959901e9b3c67ab6ce4cb9d39da0b0aa_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

959901e9b3c67ab6ce4cb9d39da0b0aa_JaffaCakes118
Size

5.3MB
MD5

959901e9b3c67ab6ce4cb9d39da0b0aa
SHA1

1dc11a749feeb978783b80285f11fdca297db0a0
SHA256

20f8b45d691761fe77abc98d4cc177eeca5285508bede224998f238bf41a9f6d
SHA512

9d6e12fc79a635e9d67df86164e0c28171aecefed33e3e80295670d2d7378512a257b09009105d7bf9962f17ebe0c8f6ebc194a258d4ecfe82a18dea10d74e4e
SSDEEP

98304:jt76ZBFjJ7PMq/sgwrjZ20zYh7wGwgxclH+bKuuvv2U2jpQvfrm5MntI:B4l5h4k0zw77cVjuiJvzmStI

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/Puzzle_Blast.exe
unpack001/bass.dll
unpack001/mysearch.exe

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_1

Files

959901e9b3c67ab6ce4cb9d39da0b0aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a3b0ee1fb29253dbfbd34b387e7a55c9

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

29-01-1996 00:00

Not After

01-08-2028 23:59

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:7f:35:38:f5:70:ab:cb:ce:0f:b2:d5:92:4d:06:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

05-01-2007 00:00

Not After

26-01-2008 23:59

Subject

CN=Traffix Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Traffix Inc,O=Traffix Inc,L=Pearl River,ST=New York,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

b4:52:c1:46:85:de:42:d9:d7:74:d5:50:5b:60:71:50:d3:ba:0b:0c
Signer

Actual PE Digest

b4:52:c1:46:85:de:42:d9:d7:74:d5:50:5b:60:71:50:d3:ba:0b:0c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
ExitProcess
lstrcpynA
GetCommandLineA
GetWindowsDirectoryA
SetFileTime
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
lstrcatA
GetSystemDirectoryA
CloseHandle
lstrcmpiA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
MulDiv
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
CreateWindowExA
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
CreateDialogParamA
EmptyClipboard
DestroyWindow
SetWindowLongA
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
GetDlgItem

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

86432b68c00c46c881124313dd174259

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
lstrlenA
WritePrivateProfileStringA
lstrcatA
GlobalFree
GetPrivateProfileIntA
MultiByteToWideChar
lstrcmpiA
GetModuleHandleA
GlobalAlloc
GetPrivateProfileStringA
lstrcpynA

user32

GetWindowLongA
DrawTextA
SetCursor
LoadCursorA
PtInRect
MapWindowPoints
GetDlgCtrlID
DestroyIcon
DrawFocusRect
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
SetWindowLongA
GetClientRect
LoadIconA
LoadImageA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
EnableWindow
GetDlgItem
CallWindowProcA
PostMessageA
wsprintfA
SendMessageA
SetWindowTextA
GetWindowTextA
MessageBoxA
CharNextA
DestroyWindow

gdi32

SetTextColor
DeleteObject

comdlg32

GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListA

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/MySearch.bmp"
$PLUGINSDIR/dialog.ini
$PLUGINSDIR/gamefiesta.bmp"
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
Images/Thumbs.db
Images/arrow.gif
.gif
Images/bottom4.gif
.gif
Images/buy.gif
.gif
Images/gf_wrapper_01.gif
.gif
Images/gf_wrapper_03.gif
.gif
Images/gf_wrapper_05.gif
.gif
Images/gf_wrapper_07.gif
.gif
Images/gf_wrapper_12.gif
.gif
Images/gf_wrapper_25.gif
.gif
Images/header.gif
.gif
Images/key.gif
.gif
Images/lside3.gif
.gif
Images/main.gif
.gif
Images/play.gif
.gif
Images/side.gif
.gif
Images/ss1.gif
.gif
Images/ss2.gif
.gif
Puzzle_Blast.exe
.exe windows:4 windows x86 arch:x86

c6eb411f28df655f09219f51534351da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GlobalUnlock
GlobalLock
GlobalAlloc
GetTickCount
WideCharToMultiByte
IsBadReadPtr
GlobalAddAtomA
GlobalAddAtomW
GetModuleHandleA
GlobalFree
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalGetAtomNameW
FreeConsole
GetEnvironmentVariableA
VirtualProtect
VirtualAlloc
GetProcAddress
GetLastError
LoadLibraryA
SetLastError
SetThreadPriority
GetCurrentThread
CreateProcessA
GetCommandLineA
GetStartupInfoA
SetEnvironmentVariableA
ReleaseMutex
WaitForSingleObject
CreateMutexA
OpenMutexA
GetCurrentThreadId
ReadFile
GetFileSize
CreateFileA
FindClose
FindFirstFileA
FindFirstFileW
VirtualQueryEx
GetExitCodeProcess
ReadProcessMemory
UnmapViewOfFile
ContinueDebugEvent
SetThreadContext
GetThreadContext
WaitForDebugEvent
CloseHandle
DebugActiveProcess
ResumeThread
CreateProcessW
GetCommandLineW
GetStartupInfoW
MapViewOfFile
DuplicateHandle
GetCurrentProcess
CreateFileMappingA
VirtualProtectEx
WriteProcessMemory
ExitProcess
CompareStringA
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
CompareStringW
GetStringTypeA
MultiByteToWideChar
SetFilePointer
HeapReAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapFree
HeapAlloc
GetVersion
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
TerminateProcess
Sleep
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
InitializeCriticalSection
GetCurrentProcessId
GetModuleFileNameW
GetShortPathNameW
GetModuleFileNameA
SuspendThread
GetShortPathNameA

user32

GetDesktopWindow
MoveWindow
SetPropA
EnumThreadWindows
GetPropA
GetMessageA
BeginPaint
EndPaint
KillTimer
GetAsyncKeyState
GetSystemMetrics
SetTimer
SetWindowTextA
GetDlgItem
CreateDialogIndirectParamA
ShowWindow
UpdateWindow
LoadStringA
LoadStringW
FindWindowA
WaitForInputIdle
DestroyWindow
MessageBoxA
InSendMessage
UnpackDDElParam
FreeDDElParam
DefWindowProcA
LoadCursorA
RegisterClassW
CreateWindowExW
RegisterClassA
CreateWindowExA
GetWindowThreadProcessId
SendMessageW
PeekMessageA
TranslateMessage
DispatchMessageA
EnumWindows
IsWindowUnicode
PackDDElParam
PostMessageW
PostMessageA
IsWindow
SendMessageA

gdi32

DeleteDC
RealizePalette
SelectPalette
CreateDCA
CreatePalette
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
CreateDIBitmap

Sections

.text
Size: - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 260KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 52KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 40KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 280KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Puzzle_Blast.ico
bass.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetEAXMix
BASS_ChannelGetInfo
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelResume
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetLength
BASS_MusicGetName
BASS_MusicGetVolume
BASS_MusicLoad
BASS_MusicPlay
BASS_MusicPlayEx
BASS_MusicPreBuf
BASS_MusicSetAmplify
BASS_MusicSetPanSep
BASS_MusicSetPositionScaler
BASS_MusicSetVolume
BASS_Pause
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SamplePlay
BASS_SamplePlay3D
BASS_SamplePlay3DEx
BASS_SamplePlayEx
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamGetLength
BASS_StreamGetTags
BASS_StreamPlay
BASS_StreamPreBuf
BASS_Update
_

Sections

Size: 91KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bin/dekovirLogo.tga
bin/mmspts.bin
bin/p0.rec
curBg.tga
gfx/Bin_icon.tga
gfx/Bomb_icon.tga
gfx/UI/Dots/bigDotHighlited.tga
gfx/UI/Dots/bigDotSelected.tga
gfx/UI/Dots/d01.tga
gfx/UI/Dots/d02.tga
gfx/UI/Dots/d03.tga
gfx/UI/Dots/d04.tga
gfx/UI/Dots/d05.tga
gfx/UI/Dots/d06.tga
gfx/UI/Dots/d07.tga
gfx/UI/Dots/d08.tga
gfx/UI/Dots/d09.tga
gfx/UI/Dots/d10.tga
gfx/UI/Dots/dotActive.tga
gfx/UI/Dots/dotGrey.tga
gfx/UI/Dots/smallDotHighlited.tga
gfx/UI/Dots/smallDotSelected.tga
gfx/UI/Fast+.tga
gfx/UI/Fast.tga
gfx/UI/MAPgrey2.JPG
.jpg
gfx/UI/PAUSED.jpg
.jpg
gfx/UI/alreadyPaid+.tga
gfx/UI/alreadyPaid.tga
gfx/UI/bg.txt
gfx/UI/bg/bg1.jpg
.jpg
gfx/UI/bg/bg2.jpg
.jpg
gfx/UI/bg/bg3.jpg
.jpg
gfx/UI/bg/bg4.jpg
.jpg
gfx/UI/bg/bg5.jpg
.jpg
gfx/UI/bg/bg6.jpg
.jpg
gfx/UI/cancel+.JPG
.jpg
gfx/UI/cancel.JPG
.jpg
gfx/UI/checkStick.tga
gfx/UI/continueButton-.jpg
.jpg
gfx/UI/continueButton.jpg
.jpg
gfx/UI/creditsButton-.jpg
.jpg
gfx/UI/creditsButton.jpg
.jpg
gfx/UI/done2+.jpg
.jpg
gfx/UI/done2.jpg
.jpg
gfx/UI/easy+.jpg
.jpg
gfx/UI/exit+.JPG
.jpg
gfx/UI/exit.JPG
.jpg
gfx/UI/fullscreen2.jpg
.jpg
gfx/UI/gamebg.jpg
.jpg
gfx/UI/gm_exit.tga
gfx/UI/gm_help.tga
gfx/UI/gm_options.tga
gfx/UI/gm_pause.tga
gfx/UI/go.JPG
.jpg
gfx/UI/h/1.JPG
.jpg
gfx/UI/h/2.JPG
.jpg
gfx/UI/h/3.JPG
.jpg
gfx/UI/h/4.JPG
.jpg
gfx/UI/h/5.JPG
.jpg
gfx/UI/h/6.JPG
.jpg
gfx/UI/h/7.JPG
.jpg
gfx/UI/hard+.jpg
.jpg
gfx/UI/m/buynow-.JPG
.jpg
gfx/UI/m/buynow.JPG
.jpg
gfx/UI/m/exit.JPG
.jpg
gfx/UI/m/help.JPG
.jpg
gfx/UI/m/highscores.JPG
.jpg
gfx/UI/m/main.jpg
.jpg
gfx/UI/m/options.JPG
.jpg
gfx/UI/m/start.JPG
.jpg
gfx/UI/moreGames+.tga
gfx/UI/moreGames.tga
gfx/UI/no+.jpg
.jpg
gfx/UI/no-.jpg
.jpg
gfx/UI/normal+.jpg
.jpg
gfx/UI/ok+.jpg
.jpg
gfx/UI/ok-.jpg
.jpg
gfx/UI/options2.jpg
.jpg
gfx/UI/saveAndExit+.JPG
.jpg
gfx/UI/saveAndExit.JPG
.jpg
gfx/UI/skillStick.tga
gfx/UI/sliderRunner.tga
gfx/UI/sliderRunner2.tga
gfx/UI/yes+.jpg
.jpg
gfx/UI/yes-.jpg
.jpg
gfx/circle.tga
gfx/dialog/b7-2.jpg
.jpg
gfx/dialog/sg.JPG
.jpg
gfx/dialog/sv.JPG
.jpg
gfx/dialog/u2.tga
gfx/ef/p01.tga
gfx/ef/star01.tga
gfx/ef/star02.tga
gfx/ef/star03.tga
gfx/ef/star04.tga
gfx/effects.txt
gfx/extra/rapidBar.tga
gfx/extra/rapidBar_full.tga
gfx/extra/xMult.tga
gfx/fonts/a10.font
gfx/fonts/a10.tga
gfx/fonts/crazyGarold10.font
gfx/fonts/crazyGarold10.tga
gfx/fonts/crazyGarold14.font
gfx/fonts/crazyGarold14.tga
gfx/fonts/crazyGarold_digit22.font
gfx/fonts/crazyGarold_digit22.tga
gfx/fonts/goya.font
gfx/fonts/goya.tga
gfx/gem_blue.tga
gfx/gem_disappear1.tga
gfx/gem_disappear4.tga
gfx/gem_green.tga
gfx/gem_red.tga
gfx/gem_violet.tga
gfx/gem_white.tga
gfx/idol_1.tga
gfx/idol_2.tga
gfx/idol_3.tga
gfx/idol_4.tga
gfx/idol_h.tga
gfx/logo/SplashGamefiesta.tga
gfx/logo/gamefiestaLogo.tga
gfx/logo/logo.txt
gfx/logo/splashLogo.txt
gfx/ring.tga
gfx/ring_h2.tga
gfx/rings/tcon_10_0.tga
gfx/rings/tcon_10_1.tga
gfx/rings/tcon_10_2.tga
gfx/rings/tcon_10_3.tga
gfx/rings/tcon_11_0.tga
gfx/rings/tcon_11_1.tga
gfx/rings/tcon_11_2.tga
gfx/rings/tcon_11_3.tga
gfx/rings/tcon_12_0.tga
gfx/rings/tcon_12_1.tga
gfx/rings/tcon_13_0.tga
gfx/rings/tcon_13_1.tga
gfx/rings/tcon_13_2.tga
gfx/rings/tcon_13_3.tga
gfx/rings/tcon_14_0.tga
gfx/rings/tcon_14_1.tga
gfx/rings/tcon_14_2.tga
gfx/rings/tcon_14_3.tga
gfx/rings/tcon_15_0.tga
gfx/rings/tcon_15_1.tga
gfx/rings/tcon_15_2.tga
gfx/rings/tcon_15_3.tga
gfx/rings/tcon_16_0.tga
gfx/rings/tcon_16_1.tga
gfx/rings/tcon_16_2.tga
gfx/rings/tcon_16_3.tga
gfx/rings/tcon_17_0.tga
gfx/rings/tcon_17_1.tga
gfx/rings/tcon_17_2.tga
gfx/rings/tcon_17_3.tga
gfx/rings/tcon_18_0.tga
gfx/rings/tcon_18_1.tga
gfx/rings/tcon_18_2.tga
gfx/rings/tcon_18_3.tga
gfx/rings/tcon_19_0.tga
gfx/rings/tcon_19_1.tga
gfx/rings/tcon_19_2.tga
gfx/rings/tcon_19_3.tga
gfx/rings/tcon_1_0.tga
gfx/rings/tcon_1_1.tga
gfx/rings/tcon_20_0.tga
gfx/rings/tcon_20_1.tga
gfx/rings/tcon_20_2.tga
gfx/rings/tcon_20_3.tga
gfx/rings/tcon_21_0.tga
gfx/rings/tcon_21_1.tga
gfx/rings/tcon_21_2.tga
gfx/rings/tcon_21_3.tga
gfx/rings/tcon_22_0.tga
gfx/rings/tcon_22_1.tga
gfx/rings/tcon_22_2.tga
gfx/rings/tcon_22_3.tga
gfx/rings/tcon_23_0.tga
gfx/rings/tcon_23_1.tga
gfx/rings/tcon_23_2.tga
gfx/rings/tcon_23_3.tga
gfx/rings/tcon_24_0.tga
gfx/rings/tcon_24_1.tga
gfx/rings/tcon_24_2.tga
gfx/rings/tcon_24_3.tga
gfx/rings/tcon_25_0.tga
gfx/rings/tcon_26_0.tga
gfx/rings/tcon_26_1.tga
gfx/rings/tcon_26_2.tga
gfx/rings/tcon_26_3.tga
gfx/rings/tcon_2_0.tga
gfx/rings/tcon_2_1.tga
gfx/rings/tcon_3_0.tga
gfx/rings/tcon_3_1.tga
gfx/rings/tcon_3_2.tga
gfx/rings/tcon_3_3.tga
gfx/rings/tcon_4_0.tga
gfx/rings/tcon_4_1.tga
gfx/rings/tcon_5_0.tga
gfx/rings/tcon_5_1.tga
gfx/rings/tcon_5_2.tga
gfx/rings/tcon_5_3.tga
gfx/rings/tcon_6_0.tga
gfx/rings/tcon_6_1.tga
gfx/rings/tcon_7_0.tga
gfx/rings/tcon_7_1.tga
gfx/rings/tcon_7_2.tga
gfx/rings/tcon_7_3.tga
gfx/rings/tcon_8_0.tga
gfx/rings/tcon_8_1.tga
gfx/rings/tcon_8_2.tga
gfx/rings/tcon_8_3.tga
gfx/rings/tcon_9_0.tga
gfx/rings/tcon_9_1.tga
gfx/shine3.tga
gfx/thumb_2_0.tga
gfx/thumb_3_0.tga
gfx/thumb_4_0.tga
gfx/thumb_5_0.tga
levels/add/add001.JPG
.jpg
levels/add/add002.JPG
.jpg
levels/add/add003.JPG
.jpg
levels/add/add004.JPG
.jpg
levels/add/add005.JPG
.jpg
levels/add/add006.JPG
.jpg
levels/add/add007.jpg
.jpg
levels/add/add008.JPG
.jpg
levels/add/add009.JPG
.jpg
levels/add/add010.JPG
.jpg
levels/add/add011.JPG
.jpg
levels/add/add012.JPG
.jpg
levels/add/add013.JPG
.jpg
levels/add/add014.JPG
.jpg
levels/add/add015.JPG
.jpg
levels/add/add016.JPG
.jpg
levels/add/add017.JPG
.jpg
levels/add/add018.JPG
.jpg
levels/add/add019.JPG
.jpg
levels/add/add020.JPG
.jpg
levels/add/add021.JPG
.jpg
levels/add/add022.JPG
.jpg
levels/add/add023.JPG
.jpg
levels/add/add024.JPG
.jpg
levels/add/add025.JPG
.jpg
levels/add/add026.JPG
.jpg
levels/add/add027.JPG
.jpg
levels/add/add028.JPG
.jpg
levels/add/add029.JPG
.jpg
levels/add/add030.JPG
.jpg
levels/add/add031.JPG
.jpg
levels/add/add032.JPG
.jpg
levels/add/add033.JPG
.jpg
levels/add/add034.JPG
.jpg
levels/add/add035.JPG
.jpg
levels/add/add036.JPG
.jpg
levels/add/add037.JPG
.jpg
levels/add/add038.JPG
.jpg
levels/add/add039.JPG
.jpg
levels/add/add040.JPG
.jpg
levels/add/add041.JPG
.jpg
levels/add/add042.JPG
.jpg
levels/add/add043.JPG
.jpg
levels/add/add044.JPG
.jpg
levels/add/add045.JPG
.jpg
levels/add/add046.JPG
.jpg
levels/add/add047.JPG
.jpg
levels/add/add048.JPG
.jpg
levels/add/add049.JPG
.jpg
levels/add/add050.JPG
.jpg
levels/add/add051.JPG
.jpg
levels/add/add052.JPG
.jpg
levels/add/add053.JPG
.jpg
levels/add/add054.JPG
.jpg
levels/add/add055.JPG
.jpg
levels/add/add056.JPG
.jpg
levels/add/add057.JPG
.jpg
levels/add/add058.JPG
.jpg
levels/add/add059.JPG
.jpg
levels/add/add060.JPG
.jpg
levels/add/add061.JPG
.jpg
levels/add/add062.JPG
.jpg
levels/add/add063.JPG
.jpg
levels/add/add064.JPG
.jpg
levels/add/add065.JPG
.jpg
levels/add/add066.JPG
.jpg
levels/add/add067.JPG
.jpg
levels/add/add068.JPG
.jpg
levels/add/add069.JPG
.jpg
levels/add/add070.JPG
.jpg
levels/add/add071.JPG
.jpg
levels/add/add072.JPG
.jpg
levels/add/add073.JPG
.jpg
levels/add/add074.JPG
.jpg
levels/add/add075.JPG
.jpg
levels/add/add076.JPG
.jpg
levels/add/add077.JPG
.jpg
levels/add/add078.JPG
.jpg
levels/add/add079.JPG
.jpg
levels/add/add080.JPG
.jpg
levels/add/add081.JPG
.jpg
levels/add/add082.JPG
.jpg
levels/add/add083.JPG
.jpg
levels/add/add084.JPG
.jpg
levels/add/add085.JPG
.jpg
levels/add/add086.JPG
.jpg
levels/add/add087.JPG
.jpg
levels/add/add088.JPG
.jpg
levels/add/add089.JPG
.jpg
levels/add/add090.JPG
.jpg
levels/add/add091.JPG
.jpg
levels/add/add092.JPG
.jpg
levels/add/add093.JPG
.jpg
levels/add/add094.JPG
.jpg
levels/add/add095.JPG
.jpg
levels/add/add096.JPG
.jpg
levels/add/add097.JPG
.jpg
levels/add/add098.JPG
.jpg
levels/add/add099.JPG
.jpg
levels/add/add100.JPG
.jpg
levels/lev/lev001.bin
levels/lev/lev002.bin
levels/lev/lev003.bin
levels/lev/lev004.bin
levels/lev/lev005.bin
levels/lev/lev006.bin
levels/lev/lev007.bin
levels/lev/lev008.bin
levels/lev/lev009.bin
levels/lev/lev010.bin
levels/lev/lev011.bin
levels/lev/lev012.bin
levels/lev/lev013.bin
levels/lev/lev014.bin
levels/lev/lev015.bin
levels/lev/lev016.bin
levels/lev/lev017.bin
levels/lev/lev018.bin
levels/lev/lev019.bin
levels/lev/lev020.bin
levels/lev/lev021.bin
levels/lev/lev022.bin
levels/lev/lev023.bin
levels/lev/lev024.bin
levels/lev/lev025.bin
levels/lev/lev026.bin
levels/lev/lev027.bin
levels/lev/lev028.bin
levels/lev/lev029.bin
levels/lev/lev030.bin
levels/lev/lev031.bin
levels/lev/lev032.bin
levels/lev/lev033.bin
levels/lev/lev034.bin
levels/lev/lev035.bin
levels/lev/lev036.bin
levels/lev/lev037.bin
levels/lev/lev038.bin
levels/lev/lev039.bin
levels/lev/lev040.bin
levels/lev/lev041.bin
levels/lev/lev042.bin
levels/lev/lev043.bin
levels/lev/lev044.bin
levels/lev/lev045.bin
levels/lev/lev046.bin
levels/lev/lev047.bin
levels/lev/lev048.bin
levels/lev/lev049.bin
levels/lev/lev050.bin
levels/lev/lev051.bin
levels/lev/lev052.bin
levels/lev/lev053.bin
levels/lev/lev054.bin
levels/lev/lev055.bin
levels/lev/lev056.bin
levels/lev/lev057.bin
levels/lev/lev058.bin
levels/lev/lev059.bin
levels/lev/lev060.bin
levels/lev/lev061.bin
levels/lev/lev062.bin
levels/lev/lev063.bin
levels/lev/lev064.bin
levels/lev/lev065.bin
levels/lev/lev066.bin
levels/lev/lev067.bin
levels/lev/lev068.bin
levels/lev/lev069.bin
levels/lev/lev070.bin
levels/lev/lev071.bin
levels/lev/lev072.bin
levels/lev/lev073.bin
levels/lev/lev074.bin
levels/lev/lev075.bin
levels/lev/lev076.bin
levels/lev/lev077.bin
levels/lev/lev078.bin
levels/lev/lev079.bin
levels/lev/lev080.bin
levels/lev/lev081.bin
levels/lev/lev082.bin
levels/lev/lev083.bin
levels/lev/lev084.bin
levels/lev/lev085.bin
levels/lev/lev086.bin
levels/lev/lev087.bin
levels/lev/lev088.bin
levels/lev/lev089.bin
levels/lev/lev090.bin
levels/lev/lev091.bin
levels/lev/lev092.bin
levels/lev/lev093.bin
levels/lev/lev094.bin
levels/lev/lev095.bin
levels/lev/lev096.bin
levels/lev/lev097.bin
levels/lev/lev098.bin
levels/lev/lev099.bin
levels/lev/lev100.bin
levels/mul/mul001.JPG
.jpg
levels/mul/mul002.JPG
.jpg
levels/mul/mul003.JPG
.jpg
levels/mul/mul004.JPG
.jpg
levels/mul/mul005.JPG
.jpg
levels/mul/mul006.JPG
.jpg
levels/mul/mul007.jpg
.jpg
levels/mul/mul008.JPG
.jpg
levels/mul/mul009.JPG
.jpg
levels/mul/mul010.JPG
.jpg
levels/mul/mul011.JPG
.jpg
levels/mul/mul012.JPG
.jpg
levels/mul/mul013.JPG
.jpg
levels/mul/mul014.JPG
.jpg
levels/mul/mul015.JPG
.jpg
levels/mul/mul016.JPG
.jpg
levels/mul/mul017.JPG
.jpg
levels/mul/mul018.JPG
.jpg
levels/mul/mul019.JPG
.jpg
levels/mul/mul020.JPG
.jpg
levels/mul/mul021.JPG
.jpg
levels/mul/mul022.JPG
.jpg
levels/mul/mul023.JPG
.jpg
levels/mul/mul024.JPG
.jpg
levels/mul/mul025.JPG
.jpg
levels/mul/mul026.JPG
.jpg
levels/mul/mul027.JPG
.jpg
levels/mul/mul028.JPG
.jpg
levels/mul/mul029.JPG
.jpg
levels/mul/mul030.JPG
.jpg
levels/mul/mul031.JPG
.jpg
levels/mul/mul032.JPG
.jpg
levels/mul/mul033.JPG
.jpg
levels/mul/mul034.JPG
.jpg
levels/mul/mul035.JPG
.jpg
levels/mul/mul036.JPG
.jpg
levels/mul/mul037.JPG
.jpg
levels/mul/mul038.JPG
.jpg
levels/mul/mul039.JPG
.jpg
levels/mul/mul040.JPG
.jpg
levels/mul/mul041.JPG
.jpg
levels/mul/mul042.JPG
.jpg
levels/mul/mul043.JPG
.jpg
levels/mul/mul044.JPG
.jpg
levels/mul/mul045.JPG
.jpg
levels/mul/mul046.JPG
.jpg
levels/mul/mul047.JPG
.jpg
levels/mul/mul048.JPG
.jpg
levels/mul/mul049.JPG
.jpg
levels/mul/mul050.JPG
.jpg
levels/mul/mul051.JPG
.jpg
levels/mul/mul052.JPG
.jpg
levels/mul/mul053.JPG
.jpg
levels/mul/mul054.JPG
.jpg
levels/mul/mul055.JPG
.jpg
levels/mul/mul056.JPG
.jpg
levels/mul/mul057.JPG
.jpg
levels/mul/mul058.JPG
.jpg
levels/mul/mul059.JPG
.jpg
levels/mul/mul060.JPG
.jpg
levels/mul/mul061.JPG
.jpg
levels/mul/mul062.JPG
.jpg
levels/mul/mul063.JPG
.jpg
levels/mul/mul064.JPG
.jpg
levels/mul/mul065.JPG
.jpg
levels/mul/mul066.JPG
.jpg
levels/mul/mul067.JPG
.jpg
levels/mul/mul068.JPG
.jpg
levels/mul/mul069.JPG
.jpg
levels/mul/mul070.JPG
.jpg
levels/mul/mul071.JPG
.jpg
levels/mul/mul072.JPG
.jpg
levels/mul/mul073.JPG
.jpg
levels/mul/mul074.JPG
.jpg
levels/mul/mul075.JPG
.jpg
levels/mul/mul076.JPG
.jpg
levels/mul/mul077.JPG
.jpg
levels/mul/mul078.JPG
.jpg
levels/mul/mul079.JPG
.jpg
levels/mul/mul080.JPG
.jpg
levels/mul/mul081.JPG
.jpg
levels/mul/mul082.JPG
.jpg
levels/mul/mul083.JPG
.jpg
levels/mul/mul084.JPG
.jpg
levels/mul/mul085.JPG
.jpg
levels/mul/mul086.JPG
.jpg
levels/mul/mul087.JPG
.jpg
levels/mul/mul088.JPG
.jpg
levels/mul/mul089.JPG
.jpg
levels/mul/mul090.JPG
.jpg
levels/mul/mul091.JPG
.jpg
levels/mul/mul092.JPG
.jpg
levels/mul/mul093.JPG
.jpg
levels/mul/mul094.JPG
.jpg
levels/mul/mul095.JPG
.jpg
levels/mul/mul096.JPG
.jpg
levels/mul/mul097.JPG
.jpg
levels/mul/mul098.JPG
.jpg
levels/mul/mul099.JPG
.jpg
levels/mul/mul100.JPG
.jpg
license.txt
log.txt
music/B_FLAME1.mo3
music/B_SKYCRS2.mo3
mysearch.exe
.exe windows:4 windows x86 arch:x86

8e94123333db965252f12f15d7658a6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
FreeLibrary
GetProcAddress
LoadLibraryExA
lstrcmpiA
DeleteFileA
SetFileAttributesA
lstrcatA
MoveFileA
lstrcpyA
GetShortPathNameA
SetThreadPriority
GetModuleHandleA
GetStartupInfoA
ExitProcess
GetCommandLineA
HeapAlloc
GetProcessHeap
HeapFree
GetLastError
SetLastError
GetSystemDirectoryA
GetCurrentDirectoryA
GetFileAttributesA
GetDriveTypeA
lstrcpynA
ReadFile
GetFileSize
GetUserDefaultLangID
CreateDirectoryA
EnumResourceNamesA
SetCurrentDirectoryA
RemoveDirectoryA
GetModuleFileNameA
GetWindowsDirectoryA
lstrlenA

user32

CharNextA
wsprintfA
MessageBoxA

advapi32

RegFlushKey
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
player.sav
rl.bin
sounds/Trash.ogg
sounds/counter1.wav
sounds/counter3.ogg
sounds/dis.ogg
sounds/drop2.wav
sounds/drop4.wav
sounds/dropEnd.ogg
sounds/explosion.ogg
sounds/highlight.ogg
sounds/pick1.wav
sounds/rotate2.ogg
stdOptions.bin
ui/Credits.ui
ui/HighScores.ui
ui/MapSelectLevel.ui
ui/QuitMainMenu.ui
ui/ResumeGame.ui
ui/TrialOver.ui
ui/empty.ui
ui/game.ui
ui/help.ui
ui/levelComplete.ui
ui/mainMenu.ui
ui/options.ui
ui/smallDots.txt
uninstall.exe.nsis
uninstall.ico
web.ico

Sharing

General

Malware Config

Signatures

Files

a3b0ee1fb29253dbfbd34b387e7a55c9

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

16:7f:35:38:f5:70:ab:cb:ce:0f:b2:d5:92:4d:06:4cCertificate

Extended Key Usages

Key Usages

b4:52:c1:46:85:de:42:d9:d7:74:d5:50:5b:60:71:50:d3:ba:0b:0cSigner

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 152KB

.ndata Size: - Virtual size: 36KB

.rsrc Size: 7KB - Virtual size: 8KB

86432b68c00c46c881124313dd174259

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 49KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

c6eb411f28df655f09219f51534351da

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: - Virtual size: 146KB

.rdata Size: - Virtual size: 17KB

.data Size: - Virtual size: 170KB

.text1 Size: 260KB - Virtual size: 320KB

.adata Size: 52KB - Virtual size: 64KB

.data1 Size: 40KB - Virtual size: 128KB

.pdata Size: 280KB - Virtual size: 320KB

.rsrc Size: 16KB - Virtual size: 16KB

Headers

File Characteristics

Exports

Exports

Sections

Size: 91KB - Virtual size: 312KB

.rsrc Size: 568B - Virtual size: 4KB

Size: - Virtual size: 8KB

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

16:7f:35:38:f5:70:ab:cb:ce:0f:b2:d5:92:4d:06:4c
Certificate

b4:52:c1:46:85:de:42:d9:d7:74:d5:50:5b:60:71:50:d3:ba:0b:0c
Signer

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 152KB

.ndata
Size: - Virtual size: 36KB

.rsrc
Size: 7KB - Virtual size: 8KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 49KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: - Virtual size: 146KB

.rdata
Size: - Virtual size: 17KB

.data
Size: - Virtual size: 170KB

.text1
Size: 260KB - Virtual size: 320KB

.adata
Size: 52KB - Virtual size: 64KB

.data1
Size: 40KB - Virtual size: 128KB

.pdata
Size: 280KB - Virtual size: 320KB

.rsrc
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 568B - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 524B

.rsrc
Size: 292KB - Virtual size: 290KB