b116e318f3299de3f3b0fc6469d88d56_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b116e318f3299de3f3b0fc6469d88d56_JaffaCakes118
Size

559KB
MD5

b116e318f3299de3f3b0fc6469d88d56
SHA1

a0ad42f2578cb8349dd5f5c7824b10ca5ac8bdc0
SHA256

a283ca56dae518528d83dfe6226300e014e5449b400112861b5a65047db00a17
SHA512

87c422c561e1b152b960066fb91bb89403b408cb72e30ad809b49154174d5055e1456a191e21dfe5d527343f62f63d89aece065627ef35f8bea867201ad20109
SSDEEP

12288:5xWenQZSZxt1GmEQyvLCdI/VuJkJA0nTQ8SEz3WQ34:D8YDmWSMJbKj3z4

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Chapter13/Patch2/Test.exe	upx
static1/unpack001/Chapter13/Patch3/Test.exe	upx

Unsigned PE 81 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Chapter02/Test/Test.exe
unpack001/Chapter03/HelloWorld/Hello.exe
unpack001/Chapter04/FirstWindow-1/FirstWindow.exe
unpack001/Chapter04/FirstWindow/FirstWindow.exe
unpack001/Chapter04/MsgWindow01/MsgWindow.exe
unpack001/Chapter04/MsgWindow02/MsgWindow.exe
unpack001/Chapter04/MsgWindow03/MsgWindow.exe
unpack001/Chapter04/MsgWindow04/MsgWindow.exe
unpack001/Chapter04/SendMessage/Receive.exe
unpack001/Chapter04/SendMessage/Send.exe
unpack001/Chapter05/Control/Control.exe
unpack001/Chapter05/Dialog/Dialog.exe
unpack001/Chapter05/Icon/Icon.exe
unpack001/Chapter05/Listbox/Listbox.exe
unpack001/Chapter05/Menu/Menu.exe
unpack001/Chapter05/ShowVersionInfo/ShowInfo.exe
unpack001/Chapter05/VersionInfo/VersionInfo.exe
unpack001/Chapter06/Timer/Timer.exe
unpack001/Chapter07/BmpClock/BmpClock.exe
unpack001/Chapter07/Clock/Clock.exe
unpack001/Chapter07/DcCopy/DcCopy.exe
unpack001/Chapter08/BrowseFolder/BrowseFolder.exe
unpack001/Chapter08/CommDlg/CommDlg.exe
unpack001/Chapter09/Richedit/Richedit.exe
unpack001/Chapter09/StatusBar/StatusBar.exe
unpack001/Chapter09/SubClass/SubClass.exe
unpack001/Chapter09/SuperClass/SuperClass.exe
unpack001/Chapter09/Toolbar/Toolbar.exe
unpack001/Chapter09/Wordpad/Wordpad.exe
unpack001/Chapter10/FindFile/FindFile.exe
unpack001/Chapter10/Fragment/Fragment.exe
unpack001/Chapter10/MMFShare/MMFShare.exe
unpack001/Chapter10/MemInfo/MemInfo.exe
unpack001/Chapter10/WordCount/FileMap/WordCount.exe
unpack001/Chapter10/WordCount/WordCount.exe
unpack001/Chapter11/Dll/Counter.dll
unpack001/Chapter11/Dll/Dll/Counter.dll
unpack001/Chapter11/Dll/UseDll1.exe
unpack001/Chapter11/Dll/UseDll2.exe
unpack001/Chapter11/KeyHook/Hookdll.dll
unpack001/Chapter11/KeyHook/Main.exe
unpack001/Chapter11/RecHook/RecHook.exe
unpack001/Chapter12/Counter/Counter.exe
unpack001/Chapter12/Event/Counter.exe
unpack001/Chapter12/Thread/Counter.exe
unpack001/Chapter12/ThreadSyn/ThreadSyn.exe
unpack001/Chapter12/ThreadSynErr/ThreadSynErr.exe
unpack001/Chapter13/CmdLine/CmdLine.exe
unpack001/Chapter13/HideProcess9x/HideProcess9x.exe
unpack001/Chapter13/Patch1/Patch1.exe
unpack001/Chapter13/Patch1/Test.exe
unpack001/Chapter13/Patch2/Patch2.exe
unpack001/Chapter13/Patch2/Test.exe
unpack002/out.upx
unpack001/Chapter13/Patch3/Patch3.exe
unpack001/Chapter13/Patch3/Test.exe
unpack003/out.upx
unpack001/Chapter13/Process/Process.exe
unpack001/Chapter13/ProcessList/ProcessList.exe
unpack001/Chapter13/RemoteThread/RemoteThread.exe
unpack001/Chapter13/RemoteThreadDll/Dll.dll
unpack001/Chapter13/RemoteThreadDll/Load.exe
unpack001/Chapter14/SEH01/SEH.exe
unpack001/Chapter14/SEH02/SEH.exe
unpack001/Chapter14/TopHandler/TopHandler.exe
unpack001/Chapter14/Unwind/Unwind.exe
unpack001/Chapter15/Associate/Associate.exe
unpack001/Chapter15/Ini/Ini.exe
unpack001/Chapter15/Reg/Reg.exe
unpack001/Chapter16/Chat-TCP/Client.exe
unpack001/Chapter16/Chat-TCP/Server.exe
unpack001/Chapter16/Chat-UDP/Client.exe
unpack001/Chapter16/Chat-UDP/Server.exe
unpack001/Chapter16/Ping/Ping.exe
unpack001/Chapter17/AddCode/Main.exe
unpack001/Chapter17/Export/Main.exe
unpack001/Chapter17/Import/Main.exe
unpack001/Chapter17/NoImport/NoImport.exe
unpack001/Chapter17/PeInfo/Main.exe
unpack001/Chapter17/Reloc/Main.exe
unpack001/Chapter17/Resource/Main.exe

Files

b116e318f3299de3f3b0fc6469d88d56_JaffaCakes118
.rar
Chapter02/Test/Main.ico
Chapter02/Test/Makefile
Chapter02/Test/Test.asm
Chapter02/Test/Test.exe
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.text
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter02/Test/Test.rc
Chapter03/HelloWorld/Hello.asm
Chapter03/HelloWorld/Hello.exe
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.text
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter03/HelloWorld/Makefile
Chapter04/FirstWindow-1/FirstWindow.asm
Chapter04/FirstWindow-1/FirstWindow.exe
.exe windows:4 windows x86 arch:x86

ecb650bdf609df8aeb939cd8f6fe9796

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
DrawTextA
EndPaint
GetClientRect
GetMessageA
DestroyWindow
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow
DefWindowProcA
CreateWindowExA
LoadCursorA
BeginPaint

kernel32

GetModuleHandleA
ExitProcess
RtlZeroMemory

Sections

.text
Size: 1024B - Virtual size: 526B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter04/FirstWindow-1/Makefile
Chapter04/FirstWindow/FirstWindow.asm
Chapter04/FirstWindow/FirstWindow.exe
.exe windows:4 windows x86 arch:x86

10289a768b94d4f9c6192b12c28adf71

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
DrawTextA
EndPaint
GetClientRect
GetMessageA
DestroyWindow
DispatchMessageA
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow
CreateWindowExA
BeginPaint
LoadCursorA
PostQuitMessage

kernel32

RtlZeroMemory
GetModuleHandleA
ExitProcess

Sections

.text
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 602B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter04/FirstWindow/Makefile
Chapter04/MsgWindow01/Makefile
Chapter04/MsgWindow01/MsgWindow.asm
Chapter04/MsgWindow01/MsgWindow.exe
.exe windows:4 windows x86 arch:x86

6a3212ae10473262b6c0029ccb8d875a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
DispatchMessageA
FindWindowA
GetMessageA
LoadCursorA
DefWindowProcA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow
CreateWindowExA
ChildWindowFromPoint
PostMessageA
wsprintfA

kernel32

GetModuleHandleA
ExitProcess
RtlZeroMemory

Sections

.text
Size: 1024B - Virtual size: 742B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter04/MsgWindow02/Makefile
Chapter04/MsgWindow02/MsgWindow.asm
Chapter04/MsgWindow02/MsgWindow.exe
.exe windows:4 windows x86 arch:x86

be2e52b6bcb27f2752f5e09a0fede9c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
FindWindowA
GetMessageA
LoadCursorA
DefWindowProcA
PostQuitMessage
RegisterClassExA
ShowWindow
UpdateWindow
CreateWindowExA
ChildWindowFromPoint
PostMessageA
wsprintfA

kernel32

GetModuleHandleA
ExitProcess
RtlZeroMemory

Sections

.text
Size: 1024B - Virtual size: 642B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter04/MsgWindow03/Makefile
Chapter04/MsgWindow03/MsgWindow.asm
Chapter04/MsgWindow03/MsgWindow.exe
.exe windows:4 windows x86 arch:x86

a39f7d6e3ecf360a83d0cb8a058007e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
FindWindowA
GetMessageA
ChildWindowFromPoint
DestroyWindow
DefWindowProcA
PostQuitMessage
RegisterClassExA
ShowWindow
UpdateWindow
CreateWindowExA
LoadCursorA
wsprintfA
PostMessageA

kernel32

RtlZeroMemory
GetModuleHandleA
ExitProcess

Sections

.text
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter04/MsgWindow04/Makefile
Chapter04/MsgWindow04/MsgWindow.asm
Chapter04/MsgWindow04/MsgWindow.exe
.exe windows:4 windows x86 arch:x86

56de47efb39a8465d235cc49278666c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
FindWindowA
GetMessageA
LoadCursorA
PostMessageA
DestroyWindow
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow
CreateWindowExA
ChildWindowFromPoint
PostQuitMessage
wsprintfA

kernel32

GetModuleHandleA
ExitProcess
RtlZeroMemory

Sections

.text
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter04/SendMessage/Makefile
Chapter04/SendMessage/Receive.asm
Chapter04/SendMessage/Receive.exe
.exe windows:4 windows x86 arch:x86

b24a881cec41d90a683d922d3e62d26c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
GetMessageA
LoadCursorA
MessageBoxA
DestroyWindow
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow
DefWindowProcA
CreateWindowExA
PostQuitMessage
wsprintfA

kernel32

GetModuleHandleA
ExitProcess
RtlZeroMemory

Sections

.text
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter04/SendMessage/Send.asm
Chapter04/SendMessage/Send.exe
.exe windows:4 windows x86 arch:x86

b1f3b06a695d1539dcc163910bd0e52d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
MessageBoxA
FindWindowA
wsprintfA

kernel32

ExitProcess

Sections

.text
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter05/Control/Control.asm
Chapter05/Control/Control.exe
.exe windows:4 windows x86 arch:x86

fa08f6a4f37451e325b7aa84e26ccd5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItemTextA
GetWindowLongA
IsDlgButtonChecked
IsWindowVisible
LoadBitmapA
LoadIconA
GetDlgItem
SendMessageA
SetDlgItemInt
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
EndDialog
DialogBoxParamA
EnableWindow
SendDlgItemMessageA
CheckDlgButton

kernel32

ExitProcess
GetModuleHandleA

gdi32

DeleteObject

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 706B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter05/Control/Control.rc
Chapter05/Control/Main.ico
Chapter05/Control/Makefile
Chapter05/Control/Picture1.bmp
Chapter05/Control/Picture2.bmp
Chapter05/Dialog/Dialog.asm
Chapter05/Dialog/Dialog.exe
.exe windows:4 windows x86 arch:x86

0e5dde4618f60e7d0339e8cd481ec506

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
LoadIconA
EndDialog
DialogBoxParamA

kernel32

GetModuleHandleA
ExitProcess

Sections

.text
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter05/Dialog/Dialog.rc
Chapter05/Dialog/Main.ico
Chapter05/Dialog/Makefile
Chapter05/Icon/1.ANI
Chapter05/Icon/2.cur
Chapter05/Icon/Big.ico
Chapter05/Icon/Icon.asm
Chapter05/Icon/Icon.exe
.exe windows:4 windows x86 arch:x86

9eea6f9fdfc5058ed76da571670d1367

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
GetMessageA
LoadCursorA
LoadCursorFromFileA
LoadIconA
LoadMenuA
DestroyWindow
DispatchMessageA
SendMessageA
SetClassLongA
ShowWindow
TranslateMessage
UpdateWindow
CreateWindowExA
CheckMenuRadioItem
PostQuitMessage
RegisterClassExA

kernel32

RtlZeroMemory
GetModuleHandleA
ExitProcess

Sections

.text
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter05/Icon/Icon.rc
Chapter05/Icon/Makefile
Chapter05/Icon/Small.ico
Chapter05/Listbox/Listbox.asm
Chapter05/Listbox/Listbox.exe
.exe windows:4 windows x86 arch:x86

2280724d9dfbabc04be9277603c6b9ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
MessageBoxA
GetDlgItem
SendMessageA
SetDlgItemTextA
EndDialog
EnableWindow
DialogBoxParamA
SendDlgItemMessageA
wsprintfA

kernel32

lstrcatA
GetModuleHandleA
ExitProcess
lstrcpyA

Sections

.text
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter05/Listbox/Listbox.rc
Chapter05/Listbox/Main.ico
Chapter05/Listbox/Makefile
Chapter05/Menu/Main.ico
Chapter05/Menu/Makefile
Chapter05/Menu/Menu.asm
Chapter05/Menu/Menu.exe
.exe windows:4 windows x86 arch:x86

fbb8b2bd784a9cf2089bea3ebf2cf56e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
GetCursorPos
GetMenuState
GetMessageA
GetSubMenu
GetSystemMenu
LoadAcceleratorsA
CheckMenuRadioItem
LoadIconA
LoadMenuA
MessageBoxA
PostQuitMessage
RegisterClassExA
ShowWindow
TrackPopupMenu
TranslateAcceleratorA
TranslateMessage
UpdateWindow
CheckMenuItem
AppendMenuA
LoadCursorA
wsprintfA

kernel32

GetModuleHandleA
ExitProcess
RtlZeroMemory

Sections

.text
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter05/Menu/Menu.rc
Chapter05/ShowVersionInfo/GetVersionInfo.inc
Chapter05/ShowVersionInfo/Main.ico
Chapter05/ShowVersionInfo/Makefile
Chapter05/ShowVersionInfo/ShowInfo.asm
Chapter05/ShowVersionInfo/ShowInfo.exe
.exe windows:4 windows x86 arch:x86

42b65baad8fc111c440ee1c0b4b62a88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
SendMessageA
wsprintfA
MessageBoxA
LoadIconA
EndDialog
DialogBoxParamA

kernel32

lstrcpyA
lstrcatA
RtlZeroMemory
GetModuleHandleA
ExitProcess

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

comctl32

ord17

comdlg32

GetOpenFileNameA

Sections

.text
Size: 1024B - Virtual size: 918B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter05/ShowVersionInfo/ShowInfo.rc
Chapter05/VersionInfo/Main.ico
Chapter05/VersionInfo/Makefile
Chapter05/VersionInfo/Version.h
Chapter05/VersionInfo/VersionInfo.asm
Chapter05/VersionInfo/VersionInfo.exe
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.text
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter05/VersionInfo/VersionInfo.rc
Chapter06/Timer/1.ICO
Chapter06/Timer/2.ICO
Chapter06/Timer/Makefile
Chapter06/Timer/Timer.asm
Chapter06/Timer/Timer.exe
.exe windows:4 windows x86 arch:x86

14aa867b2924470fde249ada28c52317

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

KillTimer
LoadIconA
MessageBeep
GetDlgItemInt
SetDlgItemInt
SetTimer
EndDialog
SendDlgItemMessageA
DialogBoxParamA

kernel32

ExitProcess
GetModuleHandleA

Sections

.text
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter06/Timer/Timer.rc
Chapter07/BmpClock/Back1.bmp
Chapter07/BmpClock/Back2.bmp
Chapter07/BmpClock/BmpClock.asm
Chapter07/BmpClock/BmpClock.exe
.exe windows:4 windows x86 arch:x86

ccc7b8fe67e22245b8a14ee66909b6ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
RegisterClassExA
ReleaseCapture
ReleaseDC
SendMessageA
SetCursor
LoadIconA
SetWindowPos
SetWindowRgn
ShowWindow
TrackPopupMenu
TranslateMessage
UpdateWindow
LoadCursorA
LoadBitmapA
KillTimer
GetMessageA
InvalidateRect
GetDC
GetCursorPos
EndPaint
DispatchMessageA
DestroyWindow
DestroyMenu
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CheckMenuRadioItem
BeginPaint
SetTimer
AppendMenuA

kernel32

GetModuleHandleA
GetLocalTime
ExitProcess
RtlZeroMemory

gdi32

PatBlt
MoveToEx
LineTo
DeleteObject
DeleteDC
CreatePen
CreatePatternBrush
CreateEllipticRgn
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SelectObject

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter07/BmpClock/BmpClock.rc
Chapter07/BmpClock/Circle1.bmp
Chapter07/BmpClock/Circle2.bmp
Chapter07/BmpClock/Clock1.psd
Chapter07/BmpClock/Clock2.psd
Chapter07/BmpClock/Main.cur
Chapter07/BmpClock/Main.ico
Chapter07/BmpClock/Makefile
Chapter07/BmpClock/Mask1.bmp
Chapter07/BmpClock/Mask2.bmp
Chapter07/BmpClock/Move.cur
Chapter07/Clock/Clock.asm
Chapter07/Clock/Clock.exe
.exe windows:4 windows x86 arch:x86

9fa7766865baaf2b347494eb7450e996

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExA
SetTimer
GetMessageA
PostQuitMessage
UpdateWindow
InvalidateRect
LoadIconA
LoadCursorA
KillTimer
TranslateMessage
GetClientRect
EndPaint
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
ShowWindow
BeginPaint

kernel32

ExitProcess
RtlZeroMemory
GetModuleHandleA
GetLocalTime

gdi32

MoveToEx
LineTo
GetStockObject
Ellipse
DeleteObject
CreatePen
SelectObject

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter07/Clock/Clock.rc
Chapter07/Clock/Main.ico
Chapter07/Clock/Makefile
Chapter07/DcCopy/DcCopy.asm
Chapter07/DcCopy/DcCopy.exe
.exe windows:4 windows x86 arch:x86

56f1815739e0d61ba31023e0fa96bc59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

BitBlt

user32

DispatchMessageA
DrawTextA
EndPaint
GetClientRect
GetDC
GetMessageA
KillTimer
DestroyWindow
PostQuitMessage
RegisterClassExA
ReleaseDC
SetTimer
ShowWindow
TranslateMessage
UpdateWindow
DefWindowProcA
CreateWindowExA
BeginPaint
LoadCursorA

kernel32

RtlZeroMemory
GetModuleHandleA
ExitProcess

Sections

.text
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 786B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter07/DcCopy/Makefile
Chapter08/BrowseFolder/BrowseFolder.asm
Chapter08/BrowseFolder/BrowseFolder.exe
.exe windows:4 windows x86 arch:x86

a3a0746b92afdfca4ae85ae8fad7c07a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
MessageBoxA

kernel32

GetCurrentDirectoryA
ExitProcess
RtlZeroMemory

shell32

SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA

ole32

CoUninitialize
CoInitialize

Sections

.text
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter08/BrowseFolder/Makefile
Chapter08/BrowseFolder/_BrowseFolder.asm
Chapter08/CommDlg/CommDlg.asm
Chapter08/CommDlg/CommDlg.exe
.exe windows:4 windows x86 arch:x86

a521215ba51d6ba342e9c947a121c130

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
DialogBoxParamA
RegisterWindowMessageA
MessageBoxA
wsprintfA

kernel32

GetModuleHandleA
ExitProcess
RtlZeroMemory

comdlg32

ChooseFontA
FindTextA
GetOpenFileNameA
GetSaveFileNameA
PageSetupDlgA
ReplaceTextA
ChooseColorA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 782B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter08/CommDlg/CommDlg.rc
Chapter08/CommDlg/Main.ico
Chapter08/CommDlg/Makefile
Chapter09/Richedit/Main.ico
Chapter09/Richedit/Makefile
Chapter09/Richedit/Richedit.asm
Chapter09/Richedit/Richedit.exe
.exe windows:4 windows x86 arch:x86

5eeeab3a09d1f2b3f803a3ead888639a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadMenuA
MessageBoxA
MoveWindow
PostQuitMessage
RegisterClassExA
RegisterWindowMessageA
LoadIconA
SetFocus
ShowWindow
TranslateAcceleratorA
TranslateMessage
UpdateWindow
LoadCursorA
LoadAcceleratorsA
GetWindowTextLengthA
GetMessageA
GetClientRect
EnableMenuItem
DispatchMessageA
DestroyWindow
DefWindowProcA
SendMessageA
CreateWindowExA

kernel32

WriteFile
RtlZeroMemory
ReadFile
LoadLibraryA
GetModuleHandleA
FreeLibrary
ExitProcess
CreateFileA
CloseHandle
lstrcpyA

comdlg32

GetOpenFileNameA
FindTextA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter09/Richedit/Richedit.rc
Chapter09/StatusBar/Main.ico
Chapter09/StatusBar/Makefile
Chapter09/StatusBar/StatusBar.asm
Chapter09/StatusBar/StatusBar.exe
.exe windows:4 windows x86 arch:x86

16276ff228ac9cef90cdff399f3836ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MoveWindow
GetWindowTextLengthA
SetTimer
GetWindowRect
GetCursorPos
EndDialog
KillTimer
GetClientRect
DialogBoxParamA
CreateWindowExA
SendMessageA
wsprintfA

kernel32

GetLocalTime
ExitProcess
GetModuleHandleA

comctl32

ord17
ord6
ord2

Sections

.text
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter09/StatusBar/StatusBar.rc
Chapter09/SubClass/Main.ico
Chapter09/SubClass/Makefile
Chapter09/SubClass/SubClass.asm
Chapter09/SubClass/SubClass.exe
.exe windows:4 windows x86 arch:x86

84d924c25bba7abf835f3b6b4d15d5e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
GetDlgItem
GetDlgItemInt
DialogBoxParamA
SendDlgItemMessageA
SetDlgItemTextA
SetWindowLongA
CallWindowProcA
GetDlgItemTextA
wsprintfA

kernel32

ExitProcess
GetModuleHandleA

Sections

.text
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter09/SubClass/SubClass.rc
Chapter09/SuperClass/Main.ico
Chapter09/SuperClass/Makefile
Chapter09/SuperClass/SuperClass.asm
Chapter09/SuperClass/SuperClass.exe
.exe windows:4 windows x86 arch:x86

1167b1ee6e2f948cae84f1f7bd2928f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExA
GetClassInfoExA
EndDialog
DialogBoxParamA
CallWindowProcA

kernel32

GetModuleHandleA
ExitProcess

Sections

.text
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter09/SuperClass/SuperClass.rc
Chapter09/Toolbar/Main.ico
Chapter09/Toolbar/Makefile
Chapter09/Toolbar/Toolbar.asm
Chapter09/Toolbar/Toolbar.exe
.exe windows:4 windows x86 arch:x86

d5f5f094661caedc82ae05ed078a49cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadCursorA
LoadIconA
LoadMenuA
LoadStringA
MessageBoxA
MoveWindow
GetWindowRect
RegisterClassExA
SendMessageA
ShowWindow
TranslateMessage
UpdateWindow
GetMessageA
GetClientRect
EndDialog
DispatchMessageA
DefWindowProcA
DestroyWindow
CreateWindowExA
PostQuitMessage
wsprintfA

kernel32

RtlZeroMemory
RtlMoveMemory
GetModuleHandleA
ExitProcess
lstrlenA

comctl32

CreateToolbarEx
ord17

Sections

.text
Size: 1024B - Virtual size: 1002B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter09/Toolbar/Toolbar.rc
Chapter09/Wordpad/Main.ico
Chapter09/Wordpad/Makefile
Chapter09/Wordpad/Wordpad.asm
Chapter09/Wordpad/Wordpad.exe
.exe windows:4 windows x86 arch:x86

c6f912cb3b24d155edc0c3204d97c136

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
LoadMenuA
MessageBoxA
MoveWindow
PostQuitMessage
RegisterClassExA
RegisterWindowMessageA
LoadCursorA
SetFocus
SetWindowTextA
ShowWindow
TranslateAcceleratorA
TranslateMessage
UpdateWindow
LoadAcceleratorsA
IsClipboardFormatAvailable
GetWindowTextLengthA
GetWindowRect
GetMessageA
GetClientRect
EnableMenuItem
DispatchMessageA
DestroyWindow
CreateWindowExA
DefWindowProcA
CheckMenuItem
SendMessageA
wsprintfA

kernel32

WriteFile
RtlZeroMemory
ReadFile
LoadLibraryA
GetModuleHandleA
FreeLibrary
ExitProcess
CreateFileA
CloseHandle
lstrcpyA

comctl32

ord6
CreateToolbarEx

comdlg32

ChooseFontA
FindTextA
GetOpenFileNameA
GetSaveFileNameA
PageSetupDlgA
ChooseColorA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter09/Wordpad/Wordpad.rc
Chapter10/FindFile/FindFile.asm
Chapter10/FindFile/FindFile.exe
.exe windows:4 windows x86 arch:x86

83f15b706f1bbdcf027aa80d9004bada

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
SendMessageA
SendDlgItemMessageA
LoadIconA
GetDlgItemTextA
GetDlgItem
wsprintfA
DialogBoxParamA
EnableWindow
EndDialog

kernel32

FindFirstFileA
FindClose
ExitProcess
CreateThread
lstrlenA
lstrcpyA
lstrcatA
RtlZeroMemory
GetModuleHandleA
GetFileSize
CloseHandle
CreateFileA
FindNextFileA

ole32

CoUninitialize
CoInitialize

shell32

SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 926B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 289B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter10/FindFile/FindFile.rc
Chapter10/FindFile/Main.ico
Chapter10/FindFile/Makefile
Chapter10/FindFile/_BrowseFolder.asm
Chapter10/Fragment/Fragment.asm
Chapter10/Fragment/Fragment.exe
.exe windows:4 windows x86 arch:x86

310b1c2d3e6225ac0544f1312be55799

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
SetDlgItemTextA
SetDlgItemInt
SendMessageA
EndDialog
DialogBoxParamA

kernel32

CloseHandle
GlobalReAlloc
GlobalAlloc
ExitProcess
CreateThread
GetModuleHandleA

Sections

.text
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter10/Fragment/Fragment.rc
Chapter10/Fragment/Main.ico
Chapter10/Fragment/Makefile
Chapter10/MMFShare/MMFShare.asm
Chapter10/MMFShare/MMFShare.exe
.exe windows:4 windows x86 arch:x86

83335a475268f53088e2b7f91b668b8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
SendMessageA
SendDlgItemMessageA
MessageBoxA
EndDialog
KillTimer
GetDlgItemTextA
SetDlgItemTextA
DialogBoxParamA
SetTimer

kernel32

UnmapViewOfFile
OpenFileMappingA
GetModuleHandleA
ExitProcess
CloseHandle
MapViewOfFile
CreateFileMappingA

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter10/MMFShare/MMFShare.rc
Chapter10/MMFShare/Main.ico
Chapter10/MMFShare/Makefile
Chapter10/MemInfo/Main.ico
Chapter10/MemInfo/Makefile
Chapter10/MemInfo/MemInfo.asm
Chapter10/MemInfo/MemInfo.exe
.exe windows:4 windows x86 arch:x86

f6c3bf53b0153b5f80e3e5cdef6973d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
KillTimer
SetTimer
EndDialog
DialogBoxParamA
SetDlgItemTextA
LoadIconA
wsprintfA

kernel32

GetModuleHandleA
ExitProcess
GlobalMemoryStatus

Sections

.text
Size: 512B - Virtual size: 342B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter10/MemInfo/MemInfo.rc
Chapter10/WordCount/FileMap/Main.ico
Chapter10/WordCount/FileMap/Makefile
Chapter10/WordCount/FileMap/Sample.txt
Chapter10/WordCount/FileMap/Sample.txt.log
Chapter10/WordCount/FileMap/WordCount.asm
Chapter10/WordCount/FileMap/WordCount.exe
.exe windows:4 windows x86 arch:x86

a0d2c8e4e5c1cc9c3751d291ea2477f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
SendMessageA
SendDlgItemMessageA
MessageBoxA
LoadIconA
GetDlgItemTextA
GetDlgItem
EndDialog
EnableWindow
DialogBoxParamA
wsprintfA

kernel32

ExitProcess
lstrlenA
lstrcpyA
lstrcatA
WriteFile
UnmapViewOfFile
RtlZeroMemory
MapViewOfFile
GlobalFree
GlobalAlloc
GetModuleHandleA
GetFileSize
CloseHandle
CreateFileA
CreateFileMappingA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter10/WordCount/FileMap/WordCount.rc
Chapter10/WordCount/Main.ico
Chapter10/WordCount/Makefile
Chapter10/WordCount/Sample.txt
Chapter10/WordCount/Sample.txt.log
Chapter10/WordCount/WordCount.asm
Chapter10/WordCount/WordCount.exe
.exe windows:4 windows x86 arch:x86

c831ce118d6fbadc36f1c8f4cc529ebd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
SetDlgItemTextA
SendMessageA
SendDlgItemMessageA
MessageBoxA
LoadIconA
GetDlgItemTextA
GetDlgItem
EndDialog
EnableWindow
DialogBoxParamA

kernel32

CreateFileA
lstrlenA
lstrcpyA
lstrcatA
WriteFile
RtlZeroMemory
ReadFile
GlobalFree
GlobalAlloc
GetModuleHandleA
ExitProcess
CloseHandle

comdlg32

GetOpenFileNameA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 798B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter10/WordCount/WordCount.rc
Chapter11/Dll/Counter.dll
.dll windows:4 windows x86 arch:x86

42d1920eb50d6328cf3633b6968e30e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetDlgItemInt

Exports

Exports

_DecCount
_IncCount

Sections

.text
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chapter11/Dll/Counter.inc
Chapter11/Dll/Counter.lib
Chapter11/Dll/Dll/Counter.asm
Chapter11/Dll/Dll/Counter.def
Chapter11/Dll/Dll/Counter.dll
.dll windows:4 windows x86 arch:x86

42d1920eb50d6328cf3633b6968e30e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetDlgItemInt

Exports

Exports

_DecCount
_IncCount

Sections

.text
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chapter11/Dll/Dll/Counter.inc
Chapter11/Dll/Dll/Makefile
Chapter11/Dll/Main.ico
Chapter11/Dll/Makefile
Chapter11/Dll/UseDll.rc
Chapter11/Dll/UseDll1.asm
Chapter11/Dll/UseDll1.exe
.exe windows:4 windows x86 arch:x86

7da03caffccd4609a74483093cbf2974

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
DialogBoxParamA

kernel32

ExitProcess
GetModuleHandleA

counter

_DecCount
_IncCount

Sections

.text
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter11/Dll/UseDll2.asm
Chapter11/Dll/UseDll2.exe
.exe windows:4 windows x86 arch:x86

caf3318858eb76dc9a33b8b2b16946d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDlgItem
EndDialog
EnableWindow
DialogBoxParamA

kernel32

ExitProcess
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary

Sections

.text
Size: 512B - Virtual size: 374B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 422B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter11/KeyHook/Hookdll.asm
Chapter11/KeyHook/Hookdll.def
Chapter11/KeyHook/Hookdll.dll
.dll windows:4 windows x86 arch:x86

ad96494827dfe7394fd8d589d4553ed2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetKeyState
GetKeyboardState
SendMessageA
SetWindowsHookExA
ToAscii
UnhookWindowsHookEx
CallNextHookEx

Exports

Exports

HookProc
InstallHook
UninstallHook

Sections

.text
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 357B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chapter11/KeyHook/Hookdll.inc
Chapter11/KeyHook/Main.asm
Chapter11/KeyHook/Main.exe
.exe windows:4 windows x86 arch:x86

17ab701ab81ddb51f40655210879584c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendDlgItemMessageA
EndDialog
DialogBoxParamA

kernel32

GetModuleHandleA
ExitProcess

hookdll

UninstallHook
InstallHook

Sections

.text
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter11/KeyHook/Main.ico
Chapter11/KeyHook/Main.rc
Chapter11/KeyHook/Makefile
Chapter11/RecHook/Main.ico
Chapter11/RecHook/Makefile
Chapter11/RecHook/RecHook.asm
Chapter11/RecHook/RecHook.exe
.exe windows:4 windows x86 arch:x86

0fe879338b21cfe2145cb45c59e3e393

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyState
GetKeyboardState
SendDlgItemMessageA
EndDialog
ToAscii
UnhookWindowsHookEx
DialogBoxParamA
SetWindowsHookExA
CallNextHookEx

kernel32

ExitProcess
GetModuleHandleA

Sections

.text
Size: 512B - Virtual size: 386B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter11/RecHook/RecHook.rc
Chapter12/Counter/Counter.asm
Chapter12/Counter/Counter.exe
.exe windows:4 windows x86 arch:x86

2cb908d5c037876b6192fb1b1fd24174

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SetWindowTextA
EnableWindow
SetDlgItemInt
GetDlgItem
DialogBoxParamA

kernel32

ExitProcess
GetModuleHandleA

Sections

.text
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter12/Counter/Counter.rc
Chapter12/Counter/Main.ico
Chapter12/Counter/Makefile
Chapter12/Event/Counter.asm
Chapter12/Event/Counter.exe
.exe windows:4 windows x86 arch:x86

2ac21f96e3b24956d4e14c5462eb3a8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SetDlgItemInt
GetDlgItem
EndDialog
EnableWindow
DialogBoxParamA

kernel32

CreateEventA
WaitForSingleObject
SetEvent
ResetEvent
GetModuleHandleA
ExitProcess
CreateThread
CloseHandle

Sections

.text
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter12/Event/Counter.rc
Chapter12/Event/Main.ico
Chapter12/Event/Makefile
Chapter12/Thread/Counter.asm
Chapter12/Thread/Counter.exe
.exe windows:4 windows x86 arch:x86

19d62bb72f25cff75f646429eff8f55f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItem
EndDialog
EnableWindow
SetWindowTextA
SetDlgItemInt
DialogBoxParamA

kernel32

ExitProcess
CreateThread
CloseHandle
GetModuleHandleA

Sections

.text
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter12/Thread/Counter.rc
Chapter12/Thread/Main.ico
Chapter12/Thread/Makefile
Chapter12/ThreadSyn/Main.ico
Chapter12/ThreadSyn/Makefile
Chapter12/ThreadSyn/ThreadSyn.asm
Chapter12/ThreadSyn/ThreadSyn.exe
.exe windows:4 windows x86 arch:x86

f5d2dcb61739fecfb21a0d0867f7da46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SetTimer
SetDlgItemInt
KillTimer
GetDlgItem
EndDialog
DialogBoxParamA

kernel32

CloseHandle
LeaveCriticalSection
InitializeCriticalSection
GetModuleHandleA
ExitProcess
EnterCriticalSection
DeleteCriticalSection
CreateThread

Sections

.text
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter12/ThreadSyn/ThreadSyn.rc
Chapter12/ThreadSynErr/Main.ico
Chapter12/ThreadSynErr/Makefile
Chapter12/ThreadSynErr/ThreadSynErr.asm
Chapter12/ThreadSynErr/ThreadSynErr.exe
.exe windows:4 windows x86 arch:x86

a5f3bc6d970b257b91fcb4039b2ca3c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemInt
KillTimer
GetDlgItem
EndDialog
SetWindowTextA
SetTimer
DialogBoxParamA

kernel32

ExitProcess
CreateThread
CloseHandle
GetModuleHandleA

Sections

.text
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter12/ThreadSynErr/ThreadSynErr.rc
Chapter13/CmdLine/CmdLine.asm
Chapter13/CmdLine/CmdLine.exe
.exe windows:4 windows x86 arch:x86

dd5e52340ed853a8cd47d17b818c1ceb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

lstrcatA
GetModuleFileNameA
ExitProcess
GetCommandLineA

Sections

.text
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 306B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter13/CmdLine/Makefile
Chapter13/CmdLine/_CmdLine.asm
Chapter13/HideProcess9x/HideProcess9x.asm
Chapter13/HideProcess9x/HideProcess9x.exe
.exe windows:4 windows x86 arch:x86

edde1d9caa68c7201a9807571798deb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetProcAddress
ExitProcess
GetCurrentProcessId
GetModuleHandleA

Sections

.text
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 374B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter13/HideProcess9x/Makefile
Chapter13/Patch1/Main.ico
Chapter13/Patch1/Makefile
Chapter13/Patch1/Patch1.asm
Chapter13/Patch1/Patch1.exe
.exe windows:4 windows x86 arch:x86

1b8e3353fc243f606e83a5721c4df944

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetStartupInfoA
WriteProcessMemory
CloseHandle
CreateProcessA
ExitProcess
ReadProcessMemory
ResumeThread
TerminateProcess

Sections

.text
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 394B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter13/Patch1/Patch1.rc
Chapter13/Patch1/Test.asm
Chapter13/Patch1/Test.exe
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.text
Size: 512B - Virtual size: 62B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter13/Patch1/Test.lst
Chapter13/Patch2/Main.ico
Chapter13/Patch2/Makefile
Chapter13/Patch2/Patch2.asm
Chapter13/Patch2/Patch2.exe
.exe windows:4 windows x86 arch:x86

943882e2d95c54de994c79ec24dd2839

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetStartupInfoA
WriteProcessMemory
CloseHandle
ContinueDebugEvent
CreateProcessA
ExitProcess
GetThreadContext
SetThreadContext
WaitForDebugEvent

Sections

.text
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter13/Patch2/Patch2.rc
Chapter13/Patch2/Test.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 62B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter13/Patch2/Test.lst
Chapter13/Patch3/Main.ico
Chapter13/Patch3/Makefile
Chapter13/Patch3/Patch3.asm
Chapter13/Patch3/Patch3.exe
.exe windows:4 windows x86 arch:x86

943882e2d95c54de994c79ec24dd2839

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetStartupInfoA
WriteProcessMemory
CloseHandle
ContinueDebugEvent
CreateProcessA
ExitProcess
GetThreadContext
SetThreadContext
WaitForDebugEvent

Sections

.text
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter13/Patch3/Patch3.rc
Chapter13/Patch3/Test.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 62B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter13/Process/Main.ico
Chapter13/Process/Makefile
Chapter13/Process/Process.asm
Chapter13/Process/Process.exe
.exe windows:4 windows x86 arch:x86

de1c5f4c02c176ffe27cbd346b6d5e43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
SetDlgItemTextA
SendDlgItemMessageA
MessageBoxA
GetWindowTextLengthA
GetDlgItemTextA
GetDlgItem
EndDialog
EnableWindow

kernel32

CreateThread
lstrcpyA
lstrcatA
WaitForSingleObject
TerminateProcess
RtlZeroMemory
GetStartupInfoA
GetModuleHandleA
ExitProcess
CreateProcessA
CloseHandle

comdlg32

GetOpenFileNameA

Sections

.text
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 742B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter13/Process/Process.rc
Chapter13/ProcessList/Main.ico
Chapter13/ProcessList/Makefile
Chapter13/ProcessList/ProcessList.asm
Chapter13/ProcessList/ProcessList.exe
.exe windows:4 windows x86 arch:x86

eacbdcaba71c8ce197ef165106f3cab4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
MessageBoxA
GetDlgItem
EndDialog
EnableWindow
DialogBoxParamA

kernel32

ExitProcess
TerminateProcess
Sleep
RtlZeroMemory
Process32Next
Process32First
OpenProcess
CloseHandle
CreateToolhelp32Snapshot
GetModuleHandleA

Sections

.text
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter13/ProcessList/ProcessList.rc
Chapter13/RemoteThread/Macro.inc
Chapter13/RemoteThread/Main.ico
Chapter13/RemoteThread/Makefile
Chapter13/RemoteThread/RemoteCode.asm
Chapter13/RemoteThread/RemoteThread.asm
Chapter13/RemoteThread/RemoteThread.exe
.exe windows:4 windows x86 arch:x86

82f79aad91d382571484ede0503e75e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetWindowThreadProcessId
FindWindowA

kernel32

ExitProcess
WriteProcessMemory
VirtualAllocEx
OpenProcess
CloseHandle
CreateRemoteThread
GetModuleHandleA
GetProcAddress

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter13/RemoteThread/RemoteThread.rc
Chapter13/RemoteThreadDll/Dll.asm
Chapter13/RemoteThreadDll/Dll.dll
.dll windows:4 windows x86 arch:x86

ccecd8da0caafae16e501b3d9a539fc3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetMessageA
LoadCursorA
PostQuitMessage
DispatchMessageA
ShowWindow
TranslateMessage
UpdateWindow
DestroyWindow
DefWindowProcA
RegisterClassExA
CreateWindowExA

kernel32

CreateThread
CloseHandle
RtlZeroMemory

Sections

.text
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chapter13/RemoteThreadDll/Load.asm
Chapter13/RemoteThreadDll/Load.exe
.exe windows:4 windows x86 arch:x86

97ca469f9d91114e3a2bad846b1ceba2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetWindowThreadProcessId
FindWindowA

kernel32

GetCurrentDirectoryA
lstrcatA
WriteProcessMemory
VirtualAllocEx
CloseHandle
CreateRemoteThread
ExitProcess
GetModuleHandleA
GetProcAddress
OpenProcess

Sections

.text
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter13/RemoteThreadDll/Load.rc
Chapter13/RemoteThreadDll/Main.ico
Chapter13/RemoteThreadDll/Makefile
Chapter14/Exception.inc
Chapter14/SEH01/Makefile
Chapter14/SEH01/SEH.asm
Chapter14/SEH01/SEH.exe
.exe windows:4 windows x86 arch:x86

d07d52a241c37d5cb020e5a45563b5e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

ExitProcess

Sections

.text
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter14/SEH02/Makefile
Chapter14/SEH02/SEH.asm
Chapter14/SEH02/SEH.exe
.exe windows:4 windows x86 arch:x86

d07d52a241c37d5cb020e5a45563b5e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

ExitProcess

Sections

.text
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter14/TopHandler/Makefile
Chapter14/TopHandler/TopHandler.asm
Chapter14/TopHandler/TopHandler.exe
.exe windows:4 windows x86 arch:x86

62dd0db8c92067743c1e6077f67ec8d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

SetUnhandledExceptionFilter
ExitProcess

Sections

.text
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter14/Unwind/Makefile
Chapter14/Unwind/Unwind.asm
Chapter14/Unwind/Unwind.exe
.exe windows:4 windows x86 arch:x86

63e5c611eb2a2bf70b95a97e586415d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

RtlUnwind
ExitProcess

Sections

.text
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 311B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter15/Associate/Associate.asm
Chapter15/Associate/Associate.exe
.exe windows:4 windows x86 arch:x86

f9370cca3c53d0a3de02bbd0b19fc45b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

ExitProcess
lstrcatA
lstrlenA
GetModuleFileNameA
GetCommandLineA

advapi32

RegSetValueExA
RegCreateKeyA
RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter15/Associate/Makefile
Chapter15/Associate/_CmdLine.asm
Chapter15/Ini/Ini.asm
Chapter15/Ini/Ini.exe
.exe windows:4 windows x86 arch:x86

b7c67944c5d4f8133f15ea9445cec47b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
LoadIconA
SetWindowPos
SetDlgItemTextA
SendDlgItemMessageA
EndDialog
GetWindowRect
GetDlgItemTextA
DialogBoxParamA
wsprintfA

kernel32

ExitProcess
lstrlenA
lstrcatA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleA
GetCurrentDirectoryA
GetPrivateProfileSectionA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter15/Ini/Ini.rc
Chapter15/Ini/Main.ico
Chapter15/Ini/Makefile
Chapter15/Ini/Option.ini
Chapter15/Reg/Main.ico
Chapter15/Reg/Makefile
Chapter15/Reg/Reg.asm
Chapter15/Reg/Reg.exe
.exe windows:4 windows x86 arch:x86

400209ba1a39aa0adfd3f1166f3e7400

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
SetDlgItemInt
SendMessageA
SendDlgItemMessageA
LoadIconA
GetDlgItemTextA
GetDlgItemInt
EndDialog
DialogBoxParamA
wsprintfA

kernel32

ExitProcess
GetModuleHandleA
RtlZeroMemory
lstrlenA

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter15/Reg/Reg.rc
Chapter15/Reg/_Reg.asm
Chapter16/Chat-TCP/Client.asm
Chapter16/Chat-TCP/Client.exe
.exe windows:4 windows x86 arch:x86

6f555f92955ba560982d2b8d994826ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItem
MessageBoxA
GetWindowTextLengthA
GetDlgItemTextA
SendMessageA
SetDlgItemTextA
SetFocus
DialogBoxParamA
EndDialog
SetWindowTextA
EnableWindow

kernel32

GetModuleHandleA
RtlZeroMemory
CreateThread
CloseHandle
lstrlenA
ExitProcess

wsock32

htons
WSACleanup
WSAGetLastError
WSAStartup
closesocket
connect
WSAAsyncSelect
ioctlsocket
recv
send
socket

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter16/Chat-TCP/Client.rc
Chapter16/Chat-TCP/Main.ico
Chapter16/Chat-TCP/Makefile
Chapter16/Chat-TCP/Server.asm
Chapter16/Chat-TCP/Server.exe
.exe windows:4 windows x86 arch:x86

eea12f5bee708380b0bc3daec92b8d13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SetDlgItemInt
MessageBoxA
GetWindowTextLengthA
GetDlgItem
SendMessageA
wsprintfA
DialogBoxParamA

kernel32

lstrlenA
RtlZeroMemory
ExitProcess
GetModuleHandleA

wsock32

htons
WSACleanup
WSAStartup
accept
bind
closesocket
WSAAsyncSelect
listen
recv
send
socket

Sections

.text
Size: 1024B - Virtual size: 938B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 590B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter16/Chat-TCP/Server.rc
Chapter16/Chat-UDP/Client.asm
Chapter16/Chat-UDP/Client.exe
.exe windows:4 windows x86 arch:x86

b350baabd9403baa8ea956509fd17ae1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
GetWindowTextLengthA
SetDlgItemTextA
GetDlgItemTextA
GetDlgItem
MessageBoxA
SendMessageA
EnableWindow
DialogBoxParamA

kernel32

lstrlenA
RtlZeroMemory
GetModuleHandleA
ExitProcess

wsock32

htons
WSACleanup
WSAGetLastError
WSAStartup
closesocket
WSAAsyncSelect
ioctlsocket
recvfrom
sendto
socket

Sections

.text
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter16/Chat-UDP/Client.rc
Chapter16/Chat-UDP/Main.ico
Chapter16/Chat-UDP/Makefile
Chapter16/Chat-UDP/Server.asm
Chapter16/Chat-UDP/Server.exe
.exe windows:4 windows x86 arch:x86

531f33d34fe3e7ed0827fd64af339a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowTextLengthA
GetDlgItem
EndDialog
MessageBoxA
SendMessageA
SetDlgItemInt
DialogBoxParamA
wsprintfA

kernel32

lstrlenA
RtlZeroMemory
GetModuleHandleA
ExitProcess

wsock32

htons
WSACleanup
WSAStartup
bind
closesocket
WSAAsyncSelect
recvfrom
sendto
socket

Sections

.text
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 570B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter16/Chat-UDP/Server.rc
Chapter16/Ping/Makefile
Chapter16/Ping/Ping.asm
Chapter16/Ping/Ping.exe
.exe windows:4 windows x86 arch:x86

a0b38f78a7685af01481a29f338e4a0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCommandLineA
GetStdHandle
GetTickCount
RtlZeroMemory
SetConsoleCtrlHandler
ExitProcess
WriteFile
lstrcatA
lstrcpyA
lstrlenA

user32

wsprintfA

wsock32

inet_addr
WSAStartup
closesocket
gethostbyname
ioctlsocket
WSACleanup
recvfrom
select
sendto
socket

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter16/Ping/_CheckSum.asm
Chapter16/Ping/_CmdLine.asm
Chapter16/Ping/_Console.asm
Chapter17/AddCode/Main.asm
Chapter17/AddCode/Main.exe
.exe windows:4 windows x86 arch:x86

f05be6f6129163f0cffbcd630afa2a1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SendMessageA
MessageBoxA
LoadIconA
GetWindowTextLengthA
GetDlgItem
EndDialog
DialogBoxParamA
wsprintfA

kernel32

GetModuleHandleA
lstrlenA
lstrcpyA
lstrcatA
WriteFile
UnmapViewOfFile
SetFilePointer
SetEndOfFile
RtlZeroMemory
RtlMoveMemory
CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
ExitProcess
FreeLibrary
GetFileSize
MapViewOfFile
GlobalAlloc
GlobalFree
LoadLibraryA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter17/AddCode/Main.ico
Chapter17/AddCode/Main.rc
Chapter17/AddCode/Makefile
Chapter17/AddCode/_AddCode.asm
Chapter17/AddCode/_GetKernel.asm
Chapter17/AddCode/_ProcessPeFile.asm
Chapter17/Export/Main.asm
Chapter17/Export/Main.exe
.exe windows:4 windows x86 arch:x86

ff16f2b14c16ae6923337f6e92f94d05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SendMessageA
MessageBoxA
LoadIconA
GetWindowTextLengthA
GetDlgItem
EndDialog
DialogBoxParamA
wsprintfA

kernel32

CreateFileMappingA
lstrcpyA
UnmapViewOfFile
RtlZeroMemory
MapViewOfFile
LoadLibraryA
GetModuleHandleA
GetFileSize
FreeLibrary
ExitProcess
CloseHandle
CreateFileA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter17/Export/Main.ico
Chapter17/Export/Main.rc
Chapter17/Export/Makefile
Chapter17/Export/_ProcessPeFile.asm
Chapter17/Export/_RvaToFileOffset.asm
Chapter17/Import/Main.asm
Chapter17/Import/Main.exe
.exe windows:4 windows x86 arch:x86

ff16f2b14c16ae6923337f6e92f94d05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SendMessageA
MessageBoxA
LoadIconA
GetWindowTextLengthA
GetDlgItem
EndDialog
DialogBoxParamA
wsprintfA

kernel32

CreateFileMappingA
lstrcpyA
UnmapViewOfFile
RtlZeroMemory
MapViewOfFile
LoadLibraryA
GetModuleHandleA
GetFileSize
FreeLibrary
ExitProcess
CloseHandle
CreateFileA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter17/Import/Main.ico
Chapter17/Import/Main.rc
Chapter17/Import/Makefile
Chapter17/Import/_ProcessPeFile.asm
Chapter17/Import/_RvaToFileOffset.asm
Chapter17/NoImport/Makefile
Chapter17/NoImport/NoImport.asm
Chapter17/NoImport/NoImport.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chapter17/NoImport/_GetKernel.asm
Chapter17/PeInfo/Main.asm
Chapter17/PeInfo/Main.exe
.exe windows:4 windows x86 arch:x86

ff16f2b14c16ae6923337f6e92f94d05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SendMessageA
MessageBoxA
LoadIconA
GetWindowTextLengthA
GetDlgItem
EndDialog
DialogBoxParamA
wsprintfA

kernel32

CreateFileMappingA
lstrcpyA
UnmapViewOfFile
RtlZeroMemory
MapViewOfFile
LoadLibraryA
GetModuleHandleA
GetFileSize
FreeLibrary
ExitProcess
CloseHandle
CreateFileA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter17/PeInfo/Main.ico
Chapter17/PeInfo/Main.rc
Chapter17/PeInfo/Makefile
Chapter17/PeInfo/_ProcessPeFile.asm
Chapter17/Reloc/Main.asm
Chapter17/Reloc/Main.exe
.exe windows:4 windows x86 arch:x86

6508c369065b8d37ab93aaaebd1156f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SendMessageA
MessageBoxA
LoadIconA
GetWindowTextLengthA
GetDlgItem
EndDialog
DialogBoxParamA
wsprintfA

kernel32

ExitProcess
lstrcpyA
lstrcatA
UnmapViewOfFile
RtlZeroMemory
MapViewOfFile
LoadLibraryA
GetModuleHandleA
GetFileSize
FreeLibrary
CloseHandle
CreateFileA
CreateFileMappingA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter17/Reloc/Main.ico
Chapter17/Reloc/Main.rc
Chapter17/Reloc/Makefile
Chapter17/Reloc/_ProcessPeFile.asm
Chapter17/Reloc/_RvaToFileOffset.asm
Chapter17/Resource/Main.asm
Chapter17/Resource/Main.exe
.exe windows:4 windows x86 arch:x86

e7301cbbce8acf7846c52cc3529b4e7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SendMessageA
MessageBoxA
LoadIconA
GetWindowTextLengthA
GetDlgItem
EndDialog
DialogBoxParamA
wsprintfA

kernel32

ExitProcess
lstrcpyA
WideCharToMultiByte
UnmapViewOfFile
RtlZeroMemory
MapViewOfFile
LoadLibraryA
GetModuleHandleA
GetFileSize
FreeLibrary
CloseHandle
CreateFileA
CreateFileMappingA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chapter17/Resource/Main.ico
Chapter17/Resource/Main.rc
Chapter17/Resource/Makefile
Chapter17/Resource/_ProcessPeFile.asm
Chapter17/Resource/_RvaToFileOffset.asm
Readme.txt
Var.bat
.bat .vbs

Sharing

General

Malware Config

Signatures

Files

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 512B - Virtual size: 38B

.rdata Size: 512B - Virtual size: 146B

.data Size: 512B - Virtual size: 60B

.rsrc Size: 1024B - Virtual size: 928B

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 512B - Virtual size: 38B

.rdata Size: 512B - Virtual size: 146B

.data Size: 512B - Virtual size: 30B

ecb650bdf609df8aeb939cd8f6fe9796

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 1024B - Virtual size: 526B

.rdata Size: 1024B - Virtual size: 614B

.data Size: - Virtual size: 8B

10289a768b94d4f9c6192b12c28adf71

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 512B - Virtual size: 476B

.rdata Size: 1024B - Virtual size: 602B

.data Size: - Virtual size: 8B

6a3212ae10473262b6c0029ccb8d875a

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 1024B - Virtual size: 742B

.rdata Size: 6KB - Virtual size: 6KB

.data Size: - Virtual size: 8B

be2e52b6bcb27f2752f5e09a0fede9c2

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 1024B - Virtual size: 642B

.rdata Size: 6KB - Virtual size: 5KB

.data Size: - Virtual size: 8B

a39f7d6e3ecf360a83d0cb8a058007e9

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 1024B - Virtual size: 724B

.rdata Size: 6KB - Virtual size: 6KB

.data Size: - Virtual size: 8B

56de47efb39a8465d235cc49278666c6

Headers

File Characteristics

Imports

.text
Size: 512B - Virtual size: 38B

.rdata
Size: 512B - Virtual size: 146B

.data
Size: 512B - Virtual size: 60B

.rsrc
Size: 1024B - Virtual size: 928B

.text
Size: 512B - Virtual size: 38B

.rdata
Size: 512B - Virtual size: 146B

.data
Size: 512B - Virtual size: 30B

.text
Size: 1024B - Virtual size: 526B

.rdata
Size: 1024B - Virtual size: 614B

.data
Size: - Virtual size: 8B

.text
Size: 512B - Virtual size: 476B

.rdata
Size: 1024B - Virtual size: 602B

.data
Size: - Virtual size: 8B

.text
Size: 1024B - Virtual size: 742B

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 8B

.text
Size: 1024B - Virtual size: 642B

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: - Virtual size: 8B

.text
Size: 1024B - Virtual size: 724B

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 8B

.text
Size: 1024B - Virtual size: 710B

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 8B

.text
Size: 512B - Virtual size: 444B

.rdata
Size: 1024B - Virtual size: 574B

.data
Size: - Virtual size: 520B

.text
Size: 512B - Virtual size: 160B

.rdata
Size: 512B - Virtual size: 360B

.data
Size: 512B - Virtual size: 260B

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 706B

.data
Size: - Virtual size: 16B

.rsrc
Size: 59KB - Virtual size: 59KB

.text
Size: 512B - Virtual size: 196B

.rdata
Size: 512B - Virtual size: 242B

.data
Size: - Virtual size: 4B

.rsrc
Size: 1KB - Virtual size: 1KB

.text
Size: 1024B - Virtual size: 824B

.rdata
Size: 1024B - Virtual size: 632B

.data
Size: - Virtual size: 28B

.rsrc
Size: 4KB - Virtual size: 4KB

.text
Size: 1024B - Virtual size: 766B

.rdata
Size: 512B - Virtual size: 494B

.data
Size: - Virtual size: 4B