1a49e5babbc011e0e025a00e4ba37435_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1a49e5babbc011e0e025a00e4ba37435_JaffaCakes118
Size

7.4MB
MD5

1a49e5babbc011e0e025a00e4ba37435
SHA1

94f144b73ee0fcf5d163b0a55756b62b91eb78db
SHA256

b0848e16655f9e20c08b3f6777539320c5a27133b394e2677e8d3aa7c3ffe4c3
SHA512

e6d31bc429c7513890e7639d7e2c65668d05f424139e370971d1c0f0511ee7669e1b5859d670d15b9e2efe29f4a4d0e3b5cf050a384700cf16b22673c13e3399
SSDEEP

196608:oJVYSUjP4nZso0ollP6PQ/OtwBtweubfQRrG1b6G3QhN:2bSo0oP6PQGtwvRK1bZa

Score

3^/10

Malware Config

Signatures

Unsigned PE 7 IoCs

Checks for missing Authenticode signature.

resource
1a49e5babbc011e0e025a00e4ba37435_JaffaCakes118
unpack001/$PLUGINSDIR/BrandingURL.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/BudRedhead.exe
unpack001/MikWin.dll
unpack001/ReflexiveArcade/ReflexiveArcade.dll
unpack001/uninst.exe

NSIS installer 4 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/uninst.exe	nsis_installer_1
static1/unpack001/uninst.exe	nsis_installer_2

Files

1a49e5babbc011e0e025a00e4ba37435_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c042238f43557c055fca8642de8a074

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
MulDiv
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
RegisterClassA
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
EmptyClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetForegroundWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/BrandingURL.dll
.dll windows:4 windows x86 arch:x86

135de77644e2add2fd9dd8176740e7e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GlobalFree

user32

GetWindowRect
SetCapture
InvalidateRect
SendMessageA
GetCapture
ClientToScreen
EnableWindow
LoadImageA
SetPropA
SetWindowLongA
GetWindowLongA
GetDlgItem
PtInRect
ReleaseCapture
SetCursor
GetPropA
CallWindowProcA
RedrawWindow

gdi32

GetObjectA
SetTextColor
CreateFontIndirectA

shell32

ShellExecuteA

Exports

Exports

Set
Unload

Sections

.text
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 839B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$SMPROGRAMS/ºì·¢BudÀúÏÕ¼Ç/155ÂÌÉ«Èí¼þÕ¾.lnk
.lnk
155ÂÌÉ«Èí¼þÕ¾.lnk
.lnk
BudRedhead.exe
.exe windows:4 windows x86 arch:x86

e66790506a96377bdad57ebaca1d54ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dsound

ord1

ddraw

DirectDrawCreate

dinput

DirectInputCreateA

winmm

timeBeginPeriod
timeGetDevCaps
timeGetTime
timeKillEvent
timeSetEvent
timeEndPeriod

user32

SetWindowLongA
CreateWindowExA
BringWindowToTop
ShowWindow
GetSystemMetrics
GetWindowRect
AdjustWindowRect
SetWindowPos
ShowCursor
ClientToScreen
GetClientRect
DrawTextA
wsprintfA
DispatchMessageA
TranslateMessage
PeekMessageA
PostMessageA
GetDesktopWindow
GetKeyNameTextA
GetKeyboardLayout
MapVirtualKeyExA
WaitMessage
GetActiveWindow
GetForegroundWindow
SetForegroundWindow
MessageBoxA
SetCursorPos
DestroyWindow
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcA
LoadIconA
LoadCursorA
LoadImageA
RegisterClassExA
ReleaseDC
GetDC
SetFocus

gdi32

SelectPalette
CreatePalette
SetPaletteEntries
GetSystemPaletteEntries
RealizePalette
StretchDIBits
GetDeviceCaps
DeleteObject
GetStockObject

kernel32

GetModuleFileNameA
GetCPInfo
GetStringTypeW
GetStringTypeA
CreateFileA
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
HeapSize
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
WriteFile
ReadFile
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
GetCurrentProcess
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
FreeLibrary
GetProcAddress
LoadLibraryA
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetTickCount
OutputDebugStringA
QueryPerformanceFrequency
GetVersionExA
Sleep
QueryPerformanceCounter
TerminateProcess
OpenProcess
CloseHandle
HeapAlloc
HeapFree
GetProcessHeap
GetLocalTime
SetCurrentDirectoryA
GetOEMCP
DeleteFileA
SetFileAttributesA
FindClose
FindNextFileA
MoveFileA
FindFirstFileA
RemoveDirectoryA
GetLastError
ExitProcess
GetVersion
HeapDestroy
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetFileAttributesA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetTimeZoneInformation
GetACP
RaiseException
RtlUnwind
GetSystemTime

advapi32

RegQueryValueExA
RegDeleteValueA
CryptHashData
CryptImportKey
CryptReleaseContext
RegCloseKey
CryptAcquireContextA
CryptCreateHash
RegFlushKey
RegCreateKeyExA
RegSetValueExA
CryptDestroyHash
CryptVerifySignatureA
CryptDestroyKey

mikwin

MikMod_Update
Player_Stop
Player_Free
add_ds_mikwin
Player_Load
Player_Start
remove_ds_mikwin
get_ds_dsbstream
Player_TogglePause

Sections

.text
Size: 732KB - Virtual size: 728KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 188KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.FFF
Size: 256B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Data/Dem/1.dem
Data/Dem/2.dem
Data/Dem/3.dem
Data/Dem/4.dem
Data/Gfx/Bud_5.gfx
Data/Gfx/Dvor_po.gfx
Data/Gfx/Dvor_po1.gfx
Data/Gfx/Dvorac1.gfx
Data/Gfx/Dvorac2.gfx
Data/Gfx/Dvorac3.gfx
Data/Gfx/Dvorac4.gfx
Data/Gfx/Dvorspr1.gfx
Data/Gfx/Dvorspr2.gfx
Data/Gfx/Dvorspr3.gfx
Data/Gfx/Dvorspr4.gfx
Data/Gfx/Dvorspr7.gfx
Data/Gfx/Pir_sprt.gfx
Data/Gfx/Pir_spru.gfx
Data/Gfx/Pir_sprv.gfx
Data/Gfx/Piram_po.gfx
Data/Gfx/Piramid1.gfx
Data/Gfx/Piramid2.gfx
Data/Gfx/Piramid3.gfx
Data/Gfx/Sum_poze.gfx
Data/Gfx/Sum_spr1.gfx
Data/Gfx/Sum_spr2.gfx
Data/Gfx/Sum_spr3.gfx
Data/Gfx/Suma_1.gfx
Data/Gfx/Suma_10.gfx
Data/Gfx/Suma_13.gfx
Data/Gfx/Suma_14.gfx
Data/Gfx/Suma_15.gfx
Data/Gfx/Suma_16.gfx
Data/Gfx/Svem_3.gfx
Data/Gfx/Svem_4.gfx
Data/Gfx/Svem_5.gfx
Data/Gfx/Svem_6.gfx
Data/Gfx/Svem_poz.gfx
Data/Gfx/Svem_sp1.gfx
Data/Gfx/Svem_sp2.gfx
Data/Gfx/Svem_sp3.gfx
Data/Gfx/Svem_sp5.gfx
Data/Gfx/Svem_spr.gfx
Data/Gfx/bud_1.gfx
Data/Gfx/bud_2.gfx
Data/Gfx/bud_3.gfx
Data/Gfx/chapter1.gfx
Data/Gfx/chapter2.gfx
Data/Gfx/chapter3.gfx
Data/Gfx/chapter4.gfx
Data/Gfx/chapter5.gfx
Data/Gfx/chapter6.gfx
Data/Gfx/chapter7.gfx
Data/Gfx/cont_spr.gfx
Data/Gfx/font2b.gfx
Data/Gfx/font2c.gfx
Data/Gfx/loading1.gfx
Data/Gfx/loading2.gfx
Data/Gfx/loading3.gfx
Data/Gfx/loading4.gfx
Data/Gfx/loading5.gfx
Data/Gfx/loading6.gfx
Data/Gfx/miniload.gfx
Data/Gfx/naslov.gfx
Data/Gfx/naslov80.gfx
Data/Gfx/opci_spr.gfx
Data/Gfx/poticaj2.gfx
Data/Gfx/se.gfx
Data/HelpImages/bud_redhead_logo.gif
.gif
Data/HelpImages/checkpoint.jpg
.jpg
Data/HelpImages/chooseaslot.jpg
.jpg
Data/HelpImages/controlsmenu.jpg
.jpg
Data/HelpImages/entername.jpg
.jpg
Data/HelpImages/graphicsmenu.jpg
.jpg
Data/HelpImages/hintscreen.jpg
.jpg
Data/HelpImages/mainmenu.jpg
.jpg
Data/HelpImages/optionsmenu.jpg
.jpg
Data/HelpImages/screen.jpg
.jpg
Data/HelpImages/soundmenu.jpg
.jpg .ps1 polyglot
Data/Lev/caspoz01.rav
Data/Lev/caspoz02.rav
Data/Lev/caspoz03.rav
Data/Lev/caspoz04.rav
Data/Lev/caspoz05.rav
Data/Lev/caspoz11.rav
Data/Lev/caspoz12.rav
Data/Lev/caspoz13.rav
Data/Lev/caspoz14.rav
Data/Lev/caspoz15.rav
Data/Lev/castle1.rav
Data/Lev/castle1.raz
Data/Lev/castle2.rav
Data/Lev/castle2.raz
Data/Lev/castle3.rav
Data/Lev/castle3.raz
Data/Lev/castle4.rav
Data/Lev/castle4.raz
Data/Lev/castle5.rav
Data/Lev/castle5.raz
Data/Lev/egypoz01.rav
Data/Lev/egypoz02.rav
Data/Lev/egypoz03.rav
Data/Lev/egypoz04.rav
Data/Lev/egypoz05.rav
Data/Lev/egypoz11.rav
Data/Lev/egypoz21.rav
Data/Lev/egypoz31.rav
Data/Lev/egypoz41.rav
Data/Lev/egypoz51.rav
Data/Lev/egypt1.rav
Data/Lev/egypt1.raz
Data/Lev/egypt2.rav
Data/Lev/egypt2.raz
Data/Lev/egypt3.rav
Data/Lev/egypt3.raz
Data/Lev/egypt4.rav
Data/Lev/egypt4.raz
Data/Lev/egypt5.rav
Data/Lev/egypt5.raz
Data/Lev/finale.rav
Data/Lev/finale.raz
Data/Lev/finalpo1.rav
Data/Lev/finalpo3.rav
Data/Lev/forest1.rav
Data/Lev/forest1.raz
Data/Lev/forest2.rav
Data/Lev/forest2.raz
Data/Lev/forest3.rav
Data/Lev/forest3.raz
Data/Lev/forest4.rav
Data/Lev/forest4.raz
Data/Lev/forest5.rav
Data/Lev/forest5.raz
Data/Lev/forpoz01.rav
Data/Lev/forpoz02.rav
Data/Lev/forpoz03.rav
Data/Lev/forpoz04.rav
Data/Lev/forpoz05.rav
Data/Lev/forpoz10.rav
Data/Lev/forpoz11.rav
Data/Lev/forpoz20.rav
Data/Lev/forpoz21.rav
Data/Lev/forpoz30.rav
Data/Lev/forpoz31.rav
Data/Lev/forpoz40.rav
Data/Lev/forpoz41.rav
Data/Lev/forpoz50.rav
Data/Lev/forpoz51.rav
Data/Lev/space1.rav
Data/Lev/space1.raz
Data/Lev/space2.rav
Data/Lev/space2.raz
Data/Lev/space3.rav
Data/Lev/space3.raz
Data/Lev/space4.rav
Data/Lev/space4.raz
Data/Lev/space5.rav
Data/Lev/space5.raz
Data/Lev/spcpoz01.rav
Data/Lev/spcpoz21.rav
Data/Lev/spcpoz22.rav
Data/Lev/spcpoz23.rav
Data/Lev/spcpoz24.rav
Data/Lev/spcpoz25.rav
Data/Mus/bigboss.xm
Data/Mus/castle.xm
Data/Mus/egypt.xm
Data/Mus/forest.xm
Data/Mus/gameover.xm
Data/Mus/levcomplete.xm
Data/Mus/space.xm
Data/Mus/story.xm
Data/Mus/title.xm
Data/Sfx/0_actportal.wav
Data/Sfx/0_bomba_exp.wav
Data/Sfx/0_bonusx2.wav
Data/Sfx/0_bosizvl.wav
Data/Sfx/0_bosmetak.wav
Data/Sfx/0_bosmotor.wav
Data/Sfx/0_bossmijeh.wav
Data/Sfx/0_boszraka.wav
Data/Sfx/0_brojanje.wav
Data/Sfx/0_checkpoint.wav
Data/Sfx/0_dobio_sifru.wav
Data/Sfx/0_energija.wav
Data/Sfx/0_error.wav
Data/Sfx/0_exitopen.wav
Data/Sfx/0_fitilj.wav
Data/Sfx/0_fitilj2.wav
Data/Sfx/0_hint.wav
Data/Sfx/0_hop.wav
Data/Sfx/0_hor_uze_h.wav
Data/Sfx/0_isparavanje.wav
Data/Sfx/0_kliz.wav
Data/Sfx/0_korak.wav
Data/Sfx/0_korak_kliz.wav
Data/Sfx/0_ljestve_h.wav
Data/Sfx/0_loza_h.wav
Data/Sfx/0_menu1.wav
Data/Sfx/0_menu2.wav
Data/Sfx/0_metak.wav
Data/Sfx/0_mexp.wav
Data/Sfx/0_misil.wav
Data/Sfx/0_oduzimanje_zivota.wav
Data/Sfx/0_ohno.wav
Data/Sfx/0_ouch.wav
Data/Sfx/0_pink2.wav
Data/Sfx/0_plac.wav
Data/Sfx/0_prekidiz.wav
Data/Sfx/0_sifra2.wav
Data/Sfx/0_teleport.wav
Data/Sfx/0_teleport2.wav
Data/Sfx/0_text.wav
Data/Sfx/0_udarac.wav
Data/Sfx/0_uze_h.wav
Data/Sfx/0_vexp.wav
Data/Sfx/0_voce2.wav
Data/Sfx/0_zivot2.wav
Data/Sfx/0_zlatnik.wav
Data/Sfx/a_cardinal.wav
Data/Sfx/a_izn_mes.wav
Data/Sfx/a_let_vil.wav
Data/Sfx/a_ptica3.wav
Data/Sfx/a_puc_puc.wav
Data/Sfx/a_puz.wav
Data/Sfx/a_robin1.wav
Data/Sfx/a_slap.wav
Data/Sfx/a_vje_bac.wav
Data/Sfx/a_vje_exp.wav
Data/Sfx/a_voda.wav
Data/Sfx/a_vrana.wav
Data/Sfx/alfakap.wav
Data/Sfx/alfasiga.wav
Data/Sfx/alfatram.wav
Data/Sfx/alfatram1.wav
Data/Sfx/b_izn_kop.wav
Data/Sfx/b_kamin.wav
Data/Sfx/b_kla_1.wav
Data/Sfx/b_kla_2.wav
Data/Sfx/b_puc_exp.wav
Data/Sfx/b_puc_puc.wav
Data/Sfx/b_uda_pod.wav
Data/Sfx/b_uda_spu.wav
Data/Sfx/b_uda_uda.wav
Data/Sfx/baklja.wav
Data/Sfx/betakap.wav
Data/Sfx/betaplatf.wav
Data/Sfx/betaplatftiha.wav
Data/Sfx/betapolu.wav
Data/Sfx/betatram.wav
Data/Sfx/betavrat.wav
Data/Sfx/btpompla.wav
Data/Sfx/bumbar.wav
Data/Sfx/cvrcak.wav
Data/Sfx/d_elek_napad.wav
Data/Sfx/d_elek_vr.wav
Data/Sfx/d_elev_vert.wav
Data/Sfx/d_explozija.wav
Data/Sfx/d_hodac_bip.wav
Data/Sfx/d_hodac_hod.wav
Data/Sfx/d_izn_para.wav
Data/Sfx/d_kam_let.wav
Data/Sfx/d_kam_puc.wav
Data/Sfx/d_kutija_exp.wav
Data/Sfx/d_las_exp.wav
Data/Sfx/d_las_puc.wav
Data/Sfx/d_let_pla.wav
Data/Sfx/d_letmis_let.wav
Data/Sfx/d_letmis_puc.wav
Data/Sfx/d_letsmin_let.wav
Data/Sfx/d_letsmin_puc.wav
Data/Sfx/d_misil_exp.wav
Data/Sfx/d_odbaci.wav
Data/Sfx/d_pla_let.wav
Data/Sfx/d_pla_vr.wav
Data/Sfx/d_platfo.wav
Data/Sfx/d_platftiha.wav
Data/Sfx/d_poluga.wav
Data/Sfx/d_puc_acid.wav
Data/Sfx/d_puc_exp.wav
Data/Sfx/d_puc_puc.wav
Data/Sfx/d_rot_okr.wav
Data/Sfx/d_rot_puc.wav
Data/Sfx/d_silj_let.wav
Data/Sfx/d_skakac.wav
Data/Sfx/d_skakac_pri.wav
Data/Sfx/d_sprem.wav
Data/Sfx/d_struja.wav
Data/Sfx/d_svjetla.wav
Data/Sfx/d_tenk_hod.wav
Data/Sfx/d_tenk_prip.wav
Data/Sfx/d_uda_spu.wav
Data/Sfx/d_uda_uda.wav
Data/Sfx/d_vrata.wav
Data/Sfx/d_zla_hod.wav
Data/Sfx/d_zla_okr.wav
Data/Sfx/duh.wav
Data/Sfx/dvor_amb1.wav
Data/Sfx/dvor_amb2.wav
Data/Sfx/frog.wav
Data/Sfx/g_izn_vat.wav
Data/Sfx/g_puc_exp.wav
Data/Sfx/g_puc_puc.wav
Data/Sfx/g_uda_pod.wav
Data/Sfx/g_uda_spu.wav
Data/Sfx/g_uda_uda.wav
Data/Sfx/g_zmija.wav
Data/Sfx/gamakap.wav
Data/Sfx/gamaplatf.wav
Data/Sfx/gamaplatftiha.wav
Data/Sfx/gamapolu.wav
Data/Sfx/gamasurf.wav
Data/Sfx/gamatram.wav
Data/Sfx/gamavrat.wav
Data/Sfx/koplja.wav
Data/Sfx/korak.wav
Data/Sfx/kutija_ras.wav
Data/Sfx/luster.wav
Data/Sfx/osa.wav
Data/Sfx/pauk.wav
Data/Sfx/pig.wav
Data/Sfx/pig_napad.wav
Data/Sfx/pljus_kor.wav
Data/Sfx/prase_hod.wav
Data/Sfx/rachel.wav
Data/Sfx/riba_buc.wav
Data/Sfx/scarab.wav
Data/Sfx/sismis.wav
Data/Sfx/skakavac.wav
Data/Sfx/voda.wav
Data/Sfx/zar_crveni.wav
Data/Sfx/zar_hobot.wav
Data/Sfx/zar_luk.wav
Data/Sfx/zar_mis.wav
Data/Sfx/zar_okasti.wav
Data/Sfx/zar_osa.wav
Data/Sfx/zar_ptica.wav
Data/Sfx/zar_riba.wav
Data/Sfx/zar_robot.wav
Data/Sfx/zar_sivi.wav
Data/Sfx/zar_super.wav
Data/Sfx/zar_vatra.wav
Data/Sfx/zar_vodeni.wav
Data/Sfx/zar_zeleni.wav
Data/Sfx/zmaj_hod.wav
Data/Sfx/zmaj_puse.wav
MikWin.dll
.dll windows:4 windows x86 arch:x86

8dfbc56976fdde2af9ec521abf2fae1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateMutexA
WaitForSingleObject
ReadFile
GetStdHandle
SetHandleCount
HeapFree
HeapReAlloc
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLastError
CloseHandle
ReleaseMutex
SetFilePointer
GetCPInfo
GetFileType
GetStartupInfoA
WriteFile
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetProcAddress
TerminateProcess
GetCurrentProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
CreateFileA
SetStdHandle
FlushFileBuffers
SetEndOfFile
GetACP
GetOEMCP
LoadLibraryA

user32

GetForegroundWindow
GetActiveWindow

dsound

ord1

Exports

Exports

MikMod_Active
MikMod_DisableOutput
MikMod_DriverFromAlias
MikMod_EnableOutput
MikMod_Exit
MikMod_GetVersion
MikMod_InfoDriver
MikMod_InfoLoader
MikMod_Init
MikMod_InitThreads
MikMod_Lock
MikMod_RegisterAllDrivers
MikMod_RegisterAllLoaders
MikMod_RegisterDriver
MikMod_RegisterErrorHandler
MikMod_RegisterLoader
MikMod_RegisterPlayer
MikMod_Reset
MikMod_SetNumVoices
MikMod_Unlock
MikMod_Update
MikMod_critical
MikMod_errno
MikMod_strerror
Player_Active
Player_Free
Player_GetChannelPeriod
Player_GetChannelVoice
Player_GetModule
Player_Load
Player_LoadFP
Player_LoadGeneric
Player_LoadTitle
Player_LoadTitleFP
Player_Mute
Player_Muted
Player_NextPosition
Player_Paused
Player_PrevPosition
Player_SetPosition
Player_SetSpeed
Player_SetTempo
Player_SetVolume
Player_Start
Player_Stop
Player_ToggleMute
Player_TogglePause
Player_Unmute
Sample_Free
Sample_Load
Sample_LoadFP
Sample_LoadGeneric
Sample_Play
VC_Exit
VC_Init
VC_PlayStart
VC_PlayStop
VC_SampleLength
VC_SampleLoad
VC_SampleSpace
VC_SampleUnload
VC_SetNumVoices
VC_SilenceBytes
VC_VoiceGetFrequency
VC_VoiceGetPanning
VC_VoiceGetPosition
VC_VoiceGetVolume
VC_VoicePlay
VC_VoiceRealVolume
VC_VoiceSetFrequency
VC_VoiceSetPanning
VC_VoiceSetVolume
VC_VoiceStop
VC_VoiceStopped
VC_WriteBytes
Voice_GetFrequency
Voice_GetPanning
Voice_GetPosition
Voice_GetVolume
Voice_Play
Voice_RealVolume
Voice_SetFrequency
Voice_SetPanning
Voice_SetVolume
Voice_Stop
Voice_Stopped
add_ds_mikwin
drv_ds_raw
drv_nos
get_ds_active
get_ds_dsbstream
load_669
load_amf
load_dsm
load_far
load_gdm
load_imf
load_it
load_m15
load_med
load_mod
load_mtm
load_okt
load_s3m
load_stm
load_ult
load_uni
load_xm
md_device
md_driver
md_mixfreq
md_mode
md_musicvolume
md_pansep
md_reverb
md_sndfxvolume
md_volume
mikwinExit
mikwinGetErrno
mikwinGetMasterDevice
mikwinGetMasterReverb
mikwinGetMasterVolume
mikwinGetMixFrequency
mikwinGetMode
mikwinGetMusicVolume
mikwinGetPanning
mikwinGetSfx
mikwinGetSfxVolume
mikwinInit
mikwinPlaySfx
mikwinSetErrno
mikwinSetMasterDevice
mikwinSetMasterReverb
mikwinSetMasterVolume
mikwinSetMixFrequency
mikwinSetMode
mikwinSetMusicVolume
mikwinSetPanning
mikwinSetSfxVolume
mikwinSetSoundDelay
mikwinStopSfx
remove_ds_mikwin
set_ds
set_ds_buffersize
set_ds_hwnd
set_dsbprimary

Sections

.text
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MikWin/COPYING.LESSER
MikWin/bud_mikwin.txt
ReflexiveArcade/Application.dat
ReflexiveArcade/Arcade.dat
ReflexiveArcade/ReflexiveArcade.dll
.dll windows:4 windows x86 arch:x86

1a07be9d954d016ba837689c232e4e2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetActiveWindow
wsprintfA
LoadCursorA
SetCursorPos
MessageBoxA
GetDesktopWindow
ClientToScreen
SetForegroundWindow
ShowWindow
SetCursor
SystemParametersInfoA
ScreenToClient
WindowFromPoint
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
RegisterClipboardFormatA
GetClipboardData
SetTimer
KillTimer
GetCursorPos
GetClientRect

kernel32

SetCurrentDirectoryA
DeviceIoControl
CreateFileA
CloseHandle
GetShortPathNameA
SetPriorityClass
GetCurrentDirectoryA
SizeofResource
LockResource
LoadResource
FindResourceA
GetComputerNameA
GetVersionExA
GetProcAddress
LoadLibraryA
GetLastError
GetModuleFileNameA
OutputDebugStringA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
SetUnhandledExceptionFilter
GetCurrentProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetOEMCP
GetTickCount
GetTempPathA
CreateProcessA
GetExitCodeProcess
IsBadReadPtr
IsBadWritePtr
MulDiv
CreateMutexA
WaitForSingleObject
ReleaseMutex
FileTimeToDosDateTime
GetSystemTimeAsFileTime
FindClose
FindFirstFileA
GetTempFileNameA
GetFileAttributesA
CreateDirectoryA
FindNextFileA
GetFileTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
FileTimeToLocalFileTime
GetPrivateProfileIntA
WritePrivateProfileStringA
GetVersion
SetFileAttributesA
QueryPerformanceCounter
QueryPerformanceFrequency
FreeLibrary
ExitProcess
TerminateProcess
IsBadCodePtr
HeapAlloc
HeapFree
GetCommandLineA
DeleteFileA
SetEndOfFile
InterlockedDecrement
InterlockedIncrement
RtlUnwind
HeapReAlloc
GetModuleHandleA
HeapSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
FlushFileBuffers
ReadFile
SetFilePointer
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
RaiseException
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP

advapi32

RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
GetUserNameA
RegEnumValueA
RegEnumKeyExA
RegCreateKeyA

netapi32

Netbios

gdi32

DeleteObject

shell32

ShellExecuteA

Exports

Exports

radll_DrawNextFrameIntoBuffer
radll_EnterMenuSession
radll_GetDLLVersionAsInt
radll_GetDLLVersionAsString
radll_GetLastErrorInformation
radll_GetNumberOfRectsToUpdate
radll_GetUpdateRect
radll_GetValueAsFloat
radll_GetValueAsInt
radll_GetValueAsString
radll_HandleWindowsMessage
radll_HasTheProductBeenPurchased
radll_Initialize
radll_IsASystemUpdateRequired
radll_IsTheMenuSessionComplete
radll_SetPalette
radll_ShutDown

Sections

.text
Size: 728KB - Virtual size: 726KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 705KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ScrShots/readme.txt
bud.cfg
bud_log.txt
.vbs
readme.html
.html
uninst.exe
.exe windows:4 windows x86 arch:x86

1c042238f43557c055fca8642de8a074

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
MulDiv
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
RegisterClassA
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
EmptyClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetForegroundWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp

Sharing

General

Malware Config

Signatures

Files

1c042238f43557c055fca8642de8a074

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 3KB - Virtual size: 112KB

.ndata Size: - Virtual size: 36KB

.rsrc Size: 28KB - Virtual size: 28KB

135de77644e2add2fd9dd8176740e7e0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 992B

.rdata Size: 1024B - Virtual size: 839B

.data Size: 512B - Virtual size: 336B

.reloc Size: 512B - Virtual size: 220B

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

e66790506a96377bdad57ebaca1d54ab

Headers

File Characteristics

Imports

dsound

ddraw

dinput

winmm

user32

gdi32

kernel32

advapi32

mikwin

Sections

.text Size: 732KB - Virtual size: 728KB

.rdata Size: 36KB - Virtual size: 32KB

.data Size: 188KB - Virtual size: 1.0MB

.rsrc Size: 16KB - Virtual size: 14KB

.FFF Size: 256B - Virtual size: 4KB

8dfbc56976fdde2af9ec521abf2fae1e

Headers

File Characteristics

Imports

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 112KB

.ndata
Size: - Virtual size: 36KB

.rsrc
Size: 28KB - Virtual size: 28KB

.text
Size: 1024B - Virtual size: 992B

.rdata
Size: 1024B - Virtual size: 839B

.data
Size: 512B - Virtual size: 336B

.reloc
Size: 512B - Virtual size: 220B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 732KB - Virtual size: 728KB

.rdata
Size: 36KB - Virtual size: 32KB

.data
Size: 188KB - Virtual size: 1.0MB

.rsrc
Size: 16KB - Virtual size: 14KB

.FFF
Size: 256B - Virtual size: 4KB

.text
Size: 156KB - Virtual size: 154KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 40KB - Virtual size: 45KB

.reloc
Size: 16KB - Virtual size: 14KB

.text
Size: 728KB - Virtual size: 726KB

.rdata
Size: 72KB - Virtual size: 70KB

.data
Size: 80KB - Virtual size: 705KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 56KB - Virtual size: 53KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 112KB

.ndata
Size: - Virtual size: 36KB

.rsrc
Size: 28KB - Virtual size: 28KB