217eb93b554c1257a6bc94d557c8ff6e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

217eb93b554c1257a6bc94d557c8ff6e_JaffaCakes118
Size

966KB
MD5

217eb93b554c1257a6bc94d557c8ff6e
SHA1

f3304547b39ec930a7efc7be2218f3f3d41b24b2
SHA256

97878b10b40c3b58a1a56bafe0f971e2daa69b3b396a2a85a28ae0749bc0a04d
SHA512

4a7739aefb0ec7dbab6d58942821efa6abe74162fa4bcfbcd627aeae18afb9d0ae092a15535ba62eb8837b9cd4128b220e6aa10f4842b055685ef6bad03ded41
SSDEEP

24576:Jf0qgUcaChFhKcWgsk1Guxv6ZhM5vtrt8Iw8fCrK4SFeK3qvA:J8qWXhKcFGYVBth8Ix4XK3qvA

Score

7^/10

upx vmprotect

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
static1/unpack001/FlashX264Ctrl.dll	vmprotect

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/avcore-0.dll
unpack001/avutil-50.dll
unpack001/libaacplus.dll
unpack001/libx264-112.dll
unpack001/swscale-0.dll

Files

217eb93b554c1257a6bc94d557c8ff6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:d0:fc:cf:6d:eb:20:23:4a:c5:9f:fd:f8:83:03:69
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

30/12/2010, 00:00

Not After

30/03/2012, 23:59

Subject

CN=beijing six rooms keji youxian gongsi,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=beijing six rooms keji youxian gongsi,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-wizard.bmp
CPUDetect.exe
.exe windows:5 windows x86 arch:x86

da0bd77fb7105f3171e1f685963d5ffd

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:d0:fc:cf:6d:eb:20:23:4a:c5:9f:fd:f8:83:03:69
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

30/12/2010, 00:00

Not After

30/03/2012, 23:59

Subject

CN=beijing six rooms keji youxian gongsi,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=beijing six rooms keji youxian gongsi,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
LoadLibraryW
RtlUnwind
IsProcessorFeaturePresent
HeapAlloc
HeapReAlloc
HeapSize

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
FX264UI.exe
.exe windows:5 windows x86 arch:x86

b4efcce6d198501c9b0f0b639605affa

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:d0:fc:cf:6d:eb:20:23:4a:c5:9f:fd:f8:83:03:69
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

30/12/2010, 00:00

Not After

30/03/2012, 23:59

Subject

CN=beijing six rooms keji youxian gongsi,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=beijing six rooms keji youxian gongsi,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

GetModuleHandleW
GetModuleFileNameW
RaiseException
GetCommandLineW
DeleteCriticalSection
WaitForSingleObject
CloseHandle
InterlockedIncrement
InterlockedDecrement
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CreateSemaphoreW
OpenFileMappingW
LockResource
FindResourceExW
GetStringTypeW
HeapCreate
GetStdHandle
WriteFile
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TlsFree
GetLastError
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoW
HeapSetInformation
CreateThread
ExitThread
DecodePointer
EncodePointer
HeapSize
HeapReAlloc
HeapDestroy
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedPushEntrySList
InterlockedCompareExchange
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
WideCharToMultiByte
SetLastError
lstrcmpiW
TlsSetValue
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryW
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
lstrcpyW
lstrlenW
EnterCriticalSection
LeaveCriticalSection
LCMapStringW
FlushFileBuffers
CreateFileW
WriteConsoleW
SetStdHandle
SetFilePointer
GetConsoleCP
GetConsoleMode

user32

MonitorFromPoint
DestroyMenu
DialogBoxParamW
TrackPopupMenu
LoadMenuW
CreateDialogParamW
DestroyWindow
wsprintfW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
CharNextW
PostQuitMessage
BringWindowToTop
MessageBoxW
GetSystemMetrics
UnregisterClassA
SetForegroundWindow
UpdateWindow
IsWindowVisible
ShowWindow
LoadIconW
IsDialogMessageW
RegisterWindowMessageW
PostMessageW
GetSubMenu
LoadImageW
SetWindowLongW
GetDlgItem
SendMessageW
EndDialog
RedrawWindow
SetWindowTextW
GetWindowTextW
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
SetWindowPos
GetCursorPos

gdi32

SetBkMode
SetTextColor
GetStockObject

advapi32

RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey

shell32

ShellExecuteW
Shell_NotifyIconW

ole32

CoInitialize
CoTaskMemFree
CoUninitialize
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc

oleaut32

VariantClear
VariantInit
VarUI4FromStr

winmm

mixerGetNumDevs
mixerGetDevCapsW

urlmon

URLDownloadToFileW

wininet

InternetGetCookieExA

ws2_32

htons
gethostbyaddr
gethostbyname
connect
socket
WSACleanup
WSAStartup
send
recv
closesocket
inet_addr

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
FlashX264Ctrl.dll
.dll regsvr32 windows:5 windows x86 arch:x86

9bf7878ee4bd5b7c964d789ffebf3469

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:d0:fc:cf:6d:eb:20:23:4a:c5:9f:fd:f8:83:03:69
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

30/12/2010, 00:00

Not After

30/03/2012, 23:59

Subject

CN=beijing six rooms keji youxian gongsi,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=beijing six rooms keji youxian gongsi,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

CharNextW
MessageBoxW

advapi32

RegOpenKeyExW

shell32

ShellExecuteW

ole32

CoTaskMemFree

oleaut32

LoadRegTypeLi

setupapi

SetupDiGetDeviceInterfaceDetailW

swscale-0

sws_getContext

libx264-112

x264_picture_alloc

libaacplus

init_plans

version

VerQueryValueW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
E�K S��}ŷ��!�S��S�rnr��(��/p��Z�<��?)0t��^�-H��vA�Z�YId��d:D��s�X䗥�wq�[$GpReO��){rW�ϊ��lLK{�P��ܷ�b��NB��U6��C��Ѯ�uS�=6�ѯ��z� [�;��f�6H>��4̼�b� 8f��rϞBi��b��ln��k�w�0-� �֖9��?��/T��4GQvRR�XJ��6�p:-�~d�_�Z�,�r��CL{�"s&��`(�V`�Q{��=Jׄ��OX�OS�=-K��)�`^��^�7ax�9b f�s�\��c&B�SӽӴ�h��s��]@��u��CtZE��PP��5ȹ�+�ܧ�8��)-��tf�3�-��H�zN��j'5�2��Z�N��'��Ofz�|��!��&��MX��0� ��D0�K�I��D b��n '8ճNіw�kC��2�IY��;�O��fgKOx�ޢ[R!�O�qݙZ�j�l��1q�/1��I��Au��$A:� ��Ԙ'�g�F�Y?��&�Ԓ��z�_*�;d��{�N��J��(�|�O�gh�13��[H?��f� #��S�\J��4ҵ�K�l �TN��8ܫ��}K�*3�b= F��1��,Olws��U��4�ct�w��U��K��2˼�A��e��En�ǪP�O#R�U��V?$��M��z.g��8��}��1dw�qqy�y�r̠��,�.Wj��j��|ٳ�&�,�=�i��u0�;�}@h=�XSk��,C��Vc�w��c��z�LM�ܶ��"�%碭k�d�9��rayz��.e��z�T��*�¼�/��Y�v5��ͨe6=��f�:R9I��\�ZT�6�Ҁ�v :��U�f�b�s[�{�Y�D��˧! xMw�*��#k�NQ~��=*�lkU��G0#��R?R9��x��^�~2 wK �ԯ�f�/�}4��XB�li*ٰC��\\��Y��~�� t+��'}C�B#�SM=�x��ͅg��oi6-��j�x?jg��5��c]a��G��)*��Eh}X�ܗ^�"�!�W�Sr��Ӄ�M])��Q(��a'�a��~�M?��_q|1�}��ؾ�<7��L��Z��\!��Q/��j�k��_��|n}p�C\!�c�'��-�_��|x�w�iK�� @�̖��'Oq�FV�;�lLR��/��)R��@}-o4|�lY ��_B,bU��Ǭ��Q��=4��Պ\��[<�1[^^�\�O�i=Q20*\Fۍ��t�d��Yޗ��dNW�y��g9��P�1;��fƎ-�SK��U�${CiF'��PR�� e� ��`e�v\4si��<h_pz֧DN~Αj��i��{�͹��"��K��Ф��xX6�6��A��]�p?Z6�k��XL�M�Diy7��_juW+�-� ᴇ��Z�w��o��z��s��u��P��+��i҈��-ʛ��p��o�ͬ��PJ7��6�]ǿ�F�Ɖ�o��3� ϟ{�2��x��.wI�s�� tf��hF�V��U��+��9T�M�1Q?4};��l� Qm蜘!O�u��)�P'8H�_�W��Q� O��b5' ��t��J�%S�%^.��4�N��Pb��ߡ��K=b?�Q"E �u"�V��Zi;m��@�輫\��lF��͚>?8�d��XI]j��{��Ѐ0�r�6��Ϯ�5�E�|'{�xt��KY{(>4]��(��M�i�jl �R��&�H��X;)��|��8�� ,v��F�Hڂtn.��~��b�I��Y��%U��o��7�V�7P;?��2<�J�<UϹ��JU��k�z�+u92 ��*Pf..�?y��-�T,SY�$O#�ƴ��WBu�U.& x�7�iJ�HU�1 Y>�\��qz��2�͋�k�*��E;�5e�E��j��rN/�]S@�i�C:��A(��~E�k� 5�(��O��ӵ�xgqng�]��Ɂ-��3��<!��š�S��5�'Cf^��֓�zc�1lw�� xH��5�U��Jyxf%3ܿ�m�3��e�(؀��,�9�Ќ��Y�u�`�;��%w�y��w��z��G`{�+a��/&�%m�-T#ѹlHp(Xq{~��a�~��I��n@��O ̷�J�ęs�)}��I>l]ΪjؗR�;v�I�᭰pm�0HuO��Z��8�r�IGrt� ~��2<e��z�`nG��κ��|��*�� Y~��]�R�obs]�NdyR�An�\4��3�d�`��ͱ�g8�%�W53Y&3׼��z��T�`��`q }P��;�<��!�ӷ\�_�jR�l5 vD9��.]\*��B�w$��#AI�͌�8 �X}��R��DOb}�l�2 �g :>ʨ�X40p�߉��qP�f�[��d�dnGզ}j/�d��op�g{�ׇ^Æ�л ��7��2Cˉ��y�ϪL��D& E��mP�d�=T��W&?��H�z�kN�ld��w��D��Ԓ��}p)b�j68��[v-W|N�tj��í�4�>_C��DB��a4��_#�/��s��<�D@��FƊ��L��О'$�#Fz��wnM��&'�ڊ��*h�=⇢'�%G9g6�y�q�� 嬘��W,b�n�G��`o�8�ߋOɂ��օ�?��7�u~�#h��]�q�CY��l_8$}a�K"͖�m�SE��-�2f��_�>ӈ��=H��W��b[��ձ'��r_��V��u�>�ܫ��7zht�K�}^y1��
LoadFlash

Sections

.text
Size: - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fx264
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 338KB - Virtual size: 337KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
avcore-0.dll
.dll windows:4 windows x86 arch:x86

77cc376241f502127a8765c6c5e3b11b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

avutil-50

av_d2q
av_default_item_name
av_log
av_parse_and_eval_expr
av_pix_fmt_descriptors

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_errno
_iob
_winmajor
abort
calloc
fflush
free
fwrite
malloc
memcpy
strcmp
strtol
vfprintf

Exports

Exports

av_check_image_size
av_fill_image_linesizes
av_fill_image_max_pixsteps
av_fill_image_pointers
av_get_image_linesize
av_image_check_size
av_image_copy
av_image_copy_plane
av_image_fill_linesizes
av_image_fill_max_pixsteps
av_image_fill_pointers
av_image_get_linesize
av_parse_video_rate
av_parse_video_size
avcore_configuration
avcore_license
avcore_version

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 236B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
avutil-50.dll
.dll windows:4 windows x86 arch:x86

839c71bf3ccc8bced92e3b065e7ef3bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetConsoleScreenBufferInfo
GetLastError
GetModuleHandleA
GetProcAddress
GetStdHandle
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetConsoleTextAttribute
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_close
_isatty
_open
_read
__dllonexit
__lc_codepage
__mb_cur_max
_assert
_errno
_iob
_winmajor
abort
acos
asin
atan
calloc
clock
cos
cosh
exp
fflush
floor
fputc
fputs
free
frexp
fwrite
getenv
isspace
ldexp
localeconv
log
malloc
memcpy
memset
pow
realloc
sin
sinh
strchr
strcmp
strcpy
strlen
strspn
tan
tanh
toupper
vfprintf
wcslen

Exports

Exports

av_add_q
av_adler32_update
av_aes_crypt
av_aes_init
av_aes_size
av_base64_decode
av_base64_encode
av_bmg_get
av_compare_mod
av_compare_ts
av_crc
av_crc_get_table
av_crc_init
av_d2q
av_d2str
av_dbl2ext
av_dbl2int
av_default_item_name
av_des_crypt
av_des_init
av_div_q
av_eval_expr
av_evaluate_lls
av_ext2dbl
av_fifo_alloc
av_fifo_drain
av_fifo_free
av_fifo_generic_read
av_fifo_generic_write
av_fifo_realloc2
av_fifo_reset
av_fifo_size
av_fifo_space
av_find_nearest_q_idx
av_find_opt
av_flt2int
av_free
av_free_expr
av_freep
av_gcd
av_get_bits_per_pixel
av_get_cpu_flags
av_get_double
av_get_int
av_get_pix_fmt
av_get_q
av_get_random_seed
av_get_string
av_get_token
av_init_lls
av_int2dbl
av_int2flt
av_lfg_init
av_log
av_log_default_callback
av_log_get_level
av_log_level
av_log_set_callback
av_log_set_flags
av_log_set_level
av_lzo1x_decode
av_malloc
av_mallocz
av_md5_final
av_md5_init
av_md5_size
av_md5_sum
av_md5_update
av_memcpy_backptr
av_mul_q
av_nearer_q
av_next_option
av_opt_set_defaults
av_opt_set_defaults2
av_opt_show2
av_parse_and_eval_expr
av_parse_expr
av_pix_fmt_descriptors
av_rc4_crypt
av_rc4_init
av_read_image_line
av_realloc
av_reduce
av_rescale
av_rescale_q
av_rescale_rnd
av_reverse
av_set_double
av_set_int
av_set_options_string
av_set_q
av_set_string3
av_sha1_final
av_sha1_init
av_sha1_size
av_sha1_update
av_sha_final
av_sha_init
av_sha_size
av_sha_update
av_solve_lls
av_strdup
av_strerror
av_stristart
av_stristr
av_strlcat
av_strlcatf
av_strlcpy
av_strstart
av_strtod
av_sub_q
av_tree_destroy
av_tree_enumerate
av_tree_find
av_tree_insert
av_tree_node_size
av_update_lls
av_vlog
av_write_image_line
avutil_configuration
avutil_license
avutil_version
ff_get_cpu_flags_x86
ff_inverse
ff_log2_tab
ff_random_get_seed
ff_sqrt_tab

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libaacplus.dll
.dll windows:5 windows x86 arch:x86

39628ba1f467f7493d50e1ed1ba1b663

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
IsProcessorFeaturePresent
GetStdHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
Sleep
GetLastError
HeapFree
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
RtlUnwind
MultiByteToWideChar
CloseHandle
LoadLibraryW
TlsGetValue
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameW
HeapAlloc
WriteConsoleW
SetFilePointer
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
CreateFileW
GetStringTypeW
LCMapStringW

Exports

Exports

AacEncClose
AacEncEncode
AacEncOpen
AacInitDefaultConfig
AddLeft
AddRight
AddVecLeft
AddVecRight
AdjThrInit
AdjThrUpdate
AdjustBitrate
AdjustSbrSettings
AdjustThresholds
AppendPsBS
ApplyStereoPreProcess
ApplyTnsMultTableToRatios
AssembleSbrBitstream
BCInit
BlockSwitching
BuildInterface
CFFTN
CalcBandEnergy
CalcBandEnergyMS
CalcFormFactor
CalculateTonalityQuotas
CopyBitBuf
CountSbrChannelPairElement
CreateBitBuffer
CreateExtractSbrEnvelope
CreateFrameInfoGenerator
CreateHybridFilterBank
CreatePsEnc
CreateSbrCodeEnvelope
CreateSbrMissingHarmonicsDetector
CreateSbrNoiseFloorEstimate
CreateSbrTransientDetector
CreateSynthesisQmfBank
CreateTonCorrParamExtr
DeleteBitBuffer
DeleteHybridFilterBank
DeletePsEnc
DeleteSynthesisQmfBank
DeleteTonCorrParamExtr
EncodePsFrame
EnvClose
EnvEncodeFrame
EnvOpen
EstimateScaleFactors
FinalizeBitConsumption
FindStartAndStopBand
FloatFR_Init
FloatFR_getNumOctaves
FloatFR_logDualis
GetBitsAvail
GetPsMode
GetTnsMaxBands
GetTnsParam
HybridAnalysis
HybridSynthesis
IIR21_Downsample
IIR21_Upsample
IIR32GetResamplerFeed
IIR32Init
IIR32Resample
InitBlockSwitching
InitElementBits
InitElementInfo
InitIIR21_Resampler
InitPreEchoControl
InitPsyConfiguration
InitPsyConfigurationShort
InitSbrBitstream
InitSbrHuffmanTables
InitStereoPreProcessing
InitTnsConfiguration
InitTnsConfigurationShort
InitializeSbrDefaults
IsSbrSettingAvail
LongWindowKBD
LongWindowSine
MsStereoProcessing
PreEchoControl
PsBuf2
PsBuf3
PsBuf4
PsBuf5
PsyDelete
PsyNew
PsyOutDelete
PsyOutNew
QCDelete
QCInit
QCMain
QCNew
QCOutDelete
QCOutNew
QuantizeSpectrum
ReadBits
ResetBitBuf
SbrMissingHarmonicsDetectorQmf
Shellsort_int
ShortWindowSine
SpreadingMax
SyncBlockSwitching
SynthesisQmfFiltering
TnsDetect
TnsEncodeData
TnsSync
TonCorrParamExtr
Transform_Real
UpdateBitres
UpdateFreqScale
UpdateHiRes
UpdateLoRes
UpdateStereoPreProcess
WindBitBufferBidirectional
WriteBits
WriteBitstreamData
WriteEnvChannelPairElement
WriteEnvSingleChannelElement
WritePsData
aBookPsIccFreqCode
aBookPsIccFreqLength
aBookPsIccTimeCode
aBookPsIccTimeLength
aBookPsIidFreqCode
aBookPsIidFreqLength
aBookPsIidTimeCode
aBookPsIidTimeLength
aHybridResolution
adts_hdr
adts_hdr_up
adts_sample_rates
bins2groupMap
bitCount
bitCountScalefactorDelta
bits2pe
bookSbrEnvBalanceC10F
bookSbrEnvBalanceC10T
bookSbrEnvBalanceC11F
bookSbrEnvBalanceC11T
bookSbrEnvBalanceL10F
bookSbrEnvBalanceL10T
bookSbrEnvBalanceL11F
bookSbrEnvBalanceL11T
bookSbrNoiseBalanceC11T
bookSbrNoiseBalanceL11T
calcExpSpec
calcSfbDist
calcSfbPe
cfftn
codeEnvelope
codeScalefactorDelta
codeValues
countStaticBitdemand
createInvFiltDetector
createQmfBank
deleteExtractSbrEnvelope
deleteFrameInfoGenerator
deleteInvFiltDetector
deleteQmfBank
deleteSbrCodeEnvelope
deleteSbrNoiseFloorEstimate
deleteSbrTransientDetector
destroy_plans
dynBitCount
expSpec
extractSbrEnvelope
fftTwiddleTab
frameInfoGenerator
frameSplitter
getEnergyFromCplxQmfData
getSbrStartFreqRAW
getSbrStopFreqRAW
groupBordersMix
groupShortData
hiResBandBorders
huff_ctab1
huff_ctab10
huff_ctab11
huff_ctab2
huff_ctab3
huff_ctab4
huff_ctab5
huff_ctab6
huff_ctab7
huff_ctab8
huff_ctab9
huff_ctabscf
huff_ltab11
huff_ltab1_2
huff_ltab3_4
huff_ltab5_6
huff_ltab7_8
huff_ltab9_10
huff_ltabscf
id
init_plans
invQuantTableE
invQuantTableQ
mTab_3_4
mTab_4_3
maxValueInSfb
mdctDelayBuffer
p4_13
p8_13
p_16000_mono_long
p_16000_mono_short
p_16000_stereo_long
p_16000_stereo_short
p_24000_mono_long
p_24000_mono_short
p_24000_stereo_long
p_24000_stereo_short
p_32000_mono_long
p_32000_mono_short
p_32000_stereo_long
p_32000_stereo_short
p_64_640_qmf
p_8000_mono_long
p_8000_mono_short
p_8000_stereo_long
p_8000_stereo_short
panClass
pow4_3_tab
prepareSfbPe
profile
psyMain
psyMainInit
qmfInverseFilteringDetector
quantSpec
quantSpecTmp
quantTableE
quantTableQ
resetInvFiltDetector
resetSbrNoiseFloorEstimate
saClass
sbrAnalysisFiltering
sbrNoiseFloorEstimateQmf
sbr_QmfStatesAnalysis
sbr_alt_sin_twiddle
sbr_cos_twiddle
sbr_detectionVectors
sbr_envIBuffer
sbr_envRBuffer
sbr_envYBuffer
sbr_freqBandTableHI
sbr_freqBandTableLO
sbr_guideScfb
sbr_guideVectorDetected
sbr_prevEnvelopeCompensation
sbr_qmf_64_640
sbr_quotaMatrix
sbr_sin_twiddle
sbr_thresholds
sbr_toncorrBuff
sbr_transients
sbr_v_k_master
scf
sfb_11025_long_1024
sfb_11025_short_128
sfb_12000_long_1024
sfb_12000_short_128
sfb_16000_long_1024
sfb_16000_short_128
sfb_22050_long_1024
sfb_22050_short_128
sfb_24000_long_1024
sfb_24000_short_128
sideInfoTabLong
sideInfoTabShort
tnsCoeff3
tnsCoeff3Borders
tnsCoeff4
tnsCoeff4Borders
tnsInfoTab
tnsMaxBandsTab
transientDetect
trigData_fct4_16
trigData_fct4_32
trigData_fct4_8
v_Huff_NoiseLevelC11T
v_Huff_NoiseLevelL11T
v_Huff_envelopeLevelC10F
v_Huff_envelopeLevelC10T
v_Huff_envelopeLevelC11F
v_Huff_envelopeLevelC11T
v_Huff_envelopeLevelL10F
v_Huff_envelopeLevelL10T
v_Huff_envelopeLevelL11F
v_Huff_envelopeLevelL11T

Sections

.text
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libx264-112.dll
.dll windows:4 windows x86 arch:x86

29cb20043c70e184766f57db34ee3e15

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentThread
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
ReleaseSemaphore
SetEvent
SetThreadPriority
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

_fstat
_ftime
_strdup
_unlink
__dllonexit
__lc_codepage
__mb_cur_max
_assert
_beginthreadex
_errno
_filelengthi64
_iob
_stricmp
_strnicmp
_winmajor
abort
calloc
exp
fclose
fflush
fgetpos
fopen
fprintf
fputc
fread
free
fsetpos
fwrite
getenv
localeconv
malloc
memcpy
memmove
memset
pow
rename
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strlen
strncmp
strpbrk
strspn
strstr
strtok
strtol
vfprintf
wcslen

Exports

Exports

_get_output_format
weight_none
x264_adaptive_quant_frame
x264_add16x16_idct8_mmx
x264_add16x16_idct8_sse2
x264_add16x16_idct_dc_mmx
x264_add16x16_idct_dc_sse2
x264_add16x16_idct_dc_ssse3
x264_add16x16_idct_mmx
x264_add16x16_idct_sse2
x264_add4x4_idct_mmx
x264_add4x4_idct_sse4
x264_add8x8_idct8_mmx
x264_add8x8_idct8_mmx.skip_prologue
x264_add8x8_idct8_sse2
x264_add8x8_idct8_sse2.skip_prologue
x264_add8x8_idct_dc_mmx
x264_add8x8_idct_dc_ssse3
x264_add8x8_idct_mmx
x264_add8x8_idct_sse2
x264_add8x8_idct_sse2.skip_prologue
x264_analyse_free_costs
x264_analyse_init_costs
x264_analyse_weight_frame
x264_bit_depth
x264_bitstream_init
x264_cabac_context_init
x264_cabac_encode_bypass_asm
x264_cabac_encode_bypass_c
x264_cabac_encode_decision_asm
x264_cabac_encode_decision_c
x264_cabac_encode_flush
x264_cabac_encode_init
x264_cabac_encode_init_core
x264_cabac_encode_terminal_asm
x264_cabac_encode_terminal_c
x264_cabac_encode_ue_bypass
x264_cabac_entropy
x264_cabac_mb_skip
x264_cabac_range_lps
x264_cabac_renorm_shift
x264_cabac_transition
x264_cache_mv_func_table
x264_cache_mvd_func_table
x264_cache_ref_func_table
x264_coeff0_token
x264_coeff_last15_mmxext
x264_coeff_last15_sse2
x264_coeff_last15_sse2_lzcnt
x264_coeff_last16_mmxext
x264_coeff_last16_sse2
x264_coeff_last16_sse2_lzcnt
x264_coeff_last4_mmxext
x264_coeff_last4_mmxext_lzcnt
x264_coeff_last64_mmxext
x264_coeff_last64_sse2
x264_coeff_last64_sse2_lzcnt
x264_coeff_level_run15_mmxext
x264_coeff_level_run15_sse2
x264_coeff_level_run15_sse2_lzcnt
x264_coeff_level_run16_mmxext
x264_coeff_level_run16_sse2
x264_coeff_level_run16_sse2_lzcnt
x264_coeff_level_run4_mmxext
x264_coeff_level_run4_mmxext_lzcnt
x264_coeff_token
x264_copy_column8
x264_cpu_cpuid
x264_cpu_cpuid_test
x264_cpu_detect
x264_cpu_emms
x264_cpu_mask_misalign_sse
x264_cpu_names
x264_cpu_num_processors
x264_cpu_sfence
x264_cqm_delete
x264_cqm_init
x264_cqm_parse_file
x264_dct4_weight2_zigzag
x264_dct4x4dc_mmx
x264_dct8_weight2_zigzag
x264_dct_init
x264_dct_init_weights
x264_deblock_h_chroma_intra_mmxext
x264_deblock_h_chroma_intra_sse2
x264_deblock_h_chroma_mmxext
x264_deblock_h_chroma_sse2
x264_deblock_h_luma_intra_mmxext
x264_deblock_h_luma_intra_sse2
x264_deblock_h_luma_mmxext
x264_deblock_h_luma_sse2
x264_deblock_init
x264_deblock_strength_mmxext
x264_deblock_strength_sse2
x264_deblock_strength_ssse3
x264_deblock_v8_luma_intra_mmxext
x264_deblock_v8_luma_mmxext
x264_deblock_v_chroma_intra_mmxext
x264_deblock_v_chroma_intra_sse2
x264_deblock_v_chroma_mmxext
x264_deblock_v_chroma_sse2
x264_deblock_v_luma_intra_sse2
x264_deblock_v_luma_sse2
x264_decimate_score15_mmxext
x264_decimate_score15_mmxext_slowctz
x264_decimate_score15_sse2
x264_decimate_score15_sse2_slowctz
x264_decimate_score15_ssse3
x264_decimate_score15_ssse3_slowctz
x264_decimate_score16_mmxext
x264_decimate_score16_mmxext_slowctz
x264_decimate_score16_sse2
x264_decimate_score16_sse2_slowctz
x264_decimate_score16_ssse3
x264_decimate_score16_ssse3_slowctz
x264_decimate_score64_mmxext
x264_decimate_score64_sse2
x264_decimate_score64_ssse3
x264_decimate_table4
x264_decimate_table8
x264_denoise_dct_mmx
x264_denoise_dct_sse2
x264_denoise_dct_ssse3
x264_dequant_4x4_flat16_mmx
x264_dequant_4x4_flat16_sse2
x264_dequant_4x4_mmx
x264_dequant_4x4_sse2
x264_dequant_4x4dc_mmxext
x264_dequant_4x4dc_sse2
x264_dequant_8x8_flat16_mmx
x264_dequant_8x8_flat16_sse2
x264_dequant_8x8_mmx
x264_dequant_8x8_sse2
x264_encoder_close
x264_encoder_delayed_frames
x264_encoder_encode
x264_encoder_headers
x264_encoder_intra_refresh
x264_encoder_invalidate_reference
x264_encoder_maximum_delayed_frames
x264_encoder_open_112
x264_encoder_parameters
x264_encoder_reconfig
x264_exp2_lut
x264_filler_write
x264_frame_cond_broadcast
x264_frame_cond_wait
x264_frame_copy_picture
x264_frame_deblock_row
x264_frame_delete
x264_frame_delete_list
x264_frame_expand_border
x264_frame_expand_border_filtered
x264_frame_expand_border_lowres
x264_frame_expand_border_mod16
x264_frame_filter
x264_frame_init_lowres
x264_frame_init_lowres_core_cache32_mmxext
x264_frame_init_lowres_core_mmxext
x264_frame_init_lowres_core_sse2
x264_frame_init_lowres_core_ssse3
x264_frame_new
x264_frame_pop
x264_frame_pop_blank_unused
x264_frame_pop_unused
x264_frame_push
x264_frame_push_blank_unused
x264_frame_push_unused
x264_frame_shift
x264_frame_sort
x264_frame_unshift
x264_free
x264_hadamard_ac_2x2max_mmxext
x264_hadamard_ac_4x4_mmxext
x264_hadamard_ac_8x8_mmxext
x264_hadamard_ac_8x8_sse2
x264_hadamard_ac_8x8_sse4
x264_hadamard_ac_8x8_ssse3
x264_hadamard_load
x264_hpel_filter_c_mmxext
x264_hpel_filter_c_sse2
x264_hpel_filter_c_sse2_misalign
x264_hpel_filter_c_ssse3
x264_hpel_filter_h_mmxext
x264_hpel_filter_h_sse2
x264_hpel_filter_h_ssse3
x264_hpel_filter_v_mmxext
x264_hpel_filter_v_sse2
x264_hpel_filter_v_ssse3
x264_hrd_fullness
x264_hsub_mul
x264_idct4x4dc_mmx
x264_init_vlc_tables
x264_integral_init4h_sse4
x264_integral_init4v_mmx
x264_integral_init4v_sse2
x264_integral_init4v_ssse3
x264_integral_init8h_sse4
x264_integral_init8v_mmx
x264_integral_init8v_sse2
x264_intra_sa8d_x3_8x8
x264_intra_sa8d_x3_8x8_core_mmxext
x264_intra_sa8d_x3_8x8_mmxext
x264_intra_sad_x3_16x16
x264_intra_sad_x3_16x16_mmxext
x264_intra_sad_x3_16x16_sse2
x264_intra_sad_x3_16x16_ssse3
x264_intra_sad_x3_4x4
x264_intra_sad_x3_4x4_mmxext
x264_intra_sad_x3_4x4_sse4
x264_intra_sad_x3_8x8
x264_intra_sad_x3_8x8_mmxext
x264_intra_sad_x3_8x8_ssse3
x264_intra_sad_x3_8x8c
x264_intra_sad_x3_8x8c_mmxext
x264_intra_sad_x3_8x8c_ssse3
x264_intra_satd_x3_16x16
x264_intra_satd_x3_16x16_mmxext
x264_intra_satd_x3_16x16_ssse3
x264_intra_satd_x3_4x4
x264_intra_satd_x3_4x4_mmxext
x264_intra_satd_x3_4x4_ssse3
x264_intra_satd_x3_8x8c
x264_intra_satd_x3_8x8c_mmxext
x264_intra_satd_x3_8x8c_ssse3
x264_iter_kludge
x264_lambda2_tab
x264_lambda_tab
x264_level_token
x264_levels
x264_load_deinterleave_8x8x2_fdec_mmx
x264_load_deinterleave_8x8x2_fdec_sse2
x264_load_deinterleave_8x8x2_fdec_ssse3
x264_load_deinterleave_8x8x2_fenc_mmx
x264_load_deinterleave_8x8x2_fenc_sse2
x264_load_deinterleave_8x8x2_fenc_ssse3
x264_log
x264_log2_lut
x264_log2_lz_lut
x264_lookahead_delete
x264_lookahead_get_frames
x264_lookahead_init
x264_lookahead_is_empty
x264_lookahead_put_frame
x264_macroblock_analyse
x264_macroblock_bipred_init
x264_macroblock_cache_allocate
x264_macroblock_cache_free
x264_macroblock_cache_load
x264_macroblock_cache_load_deblock
x264_macroblock_cache_load_neighbours_deblock
x264_macroblock_cache_mv_1_1
x264_macroblock_cache_mv_1_2
x264_macroblock_cache_mv_2_1
x264_macroblock_cache_mv_2_2
x264_macroblock_cache_mv_2_4
x264_macroblock_cache_mv_4_2
x264_macroblock_cache_mv_4_4
x264_macroblock_cache_mvd_1_1
x264_macroblock_cache_mvd_1_2
x264_macroblock_cache_mvd_2_1
x264_macroblock_cache_mvd_2_2
x264_macroblock_cache_mvd_2_4
x264_macroblock_cache_mvd_4_2
x264_macroblock_cache_mvd_4_4
x264_macroblock_cache_ref_1_1
x264_macroblock_cache_ref_1_2
x264_macroblock_cache_ref_2_1
x264_macroblock_cache_ref_2_2
x264_macroblock_cache_ref_2_4
x264_macroblock_cache_ref_4_2
x264_macroblock_cache_ref_4_4
x264_macroblock_cache_save
x264_macroblock_deblock
x264_macroblock_encode
x264_macroblock_encode_p4x4
x264_macroblock_encode_p8x8
x264_macroblock_probe_skip
x264_macroblock_slice_init
x264_macroblock_thread_allocate
x264_macroblock_thread_free
x264_macroblock_thread_init
x264_macroblock_tree_read
x264_macroblock_write_cabac
x264_macroblock_write_cavlc
x264_malloc
x264_mb_encode_8x8_chroma
x264_mb_encode_i4x4
x264_mb_encode_i8x8
x264_mb_mc
x264_mb_mc_8x8
x264_mb_predict_mv
x264_mb_predict_mv_16x16
x264_mb_predict_mv_direct16x16
x264_mb_predict_mv_pskip
x264_mb_predict_mv_ref16x16
x264_mbtree_propagate_cost_sse2
x264_mc_chroma_mmxext
x264_mc_chroma_sse2
x264_mc_chroma_sse2_misalign
x264_mc_chroma_ssse3
x264_mc_chroma_ssse3_cache64
x264_mc_copy_w16_aligned_sse2
x264_mc_copy_w16_mmx
x264_mc_copy_w16_sse2
x264_mc_copy_w16_sse3
x264_mc_copy_w4_mmx
x264_mc_copy_w8_mmx
x264_mc_init
x264_mc_init_mmx
x264_mc_offsetadd_w12_mmxext
x264_mc_offsetadd_w12_sse2
x264_mc_offsetadd_w16_mmxext
x264_mc_offsetadd_w16_sse2
x264_mc_offsetadd_w20_mmxext
x264_mc_offsetadd_w20_sse2
x264_mc_offsetadd_w4_mmxext
x264_mc_offsetadd_w8_mmxext
x264_mc_offsetsub_w12_mmxext
x264_mc_offsetsub_w12_sse2
x264_mc_offsetsub_w16_mmxext
x264_mc_offsetsub_w16_sse2
x264_mc_offsetsub_w20_mmxext
x264_mc_offsetsub_w20_sse2
x264_mc_offsetsub_w4_mmxext
x264_mc_offsetsub_w8_mmxext
x264_mc_weight_w12_mmxext
x264_mc_weight_w16_mmxext
x264_mc_weight_w16_sse2
x264_mc_weight_w16_ssse3
x264_mc_weight_w20_mmxext
x264_mc_weight_w20_sse2
x264_mc_weight_w20_ssse3
x264_mc_weight_w4_mmxext
x264_mc_weight_w4_ssse3
x264_mc_weight_w8_mmxext
x264_mc_weight_w8_sse2
x264_mc_weight_w8_ssse3
x264_mdate
x264_me_refine_bidir_rd
x264_me_refine_bidir_satd
x264_me_refine_qpel
x264_me_refine_qpel_rd
x264_me_refine_qpel_refdupe
x264_me_search_ref
x264_memcpy_aligned_mmx
x264_memcpy_aligned_sse2
x264_memzero_aligned_mmx
x264_memzero_aligned_sse2
x264_nal_encode
x264_nal_escape_mmxext
x264_nal_escape_sse2
x264_noise_reduction_update
x264_param2string
x264_param_apply_fastfirstpass
x264_param_apply_profile
x264_param_default
x264_param_default_preset
x264_param_parse
x264_pb_0
x264_pb_01
x264_pb_1
x264_pb_3
x264_pb_a1
x264_pb_reverse
x264_pb_shuf8x8c
x264_pd_1
x264_pd_128
x264_pd_32
x264_picture_alloc
x264_picture_clean
x264_picture_init
x264_pixel_ads1_mmxext
x264_pixel_ads1_sse2
x264_pixel_ads1_ssse3
x264_pixel_ads2_mmxext
x264_pixel_ads2_sse2
x264_pixel_ads2_ssse3
x264_pixel_ads4_mmxext
x264_pixel_ads4_sse2
x264_pixel_ads4_ssse3
x264_pixel_ads_mvs
x264_pixel_avg2_w12_cache32_mmxext
x264_pixel_avg2_w12_cache64_mmxext
x264_pixel_avg2_w12_mmxext
x264_pixel_avg2_w16_cache32_mmxext
x264_pixel_avg2_w16_cache64_mmxext
x264_pixel_avg2_w16_cache64_sse2
x264_pixel_avg2_w16_cache64_ssse3
x264_pixel_avg2_w16_mmxext
x264_pixel_avg2_w16_sse2
x264_pixel_avg2_w20_cache32_mmxext
x264_pixel_avg2_w20_cache64_mmxext
x264_pixel_avg2_w20_cache64_sse2
x264_pixel_avg2_w20_mmxext
x264_pixel_avg2_w20_sse2
x264_pixel_avg2_w20_sse2_misalign
x264_pixel_avg2_w4_mmxext
x264_pixel_avg2_w8_cache32_mmxext
x264_pixel_avg2_w8_cache64_mmxext
x264_pixel_avg2_w8_mmxext
x264_pixel_avg_16x16_mmxext
x264_pixel_avg_16x16_sse2
x264_pixel_avg_16x16_ssse3
x264_pixel_avg_16x8_mmxext
x264_pixel_avg_16x8_sse2
x264_pixel_avg_16x8_ssse3
x264_pixel_avg_4x2_mmxext
x264_pixel_avg_4x2_ssse3
x264_pixel_avg_4x4_mmxext
x264_pixel_avg_4x4_ssse3
x264_pixel_avg_4x8_mmxext
x264_pixel_avg_4x8_ssse3
x264_pixel_avg_8x16_mmxext
x264_pixel_avg_8x16_sse2
x264_pixel_avg_8x16_ssse3
x264_pixel_avg_8x4_mmxext
x264_pixel_avg_8x4_sse2
x264_pixel_avg_8x4_ssse3
x264_pixel_avg_8x8_mmxext
x264_pixel_avg_8x8_sse2
x264_pixel_avg_8x8_ssse3
x264_pixel_avg_w16_mmxext
x264_pixel_avg_w16_sse2
x264_pixel_avg_w4_mmxext
x264_pixel_avg_w8_mmxext
x264_pixel_avg_weight_w16_mmxext
x264_pixel_avg_weight_w16_sse2
x264_pixel_avg_weight_w16_ssse3
x264_pixel_avg_weight_w4_mmxext
x264_pixel_avg_weight_w4_ssse3
x264_pixel_avg_weight_w8_mmxext
x264_pixel_avg_weight_w8_sse2
x264_pixel_avg_weight_w8_ssse3
x264_pixel_hadamard_ac_16x16_mmxext
x264_pixel_hadamard_ac_16x16_sse2
x264_pixel_hadamard_ac_16x16_sse4
x264_pixel_hadamard_ac_16x16_ssse3
x264_pixel_hadamard_ac_16x8_mmxext
x264_pixel_hadamard_ac_16x8_sse2
x264_pixel_hadamard_ac_16x8_sse4
x264_pixel_hadamard_ac_16x8_ssse3
x264_pixel_hadamard_ac_8x16_mmxext
x264_pixel_hadamard_ac_8x16_sse2
x264_pixel_hadamard_ac_8x16_sse4
x264_pixel_hadamard_ac_8x16_ssse3
x264_pixel_hadamard_ac_8x8_mmxext
x264_pixel_hadamard_ac_8x8_sse2
x264_pixel_hadamard_ac_8x8_sse4
x264_pixel_hadamard_ac_8x8_ssse3
x264_pixel_init
x264_pixel_sa8d_16x16_mmxext
x264_pixel_sa8d_16x16_sse2
x264_pixel_sa8d_16x16_sse4
x264_pixel_sa8d_16x16_ssse3
x264_pixel_sa8d_8x8_internal_mmxext
x264_pixel_sa8d_8x8_internal_sse2
x264_pixel_sa8d_8x8_internal_sse4
x264_pixel_sa8d_8x8_internal_ssse3
x264_pixel_sa8d_8x8_mmxext
x264_pixel_sa8d_8x8_sse2
x264_pixel_sa8d_8x8_sse4
x264_pixel_sa8d_8x8_ssse3
x264_pixel_sad_16x16_cache32_mmxext
x264_pixel_sad_16x16_cache64_mmxext
x264_pixel_sad_16x16_cache64_sse2
x264_pixel_sad_16x16_cache64_ssse3
x264_pixel_sad_16x16_mmxext
x264_pixel_sad_16x16_sse2
x264_pixel_sad_16x16_sse2_aligned
x264_pixel_sad_16x16_sse3
x264_pixel_sad_16x8_cache32_mmxext
x264_pixel_sad_16x8_cache64_mmxext
x264_pixel_sad_16x8_cache64_sse2
x264_pixel_sad_16x8_cache64_ssse3
x264_pixel_sad_16x8_mmxext
x264_pixel_sad_16x8_sse2
x264_pixel_sad_16x8_sse2_aligned
x264_pixel_sad_16x8_sse3
x264_pixel_sad_4x4_mmxext
x264_pixel_sad_4x8_mmxext
x264_pixel_sad_8x16_cache32_mmxext
x264_pixel_sad_8x16_cache64_mmxext
x264_pixel_sad_8x16_mmxext
x264_pixel_sad_8x16_sse2
x264_pixel_sad_8x4_cache32_mmxext
x264_pixel_sad_8x4_cache64_mmxext
x264_pixel_sad_8x4_mmxext
x264_pixel_sad_8x8_cache32_mmxext
x264_pixel_sad_8x8_cache64_mmxext
x264_pixel_sad_8x8_mmxext
x264_pixel_sad_x3_16x16_cache32_mmxext
x264_pixel_sad_x3_16x16_cache64_mmxext
x264_pixel_sad_x3_16x16_cache64_sse2
x264_pixel_sad_x3_16x16_cache64_ssse3
x264_pixel_sad_x3_16x16_mmxext
x264_pixel_sad_x3_16x16_sse2
x264_pixel_sad_x3_16x16_sse2_misalign
x264_pixel_sad_x3_16x16_sse3
x264_pixel_sad_x3_16x8_cache32_mmxext

Sections

.text
Size: 815KB - Virtual size: 814KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
swscale-0.dll
.dll windows:4 windows x86 arch:x86

45704a1cb74cdac4fd049d848fd3ca6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

avutil-50

av_free
av_freep
av_get_bits_per_pixel
av_log
av_malloc
av_mallocz
av_opt_set_defaults
av_pix_fmt_descriptors

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_errno
_iob
_winmajor
abort
calloc
ceil
cos
exp
fflush
free
fwrite
malloc
memcpy
memset
pow
sin
vfprintf

Exports

Exports

ff_M24A
ff_M24B
ff_M24C
ff_bgr2UCoeff
ff_bgr2UVOffset
ff_bgr2VCoeff
ff_bgr2YCoeff
ff_bgr2YOffset
ff_dither4
ff_dither8
ff_getSwsFunc
ff_get_unscaled_swscale
ff_hardcodedcpuflags
ff_w1111
ff_yuv2rgb_c_init_tables
ff_yuv2rgb_coeffs
ff_yuv2rgb_get_func_ptr
ff_yuv2rgb_init_mmx
sws_addVec
sws_allocVec
sws_alloc_context
sws_cloneVec
sws_context_class
sws_convVec
sws_convertPalette8ToPacked24
sws_convertPalette8ToPacked32
sws_format_name
sws_freeContext
sws_freeFilter
sws_freeVec
sws_getCachedContext
sws_getCoefficients
sws_getColorspaceDetails
sws_getConstVec
sws_getContext
sws_getDefaultFilter
sws_getGaussianVec
sws_getIdentityVec
sws_init_context
sws_isSupportedInput
sws_isSupportedOutput
sws_normalizeVec
sws_printVec
sws_printVec2
sws_rgb2rgb_init
sws_scale
sws_scaleVec
sws_scale_ordered
sws_setColorspaceDetails
sws_shiftVec
sws_subVec
swscale_configuration
swscale_license
swscale_version

Sections

.text
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 372B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
uninstall.exe.nsis

Sharing

General

Malware Config

Signatures

Files

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

16:d0:fc:cf:6d:eb:20:23:4a:c5:9f:fd:f8:83:03:69Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

Signer

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 180KB

UPX1 Size: 19KB - Virtual size: 20KB

.rsrc Size: 15KB - Virtual size: 16KB

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

da0bd77fb7105f3171e1f685963d5ffd

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

16:d0:fc:cf:6d:eb:20:23:4a:c5:9f:fd:f8:83:03:69Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 16B

b4efcce6d198501c9b0f0b639605affa

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

16:d0:fc:cf:6d:eb:20:23:4a:c5:9f:fd:f8:83:03:69Certificate

Extended Key Usages

Key Usages

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

16:d0:fc:cf:6d:eb:20:23:4a:c5:9f:fd:f8:83:03:69
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

UPX0
Size: - Virtual size: 180KB

UPX1
Size: 19KB - Virtual size: 20KB

.rsrc
Size: 15KB - Virtual size: 16KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

16:d0:fc:cf:6d:eb:20:23:4a:c5:9f:fd:f8:83:03:69
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 16B

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

16:d0:fc:cf:6d:eb:20:23:4a:c5:9f:fd:f8:83:03:69
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

.text
Size: 86KB - Virtual size: 86KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 3KB - Virtual size: 2KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

16:d0:fc:cf:6d:eb:20:23:4a:c5:9f:fd:f8:83:03:69
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

.text
Size: - Virtual size: 91KB

.rdata
Size: - Virtual size: 23KB

.data
Size: - Virtual size: 13KB

.fx264
Size: 512B - Virtual size: 4B

.rsrc
Size: 3KB - Virtual size: 3KB

.vmp0
Size: - Virtual size: 8KB

.vmp1
Size: - Virtual size: 251KB

.tls
Size: 512B - Virtual size: 24B

.vmp2
Size: 338KB - Virtual size: 337KB

.reloc
Size: 512B - Virtual size: 200B