5b43322c39367b499a539c01b209ef28_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5b43322c39367b499a539c01b209ef28_JaffaCakes118
Size

9.1MB
MD5

5b43322c39367b499a539c01b209ef28
SHA1

33d7d50a5fb337f59e9d4e7093d50289b353f91b
SHA256

b9541d2f8aa52cdd5aaa56270fc78cac791f8674278d225204094cdd246567b4
SHA512

ee8d34a2bbef7343e8da476b9261d79fd09792fa2727d97c29ee9afb3996b0fd975bfc7b62648adbe0f30ff46e9c0a9726e15a2c5e25dbe3c8cf3b18e57ccee0
SSDEEP

196608:oXDMcgr5AE45tVwP71v3D1awgAeoc4V0G7ywNnQ3cFL:o+q5HwxPAwZrFyd3cFL

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Transport Tycoon Deluxe for Windows/Transport Tycoon Deluxe.exe	upx

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Transport Tycoon Deluxe for Windows/GameGFX.exe
unpack001/Transport Tycoon Deluxe for Windows/TTDLOADW.OVL
unpack001/Transport Tycoon Deluxe for Windows/TTDX Configurator.exe
unpack001/Transport Tycoon Deluxe for Windows/TTconfig.EXE
unpack001/Transport Tycoon Deluxe for Windows/Transport Tycoon Deluxe.exe
unpack002/out.upx
unpack001/Transport Tycoon Deluxe for Windows/UniFISH.exe
unpack001/Transport Tycoon Deluxe for Windows/dsetup.dll
unpack001/Transport Tycoon Deluxe for Windows/dsetupe.dll
unpack001/Transport Tycoon Deluxe for Windows/dsetupj.dll
unpack001/Transport Tycoon Deluxe for Windows/mkpttxt.exe
unpack001/Transport Tycoon Deluxe for Windows/mpssnd_c.dll

Files

5b43322c39367b499a539c01b209ef28_JaffaCakes118
.zip
Transport Tycoon Deluxe for Windows/!!-README-!!.txt
Transport Tycoon Deluxe for Windows/!--README FIRST--!/Readme.txt
Transport Tycoon Deluxe for Windows/!--README FIRST--!/Runme (spust ma).reg
Transport Tycoon Deluxe for Windows/GameGFX.exe
.exe windows:1 windows x86 arch:x86

33e4a30a16246d27be329a1d8a851855

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lopen
FreeLibrary
GetModuleHandleA
FindResourceA
_lread
_lclose
LoadResource
GetLogicalDrives
LockResource
LoadLibraryA
GetPriorityClass
FindFirstFileA
GetSystemTime
GetFileSize
DeleteFileA
CreateFileA
CloseHandle
WriteFile
ReadFile
GetProcAddress
UnhandledExceptionFilter
GetDriveTypeA
GetVolumeInformationA
lstrlenA
LocalAlloc
LocalFree
GetSystemInfo
GetTickCount
GetLocalTime
GetVersionExA
GlobalMemoryStatus
GetComputerNameA
GetCurrentDirectoryA
GetLogicalDriveStringsA
GetDiskFreeSpaceA
SetPriorityClass
GetCurrentProcess
FindNextFileA
VirtualFree
GetThreadPriority
SetThreadPriority
GetCurrentThread
VirtualAlloc
MultiByteToWideChar
SetFilePointer
WideCharToMultiByte
GetVersion
GetCommandLineA
GetEnvironmentStrings
GetStartupInfoA
RtlUnwind
GetLastError
ExitProcess
GetModuleFileNameA
GetOEMCP
GetCPInfo
GetACP
GetFileType
SetStdHandle
GetStdHandle
FlushFileBuffers

user32

FlashWindow
GetCapture
WindowFromPoint
PeekMessageA
TranslateMessage
ShowWindow
DispatchMessageA
WaitMessage
FindWindowA
SetForegroundWindow
DestroyWindow
MessageBoxA
ShowCursor
GetUpdateRect
CreateDialogParamA
ClientToScreen
SetCursorPos
DefWindowProcA
GetSystemMetrics
LoadIconA
RegisterClassA
CreateWindowExA
UpdateWindow
GetDC
ReleaseDC
wsprintfA
SetWindowTextA
ReleaseCapture
ValidateRect
SetCapture
BeginPaint
IsDialogMessageA
LoadCursorA
SetCursor
PostQuitMessage
DialogBoxParamA
GetDesktopWindow
SetDlgItemTextA
MoveWindow
GetDlgItem
SendMessageA
ClipCursor
EndDialog
EndPaint
GetClientRect
GetWindowRect
GetCursorPos
LoadImageA

gdi32

SetBkColor
SetSystemPaletteUse
GetSystemPaletteEntries
GetStockObject
GetObjectA
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
BitBlt
GetPixel
CreatePalette
SetPixel
SelectPalette
CreateDIBSection
GetSystemPaletteUse
RealizePalette
SetDIBColorTable
AnimatePalette
GetDeviceCaps
SetTextColor
TextOutA

advapi32

GetUserNameA
RegCloseKey
RegQueryValueExA
RegOpenKeyA

mpssnd_c

ReleaseBankFile
SoundInit
InitializeBankFile
StartFx
SoundShutDown

dplay

ord2
ord1

winmm

midiOutGetVolume
midiOutSetVolume
mciSendStringA

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATASEG
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODESEG
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Transport Tycoon Deluxe for Windows/TTDLOADW.OVL
.exe windows:1 windows x86 arch:x86

33e4a30a16246d27be329a1d8a851855

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lopen
FreeLibrary
GetModuleHandleA
FindResourceA
_lread
_lclose
LoadResource
GetLogicalDrives
LockResource
LoadLibraryA
GetPriorityClass
FindFirstFileA
GetSystemTime
GetFileSize
DeleteFileA
CreateFileA
CloseHandle
WriteFile
ReadFile
GetProcAddress
UnhandledExceptionFilter
GetDriveTypeA
GetVolumeInformationA
lstrlenA
LocalAlloc
LocalFree
GetSystemInfo
GetTickCount
GetLocalTime
GetVersionExA
GlobalMemoryStatus
GetComputerNameA
GetCurrentDirectoryA
GetLogicalDriveStringsA
GetDiskFreeSpaceA
SetPriorityClass
GetCurrentProcess
FindNextFileA
VirtualFree
GetThreadPriority
SetThreadPriority
GetCurrentThread
VirtualAlloc
MultiByteToWideChar
SetFilePointer
WideCharToMultiByte
GetVersion
GetCommandLineA
GetEnvironmentStrings
GetStartupInfoA
RtlUnwind
GetLastError
ExitProcess
GetModuleFileNameA
GetOEMCP
GetCPInfo
GetACP
GetFileType
SetStdHandle
GetStdHandle
FlushFileBuffers

user32

FlashWindow
GetCapture
WindowFromPoint
PeekMessageA
TranslateMessage
ShowWindow
DispatchMessageA
WaitMessage
FindWindowA
SetForegroundWindow
DestroyWindow
MessageBoxA
ShowCursor
GetUpdateRect
CreateDialogParamA
ClientToScreen
SetCursorPos
DefWindowProcA
GetSystemMetrics
LoadIconA
RegisterClassA
CreateWindowExA
UpdateWindow
GetDC
ReleaseDC
wsprintfA
SetWindowTextA
ReleaseCapture
ValidateRect
SetCapture
BeginPaint
IsDialogMessageA
LoadCursorA
SetCursor
PostQuitMessage
DialogBoxParamA
GetDesktopWindow
SetDlgItemTextA
MoveWindow
GetDlgItem
SendMessageA
ClipCursor
EndDialog
EndPaint
GetClientRect
GetWindowRect
GetCursorPos
LoadImageA

gdi32

SetBkColor
SetSystemPaletteUse
GetSystemPaletteEntries
GetStockObject
GetObjectA
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
BitBlt
GetPixel
CreatePalette
SetPixel
SelectPalette
CreateDIBSection
GetSystemPaletteUse
RealizePalette
SetDIBColorTable
AnimatePalette
GetDeviceCaps
SetTextColor
TextOutA

advapi32

GetUserNameA
RegCloseKey
RegQueryValueExA
RegOpenKeyA

mpssnd_c

ReleaseBankFile
SoundInit
InitializeBankFile
StartFx
SoundShutDown

dplay

ord2
ord1

winmm

midiOutGetVolume
midiOutSetVolume
mciSendStringA

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATASEG
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODESEG
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

TTDPatch
Size: - Virtual size: 6.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Transport Tycoon Deluxe for Windows/TTDX Configurator.exe
.exe windows:4 windows x86 arch:x86

d825c8d3e07579a86a655a114e91ada4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarTstGt
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaRecAnsiToUni
ord518
__vbaStrCat
__vbaVarCmpNe
ord660
__vbaSetSystemError
__vbaRecDestruct
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaBoolVarNull
__vbaFpR8
__vbaVarTstLt
_CIsin
__vbaChkstk
ord526
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
DllFunctionCall
__vbaStrR4
_adj_fpatan
__vbaStrR8
__vbaRecUniToAnsi
EVENT_SINK_Release
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaInStr
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarCmpEq
__vbaVarDup
__vbaStrToAnsi
ord612
__vbaVarCopy
__vbaFpI4
__vbaRecDestructAnsi
ord617
_CIatan
__vbaStrMove
ord619
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
ord581

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Transport Tycoon Deluxe for Windows/TTconfig.EXE
.exe windows:1 windows x86 arch:x86

268055f4edcea34b3bd45206d0f444d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiOutGetNumDevs
midiOutGetDevCapsA

kernel32

FreeLibrary
WritePrivateProfileStringA
lstrcpyA
GetWindowsDirectoryA
SetStdHandle
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadCodePtr
GetStdHandle
IsBadReadPtr
GetFileType
VirtualAlloc
GetModuleFileNameA
UnhandledExceptionFilter
TlsFree
VirtualFree
GetACP
GetCPInfo
GetOEMCP
RaiseException
GetStartupInfoA
GetCommandLineA
GetEnvironmentStrings
GlobalAlloc
RtlUnwind
GlobalGetAtomNameA
GlobalLock
GlobalUnlock
GetFullPathNameA
SetEndOfFile
WriteFile
FlushFileBuffers
SetFilePointer
ReadFile
CreateFileA
InitializeCriticalSection
DeleteCriticalSection
LocalFree
GetModuleHandleA
SetLastError
TlsAlloc
LocalAlloc
TlsGetValue
FindResourceA
GetVersion
lstrcmpA
MulDiv
lstrcmpiA
LoadResource
MultiByteToWideChar
WideCharToMultiByte
GlobalAddAtomA
LockResource
FreeResource
lstrlenA
LoadLibraryA
GetProcAddress
lstrcatA
GetPrivateProfileIntA
GetPrivateProfileStringA
SetErrorMode
CloseHandle
ExitProcess
TlsSetValue
CreateMutexA
EnterCriticalSection
SetCurrentDirectoryA
LeaveCriticalSection
GlobalFree
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetExitCodeProcess
WaitForSingleObject
OpenMutexA
GetLastError
GetVolumeInformationA
CreateProcessA

user32

IsDialogMessageA
LoadStringA
DestroyMenu
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
SetRectEmpty
InflateRect
GetClassNameA
LoadCursorA
InvalidateRect
FillRect
OffsetRect
DrawFocusRect
SetTimer
KillTimer
SetCapture
ReleaseCapture
PtInRect
IsRectEmpty
MapDialogRect
DeleteMenu
MoveWindow
GetDesktopWindow
WindowFromPoint
ClientToScreen
CharUpperA
OemToCharA
CharToOemA
InsertMenuA
LoadAcceleratorsA
TranslateAcceleratorA
IsWindow
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetDCEx
LockWindowUpdate
IntersectRect
RegisterWindowMessageA
SetParent
InvertRect
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
SendDlgItemMessageA
GetWindowTextLengthA
DefWindowProcA
DestroyWindow
CreateWindowExA
SetPropA
GetPropA
RemovePropA
CallWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindowRect
SetWindowLongA
GetDlgItem
DialogBoxIndirectParamA
DialogBoxParamA
CreateDialogParamA
GetWindow
GetWindowLongA
wsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
SetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
UnhookWindowsHookEx
SetWindowsHookExA
IsWindowEnabled
GetLastActivePopup
SetCursor
ShowOwnedPopups
IsWindowVisible
UpdateWindow
PostQuitMessage
DrawTextA
GetDC
ReleaseDC
PostMessageA
IsIconic
GetSystemMetrics
DrawIcon
GetClientRect
EndDialog
EnableWindow
GetWindowTextA
SetWindowPos
ShowWindow
GetSystemMenu
AppendMenuA
LoadIconA
SetWindowTextA
SendMessageA
MessageBoxA
GetSysColor
SystemParametersInfoA
SetRect
SetActiveWindow
GetMenuItemID
AdjustWindowRectEx
GetCapture
GetDlgCtrlID
SetMessageQueue

gdi32

SelectPalette
CreateRectRgnIndirect
SetDIBitsToDevice
RealizePalette
CreatePalette
GetTextMetricsA
SelectObject
DeleteDC
CreateFontIndirectA
CreateBitmap
CreateCompatibleDC
SetBkColor
GetObjectA
SetTextColor
SaveDC
RestoreDC
SetBkMode
GetStockObject
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetClipBox
SetWindowExtEx
SelectClipRgn
MoveToEx
LineTo
SetTextAlign
DeleteObject
CreateRectRgn
CreatePen
CreatePatternBrush
CreateSolidBrush
RectVisible
TextOutA
PtVisible
Escape
GetTextExtentPointA
ExtTextOutA
BitBlt
PatBlt
CombineRgn
GetDeviceCaps
SetRectRgn

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegCloseKey
RegOpenKeyA
RegQueryValueExA

shell32

DragQueryFileA
DragFinish

comctl32

ImageList_Destroy
ord17

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Transport Tycoon Deluxe for Windows/Transport Tycoon Deluxe.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Transport Tycoon Deluxe for Windows/UniFISH.exe
.exe windows:1 windows x86 arch:x86

9e7209008ef568c863195512df15036e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
RemoveDirectoryA
GetCurrentDirectoryA
lstrcmpiA
lstrlenA
lstrcatA
GetLastError
VirtualAlloc
VirtualFree
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleHandleA
lstrcpyA
RtlUnwind
ExitProcess
GetVersion
GetCommandLineA
GetEnvironmentStrings
GetStartupInfoA

user32

ShowWindow
SetDlgItemTextA
wvsprintfA
SetWindowTextA
SendDlgItemMessageA
SendMessageA
EndDialog
ExitWindowsEx
SetCursor
MessageBoxA
FindWindowA
wsprintfA
DialogBoxParamA
GetDlgItem
EnableWindow
LoadCursorA

gdi32

DeleteObject
CreateFontIndirectA

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA

shell32

SHFileOperationA
SHBrowseForFolder
SHGetMalloc
SHGetPathFromIDList

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Transport Tycoon Deluxe for Windows/autorun.inf
Transport Tycoon Deluxe for Windows/awe/aw_tt00.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt01.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt02.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt03.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt04.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt05.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt06.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt07.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt08.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt09.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt10.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt11.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt12.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt13.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt14.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt15.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt16.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt17.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt18.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt19.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt20.aw
Transport Tycoon Deluxe for Windows/awe/aw_tt21.aw
Transport Tycoon Deluxe for Windows/demo1e.dat
Transport Tycoon Deluxe for Windows/demo1f.dat
Transport Tycoon Deluxe for Windows/demo2e.dat
Transport Tycoon Deluxe for Windows/demo2f.dat
Transport Tycoon Deluxe for Windows/demo3e.dat
Transport Tycoon Deluxe for Windows/demo3f.dat
Transport Tycoon Deluxe for Windows/demo4e.dat
Transport Tycoon Deluxe for Windows/demo4f.dat
Transport Tycoon Deluxe for Windows/demo5e.dat
Transport Tycoon Deluxe for Windows/demo5f.dat
Transport Tycoon Deluxe for Windows/dsetup.dll
.dll windows:4 windows x86 arch:x86

e38a287c77dace0fc06f08476bc48eb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
lstrcpyA
SetErrorMode
GetSystemDirectoryA
GetVersionExA
GetProcAddress
LoadLibraryA
FreeLibrary
GetCommandLineA
GetModuleHandleA
GetVersion
GetLastError
GetFileAttributesA
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetSystemDefaultLCID
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

user32

MessageBoxIndirectA
LoadStringA
wsprintfA
GetKeyboardType

Exports

Exports

DirectXDeviceDriverSetup
DirectXSetup
DirectXSetupIsJapan
DirectXSetupIsJapanNec
DllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Transport Tycoon Deluxe for Windows/dsetup6e.dll
Transport Tycoon Deluxe for Windows/dsetup6j.dll
Transport Tycoon Deluxe for Windows/dsetupe.dll
.dll windows:4 windows x86 arch:x86

e1305ccfb61e2c616dafff8b59a79ab7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
SetErrorMode
GetSystemDefaultLCID
lstrcatA
GetWindowsDirectoryA
DeleteFileA
CopyFileA
GetTempFileNameA
GetFileAttributesA
lstrcmpA
lstrlenA
lstrcmpiA
SetFileAttributesA
CloseHandle
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
OpenFile
LocalFree
LocalAlloc
WritePrivateProfileStringA
lstrcpyA
GetSystemDirectoryA
GetVersionExA
GetShortPathNameA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LocalReAlloc
CreateDirectoryA
DisableThreadLibraryCalls
SMapLS_IP_EBP_12
SUnMapLS_IP_EBP_12
SMapLS_IP_EBP_16
SUnMapLS_IP_EBP_16
SMapLS_IP_EBP_20
SUnMapLS_IP_EBP_20
SMapLS_IP_EBP_24
SUnMapLS_IP_EBP_24
ThunkConnect32
GetCommandLineA
GetFileSize
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetPrivateProfileStringA
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
ReadFile
CreateFileA
SetFilePointer
SetEndOfFile
RtlUnwind
GetStartupInfoA

gdi32

ExtEscape

user32

PeekMessageA
LoadStringA
GetKeyboardType
PostMessageA
SendMessageA
EndDialog
MessageBoxA
SetCursor
LoadCursorA
SetDlgItemTextA
wvsprintfA
DispatchMessageA
TranslateMessage
GetMessageA
MessageBoxIndirectA
wsprintfA
DialogBoxParamA
CharNextA
ReleaseDC
GetDC

winmm

waveOutGetNumDevs
waveOutClose
waveOutOpen

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

DirectXDeviceDriverSetup
DirectXSetup
DirectXSetupIsJapan
DirectXSetupIsJapanNec
DllMain
thk3216_ThunkData32

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Transport Tycoon Deluxe for Windows/dsetupj.dll
.dll windows:4 windows x86 arch:x86

e1305ccfb61e2c616dafff8b59a79ab7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
SetErrorMode
GetSystemDefaultLCID
lstrcatA
GetWindowsDirectoryA
DeleteFileA
CopyFileA
GetTempFileNameA
GetFileAttributesA
lstrcmpA
lstrlenA
lstrcmpiA
SetFileAttributesA
CloseHandle
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
OpenFile
LocalFree
LocalAlloc
WritePrivateProfileStringA
lstrcpyA
GetSystemDirectoryA
GetVersionExA
GetShortPathNameA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LocalReAlloc
CreateDirectoryA
DisableThreadLibraryCalls
SMapLS_IP_EBP_12
SUnMapLS_IP_EBP_12
SMapLS_IP_EBP_16
SUnMapLS_IP_EBP_16
SMapLS_IP_EBP_20
SUnMapLS_IP_EBP_20
SMapLS_IP_EBP_24
SUnMapLS_IP_EBP_24
ThunkConnect32
GetCommandLineA
GetFileSize
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetPrivateProfileStringA
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
ReadFile
CreateFileA
SetFilePointer
SetEndOfFile
RtlUnwind
GetStartupInfoA

gdi32

ExtEscape

user32

PeekMessageA
LoadStringA
GetKeyboardType
PostMessageA
SendMessageA
EndDialog
MessageBoxA
SetCursor
LoadCursorA
SetDlgItemTextA
wvsprintfA
DispatchMessageA
TranslateMessage
GetMessageA
MessageBoxIndirectA
wsprintfA
DialogBoxParamA
CharNextA
ReleaseDC
GetDC

winmm

waveOutGetNumDevs
waveOutClose
waveOutOpen

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

DirectXDeviceDriverSetup
DirectXSetup
DirectXSetupIsJapan
DirectXSetupIsJapanNec
DllMain
thk3216_ThunkData32

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Transport Tycoon Deluxe for Windows/fm/9_tt00.fm
Transport Tycoon Deluxe for Windows/fm/9_tt01.fm
Transport Tycoon Deluxe for Windows/fm/9_tt02.fm
Transport Tycoon Deluxe for Windows/fm/9_tt03.fm
Transport Tycoon Deluxe for Windows/fm/9_tt04.fm
Transport Tycoon Deluxe for Windows/fm/9_tt05.fm
Transport Tycoon Deluxe for Windows/fm/9_tt06.fm
Transport Tycoon Deluxe for Windows/fm/9_tt07.fm
Transport Tycoon Deluxe for Windows/fm/9_tt08.fm
Transport Tycoon Deluxe for Windows/fm/9_tt09.fm
Transport Tycoon Deluxe for Windows/fm/9_tt10.fm
Transport Tycoon Deluxe for Windows/fm/9_tt11.fm
Transport Tycoon Deluxe for Windows/fm/9_tt12.fm
Transport Tycoon Deluxe for Windows/fm/9_tt13.fm
Transport Tycoon Deluxe for Windows/fm/9_tt14.fm
Transport Tycoon Deluxe for Windows/fm/9_tt15.fm
Transport Tycoon Deluxe for Windows/fm/9_tt16.fm
Transport Tycoon Deluxe for Windows/fm/9_tt17.fm
Transport Tycoon Deluxe for Windows/fm/9_tt18.fm
Transport Tycoon Deluxe for Windows/fm/9_tt19.fm
Transport Tycoon Deluxe for Windows/fm/9_tt20.fm
Transport Tycoon Deluxe for Windows/fm/9_tt21.fm
Transport Tycoon Deluxe for Windows/gm/gm_tt00.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt01.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt02.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt03.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt04.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt05.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt06.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt07.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt08.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt09.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt10.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt11.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt12.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt13.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt14.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt15.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt16.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt17.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt18.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt19.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt20.gm
Transport Tycoon Deluxe for Windows/gm/gm_tt21.gm
Transport Tycoon Deluxe for Windows/logo.bmp
Transport Tycoon Deluxe for Windows/mkpttxt.exe
.exe windows:4 windows x86 arch:x86

4e4e2793d90a86b065a9b20433ff8de9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_fileno
_iob
_onexit
_setmode
atexit
atoi
exit
fclose
feof
fgets
fopen
fprintf
fseek
ftell
fwrite
malloc
memcpy
printf
putc
remove
rename
signal
strchr
strcmp
strerror
strncmp
strrchr
strspn
strtol
vfprintf

kernel32

ExitProcess
SetUnhandledExceptionFilter

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 976B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Transport Tycoon Deluxe for Windows/mpssnd_c.dll
.dll windows:4 windows x86 arch:x86

24ca4f67ecea24abba1533856268b60d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dsound

DirectSoundCreate

kernel32

HeapFree
GetCommandLineA
GetProcAddress
HeapAlloc
GetModuleHandleA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetLastError
ReadFile
SetFilePointer
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
CloseHandle
HeapCreate
HeapDestroy
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
CreateFileA
SetStdHandle
FlushFileBuffers
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Exports

Exports

InitializeBankFile
ReleaseBankFile
SoundInit
SoundShutDown
StartFx
StopFx

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 283B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Transport Tycoon Deluxe for Windows/opt.dat
Transport Tycoon Deluxe for Windows/sample.cat
Transport Tycoon Deluxe for Windows/setup.bat
Transport Tycoon Deluxe for Windows/slogo.bmp
Transport Tycoon Deluxe for Windows/title.dat
Transport Tycoon Deluxe for Windows/trc00.ss0
Transport Tycoon Deluxe for Windows/trc01.ss0
Transport Tycoon Deluxe for Windows/trc02.ss0
Transport Tycoon Deluxe for Windows/trc03.ss0
Transport Tycoon Deluxe for Windows/trc04.ss0
Transport Tycoon Deluxe for Windows/trc05.ss0
Transport Tycoon Deluxe for Windows/trc06.ss0
Transport Tycoon Deluxe for Windows/trc07.ss0
Transport Tycoon Deluxe for Windows/trc08.ss0
Transport Tycoon Deluxe for Windows/trc10.ss0
Transport Tycoon Deluxe for Windows/trc12.ss0
Transport Tycoon Deluxe for Windows/trg1r.grf
Transport Tycoon Deluxe for Windows/trgcr.grf
Transport Tycoon Deluxe for Windows/trghr.grf
Transport Tycoon Deluxe for Windows/trgir.grf
Transport Tycoon Deluxe for Windows/trgtr.grf
Transport Tycoon Deluxe for Windows/trh00.ss0
Transport Tycoon Deluxe for Windows/trh00.ss1
Transport Tycoon Deluxe for Windows/trh01.ss0
Transport Tycoon Deluxe for Windows/trh02.ss0
Transport Tycoon Deluxe for Windows/trh03.ss0
Transport Tycoon Deluxe for Windows/trh04.ss0
Transport Tycoon Deluxe for Windows/trh05.ss0
Transport Tycoon Deluxe for Windows/trh06.ss0
Transport Tycoon Deluxe for Windows/trh07.ss0
Transport Tycoon Deluxe for Windows/trh08.ss0
Transport Tycoon Deluxe for Windows/trt00.ss0
Transport Tycoon Deluxe for Windows/trt00.ss1
Transport Tycoon Deluxe for Windows/trt00.sv1
Transport Tycoon Deluxe for Windows/trt01.sv1
Transport Tycoon Deluxe for Windows/trt02.ss0
Transport Tycoon Deluxe for Windows/trt02.sv1
Transport Tycoon Deluxe for Windows/trt03.ss0
Transport Tycoon Deluxe for Windows/trt03.sv1
Transport Tycoon Deluxe for Windows/trt04.ss0
Transport Tycoon Deluxe for Windows/trt04.sv1
Transport Tycoon Deluxe for Windows/trt05.ss0
Transport Tycoon Deluxe for Windows/trt05.sv1
Transport Tycoon Deluxe for Windows/trt06.ss0
Transport Tycoon Deluxe for Windows/trt06.sv1
Transport Tycoon Deluxe for Windows/trt07.ss0
Transport Tycoon Deluxe for Windows/trt07.sv1
Transport Tycoon Deluxe for Windows/trt08.ss0
Transport Tycoon Deluxe for Windows/trt08.sv1
Transport Tycoon Deluxe for Windows/trt09.sv1
Transport Tycoon Deluxe for Windows/trt10.ss0
Transport Tycoon Deluxe for Windows/trt10.sv1
Transport Tycoon Deluxe for Windows/trt11.ss0
Transport Tycoon Deluxe for Windows/try00.ss0
Transport Tycoon Deluxe for Windows/try01.ss0
Transport Tycoon Deluxe for Windows/try02.ss0
Transport Tycoon Deluxe for Windows/try03.ss0
Transport Tycoon Deluxe for Windows/try05.ss0
Transport Tycoon Deluxe for Windows/try06.ss0
Transport Tycoon Deluxe for Windows/try07.ss0
Transport Tycoon Deluxe for Windows/try08.ss0
Transport Tycoon Deluxe for Windows/try09.ss0
Transport Tycoon Deluxe for Windows/try10.ss0
Transport Tycoon Deluxe for Windows/ttdpatch.cfg

Sharing

General

Malware Config

Signatures

Files

33e4a30a16246d27be329a1d8a851855

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

mpssnd_c

dplay

winmm

Sections

.text Size: 91KB - Virtual size: 90KB

.bss Size: - Virtual size: 16KB

.rdata Size: 512B - Virtual size: 202B

.data Size: 16KB - Virtual size: 16KB

.idata Size: 4KB - Virtual size: 3KB

DATASEG Size: 1.1MB - Virtual size: 1.1MB

CODESEG Size: 382KB - Virtual size: 381KB

.rsrc Size: 9KB - Virtual size: 8KB

.reloc Size: 48KB - Virtual size: 48KB

33e4a30a16246d27be329a1d8a851855

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

mpssnd_c

dplay

winmm

Sections

.text Size: 91KB - Virtual size: 90KB

.bss Size: - Virtual size: 16KB

.rdata Size: 512B - Virtual size: 202B

.data Size: 16KB - Virtual size: 16KB

.idata Size: 4KB - Virtual size: 3KB

DATASEG Size: 1.1MB - Virtual size: 1.1MB

CODESEG Size: 382KB - Virtual size: 381KB

.rsrc Size: 9KB - Virtual size: 8KB

.reloc Size: 48KB - Virtual size: 48KB

TTDPatch Size: - Virtual size: 6.3MB

d825c8d3e07579a86a655a114e91ada4

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 92KB - Virtual size: 89KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 1KB

268055f4edcea34b3bd45206d0f444d4

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 106KB - Virtual size: 105KB

.bss Size: - Virtual size: 9KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 19KB - Virtual size: 19KB

.idata Size: 7KB - Virtual size: 7KB

.rsrc Size: 9KB - Virtual size: 8KB

.reloc Size: 16KB - Virtual size: 15KB

Headers

File Characteristics

.text
Size: 91KB - Virtual size: 90KB

.bss
Size: - Virtual size: 16KB

.rdata
Size: 512B - Virtual size: 202B

.data
Size: 16KB - Virtual size: 16KB

.idata
Size: 4KB - Virtual size: 3KB

DATASEG
Size: 1.1MB - Virtual size: 1.1MB

CODESEG
Size: 382KB - Virtual size: 381KB

.rsrc
Size: 9KB - Virtual size: 8KB

.reloc
Size: 48KB - Virtual size: 48KB

.text
Size: 91KB - Virtual size: 90KB

.bss
Size: - Virtual size: 16KB

.rdata
Size: 512B - Virtual size: 202B

.data
Size: 16KB - Virtual size: 16KB

.idata
Size: 4KB - Virtual size: 3KB

DATASEG
Size: 1.1MB - Virtual size: 1.1MB

CODESEG
Size: 382KB - Virtual size: 381KB

.rsrc
Size: 9KB - Virtual size: 8KB

.reloc
Size: 48KB - Virtual size: 48KB

TTDPatch
Size: - Virtual size: 6.3MB

.text
Size: 92KB - Virtual size: 89KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 1KB

.text
Size: 106KB - Virtual size: 105KB

.bss
Size: - Virtual size: 9KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 19KB - Virtual size: 19KB

.idata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 9KB - Virtual size: 8KB

.reloc
Size: 16KB - Virtual size: 15KB

UPX0
Size: - Virtual size: 68KB

UPX1
Size: 29KB - Virtual size: 32KB

.rsrc
Size: 15KB - Virtual size: 16KB

.text
Size: 43KB - Virtual size: 42KB

.data
Size: 21KB - Virtual size: 20KB

.bss
Size: - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 15KB - Virtual size: 14KB

.text
Size: 9KB - Virtual size: 8KB

.bss
Size: - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 64B

.data
Size: 7KB - Virtual size: 7KB

.idata
Size: 1KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 54B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 8KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 26KB - Virtual size: 25KB

.data
Size: 5KB - Virtual size: 32KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB