746653ea9e8d4c40be5d208106d12ba6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

746653ea9e8d4c40be5d208106d12ba6_JaffaCakes118
Size

2.1MB
MD5

746653ea9e8d4c40be5d208106d12ba6
SHA1

e459529000d54d3353b47c02f80a5a4616037c59
SHA256

6932c2ab883d8b95e671731d2f1baa4d6b305cf0695db9c4a6621c3875e80b93
SHA512

d4d87be64f92cbfc04a0ac5629e80815a56df6fa4ff19c2588ae697c2b4dc210859a1a7a01fd5d7c14f0765ffbc4267e6e9a735d1ff350c1b16767ebd19c2842
SSDEEP

49152:GLl09Zm5VFhuVExOVBDC1Hcm/a0SparlnLOGgtFV+aRlzTF:GN5V3u4OVBDP08wlni7t5RlvF

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 3 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/Lenin_Script/dll/Band/band.dll	acprotect
static1/unpack001/Lenin_Script/dll/MOO.DLL	acprotect
static1/unpack001/Lenin_Script/dll/REGISTRY.DLL	acprotect

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Lenin_Script/dll/Band/band.dll	upx
static1/unpack001/Lenin_Script/dll/MOO.DLL	upx
static1/unpack001/Lenin_Script/dll/REGISTRY.DLL	upx

Unsigned PE 19 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Lenin_Script/dll/BARS.MDX
unpack001/Lenin_Script/dll/Band/band.dll
unpack001/Lenin_Script/dll/MOO.DLL
unpack003/out.upx
unpack001/Lenin_Script/dll/REGISTRY.DLL
unpack004/out.upx
unpack001/Lenin_Script/dll/color.dll
unpack001/Lenin_Script/dll/ctl_gen.mdx
unpack001/Lenin_Script/dll/dialog.mdx
unpack001/Lenin_Script/dll/dlls.dll
unpack001/Lenin_Script/dll/edll.dll
unpack001/Lenin_Script/dll/findfile.dll
unpack001/Lenin_Script/dll/mdx.dll
unpack001/Lenin_Script/dll/nHTMLn.dll
unpack001/Lenin_Script/dll/popups.dll
unpack001/Lenin_Script/dll/tbwin.dll
unpack001/Lenin_Script/dll/views.mdx
unpack001/Lenin_Script/lagbar/tbwin.dll
unpack001/Lenin_Script/mirc.exe

Files

746653ea9e8d4c40be5d208106d12ba6_JaffaCakes118
.rar
Lenin_Script/#Beginner - IRCops, Who they are, and What they do.htm
.html
Lenin_Script/#Beginner - IRCops, Who they are, and What they do_files/Thumbs.db
Lenin_Script/#Beginner - IRCops, Who they are, and What they do_files/ball-r.gif
.gif
Lenin_Script/#Beginner - IRCops, Who they are, and What they do_files/cor-gb2.jpg
.jpg
Lenin_Script/#Beginner - IRCops, Who they are, and What they do_files/cor-gt2.jpg
.jpg
Lenin_Script/#Beginner - IRCops, Who they are, and What they do_files/globe2tt.gif
.gif
Lenin_Script/#Beginner - IRCops, Who they are, and What they do_files/goose-sm3.jpg
.jpg
Lenin_Script/#Beginner - IRCops, Who they are, and What they do_files/logo6a.gif
.gif
Lenin_Script/#Beginner - IRCops, Who they are, and What they do_files/mseovert.js
Lenin_Script/#Beginner - IRCops, Who they are, and What they do_files/spacer.gif
.gif
Lenin_Script/#Beginner - IRCops, Who they are, and What they do_files/star-r.gif
.gif
Lenin_Script/#Beginner - IRCops, Who they are, and What they do_files/star.gif
.gif
Lenin_Script/#Beginner - IRCops, Who they are, and What they do_files/style.css
Lenin_Script/#Beginner - IRCops, Who they are, and What they do_files/tealline.gif
Lenin_Script/#Beginner - IRCops, Who they are, and What they do_files/vspacer.gif
.gif
Lenin_Script/Commands.htm
.html .js polyglot
Lenin_Script/Help/awaysys.htm
.html
Lenin_Script/Help/cmd.htm
.html
Lenin_Script/Help/config.htm
.html
Lenin_Script/Help/faq.htm
.html
Lenin_Script/Help/fservman.htm
.html
Lenin_Script/Help/mp3.htm
.html
Lenin_Script/Help/mts.htm
.html
Lenin_Script/Help/netman.htm
.html
Lenin_Script/Help/protections.htm
.html
Lenin_Script/Help/sockets.htm
.html
Lenin_Script/Help/userlist.htm
.html
Lenin_Script/Help/utilities.htm
.html
Lenin_Script/IRC Channel Modes List.htm
Lenin_Script/IRC Channel Modes List_files/tables.css
Lenin_Script/IRC Commands.htm
.html .js polyglot
Lenin_Script/IRC Commands_files/backgrnd.gif
.gif
Lenin_Script/IRC Commands_files/pdficonsm.jpg
.jpg
Lenin_Script/IRC Commands_files/standard.css
Lenin_Script/KC.dll
.vbs
Lenin_Script/MC.dll
.vbs
Lenin_Script/Oper IRCd Commands.htm
.html
Lenin_Script/Oper IRCd Commands_files/forum1.gif
Lenin_Script/Oper IRCd Commands_files/starg.gif
.gif
Lenin_Script/Oper IRCd Commands_files/whitemarb.jpg
.jpg
Lenin_Script/POPUPS.INI
Lenin_Script/Readme1st.txt
Lenin_Script/Scripts/Aliases/Alias.als
.js
Lenin_Script/Scripts/Aliases/ColorText.als
.js
Lenin_Script/Scripts/Aliases/Extra.als
.js
Lenin_Script/Scripts/Aliases/Last.als
.js
Lenin_Script/Scripts/Aliases/Various.als
.js
Lenin_Script/Scripts/Aliases/autotext.als
.js
Lenin_Script/Scripts/Aliases/colorWorld.als
.ps1
Lenin_Script/Scripts/Aliases/country.ini
Lenin_Script/Scripts/Aliases/misc.als
.js
Lenin_Script/Scripts/Remotes/Antiflood.mrc
Lenin_Script/Scripts/Remotes/ChanIRCop.mrc
.js
Lenin_Script/Scripts/Remotes/Games.mrc
Lenin_Script/Scripts/Remotes/Help.mrc
Lenin_Script/Scripts/Remotes/LogsManager.mrc
Lenin_Script/Scripts/Remotes/Nick-Memo.mrc
.js
Lenin_Script/Scripts/Remotes/Popup.mrc
Lenin_Script/Scripts/Remotes/Profanity.mrc
Lenin_Script/Scripts/Remotes/Protections.mrc
.js
Lenin_Script/Scripts/Remotes/RAW.mrc
.js
Lenin_Script/Scripts/Remotes/Reminder.mrc
.js
Lenin_Script/Scripts/Remotes/SelfProt.mrc
.ps1
Lenin_Script/Scripts/Remotes/Settings.mrc
.js
Lenin_Script/Scripts/Remotes/ToolBarAnnex.mrc
.js
Lenin_Script/Scripts/Remotes/afp-hlp.txt
Lenin_Script/Scripts/Remotes/ascii.mrc
.js
Lenin_Script/Scripts/Remotes/colors.mrc
.js
Lenin_Script/Scripts/Remotes/mp3.mrc
.js
Lenin_Script/Scripts/Remotes/nOZsense.mrc
Lenin_Script/Scripts/Remotes/nickComp.mrc
.js
Lenin_Script/Scripts/Remotes/script.mrc
.js
Lenin_Script/Scripts/Remotes/seen.mrc
Lenin_Script/Scripts/mscripts.ini
Lenin_Script/Scripts/nop.ini
Lenin_Script/Scripts/nop.mrc
Lenin_Script/Scripts/types.ini
Lenin_Script/Scripts/users.sco
Lenin_Script/Scripts/vars.sco
Lenin_Script/Services Commands.htm
.html
Lenin_Script/VERSIONS.TXT
Lenin_Script/aliases.ini
Lenin_Script/ascii/ASCII.TXT
Lenin_Script/ascii/BOMB.TXT
Lenin_Script/ascii/BUNNY.TXT
Lenin_Script/ascii/CASTLE.TXT
Lenin_Script/ascii/CAT.TXT
Lenin_Script/ascii/CAT2.TXT
Lenin_Script/ascii/CROSS.TXT
Lenin_Script/ascii/DRAGON.TXT
Lenin_Script/ascii/EAGLE.TXT
Lenin_Script/ascii/EAGLE2.TXT
Lenin_Script/ascii/FIRE.TXT
Lenin_Script/ascii/FISH.TXT
Lenin_Script/ascii/KISS.TXT
Lenin_Script/ascii/NYC.TXT
Lenin_Script/ascii/OPS.TXT
Lenin_Script/ascii/OWL.TXT
Lenin_Script/ascii/P&B1.TXT
Lenin_Script/ascii/PONY.TXT
Lenin_Script/ascii/PRAY.TXT
Lenin_Script/ascii/ROSE3.TXT
Lenin_Script/ascii/SEAHORSE.TXT
Lenin_Script/ascii/SNOWMAN.TXT
Lenin_Script/ascii/TIGGER.TXT
Lenin_Script/ascii/UNIVERSE.TXT
Lenin_Script/ascii/WOLF.TXT
Lenin_Script/ascii/WOLF2.TXT
Lenin_Script/bordem_net full commands.htm
.html .js polyglot
Lenin_Script/bordem_net full commands_files/ads.htm
.html
Lenin_Script/bordem_net full commands_files/bnlogo_4.png
.png
Lenin_Script/bordem_net full commands_files/i-1.htm
.html
Lenin_Script/bordem_net full commands_files/i-1_files/stylebn.css
Lenin_Script/bordem_net full commands_files/i-3.htm
.html
Lenin_Script/bordem_net full commands_files/i-3_files/stylebn.css
Lenin_Script/bordem_net full commands_files/show_ads.js
.js
Lenin_Script/bordem_net full commands_files/stbit_3.png
.png
Lenin_Script/bordem_net full commands_files/stvbit_2.png
.png
Lenin_Script/bordem_net full commands_files/stylebn.css
Lenin_Script/bordem_net full commands_files/tnav_about.png
.png
Lenin_Script/bordem_net full commands_files/tnav_forums.png
.png
Lenin_Script/bordem_net full commands_files/tnav_home.png
.png
Lenin_Script/bordem_net full commands_files/tnav_irc.png
.png
Lenin_Script/bordem_net full commands_files/tnav_left_2.png
.png
Lenin_Script/bordem_net full commands_files/tnav_right.png
.png
Lenin_Script/bordem_net full commands_files/tnav_vpn.png
.png
Lenin_Script/cc.dat
Lenin_Script/control.ini
Lenin_Script/dll/BARS.MDX
.dll windows:4 windows x86 arch:x86

99eee5c933b3e274b3f9aa164c57762c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

InvalidateRect
PostMessageA
SendMessageA
SetWindowLongA
DestroyIcon
CallWindowProcA
GetWindowLongA
DefWindowProcA
CreateWindowExA
DestroyWindow
GetKeyState
LoadIconA
GetClientRect
FillRect
LoadImageA
GetParent
EnableWindow

gdi32

GetObjectA
CreateBrushIndirect
DeleteDC
Rectangle
CreatePen
SelectObject
StretchBlt
BitBlt
CreateCompatibleDC
DeleteObject

shell32

ExtractIconExA

comctl32

ImageList_ReplaceIcon
ImageList_Add
ImageList_Replace
ImageList_Create
ImageList_Destroy
InitCommonControlsEx

msvcrt

??2@YAPAXI@Z
malloc
_adjust_fdiv
_initterm
free
_itoa
_stricmp
strncpy
__CxxFrameHandler
atoi
??3@YAXPAX@Z

kernel32

DisableThreadLibraryCalls

Exports

Exports

getMDXHeader

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lenin_Script/dll/Band/band.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

LoadDll
UnloadDll
band
cicon
color
hide
icon
isshow
menu
show
taskbar
title
version

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Lenin_Script/dll/MOO.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

connection
cpuinfo
diskcapacity
gfxinfo
interfaceinfo
mbm5info
meminfo
netcapacity
osinfo
rambar
screeninfo
uptime
version

Sections

UPX0
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lenin_Script/dll/REGISTRY.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DLLInfo
GetKeyType
GetKeyValue
GetSubKeyName
GetValueName

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lenin_Script/dll/color.dll
.dll windows:4 windows x86 arch:x86

307f6ce041b4742807da176fa552840b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
lstrcpyA

user32

MessageBoxA
wsprintfA

comdlg32

ChooseColorA

msvcrt

free
malloc
memset
_adjust_fdiv
_initterm

Exports

Exports

Color
DllInfo

Sections

.text
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lenin_Script/dll/ctl_gen.mdx
.dll windows:4 windows x86 arch:x86

36f31ad565ef7d1c14a9e5b079ac75ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
DisableThreadLibraryCalls
ReadFile
LoadLibraryA
CloseHandle
FreeLibrary

user32

PostMessageA
CallWindowProcA
GetScrollPos
LoadImageA
SetWindowPos
EnableWindow
GetScrollInfo
MoveWindow
DestroyWindow
SetCursor
UnregisterClassA
RegisterClassA
SendMessageA
GetCursorPos
ScreenToClient
DefWindowProcA
GetWindowLongA
SetWindowLongA
MessageBoxA
ClientToScreen
GetWindowRect
CreateWindowExA
GetParent
GetClientRect
GetSysColorBrush
FillRect
BeginPaint
GetSysColor
EndPaint
GetCursor
SetScrollPos
SetScrollInfo

gdi32

LineTo
MoveToEx
CreatePen
DeleteObject
SelectObject

comctl32

InitCommonControlsEx

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetMalloc

msvcrt

__dllonexit
_adjust_fdiv
malloc
_initterm
free
strchr
__CxxFrameHandler
??2@YAPAXI@Z
atoi
strncpy
wcslen
??3@YAXPAX@Z
_onexit
_stricmp
_itoa

Exports

Exports

getMDXHeader

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lenin_Script/dll/dialog.mdx
.dll windows:4 windows x86 arch:x86

252fa339fb91c0295d5e0b214a533f22

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls

user32

ClientToScreen
GetCursorPos
SendMessageA
SetParent
SetTimer
ChildWindowFromPoint
ScreenToClient
IsWindow
CallWindowProcA
PostMessageA
ShowWindow
GetClientRect
GetWindowRect
SetCapture
ReleaseCapture
RedrawWindow
GetParent
GetWindowLongA
SetWindowLongA
SetWindowPos
KillTimer
DefWindowProcA
RegisterWindowMessageA
GetSysColorBrush
FillRect

msvcrt

_strdup
_stricmp
_itoa
_adjust_fdiv
malloc
_initterm
__CxxFrameHandler
atoi
free
strncpy
??3@YAXPAX@Z
??2@YAPAXI@Z

Exports

Exports

getMDXHeader

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lenin_Script/dll/dlls.dll
.dll .js windows:1 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ini
name
nc
ncd

Sections

CODE
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 105B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lenin_Script/dll/edll.dll
.dll windows:4 windows x86 arch:x86

90ada8e0b4781f42f93ff46909622167

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapCreate
VirtualFree
SearchPathA
GetCommandLineA
GetVersion
InterlockedDecrement
InterlockedIncrement
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
RtlUnwind
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapAlloc
GetProcAddress
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA

user32

SetWindowTextA
IsWindow
SendMessageA
DestroyIcon

shell32

ExtractIconExA

Exports

Exports

SetIcon
Titlebar
_LoadDll@4
_UnloadDll@4

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lenin_Script/dll/findfile.dll
.dll windows:4 windows x86 arch:x86

93249d734980dc6fa995ed513202b3c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileType
lstrcatA
FindClose
WriteFile
FindNextFileA
CloseHandle
FindFirstFileA
CreateFileA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
RtlUnwind
LoadLibraryA
GetProcAddress
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
lstrcpyA
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP

user32

MessageBoxA
DlgDirListComboBoxA
IsWindow
GetDlgItem
DlgDirListA
wsprintfA
GetClassNameA

Exports

Exports

ComboList
DllInfo
LbList
TxtList

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lenin_Script/dll/mdx.dll
.dll windows:4 windows x86 arch:x86

34b86dab5c0b41a24220fe3732aef3a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MapViewOfFile
WaitForSingleObject
ReleaseMutex
CreateFileMappingA
UnmapViewOfFile
CloseHandle
GetProcAddress
SetLastError
GetModuleFileNameA
LoadLibraryA
GetLastError
FreeLibrary
GlobalSize
GlobalFree
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentProcessId
CreateMutexA

user32

SetWindowPos
GetWindowLongA
PostMessageA
DrawTextA
CreateWindowExA
SetWindowLongA
GetSysColorBrush
RedrawWindow
ChildWindowFromPointEx
GetParent
GetDlgCtrlID
GetWindowRect
ScreenToClient
MoveWindow
GetActiveWindow
SendMessageA
GetDlgItem
SetFocus
ShowWindow
InvalidateRgn
DestroyIcon
GetSysColor
CallWindowProcA
GetClientRect
GetClassNameA
EnumChildWindows
DestroyWindow
EnableWindow
MapWindowPoints
GetWindow
RegisterClipboardFormatA
LoadStringA

gdi32

DeleteDC
GetTextFaceA
GetTextMetricsA
SelectObject
CreateCompatibleDC
DeleteObject
GetObjectA
CreateFontIndirectA
CreateBrushIndirect
GetStockObject
GetBkColor
GetTextColor
SetTextColor
SetBkColor

shell32

ExtractIconExA
DragQueryFileA

ole32

ReleaseStgMedium

msvcrt

_initterm
_onexit
malloc
sprintf
vsprintf
__dllonexit
atoi
strtol
strncpy
_adjust_fdiv
_strdup
__CxxFrameHandler
??2@YAPAXI@Z
free
_stricmp
_itoa
??3@YAXPAX@Z

Exports

Exports

ControlFromPoint
ConvertCoords
DLLInfo
DynamicControl
ErrorInfo
GetFont
LoadDll
MarkDialog
MoveControl
Remove
SetBorderStyle
SetColor
SetControlMDX
SetDialog
SetFont
SetMDXStyle
SetMircVersion

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lenin_Script/dll/nHTMLn.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

LoadDll
UnloadDll
attach
back
caption
detach
egg
find
forward
handler
home
name
navigate
print
refresh
search
select
selected
stop
url
version

Sections

.text
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Lenin_Script/dll/popups.dll
.dll windows:4 windows x86 arch:x86

3a10814cb4c1ecb8f052f0ca2be9a655

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
LoadLibraryA
GetModuleFileNameA

user32

GrayStringA
DrawTextA
CreatePopupMenu
GetSysColorBrush
DrawFrameControl
GetMenuItemInfoA
DeleteMenu
SetMenuItemInfoA
DestroyMenu
FillRect
GetSysColor
SystemParametersInfoA
DefWindowProcA
UnregisterClassA
DestroyWindow
CreateWindowExA
ReleaseDC
RegisterClassA
LoadImageA
DestroyIcon
TrackPopupMenuEx
GetDC
InsertMenuItemA
DrawIconEx
GetMenuItemCount

gdi32

MoveToEx
StretchBlt
CreateBitmap
CreateFontIndirectA
GetStockObject
GetTextExtentPoint32A
SetBkMode
PatBlt
GetBkColor
SetTextColor
LineTo
DeleteObject
SetBkColor
BitBlt
CreateCompatibleDC
GetObjectA
CreateCompatibleBitmap
DeleteDC
CreatePen
SelectObject

shell32

ExtractIconExA

msvcrt

_stricmp
_itoa
_adjust_fdiv
malloc
_initterm
free
atoi
toupper
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z

Exports

Exports

AddItem
Destroy
GetProperty
LoadImg
New
Popup
Remove
RemoveItem
SetMetrics
SetProperty
SetStyle

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lenin_Script/dll/tbwin.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Attach
Detach
GetMouse
GetTBInfo
LoadDll
OnMouse
OnSize
Select
UnloadDll

Sections

CODE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 213B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lenin_Script/dll/views.mdx
.dll windows:4 windows x86 arch:x86

07056cc36c129798d605c78512f748e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetLastError
GlobalFree
GlobalLock
GlobalUnlock
GetCurrentProcessId

user32

CallWindowProcA
SendMessageA
SetTimer
InvalidateRect
KillTimer
LoadStringA
MapWindowPoints
DestroyIcon
RedrawWindow
DefWindowProcA
GetWindowLongA
PostMessageA
LoadIconA
UpdateWindow
GetScrollInfo
SetScrollInfo
ScreenToClient
SetWindowLongA
SetFocus
GetClientRect
MessageBoxA
GetSysColorBrush
FillRect
GetSysColor
GetFocus
GetCursorPos

gdi32

GetBkColor
SetTextColor
CreateDIBPatternBrushPt
SelectObject
PatBlt
CreateSolidBrush
DeleteObject
SetBkMode
SetBkColor
GetTextExtentPoint32A
Ellipse
CreateRectRgnIndirect
SelectClipRgn

shell32

DragQueryFileA
ExtractIconExA

comctl32

InitCommonControlsEx
ImageList_SetOverlayImage
ImageList_Remove
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy

ole32

OleUninitialize
OleInitialize
DoDragDrop
RevokeDragDrop
RegisterDragDrop
ReleaseStgMedium

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
strncpy
atoi
free
vsprintf
__CxxFrameHandler
malloc
_adjust_fdiv
_itoa
_initterm
_stricmp
_strnicmp
_strdup
_purecall

Exports

Exports

getMDXHeader

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lenin_Script/docs/1.txt
Lenin_Script/docs/10.txt
Lenin_Script/docs/11.txt
Lenin_Script/docs/2.txt
Lenin_Script/docs/3.txt
Lenin_Script/docs/4.txt
Lenin_Script/docs/5.txt
Lenin_Script/docs/6.txt
Lenin_Script/docs/7.txt
Lenin_Script/docs/8.txt
Lenin_Script/docs/8BALL.TXT
Lenin_Script/docs/9.txt
Lenin_Script/docs/ANNOYING.TXT
Lenin_Script/docs/Addict.txt
Lenin_Script/docs/Adict.txt
Lenin_Script/docs/Annoy.txt
Lenin_Script/docs/Aol.txt
Lenin_Script/docs/BADQUOTE.TXT
Lenin_Script/docs/BEERWOM.TXT
Lenin_Script/docs/BLONDES.TXT
Lenin_Script/docs/BLONDES1.TXT
Lenin_Script/docs/Badday.txt
Lenin_Script/docs/Beer.txt
Lenin_Script/docs/C0mp_Addict.txt
Lenin_Script/docs/CONDOM1.TXT
Lenin_Script/docs/Clowns.txt
Lenin_Script/docs/Condoms.txt
Lenin_Script/docs/Deep.txt
Lenin_Script/docs/Elevator.txt
Lenin_Script/docs/Insult.txt
Lenin_Script/docs/Kick.txt
Lenin_Script/docs/Mama.txt
Lenin_Script/docs/PICKUPS.TXT
Lenin_Script/docs/PICKUPS1.TXT
Lenin_Script/docs/Pick.txt
Lenin_Script/docs/RED.TXT
Lenin_Script/docs/SIGNS.TXT
Lenin_Script/docs/SONGS.TXT
Lenin_Script/docs/Sex.txt
Lenin_Script/docs/Sing.txt
Lenin_Script/docs/Stress.txt
Lenin_Script/docs/THINGS.TXT
Lenin_Script/docs/Thoughts.txt
Lenin_Script/docs/Virus.txt
Lenin_Script/docs/YOMAMA2.TXT
Lenin_Script/docs/YOMAMA3.TXT
Lenin_Script/docs/Yomama.txt
Lenin_Script/docs/conf.ini
Lenin_Script/docs/des.sco
Lenin_Script/docs/desp.sco
Lenin_Script/docs/diary.ini
Lenin_Script/docs/dictionary.ini
Lenin_Script/docs/est.ini
Lenin_Script/docs/kickeng.txt
Lenin_Script/docs/linhas.sco
Lenin_Script/docs/lol.txt
Lenin_Script/docs/midi.txt
Lenin_Script/docs/mp3.txt
Lenin_Script/docs/murphy.txt
Lenin_Script/docs/quit.txt
Lenin_Script/docs/rules.txt
Lenin_Script/docs/scp.ini
Lenin_Script/docs/scp2.ini
Lenin_Script/docs/start.mrc
Lenin_Script/docs/statments.txt
Lenin_Script/docs/strange.txt
Lenin_Script/docs/trojans.txt
Lenin_Script/docs/words.ini
Lenin_Script/docs/words2.ini
Lenin_Script/files.ini
Lenin_Script/finger.txt
Lenin_Script/img/CHAN.ICO
Lenin_Script/img/Thumbs.db
Lenin_Script/img/YIELD.ico
Lenin_Script/img/about.ico
Lenin_Script/img/ad.ico
Lenin_Script/img/adfile.ico
Lenin_Script/img/agenda.ico
Lenin_Script/img/autocor.bmp
Lenin_Script/img/autocor2.bmp
Lenin_Script/img/autocor3.bmp
Lenin_Script/img/autocor4.bmp
Lenin_Script/img/away.ico
Lenin_Script/img/brows.ico
Lenin_Script/img/brows0.ico
Lenin_Script/img/brows1.ico
Lenin_Script/img/brows2.ico
Lenin_Script/img/brows3.ico
Lenin_Script/img/brows4.ico
Lenin_Script/img/canal.jpg
.jpg
Lenin_Script/img/car.bmp
Lenin_Script/img/car2.bmp
Lenin_Script/img/cfg.ico
Lenin_Script/img/colors.icl
Lenin_Script/img/colors.ico
Lenin_Script/img/conf.ico
Lenin_Script/img/conv.ico
Lenin_Script/img/del.ico
Lenin_Script/img/emoticon.ico
Lenin_Script/img/hlp.ico
Lenin_Script/img/info.ico
Lenin_Script/img/lag.ico
Lenin_Script/img/logo.bmp
Lenin_Script/img/logs.ico
Lenin_Script/img/mid.ico
Lenin_Script/img/mp3.ico
Lenin_Script/img/mp3edit.bmp
Lenin_Script/img/nc.bmp
Lenin_Script/img/ncp.bmp
Lenin_Script/img/paint.ico
Lenin_Script/img/pref.bmp
Lenin_Script/img/proc.ico
Lenin_Script/img/prot.ico
Lenin_Script/img/pvt.bmp
Lenin_Script/img/quotes.ico
Lenin_Script/img/stats.ico
Lenin_Script/img/suf.bmp
Lenin_Script/img/themes.ico
Lenin_Script/img/tool.ico
Lenin_Script/img/txt.ico
Lenin_Script/img/wallpaper.jpg
.jpg
Lenin_Script/img/warning.ico
Lenin_Script/img/whiteboard.bmp
Lenin_Script/lagbar/lagbar.ini
.js
Lenin_Script/lagbar/readme-lagbar.txt
Lenin_Script/lagbar/tbwin.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Attach
Detach
GetMouse
GetTBInfo
LoadDll
OnMouse
OnSize
Select
UnloadDll

Sections

CODE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 213B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lenin_Script/logs/#Bangladesh.20100430.log
Lenin_Script/logs/#Bangladesh.20100501.log
Lenin_Script/mirc.FTS
Lenin_Script/mirc.exe
.exe windows:4 windows x86 arch:x86

bcad26832962a299c99085dbf5617031

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeEndPeriod
timeSetEvent
timeKillEvent
mciGetErrorStringA
timeGetDevCaps
mixerClose
mixerSetControlDetails
mciGetDeviceIDA
mciSendStringA
timeBeginPeriod
sndPlaySoundA
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen
mixerGetControlDetailsA

wsock32

recvfrom
sendto
getsockname
bind
WSACleanup
socket
listen
inet_addr
WSAAsyncGetHostByAddr
WSAAsyncGetHostByName
WSACancelAsyncRequest
ntohl
gethostname
recv
send
htons
connect
WSAGetLastError
accept
WSAAsyncSelect
shutdown
closesocket
ioctlsocket
htonl
setsockopt
WSASetLastError
WSAStartup
ntohs

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

mpr

WNetCloseEnum
WNetOpenEnumA
WNetEnumResourceA

comctl32

ImageList_AddMasked
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

kernel32

CreateEventA
GetSystemDefaultLangID
GetLocaleInfoA
GetSystemDefaultLCID
GetWindowsDirectoryA
GlobalFree
GlobalAlloc
GlobalUnlock
lstrcatA
lstrcpyA
lstrlenA
lstrcatW
lstrlenW
GlobalLock
lstrcpyW
GetVersionExA
QueryPerformanceCounter
QueryPerformanceFrequency
QueryDosDeviceA
GetFileType
CreateFileA
GetFileAttributesA
WinExec
WriteFile
MulDiv
FindClose
FindNextFileA
FindFirstFileA
GetModuleFileNameA
_lwrite
_lclose
_hwrite
GlobalSize
OpenFile
_hread
_llseek
_lopen
SetThreadPriority
GetCurrentProcess
GetCurrentThreadId
SetFilePointer
GetLastError
ReadFile
SetEndOfFile
FlushFileBuffers
WaitForSingleObject
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
SetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetLocalTime
lstrcmpA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
SetErrorMode
FindCloseChangeNotification
Sleep
FindNextChangeNotification
WaitForMultipleObjects
FindFirstChangeNotificationA
GetEnvironmentVariableA
GetShortPathNameA
CompareFileTime
GetFileTime
ReleaseMutex
CreateMutexA
GetTimeZoneInformation
LocalAlloc
LocalReAlloc
LocalFree
lstrcpynA
GetTempPathA
SizeofResource
GetSystemTimeAsFileTime
CreateThread
TlsGetValue
TlsSetValue
ExitThread
HeapFree
HeapAlloc
GetOEMCP
GetCPInfo
ExitProcess
GetModuleHandleA
TerminateProcess
RtlUnwind
LoadLibraryA
GetProcAddress
FreeLibrary
SetEvent
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
FindResourceA
LoadResource
LockResource
HeapReAlloc
GetTimeFormatA
GetDateFormatA
GetStartupInfoA
GetCommandLineA
EnterCriticalSection
SetConsoleCtrlHandler
DeleteFileA
MoveFileA
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TlsFree
SetLastError
TlsAlloc
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
SetEnvironmentVariableW
VirtualProtect
GetSystemInfo
VirtualQuery
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
RaiseException
InitializeCriticalSection
SetStdHandle
GetCurrentProcessId
HeapSize
CompareStringA
CompareStringW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
RemoveDirectoryA
GetACP
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetDiskFreeSpaceA
CreateDirectoryA

user32

DdeAccessData
DdeQueryStringA
DdeCreateDataHandle
DdeClientTransaction
DdeConnect
DdeCreateStringHandleA
DdeInitializeA
CallWindowProcA
SetKeyboardState
GetKeyboardState
ToAscii
ScrollDC
DrawIconEx
GetMessageA
GetWindowThreadProcessId
ClipCursor
FlashWindow
ShowScrollBar
CharLowerBuffA
CharLowerA
GetWindowDC
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
VkKeyScanA
GetKeyboardLayout
CopyAcceleratorTableA
MapVirtualKeyA
CallNextHookEx
GetCapture
GetSystemMetrics
SystemParametersInfoA
RedrawWindow
PeekMessageA
DefMDIChildProcA
GetMenuState
IsMenu
RemoveMenu
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuItemID
TrackPopupMenu
GetMenuCheckMarkDimensions
RegisterWindowMessageA
SetWindowsHookExA
LoadAcceleratorsA
DispatchMessageA
TranslateMessage
TranslateMDISysAccel
TranslateAcceleratorA
IsDialogMessageA
GetForegroundWindow
LoadMenuA
PostQuitMessage
DefFrameProcA
RegisterClassExA
UnhookWindowsHookEx
ChildWindowFromPoint
ValidateRect
InvertRect
DefWindowProcA
DrawFrameControl
RegisterClassA
CreateIconIndirect
FindWindowExA
FindWindowA
SetScrollInfo
EqualRect
DdeUnaccessData
WindowFromPoint
ScreenToClient
CreateMenu
SetActiveWindow
GetWindow
GetMenuStringA
GetCursorPos
GetFocus
GetAsyncKeyState
GetWindowLongA
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
EmptyClipboard
CloseClipboard
SetClipboardData
GetWindowTextLengthA
GetWindowTextA
WinHelpA
LoadStringA
MessageBeep
GetTopWindow
IsZoomed
GetActiveWindow
IsWindow
IsCharAlphaNumericA
GetDesktopWindow
IsIconic
GetDialogBaseUnits
SetDlgItemInt
GetDlgItemInt
GetSystemMenu
CheckMenuItem
LoadCursorA
SetCursor
CreatePopupMenu
DestroyMenu
GetMenu
GetSubMenu
GetMenuItemCount
DeleteMenu
AppendMenuA
DrawMenuBar
FrameRect
FillRect
DestroyIcon
LoadImageA
SetWindowTextA
GetClientRect
GetParent
DrawFocusRect
GetSysColor
CheckDlgButton
IsWindowEnabled
GetKeyState
IsDlgButtonChecked
BeginPaint
EndPaint
SendMessageA
LoadBitmapA
InvalidateRect
UpdateWindow
KillTimer
EndDialog
SetRect
SetFocus
PostMessageA
PtInRect
LoadIconA
DdeFreeDataHandle
DdeNameService
DdeUninitialize
DdeDisconnect
DdeFreeStringHandle
DialogBoxParamA
IsChild
InsertMenuA
ModifyMenuA
GetNextDlgTabItem
EnableMenuItem
ChildWindowFromPointEx
GetScrollPos
GetScrollRange
ClientToScreen
SetScrollPos
EnableWindow
ShowWindow
MoveWindow
SetWindowPos
SetTimer
wsprintfA
SetMenu
CreateWindowExA
SetScrollRange
GetIconInfo
DrawIcon
GetDlgCtrlID
DrawTextA
SetCapture
ReleaseCapture
GetWindowPlacement
SetWindowPlacement
BringWindowToTop
SetForegroundWindow
SendDlgItemMessageA
GetDC
GetDlgItem
GetWindowRect
MapWindowPoints
ReleaseDC
IsWindowVisible
CreateDialogParamA
DestroyWindow
GetClassNameA
CopyRect
SetWindowLongA

gdi32

CreateCompatibleBitmap
LineTo
MoveToEx
CreatePen
SelectClipRgn
CombineRgn
CreateRectRgn
GetNearestColor
GetDeviceCaps
GetTextExtentPointA
CreateFontIndirectA
GetDIBits
CreateDIBitmap
ExtFloodFill
CreatePatternBrush
Rectangle
RoundRect
StretchBlt
GetStockObject
SetROP2
SetBkMode
EnumFontFamiliesExA
GetTextCharset
PtInRegion
CreatePolygonRgn
Polyline
SetPixel
ExcludeClipRect
CreateBitmap
PatBlt
StretchDIBits
SetWindowOrgEx
GetObjectType
TextOutA
DeleteDC
SetStretchBltMode
SetBrushOrgEx
CreateCompatibleDC
BitBlt
GetObjectA
CreateFontA
CreateSolidBrush
CreateHatchBrush
GetTextMetricsA
SetTextColor
SetBkColor
ExtTextOutA
DeleteObject
SelectObject
Ellipse
GetPixel
SetPixelV

comdlg32

ChooseFontA
CommDlgExtendedError
GetOpenFileNameA
ChooseColorA

advapi32

RegEnumKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyA
RegSetValueA
RegCloseKey
RegOpenKeyExA

shell32

SHGetSpecialFolderLocation
Shell_NotifyIconA
SHBrowseForFolderA
SHFileOperationA
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetMalloc
DragQueryPoint
DragQueryFileA
DragFinish
ExtractIconExA
ExtractIconA
FindExecutableA
ShellExecuteA
DragAcceptFiles

ole32

ProgIDFromCLSID
CoCreateInstance
CLSIDFromProgID
OleInitialize
OleUninitialize

oleaut32

SetErrorInfo
LoadRegTypeLi
DispGetParam
VarR8FromCy
VarR8FromDate
VarCyFromR8
VarDateFromR8
VariantChangeType
SysAllocString
VariantClear
VariantInit
SysFreeString

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lenin_Script/mirc.ini
Lenin_Script/mircfaq.txt
Lenin_Script/portscan/data.ini
Lenin_Script/portscan/ps.txt
Lenin_Script/portscan/readme.txt
Lenin_Script/portscan/sys/Lenin`s
Lenin_Script/portscan/sys/data.ini
Lenin_Script/portscan/sys/ps.ico
Lenin_Script/readme.htm
.html
Lenin_Script/readme.txt
Lenin_Script/scanner/ServerMGM.mrc
Lenin_Script/scanner/scan.ico
Lenin_Script/scanner/scanner.mrc
Lenin_Script/scanner/script.ini
Lenin_Script/seen/MuNNi_AuS.ini
Lenin_Script/seen/OdhorA.ini
Lenin_Script/seen/Shamim.ini
Lenin_Script/seen/Shopno`Balika.ini
Lenin_Script/seen/SniGDHa6.ini
Lenin_Script/seen/SuMoN.ini
Lenin_Script/seen/THe`BoSs.ini
Lenin_Script/seen/[`_`].ini
Lenin_Script/seen/`NasriN`.ini
Lenin_Script/seen/aBRaR_CA.ini
Lenin_Script/seen/guest3545.ini
Lenin_Script/seen/jahazEE.ini
Lenin_Script/seen/scrawl76.ini
Lenin_Script/seen/tunix17.ini
Lenin_Script/seen/upset.ini
Lenin_Script/servers.ini
Lenin_Script/servscp.ini
Lenin_Script/sounds/Adpi.wav
Lenin_Script/sounds/CHIMES.WAV
Lenin_Script/sounds/Connect.wav
Lenin_Script/sounds/Disconnect.wav
Lenin_Script/sounds/Join.wav
Lenin_Script/sounds/Kicked.wav
Lenin_Script/sounds/Me.wav
Lenin_Script/sounds/NOTICE.WAV
Lenin_Script/sounds/Online.wav
Lenin_Script/sounds/PART.WAV
Lenin_Script/sounds/Pager.wav
Lenin_Script/sounds/RECYCLE.WAV
Lenin_Script/sounds/conec.wav
Lenin_Script/sounds/cuco.wav
Lenin_Script/sounds/disc.wav
Lenin_Script/sounds/fsent.wav
Lenin_Script/sounds/highlight.wav
Lenin_Script/sounds/kick.wav
Lenin_Script/sounds/kickby.wav
Lenin_Script/sounds/kickme.wav
Lenin_Script/sounds/msg.wav
Lenin_Script/sounds/ndito.wav
Lenin_Script/sounds/nick.mp3
Lenin_Script/sounds/open.wav
Lenin_Script/sounds/pvt.wav
Lenin_Script/sounds/riso.wav
Lenin_Script/themes/BACKGROUND.BMP
Lenin_Script/themes/Default/default.ini
Lenin_Script/themes/Default/menu.bmp
Lenin_Script/themes/Default/toolbar.bmp
Lenin_Script/themes/Mp3/Default Skin.ini
Lenin_Script/themes/Mp3/Garfield.ini
Lenin_Script/themes/Mp3/Skin for girls.ini
Lenin_Script/themes/Mp3/garf.jpg
.jpg
Lenin_Script/themes/Mp3/mp3pink.jpg
.jpg
Lenin_Script/themes/Mp3/thscp.jpg
.jpg
Lenin_Script/themes/blueicefu.bmp
Lenin_Script/themes/mIRC_Default/mIRC_default.ini
Lenin_Script/themes/ndprev.jpg
.jpg
Lenin_Script/urls.ini

Sharing

General

Malware Config

Signatures

Files

99eee5c933b3e274b3f9aa164c57762c

Headers

File Characteristics

Imports

user32

gdi32

shell32

comctl32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 32KB

UPX1 Size: 17KB - Virtual size: 20KB

UPX2 Size: 1024B - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 68KB

UPX1 Size: 32KB - Virtual size: 32KB

.rsrc Size: 2KB - Virtual size: 4KB

Headers

File Characteristics

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 28KB

UPX1 Size: 12KB - Virtual size: 12KB

UPX2 Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 2KB

307f6ce041b4742807da176fa552840b

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

msvcrt

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 576B

.rdata Size: 512B - Virtual size: 500B

.data Size: 512B - Virtual size: 212B

.reloc Size: 512B - Virtual size: 124B

36f31ad565ef7d1c14a9e5b079ac75ff

Headers

File Characteristics

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB

UPX0
Size: - Virtual size: 32KB

UPX1
Size: 17KB - Virtual size: 20KB

UPX2
Size: 1024B - Virtual size: 4KB

UPX0
Size: - Virtual size: 68KB

UPX1
Size: 32KB - Virtual size: 32KB

.rsrc
Size: 2KB - Virtual size: 4KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 4KB

UPX0
Size: - Virtual size: 28KB

UPX1
Size: 12KB - Virtual size: 12KB

UPX2
Size: 512B - Virtual size: 4KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 2KB

.text
Size: 1024B - Virtual size: 576B

.rdata
Size: 512B - Virtual size: 500B

.data
Size: 512B - Virtual size: 212B

.reloc
Size: 512B - Virtual size: 124B

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 5KB - Virtual size: 7KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

CODE
Size: 38KB - Virtual size: 38KB

DATA
Size: 1024B - Virtual size: 756B

BSS
Size: - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 105B

.reloc
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 5KB - Virtual size: 5KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 2KB