a6d887684a89e2d9465c3cf1e40e471b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a6d887684a89e2d9465c3cf1e40e471b_JaffaCakes118
Size

4.3MB
MD5

a6d887684a89e2d9465c3cf1e40e471b
SHA1

63ab6408122198e6d0de1b54d2bf25da85e0f3b5
SHA256

a3cf73d296d5910dd7da2ff4effc66f206bb08bafe8ce3d5f89c7ba67716fb88
SHA512

c9c3a84e34253c580153d9fb1510ac89f9a2f3faebbfdbca1dd1a7a2edbda3bb645df389015cbc61023b752f9542b74fb64810cff5ee2b61ccd1d589bcaf7cc8
SSDEEP

98304:6jy3e5rXsUt5qUt7j4gbidIzZVmAL70GzEKIG3wgPLKH16zV:5Krc45vtgg+dI14AX0GzEOggTqUzV

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 7 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/Converter/NCTAudioEditor2.dll	aspack_v212_v242
static1/unpack001/Converter/NCTAudioFile2.dll	aspack_v212_v242
static1/unpack001/Converter/NCTAudioInformation2.dll	aspack_v212_v242
static1/unpack001/Converter/NCTAudioPlayer2.dll	aspack_v212_v242
static1/unpack001/Converter/NCTAudioRecord2.dll	aspack_v212_v242
static1/unpack001/Converter/NCTAudioTransform2.dll	aspack_v212_v242
static1/unpack001/Converter/NCTWMAFile2.dll	aspack_v212_v242

Unsigned PE 22 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Converter/All Media To Mp3 Converter Pro.exe
unpack001/Converter/NCTAudioEditor2.dll
unpack001/Converter/NCTAudioFile2.dll
unpack001/Converter/NCTAudioInformation2.dll
unpack001/Converter/NCTAudioPlayer2.dll
unpack001/Converter/NCTAudioRecord2.dll
unpack001/Converter/NCTAudioTransform2.dll
unpack001/Converter/NCTWMAFile2.dll
unpack001/Converter/QuickTime.ax
unpack001/Converter/WmaConvert.exe
unpack001/Converter/asfsipc.dll
unpack001/Converter/lame.exe
unpack001/Converter/lame_enc.dll
unpack001/Converter/libavidd-1.3.2.dll
unpack001/Converter/libfilefmt-1.4.4.dll
unpack001/Converter/libmcl-4.2.1.dll
unpack001/Converter/mpgfiltr.ax
unpack001/Converter/msvcr70.dll
unpack001/Converter/realmediasplitter/Release Unicode/RealMediaSplitter.ax
unpack001/Converter/realmediasplitter/Release/RealMediaSplitter.ax
unpack001/Converter/soft2cn．com汉化说明.exe
unpack001/Converter/wmaudsdk.dll

Files

a6d887684a89e2d9465c3cf1e40e471b_JaffaCakes118
.rar
Converter/!)卸载.bat
Converter/!)绿化.bat
Converter/All Media To Mp3 Converter Pro.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 437KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Converter/More/Audio.htm
.html
Converter/More/Business.htm
.html
Converter/More/Desktop.htm
.html
Converter/More/Excellence.htm
.html
Converter/More/Game.htm
.html
Converter/More/Internet.htm
.html
Converter/More/Multimedia.htm
.html
Converter/More/NewLive.htm
.html
Converter/More/Utilities.htm
.html
Converter/More/WebDeveloper.htm
.html
Converter/More/images/01.gif
.gif
Converter/More/images/02.gif
.gif
Converter/More/images/03.gif
.gif
Converter/More/images/04.gif
.gif
Converter/More/images/05.gif
.gif
Converter/More/images/06.gif
.gif
Converter/More/images/07.gif
.gif
Converter/More/images/08.gif
.gif
Converter/More/images/09.gif
.gif
Converter/More/images/10.gif
.gif
Converter/More/images/Newlive.gif
.gif
Converter/More/images/bg.gif
.gif
Converter/More/images/excellencesoft.gif
.gif
Converter/More/images/realconvert.gif
Converter/More/images/style1.css
.html
Converter/More/more.htm
.html
Converter/NCTAudioEditor2.dll
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

Size: 140KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 278KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 13KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 121KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Converter/NCTAudioFile2.dll
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

Size: 253KB - Virtual size: 604KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 99KB - Virtual size: 972KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 15KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Converter/NCTAudioInformation2.dll
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

Size: 152KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 412KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 9KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 226KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Converter/NCTAudioPlayer2.dll
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

Size: 64KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 226KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Converter/NCTAudioRecord2.dll
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

Size: 65KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Converter/NCTAudioTransform2.dll
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

Size: 96KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Converter/NCTWMAFile2.dll
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

Size: 31KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 109KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Converter/Preview.bmp
Converter/QuickTime.ax
.dll regsvr32 windows:4 windows x86 arch:x86

673971d3f7e76599d0237548ab2bdfaf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_CxxThrowException
??3@YAXPAX@Z
_ftol
??2@YAPAXI@Z
??1type_info@@UAE@XZ
__CxxFrameHandler
_purecall
_wtoi

kernel32

lstrlenA
GetVersionExA
Sleep
CloseHandle
MultiByteToWideChar
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
SetEvent
WaitForSingleObject
GetACP
FreeLibrary
LoadLibraryA
InterlockedExchange
CreateThread
GetProcAddress
GetModuleHandleA
WideCharToMultiByte
ReleaseMutex
CreateMutexA
GetCurrentProcessId
GetSystemDirectoryA
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
CreateEventA
ResetEvent

advapi32

RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegSetValueA
RegQueryValueExA

user32

SetRectEmpty
wsprintfA
GetDC
ReleaseDC

gdi32

CreateDCA
DeleteDC
CreateDIBSection
SelectObject
SetMapMode
GetMapMode
DeleteObject
CreateCompatibleDC

ole32

CoInitialize
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Converter/SystemIco/0.ico
Converter/SystemIco/1.ico
Converter/SystemIco/10.ico
Converter/SystemIco/11.ico
Converter/SystemIco/12.ico
Converter/SystemIco/13.ico
Converter/SystemIco/14.ico
Converter/SystemIco/15.ico
Converter/SystemIco/16.ico
Converter/SystemIco/17.ico
Converter/SystemIco/18.ico
Converter/SystemIco/19.ico
Converter/SystemIco/2.ico
Converter/SystemIco/20.ico
Converter/SystemIco/21.ico
Converter/SystemIco/22.ico
Converter/SystemIco/23.ico
Converter/SystemIco/24.ico
Converter/SystemIco/25.ico
Converter/SystemIco/26.ico
Converter/SystemIco/27.ico
Converter/SystemIco/28.ico
Converter/SystemIco/29.ico
Converter/SystemIco/3.ico
Converter/SystemIco/30.ico
Converter/SystemIco/31.ico
Converter/SystemIco/32.ico
Converter/SystemIco/33.ico
Converter/SystemIco/34.ico
Converter/SystemIco/35.ico
Converter/SystemIco/4.ico
Converter/SystemIco/5.ico
Converter/SystemIco/6.ico
Converter/SystemIco/7.ico
Converter/SystemIco/8.ico
Converter/SystemIco/9.ico
Converter/SystemIco/Thumbs.db
Converter/Tada.wav
Converter/WmaConvert.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Converter/alltomp3.chm
.chm
Converter/asfsipc.dll
.dll regsvr32 windows:4 windows x86 arch:x86

c475ba23a063e42c1a528dde08a7f0d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
LoadLibraryA
FreeLibrary
SetLastError
MultiByteToWideChar
GetProcAddress

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

msvcrt

??3@YAXPAX@Z
free
_ftol
??2@YAPAXI@Z
memmove
_adjust_fdiv
_initterm
malloc

Exports

Exports

DllMain
DllRegisterServer
DllUnregisterServer
IsMyTypeOfFile
MySIPCreateIndirectData
MySIPGetSignedDataMsg
MySIPPutSignedDataMsg
MySIPRemoveSignedDataMsg
MySIPVerifyIndirectData

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Converter/lame.exe
.exe windows:4 windows x86 arch:x86

3a8c5984a1bee7d6fb146bd38e3cd2c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCursorPosition
GetConsoleScreenBufferInfo
GetFileType
GetCurrentProcess
GetSystemInfo
GetProcAddress
GetModuleHandleA
FindClose
FindFirstFileA
ExitProcess
TerminateProcess
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
SetHandleCount
GetStartupInfoA
GetLastError
FlushFileBuffers
WriteFile
ReadFile
SetFilePointer
CloseHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetStdHandle
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
RaiseException
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
CreateFileA
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetStringTypeA
GetStringTypeW
LoadLibraryA
SetEndOfFile
GetTimeZoneInformation
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA

Sections

.text
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Converter/lame_enc.dll
.dll windows:4 windows x86 arch:x86

3416d0b6a731a0482c17ba3536b85366

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA
GetModuleFileNameA
GetPrivateProfileIntA
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
HeapFree
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
RtlUnwind
GetLastError
CloseHandle
RaiseException
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetFilePointer
WriteFile
FlushFileBuffers
ReadFile
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
CreateFileA
GetStringTypeA
GetStringTypeW
GetCPInfo
LoadLibraryA
GetACP
GetOEMCP
SetEndOfFile

user32

MessageBoxA

Exports

Exports

beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beInitStream
beVersion
beWriteVBRHeader
lame_close
lame_encode_buffer_interleaved
lame_encode_flush
lame_init
lame_init_params
lame_mp3_tags_fid

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Converter/libavidd-1.3.2.dll
.dll windows:4 windows x86 arch:x86

1a094a98ec878c7d536ad1d631c5e5fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
_initterm
free
ceil
memmove
_ftol
floor
malloc
sprintf

kernel32

DisableThreadLibraryCalls
WaitForSingleObject
MultiByteToWideChar
CreateEventA
CloseHandle

ddraw

DirectDrawCreate

ole32

CoUninitialize
CoCreateInstance
CoInitialize

Exports

Exports

avidd_audio_info
avidd_audio_open
avidd_audio_read
avidd_close
avidd_video_info
avidd_video_open
avidd_video_read

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 995B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Converter/libfilefmt-1.4.4.dll
.dll windows:4 windows x86 arch:x86

f66677c6a735a88250b4ecbc2a7b0dc9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

gdi32

CreateBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject
SetPixel

kernel32

AddAtomA
CloseHandle
CreateFileA
CreateFileMappingA
FindAtomA
GetAtomNameA
GetFileSize
GlobalAlloc
GlobalFree
GlobalReAlloc
GlobalSize
LocalAlloc
LocalFree
MapViewOfFile
ReadFile
SetFilePointer
UnmapViewOfFile
WriteFile
lstrlenA

msvcrt

_close
_fdopen
_open
_read
_setmode
_stat
_strdup
_unlink
_write
__dllonexit
__mb_cur_max
_assert
_errno
_findclose
_findfirsti64
_iob
_isctype
_lseeki64
_open
_pclose
_pctype
_popen
_setjmp
_snprintf
_stricmp
_telli64
_tempnam
_vsnprintf
abort
acos
atan
atof
atoi
calloc
ceil
cos
cosh
exit
exp
fclose
ferror
fflush
floor
fopen
fprintf
fputc
fputs
fread
free
frexp
fscanf
fseek
ftell
fwrite
getc
getenv
gmtime
ldexp
localtime
log
longjmp
malloc
memchr
memcpy
memmove
memset
mktime
perror
printf
puts
qsort
rand
realloc
sin
sinh
sprintf
sqrt
srand
sscanf
strcat
strchr
strcmp
strcpy
strlen
strncmp
strncpy
strrchr
strstr
strtod
strtol
strtoul
tan
tanh
time
tmpnam
tolower
toupper
ungetc
vfprintf

user32

GetFocus
MessageBoxA
wsprintfA
wvsprintfA

Exports

Exports

CloseMPEG
EGifCloseFile
EGifOpenFileName
EGifPutImageDesc
EGifPutLine
EGifPutScreenDesc
ExternErrorSet
ExternWarningSet
GetMPEGFrame
GetMPEGFrameFirst
GetMPEGFrameFirstFree
GetMPEGInfo
MOSLErrorFuncSet
OpenMPEG
ReadXpm
SeekMPEG
TIFFClose
TIFFGetField
TIFFGetFieldDefaulted
TIFFNumberOfStrips
TIFFOpen
TIFFReadEncodedStrip
TIFFReadScanline
TIFFScanlineSize
TIFFSetField
TIFFStripSize
TIFFWriteScanline
WriteXpm
bbmpeg_close
bbmpeg_create
bbmpeg_set_aspect_ratio
bbmpeg_set_bitrate
bbmpeg_write
cine_close
cine_info
cine_open
cine_read
cine_seek
ffmpeg_audio_close
ffmpeg_audio_create
ffmpeg_audio_set_bitrate
ffmpeg_audio_write
ffmpeg_video_close
ffmpeg_video_create
ffmpeg_video_set_aspect_ratio
ffmpeg_video_set_bitrate
ffmpeg_video_write_bgr24
ffmpeg_video_write_rgb24
ffmpeg_video_write_yuv420
hav_audio_get_format
hav_audio_read
hav_audio_seek
hav_audio_set_format
hav_audio_write
hav_audio_write_ex
hav_close
hav_create
hav_handle_alloc
hav_handle_free
hav_open
hav_video_get_format
hav_video_get_palette
hav_video_read
hav_video_seek
hav_video_set_format
hav_video_write
hav_video_write_ex
info_JPEG_file
mpg_audio_close
mpg_audio_info
mpg_audio_open
mpg_audio_read
mpg_audio_seek
mpg_get_type
mpg_mplex
ogg_audio_get_info
ogg_audio_read
ogg_audio_seek
ogg_audio_write
ogg_close
ogg_create
ogg_open
ogg_video_write_bgr24
png_build_grayscale_palette
png_create_info_struct
png_create_read_struct
png_create_write_struct
png_destroy_read_struct
png_destroy_write_struct
png_get_IHDR
png_get_PLTE
png_get_channels
png_get_rowbytes
png_read_end
png_read_image
png_read_info
png_read_update_info
png_set_IHDR
png_set_PLTE
png_set_bgr
png_set_compression_level
png_set_packing
png_set_read_fn
png_set_strip_16
png_set_strip_alpha
png_set_write_fn
png_sig_cmp
png_write_end
png_write_image
png_write_info
read_JPEG_file
write_JPEG_file

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 972KB - Virtual size: 971KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 354KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Converter/libmcl-4.2.1.dll
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

MclAbort
MclAssignAudioFunc
MclAssignAudioSource
MclAssignError
MclAssignProgress
MclAssignVideoFunc
MclAssignVideoSource
MclAudioGetBitRate
MclAudioGetBytesWritten
MclAudioGetCodec
MclAudioGetFileFormat
MclAudioGetFileName
MclAudioGetFormat
MclAudioGetQuality
MclAudioGetTruncateToVideo
MclAudioHasCodecDlg
MclAudioSetBitRate
MclAudioSetCodec
MclAudioSetFileFormat
MclAudioSetFileName
MclAudioSetFormat
MclAudioSetQuality
MclAudioSetTruncateToVideo
MclAudioShowCodecDlg
MclAviAddCustomInfo
MclAviClearCustomInfo
MclAviGetCustomInfo
MclBayerGetHdr
MclBayerLoad
MclBayerToImg
MclBitsToBytes
MclBytesToBits
MclClearCanvas
MclClearErrors
MclCodecsAudioCreate
MclCodecsFree
MclCodecsGetCount
MclCodecsGetInfo
MclCodecsVideoCreate
MclConvert
MclCreate
MclDIBToImg
MclEnableMPEG2
MclEnableMPEG4
MclFourCC
MclFree
MclGetElapsedTime
MclGetError
MclGetErrorStr
MclGetFileFmt
MclGetFileInfo
MclGetRemainingTime
MclGetStatus
MclGetUserData
MclImgAddAlpha
MclImgAverageAdd
MclImgAverageClear
MclImgAverageGet
MclImgBorder
MclImgBrightness
MclImgChaos
MclImgClear
MclImgContrast
MclImgCopy
MclImgCreate
MclImgCrop
MclImgDeinterlace
MclImgEdgeEnhance
MclImgFindEdges
MclImgFlipHorizontal
MclImgFlipVertical
MclImgFree
MclImgGamma
MclImgGetInfo
MclImgGetPixelRGB
MclImgGetPixels
MclImgInsert
MclImgPixelize
MclImgRedim
MclImgRemap
MclImgRemapToCustomPalette
MclImgResample
MclImgResampleToFit
MclImgResize
MclImgRotate
MclImgSaturation
MclImgSetPixels
MclImgSharpen
MclImgShow
MclImgShowInRect
MclImgSkip
MclImgSoften
MclImgSolarize
MclImgText
MclImgToDIB
MclImgToDIBWin3
MclImgTraceContour
MclImgWhiteBalance
MclListAdd
MclListCreate
MclListFree
MclListGetAudioFormat
MclListGetFileCount
MclListGetFrameCount
MclListGetFrameRate
MclListGetName
MclListGetSampleCount
MclListGetVideoFormat
MclLogExtra
MclLogStart
MclLogStop
MclMakeTimeStr
MclMpegMultiplex
MclPixelReorder
MclRGB
MclReadAlpha
MclReadClose
MclReadImage
MclReadInfo
MclReadOpen
MclReadSound
MclRegister
MclReleaseDIB
MclReleaseDIBWin3
MclSetFormatPreset
MclSetUserData
MclSimpleConvert
MclSimpleReadFirstImage
MclSimpleReadImage
MclSimpleWriteImage
MclSndCopy
MclSndCreate
MclSndFree
MclSndGetInfo
MclSndGetSamples
MclSndResample
MclSndSetSamples
MclSourceFinished
MclSourceSetDIB
MclSourceSetDirection
MclSourceSetFile
MclSourceSetFrameRate
MclSourceSetImage
MclSourceSetLen
MclSourceSetLenTime
MclSourceSetPixels
MclSourceSetSamples
MclSourceSetSound
MclSourceSetStart
MclSourceSetStartTime
MclSourceSkip
MclSplitColor
MclTextCreate
MclTextFree
MclTextGetExtents
MclTextSetColor
MclTextSetFont
MclTextShadow
MclTiffGetTag
MclTiffSet16to8bitGrayRange
MclTranslate
MclTranslateClear
MclVideoAviCodecConfigDlg
MclVideoGetAspectRatio
MclVideoGetBitRate
MclVideoGetBytesWritten
MclVideoGetCodec
MclVideoGetCodecData
MclVideoGetDithering
MclVideoGetFileFormat
MclVideoGetFileName
MclVideoGetFormat
MclVideoGetFrameRate
MclVideoGetKeepDuration
MclVideoGetKeyFrameRate
MclVideoGetQuality
MclVideoHasCodecDlg
MclVideoSetAspectRatio
MclVideoSetBitRate
MclVideoSetCodec
MclVideoSetCodecData
MclVideoSetDithering
MclVideoSetFileFormat
MclVideoSetFileName
MclVideoSetFormat
MclVideoSetFrameRate
MclVideoSetKeepDuration
MclVideoSetKeyFrameRate
MclVideoSetQuality
MclVideoShowCodecDlg
MclWriteClose
MclWriteImage
MclWriteSound

Sections

CODE
Size: 624KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 277KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Converter/mpgfiltr.ax
.dll regsvr32 windows:4 windows x86 arch:x86

a0da83279cd3037b8edd217b6f45ac23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msacm32

acmStreamOpen
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmStreamConvert

quartz

AMGetErrorTextA

winmm

timeGetTime
timeSetEvent

msvcrt

_iob
??1type_info@@UAE@XZ
fseek
strstr
memcpy
abs
memset
exit
vfprintf
_vsnprintf
fputs
printf
fflush
calloc
_except_handler3
putc
modf
ceil
fread
fscanf
fopen
fclose
floor
fwrite
fprintf
time
localtime
wcslen
atol
free
_purecall
_CIpow
strrchr
sprintf
__CxxFrameHandler
_ftol
_strdup
_stat
_tempnam
_unlink
_open
_write
_close
??2@YAPAXI@Z
_strlwr
??3@YAXPAX@Z
malloc

kernel32

Sleep
CreateThread
lstrcatA
lstrcpynA
WriteFile
lstrcmpiA
SetErrorMode
VirtualFree
VirtualAlloc
GetSystemInfo
ReleaseSemaphore
GetCurrentProcess
DuplicateHandle
InterlockedDecrement
InterlockedIncrement
GetTickCount
WaitForMultipleObjects
GetCurrentThread
GetThreadPriority
SetThreadPriority
GetCurrentThreadId
GetACP
CreateSemaphoreA
GetModuleHandleA
InterlockedExchange
DisableThreadLibraryCalls
GetVersionExA
FlushFileBuffers
SetEndOfFile
GetFileInformationByHandle
WritePrivateProfileStringA
LeaveCriticalSection
ReadFile
lstrcpyA
ResetEvent
CreateEventA
SetFilePointer
SetEvent
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
OutputDebugStringA
GetCurrentProcessId
GetLastError
FormatMessageA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CloseHandle
GetFileSize
CreateFileA
CopyFileA
DeleteFileA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
WaitForSingleObject

user32

InvalidateRect
ShowWindow
DestroyWindow
DefWindowProcA
LoadStringA
LoadStringW
MoveWindow
GetQueueStatus
SetWindowLongA
MsgWaitForMultipleObjects
wvsprintfA
MessageBoxA
GetDesktopWindow
GetWindowRect
CreateDialogParamA
PostThreadMessageA
PostMessageA
SendMessageA
wsprintfA
PeekMessageA
GetWindowLongA
RegisterWindowMessageA
DispatchMessageA

advapi32

RegCreateKeyA
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegSetValueA

ole32

CoInitialize
StringFromGUID2
CoTaskMemFree
CoCreateInstance
GetRunningObjectTable
CoUninitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
CreateItemMoniker

oleaut32

SysAllocString
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 412KB - Virtual size: 409KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Converter/msvcr70.dll
.dll windows:4 windows x86 arch:x86

1042bb30696d4426da7447f341f51a6e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcr70.pdb

Imports

kernel32

GetModuleFileNameA
GetModuleFileNameW
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
TlsGetValue
GetLastError
ResumeThread
CreateThread
TlsFree
SetLastError
GetCurrentThread
TlsAlloc
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapAlloc
HeapFree
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
InitializeCriticalSection
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEnvironmentVariableA
SetEnvironmentVariableW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
RtlUnwind
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
HeapSize
VirtualProtect
GetSystemInfo
VirtualQuery
FlushFileBuffers
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
Sleep
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
RaiseException
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadCodePtr
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
ReadConsoleA
SetConsoleMode
GetConsoleMode
IsDBCSLeadByteEx
GetConsoleCP
ReadConsoleW
SetEndOfFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@AAE@PBQBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_cast@@QAE@PBD@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_Fbad_cast@@QAEXXZ
??_Fbad_typeid@@QAEXXZ
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxCallUnwindDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__buffer_overrun
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__security_error_handler
__set_app_type
__set_buffer_overrun_handler
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__uncaught_exception
__unguarded_readlc_active
__wargv
__wcserror
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_realloc
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_cgetws
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_cputws
_creat
_cscanf
_ctime64
_ctype
_cwait
_cwprintf
_cwscanf
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirst64
_findfirsti64
_findnext
_findnext64
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstat64
_fstati64
_ftime
_ftime64
_ftol
_fullpath
_futime
_futime64
_gcvt
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getwch
_getwche
_getws
_global_unwind2
_gmtime64
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_localtime64
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osplatform
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putwch
_putws
_pwctype
_read
_resetstkoflw
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_scprintf
_scwprintf
_searchenv
_seh_longjmp_unwind
_set_SSE2_enable
_set_error_mode
_set_sbh_threshold
_set_security_error_handler
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snscanf
_snwprintf
_snwscanf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv

Sections

.text
Size: 224KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Converter/option.ini
Converter/realmediasplitter/Release Unicode/RealMediaSplitter.ax
.dll regsvr32 windows:4 windows x86 arch:x86

ff5f2261d98de1cfa422c92db550f5d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Progs\guliverkli\src\filters\parser\realmediasplitter\Release Unicode\RealMediaSplitter.pdb

Imports

kernel32

TlsSetValue
LocalReAlloc
TlsFree
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
lstrcatW
GlobalFlags
GetModuleHandleA
GetVersionExA
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
ExitProcess
TlsAlloc
HeapAlloc
HeapFree
GetCommandLineA
HeapReAlloc
VirtualProtect
VirtualQuery
SetStdHandle
GetFileType
HeapSize
TerminateProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
IsBadWritePtr
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
GetFullPathNameW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
Sleep
GetModuleFileNameW
GetVersion
CreateFileW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcessId
CreateThread
GetTickCount
lstrcpyW
GetModuleHandleW
GetLastError
lstrlenA
VirtualAlloc
GetCurrentThreadId
GetCurrentProcess
DuplicateHandle
VirtualFree
GetSystemInfo
WaitForSingleObject
ResetEvent
SetEvent
CreateEventW
CloseHandle
InterlockedDecrement
InterlockedIncrement
lstrlenW
lstrcpynW
lstrcmpW
DisableThreadLibraryCalls
GetModuleFileNameA
LoadLibraryW
GetProcAddress
FreeLibrary
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
RtlUnwind

user32

CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
WinHelpW
GetCapture
CreateWindowExW
GetClassInfoExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconW
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
PostMessageW
AdjustWindowRectEx
GetClassInfoW
RegisterClassW
DefWindowProcW
CallWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
DrawTextExW
DrawTextW
TabbedTextOutW
SetWindowPos
SetWindowLongW
GetDlgItem
SetWindowsHookExW
CallNextHookEx
GetKeyState
ValidateRect
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetFocus
SetWindowTextW
GetClassNameW
GetWindowTextW
SendMessageW
MessageBoxW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
LoadCursorW
PostQuitMessage
DestroyMenu
SetMenuItemBitmaps
ModifyMenuW
CopyRect
EnableMenuItem
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
CharUpperW
GetSystemMetrics
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
DispatchMessageW
RegisterWindowMessageW
PeekMessageW
wsprintfW
UnregisterClassW
GrayStringW

gdi32

DeleteDC
CreateBitmap
GetStockObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetBkColor
RestoreDC
SaveDC
DeleteObject
GetDeviceCaps
GetClipBox
SetMapMode
SetTextColor
SelectObject

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCloseKey
RegQueryValueExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueW
RegCreateKeyW

comctl32

ord17

shlwapi

PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathRemoveFileSpecA
PathAddBackslashA

ole32

CLSIDFromString
StringFromGUID2
CoFreeUnusedLibraries
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoInitialize

oleaut32

SysFreeString
VariantChangeType
SysAllocStringLen
VariantClear
VariantInit
SysAllocString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Converter/realmediasplitter/Release/RealMediaSplitter.ax
.dll regsvr32 windows:4 windows x86 arch:x86

9e8eed58898acf501689dacf810f21d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Progs\guliverkli\src\filters\parser\realmediasplitter\Release\RealMediaSplitter.pdb

Imports

kernel32

FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
LocalAlloc
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
lstrcatA
GlobalFlags
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCPInfo
GetOEMCP
FileTimeToSystemTime
ExitProcess
RtlUnwind
HeapAlloc
HeapFree
VirtualProtect
VirtualQuery
GetCommandLineA
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
TerminateProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
IsBadWritePtr
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetFullPathNameA
lstrcpyA
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
Sleep
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcessId
CreateThread
GetTickCount
GetModuleHandleA
VirtualAlloc
GetCurrentThreadId
GetCurrentProcess
DuplicateHandle
VirtualFree
GetSystemInfo
WaitForSingleObject
ResetEvent
SetEvent
CreateEventA
CloseHandle
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange

user32

DrawTextA
TabbedTextOutA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
PostMessageA
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
CopyRect
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowPos
SetWindowLongA
GetDlgItem
ClientToScreen
GetDlgCtrlID
GetWindowRect
PtInRect
GetFocus
SetWindowTextA
GetClassNameA
SetWindowsHookExA
CallNextHookEx
GetKeyState
ValidateRect
GetWindowTextA
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetSystemMetrics
SendMessageA
MessageBoxA
GetParent
PostQuitMessage
GetWindowLongA
GetLastActivePopup
DestroyMenu
GrayStringA
GetWindowPlacement
DrawTextExA
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
DispatchMessageA
RegisterWindowMessageA
PeekMessageA
wsprintfA
CharUpperA
UnregisterClassA
GetWindow

gdi32

ScaleWindowExtEx
DeleteDC
GetStockObject
SetWindowExtEx
TextOutA
RectVisible
PtVisible
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
GetClipBox
CreateBitmap
DeleteObject
GetDeviceCaps
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegSetValueA
RegCreateKeyA

comctl32

ord17

shlwapi

PathStripToRootA
PathFindFileNameA
PathRemoveFileSpecA
PathAddBackslashA
PathIsUNCA

ole32

CLSIDFromString
StringFromGUID2
CoFreeUnusedLibraries
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoInitialize

oleaut32

VariantChangeType
SysAllocStringLen
VariantClear
VariantInit
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Converter/regcode.ini
Converter/soft2cn．com汉化说明.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HH_By_Soft2CN
Reserverd
fzh_s2c
refreshDesktop

Sections

CODE
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Converter/thank.txt
Converter/wmaudsdk.dll
.dll windows:4 windows x86 arch:x86

9ef9317e1b9a6f232aed408539d7f387

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

drmclien

??0CDRMLiteCrypto@@QAE@XZ
?GetPublicKey@CDRMLiteCrypto@@QAEJPAUPKCERT@@@Z
ord6
ord9
ord4
??1CDRMLiteCrypto@@QAE@XZ
ord3
ord5
ord7

advapi32

GetUserNameA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA

kernel32

SystemTimeToFileTime
GetSystemTime
CreateFileA
WideCharToMultiByte
MultiByteToWideChar
SetFilePointer
DeleteFileA
CloseHandle
WriteFile
ResetEvent
lstrlenA
ReadFile
GetFileSize
GetTempFileNameA
GetTempPathA
SetEvent
CreateEventA
WaitForSingleObject
GetModuleFileNameA
LoadLibraryA
GetLastError
MulDiv
lstrcmpA
GetComputerNameA
InterlockedDecrement
GlobalMemoryStatus
QueryPerformanceCounter
GetLocalTime
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
DeviceIoControl
GetModuleHandleW
GetVersionExA
LocalFree
LocalAlloc
GetSystemInfo
DisableThreadLibraryCalls
CreateThread
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
FreeLibrary
lstrcpyA
SetEndOfFile
GetProcAddress
GetDiskFreeSpaceA

user32

wsprintfA

ole32

CoCreateGuid
StringFromCLSID
CoTaskMemFree

oleaut32

SysAllocStringLen
SysFreeString
SysAllocString
VariantClear

msacm32

acmStreamOpen
acmDriverDetailsA
acmDriverEnum
acmFormatSuggest
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmFormatTagEnumA
acmStreamSize
acmDriverOpen
acmStreamClose
acmFormatDetailsA
acmFormatTagDetailsA
acmDriverClose
acmMetrics
acmFormatEnumA
acmStreamConvert

rpcrt4

UuidCreate

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

strmdll

SelectMediaStream
SelectHelper
CreateAsfFormatSet

msvcrt

isspace
strncpy
strtoul
_EH_prolog
??2@YAPAXI@Z
??3@YAXPAX@Z
wcscpy
wcslen
_wcsicmp
memmove
_purecall
_snprintf
_wcsnicmp
strchr
_strcmpi
wcscmp
_ftol
__CxxFrameHandler
sscanf
isxdigit
_stricmp
strstr
ceil
toupper
isdigit
malloc
free
_initterm
_adjust_fdiv

Exports

Exports

WMAudioCreateInfo
WMAudioCreateReader
WMAudioCreateWriter

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
安装说明.url
.url

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.nsp0 Size: - Virtual size: 1.7MB

.nsp1 Size: 437KB - Virtual size: 440KB

.nsp2 Size: - Virtual size: 3KB

Headers

File Characteristics

Exports

Exports

Sections

Size: 140KB - Virtual size: 480KB

Size: 60KB - Virtual size: 60KB

Size: 2KB - Virtual size: 16KB

.rsrc Size: 278KB - Virtual size: 280KB

Size: 13KB - Virtual size: 28KB

.data Size: 121KB - Virtual size: 124KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

Size: 253KB - Virtual size: 604KB

Size: 136KB - Virtual size: 136KB

Size: 99KB - Virtual size: 972KB

.rsrc Size: 236KB - Virtual size: 236KB

Size: 15KB - Virtual size: 32KB

.data Size: 114KB - Virtual size: 116KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

Size: 152KB - Virtual size: 424KB

Size: 412KB - Virtual size: 412KB

Size: 9KB - Virtual size: 56KB

Size: 7KB - Virtual size: 8KB

.rsrc Size: 226KB - Virtual size: 272KB

Size: 12KB - Virtual size: 20KB

.data Size: 120KB - Virtual size: 120KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

Size: 64KB - Virtual size: 156KB

Size: 40KB - Virtual size: 40KB

Size: 2KB - Virtual size: 8KB

.rsrc Size: 226KB - Virtual size: 228KB

Size: 6KB - Virtual size: 12KB

.data Size: 114KB - Virtual size: 116KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

Size: 65KB - Virtual size: 160KB

Size: 40KB - Virtual size: 40KB

Size: 2KB - Virtual size: 8KB

.rsrc Size: 228KB - Virtual size: 228KB

Size: 6KB - Virtual size: 12KB

.data Size: 112KB - Virtual size: 112KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

Size: 96KB - Virtual size: 264KB

Size: 48KB - Virtual size: 48KB

Size: 2KB - Virtual size: 16KB

.nsp0
Size: - Virtual size: 1.7MB

.nsp1
Size: 437KB - Virtual size: 440KB

.nsp2
Size: - Virtual size: 3KB

.rsrc
Size: 278KB - Virtual size: 280KB

.data
Size: 121KB - Virtual size: 124KB

.adata
Size: - Virtual size: 4KB

.rsrc
Size: 236KB - Virtual size: 236KB

.data
Size: 114KB - Virtual size: 116KB

.adata
Size: - Virtual size: 4KB

.rsrc
Size: 226KB - Virtual size: 272KB

.data
Size: 120KB - Virtual size: 120KB

.adata
Size: - Virtual size: 4KB

.rsrc
Size: 226KB - Virtual size: 228KB

.data
Size: 114KB - Virtual size: 116KB

.adata
Size: - Virtual size: 4KB

.rsrc
Size: 228KB - Virtual size: 228KB

.data
Size: 112KB - Virtual size: 112KB

.adata
Size: - Virtual size: 4KB

.rsrc
Size: 237KB - Virtual size: 240KB

.data
Size: 113KB - Virtual size: 116KB

.adata
Size: - Virtual size: 4KB

.rsrc
Size: 229KB - Virtual size: 232KB

.data
Size: 109KB - Virtual size: 112KB

.adata
Size: - Virtual size: 4KB

.text
Size: 40KB - Virtual size: 36KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 992B

.reloc
Size: 12KB - Virtual size: 9KB

CODE
Size: 365KB - Virtual size: 364KB

DATA
Size: 5KB - Virtual size: 4KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 9KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 26KB - Virtual size: 26KB

.rsrc
Size: 23KB - Virtual size: 23KB

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 512B - Virtual size: 382B