LangDialog
Overview
overview
7Static
static
386e24da5a2...18.exe
windows7-x64
786e24da5a2...18.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...on.dll
windows7-x64
3$PLUGINSDI...on.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...0d.dll
windows7-x64
1$PLUGINSDI...0d.dll
windows10-2004-x64
1$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...nz.dll
windows7-x64
3$PLUGINSDI...nz.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
86e24da5a2e942e4c9d795b57e76e622_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
86e24da5a2e942e4c9d795b57e76e622_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NotifyIcon.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NotifyIcon.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240419-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/__ef5e53590dde439fb76726fea4fad80d.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/__ef5e53590dde439fb76726fea4fad80d.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsisunz.dll
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsisunz.dll
Resource
win10v2004-20240508-en
General
-
Target
86e24da5a2e942e4c9d795b57e76e622_JaffaCakes118
-
Size
746KB
-
MD5
86e24da5a2e942e4c9d795b57e76e622
-
SHA1
d64408898069e7d2bf2ba770549b11b2cac1130c
-
SHA256
211355e92fee4c63d7773f3f681b4534b3c4f62be1de5ef6d2f620c521aa53b3
-
SHA512
3fd29e13294145fc990bd5bd6a8fc19c907518a0175ac276f1654bc011e58b046e19c7dbf0f7bc68645e6ccd2556b1c90dcddb46e680d7baa32d18eec5bbb7f9
-
SSDEEP
12288:Q0gJvPuFB+qkuF35fGpVSa3iHLZ+6wxYY9GwhvhASeeAQs3uI0Bzv:rsXujvkqkYnM6KGwhw3109v
Malware Config
Signatures
-
Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource 86e24da5a2e942e4c9d795b57e76e622_JaffaCakes118 unpack001/$PLUGINSDIR/LangDLL.dll unpack001/$PLUGINSDIR/NotifyIcon.dll unpack001/$PLUGINSDIR/System.dll unpack001/$PLUGINSDIR/__ef5e53590dde439fb76726fea4fad80d.dll unpack001/$PLUGINSDIR/inetc.dll unpack001/$PLUGINSDIR/nsDialogs.dll unpack001/$PLUGINSDIR/nsisunz.dll
Files
-
86e24da5a2e942e4c9d795b57e76e622_JaffaCakes118.exe windows:5 windows x86 arch:x86
be41bf7b8cc010b614bd36bbca606973
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW
user32
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
advapi32
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 458KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/LangDLL.dll.dll windows:5 windows x86 arch:x86
e981c0ab92cb1f191bb5e23392e14796
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalFree
lstrlenW
GlobalAlloc
lstrcmpW
GetModuleHandleW
MulDiv
lstrcpyW
lstrcpynW
user32
SetWindowTextW
SetDlgItemTextW
EndDialog
SendDlgItemMessageW
DialogBoxParamW
LoadIconW
SendMessageW
ShowWindow
GetDC
gdi32
CreateFontIndirectW
GetDeviceCaps
DeleteObject
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 729B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 350B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/NotifyIcon.dll.dll windows:5 windows x86 arch:x86
78155e3314922676e9dbf9f4fff8568c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalFree
GlobalAlloc
GetProcAddress
GetModuleHandleW
lstrlenW
lstrcpyW
lstrcpynW
user32
ShowWindow
OpenIcon
KillTimer
IsIconic
CallWindowProcW
wsprintfW
GetDlgItem
FindWindowExW
GetWindowLongW
SetTimer
LoadImageW
SendMessageW
SetWindowLongW
shell32
Shell_NotifyIconW
Exports
Exports
Icon
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/System.dll.dll windows:5 windows x86 arch:x86
039bcbc605477e8e87ec550c2e60e748
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary
user32
wsprintfW
ole32
CLSIDFromString
StringFromGUID2
Exports
Exports
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/__ef5e53590dde439fb76726fea4fad80d.dll.dll windows:5 windows x86 arch:x86
bde8d1d6623d597ec1d7410e1ff27f8d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WaitForSingleObject
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
LoadLibraryW
MultiByteToWideChar
lstrlenW
GetSystemDefaultUILanguage
SystemTimeToFileTime
InitializeCriticalSectionAndSpinCount
Sleep
LeaveCriticalSection
EnterCriticalSection
CreateMutexA
GetCurrentDirectoryA
GetUserDefaultUILanguage
ReleaseMutex
GetSystemTime
SetFilePointer
SetFileTime
WriteFile
CreateFileW
GetCurrentDirectoryW
LocalFileTimeToFileTime
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetVersionExW
GetProcessHeap
SetEndOfFile
GetDriveTypeW
SetEnvironmentVariableA
WriteConsoleW
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetLocaleInfoW
CreateFileA
GetFullPathNameA
SetStdHandle
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetTimeZoneInformation
GetModuleFileNameW
IsValidCodePage
GetOEMCP
CloseHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapSize
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
SetHandleCount
CompareStringW
GetCPInfo
LCMapStringW
RtlUnwind
RaiseException
FindFirstFileExA
GetDriveTypeA
FindClose
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateThread
ExitThread
GetCommandLineA
GetCurrentThreadId
HeapReAlloc
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
InterlockedExchange
DecodePointer
EncodePointer
ExpandEnvironmentStringsA
VirtualQuery
GetStdHandle
GetFileType
WaitForMultipleObjects
PeekNamedPipe
SleepEx
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
VerSetConditionMask
GetLastError
GetFileSizeEx
GetACP
ReadFile
GetUserDefaultLangID
VerifyVersionInfoA
FormatMessageA
GetFileSize
SetLastError
user32
CallWindowProcW
IsCharAlphaW
SetTimer
SendMessageW
CreateWindowExW
SetWindowPos
SetParent
KillTimer
wsprintfW
BringWindowToTop
UpdateWindow
GetWindowRect
GetMessageW
TranslateMessage
MessageBoxA
MapWindowPoints
MoveWindow
ShowWindow
SetWindowLongW
GetParent
DestroyWindow
DefWindowProcW
GetWindowLongW
RegisterClassExW
GetClientRect
GetPropW
SetPropW
LoadCursorW
RemovePropW
SetCursor
DispatchMessageW
SetFocus
ws2_32
WSACleanup
WSAStartup
WSASetLastError
__WSAFDIsSet
WSAGetLastError
select
recv
WSAIoctl
setsockopt
getsockname
ntohs
bind
htons
getsockopt
getpeername
closesocket
socket
connect
freeaddrinfo
getaddrinfo
sendto
recvfrom
accept
listen
ioctlsocket
gethostname
send
wldap32
ord50
ord41
ord27
ord301
ord33
ord200
ord79
ord35
ord32
ord30
ord26
ord60
ord143
ord211
ord22
ord46
normaliz
IdnToAscii
advapi32
CryptDestroyHash
CryptReleaseContext
CryptHashData
CryptAcquireContextA
CryptCreateHash
CryptGetHashParam
oleaut32
SysAllocString
SysFreeString
VariantClear
VariantInit
Exports
Exports
__049a1d45a62b42809e25c6548fd2dd03
__062e8ab7a6cb4cd4a89ae91ba9b41a93
__07216311503947a39f4bc04df212447e
__0756e529b2f445f9b98e7ed622b67ce1
__082a4ce240c542ee88a973f45acc9c5e
__12fabbdba1e6401f9a87f09a66e901b9
__15affb5b5db24c4fa2042275d85ccbda
__1a86f5070b694ac497fb47bd5a3efec4
__1d25489fb212476b85b67c8d61fc0931
__23c7afbc8ee743c9b6e8c4a41472f44d
__25999a1311a943ab8b59479604916933
__28e4080e6e9d473596d3ff23f052c504
__29af2abcae414b7f8d7b2df435d9d24d
__2a6e60cad43644e8bf5731de3bd0eee1
__2ab635b2cdec431a8a6f8fbf88fb91a0
__2c036673da794445a38f8f9baa056f9a
__2da4a5a0191649428c6b03da0d89f64b
__2f041695dbea4795b3d3f16bd704d4a9
__318631c524a041fd996d16376fb2cf2e
__33f967de366c469f8c6745672e99bbec
__34181a968b0446c58bdfe9e0aa6c07c0
__358c097dd3e349d8bf8fe8b40713f688
__3994f68e1c114c5191f766dd0edfb4eb
__3b15acda2c024949a9efd15051afa231
__3c1e31a9cc7c4811bbb699370989b769
__3d547c9a174942daa6b1cfe30d916bcb
__3f344d7ccc8b44e0b93d2379834b0206
__3fe8f7cd7f584c43b268e5bacf924e50
__41f6bcf4a2f642c0984adf7f042256d8
__438e9a14fada46fabb50a75ecdd5dc8a
__47bd1be925a34c4e8450c6c573ed0645
__49e506591ee8447490b887a143334d2a
__49f6ee41c31b477080de1e292f0e0a04
__4b58e101ae0f4bc797ee3eb948b02b23
__4b5909e235fe44288c674f87f4a301d1
__4bf9fbf46fca4099ab1ebf5d82c1f69d
__4ee6e0ed97914b37934a3c0ea48357ff
__55d04b5b745d4d9781292849e60a3cb6
__5bd409e9c929451d8f17348ea9d2d700
__5c43fc7983e4460b95d440552c11211f
__5fbb70715eb44430b69d05129088b03d
__61ed0b504ad049e0a0991d23b00b0265
__64d7e593d38e45858e7a5ac7ba0b1ec3
__6b321414d7754e339fde103a73addda8
__6ca66b56060542009cdc18663673e735
__6eb5bef154994daebd168f241be41fcb
__728b14e6ff1a469a96c6a59e92b5194c
__73817b84f585421fb5939a899256dfcd
__7429ec88807b4e0684fd8bc194356528
__78b601e48abe4fa8bf77dfb15c54b730
__7af0c1dda4754545b01b04ec78f1ad4d
__7c3a9f3fc7234df2b763d459098a3bf2
__7c9a7caddd2648d3963261fab6d49446
__80bd0105144745f080d18887f4ba00ef
__83d198f784244f83bf717ce2b04a0fa5
__87c13533dc4b49709b90aa1999c14c18
__8956744508374b908b6440d39ce1b232
__8bb5e2e9e821419a8e8132a7d708da29
__8d658c2c1e74424e831ca5872735d467
__8db04eb259904e6a849ff3fda341282c
__8dc04dc3175648e8bd1768b684ca0ba5
__8f66450299664883b555c0a8c63fa8c9
__9046cd27c32b42e49739d456b1a703fe
__907ced62c0144f7eb28a623e94de7532
__909719aea23147cebe9ccf48c88328a6
__94e03aeaab9c454e9cba9fce0cab5915
__9c27c2dfb31241b983c8f73a0a41ccb2
__9e2251993dc649d19913a346c7add2f3
__9e3bc314769445ba82c912141f6a99f6
__a00784434e94405180b42223e6c775ba
__a19634ef000e42fea99e6f74bfbce4ec
__a5bbbcbba2404e45920c078758f9355c
__a8e470d57c894633b0b6375f9b34ab27
__af2fd18a348a46dfb20465f427a41c96
__b0dd8bc8ccd04b2a80a28b239d2b1bd2
__b308f885fa374a17a826f8f0c02d192a
__b55a417a3e4f41ae9aa16159f5de2399
__b694eeefefd3497f98cfc5cc1e4cc83e
__b7378ce940504089982bba86dbb0b5b0
__b8a98806a1184e36850778596fdef822
__ba3d3c42f054461f85e3378f05c4a94d
__bcb74927b758436d800d1d4e37ace232
__be73f6d19bd940bea6f50ec05c91f7a9
__c175c7d28ea24bba8fc7a87ae76adbf0
__c2c4e9f94dbd47498ca942d9e5667fa0
__c42794ac53184f4db1685239b661c0db
__c48c9f963929479da687741b14888e91
__c61912beaf9143f687a742583232d628
__cc4f3586ccef433499b258e291e32863
__ce2342f105a1436fad52a1659913f1cb
__cefdc62a16664329983a4a2f0ac59217
__cf7bddd42d5e48d887df9f2114b7f019
__cff6addcc5e84d85aef6c382a0db2724
__d4a77cde06974e69811601d60aa6b4a9
__d60c9bd74e8f4e31bbc6b09359e5a6cd
__d8a94c2923d844f78472114a9465d490
__d992d4284b07485c8375341e492c1828
__db5677b665454e9f87cacbf688f27615
__dbe1ed8c57684a2589fabe021a52df99
__dc05c8b4dfe848c9be681b4935259578
__e0c9b08e5fcd4ed5b0ff3bf6b29f2a0f
__e1a3432d9e894512b1a9f2ea4dad28d6
__e23f322fe3fd43deac68ca2c1ffaa07a
__e3270275816b41e0bd2642f59606c723
__e77f5c863c0e41b68dd637efd35e9c54
__e7d909393389463f873dd01ea85a2c86
__eb96744278d64dc29d3c2a1ad3528364
__ebba47fae89e460b9c215ba699106522
__ee38d8caea314decb5ddd565142f2cb9
__ef2962109e944e6b93250c60bc383c17
__f251cec752264c09b04f9c16be121536
__f3173f629ac14e19aeaa7be1e0e47685
__f486869c9c1a4abe843c796a2236a033
__f95317cbe3a94768b3692a68ab83f538
__f99bb546e34543a4965415e972e487c3
__fb179e386edf464eac10bed05c2816a3
Sections
.text Size: 660KB - Virtual size: 659KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/inetc.dll.dll windows:4 windows x86 arch:x86
86cdacc6fa5e3ff4938d358350751516
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
wcstol
_adjust_fdiv
malloc
_initterm
free
strlen
strchr
strrchr
wcsrchr
wcstoul
wcsstr
wcschr
memset
_chkesp
kernel32
DeleteFileW
WideCharToMultiByte
CreateFileA
CreateThread
WaitForSingleObject
TerminateThread
GetModuleHandleW
MulDiv
lstrcpyW
GlobalAlloc
LoadLibraryW
GetProcAddress
lstrcmpiW
CreateFileW
lstrlenW
WriteFile
ReadFile
lstrcmpW
lstrcpynW
GetLastError
GetFileSize
GlobalFree
CloseHandle
SleepEx
SetFilePointer
GetTickCount
lstrcatW
user32
MessageBoxW
GetParent
ShowWindow
SetWindowLongW
IsWindow
SetWindowTextW
SendDlgItemMessageW
GetDlgItem
PostMessageW
GetWindowTextW
SendMessageW
SetDlgItemTextW
SetWindowPos
SystemParametersInfoW
GetClientRect
GetWindowRect
SetTimer
LoadIconW
DestroyWindow
KillTimer
UpdateWindow
RedrawWindow
DispatchMessageW
TranslateMessage
IsDialogMessageW
GetMessageW
IsWindowVisible
EnableWindow
CreateDialogParamW
FindWindowExW
wsprintfA
wsprintfW
GetWindowLongW
wininet
HttpSendRequestW
HttpSendRequestExW
HttpQueryInfoW
FtpCreateDirectoryW
FtpOpenFileW
InternetGetLastResponseInfoW
InternetSetFilePointer
InternetSetOptionW
InternetQueryOptionW
HttpAddRequestHeadersA
InternetCloseHandle
InternetErrorDlg
HttpAddRequestHeadersW
HttpOpenRequestW
HttpEndRequestW
InternetConnectW
InternetCrackUrlW
InternetOpenW
InternetReadFile
InternetWriteFile
comctl32
ord17
Exports
Exports
get
head
post
put
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/modern-header.bmp
-
$PLUGINSDIR/modern-wizard.bmp
-
$PLUGINSDIR/nsDialogs.dll.dll windows:5 windows x86 arch:x86
9ea5bdc8c90dfcffe309465c26c89758
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
MulDiv
lstrlenW
HeapFree
GetProcessHeap
lstrcmpiW
HeapReAlloc
lstrcpynW
GetFileAttributesW
lstrcpyW
GetCurrentDirectoryW
SetCurrentDirectoryW
HeapAlloc
GlobalFree
user32
LoadCursorW
RemovePropW
DrawFocusRect
GetPropW
DrawTextW
GetWindowTextW
GetDlgItem
SetWindowLongW
SetWindowPos
CreateDialogParamW
MapWindowPoints
GetWindowRect
SetCursor
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
GetClientRect
CharPrevW
CallWindowProcW
SetPropW
DestroyWindow
MapDialogRect
CharNextW
SendMessageW
GetWindowLongW
gdi32
SetTextColor
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
comdlg32
GetSaveFileNameW
CommDlgExtendedError
GetOpenFileNameW
ole32
CoTaskMemFree
Exports
Exports
Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 590B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/nsisunz.dll.dll windows:5 windows x86 arch:x86
1b37562e8104552588ae892e11fcdff2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryW
lstrcpyW
GetVersion
lstrlenW
lstrcatW
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
lstrcpynW
lstrcmpiW
lstrcmpW
GlobalFree
GlobalAlloc
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
CloseHandle
WriteFile
GetConsoleCP
GetConsoleMode
RtlUnwind
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileW
InitializeCriticalSectionAndSpinCount
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
SetEndOfFile
GetProcessHeap
GetLocaleInfoA
user32
MessageBoxW
CharPrevW
PeekMessageW
TranslateMessage
DispatchMessageW
FindWindowExW
GetDlgItem
SendMessageW
wsprintfW
Exports
Exports
Unzip
UnzipToLog
UnzipToStack
extract_RunDLL
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ