8f4a820f91b3a8a78ed23b99ca4941c9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8f4a820f91b3a8a78ed23b99ca4941c9_JaffaCakes118
Size

20.6MB
MD5

8f4a820f91b3a8a78ed23b99ca4941c9
SHA1

539e7bdff618c31f4f8cdea66e085ebbe62b8d7d
SHA256

dc512518df998bc93616857bba8c24c4489b2ddd5eb64fb927ab79cab8f019f4
SHA512

251d26be26541c3d2eb1e6cb5c070dcae72ccc379efc1fb6a60f0596d47a7907bedc2fff33a8fe76478c5aaaf43fe5add01ec6b9c8a1caf9d04598de66bbe8f9
SSDEEP

393216:N7n6xYAIi4NTCtwfuexnkT0cTHGsS51tVw9Avhbqapd8mA/nb1CWrBFet/Zng0Jt:Nj6Y3TKwf5iJmsyfVhhPMb1BgZzV

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/AccessControl.dll
unpack001/$PLUGINSDIR/ILInstallUtil.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/UserInfo.dll
unpack002/$PLUGINSDIR/ILUninstall.dll
unpack002/$PLUGINSDIR/InstallOptions.dll

NSIS installer 4 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/uninstall.exe	nsis_installer_1
static1/unpack001/uninstall.exe	nsis_installer_2

Files

8f4a820f91b3a8a78ed23b99ca4941c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2a:07:96:32:9c:2a:2b:77:87:f9:2c:89:1a:a9:03:91:63:f1:ec:de
Signer

Actual PE Digest

2a:07:96:32:9c:2a:2b:77:87:f9:2c:89:1a:a9:03:91:63:f1:ec:de

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/AccessControl.dll
.dll windows:4 windows x86 arch:x86

ed83f419402bc3b83a08e3aaf8b5b5b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

ConvertStringSidToSidA
LookupAccountNameA
AdjustTokenPrivileges
LookupPrivilegeValueA
GetUserNameA
SetNamedSecurityInfoA
SetEntriesInAclA
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
OpenProcessToken
LookupAccountSidA
ConvertSidToStringSidA
GetSidSubAuthority
GetSidSubAuthorityCount

kernel32

lstrcmpiA
lstrcpyA
LocalAlloc
lstrlenA
LocalFree
GetLastError
GlobalFree
lstrcpynA
GlobalAlloc
GetFileAttributesA
CloseHandle
GetCurrentProcess
lstrcatA

user32

wsprintfA

Exports

Exports

ClearOnFile
ClearOnRegKey
DenyOnFile
DenyOnRegKey
DisableFileInheritance
DisableRegKeyInheritance
EnableFileInheritance
EnableRegKeyInheritance
GetCurrentUserName
GetFileGroup
GetFileOwner
GetRegKeyGroup
GetRegKeyOwner
GrantOnFile
GrantOnRegKey
IsUserTheAdministrator
RevokeOnFile
RevokeOnRegKey
SetFileGroup
SetFileOwner
SetOnFile
SetOnRegKey
SetRegKeyGroup
SetRegKeyOwner
SidToName

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ILInstallUtil.dll
.dll windows:5 windows x86 arch:x86

f54089062a794946c82cd9c08d60bc3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegFlushKey
RegDeleteValueW
RegCreateKeyExW
RegCloseKey

user32

MessageBoxA
CharNextW
LoadStringW
wvsprintfA
MessageBoxW
LoadStringW
GetSystemMetrics
CharUpperW

kernel32

Sleep
VirtualFree
VirtualAlloc
lstrlenW
lstrcpynW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrcpynA
lstrcpyA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQueryEx
VirtualQuery
VirtualFree
SwitchToThread
SetLastError
SetFilePointer
SetEvent
SetEndOfFile
ResetEvent
ReadFile
LocalFree
LeaveCriticalSection
IsValidLocale
GlobalFree
GlobalAlloc
GetVersionExW
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileAttributesW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcess
GetCPInfoExW
GetCPInfo
GetACP
InterlockedExchangeAdd
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
CreateFileW
CreateEventW
CopyFileW
CompareStringW
CloseHandle
Sleep

version

VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoA

Exports

Exports

AssociateFileExt
BackSlashToDoubleBackSlash
CheckFileVersionMinMax
CheckFileVersions
CheckVersion
DoFLUpdate
EnsurePath
FindFLPath
GetPathFromFilename
GetRootPath
GetUserForPermissions
MightBeRegistered
RemoveFileExtAssociation
StoreILPath
SupportsSSE
VerifyFLPath
VerifyFLPathMajorVersion

Sections

.text
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 518B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/UserInfo.dll
.dll windows:4 windows x86 arch:x86

afa8e526425f3585465337467d0b5909

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersion
GetCurrentThread
lstrcpynA
GetCurrentProcess
GetModuleHandleA
GetProcAddress
GetLastError
GlobalFree
CloseHandle
GlobalAlloc

advapi32

OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
GetUserNameA
OpenThreadToken

Exports

Exports

GetAccountType
GetName
GetOriginalAccountType

Sections

.text
Size: 1024B - Virtual size: 741B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 673B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioA.ini
$PLUGINSDIR/ioDirQuestion.ini
$PLUGINSDIR/ioGotoWebPage.ini
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$TEMP/IL Minihost Modular.dll
.dll windows:5 windows x86 arch:x86

7e92a195b67101bd983fbaf5e7b1ac5f

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e2:50:d8:cf:b4:f4:05:42:46:0f:22:cd:25:93:7f:6f:00:ab:0d:72
Signer

Actual PE Digest

e2:50:d8:cf:b4:f4:05:42:46:0f:22:cd:25:93:7f:6f:00:ab:0d:72

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\image-line\cplusplus\MiniHostModular\trunk\Builds\VisualStudio2008\ReleaseVSTi\MiniHostModular.pdb

Imports

kernel32

GetFileAttributesW
DeleteFileW
RemoveDirectoryW
MoveFileW
GetFileAttributesExW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
FindNextFileW
FindFirstFileW
GetLastError
WriteFile
OutputDebugStringW
GetLocaleInfoW
GetDriveTypeW
FormatMessageW
CreateDirectoryW
FlushFileBuffers
SetEndOfFile
MapViewOfFile
GetVolumeInformationW
GetModuleFileNameW
GetLogicalDriveStringsW
GetTempPathW
GlobalUnlock
GlobalSize
GlobalLock
GlobalAlloc
GetCurrentProcessId
SetLastError
SetUnhandledExceptionFilter
FindResourceA
CreateEventA
CreateFileMappingA
CreateProcessA
FreeLibrary
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
SetStdHandle
GetStartupInfoA
SetHandleCount
HeapSize
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
GetCommandLineA
UnhandledExceptionFilter
CreateThread
ExitThread
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetModuleHandleW
GetFileType
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
RaiseException
FindClose
ReadFile
TerminateProcess
CompareStringW
ExitProcess
IsDebuggerPresent
SetThreadAffinityMask
GetCurrentThreadId
TerminateThread
LeaveCriticalSection
TryEnterCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleA
GetVersionExW
UnmapViewOfFile
SetFilePointer
FindResourceW
LoadResource
LockResource
SizeofResource
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentThread
GetThreadPriority
GetCurrentProcess
GetProcessHeap
SetThreadPriority
SetPriorityClass
ResetEvent
CloseHandle
LoadLibraryW
Sleep
LoadLibraryA
GetProcAddress
SetEnvironmentVariableA
CompareStringA

user32

DestroyCaret
GetSystemMenu
ShowWindow
GetWindowPlacement
SetCaretPos
ShowCaret
CreateCaret
SetForegroundWindow
RedrawWindow
SetLayeredWindowAttributes
RegisterClipboardFormatA
SetWindowsHookExA
DefWindowProcW
GetWindowLongW
GetDesktopWindow
CreateWindowExW
RegisterClassExW
UnregisterClassW
DestroyWindow
SetWindowLongW
MoveWindow
GetWindowRect
IsWindow
CallWindowProcW
SendMessageW
ScrollWindowEx
PrintWindow
EqualRect
SetParent
SetWindowLongA
UpdateWindow
SetWindowPos
GetWindow
AttachThreadInput
GetWindowThreadProcessId
DispatchMessageW
TranslateMessage
SetFocus
GetFocus
GetMessageW
PeekMessageW
PostMessageW
GetMessageTime
ReleaseDC
GetDC
SetWindowTextW
GetAncestor
GetAsyncKeyState
GetMessageExtraInfo
GetParent
EnableMenuItem
MessageBoxW
SetCursorPos
MessageBeep
CloseClipboard
GetClipboardData
OpenClipboard
DestroyCursor
SetCursor
LoadCursorW
GetIconInfo
CreateIconIndirect
GetWindowInfo
IsChild
WindowFromPoint
GetMessagePos
GetCursorPos
SetClipboardData
EmptyClipboard
DestroyIcon
GetSystemMetrics
GetClassNameA
UnhookWindowsHookEx
GetForegroundWindow
SendInput
GetClientRect
SystemParametersInfoW
EnumDisplayMonitors
EndPaint
BeginPaint
GetUpdateRgn
MapVirtualKeyW
PostMessageA
CallNextHookEx
GetActiveWindow
TrackMouseEvent
SetCapture
GetCapture
ReleaseCapture
InvalidateRect

gdi32

CreateCompatibleDC
DeleteDC
StretchDIBits
SaveDC
ExcludeClipRect
GetRegionData
DeleteObject
CreateRectRgnIndirect
CreateRectRgn
GetBitmapBits
BitBlt
CreateCompatibleBitmap
GetClipBox
GetOutlineTextMetricsW
CreateFontIndirectW
SelectObject
SetMapperFlags
GetGlyphIndicesW
GetGlyphOutlineW
GetKerningPairsW
GetTextMetricsW
GetPixel
GetObjectW
CreateDIBSection
CreateBitmap
CombineRgn
SetMapMode
RestoreDC

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
ExtractAssociatedIconW
SHGetSpecialFolderPathW

ole32

RevokeDragDrop
RegisterDragDrop
CoTaskMemAlloc
OleInitialize
OleUninitialize
DoDragDrop

wininet

InternetCrackUrlW
InternetConnectW
FtpOpenFileW
HttpOpenRequestW
InternetOpenW
HttpQueryInfoW
InternetCloseHandle
InternetSetOptionW
HttpEndRequestW
InternetWriteFile
HttpSendRequestExW
InternetReadFile
InternetSetFilePointer

shlwapi

PathStripToRootW

winmm

timeBeginPeriod
timeGetTime

imm32

ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME

imagehlp

MapAndLoad
ImageRvaToVa
UnMapAndLoad
ImageDirectoryEntryToData

rpcrt4

UuidCreate

Exports

Exports

VSTPluginMain
main

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MiniHostModular.exe
.exe windows:5 windows x86 arch:x86

686d04fd0999c7f929b3075e35d4a444

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

46:80:3e:03:92:8f:ea:55:d2:7f:a4:5d:ab:76:c2:d9:07:57:90:10
Signer

Actual PE Digest

46:80:3e:03:92:8f:ea:55:d2:7f:a4:5d:ab:76:c2:d9:07:57:90:10

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\image-line\cplusplus\MiniHostModular\trunk\Builds\VisualStudio2008\Release200\MiniHostModular.pdb

Imports

kernel32

GetFileAttributesW
DeleteFileW
RemoveDirectoryW
MoveFileW
GetFileAttributesExW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
FindNextFileW
FindFirstFileW
GetLastError
WriteFile
OutputDebugStringW
GetLocaleInfoW
CreateMutexW
GetDriveTypeW
FormatMessageW
CreateDirectoryW
FlushFileBuffers
SetEndOfFile
MapViewOfFile
GetVolumeInformationW
GetModuleFileNameW
GetLogicalDriveStringsW
GetTempPathW
GlobalUnlock
GlobalSize
GlobalLock
GetCommandLineW
GlobalAlloc
GetCurrentProcessId
SetLastError
SetUnhandledExceptionFilter
FindResourceA
CreateEventA
CreateFileMappingA
CreateProcessA
FreeLibrary
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
SetStdHandle
SetHandleCount
HeapSize
VirtualAlloc
VirtualFree
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
GetStartupInfoA
GetCommandLineA
UnhandledExceptionFilter
CreateThread
ExitThread
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetModuleHandleW
GetFileType
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
RaiseException
FindClose
ReadFile
TerminateProcess
CompareStringW
ReleaseMutex
ExitProcess
IsDebuggerPresent
SetThreadAffinityMask
GetCurrentThreadId
TerminateThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleA
GetVersionExW
IsProcessorFeaturePresent
GetNativeSystemInfo
UnmapViewOfFile
SetFilePointer
FindResourceW
LoadResource
LockResource
SizeofResource
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentThread
GetProcessHeap
GetThreadPriority
GetCurrentProcess
GetPriorityClass
SetThreadPriority
SetPriorityClass
ResetEvent
CloseHandle
LoadLibraryW
Sleep
LoadLibraryA
GetProcAddress
SetEnvironmentVariableA
CompareStringA

user32

DestroyCaret
GetSystemMenu
ShowWindow
GetWindowPlacement
SetCaretPos
ShowCaret
CreateCaret
SetForegroundWindow
DefWindowProcW
GetWindowLongW
GetDesktopWindow
CreateWindowExW
RegisterClassExW
UnregisterClassW
DestroyWindow
SetWindowLongW
MoveWindow
GetWindowRect
IsWindow
CallWindowProcW
SendMessageW
RegisterClipboardFormatA
ScrollWindowEx
PrintWindow
EqualRect
SetParent
SetWindowLongA
RedrawWindow
UpdateWindow
AttachThreadInput
GetWindowThreadProcessId
DispatchMessageW
TranslateMessage
SetFocus
GetFocus
GetMessageW
PeekMessageW
PostMessageW
SendMessageTimeoutW
GetWindowTextW
EnumWindows
GetMessageTime
ReleaseDC
GetDC
SetWindowTextW
GetAncestor
GetAsyncKeyState
GetMessageExtraInfo
GetParent
EnableMenuItem
MessageBoxW
SetCursorPos
MessageBeep
CloseClipboard
GetClipboardData
OpenClipboard
DestroyCursor
SetCursor
LoadCursorW
GetIconInfo
CreateIconIndirect
GetWindowInfo
IsChild
WindowFromPoint
GetMessagePos
GetCursorPos
SetClipboardData
EmptyClipboard
DestroyIcon
GetSystemMetrics
SetWindowPos
SetLayeredWindowAttributes
GetForegroundWindow
GetClientRect
SystemParametersInfoW
EnumDisplayMonitors
EndPaint
BeginPaint
GetUpdateRgn
MapVirtualKeyW
GetWindowLongA
GetWindow
GetActiveWindow
TrackMouseEvent
SetCapture
GetCapture
ReleaseCapture
InvalidateRect

gdi32

SetMapMode
CreateFontIndirectW
SelectObject
GetOutlineTextMetricsW
DeleteObject
CreateCompatibleDC
SetMapperFlags
CreateRectRgnIndirect
CreateRectRgn
GetBitmapBits
BitBlt
CreateCompatibleBitmap
GetClipBox
GetGlyphOutlineW
GetTextMetricsW
GetKerningPairsW
GetPixel
GetObjectW
CreateDIBSection
CreateBitmap
RestoreDC
StretchDIBits
SaveDC
ExcludeClipRect
GetRegionData
DeleteDC
GetGlyphIndicesW
CombineRgn

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCreateKeyExW
RegOpenKeyW
RegEnumKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHBrowseForFolderW
SHGetMalloc
ExtractAssociatedIconW
ShellExecuteW

ole32

RevokeDragDrop
RegisterDragDrop
CoTaskMemAlloc
OleInitialize
OleUninitialize
CLSIDFromString
CoInitialize
PropVariantClear
CoCreateInstance
CoTaskMemFree
DoDragDrop

wininet

InternetCrackUrlW
InternetConnectW
FtpOpenFileW
HttpOpenRequestW
InternetOpenW
HttpQueryInfoW
InternetCloseHandle
InternetSetOptionW
HttpEndRequestW
InternetWriteFile
HttpSendRequestExW
InternetReadFile
InternetSetFilePointer

shlwapi

PathStripToRootW

winmm

midiOutLongMsg
midiOutPrepareHeader
midiOutGetNumDevs
midiOutGetDevCapsW
midiInGetNumDevs
midiInGetDevCapsW
midiInUnprepareHeader
midiInAddBuffer
midiOutShortMsg
midiOutOpen
midiInStart
midiInStop
midiInReset
midiOutClose
midiInClose
midiInOpen
timeBeginPeriod
midiOutUnprepareHeader
timeGetTime
midiInPrepareHeader

imm32

ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME

imagehlp

MapAndLoad
ImageRvaToVa
UnMapAndLoad
ImageDirectoryEntryToData

rpcrt4

UuidCreate

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MiniHostModular_x64.exe
.exe windows:5 windows x64 arch:x64

104a58bf4134a6711b577d6e2bd48500

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0a:8d:97:54:72:c4:7f:4f:c3:b3:6d:63:5b:d0:46:e1:78:e0:a6:24
Signer

Actual PE Digest

0a:8d:97:54:72:c4:7f:4f:c3:b3:6d:63:5b:d0:46:e1:78:e0:a6:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

FormatMessageW
GetVersionExW
LeaveCriticalSection
IsProcessorFeaturePresent
GetFileAttributesW
TerminateProcess
ReadFile
GetModuleFileNameW
CreateFileW
FlushFileBuffers
GetTempPathW
GetLastError
GetCurrentDirectoryW
MoveFileW
EnterCriticalSection
FindClose
SetCurrentDirectoryW
RemoveDirectoryW
GetModuleHandleA
IsDebuggerPresent
FindNextFileW
GetFileAttributesExW
QueryPerformanceFrequency
DeleteCriticalSection
GetCurrentThreadId
SetThreadAffinityMask
ReleaseMutex
DeleteFileW
GetVolumeInformationW
GetCommandLineW
GlobalSize
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentProcessId
SetLastError
SetUnhandledExceptionFilter
FindResourceA
CreateEventA
CreateFileMappingA
CreateProcessA
CompareStringW
CompareStringA
WriteConsoleA
CreateFileA
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeFormatA
GetDateFormatA
InitializeCriticalSectionAndSpinCount
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
MultiByteToWideChar
SetStdHandle
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
FlsAlloc
FlsFree
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
GetModuleFileNameA
GetStdHandle
HeapCreate
HeapSetInformation
RtlPcToFileHeader
RaiseException
GetStartupInfoA
GetCommandLineA
RtlUnwindEx
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetTimeZoneInformation
WideCharToMultiByte
CreateThread
ExitThread
GetModuleHandleW
GetFileType
HeapReAlloc
HeapAlloc
HeapFree
GetLocaleInfoW
TerminateThread
InitializeCriticalSection
WriteFile
WriteConsoleW
OutputDebugStringW
CreateDirectoryW
QueryPerformanceCounter
GetLogicalDriveStringsW
FreeLibrary
SetEndOfFile
GetDriveTypeW
UnmapViewOfFile
MapViewOfFile
SetFilePointer
GetNativeSystemInfo
FindFirstFileW
CreateMutexW
ExitProcess
LockResource
SizeofResource
LoadResource
FindResourceW
CloseHandle
GetThreadPriority
CreateEventW
LoadLibraryA
ResetEvent
GetProcAddress
SetThreadPriority
GetProcessHeap
Sleep
LoadLibraryW
GetPriorityClass
GetCurrentThread
SetEvent
WaitForSingleObject
GetCurrentProcess
SetPriorityClass
SetEnvironmentVariableA
GetConsoleOutputCP

user32

GetSystemMenu
MapVirtualKeyW
GetUpdateRgn
CloseClipboard
EnumDisplayMonitors
SetCursor
EndPaint
RegisterClipboardFormatA
PrintWindow
DefWindowProcW
SetWindowLongPtrW
CreateWindowExW
GetDesktopWindow
RegisterClassExW
GetWindowLongPtrW
UnregisterClassW
DestroyWindow
MoveWindow
GetWindow
CallWindowProcW
SendMessageW
IsWindow
EqualRect
UpdateWindow
GetWindowLongA
SetWindowLongA
SetParent
UnhookWindowsHookEx
PostMessageA
SetWindowPos
CallNextHookEx
GetWindowThreadProcessId
AttachThreadInput
DispatchMessageW
SendMessageTimeoutW
PeekMessageW
GetWindowTextW
TranslateMessage
EnumWindows
SetFocus
GetFocus
PostMessageW
GetMessageW
GetMessagePos
GetMessageTime
DestroyIcon
SetWindowTextW
SetClipboardData
SetCaretPos
GetSystemMetrics
ReleaseCapture
MessageBoxW
OpenClipboard
CreateCaret
GetActiveWindow
ShowWindow
SetLayeredWindowAttributes
GetCursorPos
DestroyCaret
DestroyCursor
RedrawWindow
SetWindowLongW
EmptyClipboard
EnableMenuItem
ReleaseDC
SystemParametersInfoW
GetClipboardData
GetAncestor
GetWindowLongW
SetCursorPos
InvalidateRect
GetAsyncKeyState
GetWindowPlacement
SetWindowsHookExA
ScrollWindowEx
GetForegroundWindow
GetCapture
GetDC
GetIconInfo
CreateIconIndirect
BeginPaint
ShowCaret
GetClientRect
WindowFromPoint
MessageBeep
GetWindowInfo
LoadCursorW
GetClassNameA
GetWindowRect
TrackMouseEvent
GetParent
SetForegroundWindow
SetCapture
GetMessageExtraInfo
IsChild

gdi32

SetMapperFlags
GetKerningPairsW
GetGlyphOutlineW
GetGlyphIndicesW
CreateRectRgnIndirect
GetRegionData
GetOutlineTextMetricsW
ExcludeClipRect
CreateDIBSection
CreateCompatibleBitmap
BitBlt
GetBitmapBits
GetClipBox
SetMapMode
SelectObject
CreateCompatibleDC
CreateFontIndirectW
DeleteDC
GetTextMetricsW
RestoreDC
GetPixel
CreateRectRgn
GetObjectW
StretchDIBits
SaveDC
CreateBitmap
DeleteObject
CombineRgn

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCloseKey
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegEnumKeyW

shell32

ExtractAssociatedIconW
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
SHBrowseForFolderW
SHGetSpecialFolderPathW

ole32

RegisterDragDrop
CoTaskMemAlloc
RevokeDragDrop
OleUninitialize
OleInitialize
CoTaskMemFree
PropVariantClear
CoInitialize
CLSIDFromString
CoCreateInstance
DoDragDrop

wininet

HttpQueryInfoW
InternetSetOptionW
InternetWriteFile
InternetOpenW
HttpOpenRequestW
InternetCrackUrlW
FtpOpenFileW
InternetReadFile
InternetConnectW
InternetSetFilePointer
HttpEndRequestW
HttpSendRequestExW
InternetCloseHandle

shlwapi

PathStripToRootW

winmm

midiInAddBuffer
midiOutLongMsg
midiOutClose
midiOutShortMsg
midiOutOpen
midiOutPrepareHeader
midiOutUnprepareHeader
midiInUnprepareHeader
midiInStart
midiInPrepareHeader
midiInReset
midiInGetDevCapsW
midiInClose
midiOutGetNumDevs
midiInStop
midiOutGetDevCapsW
timeGetTime
timeBeginPeriod
midiInOpen
midiInGetNumDevs

imm32

ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME
ImmReleaseContext

imagehlp

UnMapAndLoad
ImageRvaToVa
MapAndLoad
ImageDirectoryEntryToData

rpcrt4

UuidCreate

Exports

Exports

VSTPluginMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugin/VST 32bit/IL Minihost Modular (FX).dll
.dll windows:5 windows x86 arch:x86

7e92a195b67101bd983fbaf5e7b1ac5f

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:7b:9a:8b:87:ac:2b:42:7c:bc:8a:ca:85:7b:ec:ff:9a:c1:a4:06
Signer

Actual PE Digest

55:7b:9a:8b:87:ac:2b:42:7c:bc:8a:ca:85:7b:ec:ff:9a:c1:a4:06

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\image-line\cplusplus\MiniHostModular\trunk\Builds\VisualStudio2008\ReleaseVSTi\MiniHostModular.pdb

Imports

kernel32

GetFileAttributesW
DeleteFileW
RemoveDirectoryW
MoveFileW
GetFileAttributesExW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
FindNextFileW
FindFirstFileW
GetLastError
WriteFile
OutputDebugStringW
GetLocaleInfoW
GetDriveTypeW
FormatMessageW
CreateDirectoryW
FlushFileBuffers
SetEndOfFile
MapViewOfFile
GetVolumeInformationW
GetModuleFileNameW
GetLogicalDriveStringsW
GetTempPathW
GlobalUnlock
GlobalSize
GlobalLock
GlobalAlloc
GetCurrentProcessId
SetLastError
SetUnhandledExceptionFilter
FindResourceA
CreateEventA
CreateFileMappingA
CreateProcessA
FreeLibrary
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
SetStdHandle
GetStartupInfoA
SetHandleCount
HeapSize
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
GetCommandLineA
UnhandledExceptionFilter
CreateThread
ExitThread
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetModuleHandleW
GetFileType
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
RaiseException
FindClose
ReadFile
TerminateProcess
CompareStringW
ExitProcess
IsDebuggerPresent
SetThreadAffinityMask
GetCurrentThreadId
TerminateThread
LeaveCriticalSection
TryEnterCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleA
GetVersionExW
UnmapViewOfFile
SetFilePointer
FindResourceW
LoadResource
LockResource
SizeofResource
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentThread
GetThreadPriority
GetCurrentProcess
GetProcessHeap
SetThreadPriority
SetPriorityClass
ResetEvent
CloseHandle
LoadLibraryW
Sleep
LoadLibraryA
GetProcAddress
SetEnvironmentVariableA
CompareStringA

user32

DestroyCaret
GetSystemMenu
ShowWindow
GetWindowPlacement
SetCaretPos
ShowCaret
CreateCaret
SetForegroundWindow
RedrawWindow
SetLayeredWindowAttributes
RegisterClipboardFormatA
SetWindowsHookExA
DefWindowProcW
GetWindowLongW
GetDesktopWindow
CreateWindowExW
RegisterClassExW
UnregisterClassW
DestroyWindow
SetWindowLongW
MoveWindow
GetWindowRect
IsWindow
CallWindowProcW
SendMessageW
ScrollWindowEx
PrintWindow
EqualRect
SetParent
SetWindowLongA
UpdateWindow
SetWindowPos
GetWindow
AttachThreadInput
GetWindowThreadProcessId
DispatchMessageW
TranslateMessage
SetFocus
GetFocus
GetMessageW
PeekMessageW
PostMessageW
GetMessageTime
ReleaseDC
GetDC
SetWindowTextW
GetAncestor
GetAsyncKeyState
GetMessageExtraInfo
GetParent
EnableMenuItem
MessageBoxW
SetCursorPos
MessageBeep
CloseClipboard
GetClipboardData
OpenClipboard
DestroyCursor
SetCursor
LoadCursorW
GetIconInfo
CreateIconIndirect
GetWindowInfo
IsChild
WindowFromPoint
GetMessagePos
GetCursorPos
SetClipboardData
EmptyClipboard
DestroyIcon
GetSystemMetrics
GetClassNameA
UnhookWindowsHookEx
GetForegroundWindow
SendInput
GetClientRect
SystemParametersInfoW
EnumDisplayMonitors
EndPaint
BeginPaint
GetUpdateRgn
MapVirtualKeyW
PostMessageA
CallNextHookEx
GetActiveWindow
TrackMouseEvent
SetCapture
GetCapture
ReleaseCapture
InvalidateRect

gdi32

CreateCompatibleDC
DeleteDC
StretchDIBits
SaveDC
ExcludeClipRect
GetRegionData
DeleteObject
CreateRectRgnIndirect
CreateRectRgn
GetBitmapBits
BitBlt
CreateCompatibleBitmap
GetClipBox
GetOutlineTextMetricsW
CreateFontIndirectW
SelectObject
SetMapperFlags
GetGlyphIndicesW
GetGlyphOutlineW
GetKerningPairsW
GetTextMetricsW
GetPixel
GetObjectW
CreateDIBSection
CreateBitmap
CombineRgn
SetMapMode
RestoreDC

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
ExtractAssociatedIconW
SHGetSpecialFolderPathW

ole32

RevokeDragDrop
RegisterDragDrop
CoTaskMemAlloc
OleInitialize
OleUninitialize
DoDragDrop

wininet

InternetCrackUrlW
InternetConnectW
FtpOpenFileW
HttpOpenRequestW
InternetOpenW
HttpQueryInfoW
InternetCloseHandle
InternetSetOptionW
HttpEndRequestW
InternetWriteFile
HttpSendRequestExW
InternetReadFile
InternetSetFilePointer

shlwapi

PathStripToRootW

winmm

timeBeginPeriod
timeGetTime

imm32

ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME

imagehlp

MapAndLoad
ImageRvaToVa
UnMapAndLoad
ImageDirectoryEntryToData

rpcrt4

UuidCreate

Exports

Exports

VSTPluginMain
main

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugin/VST 32bit/IL Minihost Modular.dll
.dll windows:5 windows x86 arch:x86

7e92a195b67101bd983fbaf5e7b1ac5f

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e2:50:d8:cf:b4:f4:05:42:46:0f:22:cd:25:93:7f:6f:00:ab:0d:72
Signer

Actual PE Digest

e2:50:d8:cf:b4:f4:05:42:46:0f:22:cd:25:93:7f:6f:00:ab:0d:72

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\image-line\cplusplus\MiniHostModular\trunk\Builds\VisualStudio2008\ReleaseVSTi\MiniHostModular.pdb

Imports

kernel32

GetFileAttributesW
DeleteFileW
RemoveDirectoryW
MoveFileW
GetFileAttributesExW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
FindNextFileW
FindFirstFileW
GetLastError
WriteFile
OutputDebugStringW
GetLocaleInfoW
GetDriveTypeW
FormatMessageW
CreateDirectoryW
FlushFileBuffers
SetEndOfFile
MapViewOfFile
GetVolumeInformationW
GetModuleFileNameW
GetLogicalDriveStringsW
GetTempPathW
GlobalUnlock
GlobalSize
GlobalLock
GlobalAlloc
GetCurrentProcessId
SetLastError
SetUnhandledExceptionFilter
FindResourceA
CreateEventA
CreateFileMappingA
CreateProcessA
FreeLibrary
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
SetStdHandle
GetStartupInfoA
SetHandleCount
HeapSize
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
GetCommandLineA
UnhandledExceptionFilter
CreateThread
ExitThread
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetModuleHandleW
GetFileType
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
RaiseException
FindClose
ReadFile
TerminateProcess
CompareStringW
ExitProcess
IsDebuggerPresent
SetThreadAffinityMask
GetCurrentThreadId
TerminateThread
LeaveCriticalSection
TryEnterCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleA
GetVersionExW
UnmapViewOfFile
SetFilePointer
FindResourceW
LoadResource
LockResource
SizeofResource
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentThread
GetThreadPriority
GetCurrentProcess
GetProcessHeap
SetThreadPriority
SetPriorityClass
ResetEvent
CloseHandle
LoadLibraryW
Sleep
LoadLibraryA
GetProcAddress
SetEnvironmentVariableA
CompareStringA

user32

DestroyCaret
GetSystemMenu
ShowWindow
GetWindowPlacement
SetCaretPos
ShowCaret
CreateCaret
SetForegroundWindow
RedrawWindow
SetLayeredWindowAttributes
RegisterClipboardFormatA
SetWindowsHookExA
DefWindowProcW
GetWindowLongW
GetDesktopWindow
CreateWindowExW
RegisterClassExW
UnregisterClassW
DestroyWindow
SetWindowLongW
MoveWindow
GetWindowRect
IsWindow
CallWindowProcW
SendMessageW
ScrollWindowEx
PrintWindow
EqualRect
SetParent
SetWindowLongA
UpdateWindow
SetWindowPos
GetWindow
AttachThreadInput
GetWindowThreadProcessId
DispatchMessageW
TranslateMessage
SetFocus
GetFocus
GetMessageW
PeekMessageW
PostMessageW
GetMessageTime
ReleaseDC
GetDC
SetWindowTextW
GetAncestor
GetAsyncKeyState
GetMessageExtraInfo
GetParent
EnableMenuItem
MessageBoxW
SetCursorPos
MessageBeep
CloseClipboard
GetClipboardData
OpenClipboard
DestroyCursor
SetCursor
LoadCursorW
GetIconInfo
CreateIconIndirect
GetWindowInfo
IsChild
WindowFromPoint
GetMessagePos
GetCursorPos
SetClipboardData
EmptyClipboard
DestroyIcon
GetSystemMetrics
GetClassNameA
UnhookWindowsHookEx
GetForegroundWindow
SendInput
GetClientRect
SystemParametersInfoW
EnumDisplayMonitors
EndPaint
BeginPaint
GetUpdateRgn
MapVirtualKeyW
PostMessageA
CallNextHookEx
GetActiveWindow
TrackMouseEvent
SetCapture
GetCapture
ReleaseCapture
InvalidateRect

gdi32

CreateCompatibleDC
DeleteDC
StretchDIBits
SaveDC
ExcludeClipRect
GetRegionData
DeleteObject
CreateRectRgnIndirect
CreateRectRgn
GetBitmapBits
BitBlt
CreateCompatibleBitmap
GetClipBox
GetOutlineTextMetricsW
CreateFontIndirectW
SelectObject
SetMapperFlags
GetGlyphIndicesW
GetGlyphOutlineW
GetKerningPairsW
GetTextMetricsW
GetPixel
GetObjectW
CreateDIBSection
CreateBitmap
CombineRgn
SetMapMode
RestoreDC

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
ExtractAssociatedIconW
SHGetSpecialFolderPathW

ole32

RevokeDragDrop
RegisterDragDrop
CoTaskMemAlloc
OleInitialize
OleUninitialize
DoDragDrop

wininet

InternetCrackUrlW
InternetConnectW
FtpOpenFileW
HttpOpenRequestW
InternetOpenW
HttpQueryInfoW
InternetCloseHandle
InternetSetOptionW
HttpEndRequestW
InternetWriteFile
HttpSendRequestExW
InternetReadFile
InternetSetFilePointer

shlwapi

PathStripToRootW

winmm

timeBeginPeriod
timeGetTime

imm32

ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME

imagehlp

MapAndLoad
ImageRvaToVa
UnMapAndLoad
ImageDirectoryEntryToData

rpcrt4

UuidCreate

Exports

Exports

VSTPluginMain
main

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugin/VST 64bit/IL Minihost Modular (FX).dll
.dll windows:5 windows x64 arch:x64

836dcec105904e8f202fd356cbd822e1

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

26:40:77:f6:37:21:a7:e2:79:62:65:fc:b0:58:14:95:cd:3e:df:d4
Signer

Actual PE Digest

26:40:77:f6:37:21:a7:e2:79:62:65:fc:b0:58:14:95:cd:3e:df:d4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FormatMessageW
GetVersionExW
LeaveCriticalSection
GetFileAttributesW
TerminateProcess
ReadFile
GetModuleFileNameW
CreateFileW
FlushFileBuffers
GetTempPathW
GetLastError
GetCurrentDirectoryW
MoveFileW
EnterCriticalSection
FindClose
SetCurrentDirectoryW
RemoveDirectoryW
GetModuleHandleA
IsDebuggerPresent
FindNextFileW
GetFileAttributesExW
QueryPerformanceFrequency
DeleteCriticalSection
GetCurrentThreadId
SetThreadAffinityMask
DeleteFileW
GetVolumeInformationW
GlobalSize
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentProcessId
SetLastError
SetUnhandledExceptionFilter
FindResourceA
CreateEventA
CreateFileMappingA
CreateProcessA
CompareStringW
CompareStringA
WriteConsoleA
CreateFileA
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeFormatA
GetDateFormatA
InitializeCriticalSectionAndSpinCount
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
MultiByteToWideChar
SetStdHandle
GetStartupInfoA
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
FlsAlloc
FlsFree
FlsGetValue
DecodePointer
EncodePointer
GetModuleFileNameA
GetStdHandle
HeapDestroy
HeapCreate
HeapSetInformation
RtlPcToFileHeader
RaiseException
GetCommandLineA
FlsSetValue
RtlUnwindEx
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetTimeZoneInformation
WideCharToMultiByte
CreateThread
ExitThread
GetModuleHandleW
GetFileType
HeapReAlloc
HeapAlloc
HeapFree
GetLocaleInfoW
TerminateThread
InitializeCriticalSection
WriteFile
WriteConsoleW
OutputDebugStringW
CreateDirectoryW
QueryPerformanceCounter
GetLogicalDriveStringsW
FreeLibrary
SetEndOfFile
GetDriveTypeW
UnmapViewOfFile
MapViewOfFile
SetFilePointer
FindFirstFileW
ExitProcess
LockResource
SizeofResource
LoadResource
FindResourceW
CloseHandle
GetThreadPriority
CreateEventW
LoadLibraryA
ResetEvent
GetProcAddress
SetThreadPriority
GetProcessHeap
Sleep
LoadLibraryW
GetCurrentThread
SetEvent
WaitForSingleObject
GetCurrentProcess
SetEnvironmentVariableA
GetConsoleOutputCP

user32

GetSystemMenu
MapVirtualKeyW
GetUpdateRgn
CloseClipboard
EnumDisplayMonitors
SetCursor
EndPaint
RegisterClipboardFormatA
PrintWindow
DefWindowProcW
SetWindowLongPtrW
CreateWindowExW
GetDesktopWindow
RegisterClassExW
GetWindowLongPtrW
UnregisterClassW
DestroyWindow
MoveWindow
GetWindow
CallWindowProcW
SendMessageW
IsWindow
EqualRect
UpdateWindow
SetWindowLongA
SetParent
UnhookWindowsHookEx
PostMessageA
SetWindowPos
CallNextHookEx
GetWindowThreadProcessId
AttachThreadInput
DispatchMessageW
PeekMessageW
TranslateMessage
SetFocus
GetFocus
PostMessageW
GetMessageW
GetMessagePos
GetMessageTime
DestroyIcon
SetWindowTextW
SetClipboardData
SetCaretPos
GetSystemMetrics
ReleaseCapture
MessageBoxW
OpenClipboard
CreateCaret
GetActiveWindow
ShowWindow
SetLayeredWindowAttributes
GetCursorPos
DestroyCaret
DestroyCursor
RedrawWindow
SetWindowLongW
EmptyClipboard
EnableMenuItem
ReleaseDC
SystemParametersInfoW
GetClipboardData
GetAncestor
GetWindowLongW
SetCursorPos
InvalidateRect
GetAsyncKeyState
GetWindowPlacement
SetWindowsHookExA
ScrollWindowEx
GetForegroundWindow
GetCapture
GetDC
GetIconInfo
CreateIconIndirect
BeginPaint
ShowCaret
GetClientRect
WindowFromPoint
MessageBeep
GetWindowInfo
LoadCursorW
GetClassNameA
GetWindowRect
TrackMouseEvent
GetParent
SetForegroundWindow
SetCapture
GetMessageExtraInfo
IsChild

gdi32

SetMapperFlags
GetKerningPairsW
GetGlyphOutlineW
GetGlyphIndicesW
CreateRectRgnIndirect
GetRegionData
GetOutlineTextMetricsW
ExcludeClipRect
CreateDIBSection
CreateCompatibleBitmap
BitBlt
GetBitmapBits
GetClipBox
SetMapMode
SelectObject
CreateCompatibleDC
CreateFontIndirectW
DeleteDC
GetTextMetricsW
RestoreDC
GetPixel
CreateRectRgn
GetObjectW
StretchDIBits
SaveDC
CreateBitmap
DeleteObject
CombineRgn

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

ExtractAssociatedIconW
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
SHBrowseForFolderW
SHGetSpecialFolderPathW

ole32

RegisterDragDrop
CoTaskMemAlloc
RevokeDragDrop
OleUninitialize
OleInitialize
DoDragDrop

wininet

HttpQueryInfoW
InternetSetOptionW
InternetWriteFile
InternetOpenW
HttpOpenRequestW
InternetCrackUrlW
FtpOpenFileW
InternetReadFile
InternetConnectW
InternetSetFilePointer
HttpEndRequestW
HttpSendRequestExW
InternetCloseHandle

shlwapi

PathStripToRootW

winmm

timeGetTime
timeBeginPeriod

imm32

ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME
ImmReleaseContext

imagehlp

UnMapAndLoad
ImageRvaToVa
MapAndLoad
ImageDirectoryEntryToData

rpcrt4

UuidCreate

Exports

Exports

VSTPluginMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugin/VST 64bit/IL Minihost Modular.dll
.dll windows:5 windows x64 arch:x64

836dcec105904e8f202fd356cbd822e1

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e8:ca:11:7d:08:f3:44:3c:19:44:43:be:64:63:94:4a:5b:e0:0b:79
Signer

Actual PE Digest

e8:ca:11:7d:08:f3:44:3c:19:44:43:be:64:63:94:4a:5b:e0:0b:79

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FormatMessageW
GetVersionExW
LeaveCriticalSection
GetFileAttributesW
TerminateProcess
ReadFile
GetModuleFileNameW
CreateFileW
FlushFileBuffers
GetTempPathW
GetLastError
GetCurrentDirectoryW
MoveFileW
EnterCriticalSection
FindClose
SetCurrentDirectoryW
RemoveDirectoryW
GetModuleHandleA
IsDebuggerPresent
FindNextFileW
GetFileAttributesExW
QueryPerformanceFrequency
DeleteCriticalSection
GetCurrentThreadId
SetThreadAffinityMask
DeleteFileW
GetVolumeInformationW
GlobalSize
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentProcessId
SetLastError
SetUnhandledExceptionFilter
FindResourceA
CreateEventA
CreateFileMappingA
CreateProcessA
CompareStringW
CompareStringA
WriteConsoleA
CreateFileA
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeFormatA
GetDateFormatA
InitializeCriticalSectionAndSpinCount
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
MultiByteToWideChar
SetStdHandle
GetStartupInfoA
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
FlsAlloc
FlsFree
FlsGetValue
DecodePointer
EncodePointer
GetModuleFileNameA
GetStdHandle
HeapDestroy
HeapCreate
HeapSetInformation
RtlPcToFileHeader
RaiseException
GetCommandLineA
FlsSetValue
RtlUnwindEx
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetTimeZoneInformation
WideCharToMultiByte
CreateThread
ExitThread
GetModuleHandleW
GetFileType
HeapReAlloc
HeapAlloc
HeapFree
GetLocaleInfoW
TerminateThread
InitializeCriticalSection
WriteFile
WriteConsoleW
OutputDebugStringW
CreateDirectoryW
QueryPerformanceCounter
GetLogicalDriveStringsW
FreeLibrary
SetEndOfFile
GetDriveTypeW
UnmapViewOfFile
MapViewOfFile
SetFilePointer
FindFirstFileW
ExitProcess
LockResource
SizeofResource
LoadResource
FindResourceW
CloseHandle
GetThreadPriority
CreateEventW
LoadLibraryA
ResetEvent
GetProcAddress
SetThreadPriority
GetProcessHeap
Sleep
LoadLibraryW
GetCurrentThread
SetEvent
WaitForSingleObject
GetCurrentProcess
SetEnvironmentVariableA
GetConsoleOutputCP

user32

GetSystemMenu
MapVirtualKeyW
GetUpdateRgn
CloseClipboard
EnumDisplayMonitors
SetCursor
EndPaint
RegisterClipboardFormatA
PrintWindow
DefWindowProcW
SetWindowLongPtrW
CreateWindowExW
GetDesktopWindow
RegisterClassExW
GetWindowLongPtrW
UnregisterClassW
DestroyWindow
MoveWindow
GetWindow
CallWindowProcW
SendMessageW
IsWindow
EqualRect
UpdateWindow
SetWindowLongA
SetParent
UnhookWindowsHookEx
PostMessageA
SetWindowPos
CallNextHookEx
GetWindowThreadProcessId
AttachThreadInput
DispatchMessageW
PeekMessageW
TranslateMessage
SetFocus
GetFocus
PostMessageW
GetMessageW
GetMessagePos
GetMessageTime
DestroyIcon
SetWindowTextW
SetClipboardData
SetCaretPos
GetSystemMetrics
ReleaseCapture
MessageBoxW
OpenClipboard
CreateCaret
GetActiveWindow
ShowWindow
SetLayeredWindowAttributes
GetCursorPos
DestroyCaret
DestroyCursor
RedrawWindow
SetWindowLongW
EmptyClipboard
EnableMenuItem
ReleaseDC
SystemParametersInfoW
GetClipboardData
GetAncestor
GetWindowLongW
SetCursorPos
InvalidateRect
GetAsyncKeyState
GetWindowPlacement
SetWindowsHookExA
ScrollWindowEx
GetForegroundWindow
GetCapture
GetDC
GetIconInfo
CreateIconIndirect
BeginPaint
ShowCaret
GetClientRect
WindowFromPoint
MessageBeep
GetWindowInfo
LoadCursorW
GetClassNameA
GetWindowRect
TrackMouseEvent
GetParent
SetForegroundWindow
SetCapture
GetMessageExtraInfo
IsChild

gdi32

SetMapperFlags
GetKerningPairsW
GetGlyphOutlineW
GetGlyphIndicesW
CreateRectRgnIndirect
GetRegionData
GetOutlineTextMetricsW
ExcludeClipRect
CreateDIBSection
CreateCompatibleBitmap
BitBlt
GetBitmapBits
GetClipBox
SetMapMode
SelectObject
CreateCompatibleDC
CreateFontIndirectW
DeleteDC
GetTextMetricsW
RestoreDC
GetPixel
CreateRectRgn
GetObjectW
StretchDIBits
SaveDC
CreateBitmap
DeleteObject
CombineRgn

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

ExtractAssociatedIconW
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
SHBrowseForFolderW
SHGetSpecialFolderPathW

ole32

RegisterDragDrop
CoTaskMemAlloc
RevokeDragDrop
OleUninitialize
OleInitialize
DoDragDrop

wininet

HttpQueryInfoW
InternetSetOptionW
InternetWriteFile
InternetOpenW
HttpOpenRequestW
InternetCrackUrlW
FtpOpenFileW
InternetReadFile
InternetConnectW
InternetSetFilePointer
HttpEndRequestW
HttpSendRequestExW
InternetCloseHandle

shlwapi

PathStripToRootW

winmm

timeGetTime
timeBeginPeriod

imm32

ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME
ImmReleaseContext

imagehlp

UnMapAndLoad
ImageRvaToVa
MapAndLoad
ImageDirectoryEntryToData

rpcrt4

UuidCreate

Exports

Exports

VSTPluginMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
uninstall.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b7:d8:09:ad:9b:f7:41:41:e1:42:bf:ed:b7:95:d5:b9:3b:2f:df:2e
Signer

Actual PE Digest

b7:d8:09:ad:9b:f7:41:41:e1:42:bf:ed:b7:95:d5:b9:3b:2f:df:2e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ILUninstall.dll
.dll windows:5 windows x86 arch:x86

e467a585796dc48fbb4492ddfcbde1aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegFlushKey
RegCloseKey

user32

MessageBoxA
CharNextW
LoadStringW
SetClassLongW
GetClassLongW
SetWindowLongW
GetWindowLongW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
InsertMenuItemW
InsertMenuW
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CharUpperW
CharNextW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
MonitorFromWindow

kernel32

Sleep
VirtualFree
VirtualAlloc
lstrlenW
lstrcpynW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrcpyA
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
UnmapViewOfFile
SwitchToThread
SuspendThread
Sleep
SizeofResource
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
RemoveDirectoryW
ReadFile
QueryDosDeviceW
MulDiv
MapViewOfFile
LockResource
LocalFree
LoadResource
LoadLibraryW
LeaveCriticalSection
IsValidLocale
InitializeCriticalSection
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAddAtomW
GetVolumeInformationW
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLogicalDriveStringsW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeThread
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCPInfoExW
GetCPInfo
GetACP
FreeResource
InterlockedExchangeAdd
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
DeleteFileW
DeleteCriticalSection
CreateThread
CreateFileMappingW
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject
StretchBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
Chord
BitBlt
ArcTo
Arc
AngleArc

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls

shell32

Shell_NotifyIconW

Exports

Exports

UninstallFiles

Sections

.text
Size: 655KB - Virtual size: 655KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
uninstall.fud

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7aCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

2a:07:96:32:9c:2a:2b:77:87:f9:2c:89:1a:a9:03:91:63:f1:ec:deSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 48KB

.rsrc Size: 28KB - Virtual size: 28KB

ed83f419402bc3b83a08e3aaf8b5b5b7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 348B

.reloc Size: 1024B - Virtual size: 780B

f54089062a794946c82cd9c08d60bc3d

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

version

Exports

Exports

Sections

.text Size: 293KB - Virtual size: 293KB

.itext Size: 3KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 6KB

.bss Size: - Virtual size: 20KB

.idata Size: 4KB - Virtual size: 3KB

.didata Size: 512B - Virtual size: 340B

.edata Size: 1024B - Virtual size: 518B

.reloc Size: 25KB - Virtual size: 25KB

.rsrc Size: 8KB - Virtual size: 8KB

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

2a:07:96:32:9c:2a:2b:77:87:f9:2c:89:1a:a9:03:91:63:f1:ec:de
Signer

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 48KB

.rsrc
Size: 28KB - Virtual size: 28KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 348B

.reloc
Size: 1024B - Virtual size: 780B

.text
Size: 293KB - Virtual size: 293KB

.itext
Size: 3KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 6KB

.bss
Size: - Virtual size: 20KB

.idata
Size: 4KB - Virtual size: 3KB

.didata
Size: 512B - Virtual size: 340B

.edata
Size: 1024B - Virtual size: 518B

.reloc
Size: 25KB - Virtual size: 25KB

.rsrc
Size: 8KB - Virtual size: 8KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 1024B - Virtual size: 741B

.rdata
Size: 1024B - Virtual size: 673B

.data
Size: 512B - Virtual size: 88B

.reloc
Size: 512B - Virtual size: 190B

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

e2:50:d8:cf:b4:f4:05:42:46:0f:22:cd:25:93:7f:6f:00:ab:0d:72
Signer

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 1.9MB - Virtual size: 1.9MB

.data
Size: 69KB - Virtual size: 89KB

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

.reloc
Size: 147KB - Virtual size: 146KB

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

46:80:3e:03:92:8f:ea:55:d2:7f:a4:5d:ab:76:c2:d9:07:57:90:10
Signer