b8f59db60e62594bb70a1bedccd3680f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b8f59db60e62594bb70a1bedccd3680f_JaffaCakes118
Size

2.1MB
MD5

b8f59db60e62594bb70a1bedccd3680f
SHA1

1569c887e361ec8a28c4d3caaec21c6f2d422261
SHA256

d59706733f70e6dfae907fe6180c9d6216700e5fd407421765c31187788caee3
SHA512

4807d0be5cd8c7013b5e2131bddbce26159a74d011fbf9e439cbb5dc911164ae8fb401e9c7946d1bc46fa2dc77ffea5c121de687994f775335e3a18a8c06d4d7
SSDEEP

49152:4ueIu5DW2W1SWcbgv0DQ2CfvIhSZguCjIz4wmTKo7fNrE1:zeIu5fWcMKQ2C4UgnjI8tv7fhy

Score

3^/10

Malware Config

Signatures

Unsigned PE 16 IoCs

Checks for missing Authenticode signature.

resource
b8f59db60e62594bb70a1bedccd3680f_JaffaCakes118
unpack001/$APPDATA/mIRC/bin/dll/in_flac.dll
unpack001/$APPDATA/mIRC/bin/dll/in_midi.dll
unpack001/$APPDATA/mIRC/bin/dll/in_mp3.dll
unpack001/$APPDATA/mIRC/bin/dll/in_vorbis.dll
unpack001/$APPDATA/mIRC/bin/dll/in_wave.dll
unpack001/$APPDATA/mIRC/bin/dll/out_wave.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/bin/dll/in_flac.dll
unpack001/bin/dll/in_midi.dll
unpack001/bin/dll/in_mp3.dll
unpack001/bin/dll/in_vorbis.dll
unpack001/bin/dll/in_wave.dll
unpack001/bin/dll/out_wave.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

b8f59db60e62594bb70a1bedccd3680f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$APPDATA/mIRC/bin/dll/in_flac.dll
.dll windows:5 windows x86 arch:x86

452234f0f2796182c6c44fe84d2876c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFindExtensionW
PathCombineA

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleA
GetProcAddress
LoadLibraryW
lstrcmpiW
GetPrivateProfileStringW
MultiByteToWideChar
WaitForMultipleObjectsEx
CloseHandle
CreateFileW
WaitForSingleObject
SetEvent
CompareStringW
WideCharToMultiByte
lstrcpynW
GetPrivateProfileIntA
CreateEventA
SetThreadPriority
CreateThread
ResetEvent
QueueUserAPC
ReadFile
WriteFile
GetLastError
SetFilePointer
DeleteFileW
CopyFileW
MoveFileW
GetTempFileNameW
GetTempPathW
lstrcpynA
GetPrivateProfileStringA
WritePrivateProfileStringA
lstrcmpiA
GetFileSize
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
RaiseException
LoadLibraryA
InterlockedExchange
FreeLibrary
LocalAlloc

user32

GetDlgItemTextA
IsDlgButtonChecked
EndDialog
SetWindowLongA
GetDlgItem
SetDlgItemTextW
EnableWindow
CheckDlgButton
MessageBoxW
GetDlgItemTextW
GetParent
SetPropW
SendMessageA
PostMessageA
MessageBoxIndirectW
SetDlgItemTextA
GetWindowLongA

msvcr90

_crt_debugger_hook
__clean_type_info_names_internal
_vsnwprintf
__CxxFrameHandler3
wcschr
free
malloc
_wcsicmp
_purecall
_CIpow
_atof_l
strchr
_stricmp
atoi
_wcsdup
??2@YAPAXI@Z
memset
??3@YAXPAX@Z
_wtoi
_vsnprintf
calloc
memcpy
memmove
_strdup
realloc
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ

Exports

Exports

winampAddUnifiedFileInfoPane
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo
winampWriteExtendedGetLastError

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$APPDATA/mIRC/bin/dll/in_midi.dll
.dll windows:5 windows x86 arch:x86

3aec25def9d87820ccb80726d2b34730

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathCombineA
PathFindExtensionW
PathIsURLW

kernel32

GetCurrentThreadId
GetModuleHandleA
CreateThread
SetThreadPriority
ResumeThread
WaitForSingleObject
TerminateThread
lstrcmpA
WritePrivateProfileStructA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileStructA
lstrcpyA
WideCharToMultiByte
MultiByteToWideChar
GetFileSize
GetShortPathNameW
CompareStringW
lstrcpynW
EnterCriticalSection
GetTickCount
GetTempPathA
lstrlenA
lstrcatA
LoadLibraryA
GetProcAddress
FreeLibrary
SetFilePointer
Sleep
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
InterlockedCompareExchange
RaiseException
GetLastError
InterlockedExchange
LocalAlloc
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
MulDiv
DeleteFileA
CloseHandle
GetModuleFileNameA
ReadFile
WriteFile
CreateFileA
lstrcpynA

user32

GetWindowTextLengthA
GetWindowTextA
SendMessageA
KillTimer
DispatchMessageA
GetMessageA
IsZoomed
RegisterClassA
ValidateRect
ReleaseDC
DrawEdge
GetDC
MessageBoxIndirectW
MessageBoxW
MessageBoxA
MapWindowPoints
GetClientRect
EndDialog
GetParent
SendMessageW
EnumChildWindows
EnableWindow
SetWindowTextW
LoadCursorA
SetWindowTextA
wsprintfA
SetDlgItemInt
GetDlgItemTextA
GetWindowRect
IsIconic
GetDlgItemInt
SendDlgItemMessageA
SetWindowPos
GetSystemMetrics
GetDlgItem
ShowWindow
CreateWindowExA
MapDialogRect
SetDlgItemTextA
SetWindowLongA
PostMessageA
DestroyWindow
DefWindowProcA
GetWindowLongA
wsprintfW
SetTimer

gdi32

CreateDIBSection
GetObjectA
SelectObject
CreateCompatibleDC
DeleteObject
DeleteDC
BitBlt

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegQueryValueExA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

msvcr90

_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
_itow
strncmp
_vsnprintf
wcscmp
atoi
strstr
_purecall
??2@YAPAXI@Z
_itoa
pow
log
wcscat
wcsncpy
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
free
realloc
mbstowcs
__CxxFrameHandler3
log10
??_U@YAPAXI@Z
tolower
??_V@YAXPAX@Z
malloc
memcpy
memcmp
memset
_stricmp
strlen
strcpy
strrchr
??3@YAXPAX@Z

Exports

Exports

winampGetExtendedFileInfoW
winampGetInModule2

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$APPDATA/mIRC/bin/dll/in_mp3.dll
.dll windows:5 windows x86 arch:x86

d79f701928ce41fffe3de474c9d7dc17

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathIsURLW
PathStripPathW
PathRemoveExtensionW
PathFindExtensionW

nsutil

nsutil_pcm_FloatToInt_Interleaved
nsutil_pcm_FloatToInt_Interleaved_Gain

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
MulDiv
InitializeCriticalSection
DeleteCriticalSection
lstrcpynW
CreateThread
SetThreadPriority
WaitForSingleObject
CloseHandle
InterlockedExchangeAdd
InterlockedExchange
QueryPerformanceCounter
Sleep
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetTickCount
WideCharToMultiByte
CreateFileW
GetFileTime
SetFilePointer
ReadFile
GetLastError
WritePrivateProfileStringA
CreateFileA
WriteFile
MultiByteToWideChar
lstrcmpiW
lstrcmpW
lstrlenW
MoveFileW
CopyFileW
DeleteFileW
GetFileAttributesW
SetEndOfFile
GetModuleHandleW
lstrcmpA
GetCurrentProcessId
GetCurrentThreadId
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
LoadLibraryA
FreeLibrary
GetProcAddress
LocalAlloc
GetModuleFileNameA

user32

ReleaseDC
SetWindowTextA
DrawTextA
GetClientRect
GetDC
GetDlgItemInt
wsprintfW
SetWindowTextW
GetDlgItemTextW
IsDlgButtonChecked
CheckDlgButton
SetPropW
GetParent
GetPropW
RegisterWindowMessageW
SetTimer
EnableWindow
GetDlgItem
SetDlgItemTextW
CharNextW
SendDlgItemMessageW
KillTimer
SetFocus
EndDialog
GetDlgItemTextA
SetDlgItemTextA
GetWindowLongW
SetWindowLongW
SendMessageTimeoutW
PostMessageW
wsprintfA
SendMessageW
MessageBoxIndirectW
SetDlgItemInt
MapWindowPoints
PtInRect
MessageBoxW

gdi32

DeleteObject
SelectObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderW
SHGetFolderPathA

msvcr90

_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
wcslen
_CIcos
_CIlog10
_CIatan
_CIlog
ceil
_CIsin
floor
_CIsqrt
fopen
_CIexp
fread
fclose
_CIpow
memcmp
memset
??3@YAXPAX@Z
_wcsicmp
??2@YAPAXI@Z
memmove
_wcsnicmp
_purecall
free
malloc
calloc
_strnicmp
_vsnprintf
_vsnwprintf
_wtof_l
strstr
atoi
wcsstr
strtoul
??_U@YAPAXI@Z
??_V@YAXPAX@Z
_stricmp
_strdup
_wtoi
wcschr
strncpy
wcstoul
strchr
_wcsdup
__CxxFrameHandler3
strlen
strcmp
memcpy
wcsncpy
wcscmp

Exports

Exports

CreateAudioDecoder
DeleteAudioDecoder
winampAddUnifiedFileInfoPane
winampClearExtendedFileInfoW
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetExtendedRead_openW_float
winampGetExtendedRead_setTime
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$APPDATA/mIRC/bin/dll/in_vorbis.dll
.dll windows:5 windows x86 arch:x86

945033b6f4790a07229642dadd96ba57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFindExtensionW
PathFindFileNameW
PathIsURLW
PathCombineA

kernel32

LeaveCriticalSection
lstrcpynW
GetTickCount
MulDiv
SetFilePointer
WritePrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStructA
GetPrivateProfileStructA
GetPrivateProfileStringA
CreateFileW
MoveFileW
DeleteFileW
SetFileAttributesW
Sleep
lstrcpynA
GetProcAddress
GetModuleHandleA
GetDiskFreeSpaceA
GetFileSize
GetTempPathW
EnterCriticalSection
GetFileTime
SetFileTime
CopyFileW
lstrcmpiW
CompareStringW
GetLastError
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
CreateThread
SetThreadPriority
ResumeThread
WaitForSingleObject
TerminateThread
DisableThreadLibraryCalls
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
ReadFile
WriteFile
CreateFileA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
GetCurrentProcessId

user32

GetDlgItemTextA
GetDlgItemInt
IsDlgButtonChecked
SetDlgItemInt
SetWindowLongW
GetWindowLongW
PtInRect
MapWindowPoints
RegisterWindowMessageW
RegisterClassA
LoadCursorA
PostMessageA
CharNextW
DefWindowProcA
ReleaseDC
DrawEdge
GetDC
LoadBitmapA
KillTimer
RedrawWindow
wsprintfW
SetTimer
SetPropW
GetDlgItemTextW
MessageBoxA
wsprintfA
ShowWindow
SendDlgItemMessageA
SetDlgItemTextA
GetParent
SendMessageW
SetActiveWindow
GetMessageA
EnableWindow
IsWindowEnabled
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetClientRect
SetWindowLongA
GetSystemMetrics
GetWindowLongA
GetWindowRect
CreateWindowExA
GetDlgItem
EndDialog
DestroyWindow
SetWindowPos
SetDlgItemTextW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
SendMessageA
GetWindowTextA

gdi32

GetObjectA
GetStockObject
DeleteDC
TextOutA
DeleteObject
CreateCompatibleDC
SelectObject
BitBlt
SetTextColor
SetBkMode
SetTextAlign
CreateFontIndirectA

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc

msvcr90

__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
memchr
exit
ceil
qsort
ldexp
memmove
floor
fopen
fseek
_errno
_wtoi
toupper
wcsrchr
_vsnprintf
strcpy
fclose
ftell
fread
_fseeki64
_atof_l
_crt_debugger_hook
_CIexp
_CIsqrt
_CIcos
_CIatan
_CIsin
_CIlog
_CIpow
strstr
atoi
log10
_vsnwprintf
__CxxFrameHandler3
pow
memcmp
abs
strcmp
_stricmp
strlen
malloc
calloc
free
memcpy
vsprintf
_vswprintf_c_l
memset
realloc
_purecall
??2@YAPAXI@Z
strchr
_wcsdup
??3@YAXPAX@Z
wcsstr
_wcsicmp
sprintf
_itoa
_strdup
wcschr
wcscmp
fabs
_strnicmp

Exports

Exports

winampAddUnifiedFileInfoPane
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetExtendedRead_openW_float
winampGetExtendedRead_setTime
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$APPDATA/mIRC/bin/dll/in_wave.dll
.dll windows:5 windows x86 arch:x86

2b8d505197962109d117ecb1d1b86efe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathIsURLW
PathFindExtensionW
PathStripPathW

kernel32

GetPrivateProfileStringA
QueueUserAPC
lstrcpynW
MulDiv
SetEvent
CloseHandle
ResetEvent
SleepEx
WaitForMultipleObjectsEx
DisableThreadLibraryCalls
SetThreadPriority
CreateThread
CreateEventA
WaitForSingleObject
lstrlenA
lstrcatA
lstrcpynA
MultiByteToWideChar
lstrcmpiA
CompareStringA
CompareStringW
GetShortPathNameW
WideCharToMultiByte
GetModuleHandleA
WritePrivateProfileStringA

user32

EndDialog
MessageBoxA
GetDlgItemTextA
CharNextA
MessageBoxIndirectW
CharPrevA
PostMessageA
SendMessageA
SetDlgItemTextA
GetDlgItem

libsndfile

ord80
ord2
ord60
ord71
ord16
ord18
ord17
ord4
ord3
ord1

msvcr90

_stricmp
_vsnwprintf
_vsnprintf
memset
malloc
free

Exports

Exports

winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_open
winampGetExtendedRead_setTime
winampGetInModule2

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 962B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$APPDATA/mIRC/bin/dll/out_wave.dll
.dll windows:5 windows x86 arch:x86

318b4842e578206de8ebcddfeaf1e9e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
MulDiv
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
Sleep
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleFileNameA
SetEvent
lstrcpyA
LocalAlloc
lstrlenA
CloseHandle
WaitForSingleObject
SetThreadPriority
GetCurrentThread
CreateThread
CreateEventA
GetLastError
InterlockedExchange
RaiseException

user32

SetWindowLongW
SetDlgItemTextA
SetTimer
SetWindowTextA
GetDlgItem
KillTimer
EnableWindow
GetWindowLongA
GetClientRect
MapWindowPoints
PtInRect
GetWindowLongW
RegisterWindowMessageW
SendDlgItemMessageA
MessageBoxA
EndDialog
wsprintfA
wsprintfW
MessageBoxIndirectW
SendMessageA

msvcr90

memset
_CIlog
_CIpow
strrchr
strchr
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy

Exports

Exports

winampGetOutModule

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$APPDATA/mIRC/bin/grc/gamersirc.grc
.js
$APPDATA/mIRC/bin/ini/servers.ini
$APPDATA/mIRC/bin/lng/1031.lng
$APPDATA/mIRC/bin/lng/1033.lng
$APPDATA/mIRC/bin/lng/1046.lng
$APPDATA/mIRC/bin/lng/2057.lng
$APPDATA/mIRC/ircintro.chm
.chm
$APPDATA/mIRC/license.txt
$APPDATA/mIRC/media/vhistoryeng.txt
$APPDATA/mIRC/media/vhistoryger.txt
$APPDATA/mIRC/media/vhistoryptbr.txt
$APPDATA/mIRC/mirc.chm
.chm
$APPDATA/mIRC/mirc.exe
.exe windows:5 windows x86 arch:x86

15e4889f1ebcb2e7159808df5e891472

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5b:28:ab:fe:6f:78:7a:e1:54:75:f0:c4:5f:20:02:9b
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

22/08/2011, 00:00

Not After

11/11/2012, 23:59

Subject

CN=mIRC Co. Ltd.,OU=Secure Application Development,O=mIRC Co. Ltd.,L=London,ST=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ea:e8:db:ac:1c:db:83:5e:a4:1d:61:e9:52:1f:50:9f:95:15:ff:f2
Signer

Actual PE Digest

ea:e8:db:ac:1c:db:83:5e:a4:1d:61:e9:52:1f:50:9f:95:15:ff:f2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIconSize
ord17
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
InitCommonControlsEx

iphlpapi

GetBestInterface

mpr

WNetCloseEnum
WNetOpenEnumW
WNetEnumResourceW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

winmm

mciSendStringW
mciGetDeviceIDW
mciGetErrorStringW
timeEndPeriod
timeSetEvent
timeKillEvent
timeBeginPeriod
timeGetDevCaps
mixerClose
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetLineInfoW
mixerOpen
PlaySoundW

ws2_32

ntohl
WSASetLastError
ntohs
getservbyport
gethostbyaddr
closesocket
getservbyname
inet_ntoa
gethostbyname
gethostname
connect
WSAGetLastError
accept
WSAAsyncSelect
inet_addr
htonl
getpeername
setsockopt
bind
socket
getsockname
listen
getsockopt
shutdown
recvfrom
sendto
send
recv
WSACleanup
WSAStartup
htons

kernel32

InterlockedIncrement
InterlockedDecrement
SetEndOfFile
SetFilePointer
CreateDirectoryW
DeleteFileW
GetVolumeInformationW
GetDriveTypeW
GetLogicalDriveStringsW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
TryEnterCriticalSection
GetLocalTime
GetCurrentThreadId
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
SetErrorMode
GetModuleFileNameW
FindCloseChangeNotification
FindNextChangeNotification
WaitForMultipleObjects
FindFirstChangeNotificationW
GetPrivateProfileStringW
RemoveDirectoryW
GetShortPathNameW
MultiByteToWideChar
ReleaseMutex
CreateMutexW
GetTimeZoneInformation
FileTimeToSystemTime
DeleteCriticalSection
WideCharToMultiByte
GetUserDefaultLangID
GlobalLock
GetTempPathW
GetSystemDirectoryA
MoveFileW
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
RaiseException
RtlUnwind
SetStdHandle
GetFileType
PeekNamedPipe
GetFileInformationByHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetFullPathNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
SetEnvironmentVariableW
SetConsoleCtrlHandler
HeapSize
FileTimeToLocalFileTime
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
CreateThread
ExitThread
HeapFree
ExitProcess
GetModuleHandleW
GlobalUnlock
GlobalAlloc
GlobalFree
GetLastError
CopyFileW
LoadLibraryA
CompareStringA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CompareStringW
GetProcessHeap
GetCurrentProcessId
WritePrivateProfileStringW
GetCommandLineW
SetEnvironmentVariableA
IsValidLocale
FindFirstFileW
FindNextFileW
FindClose
GetCurrentProcess
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
LoadLibraryExW
EnumResourceTypesW
EnumResourceNamesW
GetTickCount
QueryPerformanceFrequency
QueryPerformanceCounter
GetVersionExW
QueryDosDeviceW
GetFileAttributesW
SetFileAttributesW
MulDiv
GetSystemDefaultLangID
GetWindowsDirectoryW
GetSystemDefaultLCID
GetLocaleInfoW
CreateEventW
WaitForSingleObject
LoadLibraryW
GetProcAddress
FreeLibrary
GetCurrentThread
SetThreadPriority
SetEvent
Sleep
CloseHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
WriteFile
GetStdHandle
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringW
CreateFileW
GetCurrentDirectoryA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetDriveTypeA
LCMapStringA
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStartupInfoA
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA

user32

VkKeyScanExW
GetKeyboardLayout
CopyAcceleratorTableW
CallNextHookEx
MapVirtualKeyW
CharLowerBuffW
DrawIcon
LoadIconW
GetWindowDC
DefMDIChildProcW
GetClassLongW
IsRectEmpty
OffsetRect
IsMenu
GetMenuState
InsertMenuItemW
GetMenuItemInfoW
RemoveMenu
SetMenuItemInfoW
GetMenuItemID
TrackPopupMenu
RegisterWindowMessageW
SetWindowsHookExW
GetWindowThreadProcessId
LoadAcceleratorsW
DispatchMessageW
TranslateMessage
TranslateMDISysAccel
IsDialogMessageW
LoadMenuW
keybd_event
DefFrameProcW
PostQuitMessage
RegisterClassExW
UnhookWindowsHookEx
GetMonitorInfoW
MonitorFromWindow
MonitorFromPoint
ValidateRect
DrawTextA
IsClipboardFormatAvailable
DefWindowProcW
DrawFrameControl
RegisterClassW
wsprintfW
CopyImage
CreateIconIndirect
GetWindowRgn
SetWindowRgn
SetScrollInfo
CallWindowProcW
DdeInitializeW
DdeClientTransaction
DdeQueryStringW
DdeFreeDataHandle
DdeNameService
DdeUninitialize
DdeAccessData
DdeUnaccessData
DdeCreateDataHandle
DdeCreateStringHandleW
DdeConnect
DdeDisconnect
DdeFreeStringHandle
DialogBoxParamW
IsChild
GetScrollRange
BeginDeferWindowPos
InsertMenuW
ModifyMenuW
GetNextDlgTabItem
ChildWindowFromPointEx
GetScrollInfo
SetScrollPos
CreateMenu
SetMenu
SetScrollRange
SetCapture
ReleaseCapture
GetWindowPlacement
SetWindowPlacement
SetActiveWindow
GetMenuStringW
CreateDialogParamW
DestroyWindow
GetGUIThreadInfo
CopyRect
FindWindowExW
SetForegroundWindow
OpenClipboard
GetClipboardData
EmptyClipboard
CloseClipboard
SetClipboardData
ClientToScreen
TrackMouseEvent
ChildWindowFromPoint
WindowFromPoint
BringWindowToTop
GetFocus
GetIconInfo
WinHelpW
GetSysColorBrush
GetPropW
RemovePropW
SetPropW
GetClassNameW
SystemParametersInfoW
GetForegroundWindow
FindWindowW
IntersectRect
EqualRect
GetWindow
CreateWindowExW
DrawTextW
GetMessagePos
GetAsyncKeyState
GetWindowLongW
GetSystemMetrics
LoadStringW
MessageBeep
GetTopWindow
IsZoomed
GetActiveWindow
IsWindow
GetSystemMenu
CheckMenuItem
GetDesktopWindow
IsIconic
GetDialogBaseUnits
SetDlgItemInt
GetDlgItemInt
CreatePopupMenu
DestroyMenu
GetWindowTextW
GetMenu
GetSubMenu
DeferWindowPos
EndDeferWindowPos
CharUpperW
CharUpperBuffW
GetCapture
ShowScrollBar
RedrawWindow
FlashWindow
MessageBoxW
ScrollDC
GetMessageW
GetKeyboardState
SetKeyboardState
GetScrollPos
ClipCursor
RegisterClassExA
CreateWindowExA
DefWindowProcA
SetWindowLongA
IsWindowUnicode
GetWindowLongA
SendMessageA
ReleaseDC
PostMessageW
MapWindowPoints
GetWindowRect
GetDlgItem
GetMenuItemCount
DeleteMenu
EnableMenuItem
AppendMenuW
DrawMenuBar
FrameRect
GetParent
DrawFocusRect
GetSysColor
GetKeyState
LoadCursorW
SetCursor
PeekMessageW
MsgWaitForMultipleObjects
FillRect
DrawEdge
BeginPaint
EndPaint
DrawIconEx
DestroyIcon
LoadImageW
IsWindowVisible
SendMessageW
CheckDlgButton
SetRect
SetFocus
GetDlgCtrlID
GetCursorPos
ScreenToClient
SetWindowPos
IsDlgButtonChecked
EndDialog
SetWindowLongW
UpdateWindow
PtInRect
SetWindowTextW
EnableWindow
ShowWindow
MoveWindow
GetClientRect
SetTimer
KillTimer
IsWindowEnabled
InvalidateRect
SendDlgItemMessageW
GetDC
ToAscii

gdi32

CreateDIBSection
SetBitmapBits
GetBitmapBits
LineTo
MoveToEx
CreatePen
SelectClipRgn
CombineRgn
CreateRectRgn
GetNearestColor
PtInRegion
CreatePolygonRgn
SetBkMode
ExtFloodFill
CreatePatternBrush
Rectangle
RoundRect
Ellipse
CreateDIBitmap
SetROP2
IntersectClipRect
GetClipRgn
GetBkColor
GetTextColor
GetCurrentObject
EnumFontFamiliesExW
GetTextCharset
GetTextFaceW
RestoreDC
SaveDC
ExtTextOutA
GetCharABCWidthsA
GetCharABCWidthsW
GetTextExtentPoint32W
GetTextExtentPoint32A
GetTextExtentExPointW
GetTextExtentExPointA
GetClipBox
Polyline
ExcludeClipRect
GetObjectType
CreateBitmap
Polygon
FrameRgn
CreateRoundRectRgn
GetDIBits
CreateCompatibleBitmap
StretchBlt
SetStretchBltMode
SetBrushOrgEx
CreateCompatibleDC
BitBlt
DeleteDC
GetDeviceCaps
CreateFontW
CreateHatchBrush
GetTextMetricsW
ExtTextOutW
CreateSolidBrush
DeleteObject
GetObjectW
CreateFontIndirectW
SelectObject
SetTextColor
SetBkColor
GetPixel
GetStockObject
SetPixelV

comdlg32

ChooseFontW
CommDlgExtendedError
GetOpenFileNameW
ChooseColorW

advapi32

RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegSetValueW
RegCreateKeyW
RegQueryValueExW
RegQueryValueW

shell32

SHBrowseForFolderW
SHGetDesktopFolder
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
DragQueryFileW
FindExecutableW
SHAppBarMessage
ShellExecuteExW
ShellExecuteW
ExtractIconExW
ExtractIconW
Shell_NotifyIconW

ole32

OleInitialize
OleUninitialize
CoGetInterfaceAndReleaseStream
CLSIDFromProgID
CoCreateInstance
ProgIDFromCLSID
CoLockObjectExternal
RevokeDragDrop
ReleaseStgMedium
OleSetContainedObject
CoGetClassObject
RegisterDragDrop
CoTaskMemFree

oleaut32

VarCyFromR8
VarR8FromDate
VarR8FromCy
DispGetParam
VarDateFromR8
LoadRegTypeLi
SetErrorInfo
SysAllocString
VariantClear
VariantCopy
VariantInit
SysFreeString
VariantChangeType

crypt32

CertEnumCertificatesInStore
CertEnumCRLsInStore
CertCloseStore
CertOpenSystemStoreW

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$APPDATA/mIRC/readme.txt
$APPDATA/mIRC/versions.txt
$PLUGINSDIR/LangDLL.dll
.dll windows:4 windows x86 arch:x86

9b6b6a7858e17fb0b17e1c1428330343

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
GetACP
lstrlenA
lstrcmpA
lstrcpynA
GetModuleHandleA
MulDiv
lstrcpyA
GlobalAlloc

user32

SetWindowTextA
SetDlgItemTextA
SendDlgItemMessageA
EndDialog
DialogBoxParamA
LoadIconA
SendMessageA
ShowWindow
GetDC

gdi32

CreateFontIndirectA
GetDeviceCaps
DeleteObject

Exports

Exports

LangDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 697B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
GetProcessHeap
SetCurrentDirectoryA

user32

GetPropA
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
RemovePropA
CharPrevA
GetWindowLongA
DrawTextA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
MapDialogRect
GetClientRect
CharNextA
SendMessageA
DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bin/dll/in_flac.dll
.dll windows:5 windows x86 arch:x86

452234f0f2796182c6c44fe84d2876c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFindExtensionW
PathCombineA

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleA
GetProcAddress
LoadLibraryW
lstrcmpiW
GetPrivateProfileStringW
MultiByteToWideChar
WaitForMultipleObjectsEx
CloseHandle
CreateFileW
WaitForSingleObject
SetEvent
CompareStringW
WideCharToMultiByte
lstrcpynW
GetPrivateProfileIntA
CreateEventA
SetThreadPriority
CreateThread
ResetEvent
QueueUserAPC
ReadFile
WriteFile
GetLastError
SetFilePointer
DeleteFileW
CopyFileW
MoveFileW
GetTempFileNameW
GetTempPathW
lstrcpynA
GetPrivateProfileStringA
WritePrivateProfileStringA
lstrcmpiA
GetFileSize
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
RaiseException
LoadLibraryA
InterlockedExchange
FreeLibrary
LocalAlloc

user32

GetDlgItemTextA
IsDlgButtonChecked
EndDialog
SetWindowLongA
GetDlgItem
SetDlgItemTextW
EnableWindow
CheckDlgButton
MessageBoxW
GetDlgItemTextW
GetParent
SetPropW
SendMessageA
PostMessageA
MessageBoxIndirectW
SetDlgItemTextA
GetWindowLongA

msvcr90

_crt_debugger_hook
__clean_type_info_names_internal
_vsnwprintf
__CxxFrameHandler3
wcschr
free
malloc
_wcsicmp
_purecall
_CIpow
_atof_l
strchr
_stricmp
atoi
_wcsdup
??2@YAPAXI@Z
memset
??3@YAXPAX@Z
_wtoi
_vsnprintf
calloc
memcpy
memmove
_strdup
realloc
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ

Exports

Exports

winampAddUnifiedFileInfoPane
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo
winampWriteExtendedGetLastError

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bin/dll/in_midi.dll
.dll windows:5 windows x86 arch:x86

3aec25def9d87820ccb80726d2b34730

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathCombineA
PathFindExtensionW
PathIsURLW

kernel32

GetCurrentThreadId
GetModuleHandleA
CreateThread
SetThreadPriority
ResumeThread
WaitForSingleObject
TerminateThread
lstrcmpA
WritePrivateProfileStructA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileStructA
lstrcpyA
WideCharToMultiByte
MultiByteToWideChar
GetFileSize
GetShortPathNameW
CompareStringW
lstrcpynW
EnterCriticalSection
GetTickCount
GetTempPathA
lstrlenA
lstrcatA
LoadLibraryA
GetProcAddress
FreeLibrary
SetFilePointer
Sleep
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
InterlockedCompareExchange
RaiseException
GetLastError
InterlockedExchange
LocalAlloc
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
MulDiv
DeleteFileA
CloseHandle
GetModuleFileNameA
ReadFile
WriteFile
CreateFileA
lstrcpynA

user32

GetWindowTextLengthA
GetWindowTextA
SendMessageA
KillTimer
DispatchMessageA
GetMessageA
IsZoomed
RegisterClassA
ValidateRect
ReleaseDC
DrawEdge
GetDC
MessageBoxIndirectW
MessageBoxW
MessageBoxA
MapWindowPoints
GetClientRect
EndDialog
GetParent
SendMessageW
EnumChildWindows
EnableWindow
SetWindowTextW
LoadCursorA
SetWindowTextA
wsprintfA
SetDlgItemInt
GetDlgItemTextA
GetWindowRect
IsIconic
GetDlgItemInt
SendDlgItemMessageA
SetWindowPos
GetSystemMetrics
GetDlgItem
ShowWindow
CreateWindowExA
MapDialogRect
SetDlgItemTextA
SetWindowLongA
PostMessageA
DestroyWindow
DefWindowProcA
GetWindowLongA
wsprintfW
SetTimer

gdi32

CreateDIBSection
GetObjectA
SelectObject
CreateCompatibleDC
DeleteObject
DeleteDC
BitBlt

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegQueryValueExA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

msvcr90

_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
_itow
strncmp
_vsnprintf
wcscmp
atoi
strstr
_purecall
??2@YAPAXI@Z
_itoa
pow
log
wcscat
wcsncpy
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
free
realloc
mbstowcs
__CxxFrameHandler3
log10
??_U@YAPAXI@Z
tolower
??_V@YAXPAX@Z
malloc
memcpy
memcmp
memset
_stricmp
strlen
strcpy
strrchr
??3@YAXPAX@Z

Exports

Exports

winampGetExtendedFileInfoW
winampGetInModule2

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bin/dll/in_mp3.dll
.dll windows:5 windows x86 arch:x86

d79f701928ce41fffe3de474c9d7dc17

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathIsURLW
PathStripPathW
PathRemoveExtensionW
PathFindExtensionW

nsutil

nsutil_pcm_FloatToInt_Interleaved
nsutil_pcm_FloatToInt_Interleaved_Gain

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
MulDiv
InitializeCriticalSection
DeleteCriticalSection
lstrcpynW
CreateThread
SetThreadPriority
WaitForSingleObject
CloseHandle
InterlockedExchangeAdd
InterlockedExchange
QueryPerformanceCounter
Sleep
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetTickCount
WideCharToMultiByte
CreateFileW
GetFileTime
SetFilePointer
ReadFile
GetLastError
WritePrivateProfileStringA
CreateFileA
WriteFile
MultiByteToWideChar
lstrcmpiW
lstrcmpW
lstrlenW
MoveFileW
CopyFileW
DeleteFileW
GetFileAttributesW
SetEndOfFile
GetModuleHandleW
lstrcmpA
GetCurrentProcessId
GetCurrentThreadId
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
LoadLibraryA
FreeLibrary
GetProcAddress
LocalAlloc
GetModuleFileNameA

user32

ReleaseDC
SetWindowTextA
DrawTextA
GetClientRect
GetDC
GetDlgItemInt
wsprintfW
SetWindowTextW
GetDlgItemTextW
IsDlgButtonChecked
CheckDlgButton
SetPropW
GetParent
GetPropW
RegisterWindowMessageW
SetTimer
EnableWindow
GetDlgItem
SetDlgItemTextW
CharNextW
SendDlgItemMessageW
KillTimer
SetFocus
EndDialog
GetDlgItemTextA
SetDlgItemTextA
GetWindowLongW
SetWindowLongW
SendMessageTimeoutW
PostMessageW
wsprintfA
SendMessageW
MessageBoxIndirectW
SetDlgItemInt
MapWindowPoints
PtInRect
MessageBoxW

gdi32

DeleteObject
SelectObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderW
SHGetFolderPathA

msvcr90

_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
wcslen
_CIcos
_CIlog10
_CIatan
_CIlog
ceil
_CIsin
floor
_CIsqrt
fopen
_CIexp
fread
fclose
_CIpow
memcmp
memset
??3@YAXPAX@Z
_wcsicmp
??2@YAPAXI@Z
memmove
_wcsnicmp
_purecall
free
malloc
calloc
_strnicmp
_vsnprintf
_vsnwprintf
_wtof_l
strstr
atoi
wcsstr
strtoul
??_U@YAPAXI@Z
??_V@YAXPAX@Z
_stricmp
_strdup
_wtoi
wcschr
strncpy
wcstoul
strchr
_wcsdup
__CxxFrameHandler3
strlen
strcmp
memcpy
wcsncpy
wcscmp

Exports

Exports

CreateAudioDecoder
DeleteAudioDecoder
winampAddUnifiedFileInfoPane
winampClearExtendedFileInfoW
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetExtendedRead_openW_float
winampGetExtendedRead_setTime
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bin/dll/in_vorbis.dll
.dll windows:5 windows x86 arch:x86

945033b6f4790a07229642dadd96ba57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFindExtensionW
PathFindFileNameW
PathIsURLW
PathCombineA

kernel32

LeaveCriticalSection
lstrcpynW
GetTickCount
MulDiv
SetFilePointer
WritePrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStructA
GetPrivateProfileStructA
GetPrivateProfileStringA
CreateFileW
MoveFileW
DeleteFileW
SetFileAttributesW
Sleep
lstrcpynA
GetProcAddress
GetModuleHandleA
GetDiskFreeSpaceA
GetFileSize
GetTempPathW
EnterCriticalSection
GetFileTime
SetFileTime
CopyFileW
lstrcmpiW
CompareStringW
GetLastError
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
CreateThread
SetThreadPriority
ResumeThread
WaitForSingleObject
TerminateThread
DisableThreadLibraryCalls
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
ReadFile
WriteFile
CreateFileA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
GetCurrentProcessId

user32

GetDlgItemTextA
GetDlgItemInt
IsDlgButtonChecked
SetDlgItemInt
SetWindowLongW
GetWindowLongW
PtInRect
MapWindowPoints
RegisterWindowMessageW
RegisterClassA
LoadCursorA
PostMessageA
CharNextW
DefWindowProcA
ReleaseDC
DrawEdge
GetDC
LoadBitmapA
KillTimer
RedrawWindow
wsprintfW
SetTimer
SetPropW
GetDlgItemTextW
MessageBoxA
wsprintfA
ShowWindow
SendDlgItemMessageA
SetDlgItemTextA
GetParent
SendMessageW
SetActiveWindow
GetMessageA
EnableWindow
IsWindowEnabled
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetClientRect
SetWindowLongA
GetSystemMetrics
GetWindowLongA
GetWindowRect
CreateWindowExA
GetDlgItem
EndDialog
DestroyWindow
SetWindowPos
SetDlgItemTextW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
SendMessageA
GetWindowTextA

gdi32

GetObjectA
GetStockObject
DeleteDC
TextOutA
DeleteObject
CreateCompatibleDC
SelectObject
BitBlt
SetTextColor
SetBkMode
SetTextAlign
CreateFontIndirectA

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc

msvcr90

__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
memchr
exit
ceil
qsort
ldexp
memmove
floor
fopen
fseek
_errno
_wtoi
toupper
wcsrchr
_vsnprintf
strcpy
fclose
ftell
fread
_fseeki64
_atof_l
_crt_debugger_hook
_CIexp
_CIsqrt
_CIcos
_CIatan
_CIsin
_CIlog
_CIpow
strstr
atoi
log10
_vsnwprintf
__CxxFrameHandler3
pow
memcmp
abs
strcmp
_stricmp
strlen
malloc
calloc
free
memcpy
vsprintf
_vswprintf_c_l
memset
realloc
_purecall
??2@YAPAXI@Z
strchr
_wcsdup
??3@YAXPAX@Z
wcsstr
_wcsicmp
sprintf
_itoa
_strdup
wcschr
wcscmp
fabs
_strnicmp

Exports

Exports

winampAddUnifiedFileInfoPane
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetExtendedRead_openW_float
winampGetExtendedRead_setTime
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bin/dll/in_wave.dll
.dll windows:5 windows x86 arch:x86

2b8d505197962109d117ecb1d1b86efe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathIsURLW
PathFindExtensionW
PathStripPathW

kernel32

GetPrivateProfileStringA
QueueUserAPC
lstrcpynW
MulDiv
SetEvent
CloseHandle
ResetEvent
SleepEx
WaitForMultipleObjectsEx
DisableThreadLibraryCalls
SetThreadPriority
CreateThread
CreateEventA
WaitForSingleObject
lstrlenA
lstrcatA
lstrcpynA
MultiByteToWideChar
lstrcmpiA
CompareStringA
CompareStringW
GetShortPathNameW
WideCharToMultiByte
GetModuleHandleA
WritePrivateProfileStringA

user32

EndDialog
MessageBoxA
GetDlgItemTextA
CharNextA
MessageBoxIndirectW
CharPrevA
PostMessageA
SendMessageA
SetDlgItemTextA
GetDlgItem

libsndfile

ord80
ord2
ord60
ord71
ord16
ord18
ord17
ord4
ord3
ord1

msvcr90

_stricmp
_vsnwprintf
_vsnprintf
memset
malloc
free

Exports

Exports

winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_open
winampGetExtendedRead_setTime
winampGetInModule2

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 962B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bin/dll/out_wave.dll
.dll windows:5 windows x86 arch:x86

318b4842e578206de8ebcddfeaf1e9e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
MulDiv
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
Sleep
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleFileNameA
SetEvent
lstrcpyA
LocalAlloc
lstrlenA
CloseHandle
WaitForSingleObject
SetThreadPriority
GetCurrentThread
CreateThread
CreateEventA
GetLastError
InterlockedExchange
RaiseException

user32

SetWindowLongW
SetDlgItemTextA
SetTimer
SetWindowTextA
GetDlgItem
KillTimer
EnableWindow
GetWindowLongA
GetClientRect
MapWindowPoints
PtInRect
GetWindowLongW
RegisterWindowMessageW
SendDlgItemMessageA
MessageBoxA
EndDialog
wsprintfA
wsprintfW
MessageBoxIndirectW
SendMessageA

msvcr90

memset
_CIlog
_CIpow
strrchr
strchr
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy

Exports

Exports

winampGetOutModule

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bin/grc/gamersirc.grc
.js
bin/ini/servers.ini
bin/lng/1031.lng
bin/lng/1033.lng
bin/lng/1046.lng
bin/lng/2057.lng
ircintro.chm
.chm
license.txt
media/vhistoryeng.txt
media/vhistoryger.txt
media/vhistoryptbr.txt
mirc.chm
.chm
mirc.exe
.exe windows:5 windows x86 arch:x86

15e4889f1ebcb2e7159808df5e891472

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5b:28:ab:fe:6f:78:7a:e1:54:75:f0:c4:5f:20:02:9b
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

22/08/2011, 00:00

Not After

11/11/2012, 23:59

Subject

CN=mIRC Co. Ltd.,OU=Secure Application Development,O=mIRC Co. Ltd.,L=London,ST=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ea:e8:db:ac:1c:db:83:5e:a4:1d:61:e9:52:1f:50:9f:95:15:ff:f2
Signer

Actual PE Digest

ea:e8:db:ac:1c:db:83:5e:a4:1d:61:e9:52:1f:50:9f:95:15:ff:f2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIconSize
ord17
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
InitCommonControlsEx

iphlpapi

GetBestInterface

mpr

WNetCloseEnum
WNetOpenEnumW
WNetEnumResourceW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

winmm

mciSendStringW
mciGetDeviceIDW
mciGetErrorStringW
timeEndPeriod
timeSetEvent
timeKillEvent
timeBeginPeriod
timeGetDevCaps
mixerClose
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetLineInfoW
mixerOpen
PlaySoundW

ws2_32

ntohl
WSASetLastError
ntohs
getservbyport
gethostbyaddr
closesocket
getservbyname
inet_ntoa
gethostbyname
gethostname
connect
WSAGetLastError
accept
WSAAsyncSelect
inet_addr
htonl
getpeername
setsockopt
bind
socket
getsockname
listen
getsockopt
shutdown
recvfrom
sendto
send
recv
WSACleanup
WSAStartup
htons

kernel32

InterlockedIncrement
InterlockedDecrement
SetEndOfFile
SetFilePointer
CreateDirectoryW
DeleteFileW
GetVolumeInformationW
GetDriveTypeW
GetLogicalDriveStringsW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
TryEnterCriticalSection
GetLocalTime
GetCurrentThreadId
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
SetErrorMode
GetModuleFileNameW
FindCloseChangeNotification
FindNextChangeNotification
WaitForMultipleObjects
FindFirstChangeNotificationW
GetPrivateProfileStringW
RemoveDirectoryW
GetShortPathNameW
MultiByteToWideChar
ReleaseMutex
CreateMutexW
GetTimeZoneInformation
FileTimeToSystemTime
DeleteCriticalSection
WideCharToMultiByte
GetUserDefaultLangID
GlobalLock
GetTempPathW
GetSystemDirectoryA
MoveFileW
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
RaiseException
RtlUnwind
SetStdHandle
GetFileType
PeekNamedPipe
GetFileInformationByHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetFullPathNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
SetEnvironmentVariableW
SetConsoleCtrlHandler
HeapSize
FileTimeToLocalFileTime
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
CreateThread
ExitThread
HeapFree
ExitProcess
GetModuleHandleW
GlobalUnlock
GlobalAlloc
GlobalFree
GetLastError
CopyFileW
LoadLibraryA
CompareStringA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CompareStringW
GetProcessHeap
GetCurrentProcessId
WritePrivateProfileStringW
GetCommandLineW
SetEnvironmentVariableA
IsValidLocale
FindFirstFileW
FindNextFileW
FindClose
GetCurrentProcess
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
LoadLibraryExW
EnumResourceTypesW
EnumResourceNamesW
GetTickCount
QueryPerformanceFrequency
QueryPerformanceCounter
GetVersionExW
QueryDosDeviceW
GetFileAttributesW
SetFileAttributesW
MulDiv
GetSystemDefaultLangID
GetWindowsDirectoryW
GetSystemDefaultLCID
GetLocaleInfoW
CreateEventW
WaitForSingleObject
LoadLibraryW
GetProcAddress
FreeLibrary
GetCurrentThread
SetThreadPriority
SetEvent
Sleep
CloseHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
WriteFile
GetStdHandle
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringW
CreateFileW
GetCurrentDirectoryA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetDriveTypeA
LCMapStringA
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStartupInfoA
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA

user32

VkKeyScanExW
GetKeyboardLayout
CopyAcceleratorTableW
CallNextHookEx
MapVirtualKeyW
CharLowerBuffW
DrawIcon
LoadIconW
GetWindowDC
DefMDIChildProcW
GetClassLongW
IsRectEmpty
OffsetRect
IsMenu
GetMenuState
InsertMenuItemW
GetMenuItemInfoW
RemoveMenu
SetMenuItemInfoW
GetMenuItemID
TrackPopupMenu
RegisterWindowMessageW
SetWindowsHookExW
GetWindowThreadProcessId
LoadAcceleratorsW
DispatchMessageW
TranslateMessage
TranslateMDISysAccel
IsDialogMessageW
LoadMenuW
keybd_event
DefFrameProcW
PostQuitMessage
RegisterClassExW
UnhookWindowsHookEx
GetMonitorInfoW
MonitorFromWindow
MonitorFromPoint
ValidateRect
DrawTextA
IsClipboardFormatAvailable
DefWindowProcW
DrawFrameControl
RegisterClassW
wsprintfW
CopyImage
CreateIconIndirect
GetWindowRgn
SetWindowRgn
SetScrollInfo
CallWindowProcW
DdeInitializeW
DdeClientTransaction
DdeQueryStringW
DdeFreeDataHandle
DdeNameService
DdeUninitialize
DdeAccessData
DdeUnaccessData
DdeCreateDataHandle
DdeCreateStringHandleW
DdeConnect
DdeDisconnect
DdeFreeStringHandle
DialogBoxParamW
IsChild
GetScrollRange
BeginDeferWindowPos
InsertMenuW
ModifyMenuW
GetNextDlgTabItem
ChildWindowFromPointEx
GetScrollInfo
SetScrollPos
CreateMenu
SetMenu
SetScrollRange
SetCapture
ReleaseCapture
GetWindowPlacement
SetWindowPlacement
SetActiveWindow
GetMenuStringW
CreateDialogParamW
DestroyWindow
GetGUIThreadInfo
CopyRect
FindWindowExW
SetForegroundWindow
OpenClipboard
GetClipboardData
EmptyClipboard
CloseClipboard
SetClipboardData
ClientToScreen
TrackMouseEvent
ChildWindowFromPoint
WindowFromPoint
BringWindowToTop
GetFocus
GetIconInfo
WinHelpW
GetSysColorBrush
GetPropW
RemovePropW
SetPropW
GetClassNameW
SystemParametersInfoW
GetForegroundWindow
FindWindowW
IntersectRect
EqualRect
GetWindow
CreateWindowExW
DrawTextW
GetMessagePos
GetAsyncKeyState
GetWindowLongW
GetSystemMetrics
LoadStringW
MessageBeep
GetTopWindow
IsZoomed
GetActiveWindow
IsWindow
GetSystemMenu
CheckMenuItem
GetDesktopWindow
IsIconic
GetDialogBaseUnits
SetDlgItemInt
GetDlgItemInt
CreatePopupMenu
DestroyMenu
GetWindowTextW
GetMenu
GetSubMenu
DeferWindowPos
EndDeferWindowPos
CharUpperW
CharUpperBuffW
GetCapture
ShowScrollBar
RedrawWindow
FlashWindow
MessageBoxW
ScrollDC
GetMessageW
GetKeyboardState
SetKeyboardState
GetScrollPos
ClipCursor
RegisterClassExA
CreateWindowExA
DefWindowProcA
SetWindowLongA
IsWindowUnicode
GetWindowLongA
SendMessageA
ReleaseDC
PostMessageW
MapWindowPoints
GetWindowRect
GetDlgItem
GetMenuItemCount
DeleteMenu
EnableMenuItem
AppendMenuW
DrawMenuBar
FrameRect
GetParent
DrawFocusRect
GetSysColor
GetKeyState
LoadCursorW
SetCursor
PeekMessageW
MsgWaitForMultipleObjects
FillRect
DrawEdge
BeginPaint
EndPaint
DrawIconEx
DestroyIcon
LoadImageW
IsWindowVisible
SendMessageW
CheckDlgButton
SetRect
SetFocus
GetDlgCtrlID
GetCursorPos
ScreenToClient
SetWindowPos
IsDlgButtonChecked
EndDialog
SetWindowLongW
UpdateWindow
PtInRect
SetWindowTextW
EnableWindow
ShowWindow
MoveWindow
GetClientRect
SetTimer
KillTimer
IsWindowEnabled
InvalidateRect
SendDlgItemMessageW
GetDC
ToAscii

gdi32

CreateDIBSection
SetBitmapBits
GetBitmapBits
LineTo
MoveToEx
CreatePen
SelectClipRgn
CombineRgn
CreateRectRgn
GetNearestColor
PtInRegion
CreatePolygonRgn
SetBkMode
ExtFloodFill
CreatePatternBrush
Rectangle
RoundRect
Ellipse
CreateDIBitmap
SetROP2
IntersectClipRect
GetClipRgn
GetBkColor
GetTextColor
GetCurrentObject
EnumFontFamiliesExW
GetTextCharset
GetTextFaceW
RestoreDC
SaveDC
ExtTextOutA
GetCharABCWidthsA
GetCharABCWidthsW
GetTextExtentPoint32W
GetTextExtentPoint32A
GetTextExtentExPointW
GetTextExtentExPointA
GetClipBox
Polyline
ExcludeClipRect
GetObjectType
CreateBitmap
Polygon
FrameRgn
CreateRoundRectRgn
GetDIBits
CreateCompatibleBitmap
StretchBlt
SetStretchBltMode
SetBrushOrgEx
CreateCompatibleDC
BitBlt
DeleteDC
GetDeviceCaps
CreateFontW
CreateHatchBrush
GetTextMetricsW
ExtTextOutW
CreateSolidBrush
DeleteObject
GetObjectW
CreateFontIndirectW
SelectObject
SetTextColor
SetBkColor
GetPixel
GetStockObject
SetPixelV

comdlg32

ChooseFontW
CommDlgExtendedError
GetOpenFileNameW
ChooseColorW

advapi32

RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegSetValueW
RegCreateKeyW
RegQueryValueExW
RegQueryValueW

shell32

SHBrowseForFolderW
SHGetDesktopFolder
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
DragQueryFileW
FindExecutableW
SHAppBarMessage
ShellExecuteExW
ShellExecuteW
ExtractIconExW
ExtractIconW
Shell_NotifyIconW

ole32

OleInitialize
OleUninitialize
CoGetInterfaceAndReleaseStream
CLSIDFromProgID
CoCreateInstance
ProgIDFromCLSID
CoLockObjectExternal
RevokeDragDrop
ReleaseStgMedium
OleSetContainedObject
CoGetClassObject
RegisterDragDrop
CoTaskMemFree

oleaut32

VarCyFromR8
VarR8FromDate
VarR8FromCy
DispGetParam
VarDateFromR8
LoadRegTypeLi
SetErrorInfo
SysAllocString
VariantClear
VariantCopy
VariantInit
SysFreeString
VariantChangeType

crypt32

CertEnumCertificatesInStore
CertEnumCRLsInStore
CertCloseStore
CertOpenSystemStoreW

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
readme.txt
versions.txt

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 88KB

.rsrc Size: 20KB - Virtual size: 19KB

452234f0f2796182c6c44fe84d2876c2

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

msvcr90

Exports

Exports

Sections

.text Size: 42KB - Virtual size: 41KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 3KB

3aec25def9d87820ccb80726d2b34730

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

comdlg32

advapi32

ole32

msvcr90

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 2KB - Virtual size: 8KB

.rsrc Size: 14KB - Virtual size: 14KB

.reloc Size: 7KB - Virtual size: 7KB

d79f701928ce41fffe3de474c9d7dc17

Headers

File Characteristics

Imports

shlwapi

nsutil

kernel32

user32

gdi32

shell32

msvcr90

Exports

Exports

Sections

.text Size: 175KB - Virtual size: 174KB

.rdata Size: 57KB - Virtual size: 56KB

.data Size: 18KB - Virtual size: 83KB

.rsrc Size: 15KB - Virtual size: 15KB

.reloc Size: 12KB - Virtual size: 12KB

945033b6f4790a07229642dadd96ba57

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 88KB

.rsrc
Size: 20KB - Virtual size: 19KB

.text
Size: 42KB - Virtual size: 41KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 2KB - Virtual size: 8KB

.rsrc
Size: 14KB - Virtual size: 14KB

.reloc
Size: 7KB - Virtual size: 7KB

.text
Size: 175KB - Virtual size: 174KB

.rdata
Size: 57KB - Virtual size: 56KB

.data
Size: 18KB - Virtual size: 83KB

.rsrc
Size: 15KB - Virtual size: 15KB

.reloc
Size: 12KB - Virtual size: 12KB

.text
Size: 139KB - Virtual size: 139KB

.rdata
Size: 71KB - Virtual size: 71KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 25KB - Virtual size: 25KB

.reloc
Size: 6KB - Virtual size: 6KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 5KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 962B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 828B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 1KB - Virtual size: 1KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

5b:28:ab:fe:6f:78:7a:e1:54:75:f0:c4:5f:20:02:9b
Certificate

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

ea:e8:db:ac:1c:db:83:5e:a4:1d:61:e9:52:1f:50:9f:95:15:ff:f2
Signer