dialog
initDialog
show
Overview
overview
4Static
static
3484ecd6f04...18.exe
windows7-x64
1484ecd6f04...18.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...mm.dll
windows7-x64
1$PLUGINSDI...mm.dll
windows10-2004-x64
1$PLUGINSDI...se.rtf
windows7-x64
4$PLUGINSDI...se.rtf
windows10-2004-x64
1$PLUGINSDI...NA.rtf
windows7-x64
4$PLUGINSDI...NA.rtf
windows10-2004-x64
1$_18_/Cust...ge.dll
windows7-x64
3$_18_/Cust...ge.dll
windows10-2004-x64
3$_18_/DNAAdmin.exe
windows7-x64
1$_18_/DNAAdmin.exe
windows10-2004-x64
1$_18_/DNAService.exe
windows7-x64
1$_18_/DNAService.exe
windows10-2004-x64
1$_18_/czlogclient.exe
windows7-x64
1$_18_/czlogclient.exe
windows10-2004-x64
1$_18_/dgs.dll
windows7-x64
1$_18_/dgs.dll
windows10-2004-x64
3$_18_/gicconn.dll
windows7-x64
1$_18_/gicconn.dll
windows10-2004-x64
1$_18_/gpctl.dll
windows7-x64
3$_18_/gpctl.dll
windows10-2004-x64
3$_18_/license.rtf
windows7-x64
4$_18_/license.rtf
windows10-2004-x64
1$_18_/lnengn.dll
windows7-x64
1$_18_/lnengn.dll
windows10-2004-x64
1$_18_/massctl.dll
windows7-x64
1$_18_/massctl.dll
windows10-2004-x64
1Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
484ecd6f042980f619e91c978c64fb10_JaffaCakes118.exe
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
484ecd6f042980f619e91c978c64fb10_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/djcomm.dll
Resource
win7-20240705-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/djcomm.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
$PLUGINSDIR/license.rtf
Resource
win7-20240705-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral10
Sample
$PLUGINSDIR/license.rtf
Resource
win10v2004-20240709-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral11
Sample
$PLUGINSDIR/licenseDNA.rtf
Resource
win7-20240704-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral12
Sample
$PLUGINSDIR/licenseDNA.rtf
Resource
win10v2004-20240709-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral13
Sample
$_18_/CustomStorage.dll
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral14
Sample
$_18_/CustomStorage.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral15
Sample
$_18_/DNAAdmin.exe
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
$_18_/DNAAdmin.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
$_18_/DNAService.exe
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
$_18_/DNAService.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
$_18_/czlogclient.exe
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
$_18_/czlogclient.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
$_18_/dgs.dll
Resource
win7-20240705-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
$_18_/dgs.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
$_18_/gicconn.dll
Resource
win7-20240705-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
$_18_/gicconn.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral25
Sample
$_18_/gpctl.dll
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
$_18_/gpctl.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral27
Sample
$_18_/license.rtf
Resource
win7-20240708-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral28
Sample
$_18_/license.rtf
Resource
win10v2004-20240709-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral29
Sample
$_18_/lnengn.dll
Resource
win7-20240704-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral30
Sample
$_18_/lnengn.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral31
Sample
$_18_/massctl.dll
Resource
win7-20240705-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral32
Sample
$_18_/massctl.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
484ecd6f042980f619e91c978c64fb10_JaffaCakes118
-
Size
909KB
-
MD5
484ecd6f042980f619e91c978c64fb10
-
SHA1
60c4d0c30549541ca5cb60feaa59d61336485ab8
-
SHA256
1d8abc2d08ffca70e04ac6b2678df573010963587afa721f0af9b2c8ae2438fe
-
SHA512
fcf678ec772f8d5920d08084934e720099257b89062e64db133dc2f97cfb2c00614b026f66439815f1c5f6c4fd6e24579e0784f12f2285c1a0cc5c499b428650
-
SSDEEP
24576:E7H5V+XU1dPNrydCrEHxQEunqsvF2yhYAwAIfSRi:ETj+XUzMUrgQ1qDyaAwIRi
Score
3/10
Malware Config
Signatures
-
Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource 484ecd6f042980f619e91c978c64fb10_JaffaCakes118 unpack001/$PLUGINSDIR/InstallOptions.dll unpack001/$PLUGINSDIR/System.dll unpack001/$PLUGINSDIR/djcomm.dll unpack001/$_18_/sqlite3.dll -
NSIS installer 2 IoCs
resource yara_rule sample nsis_installer_1 sample nsis_installer_2
Files
-
484ecd6f042980f619e91c978c64fb10_JaffaCakes118.exe windows:4 windows x86 arch:x86
dfb06052e74b26a42b0e490bd1c07959
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
MulDiv
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
RegisterClassA
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
EmptyClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetForegroundWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/InstallOptions.dll.dll windows:4 windows x86 arch:x86
b1cd0d78f652ce5fc63f0879371af012
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
user32
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
gdi32
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/System.dll.dll windows:4 windows x86 arch:x86
4ec328f99bdd944fc98d8a5cf11f7a62
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect
user32
wsprintfA
ole32
StringFromGUID2
CLSIDFromString
Exports
Exports
Alloc
Call
Copy
Free
Get
Int64Op
Store
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/ad.bmp
-
$PLUGINSDIR/djcomm.dll.dll windows:4 windows x86 arch:x86
bbdbccf46fb8a2be55b3726b63349598
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
e:\Work\Product\SourceCode\SetupTool\RunConsole\nsisdnas\Release\nsisdnas.pdb
Imports
wininet
InternetCloseHandle
InternetOpenW
InternetOpenUrlA
InternetAttemptConnect
InternetReadFile
kernel32
GetLastError
CloseHandle
DeviceIoControl
CreateFileW
DefineDosDeviceW
WideCharToMultiByte
MultiByteToWideChar
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
QueryDosDeviceA
Process32NextW
Sleep
TerminateProcess
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
lstrcpyA
CreateMutexA
MoveFileExW
lstrcatW
lstrcpyW
GetTempPathW
InterlockedExchange
GetACP
GetLocaleInfoA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
VirtualProtect
GetCurrentDirectoryW
GetTimeZoneInformation
GlobalFree
GetSystemInfo
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetCurrentProcessId
GetVersionExA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetDriveTypeA
FlushFileBuffers
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
LocalFree
ReadFile
FreeLibrary
GetProcAddress
LoadLibraryW
GetVolumeInformationW
GetLogicalDriveStringsW
GetVersion
GetSystemDefaultLangID
GetTickCount
WriteFile
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
GetLocalTime
RtlUnwind
GetCommandLineA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleFileNameA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
GetFullPathNameW
GetCurrentDirectoryA
SetUnhandledExceptionFilter
VirtualQuery
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetFilePointer
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
LoadLibraryA
SetStdHandle
user32
wsprintfW
advapi32
ControlService
QueryServiceStatus
OpenSCManagerW
OpenServiceA
CloseServiceHandle
StartServiceW
CreateServiceA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
OleRun
shlwapi
StrStrIW
ws2_32
gethostbyname
gethostname
WSAStartup
WSACleanup
Exports
Exports
CheckComInterface
CloseMutex
CreateDriver
DisMountAll
ExecWaitSilent
FindFVMounted
KillProc
SetMutex
StatGetInfo
StringTransfer
query_service
start_service
stop_service
urldownload
urlquery
urlread
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/io3.ini
-
$PLUGINSDIR/ioSpecial.ini
-
$PLUGINSDIR/left.bmp
-
$PLUGINSDIR/license.rtf.rtf
-
$PLUGINSDIR/licenseDNA.rtf.rtf
-
$PLUGINSDIR/modern-wizard.bmp
-
$_18_/CustomStorage.dll.dll windows:5 windows x86 arch:x86
36ad832e1eda31580da0e584abd3e555
Code Sign
6c:21:3e:f2:63:cf:fd:1f:7a:54:b1:29:64:a1:5c:83Certificate
IssuerCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USNot Before12/11/2009, 00:00Not After12/11/2010, 23:59SubjectCN=北京点击科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京点击科技有限公司,L=北京,ST=北京,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before25/04/2007, 00:00Not After09/07/2019, 18:40SubjectCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before09/07/1999, 18:31Not After09/07/2019, 18:40SubjectCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before30/04/2007, 00:00Not After29/04/2012, 23:59SubjectCN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\dianji\gpctl\Release\CustomStorage.pdb
Imports
kernel32
WaitForSingleObject
SetEvent
CreateEventA
CloseHandle
Sleep
ResetEvent
CreateEventW
GetOverlappedResult
SetFilePointerEx
ReadFile
GetLastError
WriteFile
GetModuleFileNameW
CreateFileW
GetFileSize
SetEndOfFile
SetFileValidData
GetFileSizeEx
CopyFileW
SetFileAttributesW
VirtualFree
VirtualAlloc
SetFilePointer
CreateDirectoryW
WriteConsoleW
WideCharToMultiByte
MultiByteToWideChar
HeapFree
EncodePointer
DecodePointer
GetLocalTime
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
RaiseException
HeapCreate
HeapDestroy
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetStdHandle
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetStringTypeW
GetConsoleCP
GetConsoleMode
LoadLibraryW
SetStdHandle
FlushFileBuffers
LCMapStringW
GetProcessHeap
shell32
SHGetFolderPathW
Exports
Exports
_CS_CloseFile@4
_CS_DeleteFile@4
_CS_FlushFileBuffers@4
_CS_OpenFile2@12
_CS_OpenFile@8
_CS_ReadFile@16
_CS_ReleaseOverlap@4
_CS_SetFilePointer@20
_CS_WriteFile@16
_CS_WriteFileEx@20
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$_18_/DNAAdmin.exe.exe windows:4 windows x86 arch:x86
ce72261ba835e1666b9f2af4d51adce6
Code Sign
6c:21:3e:f2:63:cf:fd:1f:7a:54:b1:29:64:a1:5c:83Certificate
IssuerCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USNot Before12/11/2009, 00:00Not After12/11/2010, 23:59SubjectCN=北京点击科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京点击科技有限公司,L=北京,ST=北京,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before25/04/2007, 00:00Not After09/07/2019, 18:40SubjectCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before09/07/1999, 18:31Not After09/07/2019, 18:40SubjectCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before30/04/2007, 00:00Not After29/04/2012, 23:59SubjectCN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
d:\DailyBuild\LavaGame\dianji\ring\client\lnengn\bin\Release\lne.pdb
Imports
ws2_32
WSAStartup
gethostname
WSACleanup
WSAGetLastError
gethostbyname
inet_ntoa
htonl
getservbyname
htons
gethostbyaddr
getservbyport
ntohs
WSACreateEvent
WSASetEvent
closesocket
WSAEventSelect
WSAResetEvent
connect
socket
WSAEnumNetworkEvents
WSACloseEvent
getsockname
recv
send
inet_addr
sqlite3
sqlite3_exec
sqlite3_open
sqlite3_close
kernel32
LockResource
LoadResource
FindResourceW
FindResourceExW
MultiByteToWideChar
GetModuleFileNameW
ReleaseMutex
MoveFileExW
GetLastError
CreateMutexW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GetPrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetCurrentThreadId
lstrlenW
lstrcpyW
GetModuleHandleW
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
GetPrivateProfileSectionW
Sleep
lstrcpynA
lstrlenA
GlobalUnlock
GlobalLock
GetTickCount
MulDiv
CompareStringW
lstrcmpW
GetSystemTimeAsFileTime
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
WriteFile
CreateFileW
ReadFile
GetFileSize
GlobalAlloc
WinExec
lstrcatW
GetFileAttributesW
GetProcAddress
LoadLibraryW
SizeofResource
LoadLibraryA
GetSystemDirectoryA
LocalFree
WaitForMultipleObjects
GetVolumeInformationW
GetLogicalDriveStringsW
GetSystemDefaultLangID
CreateThread
GetTempPathW
GetCurrentProcessId
DeleteFileW
GetTempFileNameW
SetFileAttributesW
GetFileSizeEx
GetSystemInfo
VirtualProtect
TerminateProcess
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
SetLastError
TlsAlloc
VirtualQuery
SetUnhandledExceptionFilter
GetModuleFileNameA
QueryPerformanceCounter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
FatalAppExitA
GetLocalTime
FindFirstFileW
GetDriveTypeW
FindClose
GetStartupInfoW
GetModuleHandleA
ExitThread
RtlUnwind
ExitProcess
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
UnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
WideCharToMultiByte
InterlockedIncrement
WaitForSingleObject
ResetEvent
InterlockedDecrement
SetEvent
CloseHandle
CreateEventW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFilePointer
IsBadReadPtr
IsBadCodePtr
GetTimeFormatA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
GetOEMCP
GetDateFormatA
GetCPInfo
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetTimeZoneInformation
GetCurrentDirectoryW
SetStdHandle
FlushFileBuffers
SetConsoleCtrlHandler
GetDriveTypeA
GetStringTypeA
GetStringTypeW
GetFullPathNameW
GetFullPathNameA
SetEndOfFile
GetLocaleInfoW
CompareStringA
SetEnvironmentVariableA
LCMapStringA
GetVersion
LCMapStringW
user32
SetClipboardData
EmptyClipboard
InflateRect
FindWindowExW
GetSysColor
wsprintfW
LoadIconW
RedrawWindow
GetWindowTextLengthW
GetWindowTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
EnableWindow
OffsetRect
SetWindowRgn
MoveWindow
GetDC
SetCapture
GetCapture
SetCursor
DrawEdge
FillRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetSystemMetrics
GetMessagePos
ReleaseCapture
DestroyIcon
SetRectEmpty
KillTimer
SetTimer
EnableMenuItem
ScreenToClient
CreateDialogParamW
IsWindowVisible
ShowWindow
IsIconic
GetWindow
GetClassNameW
GetMenu
IsMenu
AdjustWindowRectEx
GetWindowRgn
WindowFromDC
RegisterWindowMessageW
GetScrollInfo
BeginDeferWindowPos
DeferWindowPos
SetClipboardViewer
SystemParametersInfoW
GetDlgItem
SetWindowTextW
EndDialog
GetClipboardOwner
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
GetActiveWindow
DialogBoxParamW
ChangeClipboardChain
LoadStringA
SetFocus
PostQuitMessage
RemoveMenu
PtInRect
MapWindowPoints
TrackPopupMenuEx
CreatePopupMenu
EndDeferWindowPos
IntersectRect
MessageBoxW
UpdateWindow
GetMenuItemCount
AppendMenuW
MessageBeep
InvalidateRect
GetWindowRect
GetClientRect
SetWindowPos
SetMenuDefaultItem
GetMenuItemInfoW
SetMenuItemInfoW
GetSubMenu
MonitorFromPoint
GetMonitorInfoW
GetCursorPos
TrackPopupMenu
DestroyMenu
SetForegroundWindow
CallWindowProcW
GetWindowLongW
TranslateAcceleratorW
CharNextW
LoadStringW
LoadMenuW
LoadAcceleratorsW
CreateWindowExW
GetClassInfoExW
LoadCursorW
LoadImageW
RegisterClassExW
DestroyWindow
DefWindowProcW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
IsWindow
PostMessageW
SendMessageW
SetWindowLongW
wvsprintfW
UnregisterClassW
UnregisterClassA
GetParent
gdi32
CreateSolidBrush
CreatePen
RoundRect
OffsetRgn
CreateRectRgnIndirect
GetClipRgn
ExtSelectClipRgn
CreateRectRgn
GetPixel
BitBlt
CreatePolygonRgn
CreateCompatibleDC
CreateCompatibleBitmap
SetBkColor
ExtTextOutW
SetRectRgn
CreatePatternBrush
SelectObject
PatBlt
DeleteObject
DeleteDC
CreateBitmap
CombineRgn
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegQueryValueExW
RegCreateKeyExW
RegDeleteValueW
RegCloseKey
RegDeleteKeyW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
shell32
Shell_NotifyIconW
ord155
SHGetPathFromIDListW
ord165
SHGetMalloc
ord152
SHGetDesktopFolder
SHGetFileInfoW
SHBrowseForFolderW
ShellExecuteW
ole32
StringFromGUID2
OleRun
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoInitialize
CoInitializeEx
oleaut32
SafeArrayCreateVector
VariantInit
VariantClear
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VarUI4FromStr
SysAllocString
GetErrorInfo
VariantChangeType
SetErrorInfo
CreateErrorInfo
shlwapi
PathFindExtensionW
StrStrIW
PathFileExistsW
comctl32
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
InitCommonControlsEx
msimg32
GradientFill
Sections
.text Size: 304KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$_18_/DNAService.exe.exe windows:5 windows x86 arch:x86
7f95c9d5882e9873178389ac585c3bb5
Code Sign
6c:21:3e:f2:63:cf:fd:1f:7a:54:b1:29:64:a1:5c:83Certificate
IssuerCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USNot Before12/11/2009, 00:00Not After12/11/2010, 23:59SubjectCN=北京点击科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京点击科技有限公司,L=北京,ST=北京,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before25/04/2007, 00:00Not After09/07/2019, 18:40SubjectCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before09/07/1999, 18:31Not After09/07/2019, 18:40SubjectCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before30/04/2007, 00:00Not After29/04/2012, 23:59SubjectCN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\MyProjects\Dianji\client\bin\dnaservice.pdb
Imports
ws2_32
gethostname
send
socket
closesocket
WSAEventSelect
ntohs
recv
getsockname
listen
bind
inet_addr
WSAGetLastError
gethostbyname
inet_ntoa
htonl
getservbyname
htons
gethostbyaddr
getservbyport
WSASetLastError
WSASetEvent
WSAResetEvent
WSAEnumNetworkEvents
WSACreateEvent
connect
WSASend
accept
WSAIoctl
WSAStartup
WSACleanup
WSARecv
shutdown
sendto
recvfrom
select
iphlpapi
SendARP
rpcrt4
UuidCreate
kernel32
GetFileAttributesA
IsValidCodePage
CreateEventW
CloseHandle
WaitForSingleObject
SetEvent
Sleep
GetLocalTime
OpenEventW
ResetEvent
ReadFile
SetFilePointerEx
WideCharToMultiByte
MultiByteToWideChar
CopyFileW
MoveFileExW
DeleteFileW
SetFileAttributesW
GetSystemTimeAsFileTime
GetModuleHandleW
WriteFile
CreateFileW
GetFileSize
lstrlenW
RaiseException
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
GetProcAddress
lstrcmpiW
GetModuleFileNameW
FormatMessageW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CreateMutexW
CreateThread
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
FreeLibrary
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetCommandLineW
GetSystemDefaultUILanguage
ReleaseMutex
SetFilePointer
GetFileTime
FreeEnvironmentStringsW
LoadLibraryA
GetSystemDirectoryA
GetTickCount
CreateDirectoryW
GetDateFormatA
GetSystemTime
WaitForMultipleObjects
LockResource
GetDiskFreeSpaceExW
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
SetFileTime
SetFileValidData
SetEndOfFile
SleepEx
TerminateThread
QueueUserAPC
WaitForSingleObjectEx
GetVolumeInformationW
GetLogicalDriveStringsW
GetSystemDefaultLangID
GetVersion
FindClose
FindNextFileW
FindFirstFileW
VirtualFree
VirtualAlloc
LoadLibraryW
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapCreate
GetModuleHandleA
IsDebuggerPresent
GetEnvironmentStringsW
SetHandleCount
GetFileType
CreateFileA
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
GetExitCodeProcess
CreateProcessA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoW
RtlUnwind
ExitThread
HeapFree
HeapAlloc
HeapReAlloc
InterlockedExchange
GetProcessHeap
FreeEnvironmentStringsA
GetEnvironmentStrings
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileSizeEx
user32
LoadStringW
TranslateMessage
DispatchMessageW
PostThreadMessageW
CharNextW
CharUpperW
MessageBoxW
GetMessageW
advapi32
CloseServiceHandle
LookupPrivilegeValueW
OpenProcessToken
QueryServiceStatus
ControlService
OpenServiceW
StartServiceW
ChangeServiceConfigW
ChangeServiceConfig2W
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
RegEnumKeyExW
DeleteService
CreateServiceW
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
OpenSCManagerW
RegisterEventSourceW
ReportEventW
DeregisterEventSource
SetServiceStatus
AdjustTokenPrivileges
shell32
ShellExecuteW
ole32
CoResumeClassObjects
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoInitializeSecurity
CoUninitialize
CoInitializeEx
CoSuspendClassObjects
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemFree
StringFromGUID2
oleaut32
SysAllocStringLen
SysReAllocStringLen
SysAllocStringByteLen
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
customstorage
_CS_ReadFile@16
_CS_DeleteFile@4
_CS_SetFilePointer@20
_CS_OpenFile@8
_CS_WriteFile@16
_CS_CloseFile@4
gicconn
?GICConnStartup@@YAXPBG@Z
?GICConnAcceptEx@@YAIIIPAI@Z
?GICConnServiceListen@@YAHIIP6GHIIPAX@Z0@Z
?GICConnGetState@@YAIXZ
?GICConnSignout@@YAXXZ
?GICConnConnectGid@@YAI_KIAAI@Z
?GICConnOpenSocket@@YAIPBDG@Z
?GICConnPostReq2SCEx@@YAHI_KPBDHPAUHWND__@@I@Z
?GICConnSignin@@YAHPBUBUDDYITEM@@PBDPBG@Z
?GICConnGetBuddyItemEx@@YAHPAUBUDDYITEMEX@@@Z
?GICConnGetIPDistance@@YGG_K@Z
?GICConnSetBuddyItemEx@@YAHPBUBUDDYITEMEX@@@Z
sqlite3
sqlite3_exec
sqlite3_close
sqlite3_open
Sections
.text Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$_18_/P2PAgentLogo.gif.gif
-
$_18_/P2PConfig.xml.xml
-
$_18_/czlogclient.exe.exe windows:5 windows x86 arch:x86
b06e05f615f825232ad63e60f458b96f
Code Sign
6c:21:3e:f2:63:cf:fd:1f:7a:54:b1:29:64:a1:5c:83Certificate
IssuerCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USNot Before12/11/2009, 00:00Not After12/11/2010, 23:59SubjectCN=北京点击科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京点击科技有限公司,L=北京,ST=北京,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before25/04/2007, 00:00Not After09/07/2019, 18:40SubjectCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before09/07/1999, 18:31Not After09/07/2019, 18:40SubjectCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before30/04/2007, 00:00Not After29/04/2012, 23:59SubjectCN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\MyProjects\dianji\ring\client\P2PFramework\Bin\czlogclient.pdb
Imports
ws2_32
WSAStartup
WSACleanup
socket
WSAIoctl
sendto
WSASocketW
WSAEventSelect
closesocket
bind
WSASend
WSARecvFrom
freeaddrinfo
getaddrinfo
recvfrom
recv
listen
gicconn
?GICConnPostReq2SCEx@@YAHI_KPBDHPAUHWND__@@I@Z
?GICConnGetState@@YAIXZ
?GICConnServiceListen@@YAHIIP6GHIIPAX@Z0@Z
?GICConnAcceptEx@@YAIIIPAI@Z
?GICConnStartup@@YAXPBG@Z
?GICConnSignout@@YAXXZ
?GICConnGetBuddyItemEx@@YAHPAUBUDDYITEMEX@@@Z
?GICConnSignin@@YAHPBUBUDDYITEM@@PBDPBG@Z
kernel32
TlsSetValue
FlushFileBuffers
CreateFileA
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetPrivateProfileStringW
CreateIoCompletionPort
GetQueuedCompletionStatus
CloseHandle
WritePrivateProfileStringW
Sleep
CreateEventW
SetEvent
WaitForSingleObject
GetLastError
PostQueuedCompletionStatus
ResetEvent
WaitForSingleObjectEx
LoadLibraryA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
ExitThread
GetCurrentThreadId
CreateThread
HeapAlloc
HeapFree
HeapReAlloc
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
RaiseException
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
user32
PostMessageW
SetWindowTextW
DialogBoxParamW
EndDialog
MessageBoxW
SetDlgItemTextW
shell32
SHGetFolderPathAndSubDirW
oleaut32
SysFreeString
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$_18_/dgs.dll.dll windows:4 windows x86 arch:x86
ecc377e331c51458881c2c690664de15
Code Sign
6c:21:3e:f2:63:cf:fd:1f:7a:54:b1:29:64:a1:5c:83Certificate
IssuerCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USNot Before12/11/2009, 00:00Not After12/11/2010, 23:59SubjectCN=北京点击科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京点击科技有限公司,L=北京,ST=北京,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before25/04/2007, 00:00Not After09/07/2019, 18:40SubjectCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before09/07/1999, 18:31Not After09/07/2019, 18:40SubjectCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before30/04/2007, 00:00Not After29/04/2012, 23:59SubjectCN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\BANDATA\Projects\lava.server\server\bin\release\dgs.pdb
Imports
ws2_32
__WSAFDIsSet
WSAGetLastError
WSAConnect
ioctlsocket
gethostbyname
closesocket
socket
getpeername
accept
bind
ntohs
inet_addr
select
send
getsockname
listen
getsockopt
setsockopt
shutdown
recvfrom
WSAStartup
htons
recv
sendto
massctl
_msc_stop@4
_msc_restart@4
_msc_build@20
_msc_deleteex@8
_msc_getprogress@8
_msc_createseedid@12
_msc_init@8
_msc_rebuild2@28
_msc_commit@4
gpctl
_gpc_getmountgame@4
_gpc_unmount@4
_gpc_mount@4
_gpc_stop@8
_gpc_init@8
_gpc_start@16
_gpc_setenv@8
_gpc_getprogressex@8
_gpc_getroot@8
rpcrt4
RpcStringFreeA
UuidToStringA
UuidFromStringA
kernel32
SetEndOfFile
GetFullPathNameA
GetDriveTypeA
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
GetSystemInfo
VirtualProtect
IsBadCodePtr
IsBadReadPtr
VirtualQuery
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
CreateEventW
CloseHandle
SetEvent
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
InterlockedIncrement
InterlockedDecrement
WritePrivateProfileStringA
WideCharToMultiByte
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateDirectoryW
GetDiskFreeSpaceExW
GetLogicalDriveStringsW
GetLocalTime
OpenEventW
GetProcAddress
LoadLibraryW
FreeLibrary
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFileAttributesExW
GetFileAttributesW
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleW
GetPrivateProfileStringW
ResetEvent
MoveFileW
GetTempPathW
CreateFileW
Module32FirstW
CreateToolhelp32Snapshot
DeleteFileW
CompareStringA
SetFileAttributesW
Process32NextW
Process32FirstW
InterlockedCompareExchange
GetPrivateProfileIntW
InterlockedExchange
GetPrivateProfileSectionW
TerminateThread
Sleep
ResumeThread
WriteFile
CreateFileA
SetFilePointer
ReadFile
DeleteFileA
CreateDirectoryA
MoveFileExA
FindClose
FindFirstFileA
FindNextFileW
FindFirstFileW
GetModuleFileNameA
GetModuleHandleA
MultiByteToWideChar
LoadLibraryA
GetFileSize
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
LocalFree
lstrcpyW
HeapFree
HeapAlloc
GetProcessHeap
GetVolumeInformationW
lstrcatW
lstrlenW
GetVersion
GetSystemDefaultLangID
CreateThread
MoveFileExW
RaiseException
GetCurrentThreadId
GetTickCount
GetFileType
GetStdHandle
SetHandleCount
IsBadWritePtr
CompareStringW
SetEnvironmentVariableA
RemoveDirectoryW
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapSize
GetCurrentProcess
TerminateProcess
GetCurrentDirectoryA
GetFullPathNameW
SetUnhandledExceptionFilter
QueryPerformanceCounter
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
HeapReAlloc
ExitThread
GetVersionExA
GetCommandLineA
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
ExitProcess
GetSystemTimeAsFileTime
GetTimeZoneInformation
RtlUnwind
GetLastError
user32
wsprintfA
wsprintfW
advapi32
OpenServiceW
CloseServiceHandle
QueryServiceStatus
OpenSCManagerW
shell32
ShellExecuteW
SHGetSpecialFolderPathW
ole32
CoInitializeEx
OleRun
CoUninitialize
CoCreateInstance
oleaut32
SysFreeString
shlwapi
StrStrIW
iphlpapi
GetAdaptersAddresses
Exports
Exports
Startup
Stop
Wait
Sections
.text Size: 192KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$_18_/dgs.ini
-
$_18_/gicconn.dll.dll windows:5 windows x86 arch:x86
fccba12de76293ef4fabd61e45027c93
Code Sign
6c:21:3e:f2:63:cf:fd:1f:7a:54:b1:29:64:a1:5c:83Certificate
IssuerCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USNot Before12/11/2009, 00:00Not After12/11/2010, 23:59SubjectCN=北京点击科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京点击科技有限公司,L=北京,ST=北京,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before25/04/2007, 00:00Not After09/07/2019, 18:40SubjectCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before09/07/1999, 18:31Not After09/07/2019, 18:40SubjectCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before30/04/2007, 00:00Not After29/04/2012, 23:59SubjectCN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
getpeername
WSASendTo
getsockopt
shutdown
recvfrom
sendto
WSAEnumNetworkEvents
WSAResetEvent
connect
WSASend
WSACleanup
WSAStartup
ntohl
accept
WSAWaitForMultipleEvents
ioctlsocket
WSAEventSelect
bind
setsockopt
listen
getsockname
gethostname
WSASetLastError
getservbyport
ntohs
gethostbyaddr
htons
getservbyname
htonl
inet_ntoa
gethostbyname
inet_addr
socket
WSASetEvent
WSACloseEvent
WSACreateEvent
closesocket
recv
send
WSAGetLastError
select
icmp
IcmpSendEcho
IcmpCreateFile
IcmpCloseHandle
wininet
HttpQueryInfoA
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetSetOptionA
InternetCloseHandle
InternetErrorDlg
InternetReadFile
InternetQueryOptionA
HttpSendRequestA
iphlpapi
GetIpAddrTable
GetAdaptersInfo
kernel32
GetProcessHeap
SetEndOfFile
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
ExitProcess
HeapSize
SetFilePointer
FlushFileBuffers
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapReAlloc
ExitThread
HeapDestroy
HeapCreate
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
IsValidCodePage
GetCPInfo
WriteConsoleW
WaitForSingleObject
WideCharToMultiByte
MultiByteToWideChar
Sleep
CreateEventA
CloseHandle
SetEvent
InterlockedDecrement
ResetEvent
GetACP
InterlockedIncrement
InterlockedExchange
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
PostQueuedCompletionStatus
GetQueuedCompletionStatus
GetPrivateProfileStringA
CopyFileA
GetPrivateProfileIntA
CreateDirectoryA
GetModuleFileNameA
CreateIoCompletionPort
GetTickCount
InterlockedCompareExchange
WritePrivateProfileStringA
QueueUserAPC
GetCurrentThreadId
ReleaseMutex
CreateMutexW
SleepEx
CreateThread
GetCommandLineA
GetConsoleMode
GetConsoleCP
HeapAlloc
GetSystemTimeAsFileTime
GetLocalTime
HeapFree
GetLastError
GetOEMCP
ReadFile
CreateFileW
WriteFile
CreateEventW
VirtualAlloc
VirtualFree
CreateFileA
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
ResumeThread
TerminateThread
InitializeCriticalSection
DeleteCriticalSection
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
user32
GetDesktopWindow
DialogBoxIndirectParamA
IsWindow
PostMessageA
EndDialog
SetTimer
KillTimer
PostThreadMessageA
oleaut32
SysFreeString
SysAllocStringByteLen
Exports
Exports
?GICConnAcceptEx@@YAIIIPAI@Z
?GICConnAddBuddyLst@@YAXPBUBUDDYATGS@@HH@Z
?GICConnBindGid@@YGX_K@Z
?GICConnCanShutdown@@YAHXZ
?GICConnCleanup@@YGXXZ
?GICConnConnectGS@@YAIXZ
?GICConnConnectGid@@YAI_KIAAI@Z
?GICConnConnectGidEx@@YGH_KIIPAXKPAU_OVERLAPPED@@@Z
?GICConnDispath@@YAXPAVEventItem@@@Z
?GICConnEnumBuddy@@YAHP6GHPBUBUDDYITEM@@PAX@ZK01@Z
?GICConnGetBuddyItem@@YAHPAUBUDDYITEM@@@Z
?GICConnGetBuddyItemEx@@YAHPAUBUDDYITEMEX@@@Z
?GICConnGetIPDistance@@YGGKK@Z
?GICConnGetIPDistance@@YGG_K@Z
?GICConnGetMyGid@@YA_KXZ
?GICConnGetOverlappedResult@@YGHPAU_OVERLAPPED@@PAI1H@Z
?GICConnGetPassport@@YAHPADH@Z
?GICConnGetSCVersion@@YAKXZ
?GICConnGetServerGID@@YA_KI@Z
?GICConnGetState@@YAIXZ
?GICConnGsMessage@@YAXPBD@Z
?GICConnInitListenfdEx@@YAIKGH@Z
?GICConnInitListenfdEx@@YAIKGKH@Z
?GICConnIsOfflineStatus@@YAHXZ
?GICConnNotifyEvent@@YAXK@Z
?GICConnNotifyMsg@@YAXIPBURNHDR@@@Z
?GICConnOpenSocket@@YAIKG@Z
?GICConnOpenSocket@@YAIPBDG@Z
?GICConnOpenSocketEx@@YGHIKGPAXKPAU_OVERLAPPED@@@Z
?GICConnOpenSocketEx@@YGHIPBDGPAXKPAU_OVERLAPPED@@@Z
?GICConnPostReq2SC@@YAHI_KPBDH@Z
?GICConnPostReq2SCEx@@YAHI_KPBDHPAUHWND__@@I@Z
?GICConnPostReq2Srv@@YGH_KPBDHPAPBDHP6GHH1HPAX@Z3@Z
?GICConnRegEventDealer@@YAXPAVEventDealerInterface@@@Z
?GICConnRegNotifyEvent@@YAXPAXK@Z
?GICConnRegNotifyWnd@@YAXPAUHWND__@@II@Z
?GICConnServiceListen@@YAHII@Z
?GICConnServiceListen@@YAHIIP6GHIIPAX@Z0@Z
?GICConnSetBuddyItem@@YAHPBUBUDDYITEM@@@Z
?GICConnSetBuddyItemEx@@YAHPBUBUDDYITEMEX@@@Z
?GICConnShutdown@@YAXXZ
?GICConnSignin@@YAHPBUBUDDYITEM@@PBD@Z
?GICConnSignin@@YAHPBUBUDDYITEM@@PBDPBG@Z
?GICConnSignin@@YAHPBUBUDDYITEM@@PBG1@Z
?GICConnSignout@@YAXXZ
?GICConnSignout@@YGHP6GHIHJPAX@Z0@Z
?GICConnStartup@@YAXPBG@Z
?GICConnUDPBindPeer@@YAHPBUBINDITEM@@PAKH@Z
?GICConnUDPUnbind@@YAXG@Z
?GICConnUnregEventDealer@@YAXPBVEventDealerInterface@@@Z
?GICConnUnregNotifyEvent@@YAXPAXK@Z
?GICConnUnregNotifyWnd@@YAXPAUHWND__@@I@Z
?PacketHeader2@@YAXPAXGGGUCGid@@K@Z
Sections
.text Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$_18_/gpctl.dll.dll windows:5 windows x86 arch:x86
83696c434ab9fbd941f49ff190082835
Code Sign
6c:21:3e:f2:63:cf:fd:1f:7a:54:b1:29:64:a1:5c:83Certificate
IssuerCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USNot Before12/11/2009, 00:00Not After12/11/2010, 23:59SubjectCN=北京点击科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京点击科技有限公司,L=北京,ST=北京,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before25/04/2007, 00:00Not After09/07/2019, 18:40SubjectCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before09/07/1999, 18:31Not After09/07/2019, 18:40SubjectCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before30/04/2007, 00:00Not After29/04/2012, 23:59SubjectCN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
WSACloseEvent
sendto
socket
htons
connect
send
bind
listen
getsockname
WSACreateEvent
WSAEventSelect
WSAWaitForMultipleEvents
WSAResetEvent
recv
WSAGetLastError
WSAStartup
closesocket
accept
WSASend
kernel32
GetProcessHeap
SetEndOfFile
LCMapStringW
GetStringTypeW
RtlUnwind
GetSystemTimeAsFileTime
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
WaitForSingleObject
SetEvent
CreateEventW
Sleep
SetFilePointerEx
ReadFile
WriteFile
GetLocalTime
OpenEventW
QueryDosDeviceW
CreateFileW
DefineDosDeviceW
DeviceIoControl
CreateDirectoryW
RemoveDirectoryW
VirtualAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTempPathW
GetDiskFreeSpaceW
VirtualFree
GetPrivateProfileIntW
GetTickCount
FlushFileBuffers
GetFileAttributesExW
CopyFileW
lstrcpyW
lstrcatW
SetLastError
ResetEvent
QueryDosDeviceA
CreateFileA
DefineDosDeviceA
LoadLibraryW
GetProcAddress
FreeLibrary
GetVolumeInformationW
GetModuleFileNameW
GetFileSize
DeleteFileW
GetLastError
SetFilePointer
lstrlenW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventA
WriteConsoleW
HeapDestroy
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
HeapCreate
GetStdHandle
ExitProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
DebugBreak
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetStdHandle
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
ResumeThread
TerminateThread
EncodePointer
DecodePointer
HeapAlloc
HeapReAlloc
HeapFree
GetConsoleCP
GetConsoleMode
GetCurrentThreadId
GetCommandLineA
ExitThread
CreateThread
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RaiseException
HeapSize
GetModuleHandleW
InterlockedDecrement
shell32
SHGetFolderPathW
SHChangeNotify
ole32
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitializeEx
oleaut32
SysFreeString
customstorage
_CS_OpenFile@8
_CS_OpenFile2@12
_CS_WriteFile@16
_CS_CloseFile@4
_CS_ReadFile@16
_CS_SetFilePointer@20
massctl
_msc_rebuild2@28
_msc_addfile@20
_msc_init@8
_msc_inserttrackerconvertpair@8
_msc_GetTransferRate@8
_msc_getseed2@8
_msc_gettaskinfo@20
_msc_getprogress@8
_msc_rebuild@24
user32
PostMessageA
Exports
Exports
_gpc_getmountgame@4
_gpc_getprogress0@4
_gpc_getprogress@8
_gpc_getprogressex@8
_gpc_getroot@8
_gpc_init@8
_gpc_mount@4
_gpc_setenv@8
_gpc_start0@24
_gpc_start@16
_gpc_stop@8
_gpc_unmount@4
Sections
.text Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$_18_/ipx.ini
-
$_18_/lava.ini
-
$_18_/license.rtf.rtf
-
$_18_/lne.ini
-
$_18_/lnengn.cpl.dll windows:4 windows x86 arch:x86
6a761e53474ec20c865ab163a85a1fa4
Code Sign
6c:21:3e:f2:63:cf:fd:1f:7a:54:b1:29:64:a1:5c:83Certificate
IssuerCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USNot Before12/11/2009, 00:00Not After12/11/2010, 23:59SubjectCN=北京点击科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京点击科技有限公司,L=北京,ST=北京,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before25/04/2007, 00:00Not After09/07/2019, 18:40SubjectCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before09/07/1999, 18:31Not After09/07/2019, 18:40SubjectCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before30/04/2007, 00:00Not After29/04/2012, 23:59SubjectCN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\DailyBuild\LavaGame\dianji\ring\client\lnengn\bin\Release\lnengn.pdb
Imports
shlwapi
PathFileExistsW
kernel32
HeapDestroy
GetModuleFileNameW
GetModuleHandleW
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
shell32
ShellExecuteW
Exports
Exports
CPlApplet
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$_18_/massctl.dll.dll windows:5 windows x86 arch:x86
81d8fbe63f760e906f5d8a6cdab620e2
Code Sign
6c:21:3e:f2:63:cf:fd:1f:7a:54:b1:29:64:a1:5c:83Certificate
IssuerCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USNot Before12/11/2009, 00:00Not After12/11/2010, 23:59SubjectCN=北京点击科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京点击科技有限公司,L=北京,ST=北京,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before25/04/2007, 00:00Not After09/07/2019, 18:40SubjectCN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before09/07/1999, 18:31Not After09/07/2019, 18:40SubjectCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before30/04/2007, 00:00Not After29/04/2012, 23:59SubjectCN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
rpcrt4
UuidCreate
kernel32
GetCurrentThreadId
WriteConsoleW
SetFilePointerEx
ReadFile
CreateFileW
GetLastError
CloseHandle
WaitForSingleObject
SetEvent
CreateEventA
GetFileSize
SetFilePointer
CreateDirectoryW
VirtualFree
VirtualAlloc
Sleep
ResetEvent
CreateEventW
GetOverlappedResult
WriteFile
MulDiv
DeleteFileW
GetPrivateProfileIntW
FindFirstFileW
FindNextFileW
FindClose
CopyFileExW
RemoveDirectoryW
GetFileAttributesExW
MultiByteToWideChar
CopyFileW
GetFullPathNameW
GetModuleFileNameW
GetPrivateProfileStringW
MoveFileW
SetFileAttributesW
SetEndOfFile
SetFileTime
OutputDebugStringW
GetFileAttributesW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
LCMapStringW
LoadLibraryW
WideCharToMultiByte
HeapFree
HeapAlloc
HeapReAlloc
EncodePointer
DecodePointer
GetLocalTime
GetProcessHeap
GetCommandLineA
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
GetStdHandle
IsProcessorFeaturePresent
RaiseException
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapSize
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetHandleCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
user32
wsprintfW
shell32
SHGetFolderPathW
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
CoTaskMemFree
oleaut32
SysFreeString
SysAllocStringByteLen
Exports
Exports
_msc_GetBytesTransferred@8
_msc_GetTransferRate@8
_msc_addfile@20
_msc_build@20
_msc_commit@4
_msc_commitex@20
_msc_createseedid@12
_msc_delete@4
_msc_deleteex@8
_msc_getmaxtransferrate@8
_msc_getownerid@0
_msc_getprogress@8
_msc_getseed2@8
_msc_getseed@8
_msc_gettaskids@16
_msc_gettaskinfo@20
_msc_gettasklist@8
_msc_import@24
_msc_init@8
_msc_inserttrackerconvertpair@8
_msc_rebuild2@28
_msc_rebuild@24
_msc_reset@8
_msc_restart@4
_msc_setmaxtransferrate@8
_msc_stop@4
_msc_stopex@8
_msc_verify@12
Sections
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$_18_/mime.types
-
$_18_/sqlite3.dll.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ