b
__1c0fc16b9b0f412f94992b95015dbff6
__1d52a61a896d4a8b866ff523937c473c
__1fe6d190f63a4207a68e422093d9510f
__28289f37857c4071a958f97dd1ff26d8
__2927c7d0d72c46b2b20fed7a3e81649f
__2d87531f66d04875b35b9c3310f77559
__2e454596de854e87ac5ed848774ccc57
__2efcb870a26340eb9e876b6e22930982
__3293b81362ad442189c5e722bb9b30bf
__33a919c61f7d4d4188e3e943d2945de6
__3c3745222abc49f1af13ff40ab77794c
__3e9fbb435242492bb993c668cf0d1f11
__408496bca8be467f8f6b22750a6bac13
__4188ace43022416d84ad32c955c05171
__466dc79f728a49299f52f8486e52410f
__4d109c7fa58646b289cdb88cc6f7ea58
__4e41b669f58d4183b8cbc3719c4b3bdc
__5052dc69ba4a497892c98b921b989b02
__50f9ef7a5dd741bcb347df06ead33986
__5412975228434e7bbc0f1b22d9a16224
__54ab952059c74081a2b82900a798bff4
__552bb60ddcf6482e8f3adedf8283e48d
__55d29d75b3c6484bbed2a9da09083d95
__56ff010116bf42eba194118920202791
__57012f6696ea4ed5915da4fb2b90ecc0
__57f8aed52fe64c56bcf69b1edf5a3962
__593d6cd7de7144d39002595e268fbb64
__5bd23717889b465099491eb2718702a8
__5d6013ab3aad48b2854c6507cd37d76e
__5d9fe0a31505491e8ebfabe0ad5374bd
__5dafdddadef346d2b3b92ae95676bfe4
__5eb5ca61a3e44447a9a19a11f0cf7263
__5ed34d31c9ec42c1861c39d133185d78
__5f9a54485ae44738a738c9d9ef7a6d75
__653a3ea5239e455395b25f12a169fb39
__67895b63335547f8a55a9a4b94c72c95
__69cd1db211314475afafe6c507e8641d
__6b098d45d3d343cdb79370dbe15592d1
__6d2eb76cb9514df998fe0dc235a6a083
__71bdfab5dea94ed3ac85955ab6e3652b
__73b1a966b35e43ceaa020596e4963879
__74067c6848cc413491057b4624bc8c1a
__78931163c70d438888aa65a8a5384781
__7918246c1b984ee48a3662528b2409ad
__7c0332b3e9d64a3fb13ac8dbf264fc80
__7ce3e14d0b764b9fac790e19e14ee214
__7ddb7bfb8a5648ae9961446e9803cc81
__7ec7be301bbc47d99dd3101b6663c9af
__7faf3cfa467d41799a729f8341cdb126
__830862bb65ba44b8ba8c22653884fddc
__83a1ee6b19c24056b0cf40230eca5abd
__8d8a99036892458b9d113c78bc4eb597
__8e486919bf0b4592b0da7c2d5f430a5d
__8f305946b7ed45cda4e4e65d74404065
__902f8ba1eb8d4db98eb7b4c06fa766b2
__90a8c15cea6543d599501720e26e5f20
__94089f9d5b6440f3b69755729febac58
__97269c458ea840f780e0a60a0834aada
__9bdcc69f616e4eebb3b0223f4e0e87f7
__9ee11c3fe6e5498eaed832b9dc45e677
__a3bbc70e2c814c9293de6aef4f346c16
__a5f1dbcbbf0946efae8c27026d2c18be
__a622db02e24e48cb9f53c118c18d07d1
__a6b8fe41df184ec0a004d538b942310b
__a77c3ad59ec74e4182c01dd764046f54
__a81ba1e865fd40db944b7dfcd8d0854e
__a828791b46904565bbf793dba80b4e15
__a927580e3bff4758bdd1d100911fbd1b
__a9cdd5b89fca4cb68a3827deb4c1f14e
__aa88fea7ff5148f9b26f9d5c880714cc
__aae4fa53d8af4349a2bf1f10228e24c3
__ab1a69a8b0fb412fb68e6d51b003d6ee
__aba2e1f0c2594305b8ae334bf54e097c
__acd64b63a84545d0a4d99a28a25ddfc6
__adb4dca648574c978477cffdb1783195
__ae507e521c9a4f7486b2d6bcccb10403
__af0645c65ab2430488f10629008088df
__b3604fecf26e40b7821f0f5306121cdd
__b56a90f98d3a40909844d217fb865124
__b714a6f2fc704b0885e42eea060d9acc
__b7234b10d70c406da7b63b7080b78882
__bac328ff153d46d082cd876af8c45897
__bbd9b440fc3a4d17b4864ccf6b9e3f16
__bc3e100b99c34ee8a487961a98623e0f
__c73811f71a0b4f93b6698e27173c640a
__c7d9d588e61546d7966ad4e2eb36144c
__c7ef6da311a64156a644b19699242f8b
__c94aac12eed9444c80d70388cf46119a
__c99a4acdee9e4a6b8e6ee30e507d7877
__ca94f4d81b8148df89eb9b0c768f4ddd
__cd04b5fc8a864fe8a9a156fda36630ef
__cd6440bbc9ff4a988706d6db661f146c
__cdaaf754247641ce95e56d56966d5ad8
__d09440693e2c4e2989aac9fbf0dd7b6d
__d1c1e17fafdc49928f664616831d0263
__e1877c7c1b3144c297c5dde384c82e7d
__e37083ea0de64b25aac72b6ac5f2c174
__eab6a7014b094c86a24057f6dafa38ed
__ef122f159a4d4a97bf9de549ca1d614d
__f0845fd6820b45c5a77632338ad73baa
__f0de33a1f4fb48cdb445c7214e0d98b7
__f278e4b20286448690eb7d2b7e63babb
__f4f563d0f54a486fbd2611fb2c9ade06
__f6663450a1364ac9b69a857134ab409a
__fa4c2e58e3824a09951a56a54dec006d
__fb7f69efe62b433ca3c07d7b56b35ffd
__fe99c2fb59934a8480339b182769ae06
__fff511b7ae5c4bc8aa1345812f3bcc3b
Sections
.text Size: 757KB - Virtual size: 756KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/inetc.dll.dll windows:4 windows x86 arch:x86
86cdacc6fa5e3ff4938d358350751516
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
wcstol
_adjust_fdiv
malloc
_initterm
free
strlen
strchr
strrchr
wcsrchr
wcstoul
wcsstr
wcschr
memset
_chkesp
kernel32
DeleteFileW
WideCharToMultiByte
CreateFileA
CreateThread
WaitForSingleObject
TerminateThread
GetModuleHandleW
MulDiv
lstrcpyW
GlobalAlloc
LoadLibraryW
GetProcAddress
lstrcmpiW
CreateFileW
lstrlenW
WriteFile
ReadFile
lstrcmpW
lstrcpynW
GetLastError
GetFileSize
GlobalFree
CloseHandle
SleepEx
SetFilePointer
GetTickCount
lstrcatW
user32
MessageBoxW
GetParent
ShowWindow
SetWindowLongW
IsWindow
SetWindowTextW
SendDlgItemMessageW
GetDlgItem
PostMessageW
GetWindowTextW
SendMessageW
SetDlgItemTextW
SetWindowPos
SystemParametersInfoW
GetClientRect
GetWindowRect
SetTimer
LoadIconW
DestroyWindow
KillTimer
UpdateWindow
RedrawWindow
DispatchMessageW
TranslateMessage
IsDialogMessageW
GetMessageW
IsWindowVisible
EnableWindow
CreateDialogParamW
FindWindowExW
wsprintfA
wsprintfW
GetWindowLongW
wininet
HttpSendRequestW
HttpSendRequestExW
HttpQueryInfoW
FtpCreateDirectoryW
FtpOpenFileW
InternetGetLastResponseInfoW
InternetSetFilePointer
InternetSetOptionW
InternetQueryOptionW
HttpAddRequestHeadersA
InternetCloseHandle
InternetErrorDlg
HttpAddRequestHeadersW
HttpOpenRequestW
HttpEndRequestW
InternetConnectW
InternetCrackUrlW
InternetOpenW
InternetReadFile
InternetWriteFile
comctl32
ord17
Exports
Exports
get
head
post
put
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/modern-wizard.bmp
-
$PLUGINSDIR/nsDialogs.dll.dll windows:5 windows x86 arch:x86
9ea5bdc8c90dfcffe309465c26c89758
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
MulDiv
lstrlenW
HeapFree
GetProcessHeap
lstrcmpiW
HeapReAlloc
lstrcpynW
GetFileAttributesW
lstrcpyW
GetCurrentDirectoryW
SetCurrentDirectoryW
HeapAlloc
GlobalFree
user32
LoadCursorW
RemovePropW
DrawFocusRect
GetPropW
DrawTextW
GetWindowTextW
GetDlgItem
SetWindowLongW
SetWindowPos
CreateDialogParamW
MapWindowPoints
GetWindowRect
SetCursor
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
GetClientRect
CharPrevW
CallWindowProcW
SetPropW
DestroyWindow
MapDialogRect
CharNextW
SendMessageW
GetWindowLongW
gdi32
SetTextColor
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
comdlg32
GetSaveFileNameW
CommDlgExtendedError
GetOpenFileNameW
ole32
CoTaskMemFree
Exports
Exports
Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 590B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/nsisunz.dll.dll windows:5 windows x86 arch:x86
1b37562e8104552588ae892e11fcdff2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryW
lstrcpyW
GetVersion
lstrlenW
lstrcatW
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
lstrcpynW
lstrcmpiW
lstrcmpW
GlobalFree
GlobalAlloc
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
CloseHandle
WriteFile
GetConsoleCP
GetConsoleMode
RtlUnwind
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileW
InitializeCriticalSectionAndSpinCount
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
SetEndOfFile
GetProcessHeap
GetLocaleInfoA
user32
MessageBoxW
CharPrevW
PeekMessageW
TranslateMessage
DispatchMessageW
FindWindowExW
GetDlgItem
SendMessageW
wsprintfW
Exports
Exports
Unzip
UnzipToLog
UnzipToStack
extract_RunDLL
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ