Overview
overview
7Static
static
367a72af8e4...18.exe
windows7-x64
767a72af8e4...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3aofpr.chm
windows7-x64
1aofpr.chm
windows10-2004-x64
1aofpr.exe
windows7-x64
6aofpr.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
67a72af8e4cb68c360ed23d869c1a0bf_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67a72af8e4cb68c360ed23d869c1a0bf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
aofpr.chm
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
aofpr.chm
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
aofpr.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
aofpr.exe
Resource
win10v2004-20240709-en
General
-
Target
67a72af8e4cb68c360ed23d869c1a0bf_JaffaCakes118
-
Size
1.7MB
-
MD5
67a72af8e4cb68c360ed23d869c1a0bf
-
SHA1
6e058c9f9ab79113b3b250ad3f986482ed5571ea
-
SHA256
95c2548171c0312c34131862276fff53c8f61cf784a10c6dc576dace3faadad0
-
SHA512
9a77f04e24ec2e52cf1a82f3fe25e9cc86ea39f410a736f8855688202ac23acdf9b39b87dd58cf3d8058650c28680c5e8d57dc97f3b1fc58288977ed929124dc
-
SSDEEP
49152:lVN5ai3XqqvthOCFWzHHEMSGYwXDaNJC8z:PHai3XPUCozHHEN6DCJ3
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/$PLUGINSDIR/InstallOptions.dll unpack001/$PLUGINSDIR/StartMenu.dll -
NSIS installer 2 IoCs
resource yara_rule sample nsis_installer_1 sample nsis_installer_2
Files
-
67a72af8e4cb68c360ed23d869c1a0bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
7fa974366048f9c551ef45714595665e
Code Sign
70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before29/01/1996, 00:00Not After01/08/2028, 23:59SubjectOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15/06/2007, 00:00Not After14/06/2012, 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04/12/2003, 00:00Not After03/12/2013, 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
37:df:e5:cf:99:c2:5d:29:d2:e3:ca:01:e1:87:b2:a2Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before15/12/2009, 00:00Not After15/12/2010, 23:59SubjectCN=Passcovery Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Passcovery Ltd.,L=St.Petersburg,ST=Russia,C=RUExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21/05/2009, 00:00Not After20/05/2019, 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
4f:57:20:00:17:fc:51:07:b8:bd:be:25:87:75:88:59:e4:74:5b:3cSigner
Actual PE Digest4f:57:20:00:17:fc:51:07:b8:bd:be:25:87:75:88:59:e4:74:5b:3cDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/InstallOptions.dll.dll windows:4 windows x86 arch:x86
b1cd0d78f652ce5fc63f0879371af012
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
user32
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
gdi32
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
Exports
Exports
dialog
initDialog
show
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/StartMenu.dll.dll windows:4 windows x86 arch:x86
a648aeaa164b592c1e8892a10400b5ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
lstrcatA
FindClose
FindNextFileA
MulDiv
GlobalFree
lstrcpynA
GlobalAlloc
lstrcmpiA
FindFirstFileA
lstrcpyA
user32
TranslateMessage
GetMessageA
IsDialogMessageA
PostMessageA
DispatchMessageA
GetWindowLongA
CheckDlgButton
ShowWindow
LoadIconA
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextA
SendMessageA
IsDlgButtonChecked
GetWindowTextA
DestroyWindow
GetDlgItem
CreateDialogParamA
SetWindowLongA
wsprintfA
CallWindowProcA
gdi32
GetTextMetricsA
SelectObject
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ole32
CoTaskMemFree
Exports
Exports
Init
Select
Show
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 518B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/ioSpecial.ini
-
$PLUGINSDIR/modern-wizard.bmp
-
aofpr.chm.chm
-
aofpr.exe.exe windows:4 windows x86 arch:x86
Code Sign
70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before29/01/1996, 00:00Not After01/08/2028, 23:59SubjectOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15/06/2007, 00:00Not After14/06/2012, 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04/12/2003, 00:00Not After03/12/2013, 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
37:df:e5:cf:99:c2:5d:29:d2:e3:ca:01:e1:87:b2:a2Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before15/12/2009, 00:00Not After15/12/2010, 23:59SubjectCN=Passcovery Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Passcovery Ltd.,L=St.Petersburg,ST=Russia,C=RUExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21/05/2009, 00:00Not After20/05/2019, 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
a0:f0:c5:1d:99:11:01:70:c2:5a:93:c7:c4:45:ab:1d:1a:52:e5:2bSigner
Actual PE Digesta0:f0:c5:1d:99:11:01:70:c2:5a:93:c7:c4:45:ab:1d:1a:52:e5:2bDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
@$xp$10TCCalendar
@$xp$11TCColorGrid
@$xp$11TNumberEdit
@$xp$13TPasswordMask
@$xp$15Comctrls@TWidth
@$xp$16Comctrls@THotKey
@$xp$16Comctrls@TUpDown
@$xp$16Cspin@TCSpinEdit
@$xp$16Cspin@TCSpinEdit
@$xp$16Cspin@TCSpinEdit
@$xp$16Cspin@TCSpinEdit
@$xp$16Cspin@TCSpinEdit
@$xp$16Cspin@TCSpinEdit
@$xp$16Cspin@TCSpinEdit
@$xp$16Richview@TCPInfo
@$xp$16Rvstyle@TRVStyle
@$xp$17Comctrls@TAddMode
@$xp$17Comctrls@TAnimate
@$xp$17Comctrls@TCoolBar
@$xp$17Comctrls@THitTest
@$xp$17Comctrls@TToolBar
@$xp$17Rvstyle@TFontInfo
@$xp$17TPerformanceGraph
@$xp$18Comctrls@PNodeInfo
@$xp$18Comctrls@TCoolBand
@$xp$18Comctrls@THitTests
@$xp$18Comctrls@TItemFind
@$xp$18Comctrls@TListItem
@$xp$18Comctrls@TListView
@$xp$18Comctrls@TNodeInfo
@$xp$18Comctrls@TRichEdit
@$xp$18Comctrls@TSortType
@$xp$18Comctrls@TTabSheet
@$xp$18Comctrls@TTabStyle
@$xp$18Comctrls@TTickMark
@$xp$18Comctrls@TTrackBar
@$xp$18Comctrls@TTreeNode
@$xp$18Comctrls@TTreeView
@$xp$18Comctrls@TWorkArea
@$xp$18Cspin@TCSpinButton
@$xp$18Cspin@TCSpinButton
@$xp$18Cspin@TCSpinButton
@$xp$18Cspin@TCSpinButton
@$xp$18Cspin@TCSpinButton
@$xp$18Cspin@TCSpinButton
@$xp$18Cspin@TCSpinButton
@$xp$18Richview@TJumpInfo
@$xp$18Richview@TLineInfo
@$xp$18Richview@TRichView
@$xp$18Rvstyle@TFontInfos
@$xp$19Comctrls@PNodeCache
@$xp$19Comctrls@TCommonAVI
@$xp$19Comctrls@TCoolBands
@$xp$19Comctrls@TItemState
@$xp$19Comctrls@TListItems
@$xp$19Comctrls@TNodeCache
@$xp$19Comctrls@TNodeState
@$xp$19Comctrls@TStatusBar
@$xp$19Comctrls@TTickStyle
@$xp$19Comctrls@TTreeNodes
@$xp$19Comctrls@TUDBtnType
@$xp$19Comctrls@TViewStyle
@$xp$19Comctrls@TWorkAreas
@$xp$19Richview@TJumpEvent
@$xp$20Comctrls@ComCtrls__8
@$xp$20Comctrls@TConversion
@$xp$20Comctrls@TDTDateMode
@$xp$20Comctrls@THKModifier
@$xp$20Comctrls@TItemChange
@$xp$20Comctrls@TItemStates
@$xp$20Comctrls@TListColumn
@$xp$20Comctrls@TSearchType
@$xp$20Comctrls@TTabControl
@$xp$20Comctrls@TToolButton
@$xp$20Controls@TAnchorKind
@$xp$20Controls@TAnchorKind
@$xp$20Controls@TAnchorKind
@$xp$20Controls@TAnchorKind
@$xp$20Controls@TAnchorKind
@$xp$20Controls@TAnchorKind
@$xp$20Controls@TAnchorKind
@$xp$20Controls@TAnchorKind
@$xp$20Controls@TAnchorKind
@$xp$20Controls@TAnchorKind
@$xp$20Controls@TAnchorKind
@$xp$20Controls@TAnchorKind
@$xp$20Richview@TRVInteger2
@$xp$20Rvscroll@TRVScroller
@$xp$21Comctrls@ComCtrls__04
@$xp$21Comctrls@TDisplayCode
@$xp$21Comctrls@THKModifiers
@$xp$21Comctrls@THeaderStyle
@$xp$21Comctrls@TIconOptions
@$xp$21Comctrls@TItemRequest
@$xp$21Comctrls@TListColumns
@$xp$21Comctrls@TPageControl
@$xp$21Comctrls@TProgressBar
@$xp$21Comctrls@TSearchTypes
@$xp$21Comctrls@TStatusPanel
@$xp$21Comctrls@TTabPosition
@$xp$22Comctrls@TCalDayOfWeek
@$xp$22Comctrls@TCustomHotKey
@$xp$22Comctrls@TCustomUpDown
@$xp$22Comctrls@TDTDateFormat
@$xp$22Comctrls@TDateTimeKind
@$xp$22Comctrls@TDrawTabEvent
@$xp$22Comctrls@THKInvalidKey
@$xp$22Comctrls@TItemRequests
@$xp$22Comctrls@TPageScroller
@$xp$22Comctrls@TStatusPanels
@$xp$22Comctrls@TUDClickEvent
@$xp$22Outline@TOutlineOption
@$xp$22Richview@TDrawLineInfo
@$xp$22Richview@TRVSaveFormat
@$xp$22Richview@TRVSaveOption
@$xp$23Comctrls@EDateTimeError
@$xp$23Comctrls@EMonthCalError
@$xp$23Comctrls@ETreeViewError
@$xp$23Comctrls@TAttributeType
@$xp$23Comctrls@THKInvalidKeys
@$xp$23Comctrls@THeaderControl
@$xp$23Comctrls@THeaderSection
@$xp$23Comctrls@TLVChangeEvent
@$xp$23Comctrls@TLVEditedEvent
@$xp$23Comctrls@TLVNotifyEvent
@$xp$23Comctrls@TMonthCalendar
@$xp$23Comctrls@TTVEditedEvent
@$xp$23Comctrls@TUDAlignButton
@$xp$23Comctrls@TUDOrientation
@$xp$23Cspin@TTimerSpeedButton
@$xp$23Richview@TRVSaveOptions
@$xp$24Comctrls@TCommonCalendar
@$xp$24Comctrls@TCustomListView
@$xp$24Comctrls@TCustomRichEdit
@$xp$24Comctrls@TCustomTreeView
@$xp$24Comctrls@TDTCalAlignment
@$xp$24Comctrls@TDateTimePicker
@$xp$24Comctrls@TDrawPanelEvent
@$xp$24Comctrls@THeaderSections
@$xp$24Comctrls@TLVCompareEvent
@$xp$24Comctrls@TLVDeletedEvent
@$xp$24Comctrls@TLVEditingEvent
@$xp$24Comctrls@TLVInfoTipEvent
@$xp$24Comctrls@TMonthCalColors
@$xp$24Comctrls@TNodeAttachMode
@$xp$24Comctrls@TNumberingStyle
@$xp$24Comctrls@TParaAttributes
@$xp$24Comctrls@TTVChangedEvent
@$xp$24Comctrls@TTVCompareEvent
@$xp$24Comctrls@TTVEditingEvent
@$xp$24Comctrls@TTextAttributes
@$xp$25Comctrls@TConversionClass
@$xp$25Comctrls@TCustomDrawStage
@$xp$25Comctrls@TCustomDrawState
@$xp$25Comctrls@TIconArrangement
@$xp$25Comctrls@TLVChangingEvent
@$xp$25Comctrls@TLVDrawItemEvent
@$xp$25Comctrls@TListArrangement
@$xp$25Comctrls@TPageScrollEvent
@$xp$25Comctrls@TSearchDirection
@$xp$25Comctrls@TTVChangingEvent
@$xp$25Comctrls@TTVExpandedEvent
@$xp$25Comctrls@TToolButtonState
@$xp$25Comctrls@TToolButtonStyle
@$xp$25Comctrls@TUDChangingEvent
@$xp$25Comctrls@TUpDownDirection
@$xp$25Richview@TBackgroundStyle
@$xp$25Richview@TRVDblClickEvent
@$xp$25Richview@TRVDisplayOption
@$xp$25Richview@TScreenAndDevice
@$xp$26Comctrls@PConversionFormat
@$xp$26Comctrls@TConversionFormat
@$xp$26Comctrls@TCoolBandMaximize
@$xp$26Comctrls@TCustomDrawTarget
@$xp$26Comctrls@TCustomTabControl
@$xp$26Comctrls@TDrawSectionEvent
@$xp$26Comctrls@TLVOwnerDataEvent
@$xp$26Comctrls@TSectionDragEvent
@$xp$26Comctrls@TStatusPanelBevel
@$xp$26Comctrls@TStatusPanelStyle
@$xp$26Comctrls@TTVExpandingEvent
@$xp$26Comctrls@TTabChangingEvent
@$xp$26Comctrls@TTabGetImageEvent
@$xp$26Richview@TRVDisplayOptions
@$xp$26Richview@TRVMouseMoveEvent
@$xp$26Richview@TRVURLNeededEvent
@$xp$27Cdiroutl@TCDirectoryOutline
@$xp$27Comctrls@TDTParseInputEvent
@$xp$27Comctrls@TLVCustomDrawEvent
@$xp$27Comctrls@TLVSelectItemEvent
@$xp$27Comctrls@TListHotTrackStyle
@$xp$27Comctrls@TSectionTrackEvent
@$xp$27Comctrls@TSectionTrackState
@$xp$27Comctrls@TTBCustomDrawEvent
@$xp$27Comctrls@TTBCustomDrawFlags
@$xp$27Comctrls@TTVCollapsingEvent
@$xp$27Comctrls@TTVCustomDrawEvent
@$xp$27Comctrls@TToolBarDockObject
@$xp$27Comctrls@TUDChangingEventEx
@$xp$27Richview@TRVRightClickEvent
@$xp$28Comctrls@PRichEditStreamInfo
@$xp$28Comctrls@THeaderSectionStyle
@$xp$28Comctrls@TLVColumnClickEvent
@$xp$28Comctrls@TListHotTrackStyles
@$xp$28Comctrls@TPageScrollerButton
@$xp$28Comctrls@TRichEditStreamInfo
@$xp$28Comctrls@TSectionNotifyEvent
@$xp$29Comctrls@ECommonCalendarError
@$xp$29Comctrls@TConsistentAttribute
@$xp$29Comctrls@TLVColumnRClickEvent
@$xp$29Comctrls@TLVSubItemImageEvent
@$xp$29Comctrls@TOnGetMonthInfoEvent
@$xp$29Comctrls@TRichEditResizeEvent
@$xp$29Comctrls@TTrackBarOrientation
@$xp$30Comctrls@TConsistentAttributes
@$xp$30Comctrls@TLVOwnerDataFindEvent
@$xp$30Comctrls@TLVOwnerDataHintEvent
@$xp$30Comctrls@TTBCustomDrawBtnEvent
@$xp$30Comctrls@TToolButtonActionLink
@$xp$31Comctrls@TLVCustomDrawItemEvent
@$xp$31Comctrls@TRichEditProtectChange
@$xp$31Comctrls@TRichEditSaveClipboard
@$xp$31Comctrls@TTVCustomDrawItemEvent
@$xp$32Comctrls@TProgressBarOrientation
@$xp$33Comctrls@TPageScrollerButtonState
@$xp$33Comctrls@TPageScrollerOrientation
@$xp$34Comctrls@TLVCustomDrawSubItemEvent
@$xp$35Comctrls@TLVAdvancedCustomDrawEvent
@$xp$35Comctrls@TTBAdvancedCustomDrawEvent
@$xp$35Comctrls@TTVAdvancedCustomDrawEvent
@$xp$35Comctrls@TToolButtonActionLinkClass
@$xp$36Richview@TRVSaveComponentToFileEvent
@$xp$37Comctrls@TLVOwnerDataStateChangeEvent
@$xp$38Comctrls@TTBAdvancedCustomDrawBtnEvent
@$xp$39Comctrls@TLVAdvancedCustomDrawItemEvent
@$xp$39Comctrls@TTVAdvancedCustomDrawItemEvent
@$xp$42Comctrls@TLVAdvancedCustomDrawSubItemEvent
@$xp$7TCGauge
@$xp$9TTrayIcon
@@Basesocketprocessclass@Finalize
@@Basesocketprocessclass@Initialize
@@Basesocketprocessthread@Finalize
@@Basesocketprocessthread@Initialize
@@Ccalendr@Finalize
@@Ccalendr@Initialize
@@Cdiroutl@Finalize
@@Cdiroutl@Initialize
@@Cgauges@Finalize
@@Cgauges@Initialize
@@Cgrid@Finalize
@@Cgrid@Initialize
@@Cspin@Finalize
@@Cspin@Initialize
@@Filesavehelper@Finalize
@@Filesavehelper@Initialize
@@Fmmain@Finalize
@@Fmmain@Initialize
@@Fmprefap@Finalize
@@Fmprefap@Initialize
@@Fmpreftask@Finalize
@@Fmpreftask@Initialize
@@Fmreg@Finalize
@@Fmreg@Initialize
@@Fmtaskclientpref@Finalize
@@Fmtaskclientpref@Initialize
@@Fmtryother@Finalize
@@Fmtryother@Initialize
@@Fmwaitform@Finalize
@@Fmwaitform@Initialize
@@Formdebug@Finalize
@@Formdebug@Initialize
@@Frmwizard2@Finalize
@@Frmwizard2@Initialize
@@Generatepasswordclassbase@Finalize
@@Generatepasswordclassbase@Initialize
@@Generatepasswordclassbrute@Finalize
@@Generatepasswordclassbrute@Initialize
@@Generatepasswordclassbrutemasked@Finalize
@@Generatepasswordclassbrutemasked@Initialize
@@Generatepasswordclassdictionary@Finalize
@@Generatepasswordclassdictionary@Initialize
@@Passwordchecker@Finalize
@@Passwordchecker@Initialize
@@Passwordmask@Finalize
@@Passwordmask@Initialize
@@Perfgrap@Finalize
@@Perfgrap@Initialize
@@Searchpasswordthread@Finalize
@@Searchpasswordthread@Initialize
@@Settings@Finalize
@@Settings@Initialize
@@Taskbase@Finalize
@@Taskbase@Initialize
@@Taskbrute@Finalize
@@Taskbrute@Initialize
@@Taskbrutemasked@Finalize
@@Taskbrutemasked@Initialize
@@Taskdictionary@Finalize
@@Taskdictionary@Initialize
@@Taskinfo@Finalize
@@Taskinfo@Initialize
@@Taskprocessor@Finalize
@@Taskprocessor@Initialize
@@Taskprocessoreventhandlerbase@Finalize
@@Taskprocessoreventhandlerbase@Initialize
@@Taskprocessoreventhandlerofficepassword@Finalize
@@Taskprocessoreventhandlerofficepassword@Initialize
@@Tnumberedit@Finalize
@@Tnumberedit@Initialize
@@Trayicon@Finalize
@@Trayicon@Initialize
@@Trequest@Finalize
@@Trequest@Initialize
@@Tsocketclientqueue@Finalize
@@Tsocketclientqueue@Initialize
@@Tsocketserverqueue@Finalize
@@Tsocketserverqueue@Initialize
@@Unotinterface@Finalize
@@Unotinterface@Initialize
@@Ustructs@Finalize
@@Ustructs@Initialize
@@Uuisupportclasses@Finalize
@@Uuisupportclasses@Initialize
@@Uworkingthread@Finalize
@@Uworkingthread@Initialize
@@Visualtaskbase@Finalize
@@Visualtaskbase@Initialize
@@Visualtaskclient@Finalize
@@Visualtaskclient@Initialize
@@Visualtaskserver@Finalize
@@Visualtaskserver@Initialize
@Ccalendr@Register$qqrv
@Cdiroutl@Register$qqrv
@Cdiroutl@TCDirectoryOutline@
@Cdiroutl@TCDirectoryOutline@$bctr$qqrp18Classes@TComponent
@Cdiroutl@TCDirectoryOutline@APointer
@Cdiroutl@TCDirectoryOutline@AssignCaseProc$qqrv
@Cdiroutl@TCDirectoryOutline@BuildOneLevel$qqrl
@Cdiroutl@TCDirectoryOutline@BuildSubTree$qqrl
@Cdiroutl@TCDirectoryOutline@BuildTree$qqrv
@Cdiroutl@TCDirectoryOutline@Change$qqrv
@Cdiroutl@TCDirectoryOutline@Click$qqrv
@Cdiroutl@TCDirectoryOutline@CreateWnd$qqrv
@Cdiroutl@TCDirectoryOutline@CurDir$qv
@Cdiroutl@TCDirectoryOutline@DriveToInt$qqrc
@Cdiroutl@TCDirectoryOutline@Expand$qqri
@Cdiroutl@TCDirectoryOutline@ForceCase$qqrrx17System@AnsiString
@Cdiroutl@TCDirectoryOutline@GetChildNamed$qqrrx17System@AnsiStringl
@Cdiroutl@TCDirectoryOutline@InvalidIndex
@Cdiroutl@TCDirectoryOutline@Loaded$qqrv
@Cdiroutl@TCDirectoryOutline@RootIndex
@Cdiroutl@TCDirectoryOutline@SetDirectory$qqr17System@AnsiString
@Cdiroutl@TCDirectoryOutline@SetDrive$qqrc
@Cdiroutl@TCDirectoryOutline@SetTextCase$qqr18Cdiroutl@TTextCase
@Cdiroutl@TCDirectoryOutline@WalkTree$qqrrx17System@AnsiString
@Cgauges@Register$qqrv
@Cgrid@Register$qqrv
@Comctrls@CheckCommonControl$qqri
@Comctrls@CheckToolMenuDropdown$qqrp20Comctrls@TToolButton
@Comctrls@ECommonCalendarError@
@Comctrls@EDateTimeError@
@Comctrls@EMonthCalError@
@Comctrls@ETreeViewError@
@Comctrls@Finalization$qqrv
@Comctrls@GetComCtlVersion$qqrv
@Comctrls@InitCommonControl$qqri
@Comctrls@TAnimate@
@Comctrls@TAnimate@$bctr$qqrp18Classes@TComponent
@Comctrls@TAnimate@CMColorChanged$qqrr17Messages@TMessage
@Comctrls@TAnimate@CNCommand$qqrr19Messages@TWMCommand
@Comctrls@TAnimate@CanAutoSize$qqrrit1
@Comctrls@TAnimate@CheckOpen$qqrv
@Comctrls@TAnimate@CreateParams$qqrr22Controls@TCreateParams
@Comctrls@TAnimate@CreateWnd$qqrv
@Comctrls@TAnimate@DestroyWnd$qqrv
@Comctrls@TAnimate@DoClose$qqrv
@Comctrls@TAnimate@DoOpen$qqrv
@Comctrls@TAnimate@DoStart$qqrv
@Comctrls@TAnimate@DoStop$qqrv
@Comctrls@TAnimate@GetActualResHandle$qqrv
@Comctrls@TAnimate@GetActualResId$qqrv
@Comctrls@TAnimate@GetAnimateParams$qqrpv
@Comctrls@TAnimate@GetFrameInfo$qqrv
@Comctrls@TAnimate@InternalClose$qqrv
@Comctrls@TAnimate@InternalOpen$qqrv
@Comctrls@TAnimate@Loaded$qqrv
@Comctrls@TAnimate@Play$qqrususi
@Comctrls@TAnimate@Reset$qqrv
@Comctrls@TAnimate@Seek$qqrs
@Comctrls@TAnimate@SetActive$qqro
@Comctrls@TAnimate@SetAnimateParams$qqrpxv
@Comctrls@TAnimate@SetCenter$qqro
@Comctrls@TAnimate@SetCommonAVI$qqr19Comctrls@TCommonAVI
@Comctrls@TAnimate@SetFileName$qqr17System@AnsiString
@Comctrls@TAnimate@SetOpen$qqro
@Comctrls@TAnimate@SetRepetitions$qqri
@Comctrls@TAnimate@SetResHandle$qqrui
@Comctrls@TAnimate@SetResId$qqri
@Comctrls@TAnimate@SetResName$qqr17System@AnsiString
@Comctrls@TAnimate@SetStartFrame$qqrs
@Comctrls@TAnimate@SetStopFrame$qqrs
@Comctrls@TAnimate@SetTimers$qqro
@Comctrls@TAnimate@SetTransparent$qqro
@Comctrls@TAnimate@Stop$qqrv
@Comctrls@TAnimate@UpdateActiveState$qqrv
@Comctrls@TAnimate@WMNCCalcSize$qqrr22Messages@TWMNCCalcSize
@Comctrls@TAnimate@WMNCHitTest$qqrr21Messages@TWMNCHitTest
@Comctrls@TAnimate@WMNCPaint$qqrr17Messages@TMessage
@Comctrls@TAnimate@WMSize$qqrr16Messages@TWMSize
@Comctrls@TAnimate@WMWindowPosChanged$qqrr24Messages@TWMWindowPosMsg
@Comctrls@TCommonCalendar@
@Comctrls@TCommonCalendar@$bctr$qqrp18Classes@TComponent
@Comctrls@TCommonCalendar@$bdtr$qqrv
@Comctrls@TCommonCalendar@BoldDays$qqrpxuixirui
@Comctrls@TCommonCalendar@CheckEmptyDate$qqrv
@Comctrls@TCommonCalendar@CheckValidDate$qqr16System@TDateTime
@Comctrls@TCommonCalendar@CreateWnd$qqrv
@Comctrls@TCommonCalendar@DoStoreEndDate$qqrv
@Comctrls@TCommonCalendar@DoStoreMaxDate$qqrv
@Comctrls@TCommonCalendar@DoStoreMinDate$qqrv
@Comctrls@TCommonCalendar@GetCalStyles$qqrv
@Comctrls@TCommonCalendar@GetCalendarHandle$qqrv
@Comctrls@TCommonCalendar@GetDate$qqrv
@Comctrls@TCommonCalendar@MsgSetCalColors$qqri15Graphics@TColor
@Comctrls@TCommonCalendar@MsgSetDateTime$qqrrx11_SYSTEMTIME
@Comctrls@TCommonCalendar@MsgSetRange$qqrip11_SYSTEMTIME
@Comctrls@TCommonCalendar@SetCalColors$qqrp24Comctrls@TMonthCalColors
@Comctrls@TCommonCalendar@SetDate$qqr16System@TDateTime
@Comctrls@TCommonCalendar@SetDateTime$qqr16System@TDateTime
@Comctrls@TCommonCalendar@SetEndDate$qqr16System@TDateTime
@Comctrls@TCommonCalendar@SetFirstDayOfWeek$qqr22Comctrls@TCalDayOfWeek
@Comctrls@TCommonCalendar@SetMaxDate$qqr16System@TDateTime
@Comctrls@TCommonCalendar@SetMaxSelectRange$qqri
@Comctrls@TCommonCalendar@SetMinDate$qqr16System@TDateTime
@Comctrls@TCommonCalendar@SetMonthDelta$qqri
@Comctrls@TCommonCalendar@SetMultiSelect$qqro
@Comctrls@TCommonCalendar@SetRange$qqr16System@TDateTimet1
@Comctrls@TCommonCalendar@SetSelectedRange$qqr16System@TDateTimet1
@Comctrls@TCommonCalendar@SetShowToday$qqro
@Comctrls@TCommonCalendar@SetShowTodayCircle$qqro
@Comctrls@TCommonCalendar@SetWeekNumbers$qqro
@Comctrls@TConversion@
@Comctrls@TConversion@ConvertReadStream$qqrp15Classes@TStreampci
@Comctrls@TConversion@ConvertWriteStream$qqrp15Classes@TStreampci
@Comctrls@TCoolBand@
@Comctrls@TCoolBand@$bctr$qqrp19Classes@TCollection
@Comctrls@TCoolBand@$bdtr$qqrv
@Comctrls@TCoolBand@Assign$qqrp19Classes@TPersistent
@Comctrls@TCoolBand@BitmapChanged$qqrp14System@TObject
@Comctrls@TCoolBand@CoolBar$qqrv
@Comctrls@TCoolBand@GetDisplayName$qqrv
@Comctrls@TCoolBand@GetHeight$qqrv
@Comctrls@TCoolBand@GetVisible$qqrv
@Comctrls@TCoolBand@IsBitmapStored$qqrv
@Comctrls@TCoolBand@IsColorStored$qqrv
@Comctrls@TCoolBand@ParentBitmapChanged$qqrv
@Comctrls@TCoolBand@ParentColorChanged$qqrv
@Comctrls@TCoolBand@SetBitmap$qqrp16Graphics@TBitmap
@Comctrls@TCoolBand@SetBorderStyle$qqr22Forms@TFormBorderStyle
@Comctrls@TCoolBand@SetBreak$qqro
@Comctrls@TCoolBand@SetColor$qqr15Graphics@TColor
@Comctrls@TCoolBand@SetControl$qqrp20Controls@TWinControl
@Comctrls@TCoolBand@SetFixedBackground$qqro
@Comctrls@TCoolBand@SetFixedSize$qqro
@Comctrls@TCoolBand@SetHorizontalOnly$qqro
@Comctrls@TCoolBand@SetImageIndex$qqri
@Comctrls@TCoolBand@SetMinHeight$qqri
@Comctrls@TCoolBand@SetMinWidth$qqri
@Comctrls@TCoolBand@SetParentBitmap$qqro
@Comctrls@TCoolBand@SetParentColor$qqro
@Comctrls@TCoolBand@SetText$qqrx17System@AnsiString
@Comctrls@TCoolBand@SetVisible$qqro
@Comctrls@TCoolBand@SetWidth$qqri
@Comctrls@TCoolBands@
@Comctrls@TCoolBands@$bctr$qqrp17Comctrls@TCoolBar
@Comctrls@TCoolBands@Add$qqrv
@Comctrls@TCoolBands@FindBand$qqrp17Controls@TControl
@Comctrls@TCoolBands@GetItem$qqri
@Comctrls@TCoolBands@GetOwner$qqrv
@Comctrls@TCoolBands@HaveGraphic$qqrv
@Comctrls@TCoolBands@SetItem$qqrip18Comctrls@TCoolBand
@Comctrls@TCoolBands@Update$qqrp23Classes@TCollectionItem
@Comctrls@TCoolBar@
@Comctrls@TCoolBar@$bctr$qqrp18Classes@TComponent
@Comctrls@TCoolBar@$bdtr$qqrv
@Comctrls@TCoolBar@AlignControls$qqrp17Controls@TControlr13Windows@TRect
@Comctrls@TCoolBar@BeginUpdate$qqrv
@Comctrls@TCoolBar@BitmapChanged$qqrp14System@TObject
@Comctrls@TCoolBar@CMColorChanged$qqrr17Messages@TMessage
@Comctrls@TCoolBar@CMControlChange$qqrr25Controls@TCMControlChange
@Comctrls@TCoolBar@CMDesignHitTest$qqrr17Messages@TWMMouse
@Comctrls@TCoolBar@CMSysColorChange$qqrr17Messages@TMessage
@Comctrls@TCoolBar@CMSysFontChanged$qqrr17Messages@TMessage
@Comctrls@TCoolBar@CMWinIniChange$qqrr24Messages@TWMWinIniChange
@Comctrls@TCoolBar@CNBandChange$qqrr17Messages@TMessage
@Comctrls@TCoolBar@CNNotify$qqrr18Messages@TWMNotify
@Comctrls@TCoolBar@CanAutoSize$qqrrit1
@Comctrls@TCoolBar@Change$qqrv
@Comctrls@TCoolBar@CreateParams$qqrr22Controls@TCreateParams
@Comctrls@TCoolBar@CreateWnd$qqrv
Sections
Size: 377KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 920KB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 164KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
languages.dat
-
uninst.exe.nsis