D:\v3.0\class\LGBeanCommon\Release\LGBeanCommon.pdb
Overview
overview
3Static
static
3LGBean/LGB...on.dll
windows7-x64
1LGBean/LGB...on.dll
windows10-2004-x64
3LGBean/LGBeanDf.dll
windows7-x64
3LGBean/LGBeanDf.dll
windows10-2004-x64
3LGBean/LGBeanDf.exe
windows7-x64
1LGBean/LGBeanDf.exe
windows10-2004-x64
1LGBean/LGBeanMb.dll
windows7-x64
1LGBean/LGBeanMb.dll
windows10-2004-x64
1LGBean/LGBeanMb.exe
windows7-x64
1LGBean/LGBeanMb.exe
windows10-2004-x64
1LGBean/LGBeanUi.dll
windows7-x64
1LGBean/LGBeanUi.dll
windows10-2004-x64
1LGBean/sys...le.sys
windows7-x64
1LGBean/sys...le.sys
windows10-2004-x64
1LGBean/sys...fo.sys
windows7-x64
1LGBean/sys...fo.sys
windows10-2004-x64
1LGBean/sys/LGBKey.sys
windows7-x64
1LGBean/sys/LGBKey.sys
windows10-2004-x64
1LGBean/sys...fe.sys
windows7-x64
1LGBean/sys...fe.sys
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
LGBean/LGBeanCommon.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
LGBean/LGBeanCommon.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
LGBean/LGBeanDf.dll
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
LGBean/LGBeanDf.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
LGBean/LGBeanDf.exe
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
LGBean/LGBeanDf.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
LGBean/LGBeanMb.dll
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
LGBean/LGBeanMb.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
LGBean/LGBeanMb.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
LGBean/LGBeanMb.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
LGBean/LGBeanUi.dll
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
LGBean/LGBeanUi.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
LGBean/sys/LGBFile.sys
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
LGBean/sys/LGBFile.sys
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
LGBean/sys/LGBInfo.sys
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
LGBean/sys/LGBInfo.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
LGBean/sys/LGBKey.sys
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
LGBean/sys/LGBKey.sys
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
LGBean/sys/LGBSafe.sys
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
LGBean/sys/LGBSafe.sys
Resource
win10v2004-20240508-en
General
-
Target
078a1878f9b7a05206c31d48e1bed66a_JaffaCakes118
-
Size
943KB
-
MD5
078a1878f9b7a05206c31d48e1bed66a
-
SHA1
7eeaf8e8c9c56836bfeb6bdf837e3d9dce73381f
-
SHA256
6cf5fc1974232ce79209795070b89348023fc1a2de66d0bdb5e3e033714b75b8
-
SHA512
e19c7e5aada9c5db0c7b73e282e61cc6181a2a3ba95695d79cacf20ab4fed4e46b02aeea62a783eca4ae2db61deaefd7ad860f12bcf78bd1aafbac6d24c0f305
-
SSDEEP
24576:EJS5H9Rp/f2vPcx+8JW0EDv+apwNcdgefJwVUCUGkBg9lsUWZ:E2H9b2vPLIz+2wwNctfJwVBUtBg914
Malware Config
Signatures
-
Unsigned PE 10 IoCs
Checks for missing Authenticode signature.
resource unpack001/LGBean/LGBeanCommon.dll unpack001/LGBean/LGBeanDf.dll unpack001/LGBean/LGBeanDf.exe unpack001/LGBean/LGBeanMb.dll unpack001/LGBean/LGBeanMb.exe unpack001/LGBean/LGBeanUi.dll unpack001/LGBean/sys/LGBFile.sys unpack001/LGBean/sys/LGBInfo.sys unpack001/LGBean/sys/LGBKey.sys unpack001/LGBean/sys/LGBSafe.sys
Files
-
078a1878f9b7a05206c31d48e1bed66a_JaffaCakes118.rar
-
LGBean/LGBeanCommon.dll.dll windows:5 windows x86 arch:x86
7eabd2d1c25bb005e04b30eb91958d20
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
HeapFree
HeapReAlloc
RtlUnwind
RaiseException
Sleep
ExitProcess
ExitThread
CreateThread
HeapSize
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetFileTime
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CreateFileA
HeapAlloc
GetFileSizeEx
GetFileAttributesW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFindAtomW
LoadLibraryA
GetVersionExA
GlobalFlags
GetModuleHandleA
CompareStringW
InterlockedIncrement
lstrlenA
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedDecrement
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCommandLineA
SetEnvironmentVariableA
GetSystemTimeAsFileTime
GetCurrentProcessId
GlobalAddAtomW
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
GetModuleHandleW
GetLastError
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
FindResourceW
LoadResource
LockResource
SizeofResource
Process32NextW
CloseHandle
Process32FirstW
CreateToolhelp32Snapshot
GlobalMemoryStatus
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExW
WideCharToMultiByte
MultiByteToWideChar
user32
DestroyMenu
CharUpperW
ShowWindow
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
CopyRect
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
LoadCursorW
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindowTextW
UnregisterClassW
UnhookWindowsHookEx
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
SendMessageW
ModifyMenuW
EnableMenuItem
CheckMenuItem
PostMessageW
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
MessageBoxW
GetSystemMetrics
RegisterClassW
gdi32
GetStockObject
TextOutW
DeleteDC
RectVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
GetDeviceCaps
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
ExtTextOutW
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegCreateKeyW
RegEnumKeyExW
RegDeleteKeyW
RegEnumValueW
RegQueryInfoKeyW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
shell32
ShellExecuteW
SHFileOperationW
shlwapi
PathFindFileNameW
UrlUnescapeW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantClear
VariantChangeType
iphlpapi
GetExtendedTcpTable
GetExtendedUdpTable
wininet
HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetSetOptionExW
InternetQueryDataAvailable
Exports
Exports
LGBeanAnsiToUnicode
LGBeanCreatShortCutFile
LGBeanDeleteFileToRecycleBin
LGBeanGetCpuUsage
LGBeanGetMemoryUsage
LGBeanGetMemoryUse
LGBeanGetPortNum
LGBeanGetProcessNum
LGBeanGetShortCutFilePath
LGBeanGetVersion
LGBeanRegCreateKey
LGBeanRegDeleteAllValue
LGBeanRegDeleteKey
LGBeanRegDeleteValue
LGBeanRegEnumDeleteKey
LGBeanRegIsKey
LGBeanRegQueryValueBinary
LGBeanRegQueryValueDword
LGBeanRegQueryValueSZ
LGBeanRegSetValueBinary
LGBeanRegSetValueDword
LGBeanRegSetValueSZ
LGBeanStringNoDoubleSpace
LGBeanStringToDot
LGBeanUnicodeToAnsi
LGBeanVisitUrl
LGBeanVisitUrlEx
LGBeanVisitWork
Sections
.text Size: 169KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
LGBean/LGBeanDf.dll.dll windows:5 windows x86 arch:x86
3f02e40ebfbbaa3dd024790a62b88fa2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
D:\v3.0\code\LGBeanDf\LGBeanDfDll\Release\LGBeanDf.pdb
Imports
kernel32
HeapAlloc
HeapFree
HeapReAlloc
GetCommandLineA
RtlUnwind
RaiseException
Sleep
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
VirtualAlloc
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
SetStdHandle
GetConsoleCP
GetConsoleMode
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
SetFilePointer
WriteFile
GlobalFindAtomW
LoadLibraryA
GetVersionExA
GlobalFlags
GetModuleHandleA
WritePrivateProfileStringW
InterlockedIncrement
lstrlenA
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedDecrement
GetCurrentProcessId
GlobalAddAtomW
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
GetModuleFileNameW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
lstrcmpW
FreeLibrary
GetModuleHandleW
GetProcAddress
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
FindResourceW
LoadResource
LockResource
SizeofResource
lstrlenW
MultiByteToWideChar
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileInformationByHandle
FindClose
FindNextFileW
FindFirstFileW
WideCharToMultiByte
GetCurrentProcess
CreateFileW
GetVolumeInformationW
GetDriveTypeW
GetVolumeNameForVolumeMountPointW
GetDiskFreeSpaceExW
SystemTimeToFileTime
GetSystemTime
ReadFile
CloseHandle
FlushFileBuffers
GetLastError
GetFileType
DeviceIoControl
user32
DestroyMenu
ShowWindow
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
GetSubMenu
GetMenuItemCount
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindowTextW
GetMenuItemID
GetMenuState
PostQuitMessage
PostMessageW
CheckMenuItem
EnableMenuItem
ModifyMenuW
SendMessageW
GetParent
GetFocus
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
GetCursorPos
PeekMessageW
GetKeyState
IsWindowVisible
UnregisterClassW
UnhookWindowsHookEx
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
gdi32
DeleteDC
GetStockObject
TextOutW
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
GetDeviceCaps
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
ExtTextOutW
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegSetValueExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
shlwapi
PathFindFileNameW
PathFindExtensionW
oleaut32
VariantClear
VariantChangeType
VariantInit
Exports
Exports
LGBeanDefragAnalyse
LGBeanDefragDefrag
Sections
.text Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
LGBean/LGBeanDf.exe.exe windows:5 windows x86 arch:x86
6adc666523da49291c242c7a4142a8c4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
D:\v3.0\code\LGBeanDf\LGBeanDf\Release\LGBeanDf.pdb
Imports
kernel32
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
VirtualProtect
HeapSize
RaiseException
CreateFileW
HeapReAlloc
CreateThread
ExitThread
ExitProcess
Sleep
RtlUnwind
HeapFree
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
GetTickCount
SetErrorMode
FileTimeToSystemTime
GetFullPathNameW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
lstrlenA
GetThreadLocale
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetModuleHandleA
GlobalFindAtomW
GetVersionExW
CompareStringW
LoadLibraryA
GetVersionExA
InterlockedDecrement
FormatMessageW
LocalFree
GetCurrentProcessId
SetLastError
GlobalAddAtomW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
WritePrivateProfileStringW
GlobalFree
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
GetModuleFileNameW
lstrcmpA
GetLocaleInfoW
CompareStringA
MultiByteToWideChar
InterlockedExchange
lstrcmpW
GetModuleHandleW
GetProcAddress
lstrcmpiW
GetWindowsDirectoryW
MulDiv
lstrcpyW
WideCharToMultiByte
WinExec
lstrlenW
lstrcatW
LoadLibraryExW
FreeLibrary
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
LoadLibraryW
GetVolumeInformationW
GetDriveTypeW
GetLogicalDrives
TerminateProcess
GetLastError
CreateEventW
FindResourceW
LoadResource
LockResource
SizeofResource
GetCurrentProcess
CloseHandle
WriteFile
user32
PostThreadMessageW
UnregisterClassW
CharUpperW
GetSysColorBrush
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
CallWindowProcW
GetMenu
SystemParametersInfoA
GetWindowPlacement
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
DestroyMenu
GetWindowTextLengthW
GetScrollPos
SetFocus
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxW
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
PostQuitMessage
IsRectEmpty
GetWindowTextW
GetClassNameW
IsWindowEnabled
ClientToScreen
WindowFromPoint
SetCapture
SetWindowRgn
OffsetRect
RegisterClipboardFormatW
ChildWindowFromPoint
ReleaseCapture
EqualRect
ScreenToClient
IsWindow
DefWindowProcW
GetClassInfoW
RegisterWindowMessageW
SendDlgItemMessageW
LoadCursorW
SetCursor
LoadImageW
DestroyCursor
DestroyIcon
CopyIcon
FillRect
CreateIconIndirect
ReleaseDC
GetIconInfo
IntersectRect
GetMonitorInfoW
SetRect
MonitorFromPoint
GetSysColor
SetRectEmpty
SystemParametersInfoW
KillTimer
PtInRect
GetCursorPos
SetTimer
GetParent
CopyRect
InvalidateRect
EnableWindow
UpdateLayeredWindow
GetDC
GetWindowRect
GetWindowLongW
SetWindowLongW
PostMessageW
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SendMessageW
AppendMenuW
GetSystemMenu
LoadIconW
gdi32
ExtSelectClipRgn
GetStockObject
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
DPtoLP
SetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
Escape
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteDC
RestoreDC
SaveDC
GetClipBox
ExtTextOutW
CreatePolygonRgn
CreateRoundRectRgn
OffsetRgn
CombineRgn
CreateRectRgn
SelectClipRgn
FillRgn
FrameRgn
TextOutW
SetTextJustification
GetTextMetricsW
SetBkColor
SetBkMode
CreateFontIndirectW
LineTo
MoveToEx
CreatePen
SetTextColor
CreateCompatibleBitmap
CreateSolidBrush
StretchBlt
CreateBitmap
GetObjectW
GetDeviceCaps
SetViewportExtEx
SetViewportOrgEx
GetTextExtentPoint32W
BitBlt
SelectObject
CreateCompatibleDC
CreateDIBSection
DeleteObject
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegOpenKeyW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExW
RegQueryValueW
RegCloseKey
RegQueryValueExW
OpenProcessToken
RegEnumKeyW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
shell32
ShellExecuteW
comctl32
_TrackMouseEvent
ord17
ImageList_GetImageCount
ImageList_GetIcon
InitCommonControlsEx
shlwapi
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
oledlg
OleUIBusyW
ole32
CoTaskMemFree
CLSIDFromProgID
CreateStreamOnHGlobal
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromString
oleaut32
VariantClear
VariantCopy
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
VariantInit
VariantChangeType
SysFreeString
SysStringLen
SysAllocStringLen
lgbeancommon
LGBeanVisitWork
lgbeandf
LGBeanDefragAnalyse
LGBeanDefragDefrag
gdiplus
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStream
GdipReleaseDC
GdipCloneBrush
GdipAlloc
GdipFree
GdipDeleteBrush
GdipCreateFontFamilyFromName
GdipDrawImageRectI
GdipSetSmoothingMode
GdipSetPageUnit
GdipSetPageScale
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdiplusShutdown
GdiplusStartup
GdipDeleteFontFamily
GdipCreateFont
GdipCreateSolidFill
GdipSetTextRenderingHint
GdipDrawString
GdipDeleteFont
Sections
.text Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
LGBean/LGBeanMb.dll.dll windows:5 windows x86 arch:x86
b1ef5315be487f2c21eade374734763b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
D:\v3.0\code\LGBeanMb\LGBeanMbDll\Release\LGBeanMb.pdb
Imports
kernel32
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 241KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
LGBean/LGBeanMb.exe.exe windows:5 windows x86 arch:x86
91702047a672bbd60c4b2970e812cb26
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
D:\v3.0\code\LGBeanMb\LGBeanMb\Release\LGBeanMb.pdb
Imports
kernel32
HeapReAlloc
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
ExitProcess
Sleep
RaiseException
RtlUnwind
HeapFree
HeapAlloc
GetStartupInfoW
GetFileTime
GetFileSizeEx
GetFileAttributesW
GetTickCount
SetErrorMode
CreateFileW
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrlenA
GetThreadLocale
InterlockedIncrement
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
FormatMessageW
LocalFree
GetCurrentProcessId
WritePrivateProfileStringW
GlobalFree
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
WideCharToMultiByte
CompareStringA
InterlockedExchange
InterlockedDecrement
MulDiv
GetModuleHandleA
lstrlenW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
SetLastError
lstrcmpW
MultiByteToWideChar
GetModuleHandleW
GetProcAddress
GetVersionExA
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
TerminateProcess
GetLastError
CreateEventW
LockResource
CloseHandle
GetCurrentProcess
FreeLibrary
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
LoadResource
SizeofResource
FindResourceW
GetTimeZoneInformation
LoadLibraryW
user32
PostThreadMessageW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
ReleaseCapture
SetCapture
UnregisterClassW
LoadCursorW
GetSysColorBrush
DestroyMenu
GetWindowThreadProcessId
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
RegisterClipboardFormatW
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
CharUpperW
CheckMenuItem
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetSubMenu
UpdateLayeredWindow
GetDC
GetWindowRect
GetWindowLongW
SetWindowLongW
PostMessageW
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
AppendMenuW
GetSystemMenu
LoadIconW
GetParent
SendMessageW
CopyRect
InvalidateRect
EnableWindow
gdi32
GetDeviceCaps
CreateRectRgnIndirect
GetBkColor
GetTextColor
GetRgnBox
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetStockObject
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
GetMapMode
CreateCompatibleDC
GetWindowExtEx
GetViewportExtEx
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
SetViewportOrgEx
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
LookupPrivilegeValueW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
OpenProcessToken
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
AdjustTokenPrivileges
shell32
ShellExecuteW
comctl32
_TrackMouseEvent
InitCommonControlsEx
shlwapi
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
oledlg
OleUIBusyW
ole32
CoTaskMemFree
CLSIDFromProgID
CreateStreamOnHGlobal
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromString
oleaut32
VariantCopy
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysStringLen
SysFreeString
VariantInit
SysAllocStringLen
VariantClear
VariantChangeType
lgbeancommon
LGBeanVisitWork
gdiplus
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipDrawString
GdipSetTextRenderingHint
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeleteGraphics
GdipDeleteBrush
GdipDrawImageRectI
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipLoadImageFromStream
GdipSetPageScale
GdipSetPageUnit
GdipCloneBrush
GdipReleaseDC
GdipCreateSolidFill
GdipSetSmoothingMode
Sections
.text Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
LGBean/LGBeanUi.dll.dll windows:5 windows x86 arch:x86
b1ef5315be487f2c21eade374734763b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
D:\v3.0\class\LGBeanUi\Release\LGBeanUi.pdb
Imports
kernel32
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 861KB - Virtual size: 861KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
LGBean/appdata/cl/cl.lgb
-
LGBean/appdata/common/common.lgb
-
LGBean/appdata/fi/fi.lgb
-
LGBean/appdata/lgb.ico
-
LGBean/appdata/lgbfi.ico
-
LGBean/appdata/mb/mb.lgb
-
LGBean/appdata/op/op.lgb
-
LGBean/sys/LGBFile.sys.sys windows:6 windows x86 arch:x86
b011d1894ca230f7e332ba45e60203e6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
d:\v3.0\sys\lgbfile\lgbfile\objchk_wxp_x86\i386\LGBFile.pdb
Imports
ntoskrnl.exe
IoCreateSymbolicLink
DbgPrint
IoCreateDevice
RtlInitUnicodeString
RtlAssert
ExInitializePagedLookasideList
DbgBreakPoint
memset
KeInitializeEvent
ObfDereferenceObject
KeDelayExecutionThread
IoDetachDevice
ZwClose
ZwQueryInformationFile
ObOpenObjectByPointer
IoFileObjectType
ExAllocatePool
memcpy
KeReadStateEvent
KeWaitForSingleObject
IofCallDriver
IofCompleteRequest
KeSetEvent
IoFreeIrp
IoFreeMdl
MmBuildMdlForNonPagedPool
IoDeleteSymbolicLink
IoAllocateIrp
KeGetCurrentThread
ExQueueWorkItem
ZwQueryValueKey
ZwOpenKey
MmGetSystemRoutineAddress
PsGetVersion
PsGetCurrentThreadId
PsGetCurrentProcessId
KeQuerySystemTime
IoAttachDeviceToDeviceStack
ObfReferenceObject
IoGetBaseFileSystemDeviceObject
ObReferenceObjectByHandle
ZwCreateFile
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlCompareUnicodeString
RtlCopyUnicodeString
_wcsnicmp
RtlEqualUnicodeString
FsRtlIsPagingFile
_vsnprintf
KeLeaveCriticalRegion
ExReleaseResourceLite
ExAcquireResourceExclusiveLite
KeEnterCriticalRegion
KeTickCount
KeBugCheckEx
IoDeleteDevice
ExAllocatePoolWithTag
ExFreePoolWithTag
IoRegisterFsRegistrationChange
IoAllocateMdl
ExInitializeResourceLite
IoGetTopLevelIrp
ObQueryNameString
RtlVolumeDeviceToDosName
ExAllocateFromPagedLookasideList
ExFreeToPagedLookasideList
RtlUnwind
RtlAnsiCharToUnicodeChar
hal
ExReleaseFastMutex
KfAcquireSpinLock
KfReleaseSpinLock
KeGetCurrentIrql
ExAcquireFastMutex
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 768B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
LGBean/sys/LGBInfo.sys.sys windows:5 windows x86 arch:x86
294221baf6d45172219590c59285b481
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
D:\v3.0\sys\LGBInfo\LGBInfo\objchk\i386\LGBInfo.pdb
Imports
ntoskrnl.exe
IoCreateDevice
RtlInitUnicodeString
IofCompleteRequest
MmFreeNonCachedMemory
Ke386SetIoAccessMap
Ke386IoSetAccessProcess
IoGetCurrentProcess
IoCreateSymbolicLink
_except_handler3
IoDeleteSymbolicLink
ZwClose
ZwMapViewOfSection
ObReferenceObjectByHandle
ZwOpenSection
ZwUnmapViewOfSection
MmAllocateNonCachedMemory
IoDeleteDevice
hal
HalTranslateBusAddress
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 640B - Virtual size: 560B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 256B - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
LGBean/sys/LGBKey.sys.sys windows:5 windows x86 arch:x86
f9e731d4b5964973c84cd54f8ac23de3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
D:\v3.0\sys\LGBKey\LGBKey\objchk\i386\LGBKey.pdb
Imports
ntoskrnl.exe
RtlInitUnicodeString
IofCompleteRequest
ExAllocatePoolWithTag
ExFreePoolWithTag
IoDetachDevice
IoDeleteSymbolicLink
IoCancelIrp
_wcsnicmp
wcslen
IoCreateDevice
wcsncpy
ObReferenceObjectByName
IoDriverObjectType
IoAttachDeviceToDeviceStack
KeInitializeSpinLock
ObfDereferenceObject
IoGetDeviceObjectPointer
IofCallDriver
RtlAssert
IoCreateSymbolicLink
MmIsAddressValid
IoDeleteDevice
hal
KfReleaseSpinLock
KfAcquireSpinLock
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 213B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 640B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 768B - Virtual size: 666B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 384B - Virtual size: 382B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
LGBean/sys/LGBSafe.sys.sys windows:5 windows x86 arch:x86
5d3d322e4db64e3e1decb9486a7cbb84
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
D:\v3.0\sys\LGBSafe\LGBSafe\objchk\i386\LGBSafe.pdb
Imports
ntoskrnl.exe
IoCreateDevice
RtlInitUnicodeString
ExDeleteNPagedLookasideList
IoDeleteSymbolicLink
IofCompleteRequest
MmMapLockedPages
MmBuildMdlForNonPagedPool
MmCreateMdl
ZwSetValueKey
KeServiceDescriptorTable
ZwSetSystemTime
IoFreeMdl
MmUnmapLockedPages
sprintf
RtlFreeAnsiString
strncat
RtlUnicodeStringToAnsiString
strncmp
DbgBreakPoint
ObQueryNameString
ExFreePoolWithTag
ExAllocatePoolWithTag
_except_handler3
IoCreateSymbolicLink
InterlockedPushEntrySList
ObReferenceObjectByHandle
ExGetPreviousMode
ObfDereferenceObject
IoGetCurrentProcess
strncpy
_strnicmp
ZwClose
IoGetAttachedDevice
IoCreateFile
RtlAnsiStringToUnicodeString
RtlInitAnsiString
IoFreeIrp
KeSetEvent
KeWaitForSingleObject
IofCallDriver
RtlAssert
KeGetCurrentThread
KeInitializeEvent
IoAllocateIrp
IoGetRelatedDeviceObject
IoFileObjectType
IoDeleteDevice
ExInitializeNPagedLookasideList
InterlockedPopEntrySList
KeInitializeSpinLock
hal
KfAcquireSpinLock
KfReleaseSpinLock
KeGetCurrentIrql
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 896B - Virtual size: 876B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ