2b9fee464e834c66ced0c08a19f0beb0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2b9fee464e834c66ced0c08a19f0beb0_JaffaCakes118
Size

171KB
MD5

2b9fee464e834c66ced0c08a19f0beb0
SHA1

a412901918058614f13ad580e3ad0d4103e1fca4
SHA256

56501e9e8bc01e2902773e9d933d2e79b72123b39bb28b4b17a3c96380663caa
SHA512

d07a690e7b682f378da0922845aefb6e3d90c364eedf5fea26255c37d4b4c0e117630f43f2ce52f14a43766582cfae0000d628ed5b017fe0eac99ffb4f71ab11
SSDEEP

3072:DQIURTXJ+MRyW3s+fTBb9bHeziROgVY/PHxbWrTck7N3EqcSJa4cEjH9pw:Ds9Rlssp9b+evVUeJZ3EV6nw

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2b9fee464e834c66ced0c08a19f0beb0_JaffaCakes118
unpack001/$R0/vdtlognf.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

2b9fee464e834c66ced0c08a19f0beb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$R0/vdtlognf.dll
.dll regsvr32 windows:1 windows x86 arch:x86

ac24d2585411ea8a1d33653136dd11ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

UnmapViewOfFile
TlsFree
VirtualQuery
VirtualAlloc
UnlockFile
TlsGetValue
WriteFile
WaitForSingleObject
lstrcatA
VirtualFree
FindClose
WritePrivateProfileStringA
GetTimeZoneInformation
TlsSetValue
lstrcpyA
WriteProfileStringA
WideCharToMultiByte
CloseHandle
CreateFileA
CreateFileMappingA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DeleteFileA
DuplicateHandle
EnterCriticalSection
ExitProcess
FatalAppExitA
FileTimeToDosDateTime
UnhandledExceptionFilter
lstrlenA
GetSystemDirectoryA
GetStartupInfoA
FindNextFileA
FindResourceA
FlushFileBuffers
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringA
GetProcAddress
GetProfileStringA
FileTimeToLocalFileTime
FindFirstFileA
GetShortPathNameA
GetTickCount
GetTempPathA
FileTimeToSystemTime
GetStdHandle
GetVersion
GetVersionExA
GetVolumeInformationA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFree
GlobalHandle
GlobalLock
GlobalMemoryStatus
GlobalUnlock
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsDBCSLeadByte
LeaveCriticalSection
LoadLibraryA
LoadResource
LockFile
LockResource
MapViewOfFileEx
MoveFileA
MultiByteToWideChar
RaiseException
ReadFile
ReleaseMutex
ReleaseSemaphore
RtlUnwind
SearchPathA
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEndOfFile
SetErrorMode
SetFilePointer
SetHandleCount
Sleep
TlsAlloc

advapi32

RegOpenKeyExA
InitializeSecurityDescriptor
RegOpenKeyA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
SetSecurityDescriptorDacl
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegQueryValueExA

ole32

StringFromGUID2
CoCreateInstance
OleInitialize

user32

OemToCharA
MessageBoxA
LoadStringA
CharUpperA
CharToOemBuffA
CharToOemA
OemToCharBuffA
EnumThreadWindows

mpr

WNetCloseEnum
WNetOpenEnumA
WNetGetUserA
WNetGetConnectionA
WNetEnumResourceA

oleaut32

SysFreeString
SysAllocStringLen
SysAllocStringByteLen

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
ADDELT
CfgComposeRec
CfgGetField
CfgGetOLEDBParseDN
CliGetDriver
CloseCallBack
CreateDbObj
CreateDrvObj
CreateUniqFldNames
CreateVtObj
CreateXltRecCurs
DLLEXITFUNCTION2
DLLINITFUNCTION
DbiAcqPersistTableLock
DbiAcqTableLock
DbiActivateFilter
DbiAddAlias
DbiAddDriver
DbiAddFamilyMember
DbiAddFilter
DbiAddIndex
DbiAddPassword
DbiAddRepository
DbiAnsiToNative
DbiAppendRecord
DbiApplyDelayedUpdates
DbiBatchMove
DbiBatchMoveQuery
DbiBcdFromFloat
DbiBcdToFloat
DbiBeginBatch
DbiBeginConstraintLayer
DbiBeginDelayedUpdates
DbiBeginLinkMode
DbiBeginLrNavMode
DbiBeginTran
DbiBeginXlateMode
DbiCfgAddRecord
DbiCfgBuildPath
DbiCfgDropRecord
DbiCfgGetHelp
DbiCfgGetNextNode
DbiCfgGetRecord
DbiCfgImportToRegistry
DbiCfgInstallMerge
DbiCfgMerge
DbiCfgModifyRecord
DbiCfgPosition
DbiCfgSave
DbiCfgTranslate
DbiChangeDefXltFn
DbiCheckRefresh
DbiCheckSQLExpression
DbiClearStats
DbiCloneCursor
DbiCloseConfigFile
DbiCloseCursor
DbiCloseDatabase
DbiCloseFieldXlt
DbiCloseFileHandle
DbiCloseIndex
DbiCloseSession
DbiCompareBookMarks
DbiCompareKeys
DbiComposeCursor
DbiCopyTable
DbiCreateInMemTable
DbiCreateTable
DbiCreateTempTable
DbiDRAdd
DbiDRAddAttr
DbiDRClose
DbiDRCreate
DbiDRCreateEnumAttrDomain
DbiDRCreateObjectType
DbiDRCreateRelationType
DbiDRDelete
DbiDRDeleteEnumAttrDomain
DbiDRDeleteObjectType
DbiDRDeleteRelationType
DbiDRDrop
DbiDRDropAttr
DbiDRExportToFile
DbiDRGetAttrDescs
DbiDRGetDesc
DbiDRGetEnumAttrDomain
DbiDRGetObjID
DbiDRGetObjTypeInfo
DbiDRGetRelTypeInfo
DbiDRGetRelatedObject
DbiDRImportFromFile
DbiDRLoadDBObject
DbiDRModifyEnumAttrDomain
DbiDROpen
DbiDROpenAttrTypeList
DbiDROpenObjSet
DbiDROpenObjectTypeList
DbiDROpenRelSet
DbiDROpenRelTypeList
DbiDRSetToObjID
DbiDRSetToObjName
DbiDatabaseFlush
DbiDateDecode
DbiDateEncode
DbiDeComposeCursor
DbiDeactivateFilter
DbiDebugLayerOptions
DbiDeleteAlias
DbiDeleteDriver
DbiDeleteIndex
DbiDeleteRecord
DbiDeleteRepository
DbiDeleteTable
DbiDeregisterCursor
DbiDoRestructure
DbiDoSoftRestr
DbiDropFamilyMember
DbiDropFilter
DbiDropPassword
DbiDrvXlateFld
DbiEmptyTable
DbiEndBatch
DbiEndConstraintLayer
DbiEndDelayedUpdates
DbiEndLinkMode
DbiEndLrNavMode
DbiEndTran
DbiEndXlateMode
DbiEnlistMtsTransaction
DbiEnterRefresh
DbiExit
DbiExitRefresh
DbiExtractKey
DbiFlushFileHandleCache
DbiForceRecordReread
DbiForceReread
DbiFormFullName
DbiFreeBlob
DbiFreeSQLRequest
DbiGenSQLStatement
DbiGetBestRowIdentifier
DbiGetBlob
DbiGetBlobHeading
DbiGetBlobSize
DbiGetBookMark
DbiGetCallBack
DbiGetClientInfo
DbiGetCurrSession
DbiGetCurrXltFn
DbiGetCursorForTable
DbiGetCursorProps
DbiGetDatabaseDesc
DbiGetDatabaseParams
DbiGetDateFormat
DbiGetDefaultRepository
DbiGetDirectory
DbiGetDriverDesc
DbiGetDriverParams
DbiGetErrorContext
DbiGetErrorEntry
DbiGetErrorInfo
DbiGetErrorString
DbiGetExactRecordCount
DbiGetExtFldDesc
DbiGetField
DbiGetFieldDescs
DbiGetFieldTypeDesc
DbiGetFilterInfo
DbiGetIndexDesc
DbiGetIndexDescs
DbiGetIndexForField
DbiGetIndexSeqNo
DbiGetIndexTypeDesc
DbiGetLdName
DbiGetLdNameFromDb
DbiGetLdObj
DbiGetLinkStatus
DbiGetNetUserName
DbiGetNextRecord
DbiGetNumberFormat
DbiGetObjFromName
DbiGetObjFromObj
DbiGetObjectHandles
DbiGetPriorRecord
DbiGetProp
DbiGetRecord
DbiGetRecordCount
DbiGetRecordForKey
DbiGetRefreshDistance
DbiGetRelativeRecord
DbiGetRelativeRecordCnt
DbiGetRepositoryInfo
DbiGetRintDesc
DbiGetSQLRequest
DbiGetSeqNo
DbiGetSesInfo
DbiGetSysConfig
DbiGetSysInfo
DbiGetSysStats
DbiGetSysVersion
DbiGetTableClass
DbiGetTableOpenCount
DbiGetTableTypeDesc
DbiGetTimeFormat
DbiGetTranInfo
DbiGetVchkDesc
DbiHardInsertRecord
DbiImportODBC
DbiInitFn
DbiInitRecord
DbiInsertRecord
DbiIsLDID19As13
DbiIsLDID19As19
DbiIsLDIDUSAsLocal
DbiIsRecordLocked
DbiIsTableLocked
DbiIsTableShared
DbiJoinTables
DbiLinkDetail
DbiLinkDetailToExp
DbiLoadDriver
DbiMakePermanent
DbiMapRecStruct
DbiModifyRecord
DbiNativeToAnsi
DbiOpenBlob
DbiOpenCfgInfoList
DbiOpenConfigFile
DbiOpenDatabase
DbiOpenDatabaseList
DbiOpenDriverList
DbiOpenFamilyList
DbiOpenFieldList
DbiOpenFieldTypesList
DbiOpenFieldXlt
DbiOpenFileList
DbiOpenFunctionArgList
DbiOpenFunctionList
DbiOpenIndex
DbiOpenIndexList
DbiOpenIndexTypesList
DbiOpenLdList
DbiOpenLockList
DbiOpenNestedTable
DbiOpenRef
DbiOpenRepositoryList
DbiOpenRintList
DbiOpenSPList
DbiOpenSPParamList
DbiOpenSecurityList
DbiOpenSessionRepository
DbiOpenTable
DbiOpenTableList
DbiOpenTableTypesList
DbiOpenUserList
DbiOpenVchkList
DbiPackTable
DbiPrepareDelayedUpdates
DbiProcessSql
DbiPutBlob
DbiPutField
DbiQAlloc
DbiQExec
DbiQExecDirect
DbiQExecProcDirect
DbiQFree
DbiQGetBaseDescs
DbiQInstantiateAnswer
DbiQLowBuild
DbiQLowFieldExp
DbiQLowFieldName
DbiQLowGetName
DbiQLowGetPAL
DbiQLowGetPALLen
DbiQLowGetProps
DbiQLowIsExample
DbiQLowParse
DbiQLowPrepare
DbiQLowQA
DbiQLowSetName
DbiQLowSetProps
DbiQLowStart
DbiQLowTableInfo
DbiQLowTablesCount
DbiQPrepare
DbiQPrepareExt
DbiQPrepareProc
DbiQSetParams
DbiQSetProcParams
DbiQryExec
DbiQryExecDirect
DbiQryFormatAnswer
DbiQryFree
DbiQryGetAnsFormat
DbiQryGetCursorProps
DbiQryGetFieldDescs
DbiQryGetLogType
DbiQryInstantiateAnswer
DbiQryOpen
DbiQryPrepareCmd
DbiQryRegisterCallBack
DbiQrySqlGetStrLen
DbiQrySqlGetString
DbiReadBlock
DbiRecordFlushRef
DbiRegenIndex
DbiRegenIndexes
DbiRegister
DbiRegisterCallBack
DbiRegisterCursor
DbiRelPersistTableLock
DbiRelRecordLock
DbiRelTableLock
DbiReleaseMem
DbiRenameTable
DbiResetDetailLinks
DbiResetRange
DbiSQLTextToCanEx
DbiSaveChanges
DbiSchemaCacheFlush
DbiSetCurrSession
DbiSetDateFormat
DbiSetDefaultRepository
DbiSetDirectory
DbiSetFieldMap
DbiSetFieldMap2
DbiSetFilterProps
DbiSetLDID19As13
DbiSetLDID19As19
DbiSetLDIDUSAsLocal
DbiSetLockRetry
DbiSetNumberFormat
DbiSetPrivateDir
DbiSetProp
DbiSetRange
DbiSetRefreshRange
DbiSetStats
DbiSetTimeFormat
DbiSetToBegin
DbiSetToBookMark
DbiSetToCursor
DbiSetToEnd
DbiSetToKey
DbiSetToRecordNo
DbiSetToSeqNo
DbiSetupExprObj
DbiSortTable
DbiSortTable2
DbiStartSession
DbiSwitchToIndex
DbiTimeDecode
DbiTimeEncode
DbiTimeStampDecode
DbiTimeStampEncode
DbiTranslateField
DbiTranslateRecordStructure
DbiTruncateBlob
DbiUCloseSecurityFile
DbiUCreateSecurityFile
DbiUDeleteSecurityUser
DbiUGetLoginSecurity
DbiUGetSecurityUserInfo
DbiUGetTablePrivileges
DbiUJoinIndexes
DbiUOpenSecurityFile
DbiUReadTableHdr
DbiURegenBlobFile
DbiUSetLoginSecurity
DbiUSetSecurityUserInfo
DbiUSetTablePrivileges
DbiUValidateSecurityUser
DbiUWriteTableHdr
DbiUndeleteRecord
DbiUnlinkDetail
DbiUseIdleTime
DbiValidateName
DbiValidateProp
DbiValidateRecordStructure
DbiVerifyField
DbiWriteBlock
DllEntryPoint
DllRegisterServer
DllUnregisterServer
ExecCallBack
ExpGeneratePostFix
ExprGenPostFix
FAMILY
FreeVtObj
GetCallBack
GetExtFromTblType
GetLocalCp
GetSpc1
GetSpc2
GetTblTypeFromExt
GetTblTypeFromTblName
GetWorldFlags
GetszLDdb
GetszLDpx
ImltCreateTable
ImltCreateTable2
ImltExitSubSys
ImltInitSubSys
JapanStrCmp
JapanStrnCmp
JapanStrnCmpi
LBlobOpen
LISTLENGTH
LrNavCompSetup
LsDateDecode
LsDateEncode
LsGetDate
LsGetTime
LsGetTimeStampEncode
LsTimeDecode
LsTimeEncode
LsTimeStampDecode
LsTimeStampEncode
LsValidDate
MEMB
NCONC
NCONS
NULLP
OCCloseObjs
OCFindObj
OCRegisterObj
OCUnRegisterObj
OpenCallBack
OsAssert
OsChSize
OsClearError
OsClose
OsCloseForInstance
OsControlError
OsCopy
OsCopyShare
OsCreate
OsCreate2
OsCreateRWObj
OsCtxBegin
OsCtxClrStk
OsCtxCount
OsCtxEnd
OsCtxExit
OsCtxGetCur
OsCtxGetElem
OsCtxGetError
OsCtxGetSymStr
OsCtxInit
OsCtxPop
OsCtxPush
OsCtxSetFatal
OsCurrFile
OsDBGSaveError
OsDeleteRWObj
OsDirExists
OsDirFirst
OsDirNext
OsFileExists
OsFileExistsSearch
OsFileLength
OsFlushFileSize
OsFlushLocalBuf
OsFreeDll
OsFreeSharedSz
OsFreeSz
OsGetCodePage
OsGetCurDirEx
OsGetCurDrive
OsGetDate
OsGetDllFileName
OsGetFileTime
OsGetM
OsGetNetInMemFlag
OsGetOSType
OsGetPrivateProfileString
OsGetProcAddressByName
OsGetProcAddressByNum
OsGetProcessId
OsGetProfileString
OsGetSharedPtr
OsGetSystemTicks
OsGetTempDir
OsGetTempName
OsGetTime
OsIs386
OsIs386Enh
OsIsAlpha
OsIsDigit
OsIsFileLocal
OsIsFileOnCdRom
OsIsFileReadOnly
OsIsLocalDrive
OsIsLocalDrive_0
OsJLdCBtoM
OsJLdCMtoB
OsJLdCStrLen
OsJLdFBtoM
OsJLdFGetMinMax

Sections

CODE
Size: 429KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

TLSCBA
Size: 512B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 32KB

.rsrc Size: 2KB - Virtual size: 2KB

ac24d2585411ea8a1d33653136dd11ed

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

user32

mpr

oleaut32

Exports

Exports

Sections

CODE Size: 429KB - Virtual size: 432KB

DATA Size: 72KB - Virtual size: 76KB

DATA Size: 512B - Virtual size: 4KB

TLSCBA Size: 512B - Virtual size: 24KB

.idata Size: 4KB - Virtual size: 4KB

.edata Size: 51KB - Virtual size: 52KB

.reloc Size: 15KB - Virtual size: 16KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 32KB

.rsrc
Size: 2KB - Virtual size: 2KB

CODE
Size: 429KB - Virtual size: 432KB

DATA
Size: 72KB - Virtual size: 76KB

DATA
Size: 512B - Virtual size: 4KB

TLSCBA
Size: 512B - Virtual size: 24KB

.idata
Size: 4KB - Virtual size: 4KB

.edata
Size: 51KB - Virtual size: 52KB

.reloc
Size: 15KB - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 4KB