b85a2c49e48df2533a99c44de069ada9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b85a2c49e48df2533a99c44de069ada9_JaffaCakes118
Size

2.5MB
MD5

b85a2c49e48df2533a99c44de069ada9
SHA1

83a8fbf73410bd3e7110f3a88f420ed192a4bbb6
SHA256

c909dba9fe0447a16571b26c4b974f0e8481a7d81509907a22748583e7853137
SHA512

d227dad2e4fb2d8c13b0fcba7c8752f0ddff89e54188377fac94ff6af63efcc4bd613e3f7c48b34183d692284a1ed5664a1e6761f1583ebc31778832d2531671
SSDEEP

49152:HuXwa1eoFcY4xYcxLhVZCqxbOPZy3PZBZkjmQLMCAz/gsuFqH+FFLu3:HuXpQoFtOYaLfgOZBZymQwrrgs/+fS

Score

3^/10

Malware Config

Signatures

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

resource
b85a2c49e48df2533a99c44de069ada9_JaffaCakes118
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/LinkCreator.exe
unpack001/Uninstall.exe
unpack001/emule.exe
unpack001/lang/de_DE.dll
unpack001/lang/es_ES_T.dll
unpack001/lang/fr_FR.dll
unpack001/lang/it_IT.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
static1/unpack001/Uninstall.exe	nsis_installer_1

Files

b85a2c49e48df2533a99c44de069ada9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18bc6fa81e19f21156316b1ae696ed6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
lstrcmpiA
ExitProcess
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
CopyFileA

user32

ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EndDialog
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
TrackPopupMenu
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

57354bdeea3dfae6e948101add87501a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
MultiByteToWideChar
GlobalAlloc

user32

GetDlgCtrlID
GetClientRect
SetWindowRgn
MapWindowPoints
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadIconA

gdi32

SetTextColor
GetObjectA
SelectObject
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LangDLL.dll
.dll windows:4 windows x86 arch:x86

2db813254ea8b4d2a92d703ecb659f39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrcpynA
lstrcmpA
lstrlenA
GetModuleHandleA
MulDiv
lstrcpyA
GlobalAlloc

user32

SetWindowTextA
SetDlgItemTextA
SendDlgItemMessageA
EndDialog
DialogBoxParamA
LoadIconA
SendMessageA
ShowWindow
GetDC

gdi32

CreateFontIndirectA
GetDeviceCaps
DeleteObject

Exports

Exports

LangDialog

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 681B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/Password.ini
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/logo.bmp
$PLUGINSDIR/modern-wizard.bmp
LinkCreator.exe
.exe windows:4 windows x86 arch:x86

d0f5c2b3f1ff2a5bbb3edc0099d992f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\eclipse302\workspace\LinkCreator\Release\LinkCreator.pdb

Imports

ws2_32

inet_addr

wininet

InternetOpenA
InternetConnectA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle

kernel32

WritePrivateProfileStringA
GetCurrentDirectoryA
GetCPInfo
GetOEMCP
SetErrorMode
ExitProcess
RtlUnwind
TerminateProcess
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
ExitThread
CreateThread
RaiseException
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
VirtualProtect
GetSystemInfo
VirtualQuery
SetEnvironmentVariableA
GlobalFlags
GetFileTime
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
InterlockedDecrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
FreeResource
GlobalAddAtomA
GetCurrentThread
FreeLibrary
GlobalDeleteAtom
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
GetModuleFileNameA
lstrcmpA
GetLastError
SetLastError
MulDiv
FormatMessageA
lstrcpynA
LocalFree
ReleaseMutex
CreateMutexA
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
GetCurrentThreadId
SetThreadPriority
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
GetVersion
MultiByteToWideChar
GetModuleHandleA
FindResourceExA
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
CreateFileA
GetFileSize
CloseHandle
WideCharToMultiByte
ResumeThread
FindResourceA
LoadResource
LockResource
SizeofResource
SetThreadLocale
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetSystemTimeAsFileTime

user32

GetSysColorBrush
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ShowWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
CheckDlgButton
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
GetSysColor
AdjustWindowRectEx
RegisterClassA
UnregisterClassA
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
PtInRect
GetWindow
ReleaseDC
GetDC
CopyRect
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
PostQuitMessage
wsprintfA
MessageBoxA
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
SetMenuItemBitmaps
GetFocus
GetParent
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
CharUpperA
SetForegroundWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
LoadCursorA
SetCursor
GetSystemMetrics
LoadIconA
EnableWindow
GetClientRect
IsIconic
GetSystemMenu
SendMessageA
ModifyMenuA
AppendMenuA
DrawIcon
PostMessageA
GetClassInfoA

gdi32

DeleteDC
GetStockObject
DeleteObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
SetMapMode
RestoreDC
SaveDC
ExtTextOutA
GetObjectA
SetBkColor
PtVisible

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

comctl32

ord17

shlwapi

PathFileExistsA
PathFindFileNameA
PathStripToRootA
PathIsDirectoryA
PathFindExtensionA
PathIsUNCA

oleaut32

VariantInit
VariantChangeType
VariantClear

oleacc

CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Template.eMuleSkin.ini
Uninstall.exe
.exe windows:4 windows x86 arch:x86

18bc6fa81e19f21156316b1ae696ed6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
lstrcmpiA
ExitProcess
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
CopyFileA

user32

ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EndDialog
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
TrackPopupMenu
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
changelog.ger.txt
changelog.txt
config/server.met
config/staticservers.dat
config/webservices.dat
eMule.tmpl
.js
emule.exe
.exe windows:4 windows x86 arch:x86

8d442cec9b5631c30ce5d0902bc630fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\eclipse302\workspace\srchybrid\Release\emule.pdb

Imports

kernel32

HeapDestroy
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
HeapSize
SetStdHandle
CreateThread
ExitThread
HeapCreate
VirtualFree
LCMapStringA
IsBadWritePtr
GetOEMCP
GetStringTypeA
GetCurrentDirectoryA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsBadReadPtr
IsBadCodePtr
GetDriveTypeA
SetEnvironmentVariableA
GlobalSize
CreateFileA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
CompareStringA
SetThreadPriority
FreeResource
SetFilePointer
WaitForMultipleObjects
InterlockedDecrement
InterlockedIncrement
ResetEvent
QueryPerformanceFrequency
QueryPerformanceCounter
GetLocalTime
GetSystemDirectoryA
ReadFile
WriteFile
GetOverlappedResult
GetProcessHeap
HeapAlloc
HeapFree
TerminateThread
DeviceIoControl
Beep
SetLastError
VirtualQuery
GetSystemInfo
VirtualAlloc
GetDateFormatA
GetTimeFormatA
PeekNamedPipe
GetFileInformationByHandle
GetFileType
LocalFree
MulDiv
GetTimeZoneInformation
FindClose
lstrlenA
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentProcess
ExitProcess
SetEvent
ResumeThread
WritePrivateProfileStringA
GetPrivateProfileStringA
SetThreadLocale
GetSystemDefaultLCID
GlobalAlloc
GlobalFree
SetConsoleCtrlHandler
GlobalLock
GlobalUnlock
LoadLibraryA
FreeLibrary
RaiseException
GetFileSize
GetTickCount
GetCurrentThreadId
GetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObject
CloseHandle
Sleep
LoadResource
LockResource
SizeofResource
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
TerminateProcess
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
GlobalFlags
SetErrorMode
VirtualProtect
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
GetCurrentThread
lstrcmpiA
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GlobalDeleteAtom
GetVersionExA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
ReleaseMutex
DuplicateHandle
UnlockFile
LockFile
FlushFileBuffers
SuspendThread
lstrcmpA
LocalAlloc
SetEndOfFile

advapi32

CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey

user32

MessageBoxA
GetDesktopWindow
SetForegroundWindow
GetDlgItem
wsprintfA
IsWindow
IsWindowVisible
TranslateMessage
FrameRect
UpdateWindow
InvalidateRect
CreateIconIndirect
GetIconInfo
CopyRect
InflateRect
OffsetRect
DrawFocusRect
GetClientRect
GetActiveWindow
GetNextDlgTabItem
GetParent
WindowFromPoint
DestroyMenu
DestroyCursor
SetCursor
GetSubMenu
CreatePopupMenu
ScreenToClient
RedrawWindow
GetCursorPos
DestroyWindow
GetAsyncKeyState
CloseClipboard
DrawEdge
DrawFrameControl
SetRect
GetCapture
SetCapture
ReleaseCapture
GetMessagePos
GetWindow
GetFocus
GetWindowDC
MapWindowPoints
GetKeyState
LockWindowUpdate
GetDCEx
GetNextDlgGroupItem
DeleteMenu
SetParent
UnpackDDElParam
ReuseDDElParam
SetMenu
InvalidateRgn
SetWindowContextHelpId
MapDialogRect
EndDialog
ShowOwnedPopups
EndPaint
BeginPaint
GetSysColor
FillRect
GetClassNameA
GetDC
ReleaseDC
ClientToScreen
GetWindowRect
SetTimer
ExitWindowsEx
KillTimer
UnhookWindowsHookEx
CallNextHookEx
EmptyClipboard
SetClipboardData
EnumWindows
GetSystemMetrics
SetWindowPos
OpenClipboard
PostQuitMessage
IsWindowEnabled
MoveWindow
IsDlgButtonChecked
DestroyIcon
PtInRect
RemoveMenu
IsChild
ChildWindowFromPointEx
SubtractRect
ShowWindow
SetWindowRgn
ShowCursor
SetRectEmpty
GetWindowTextA
SetDlgItemTextA
SetWindowTextA
ScrollDC
CheckMenuRadioItem
AdjustWindowRectEx
IsRectEmpty
CopyIcon
ShowScrollBar
DrawIconEx
CopyImage
SetMenuDefaultItem
EqualRect
MessageBeep
FlashWindow
SetActiveWindow
BringWindowToTop
IsIconic
GetSystemMenu
SetDlgItemInt
GetMenuItemCount
EnableMenuItem
CheckMenuItem
CreateMenu
DrawIcon
IntersectRect
GetDoubleClickTime
GetSysColorBrush
GetMenu
IsMenu
GetWindowRgn
GetScrollInfo
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
IsZoomed
GetMenuItemID
GetMenuState
ValidateRect
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindowPlacement
SystemParametersInfoA
GetDlgCtrlID
SetWindowPlacement
SetScrollInfo
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
TrackPopupMenu
ScrollWindow
GetMessageTime
GetTopWindow
GetLastActivePopup
GetForegroundWindow
SetFocus
SendDlgItemMessageA
CheckDlgButton
CheckRadioButton
GetDlgItemInt

gdi32

PtVisible
GetWindowExtEx
GetWindowOrgEx
GetViewportExtEx
GetViewportOrgEx
GetMapMode
GetBkColor
CreateRectRgn
GetBitmapBits
SetBitmapBits
CreateDIBSection
SetDIBColorTable
GdiFlush
CreateRectRgnIndirect
Rectangle
RealizePalette
RectVisible
Escape
CombineRgn
SetBkMode
SetBitmapDimensionEx
CreatePalette
CreatePen
GetBitmapDimensionEx
GetTextColor
Ellipse
LPtoDP
CreateEllipticRgn
GetRgnBox
SetBoundsRect
CreatePatternBrush
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectClipRgn
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetROP2
SetPolyFillMode
CreatePolygonRgn
FillRgn
OffsetRgn
SetRectRgn
SaveDC
GetClipBox
ExtSelectClipRgn
SetStretchBltMode
SetDIBitsToDevice
RestoreDC
GetDIBits
PatBlt
SetPixelV
SelectPalette
SetTextAlign
CreateSolidBrush
Polygon
CreateCompatibleBitmap
GetPixel
SetPixel
CreateCompatibleDC
SelectObject
SetBkColor
BitBlt
SetTextColor
DeleteDC
GetStockObject
DPtoLP
GetDeviceCaps
CreateBitmap
CreateBrushIndirect
DeleteObject

shell32

SHGetMalloc
DragFinish
SHAppBarMessage

winmm

timeGetTime
timeGetDevCaps
timeBeginPeriod
timeEndPeriod

crypt32

CryptEncryptMessage
CertOpenSystemStoreW
CertFreeCertificateContext
CertCloseStore
CertFindCertificateInStore
CertNameToStrW
CertGetNameStringW
CertGetCertificateContextProperty

comctl32

ImageList_Remove
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_SetOverlayImage
ImageList_GetImageCount
CreatePropertySheetPageW
DestroyPropertySheetPage
ImageList_Destroy
ImageList_AddMasked
ImageList_GetIconSize
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_SetBkColor
ImageList_Draw
ImageList_ReplaceIcon
_TrackMouseEvent
ord17
PropertySheetW
ImageList_LoadImageW
ImageList_Create

shlwapi

PathFileExistsW
PathRenameExtensionW
PathRemoveFileSpecW
PathIsRelativeW
PathRemoveExtensionW
PathFindExtensionW
PathFindFileNameW
PathRemoveBackslashW
PathCanonicalizeW
PathAddBackslashW
PathStripToRootW
PathStripPathW
PathGetArgsW
PathIsUNCW
PathCombineW
UrlUnescapeW
PathMatchSpecW

ole32

ReleaseStgMedium
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleCreateStaticFromData
OleSetContainedObject
CreateStreamOnHGlobal
CoTaskMemAlloc
StgOpenStorage
CoTaskMemFree
CoCreateInstance
CoInitialize
OleDuplicateData
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
CoGetClassObject
StgOpenStorageOnILockBytes
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoInitializeSecurity
CoUninitialize
RevokeDragDrop

oleaut32

OleCreateFontIndirect
SafeArrayGetElemsize
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantInit
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
SafeArrayCreate
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElement
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
SafeArrayDestroy
SafeArrayPutElement
SysStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
OleLoadPicture
VariantCopy
DispCallFunc
LoadRegTypeLi

urlmon

FindMimeFromData

wininet

InternetGetLastResponseInfoW
InternetSetFilePointer
InternetWriteFile
InternetCrackUrlW
HttpQueryInfoW
InternetCanonicalizeUrlW
InternetReadFile
InternetCloseHandle
InternetErrorDlg
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetConnectW
InternetSetStatusCallbackW
InternetOpenW
InternetQueryOptionW
InternetQueryDataAvailable
InternetOpenUrlW

winspool.drv

ClosePrinter

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lang/de_DE.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lang/es_ES_T.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lang/fr_FR.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lang/it_IT.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
license-DK.txt
license-FR.txt
license-GER.txt
license-GR.txt
license-IT.txt
license-KO.txt
license-LT.txt
license-PT_BR.txt
license-RU.txt
license-SP.txt
license.txt
readme.txt
webserver/add_server.gif
.gif
webserver/arrow_down.gif
.gif
webserver/arrow_up.gif
.gif
webserver/arrow_up_q.gif
.gif
webserver/black.gif
.gif
webserver/blue1.gif
.gif
webserver/blue2.gif
.gif
webserver/blue3.gif
.gif
webserver/blue4.gif
.gif
webserver/blue5.gif
.gif
webserver/blue6.gif
.gif
webserver/checked.gif
.gif
webserver/checked_no.gif
.gif
webserver/complete.gif
.gif
webserver/completing.gif
.gif
webserver/connecting.gif
.gif
webserver/ct_0.gif
.gif
webserver/ct_1.gif
.gif
webserver/ct_a.gif
.gif
webserver/ct_h.gif
.gif
webserver/ct_l.gif
.gif
webserver/ct_m.gif
.gif
webserver/ct_s.gif
.gif
webserver/ct_u.gif
.gif
webserver/disconnected.gif
.gif
webserver/downloading.gif
.gif
webserver/error.gif
.gif
webserver/failed.gif
.gif
webserver/favicon.ico
webserver/file.gif
.gif
webserver/filedown.gif
.gif
webserver/filetype_archive.gif
.gif
webserver/filetype_audio.gif
.gif
webserver/filetype_cdimage.gif
.gif
webserver/filetype_document.gif
.gif
webserver/filetype_emulecollection.gif
.gif
webserver/filetype_other.gif
.gif
webserver/filetype_picture.gif
.gif
webserver/filetype_program.gif
.gif
webserver/filetype_video.gif
.gif
webserver/green.gif
.gif
webserver/greenpercent.gif
.gif
webserver/h_emule.gif
.gif
webserver/h_graph.gif
.gif
webserver/h_graphs.gif
.gif
webserver/h_kad.gif
.gif
webserver/h_log.gif
.gif
webserver/h_preferences.gif
.gif
webserver/h_search.gif
.gif
webserver/h_server.gif
.gif
webserver/h_shared.gif
.gif
webserver/h_statistic.gif
.gif
webserver/h_transfer.gif
.gif
webserver/hashing.gif
.gif
webserver/high.gif
.gif
webserver/is_a4af.gif
.gif
webserver/is_banned.gif
.gif
webserver/is_credit.gif
.gif
webserver/is_friend.gif
.gif
webserver/is_getflc.gif
.gif
webserver/is_halfcmtbad.gif
.gif
webserver/is_halfcmtgood.gif
.gif
webserver/is_halfnone.gif
.gif
webserver/is_none.gif
.gif
webserver/is_release.gif
.gif
webserver/is_static.gif
.gif
webserver/l_add.gif
.gif
webserver/l_calendar.gif
.gif
webserver/l_cancel.gif
.gif
webserver/l_catarrow.gif
.gif
webserver/l_category.gif
.gif
webserver/l_catprio.gif
.gif
webserver/l_clear.gif
.gif
webserver/l_clock.gif
.gif
webserver/l_close.gif
.gif
webserver/l_comments.gif
.gif
webserver/l_con.gif
.gif
webserver/l_connect.gif
.gif
webserver/l_dndoublearrow.gif
.gif
webserver/l_downarrow.gif
.gif
webserver/l_ed2klink.gif
.gif
webserver/l_filedonkey.gif
.gif
webserver/l_filesearch.gif
.gif
webserver/l_forum.gif
.gif
webserver/l_friend.gif
.gif
webserver/l_getflc.gif
.gif
webserver/l_hasherror.gif
.gif
webserver/l_homepage.gif
.gif
webserver/l_info.gif
.gif
webserver/l_logout.gif
.gif
webserver/l_none.gif
.gif
webserver/l_options.gif
.gif
webserver/l_pause.gif
.gif
webserver/l_reboot.gif
.gif
webserver/l_remove.gif
.gif
webserver/l_rename.gif
.gif
webserver/l_resume.gif
.gif
webserver/l_search.gif
.gif
webserver/l_server.gif
.gif
webserver/l_shared.gif
.gif
webserver/l_showcat.gif
.gif
webserver/l_shutdown.gif
.gif
webserver/l_sources_0.gif
.gif
webserver/l_sources_10.gif
.gif
webserver/l_sources_25.gif
.gif
webserver/l_sources_5.gif
.gif
webserver/l_sources_50.gif
.gif
webserver/l_static.gif
.gif
webserver/l_stop.gif
.gif
webserver/l_timer.gif
.gif
webserver/l_timer_off.gif
.gif
webserver/l_uparrow.gif
.gif
webserver/l_updoublearrow.gif
.gif
webserver/l_users.gif
.gif
webserver/l_version.gif
.gif
webserver/login_bottom.gif
.gif
webserver/login_downmain.gif
.gif
webserver/login_lefttop.gif
.gif
webserver/login_righttop.gif
.gif
webserver/login_top.gif
.gif
webserver/login_topdown.gif
.gif
webserver/login_topseperator.gif
.gif
webserver/logo.jpg
.jpg
webserver/low.gif
.gif
webserver/m_category.gif
.gif
webserver/m_catprio.gif
.gif
webserver/m_clearcompleted.gif
.gif
webserver/main_bg.gif
.gif
webserver/main_menubg.gif
.gif
webserver/main_topbar.gif
.gif
webserver/main_topbardarker.gif
.gif
webserver/main_topbarseperator.gif
.gif
webserver/p_black.gif
.gif
webserver/p_blue1.gif
.gif
webserver/p_blue2.gif
.gif
webserver/p_blue3.gif
.gif
webserver/p_blue4.gif
.gif
webserver/p_blue5.gif
.gif
webserver/p_blue6.gif
.gif
webserver/p_green.gif
.gif
webserver/p_greenpercent.gif
.gif
webserver/p_red.gif
.gif
webserver/p_yellow.gif
.gif
webserver/paused.gif
.gif
webserver/qs_con.jpg
.jpg
webserver/qs_down.jpg
.jpg
webserver/qs_up.jpg
.jpg
webserver/qs_user.jpg
.jpg
webserver/red.gif
.gif
webserver/stalled.gif
.gif
webserver/stats_0.gif
.gif
webserver/stats_1.gif
.gif
webserver/stats_10.gif
.gif
webserver/stats_11.gif
.gif
webserver/stats_12.gif
.gif
webserver/stats_13.gif
.gif
webserver/stats_14.gif
.gif
webserver/stats_15.gif
.gif
webserver/stats_16.gif
.gif
webserver/stats_17.gif
.gif
webserver/stats_2.gif
.gif
webserver/stats_3.gif
.gif
webserver/stats_4.gif
.gif
webserver/stats_5.gif
.gif
webserver/stats_6.gif
.gif
webserver/stats_7.gif
.gif
webserver/stats_8.gif
.gif
webserver/stats_9.gif
.gif
webserver/stats_back.gif
.gif
webserver/stats_con.gif
.gif
webserver/stats_down.gif
.gif
webserver/stats_hidden.gif
.gif
webserver/stats_space.gif
.gif
webserver/stats_up.gif
.gif
webserver/stats_visible.gif
.gif
webserver/stopped.gif
.gif
webserver/t_complete.gif
.gif
webserver/t_completing.gif
.gif
webserver/t_connecting.gif
.gif
webserver/t_downloading.gif
.gif
webserver/t_error.gif
.gif
webserver/t_hashing.gif
.gif
webserver/t_next.gif
.gif
webserver/t_paused.gif
.gif
webserver/t_stalled.gif
.gif
webserver/t_stopped.gif
.gif
webserver/t_uploading.gif
.gif
webserver/t_waiting.gif
.gif
webserver/t_waitinghash.gif
.gif
webserver/transparent.gif
.gif
webserver/waiting.gif
.gif
webserver/waitinghash.gif
.gif
webserver/yellow.gif
.gif

Sharing

General

Malware Config

Signatures

Files

18bc6fa81e19f21156316b1ae696ed6b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 109KB

.ndata Size: - Virtual size: 44KB

.rsrc Size: 13KB - Virtual size: 13KB

57354bdeea3dfae6e948101add87501a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 954B

2db813254ea8b4d2a92d703ecb659f39

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 681B

.data Size: 512B - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 352B

.reloc Size: 512B - Virtual size: 254B

d0f5c2b3f1ff2a5bbb3edc0099d992f2

Headers

File Characteristics

PDB Paths

Imports

ws2_32

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oleaut32

oleacc

Sections

.text Size: 148KB - Virtual size: 146KB

.rdata Size: 36KB - Virtual size: 32KB

.data Size: 8KB - Virtual size: 20KB

.rsrc Size: 68KB - Virtual size: 66KB

18bc6fa81e19f21156316b1ae696ed6b

Headers

File Characteristics

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 109KB

.ndata
Size: - Virtual size: 44KB

.rsrc
Size: 13KB - Virtual size: 13KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 954B

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 681B

.data
Size: 512B - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 352B

.reloc
Size: 512B - Virtual size: 254B

.text
Size: 148KB - Virtual size: 146KB

.rdata
Size: 36KB - Virtual size: 32KB

.data
Size: 8KB - Virtual size: 20KB

.rsrc
Size: 68KB - Virtual size: 66KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 109KB

.ndata
Size: - Virtual size: 44KB

.rsrc
Size: 13KB - Virtual size: 13KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 660KB - Virtual size: 659KB

.data
Size: 68KB - Virtual size: 2.2MB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

.rsrc
Size: 100KB - Virtual size: 97KB

.reloc
Size: 4KB - Virtual size: 8B

.rsrc
Size: 100KB - Virtual size: 99KB

.reloc
Size: 4KB - Virtual size: 8B

.rsrc
Size: 100KB - Virtual size: 99KB

.reloc
Size: 4KB - Virtual size: 8B

.rsrc
Size: 100KB - Virtual size: 99KB

.reloc
Size: 4KB - Virtual size: 8B