728aa4a12c3b8137177006d9c12fb472_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

728aa4a12c3b8137177006d9c12fb472_JaffaCakes118
Size

3.4MB
MD5

728aa4a12c3b8137177006d9c12fb472
SHA1

788e86fd1d9e8d34ad1490a4dd7e5ed846a71f28
SHA256

0a5978e8c245d0431328ed7f9cfc89a0462f7b837369878ecb3f22597c64a07f
SHA512

709b94ffaa2a37e37a8ca67d5652f4746da935a574e8a3e7200c9bc3cecdde555ff0fc004d97091f355ca2f65e8557ccae6332620c44c4fc40619b0290c70185
SSDEEP

49152:lucPy+YXUNCFniFPYgcB9Sg1TQV3MPqFJuCo/T+hWe4Hf8OdDKz:lu1bXUNCFnqPYgcnSCTQsUhWe4Hf

Score

1^/10

Malware Config

Signatures

Files

728aa4a12c3b8137177006d9c12fb472_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3e9b8c54a0ba55b7a76a401217627b05

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

82:00:a1:d4:b7:c3:95:97:9c:a0:95:ac:ac:93:65:22
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

27/06/2014, 00:00

Not After

27/06/2015, 23:59

Subject

CN=Atom Security OOO,OU=development,O=Atom Security OOO,POSTALCODE=630090,STREET=Academician Koptyuga Prospect\, 4\,office 158,L=Novosibirsk,ST=nso,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

26:89:40:3f:51:20:2d:a7:60:83:99:44:f6:68:ae:2f:d2:77:83:4a
Signer

Actual PE Digest

26:89:40:3f:51:20:2d:a7:60:83:99:44:f6:68:ae:2f:d2:77:83:4a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

activeds

ord9

ws2_32

WSASetLastError
getservbyname
getservbyport
ntohs
inet_ntoa
htonl
WSAGetLastError
WSAStartup
ntohl
gethostbyname
gethostbyaddr
socket
setsockopt
send
select
recv
inet_addr
htons
ioctlsocket
connect
closesocket

mpr

WNetAddConnection2W
WNetCancelConnection2W
WNetEnumResourceW
WNetOpenEnumW
WNetCloseEnum

mswsock

TransmitFile

kernel32

ExpandEnvironmentStringsA
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetStdHandle
SetFilePointerEx
FlushFileBuffers
OutputDebugStringW
ReadConsoleW
GetTimeZoneInformation
GetOEMCP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
UnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetConsoleMode
GetConsoleCP
GetCPInfo
AreFileApisANSI
VirtualQuery
VirtualProtect
GetSystemInfo
WriteConsoleW
GetModuleHandleExW
GetFileType
RtlUnwind
GetVersionExA
HeapSize
HeapReAlloc
HeapDestroy
DecodePointer
EncodePointer
GetStringTypeW
LocalFree
GetLastError
GetFileSize
GetStdHandle
ReadFile
CloseHandle
FormatMessageA
CreateFileW
WriteConsoleA
GetModuleFileNameA
GetVolumeInformationA
RaiseException
LockResource
SetLastError
WaitForSingleObject
Sleep
LoadResource
SizeofResource
WriteFile
FindClose
GetSystemTime
SystemTimeToFileTime
lstrlenA
lstrlenW
GetModuleFileNameW
FindResourceW
FindResourceExW
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileW
MoveFileExW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
GetSystemDefaultLCID
FileTimeToSystemTime
InterlockedDecrement
FlushInstructionCache
GetCurrentProcess
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetTickCount
lstrcmpiW
CompareStringW
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentThreadId
SetFilePointer
FormatMessageW
GetTempPathW
GetTempFileNameW
GetVersionExW
GetCurrentThread
SetThreadPriority
WaitForMultipleObjects
CreateEventW
InterlockedExchange
FreeLibrary
GetProcAddress
SetEvent
ReleaseMutex
MulDiv
lstrcmpW
OpenEventW
LoadLibraryW
lstrcpyW
lstrcatW
GetStringTypeExW
CreateMutexW
GlobalAlloc
GlobalLock
GlobalUnlock
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
InterlockedIncrement
GetModuleHandleW
GetLocalTime
CopyFileW
GetACP
GetTempPathA
FileTimeToLocalFileTime
GlobalFree
LocalAlloc
OpenThread
TerminateThread
GetExitCodeThread
InterlockedCompareExchange
ExitProcess
SetErrorMode
MapViewOfFile
lstrcpynW
OpenFileMappingW
RemoveDirectoryW
GetFileAttributesW
FreeResource
ResumeThread
ResetEvent
GlobalReAlloc
CreateThread
OpenMutexW
GetSystemDefaultUILanguage
SetProcessAffinityMask
GetCurrentProcessId
TerminateProcess
LoadLibraryExW
GetCommandLineW
FreeConsole
AttachConsole
SetEndOfFile
GetSystemTimeAsFileTime
GlobalHandle
SystemTimeToTzSpecificLocalTime
SetUnhandledExceptionFilter
ExitThread
VirtualAlloc
VirtualFree
LoadLibraryA
GetSystemDirectoryA
GetComputerNameA
OpenProcess
VerLanguageNameW
InitializeCriticalSectionAndSpinCount

user32

RedrawWindow
SetWindowRgn
GetAsyncKeyState
RegisterClipboardFormatW
DrawFrameControl
GetDlgItemTextW
IsDlgButtonChecked
GetDlgItemInt
SetDlgItemInt
GetMonitorInfoW
MonitorFromPoint
GetTopWindow
IsRectEmpty
UnionRect
IntersectRect
InflateRect
CopyRect
SetRect
ClientToScreen
GetScrollPos
GetWindowDC
WindowFromDC
DrawStateW
DragDetect
SetMenuDefaultItem
SetMenuItemInfoW
GetMenuItemInfoW
TrackPopupMenuEx
GetMenuItemCount
GetSubMenu
EnableMenuItem
DestroyMenu
LoadMenuW
GetSystemMetrics
KillTimer
SetTimer
GetKeyState
CreateDialogParamW
IsZoomed
IsIconic
IsWindowVisible
GetMessagePos
DispatchMessageW
GetMessageW
DrawEdge
LoadBitmapW
LockWindowUpdate
DialogBoxParamW
GetScrollInfo
SetScrollInfo
GetIconInfo
LoadIconW
MessageBoxW
ShowScrollBar
GetActiveWindow
MoveWindow
IsChild
GetClassInfoExW
RegisterClassExW
PostMessageW
RegisterWindowMessageW
GetSysColorBrush
MessageBeep
EnableWindow
SetDlgItemTextW
IsDialogMessageW
IsMenu
BeginDeferWindowPos
DeferWindowPos
SetWindowsHookExW
UnhookWindowsHookEx
SetScrollPos
LoadImageW
DrawIconEx
ChildWindowFromPoint
GetScrollRange
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
CheckMenuItem
TranslateMessage
PeekMessageW
GetCaretPos
CheckDlgButton
SetClassLongW
GetMenuStringW
MapDialogRect
EnumDisplaySettingsW
UnregisterClassA
SendMessageW
ShowWindow
SetWindowPos
GetDlgItem
SetWindowTextW
GetWindowTextW
GetClientRect
GetWindowRect
MapWindowPoints
GetWindowLongW
SetWindowLongW
GetParent
SetParent
GetWindow
SystemParametersInfoW
DestroyIcon
DefWindowProcW
CallWindowProcW
EndDeferWindowPos
BringWindowToTop
LoadAcceleratorsW
GetMenu
SetMenu
GetClassLongW
FindWindowW
DefMDIChildProcW
SetWindowContextHelpId
ScrollWindowEx
GetUpdateRect
SetActiveWindow
ValidateRect
wsprintfW
PostQuitMessage
GetDoubleClickTime
TranslateAcceleratorW
DrawMenuBar
GetSystemMenu
CreatePopupMenu
AppendMenuW
ModifyMenuW
AdjustWindowRectEx
LoadStringA
GetWindowPlacement
SetWindowPlacement
CharLowerW
GetMenuDefaultItem
WindowFromPoint
GetWindowThreadProcessId
DefFrameProcW
TranslateMDISysAccel
FrameRect
EqualRect
DestroyCursor
GetComboBoxInfo
CreateAcceleratorTableW
DestroyAcceleratorTable
InvalidateRgn
CallNextHookEx
GetDesktopWindow
CreateIconFromResourceEx
DialogBoxIndirectParamW
CreateDialogIndirectParamW
CreateWindowExW
IsWindow
DestroyWindow
EndDialog
SendDlgItemMessageW
GetDlgCtrlID
CharNextW
SetFocus
GetFocus
GetCapture
SetCapture
ReleaseCapture
IsWindowEnabled
DrawTextW
UpdateWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
GetWindowTextLengthW
SetCursor
GetCursorPos
ScreenToClient
GetSysColor
DrawFocusRect
CreateIcon
SendMessageTimeoutW
InSendMessage
SetForegroundWindow
FillRect
SetRectEmpty
OffsetRect
PtInRect
GetClassNameW
LoadCursorW
LoadStringW
InsertMenuW
RemoveMenu
TrackPopupMenu
EnumChildWindows
SetLayeredWindowAttributes

gdi32

SetWinMetaFileBits
SetEnhMetaFileBits
GetEnhMetaFilePaletteEntries
CreatePalette
StretchDIBits
SetDIBitsToDevice
ExtSelectClipRgn
GetCurrentObject
GetPixel
GetTextExtentExPointW
GetViewportOrgEx
Polyline
GetClipRgn
SetBrushOrgEx
GetDIBColorTable
PlayEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
DeleteEnhMetaFile
SelectPalette
RealizePalette
GetDIBits
SetWindowExtEx
SetViewportExtEx
LPtoDP
SetMapMode
GetMapMode
RemoveFontResourceExW
AddFontResourceExW
CreateEllipticRgnIndirect
CreateFontW
SetDIBColorTable
CreateDIBSection
Polygon
IntersectClipRect
SetStretchBltMode
StretchBlt
OffsetRgn
FrameRgn
ExcludeClipRect
EqualRgn
CreateRoundRectRgn
OffsetWindowOrgEx
SetWindowOrgEx
SetViewportOrgEx
CreatePolygonRgn
SaveDC
RoundRect
RestoreDC
DPtoLP
ExtTextOutW
MoveToEx
ExtCreatePen
GetTextMetricsW
SetRectRgn
SetBitmapBits
SetBkColor
SelectClipRgn
Rectangle
PatBlt
LineTo
GetTextExtentPoint32W
GetTextColor
GetDeviceCaps
GetClipBox
GetBkColor
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePatternBrush
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
BitBlt
GetBitmapBits
GetObjectW
SetTextColor
SetBkMode
SelectObject
GetStockObject
DeleteObject
DeleteDC
CreateFontIndirectW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegCloseKey
RegQueryValueExW
RegDeleteKeyW
RegOpenKeyExW
CryptAcquireContextW
CryptGenRandom
RegCreateKeyExW
RegDeleteValueW
RegEnumValueW
RegSetValueExW
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
InitiateSystemShutdownW
RegConnectRegistryW
ChangeServiceConfig2W
CloseServiceHandle
ControlService
CreateServiceW
DeleteService
EnumDependentServicesW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
StartServiceW
RegCreateKeyW
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
RegQueryValueExA
RegOpenKeyExA
RegFlushKey
RegEnumKeyExW
RegSetValueExA
RegQueryInfoKeyW
RegOpenKeyW
RegOpenKeyA

shell32

CommandLineToArgvW
SHGetDesktopFolder
SHGetMalloc
ShellExecuteExW
SHBrowseForFolderW
SHBrowseForFolderA
SHCreateDirectoryExA
SHGetPathFromIDListW
SHGetPathFromIDListA
SHFileOperationW
ExtractIconW
ShellExecuteW
SHGetFolderPathW
SHGetSpecialFolderPathW
ord165
ExtractIconExW
SHGetFolderPathA

ole32

CoTaskMemRealloc
CoInitialize
CoInitializeEx
CoUninitialize
CoTaskMemFree
OleRun
CreateStreamOnHGlobal
OleLockRunning
OleUninitialize
OleInitialize
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
ReleaseStgMedium
OleDuplicateData
DoDragDrop
RevokeDragDrop
RegisterDragDrop
CoCreateInstance
StringFromGUID2
CoCreateGuid

oleaut32

VariantCopyInd
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayRedim
SafeArrayDestroy
SafeArrayCreate
VarUI4FromStr
OleLoadPicture
VariantChangeType
VarDecCmp
VarDecFromStr
VarDateFromStr
VarR8FromStr
VarI4FromStr
VarUdateFromDate
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VarBstrCmp
VariantClear
VariantInit
SysStringByteLen
SysStringLen
SysAllocStringLen
SysAllocString
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
GetErrorInfo
CreateErrorInfo
SysAllocStringByteLen

shlwapi

StrStrW
StrCmpIW
StrStrIW
PathFileExistsW
StrTrimW
AssocQueryStringW
PathRemoveFileSpecW

comctl32

ImageList_LoadImageW
_TrackMouseEvent
ImageList_Create
ImageList_Destroy
ImageList_Draw
ImageList_AddMasked
ImageList_DrawEx
ImageList_GetIcon
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_GetImageInfo
DestroyPropertySheetPage
PropertySheetW
CreateStatusWindowW
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Add
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Remove
CreatePropertySheetPageW
ImageList_DrawIndirect
ImageList_SetImageCount
ImageList_Replace
InitCommonControlsEx

msimg32

TransparentBlt
AlphaBlend
GradientFill

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

uxtheme

DrawThemeBackground
CloseThemeData
OpenThemeData

gdiplus

GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipDeleteFont
GdipDrawString
GdipMeasureString
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatFlags
GdipCreateCachedBitmap
GdipDeleteCachedBitmap
GdipDrawCachedBitmap
GdipCreateBitmapFromStream
GdipFree
GdipAlloc
GdipFillPath
GdipAddPathArc
GdipAddPathLine
GdipGetPathLastPoint
GdipResetPath
GdipDeletePath
GdipCreatePath
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipFillPie
GdipFillRectangle
GdipDrawPath
GdipDrawPie
GdipDrawRectangle
GdipDrawLine
GdipSetSmoothingMode
GdipCreateFromHWND
GdipCreateFromHDC
GdipSaveImageToFile
GdipSetPenBrushFill
GdipSetPenColor
GdipDeletePen
GdipCreatePen1
GdipSetLineColors
GdipCreateLineBrushFromRect
GdipCreateLineBrushI
GdipCreateLineBrush
GdipSetSolidFillColor
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipIsVisiblePathPoint
GdiplusShutdown
GdipAddPathPie
GdiplusStartup

psapi

GetModuleBaseNameW
EnumProcesses
EnumProcessModules

wininet

HttpOpenRequestA
InternetOpenUrlA
InternetConnectA
InternetOpenA
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetReadFile
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetSetOptionA

Exports

Exports

?GetDecryptProc@@YGXP6GXXZ@Z
?GetEncryptProc@@YGXP6GXXZ@Z
?SetDecryptionKey@@YGXP6GXPADK@Z@Z

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 624KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 125KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shr
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e9b8c54a0ba55b7a76a401217627b05

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

82:00:a1:d4:b7:c3:95:97:9c:a0:95:ac:ac:93:65:22Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

26:89:40:3f:51:20:2d:a7:60:83:99:44:f6:68:ae:2f:d2:77:83:4aSigner

Headers

DLL Characteristics

File Characteristics

Imports

activeds

ws2_32

mpr

mswsock

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

version

uxtheme

gdiplus

psapi

wininet

Exports

Exports

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 624KB - Virtual size: 624KB

.data Size: 125KB - Virtual size: 221KB

.shr Size: 512B - Virtual size: 4B

.rsrc Size: 203KB - Virtual size: 203KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

82:00:a1:d4:b7:c3:95:97:9c:a0:95:ac:ac:93:65:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

26:89:40:3f:51:20:2d:a7:60:83:99:44:f6:68:ae:2f:d2:77:83:4a
Signer

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 624KB - Virtual size: 624KB

.data
Size: 125KB - Virtual size: 221KB

.shr
Size: 512B - Virtual size: 4B

.rsrc
Size: 203KB - Virtual size: 203KB