4be13ac52504e560ca729ec5ad69534e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

4be13ac52504e560ca729ec5ad69534e_JaffaCakes118
Size

2.0MB
MD5

4be13ac52504e560ca729ec5ad69534e
SHA1

d7a3197ccf6077ae5aecb73c2b09358515a1d525
SHA256

d7da206b085741953867b84b5cedd11eba843f35e1093384b8306b91c5a091a3
SHA512

4a35814a04aa5ae835f69fdc95b316ff9f8301e58c20737f4a90d16ed91506ec5436ee47f851c5c4233549c86f4ba1780796e67a7db938157c40ecb7aa64bb6a
SSDEEP

49152:iQAkRhHlShRKHTs/JW8UPuOMkFWqasbYF/kIUF5:bAkzMTVBW7PfMkFZzYF/1U

Score

3^/10

Malware Config

Signatures

Unsigned PE 7 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/ListDir.exe
unpack001/TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/RegCleaner_Ver1.002.exe
unpack001/TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/restartHub.exe
unpack001/TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.08_v3.exe
unpack001/TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.32_v4.exe
unpack001/TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.50_v5_K0928.exe
unpack001/TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.64_v3_L0104.exe

Files

4be13ac52504e560ca729ec5ad69534e_JaffaCakes118
.rar
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/CapacitySetting.ini
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/CardMode/Hynix/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/CardMode/Intel/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/CardMode/Micron/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/CardMode/Samsung/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/CardMode/SanDisk/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/CardMode/Toshiba/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/DBSIZE.INI
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/FlashID.ini
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/ListDir.exe
.exe windows:4 windows x86 arch:x86

561ebbbabd6f38569fb7942ad2bbacf5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord641
ord2514
ord1199
ord1247
ord5265
ord4376
ord4998
ord6052
ord4078
ord1775
ord1089
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord1146
ord1168
ord324
ord4234
ord4710
ord2379
ord755
ord470
ord4224
ord6385
ord860
ord1979
ord5186
ord665
ord800
ord2818
ord540
ord354
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4407
ord4673
ord1576

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
sprintf
_mbscmp
__CxxFrameHandler
_setmbcp
__getmainargs

kernel32

FindClose
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetLastError

user32

IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
EnableWindow
wsprintfA
LoadIconA
SendMessageA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/README.TXT
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3252B/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3252C/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3254AE/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3255AA/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3255AB/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3255ENA1/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3257AA/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3257ENAA/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3257ENAA/HY/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3257ENAA/IM/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3257ENAA/Samsung/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3257ENAA/TS/24nm MLC/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3257ENAA/TS/24nm TLC/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3257ENAA/TS/32nm TLC/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3257ENAA/TS/iNand/32nm MLC/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_3257ENAA/TS/iNand/32nm TLC/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_325AC/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_ALL_DBF/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_ALL_FORCEFW/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_ALL_FORCEID/SM321AC/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_ALL_FORCEID/SM321BB/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_ALL_FORCEID/SM321BC/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_ALL_FORCEID/SM324BB/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_ALL_FORCEID/SM324BC/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_ALL_FORCEID/SM3252A/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_ALL_FORCEID/SM3252B/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_ALL_FORCEID/SM3252C/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_ALL_FORCEID/SM325AB/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_ALL_FORCEID/SM325AC/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/CapacitySetting_testlog.txt
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/DBSIZE.INI
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/FactoryDriver/Documents_for_SMI_Driver.doc
.doc windows office2003
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/FactoryDriver/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/FactoryDriver/Win2000/SMI32X2K.INF
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/FactoryDriver/Win2000/Win2000/usbstor.inf
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/FactoryDriver/Win2000/smi32xPC.INF
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/FactoryDriver/WinXP/SMI32X2K.INF
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/FactoryDriver/WinXP/WinXP/usbstor.inf
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/FactoryDriver/WinXP/smi32xPC.INF
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/File.Lst
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/LocalSetting.INI
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/LogFile.INI
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/MyWorkOrder_testlog.txt
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/NetRecorder_120630.txt
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/RegCleaner_Ver1.002.exe
.exe windows:4 windows x86 arch:x86

2321299a79b7125962363ed2b51b8b8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiEnumDeviceInfo
SetupDiRemoveDevice
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiRemoveDeviceInterface

kernel32

RtlUnwind
HeapFree
HeapAlloc
GetStartupInfoA
RaiseException
HeapReAlloc
HeapSize
GetACP
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
ExitProcess
TerminateProcess
GlobalAddAtomA
GetProcAddress
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CopyFileA
FlushFileBuffers
CloseHandle
SetFilePointer
WriteFile
SetErrorMode
GetCurrentProcess
SizeofResource
GetOEMCP
GetCPInfo
WritePrivateProfileStringA
GetProcessVersion
GlobalFlags
TlsSetValue
TlsGetValue
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
EnterCriticalSection
TlsAlloc
LocalAlloc
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MulDiv
lstrcpynA
GetLastError
FreeLibrary
SetLastError
LoadLibraryA
GlobalGetAtomNameA
GetVersion
lstrcatA
VirtualAlloc
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GlobalUnlock
IsBadWritePtr
GlobalFree
LockResource
FindResourceA
LoadResource
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
LocalFree
WideCharToMultiByte
Sleep
GetWindowsDirectoryA
lstrlenA
GetCommandLineA
UnhandledExceptionFilter
FreeEnvironmentStringsA
VirtualFree
GetModuleFileNameA
GetProfileStringA

user32

SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
ShowWindow
ReleaseDC
GetDC
WindowFromPoint
LoadStringA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
DestroyMenu
InflateRect
InvalidateRect
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
UpdateWindow
GetWindowTextLengthA
GetDlgCtrlID
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
SendDlgItemMessageA
GetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
KillTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
FindWindowExA
PostMessageA
MapWindowPoints
SetTimer
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
DefWindowProcA
CreateWindowExA
GetMenuItemID
GetWindowTextA
EnableWindow
LoadIconA
PeekMessageA
DispatchMessageA
TranslateMessage
GetWindow
SetForegroundWindow
IntersectRect
GetMessagePos
ShowCaret
IsWindowUnicode
CharNextA
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
HideCaret
UnregisterClassA

gdi32

CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
PatBlt
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
CreateSolidBrush
RectVisible
TextOutA
PtVisible
Escape
ExtTextOutA
CreateDIBitmap
CreateCompatibleDC
GetTextExtentPointA
BitBlt

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegEnumKeyA
RegCreateKeyExA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA

comctl32

ord17

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/default_testlog.txt
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/restartHub.exe
.exe windows:4 windows x86 arch:x86

f3fdfba1b85d1c281e0990619b99af94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
CM_Get_DevNode_Status
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList

kernel32

HeapFree
GetSystemInfo
VirtualProtect
GetLocaleInfoA
CloseHandle
SetStdHandle
GetStringTypeW
GetLastError
GetModuleHandleA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
FlushFileBuffers
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/Update.INI
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/default.ini
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.08_v3.exe
.exe windows:4 windows x86 arch:x86

6660330ab6d99fed325926fa7ee803ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
CM_Remove_SubTree
CM_Locate_DevNodeA
CM_Get_DevNode_Registry_PropertyA
CM_Get_Child
CM_Get_Sibling
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
CM_Get_Parent
CM_Request_Device_EjectW
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA

newdev

UpdateDriverForPlugAndPlayDevicesA

kernel32

InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SizeofResource
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
GetTimeZoneInformation
GetFileType
ExitProcess
TerminateProcess
GetStartupInfoA
RaiseException
ExitThread
GetACP
HeapSize
HeapReAlloc
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetStdHandle
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
GetFileTime
IsBadCodePtr
GetExitCodeProcess
CreateProcessA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
OutputDebugStringA
GetProcAddress
GetModuleHandleA
Sleep
MulDiv
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpyA
CloseHandle
SetCommState
GetCommState
SetCommTimeouts
GetCommTimeouts
CreateFileA
ReadFile
WriteFile
SetThreadPriority
CreateThread
CreateEventA
SetPriorityClass
GetCurrentProcess
WaitForSingleObject
SetEvent
ResetEvent
CopyFileA
GetFileSize
GetTickCount
CreateDirectoryA
GetFileAttributesA
FindClose
GetLastError
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentThread
lstrlenW
SuspendThread
ResumeThread
lstrcmpA
GetThreadLocale
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
DuplicateHandle
FindResourceA
LoadResource
LockResource
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
InterlockedDecrement
InterlockedIncrement
GlobalFree
lstrcpynA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
LocalAlloc
SetLastError
GetWindowsDirectoryA
GetCurrentDirectoryA
SetFileAttributesA
RemoveDirectoryA
FormatMessageA
LocalFree
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcatA
MultiByteToWideChar
GetDriveTypeW
GetVolumeInformationW
WideCharToMultiByte
SetVolumeLabelW
FreeLibrary
LoadLibraryA
FlushFileBuffers
GetVolumeInformationA
GetVersionExA
GetDriveTypeA
QueryDosDeviceA
GetSystemTime
GetComputerNameA
GetCommandLineA
MoveFileA
DeviceIoControl
GetLocalTime
GetModuleFileNameA
DeleteFileA
GlobalSize
lstrlenA
IsBadReadPtr

user32

PostQuitMessage
SetCursor
SetWindowContextHelpId
MapDialogRect
DestroyMenu
GetDesktopWindow
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
PostThreadMessageA
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemInt
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScrollWindow
GetScrollInfo
GetScrollPos
GetTopWindow
IsChild
WinHelpA
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
IsClipboardFormatAvailable
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
CharUpperA
FindWindowExA
EnumWindows
SetWindowPos
LoadCursorA
RegisterClassA
CreateWindowExA
DestroyWindow
DefWindowProcA
ModifyMenuA
GetMenuItemID
GetMenuItemCount
ScreenToClient
GetMenuState
IsIconic
GetSystemMenu
SetMenu
GetMenu
LoadMenuA
GetSubMenu
EnableMenuItem
CheckMenuItem
AppendMenuA
DrawIcon
GetSystemMetrics
EnumChildWindows
GetWindowTextA
IsWindowVisible
IsWindowEnabled
MessageBoxA
GetMessagePos
LockWindowUpdate
CopyRect
UnregisterClassA
HideCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
SendMessageA
GetParent
EnableWindow
LoadIconA
GetClassNameA
GetClipboardData
ShowCaret
SetCaretPos
CreateCaret
PtInRect
RegisterClipboardFormatA
SetScrollInfo
EnableScrollBar
DragDetect
SetScrollPos
DestroyCaret
OpenClipboard
EmptyClipboard
GetMessageA
ValidateRect
LoadStringA
EndPaint
BeginPaint
SetPropA
GetWindowDC
SetClipboardData
CloseClipboard
GetWindow
MessageBeep
CallWindowProcA
wsprintfA
GetFocus
SetCapture
KillTimer
SetTimer
InvalidateRect
ReleaseCapture
PostMessageA
GetKeyState
GetSysColor
SetRect
DrawFocusRect
OffsetRect
WindowFromPoint
GetCursorPos
GetCapture
ClientToScreen
GetNextDlgGroupItem
DispatchMessageA
TranslateMessage
PeekMessageA
RedrawWindow
SetWindowLongA
GetWindowLongA
GetKeyNameTextA
LoadImageA
IsWindow
InflateRect
LoadBitmapA
ReleaseDC
GetDC
GetClientRect
UpdateWindow
ShowWindow
FindWindowA
FillRect
DrawEdge
TabbedTextOutA
DrawTextA
GrayStringA
SetWindowRgn
GetWindowRect
GetClassInfoA

gdi32

RectVisible
Rectangle
RoundRect
StretchBlt
GetPixel
TextOutA
ExtTextOutA
GetTextExtentPoint32A
GetTextMetricsA
Escape
CreateFontA
GetCharWidthA
SetBoundsRect
GetClipBox
SetTextColor
SetBkColor
PatBlt
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
PtVisible
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
CreateHatchBrush
CopyMetaFileA
GetTextColor
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
CreatePen
SelectPalette
GetTextExtentPointA
RealizePalette
CreateCompatibleDC
BitBlt
DeleteDC
GetDeviceCaps
CreateCompatibleBitmap
CreateFontIndirectA
CreateBitmap
CreateSolidBrush
SelectObject
CreateRectRgn
CombineRgn
SelectClipRgn
GetObjectA
DeleteObject
SetWindowExtEx
CreateDIBitmap
GetStockObject

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCreateKeyExA

shell32

ShellExecuteA

comctl32

_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord8

ole32

CoTaskMemFree
CoRegisterMessageFilter
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
CoTaskMemAlloc
OleDuplicateData
ReleaseStgMedium
CreateStreamOnHGlobal
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize

olepro32

ord253

oleaut32

OleLoadPicturePath
VariantCopy
VariantClear
VariantChangeType
SysAllocStringLen
SysFreeString
SysAllocString
SysAllocStringByteLen
VariantTimeToSystemTime
VarDateFromStr
VarBstrFromDate
SysStringLen
LoadTypeLi

wsock32

closesocket
sendto
recvfrom
inet_ntoa
WSAAsyncSelect
htonl
bind
accept
WSACleanup
WSAGetLastError
WSASetLastError
listen
send
recv
WSAStartup
socket
ioctlsocket
htons
connect

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.32_v4.exe
.exe windows:4 windows x86 arch:x86

0422755530897dceb2aa61d5664b7bc6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
CM_Remove_SubTree
CM_Locate_DevNodeA
CM_Get_DevNode_Registry_PropertyA
CM_Get_Child
CM_Get_Sibling
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
CM_Get_Parent
CM_Request_Device_EjectW
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA

newdev

UpdateDriverForPlugAndPlayDevicesA

dbghelp

MakeSureDirectoryPathExists

kernel32

SuspendThread
lstrlenW
GetCurrentThread
GetFileTime
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SizeofResource
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
GetFileType
GetTimeZoneInformation
ExitProcess
TerminateProcess
GetStartupInfoA
RaiseException
ExitThread
GetACP
HeapSize
HeapReAlloc
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetStdHandle
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetExitCodeProcess
CreateProcessA
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalLock
ResumeThread
GetProfileStringA
GetSystemDirectoryA
MoveFileExA
GetProcAddress
GetModuleHandleA
Sleep
MulDiv
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpyA
CloseHandle
SetCommState
GetCommState
SetCommTimeouts
GetCommTimeouts
CreateFileA
ReadFile
WriteFile
SetThreadPriority
CreateThread
CreateEventA
SetPriorityClass
GetCurrentProcess
WaitForSingleObject
SetEvent
ResetEvent
CopyFileA
GetFileSize
GetTickCount
CreateDirectoryA
GetFileAttributesA
FindClose
GetLastError
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenA
GlobalSize
DeleteFileA
GetModuleFileNameA
GetLocalTime
GetVolumeInformationA
OutputDebugStringA
DeviceIoControl
MoveFileA
GetCommandLineA
GetComputerNameA
GetSystemTime
QueryDosDeviceA
GetDriveTypeA
GetVersionExA
FlushFileBuffers
LoadLibraryA
FreeLibrary
SetVolumeLabelW
LocalUnlock
WideCharToMultiByte
GetVolumeInformationW
GetDriveTypeW
MultiByteToWideChar
lstrcatA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFree
FormatMessageA
RemoveDirectoryA
SetFileAttributesA
GetCurrentDirectoryA
GlobalReAlloc
lstrcmpA
GetThreadLocale
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
DuplicateHandle
FindResourceA
LoadResource
LockResource
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
InterlockedDecrement
InterlockedIncrement
GlobalFree
lstrcpynA
GetPrivateProfileSectionNamesA
WritePrivateProfileStructA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
LocalAlloc
SetLastError
GetWindowsDirectoryA

user32

CopyAcceleratorTableA
CharNextA
GetSysColorBrush
DestroyMenu
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
IsClipboardFormatAvailable
GetMessageA
ValidateRect
GetDesktopWindow
LoadStringA
EndPaint
BeginPaint
GetWindowDC
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemInt
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
AdjustWindowRectEx
ScrollWindow
GetScrollInfo
GetScrollPos
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
UnregisterClassA
HideCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
SendMessageA
GetParent
EnableWindow
CharUpperA
FindWindowExA
EnumWindows
SetWindowPos
LoadCursorA
RegisterClassA
CreateWindowExA
DestroyWindow
DefWindowProcA
ModifyMenuA
GetMenuItemID
GetMenuItemCount
ScreenToClient
GetMenuState
IsIconic
PostThreadMessageA
GetSystemMenu
SetMenu
GetMenu
LoadMenuA
RemoveMenu
GetSubMenu
DrawIcon
GetSystemMetrics
EnableMenuItem
CheckMenuItem
AppendMenuA
ReleaseCapture
PostMessageA
GetKeyState
GetSysColor
SetRect
DrawFocusRect
OffsetRect
SetFocus
WindowFromPoint
GetCursorPos
GetCapture
ClientToScreen
GetNextDlgGroupItem
DispatchMessageA
TranslateMessage
PeekMessageA
RedrawWindow
SetWindowLongA
GetWindowLongA
GetKeyNameTextA
LoadImageA
IsWindow
InflateRect
LoadBitmapA
ReleaseDC
GetDC
GetClientRect
UpdateWindow
ShowWindow
FindWindowA
FillRect
DrawEdge
TabbedTextOutA
DrawTextA
GrayStringA
SetWindowRgn
EnumChildWindows
GetWindowTextA
IsWindowVisible
IsWindowEnabled
MessageBoxA
GetMessagePos
LockWindowUpdate
CopyRect
LoadIconA
GetClassNameA
GetClipboardData
SetCursor
ShowCaret
SetCaretPos
CreateCaret
PtInRect
RegisterClipboardFormatA
SetScrollInfo
EnableScrollBar
DragDetect
SetScrollPos
DestroyCaret
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetWindow
MessageBeep
CallWindowProcA
wsprintfA
GetFocus
SetCapture
KillTimer
SetTimer
InvalidateRect
GetWindowRect

gdi32

RectVisible
Rectangle
RoundRect
StretchBlt
GetPixel
TextOutA
ExtTextOutA
GetTextExtentPoint32A
GetTextMetricsA
Escape
CreateFontA
GetCharWidthA
SetBoundsRect
Polygon
GetClipBox
SetTextColor
SetBkColor
PatBlt
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
PtVisible
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
CreateHatchBrush
CopyMetaFileA
GetTextColor
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
CreatePen
SelectPalette
GetTextExtentPointA
RealizePalette
CreateCompatibleDC
BitBlt
DeleteDC
GetDeviceCaps
CreateCompatibleBitmap
CreateFontIndirectA
CreateBitmap
CreateSolidBrush
SelectObject
CreateRectRgn
CombineRgn
GetStockObject
DeleteObject
GetObjectA
CreateDIBitmap
SelectClipRgn

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCreateKeyExA

shell32

ShellExecuteA

comctl32

_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord8

ole32

CreateStreamOnHGlobal
OleDuplicateData
CoTaskMemAlloc
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoTaskMemFree
ReleaseStgMedium
StgOpenStorageOnILockBytes
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoDisconnectObject
CreateILockBytesOnHGlobal
CoRevokeClassObject
StgCreateDocfileOnILockBytes
OleGetClipboard

olepro32

ord253

oleaut32

LoadTypeLi
VariantTimeToSystemTime
VarBstrFromDate
VarDateFromStr
SysAllocStringByteLen
SysAllocString
SysFreeString
SysAllocStringLen
VariantChangeType
VariantClear
VariantCopy
OleLoadPicturePath
SysStringLen

wsock32

closesocket
connect
htons
ioctlsocket
socket
WSAStartup
recv
send
listen
WSASetLastError
WSACleanup
accept
bind
htonl
WSAAsyncSelect
inet_ntoa
recvfrom
sendto
WSAGetLastError

odbc32

ord18
ord48
ord49
ord20
ord17
ord59
ord8
ord44
ord19
ord46
ord12
ord68
ord43
ord41
ord2
ord1
ord50
ord45
ord51
ord15
ord9
ord14
ord3
ord11
ord13
ord61
ord16
ord5
ord10

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 196KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.50_v5_K0928.exe
.exe windows:4 windows x86 arch:x86

3881c53b6b29c1403700e5740e0ab7d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
CM_Remove_SubTree
CM_Locate_DevNodeA
CM_Get_DevNode_Registry_PropertyA
CM_Get_Child
CM_Get_Sibling
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
CM_Get_Parent
CM_Request_Device_EjectW
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA

newdev

UpdateDriverForPlugAndPlayDevicesA

dbghelp

MakeSureDirectoryPathExists

kernel32

GetThreadLocale
lstrcmpA
GlobalReAlloc
SuspendThread
lstrlenW
GetCurrentThread
GetFileTime
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SizeofResource
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
GetFileType
GetSystemTimeAsFileTime
ExitProcess
ExitThread
GetProcessHeap
GetStartupInfoA
RaiseException
GetACP
HeapSize
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
SetStdHandle
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoA
InterlockedExchange
GetExitCodeProcess
CreateProcessA
CompareStringW
SetEnvironmentVariableA
LocalUnlock
GetProfileStringA
MoveFileExA
LocalLock
OutputDebugStringA
GetProcAddress
GetModuleHandleA
Sleep
MulDiv
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpyA
CloseHandle
SetCommState
GetCommState
SetCommTimeouts
GetCommTimeouts
CreateFileA
ReadFile
WriteFile
SetThreadPriority
CreateThread
CreateEventA
SetPriorityClass
GetCurrentProcess
WaitForSingleObject
SetEvent
ResetEvent
CopyFileA
GetFileSize
GetTickCount
CreateDirectoryA
GetFileAttributesA
FindClose
GetLastError
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenA
GlobalSize
DeleteFileA
GetModuleFileNameA
GetLocalTime
GetVolumeInformationA
DeviceIoControl
MoveFileA
GetCommandLineA
GetSystemDirectoryA
GetComputerNameA
QueryDosDeviceA
GetDriveTypeA
GetVersionExA
CompareStringA
FlushFileBuffers
LoadLibraryA
FreeLibrary
SetVolumeLabelW
WideCharToMultiByte
GetVolumeInformationW
GetDriveTypeW
MultiByteToWideChar
TerminateThread
lstrcatA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFree
FormatMessageA
RemoveDirectoryA
SetFileAttributesA
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
DuplicateHandle
FindResourceA
LoadResource
LockResource
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
InterlockedDecrement
InterlockedIncrement
lstrcpynA
GetPrivateProfileSectionNamesA
WritePrivateProfileStructA
ResumeThread
CreateMutexA
ReleaseMutex
GlobalFree
GetLogicalDrives
GetPrivateProfileSectionA
WritePrivateProfileSectionA
LocalAlloc
SetLastError
GetWindowsDirectoryA
GetCurrentDirectoryA

user32

CopyAcceleratorTableA
CharNextA
GetSysColorBrush
DestroyMenu
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
IsClipboardFormatAvailable
GetMessageA
ValidateRect
GetDesktopWindow
LoadStringA
EndPaint
BeginPaint
GetWindowDC
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemInt
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScrollWindow
GetScrollInfo
GetScrollPos
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SendMessageTimeoutA
CharUpperA
UnregisterClassA
HideCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
SendMessageA
GetParent
EnableWindow
FindWindowExA
EnumWindows
SetWindowPos
LoadCursorA
RegisterClassA
CreateWindowExA
DestroyWindow
DefWindowProcA
ModifyMenuA
GetMenuItemID
GetMenuItemCount
ScreenToClient
GetMenuState
IsIconic
DrawIcon
PostThreadMessageA
GetSystemMetrics
GetSystemMenu
SetMenu
GetMenu
LoadMenuA
RemoveMenu
GetSubMenu
EnableMenuItem
CheckMenuItem
AppendMenuA
EnumChildWindows
ReleaseCapture
PostMessageA
GetKeyState
GetSysColor
SetRect
DrawFocusRect
OffsetRect
WindowFromPoint
GetCursorPos
GetCapture
ClientToScreen
GetNextDlgGroupItem
DispatchMessageA
TranslateMessage
PeekMessageA
RedrawWindow
SetWindowLongA
GetWindowLongA
GetKeyNameTextA
LoadImageA
IsWindow
InflateRect
LoadBitmapA
ReleaseDC
GetDC
GetClientRect
UpdateWindow
ShowWindow
FindWindowA
FillRect
DrawEdge
TabbedTextOutA
DrawTextA
GrayStringA
SetWindowRgn
GetWindowTextA
IsWindowVisible
IsWindowEnabled
MessageBoxA
GetMessagePos
LockWindowUpdate
CopyRect
LoadIconA
GetClassNameA
GetClipboardData
SetCursor
ShowCaret
SetCaretPos
CreateCaret
PtInRect
RegisterClipboardFormatA
SetScrollInfo
EnableScrollBar
DragDetect
SetScrollPos
DestroyCaret
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetWindow
MessageBeep
CallWindowProcA
wsprintfA
GetFocus
SetCapture
KillTimer
SetTimer
InvalidateRect
GetWindowRect

gdi32

RectVisible
Rectangle
RoundRect
StretchBlt
GetPixel
TextOutA
ExtTextOutA
GetTextExtentPoint32A
GetTextMetricsA
Escape
CreateFontA
GetCharWidthA
SetBoundsRect
Polygon
GetClipBox
SetTextColor
SetBkColor
PatBlt
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
PtVisible
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
CreateHatchBrush
CopyMetaFileA
GetTextColor
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
CreatePen
SelectPalette
GetTextExtentPointA
RealizePalette
CreateCompatibleDC
BitBlt
DeleteDC
GetDeviceCaps
CreateCompatibleBitmap
CreateFontIndirectA
CreateBitmap
CreateSolidBrush
SelectObject
CreateRectRgn
CombineRgn
SelectClipRgn
GetObjectA
GetStockObject
CreateDIBitmap
DeleteObject

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCreateKeyExA

shell32

ShellExecuteA

comctl32

_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord8

ole32

CreateStreamOnHGlobal
OleDuplicateData
CoTaskMemAlloc
CoGetClassObject
CLSIDFromString
OleGetClipboard
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoTaskMemFree
ReleaseStgMedium
StgOpenStorageOnILockBytes
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
CoDisconnectObject
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleInitialize
CLSIDFromProgID

olepro32

ord253

oleaut32

LoadTypeLi
VariantTimeToSystemTime
VarBstrFromDate
VarDateFromStr
SysAllocStringByteLen
SysAllocString
SysFreeString
SysAllocStringLen
VariantChangeType
VariantClear
VariantCopy
OleLoadPicturePath
SysStringLen

wsock32

WSACleanup
closesocket
connect
htons
ioctlsocket
socket
WSAStartup
recv
send
listen
htonl
ntohs
getservbyname
ntohl
gethostbyname
gethostname
accept
shutdown
getsockname
getpeername
bind
setsockopt
recvfrom
select
__WSAFDIsSet
sendto
WSASetLastError
WSAGetLastError
WSAAsyncSelect
inet_ntoa

odbc32

ord18
ord48
ord49
ord20
ord17
ord59
ord8
ord44
ord19
ord46
ord12
ord68
ord43
ord41
ord2
ord1
ord50
ord45
ord51
ord15
ord9
ord14
ord3
ord11
ord13
ord61
ord16
ord5
ord10

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 240KB - Virtual size: 993KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.64_v3_L0104.exe
.exe windows:4 windows x86 arch:x86

a76ab4837ed4a449baaccafbcee973b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
CM_Remove_SubTree
CM_Locate_DevNodeA
CM_Get_DevNode_Registry_PropertyA
CM_Get_Child
CM_Get_Sibling
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
CM_Get_Parent
CM_Request_Device_EjectW
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA

newdev

UpdateDriverForPlugAndPlayDevicesA

dbghelp

MakeSureDirectoryPathExists

kernel32

SetEndOfFile
GetFullPathNameA
GetThreadLocale
lstrcmpA
GlobalReAlloc
SuspendThread
lstrlenW
GetCurrentThread
GetFileTime
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SizeofResource
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
GetFileType
GetSystemTimeAsFileTime
ExitProcess
ExitThread
GetProcessHeap
GetStartupInfoA
RaiseException
GetACP
HeapSize
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
SetStdHandle
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoA
InterlockedExchange
CreateProcessA
UnlockFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalUnlock
GetProfileStringA
MoveFileExA
LocalLock
OutputDebugStringA
GetProcAddress
GetModuleHandleA
Sleep
MulDiv
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpyA
CloseHandle
SetCommState
GetCommState
SetCommTimeouts
GetCommTimeouts
CreateFileA
ReadFile
WriteFile
SetThreadPriority
CreateThread
CreateEventA
SetPriorityClass
GetCurrentProcess
WaitForSingleObject
SetEvent
ResetEvent
CopyFileA
GetFileSize
GetTickCount
CreateDirectoryA
GetFileAttributesA
FindClose
GetLastError
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenA
GlobalSize
DeleteFileA
GetModuleFileNameA
GetLocalTime
GetVolumeInformationA
MapViewOfFile
CreateFileMappingA
DeviceIoControl
MoveFileA
GetCommandLineA
GetSystemDirectoryA
GetComputerNameA
QueryDosDeviceA
GetDriveTypeA
UnmapViewOfFile
GetVersionExA
FlushFileBuffers
LoadLibraryA
FreeLibrary
SetVolumeLabelW
WideCharToMultiByte
GetVolumeInformationW
GetDriveTypeW
MultiByteToWideChar
TerminateThread
lstrcatA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFree
LockFile
SetFilePointer
DuplicateHandle
FindResourceA
LoadResource
LockResource
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
InterlockedDecrement
InterlockedIncrement
lstrcpynA
GetPrivateProfileSectionNamesA
WritePrivateProfileStructA
GetExitCodeProcess
ResumeThread
CreateMutexA
ReleaseMutex
GlobalFree
GetLogicalDrives
GetPrivateProfileSectionA
WritePrivateProfileSectionA
LocalAlloc
SetLastError
GetWindowsDirectoryA
GetCurrentDirectoryA
SetFileAttributesA
RemoveDirectoryA
FormatMessageA

user32

CopyAcceleratorTableA
CharNextA
GetSysColorBrush
DestroyMenu
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
IsClipboardFormatAvailable
GetMessageA
ValidateRect
GetDesktopWindow
LoadStringA
EndPaint
BeginPaint
GetWindowDC
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemInt
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScrollWindow
GetScrollInfo
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
WaitForInputIdle
SendMessageTimeoutA
UnregisterClassA
HideCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
SendMessageA
GetParent
EnableWindow
CharUpperA
FindWindowExA
EnumWindows
SetWindowPos
LoadCursorA
RegisterClassA
CreateWindowExA
DestroyWindow
DefWindowProcA
ModifyMenuA
GetMenuItemID
GetMenuItemCount
ScreenToClient
GetMenuState
IsIconic
DrawIcon
PostThreadMessageA
GetScrollPos
GetSystemMetrics
GetSystemMenu
SetMenu
GetMenu
LoadMenuA
RemoveMenu
GetSubMenu
EnableMenuItem
CheckMenuItem
AppendMenuA
EnumChildWindows
ReleaseCapture
PostMessageA
GetKeyState
GetSysColor
SetRect
DrawFocusRect
OffsetRect
WindowFromPoint
GetCursorPos
GetCapture
ClientToScreen
GetNextDlgGroupItem
DispatchMessageA
TranslateMessage
PeekMessageA
RedrawWindow
SetWindowLongA
GetWindowLongA
GetKeyNameTextA
LoadImageA
IsWindow
InflateRect
LoadBitmapA
ReleaseDC
GetDC
GetClientRect
UpdateWindow
ShowWindow
FindWindowA
FillRect
DrawEdge
TabbedTextOutA
DrawTextA
GrayStringA
SetWindowRgn
GetWindowTextA
IsWindowVisible
IsWindowEnabled
MessageBoxA
GetMessagePos
LockWindowUpdate
CopyRect
LoadIconA
GetClassNameA
GetClipboardData
SetCursor
ShowCaret
SetCaretPos
CreateCaret
PtInRect
RegisterClipboardFormatA
SetScrollInfo
EnableScrollBar
DragDetect
SetScrollPos
DestroyCaret
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetWindow
MessageBeep
CallWindowProcA
wsprintfA
GetFocus
SetCapture
KillTimer
SetTimer
InvalidateRect
GetWindowRect

gdi32

Rectangle
RoundRect
StretchBlt
GetPixel
TextOutA
ExtTextOutA
GetTextExtentPoint32A
GetTextMetricsA
Escape
CreateFontA
GetCharWidthA
SetBoundsRect
Polygon
GetClipBox
SetTextColor
SetBkColor
PatBlt
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
RectVisible
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
CreateHatchBrush
CopyMetaFileA
GetTextColor
PtVisible
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
CreatePen
SelectPalette
GetTextExtentPointA
RealizePalette
CreateCompatibleDC
BitBlt
DeleteDC
GetDeviceCaps
CreateCompatibleBitmap
CreateFontIndirectA
CreateBitmap
CreateSolidBrush
SelectObject
CreateRectRgn
CombineRgn
SelectClipRgn
GetObjectA
GetStockObject
SetWindowExtEx
CreateDIBitmap
DeleteObject

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
SetNamedSecurityInfoA

shell32

ShellExecuteExA
ShellExecuteA

comctl32

_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord8

ole32

CreateStreamOnHGlobal
OleDuplicateData
CoTaskMemAlloc
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleGetClipboard
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoTaskMemFree
ReleaseStgMedium
StgOpenStorageOnILockBytes
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
CoDisconnectObject
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleInitialize

olepro32

ord253

oleaut32

LoadTypeLi
VariantTimeToSystemTime
VarBstrFromDate
VarDateFromStr
SysAllocStringByteLen
SysAllocString
SysFreeString
SysAllocStringLen
VariantChangeType
VariantClear
VariantCopy
OleLoadPicturePath
SysStringLen

wsock32

WSACleanup
closesocket
connect
htons
ioctlsocket
socket
WSAStartup
recv
send
listen
htonl
ntohs
getservbyname
ntohl
gethostbyname
gethostname
accept
shutdown
getsockname
getpeername
bind
setsockopt
recvfrom
select
__WSAFDIsSet
sendto
WSASetLastError
WSAGetLastError
WSAAsyncSelect
inet_ntoa

odbc32

ord18
ord48
ord49
ord20
ord17
ord59
ord8
ord44
ord19
ord46
ord12
ord68
ord43
ord41
ord2
ord1
ord50
ord45
ord51
ord15
ord9
ord14
ord3
ord11
ord13
ord61
ord16
ord5
ord10

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 248KB - Virtual size: 1002KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

561ebbbabd6f38569fb7942ad2bbacf5

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

shell32

Sections

.text Size: 4KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 388B

.rsrc Size: 4KB - Virtual size: 2KB

2321299a79b7125962363ed2b51b8b8c

Headers

File Characteristics

Imports

setupapi

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

Sections

.text Size: 88KB - Virtual size: 84KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 20KB - Virtual size: 16KB

f3fdfba1b85d1c281e0990619b99af94

Headers

File Characteristics

Imports

setupapi

kernel32

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 7KB

6660330ab6d99fed325926fa7ee803ac

Headers

File Characteristics

Imports

setupapi

newdev

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 96KB - Virtual size: 94KB

.data Size: 168KB - Virtual size: 277KB

.rsrc Size: 248KB - Virtual size: 245KB

0422755530897dceb2aa61d5664b7bc6

Headers

File Characteristics

Imports

setupapi

newdev

dbghelp

kernel32

user32

gdi32

comdlg32

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 388B

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 88KB - Virtual size: 84KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 20KB - Virtual size: 16KB

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 7KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 96KB - Virtual size: 94KB

.data
Size: 168KB - Virtual size: 277KB

.rsrc
Size: 248KB - Virtual size: 245KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 112KB - Virtual size: 109KB

.data
Size: 196KB - Virtual size: 327KB

.rsrc
Size: 268KB - Virtual size: 265KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 120KB - Virtual size: 116KB

.data
Size: 240KB - Virtual size: 993KB

.sxdata
Size: 4KB - Virtual size: 240B

.rsrc
Size: 272KB - Virtual size: 269KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 120KB - Virtual size: 116KB

.data
Size: 248KB - Virtual size: 1002KB

.sxdata
Size: 4KB - Virtual size: 240B

.rsrc
Size: 272KB - Virtual size: 270KB