bfa0a1795b2e5758ed597f8cb76a8a07_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bfa0a1795b2e5758ed597f8cb76a8a07_JaffaCakes118
Size

1.1MB
MD5

bfa0a1795b2e5758ed597f8cb76a8a07
SHA1

bc211ccf276cc4bc2b9176572194973dc4547d16
SHA256

ad87d24f29564a7da7c186b86c58d6286ed14db9948fa0e42dab0c4c90f54b5c
SHA512

2f734ca4d756cff8c79e3e9578c17a059367a78daea035d3eedc42f22af29e85fcc8031e152665ad7dbb53a09d075695025ff63f9fe43159fc83aa065d36d8c3
SSDEEP

24576:+NSbxmBENZtL/y6t6cGkcaLm2hihZ3xPjHhtwxCUaqVf:+ykA+9cGBaLmJ33FHAxZVf

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/20071810451101/房屋测绘系统gis/房屋测绘系统/CALC.EXE
unpack001/20071810451101/房屋测绘系统gis/房屋测绘系统/CJDFun.dll
unpack001/20071810451101/房屋测绘系统gis/房屋测绘系统/MAPX40.OCX
unpack001/20071810451101/房屋测绘系统gis/房屋测绘系统/house_map.exe

Files

bfa0a1795b2e5758ed597f8cb76a8a07_JaffaCakes118
.rar
20071810451101/下载说明.htm
.html .js polyglot
20071810451101/房屋测绘系统gis/房屋测绘系统/CALC.EXE
.exe windows:5 windows x86 arch:x86

98feaf0f8f73f7370e6122d9107f77bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

ShellAboutA

msvcrt

_exit
_strrev
_CxxThrowException
__CxxFrameHandler
_EH_prolog
_controlfp
??1type_info@@UAE@XZ
??3@YAXPAX@Z
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
toupper
memmove
strchr

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

kernel32

LocalReAlloc
LocalAlloc
GetCommandLineA
GetProfileIntA
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
GetProcAddress
GlobalCompact
GlobalReAlloc
GlobalAlloc
GlobalFree
lstrcmpA
Sleep
WriteProfileStringA
GlobalLock
GlobalSize
GlobalUnlock
CloseHandle
CreateEventA
CreateThread
ResetEvent
SetEvent
WaitForSingleObject
lstrcpyA
LocalFree
lstrlenA
lstrcatA
GetProfileStringA

gdi32

SetBkColor
SetTextColor

user32

MessageBoxA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
IsChild
IsDialogMessageA
GetMessageA
LoadAcceleratorsA
CreateWindowExA
LoadStringA
CharNextA
RegisterClassExA
GetSysColorBrush
LoadCursorA
LoadIconA
InvalidateRect
UpdateWindow
ShowWindow
SetDlgItemTextA
CheckMenuRadioItem
GetSubMenu
GetMenu
SetWindowPos
OffsetRect
MapWindowPoints
GetClientRect
EnableWindow
GetDlgItem
CreateDialogParamA
DestroyWindow
GetWindowRect
SetCursor
CheckRadioButton
SetFocus
MessageBeep
SendMessageA
EndDialog
DialogBoxParamA
SetWindowTextA
CloseClipboard
GetClipboardData
OpenClipboard
DestroyMenu
TrackPopupMenuEx
LoadMenuA
DefWindowProcA
ChildWindowFromPoint
ScreenToClient
PostQuitMessage
WinHelpA
EnableMenuItem
IsClipboardFormatAvailable
GetDlgCtrlID
DrawTextA
DrawEdge
GetSysColor
CheckDlgButton
SetDlgItemInt
GetWindowTextA

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
20071810451101/房屋测绘系统gis/房屋测绘系统/CJDFun.dll
.dll regsvr32 windows:4 windows x86 arch:x86

d888046a1bad0283ea811082132550e8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaFreeVar
__vbaAryMove
__vbaStrVarMove
__vbaLenBstr
__vbaAptOffset
__vbaFreeVarList
_adj_fdiv_m64
__vbaFpCDblR8
__vbaFreeObjList
ord516
__vbaStrErrVarCopy
_adj_fprem1
__vbaRecAnsiToUni
ord519
__vbaStrCat
__vbaLsetFixstr
ord660
__vbaSetSystemError
__vbaRecDestruct
__vbaHresultCheckObj
__vbaNameFile
_adj_fdiv_m32
__vbaAryDestruct
__vbaExitProc
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
ord520
__vbaBoolVarNull
_CIsin
ord631
__vbaErase
ord632
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
ord528
__vbaStrCmp
ord529
__vbaVarTstEq
__vbaAryConstruct2
__vbaI2I4
DllFunctionCall
__vbaFpUI1
__vbaRedimPreserve
_adj_fpatan
__vbaFixstrConstruct
__vbaRedim
__vbaStrR8
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
ord601
_CIsqrt
EVENT_SINK_QueryInterface
__vbaStrUI1
__vbaUI1I4
__vbaExceptHandler
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
ord607
__vbaR8ErrVar
ord714
ord608
__vbaFPException
__vbaInStrVar
__vbaStrVarVal
__vbaLsetFixstrFree
_CIlog
__vbaErrorOverflow
__vbaInStr
__vbaR8Str
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord573
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord101
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaAryLock
__vbaVarAdd
__vbaStrToAnsi
__vbaVarDup
__vbaRecDestructAnsi
ord617
_CIatan
__vbaStrMove
ord619
_allmul
_CItan
__vbaAryUnlock
__vbaUI1Var
_CIexp
__vbaFreeObj
__vbaFreeStr
__vbaI4ErrVar

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
20071810451101/房屋测绘系统gis/房屋测绘系统/CJDFun.lib
20071810451101/房屋测绘系统gis/房屋测绘系统/DtSource.cls
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/MAPX40.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

6515a0f9564a3766d3f214c230cab9a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

alltype

?CreateAllType@@YAPAVAllType@@PBDIW4ALLTYPE_OWNERSHIP@@@Z
?CreateAllType@@YAPAVAllType@@PBUmiDATE@@W4ALLTYPE_OWNERSHIP@@@Z
?CreateAllType@@YAPAVAllType@@N@Z
?CreateAllType@@YAPAVAllType@@XZ

commandprocessor

?CreateCommandProcessor@CommandProcessor@@SAPAV1@PAVMIDataAccessEngine@@PAV?$MIEnumerator@PAVPacketIdentifierResolver@@@@_N@Z

collookupsystem

?CreateCLUSEntryEnumFilterTable@@YAPAV?$MIEnumeratorFilter@PAVCLUSEntry@@@@PAVMITable@@@Z
?CreateBoundColumnEntry@@YAPAVCLUSEntryBoundColumn@@JPAVMITable@@W4MI_AGGREGATE_METHOD@@PBDJJ_NW4tagCellType@@@Z
?CreateNativeColumnEntry@@YAPAVCLUSEntry@@JPAVMITable@@W4MI_AGGREGATE_METHOD@@PBDJW4tagCellType@@@Z
?CreateDynamicBoundColumnEntry@@YAPAVCLUSEntryBoundColumn@@PAVExprPacketItem@@JPAVMITable@@W4MI_AGGREGATE_METHOD@@PBDJJW4tagCellType@@@Z
?Create@ColLookUpSystem@@SAPAV1@XZ

coordsys

?InitNoOpCXFORM@@YAPAVCXFORM@@PAVShortClipRange@@@Z
?MatchUnitKeyword@@YA_NPBDPAW4UNIT@@@Z
?InitCSYSWithParms@@YAPAVCSYS@@W4CSYS_TYPE@@PBUCSYS_PARMS@@@Z
?NADCONTerminate@NADCON@@SAXXZ
?InitCSYS@@YAPAVCSYS@@PBV1@@Z
?InitCSYSParmsAsDefaultLL@@YAXPAUCSYS_PARMS@@@Z
?GetDatumInfo@@YAXFPAUDATUM_INFO@@@Z
?InitCSYSParms@@YAXPAUCSYS_PARMS@@@Z
?CalcAffineAlphas@@YA_NPAUAFFINE_INFO@@@Z
?IsDistanceUnit@@YA_NW4UNIT@@@Z
?ConvertUnits@@YAXPANW4UNIT@@ABN1@Z
?InitCSYSWithMultipliers@@YAPAVCSYS@@W4CSYS_TYPE@@PBUCSYS_PARMS@@ABN222@Z
?InitNoOpCSYS@@YAPAVCSYS@@XZ
?GetEllipsoidInfo@@YAXW4ELLIPSOID@@PAUELLIPSOID_INFO@@@Z
?InitCXFORM@@YAPAVCXFORM@@PBVCSYS@@0PAVShortClipRange@@@Z
?GetDefaultCSYSBounds@@YAXW4CSYS_TYPE@@PBUCSYS_PARMS@@PAUDRECT@@@Z
?DoublesToCSYSPARMS@@YA_NPANHPAW4CSYS_TYPE@@PAUCSYS_PARMS@@PAUDRECT@@PA_NPAH@Z
?InitDatumInfo@@YAXPAUDATUM_INFO@@@Z
?InitCSYSWithBounds@@YAPAVCSYS@@W4CSYS_TYPE@@PBUCSYS_PARMS@@PBUDRECT@@@Z
?NADCONInit@NADCON@@SA_NXZ

customproperties

?SetCustomPropertyValue@@YA_NPBVMIUnknown@@IPBDPAD@Z
?Create@CustomPropertyContainer@@SAPAV1@XZ
?SetCustomPropertyValue@@YA_NPBVMIUnknown@@IPBD_N@Z
?GetCustomPropertyValue@@YA_NPBVMIUnknown@@IPBDPA_N@Z
?GetCustomPropertyValue@@YA_NPBVMIUnknown@@IPBDPAPAD@Z

daengine

?msk_tagVersionReadAll@DataAccessMetadataConstants@@2QBDB
?setCoordSystem@MITableMetadata@@IAEXIPBVCSYS@@@Z
?msk_tagVersionEdit@DataAccessMetadataConstants@@2QBDB
?msk_tagTemporaryFlag@DataAccessMetadataConstants@@2QBDB
??0MITableMetadata@@QAE@PBD0PAVMetadata@@@Z
?msk_tagCharset@DataAccessMetadataConstants@@2QBDB
?addColumn@MITableMetadata@@IAEXABUMIColumnInfo@@@Z
?setColumn@MITableMetadata@@IAEXABUMIColumnInfo@@@Z
??0MITableMetadata@@QAE@ABVMISpecification@@PAVMetadata@@@Z
?init@MISpecification@@AAEXPBD@Z
?msk_tagDataPath@DataAccessMetadataConstants@@2QBDB
?msk_tagTablePath@DataAccessMetadataConstants@@2QBDB
??1MITableMetadata@@UAE@XZ
??0MIColumnMetadata@@QAE@W4eColumnType@0@@Z
?AddColumnDesc@MIColumnMetadata@@QAE_NPBDW4ALLTYPE_TYPE@@IIPBVCSYS@@_N3@Z
?GetColumnDesc@MIColumnMetadata@@QAE_NKPAPBDPAW4ALLTYPE_TYPE@@PAI2PAPAVCSYS@@PA_N4@Z
??1MIColumnMetadata@@UAE@XZ
?msk_tagDescription@DataAccessMetadataConstants@@2QBDB
?updateMetadata@MITableMetadata@@IBEXXZ
?msk_tagDatasourceTypeQuery@DataAccessMetadataConstants@@2QBDB
?MDAInitializeEngine@MIDataAccessEngine@@SA_NPAPAV1@PAVMITableEventSink@@@Z
?MDADeInitializeEngine@MIDataAccessEngine@@SA_NPAPAV1@@Z
?TranslateFieldTypeString@MITableMetadata@@SA?AW4ALLTYPE_TYPE@@PBD@Z
?msk_tagDatasourceTypeShapefile@DataAccessMetadataConstants@@2QBDB
?msk_tagPassword@DataAccessMetadataConstants@@2QBDB
?msk_tagDatasourceTypeAccess@DataAccessMetadataConstants@@2QBDB
?msk_tagDatasourceTypeRDB@DataAccessMetadataConstants@@2QBDB
?msk_tagDatasourceTypeNative@DataAccessMetadataConstants@@2QBDB
?msk_tagDatasourceTypeDBF@DataAccessMetadataConstants@@2QBDB
?msk_tagDatasourceTypeExcel@DataAccessMetadataConstants@@2QBDB
?msk_tagDatasourceTypeLotus@DataAccessMetadataConstants@@2QBDB
?msk_tagTitlesFlag@DataAccessMetadataConstants@@2QBDB
?msk_tagDelimiter@DataAccessMetadataConstants@@2QBDB
?msk_tagDatasourceTypeASCII@DataAccessMetadataConstants@@2QBDB
?SetDatasource@MITableMetadata@@QAEXPBD@Z
?msk_tagReadOnlyFlag@DataAccessMetadataConstants@@2QBDB
?msk_tagCoordSys@DataAccessMetadataConstants@@2QBDB
?addRasterPoint@MITableMetadata@@IAEXUDPNT@@ULPNT@@PBD@Z
?msk_tagQueryWhereClause@DataAccessMetadataConstants@@2QBDB
?msk_tagQueryOrderExpression@DataAccessMetadataConstants@@2QBDB
?addDomainSpecification@MITableMetadata@@IAEXPBD@Z
?msk_tagBeginMetadataNode@DataAccessMetadataConstants@@2QBDB
?msk_tagDatasourceTypeRaster@DataAccessMetadataConstants@@2QBDB
?msk_tagFieldTypeMemo@DataAccessMetadataConstants@@2QBDB
?msk_tagFieldTypeDate@DataAccessMetadataConstants@@2QBDB
?msk_tagFieldTypeLogical@DataAccessMetadataConstants@@2QBDB
?msk_tagFieldTypeSmallint@DataAccessMetadataConstants@@2QBDB
?msk_tagFieldTypeInteger@DataAccessMetadataConstants@@2QBDB
?msk_tagFieldTypeFloat@DataAccessMetadataConstants@@2QBDB
?msk_tagFieldTypeChar@DataAccessMetadataConstants@@2QBDB
?msk_tagVersionRead@DataAccessMetadataConstants@@2QBDB
?msk_tagFieldTypeDecimal@DataAccessMetadataConstants@@2QBDB

exprpacket

?CreateAllTypeExprPacketItem@@YAPAVAllTypeExprPacketItem@@PAVAllType@@PBD_N@Z
?CreateInterpreterExprPacket@@YAPAVExprPacket@@XZ

find

?Init@FindObject@@SA_NPBD@Z
?Create@FindObject@@SAPAV1@PAVMITable@@K0K@Z
?DeInit@FindObject@@SAXXZ

geo

?Create@GeoMatch@@SAPAV1@PBVCGeoTable@@0PAVMIDataAccessEngine@@K@Z
??0GEOSEARCHINFO@@QAE@XZ
??1GEOSEARCHINFO@@UAE@XZ
?Create@CGeoTable@@SAPAV1@PAVMITable@@_N@Z
?Create@GeoDictionary@@SAPAV1@PBD@Z

geoobject

?OverlayNodes@@YAPAVGeoObject@@PBV1@0W4eOverlayInclude@@PAPAV1@@Z
?OverlapObjects@@YAPAVGeoObject@@PBV1@0@Z
?CombineObjects@@YAPAVGeoObject@@PBV1@0@Z
?Create@GeoObject@@SAPAV1@PBV1@@Z
?SetObjectInfo@@YA_NPAVGeoObject@@W4eObjectInfo@@PBX@Z
?Create@GeoObject@@SAPAV1@PBV1@_NJ@Z
?Create@GeoObject@@SAPAV1@ABULPNT@@@Z
?GetGeoObjectRW@@YAPAVGeoObjectRW@@PAVGeoObject@@@Z
?Destroy@GeoObject@@SA_NAAPAV1@@Z
?Create@GeoObject@@SAPAV1@W4OBJECT_TYPE@@@Z
?EraseObject@@YAPAVGeoObject@@PBV1@0@Z

geoset

?SetLabelFont@CGeoLayerInfo@@QAE_NPBVcFont@@@Z
??0CGeoLayerInfo@@QAE@XZ
?SetLinePen@CGeoLayerInfo@@QAE_NPBVcPen@@@Z
?SetSymbol@CGeoLayerInfo@@QAE_NPBVcSymbol@@@Z
?SetBrush@CGeoLayerInfo@@QAE_NPBVcBrush@@@Z
?Create@CGeoset@@SAPAV1@_N@Z
?SetPen@CGeoLayerInfo@@QAE_NPBVcPen@@@Z
?SetFont@CGeoLayerInfo@@QAE_NPBVcFont@@@Z

legend

?Create@ThemeLegend@@SAPAV1@PAVGeoObjectRenderer@@PAVDotDensityTheme@@_N@Z
?Create@ThemeLegend@@SAPAV1@PAVGeoObjectRenderer@@PAVBarTheme@@_N2@Z
?Create@ThemeLegend@@SAPAV1@PAVGeoObjectRenderer@@PAVGradSymbolTheme@@_N@Z
?Create@ThemeLegend@@SAPAV1@PAVGeoObjectRenderer@@PAVIndValueTheme@@_N@Z
?Create@ThemeLegend@@SAPAV1@PAVGeoObjectRenderer@@PAVRangedTheme@@_N@Z
?Create@ThemeLegend@@SAPAV1@PAVGeoObjectRenderer@@PAVPieTheme@@_N2@Z

netapi32

Netbios

mapper

?GetBitmapSymbolCount@@YAFXZ
?FinishTextObj@@YAXPAVWindow@@PAVGeoObject@@PAVCXFORM@@PAUDPNT@@@Z
?MakeTextObj@@YAXPAVWindow@@PAPAVGeoObject@@PAVCXFORM@@PAVcFont@@PBDPAUDPNT@@@Z
?RefreshBitmapSymbols@@YAXXZ
?LoadBitmapSymbols@@YA_NPAD_N@Z
?GetBitmapSymbolName@@YAPBDF@Z
?Create@LABEL_EDIT_INFO@@SAPAV1@PBVMIDataKey@@@Z
?UnloadBitmapSymbols@@YAXXZ
?GetTextLabelLogMBR@@YA_NPAVWindow@@PAVGeoObject@@PAVCXFORM@@PAULPNT@@PAULRECT@@PAJ@Z
?Create@DRAW_CTOOLS@@SAPAV1@XZ
?GetAdjustedObjFont@@YA_NPAVWindow@@PAVGeoObject@@PAVCXFORM@@PAVcFont@@@Z
?Create@VIEW_DOC@@SAPAV1@PAVViewDocCallback@@PAVMIDataAccessEngine@@@Z
?CreateViewLayerFilterAll@@YAPBVViewLayerFilter@@XZ
?Create@Window@@SAPAV1@XZ
?CreateStyleOverrideGeoModifier@@YAPAVStyleOverrideGeoModifier@@PBD_N@Z
?CreateThematicGeoModifier@@YAPAVThematicGeoModifier@@PAVModifierTheme@@PBD_N@Z
?CreateThematicGeoModifier@@YAPAVThematicGeoModifier@@PAVDotDensityTheme@@PBD_N@Z
?PntInObj@@YA_NPAVWindow@@PAULPNT@@PAVGeoObject@@PAVCXFORM@@@Z
?Create@GeoObjectVLayer@@SAPAV1@PAVMITable@@PAVVIEW_DOC@@@Z
?Create@GeoRasterVLayer@@SAPAV1@PAVMIRasterTable@@PAVVIEW_DOC@@@Z
?Create@PieThemeVLayer@@SAPAV1@PAVMIDataAccessEngine@@PAVWindow@@PAVVIEW_DOC@@PAVPieTheme@@@Z
?Create@BarThemeVLayer@@SAPAV1@PAVMIDataAccessEngine@@PAVWindow@@PAVVIEW_DOC@@PAVBarTheme@@@Z
?Create@GradSymbolThemeVLayer@@SAPAV1@PAVMIDataAccessEngine@@PAVWindow@@PAVVIEW_DOC@@PAVGradSymbolTheme@@@Z
?UnloadVectorSymbolInfo@@YAXXZ
?LoadVectorSymbolFile@@YA_NPAD@Z
?InitializeStyledPens@@YA_NPBD@Z
?UnloadBrushBitmaps@@YAXXZ
?FreeStyledPenInfo@@YAXXZ
?LoadBrushBitmaps@@YA_NPAUHINSTANCE__@@H@Z
?CanInterleavePen@@YA_NE@Z
?Create@GeoObjectRenderer@@SAPAV1@W4RENDERER_TYPE@1@PAVVIEW_DOC@@@Z
?GetPenStyleCount@@YAEXZ
?Create@ClientDrawVLayer@@SAPAV1@PBDPAVVIEW_DOC@@@Z
?GetMinVectorSymbolCode@@YAFXZ
?GetMaxVectorSymbolCode@@YAFXZ

mimetadata

?Create@Metadata@@SAPAV1@PAV1@@Z

styles

?Create@cBrush@@SAPAV1@PBVMetadata@@@Z
?Create@cSymbol@@SAPAV1@PBV1@@Z
?big_xfont@@YAXPBVcFont@@@Z
?Create@cBrush@@SAPAV1@PBV1@@Z
?rotatable_xfont@@YAXPBVcFont@@@Z
?StyleUnInit@@YAXXZ
?name2fontdesc@@YAXPBDPAUFONT_DESC@@@Z
?small_xfont@@YAXPBVcFont@@@Z
?normal_xfont@@YAXPBVcFont@@@Z
?StyleInit@@YA_NXZ
?Create@cToolSettings@@SAPAV1@PBVMetadata@@@Z
?Black_CPen@@YAPBVcPen@@XZ
?Create@cPen@@SAPAV1@PBVMetadata@@@Z
?Create@cBrush@@SAPAV1@ABW4PAT_STYLE@@ABVcColor@@1_N@Z
?Create@cSymbol@@SAPAV1@PBVMetadata@@@Z
?PointToWidth@cPen@@SAFN@Z
?Create@cSymbol@@SAPAV1@W4SYMBOL_TYPE@@@Z
??BcColor@@QBEKXZ
?Create@cVectorSymbol@@SAPAV1@FABVcColor@@FF@Z
?VectorSymbol@@YAPBVcVectorSymbol@@PBVcSymbol@@@Z
?Hollow_XBrush@@YAPBVcBrush@@XZ
?Create@cToolSettings@@SAPAV1@PBV1@@Z
?FontSymbol@@YAPBVcFontSymbol@@PBVcSymbol@@@Z
?EffSymbol@@YAPBVcEffSymbol@@PBVcSymbol@@@Z
?Create@cAreaStyle@@SAPAV1@XZ
?Create@cPen@@SAPAV1@FABW4PAT_STYLE@@ABVcColor@@@Z
?Create@cTextStyle@@SAPAV1@XZ
?Create@cEffSymbol@@SAPAV1@XZ
?Create@cVectorSymbol@@SAPAV1@XZ
?Create@cFontSymbol@@SAPAV1@XZ
?Create@cPen@@SAPAV1@PBV1@@Z
?Create@cFont@@SAPAV1@PBV1@@Z
?Create@cFont@@SAPAV1@PBVMetadata@@@Z
?small_xfont@@YAPBVcFont@@XZ
?Hollow_CPen@@YAPBVcPen@@XZ
?Create@cToolSettings@@SAPAV1@W4SYMBOL_TYPE@@@Z
?FontSymbol@@YAPAVcFontSymbol@@PAVcSymbol@@@Z
??1cColor@@QAE@XZ
?Create@cFont@@SAPAV1@XZ
?Create@cFontSymbol@@SAPAV1@FPBVcFont@@FABVcColor@@F@Z
?normal_xfont@@YAPBVcFont@@XZ
?VectorSymbol@@YAPAVcVectorSymbol@@PAVcSymbol@@@Z
?Create@cEffSymbol@@SAPAV1@PBV1@@Z
?Create@cFontSymbol@@SAPAV1@PBV1@@Z
?Create@cVectorSymbol@@SAPAV1@PBV1@@Z
?EffSymbol@@YAPAVcEffSymbol@@PAVcSymbol@@@Z
?White_XBrush@@YAPBVcBrush@@XZ

thematics

?CreatePieTheme@@YAPAVPieTheme@@PAVGeoObjectVLayer@@_NPAPAVExprPacket@@JW4UNIT@@N3F@Z
?CreateIndValueTheme@@YAPAVIndValueTheme@@PAVGeoObjectVLayer@@_NPAVExprPacket@@1N1PBVcToolSettings@@@Z
?CreateBarTheme@@YAPAVBarTheme@@PAVGeoObjectVLayer@@_NPAPAVExprPacket@@JW4UNIT@@N3FF@Z
?CreateRangedTheme@@YAPAVRangedTheme@@PAVGeoObjectVLayer@@_NPAVExprPacket@@1N1W4DISTMETHOD@@JPBVcToolSettings@@@Z
?CreateRangedTheme@@YAPAVRangedTheme@@PAVGeoObjectVLayer@@_NPAVExprPacket@@1NNNW4DISTMETHOD@@JPBVcToolSettings@@@Z
?CreateGradSymbolTheme@@YAPAVGradSymbolTheme@@PAVGeoObjectVLayer@@_NPAVExprPacket@@PBVcSymbol@@3@Z
?CreateDotDensityTheme@@YAPAVDotDensityTheme@@PAVGeoObjectVLayer@@_NPAVExprPacket@@ABVcColor@@W4DOTSIZE@@@Z
?CreateIndValueTheme@@YAPAVIndValueTheme@@PAVGeoObjectVLayer@@_NPAVExprPacket@@1PBD1PBVcToolSettings@@@Z
?CreateIndValueTheme@@YAPAVIndValueTheme@@PAVGeoObjectVLayer@@_NPAVExprPacket@@1NJPBVcToolSettings@@@Z
?CreateIndValueTheme@@YAPAVIndValueTheme@@PAVGeoObjectVLayer@@_NPAVExprPacket@@1PBDJPBVcToolSettings@@@Z

tokens

?CreateMapBasicTokens@@YAPAVTokens@@XZ

tools

?CreateCustomCircleTool@MITool@@SAPAV1@PAVMIToolData@@PAVMIToolStatus@@_N22@Z
?CreateCustomPolylineTool@MITool@@SAPAV1@PAVMIToolData@@PAVMIToolStatus@@_N22@Z
?CreateCustomPolygonTool@MITool@@SAPAV1@PAVMIToolData@@PAVMIToolStatus@@_N22@Z
?CreateCustomLineTool@MITool@@SAPAV1@PAVMIToolData@@PAVMIToolStatus@@_N22@Z
?CreateCustomRectangleTool@MITool@@SAPAV1@PAVMIToolData@@PAVMIToolStatus@@_N22@Z
?CreateAddPolygonTool@MITool@@SAPAV1@PAVMIToolData@@PAVMIAddToolData@@PAVMIToolStatus@@_N@Z
?CreateAddPolylineTool@MITool@@SAPAV1@PAVMIToolData@@PAVMIAddToolData@@PAVMIToolStatus@@_N@Z
?CreateAddLineTool@MITool@@SAPAV1@PAVMIToolData@@PAVMIAddToolData@@PAVMIToolStatus@@_N@Z
?CreateCenterTool@MITool@@SAPAV1@PAVMIToolData@@PAVMIToolStatus@@@Z
?CreateCustomPointTool@MITool@@SAPAV1@PAVMIToolData@@PAVMIToolStatus@@_N@Z
?CreatePanTool@MITool@@SAPAV1@PAVMIToolData@@PAVMIToolStatus@@_N@Z
?CreateSelectRadiusTool@MITool@@SAPAV1@PAVMISelectToolData@@PAVMIToolData@@PAVMIToolStatus@@_N@Z
?CreateSelectPolygonTool@MITool@@SAPAV1@PAVMISelectToolData@@PAVMIToolData@@PAVMIToolStatus@@_N@Z
?CreateSelectRectTool@MITool@@SAPAV1@PAVMISelectToolData@@PAVMIToolData@@PAVMIToolStatus@@_N@Z
?CreateZoomTool@MITool@@SAPAV1@_NPAVMIToolData@@PAVMIToolStatus@@0@Z
?CreateSelectPointTool@MITool@@SAPAV1@PAVMISelectToolData@@PAVMIToolData@@PAVMIToolStatus@@@Z
?CreateAddPointTool@MITool@@SAPAV1@PAVMIToolData@@PAVMIAddToolData@@PAVMIToolStatus@@@Z

utility

?SetRect@@YAXAAUDRECT@@NNNN@Z
?file_extension@@YAPBDW4FILETYPE@@@Z
?MakeDateString@@YAXPADHPAUmiDATE@@FD@Z
?GetMILocaleDateInfo@@YAX_NPAFPAD@Z
?DoubleToLongPoints@@YAXPBUDPNT@@PAULPNT@@HJJ@Z
?MergeRects@@YAXAAULRECT@@ABU1@@Z
?RectIsEmpty@@YA_NABULRECT@@@Z
?ExpandRect@@YAXAAULRECT@@JJJJ@Z
?miStrNICmp@@YAHPBD0I@Z
?GetErrorNum@@YAHXZ
?RectIsZero@@YA_NABUDRECT@@@Z
?CS2Str@@YAPBDW4CHARSET@@@Z
?strcpyn@@YAPADPADPBDI@Z
?GetCenterOfRect@@YAXABUDRECT@@AAUDPNT@@@Z
?RectIsEmpty@@YA_NABUDRECT@@@Z
?file_exists@@YA_NPBDW4FILETYPE@@@Z
?recommend_filename@@YAXPADPBDW4FILETYPE@@@Z
?LongToDoublePoints@@YAXPBULPNT@@PAUDPNT@@H@Z
?ExpandPointIntoRect@@YAXABULPNT@@AAULRECT@@JJJJ@Z
?EqualDoubles@@YA_NNN@Z
?StringToShort@@YA_NPBDPAFPAPAD@Z
?IS_DBCS_CHARSET@@YA_NW4CHARSET@@@Z
?system_charset@@YA?AW4CHARSET@@XZ
?InitCheckEsc@@YA_NP6A_N_N@Z@Z
?DeInitUtility@@YAXXZ
?InitUtility@@YA_NHQBUSMPoolInfo@@H_NP6A_NW4eOpenMode@@PBDAAJ@ZHJP6A_NXZ6@Z
?FindString@cResourceDLL@@MBE_NHPAD@Z
??AcStringResource@@UBEPADH@Z
??_7cResourceHandle@@6B@
??1cResourceDLL@@UAE@XZ
?temp_dir@@YAXABUMI_DIR@@@Z
?program_dir@@YAXABUMI_DIR@@@Z
?pref_dir@@YAXABUMI_DIR@@@Z
?string2dir@@YA?AUMI_DIR@@PBD@Z
??_7Q_ELEM@@6B@
?ffileopen@@YAPAU_iobuf@@PAU1@W4eOpenMode@@PAH@Z
?fclose2@@YAHPAU_iobuf@@@Z
?SetError@@YAXW4eErrorLevel@@PBDABU_GUID@@H11@Z
?file_put_charset@@YAXPAU_iobuf@@W4CHARSET@@@Z
?CharsetANSI@@YAPBDXZ
?Str2CS@@YA?AW4CHARSET@@PBD@Z
?fhandle2path@@YAXHPAD@Z
?SortRectWithPoints@@YAXAAULRECT@@ABULPNT@@1@Z
?HaveErrors@@YA_NXZ
?GetNextError@@YA_N_NPADH@Z
?StringToLong@@YA_NPBDPAJPAPADJJ@Z
?register_file@@YAHPBDW4FILETYPE@@_N@Z
?fileopen@@YAHHW4eOpenMode@@PAH@Z
?lseek2@@YAJHJH@Z
?file_type@@YA?AW4FILETYPE@@PBD@Z
?miIsPrint@@YAHH@Z
?striequ@@YA_NPBD0@Z
?CS2OldStr@@YAPBDW4CHARSET@@@Z
?fputs2@@YAHPBDPAU_iobuf@@@Z
?miStrLwr@@YAPADPAD@Z
?falloc_@@YA_NIPAPAX_N1@Z
?ffree@@YAXPAPAX@Z
?CalcRelativePath@@YA_NPBD0PAD@Z
?ClearErrors@@YAXXZ
?FullPathFromRelativePath@@YA_NPBD0PAD@Z
?PointInRect@@YA_NABULPNT@@ABULRECT@@@Z
?fseek2@@YAHPAU_iobuf@@JH@Z
?Str2Date@@YAPAUmiDATE@@PBDPAU1@@Z
?CheckEsc@@YA_NXZ
?ltrim@@YAHPAD@Z
?rtrim@@YAHPAD@Z
?time_100@@YAJXZ
?miStrICmp@@YAHPBD0@Z
?quotestring@@YAPADPADPBDI1@Z
?RectsOverlap@@YA_NABULRECT@@0@Z
?unregister_file@@YAXH@Z
?close2@@YAHH@Z
?fprintf2@@YAHPAU_iobuf@@PBDZZ
?dir2string@@YAXABUMI_DIR@@PAD@Z
?program_dir@@YA?AUMI_DIR@@XZ
?SortRect@@YAXAAUDRECT@@@Z
?strnequ@@YA_NPBD0I@Z
?miIsLeadByte@@YA_NPBD@Z
?fputc2@@YAHHPAU_iobuf@@@Z
?DoubleToShort@@YAFN@Z

mfc42

ord2557
ord3054
ord3425
ord2727
ord6004
ord2860
ord1265
ord845
ord463
ord3460
ord4713
ord449
ord4252
ord1892
ord3499
ord1199
ord3317
ord5981
ord3874
ord1131
ord1132
ord3619
ord3573
ord290
ord1227
ord614
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord1640
ord2414
ord2388
ord6375
ord815
ord6199
ord2282
ord2362
ord2294
ord355
ord2515
ord3452
ord3639
ord3402
ord4401
ord2581
ord4219
ord5890
ord2937
ord1779
ord5953
ord3098
ord4055
ord3918
ord2302
ord2266
ord2301
ord692
ord3577
ord3352
ord4397
ord2576
ord4217
ord2024
ord2413
ord6366
ord1771
ord4644
ord2243
ord5789
ord2556
ord362
ord672
ord6031
ord5918
ord2642
ord3535
ord4092
ord6101
ord2288
ord2299
ord2287
ord2367
ord2284
ord2364
ord2298
ord2370
ord2278
ord746
ord4625
ord3279
ord4438
ord5286
ord6371
ord5011
ord4843
ord4672
ord5321
ord5331
ord1216
ord6354
ord1151
ord1193
ord561
ord3670
ord3401
ord3952
ord5714
ord5289
ord5307
ord4698
ord4079
ord2724
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord3230
ord6042
ord1877
ord4006
ord4249
ord2486
ord2687
ord5498
ord2982
ord3147
ord3259
ord4465
ord3136
ord3278
ord2985
ord3081
ord2976
ord3353
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3681
ord446
ord743
ord1177
ord6467
ord1226
ord1210
ord1168
ord800
ord2915
ord2818
ord1252
ord539
ord540
ord5572
ord2393
ord798
ord1601
ord5465
ord532
ord4472
ord6159
ord6778
ord5856
ord537
ord2439
ord1693
ord5618
ord994
ord4342
ord4687
ord4639
ord5674
ord2156
ord4856
ord4920
ord2137
ord1963
ord5213
ord2953
ord3868
ord5150
ord4705
ord4707
ord2876
ord2998
ord5649
ord4113
ord4768
ord4650
ord4548
ord4521
ord4594
ord4925
ord4930
ord4935
ord4659
ord4909
ord4908
ord4668
ord4667
ord4666
ord4689
ord5023
ord4654
ord4354
ord4780
ord4649
ord4637
ord4636
ord5060
ord4584
ord4371
ord4361
ord4356
ord4739
ord4741
ord4738
ord4409
ord4603
ord4415
ord4979
ord2488
ord3404
ord2954
ord6055
ord4078
ord1776
ord4407
ord5241
ord2384
ord5163
ord6370
ord4353
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2983
ord3148
ord3260
ord4466
ord2986
ord3080
ord5825
ord3571
ord723
ord860
ord3946
ord423
ord3663
ord3626
ord5322
ord641
ord6002
ord4624
ord2512
ord2554
ord3693
ord2794
ord1641
ord3199
ord2405
ord5785
ord640
ord6197
ord323
ord2795
ord5787
ord5788
ord1614
ord4160
ord6281
ord4023
ord535
ord861
ord926
ord922
ord5312
ord5859
ord6030
ord5316
ord5327
ord5332
ord4003
ord1223
ord5335
ord2614
ord5333
ord858
ord2541
ord4949
ord2514
ord3237
ord4743
ord5573
ord4756
ord5888
ord4760
ord4765
ord4770
ord4771
ord4914
ord4915
ord5875
ord6170
ord4788
ord4996
ord5033
ord2859
ord6194
ord4735
ord4390
ord4740
ord3920
ord4025
ord940
ord941
ord472
ord6119
ord5858
ord6883
ord1099
ord1572
ord2729
ord4570
ord2730
ord4992
ord5008
ord2450
ord5678
ord6021
ord5736
ord5492
ord2988
ord2452
ord5903
ord1705
ord705
ord3003
ord5865
ord406
ord430
ord4988
ord5325
ord5328
ord3692
ord5791
ord4648
ord5233
ord5269
ord4903
ord2379
ord5781
ord1146
ord1669
ord2652
ord4486
ord5265
ord4376
ord4998
ord6052
ord1775
ord2385
ord6374
ord5280
ord3262
ord4627
ord4425
ord3597
ord4200
ord324
ord4234
ord4853
ord4299
ord3092
ord283
ord4710
ord755
ord939
ord6172
ord470
ord6041
ord1206
ord2623
ord5873
ord1175
ord2868
ord3204
ord3206
ord802
ord542
ord2740
ord879
ord2801
ord882
ord924
ord6780
ord5710
ord4129
ord5609
ord2777
ord428
ord4278
ord6569
ord5601
ord1200
ord2864
ord3945
ord4396
ord5290
ord3572
ord567
ord609
ord4275
ord6241
ord2754
ord6364
ord3326
ord6365
ord1214
ord1567
ord268
ord4277
ord2763
ord715
ord415
ord1081
ord2775
ord5605
ord4021
ord713
ord414
ord5313
ord6141
ord1871
ord6571
ord5460
ord341
ord654
ord541
ord801
ord568
ord819
ord1770
ord462
ord2460
ord855
ord2817
ord850
ord5597
ord6781
ord465
ord464
ord435
ord5861
ord844
ord732
ord5314
ord1212
ord818
ord3880
ord1267
ord1268
ord5933
ord2714
ord6400
ord1799
ord4226
ord5571
ord3976
ord996
ord3993
ord857

msvcrt

qsort
_itoa
_ltoa
clearerr
rand
srand
_exit
_stat
memcmp
fopen
abs
toupper
fgets
fread
fseek
ftell
_EH_prolog
__dllonexit
_onexit
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
_initterm
_adjust_fdiv
_getpid
_lseek
_fileno
getenv
_endthread
_beginthread
__p__pctype
pow
strcat
cos
sin
atan
sqrt
memmove
_write
wcscpy
atof
wcslen
_strdup
free
_mbsnbcpy
_mbslen
_mbsnccnt
_mbsinc
_open
_close
_mbscmp
_mbctype
_purecall
fabs
_mbsicmp
_splitpath
_ftol
_mbsrchr
_mbsnbcnt
_CxxThrowException
sprintf
atoi
time
strtod
_findclose
__CxxFrameHandler
_findnext
fprintf
_sys_nerr
_sys_errlist
calloc
strtol
_errno
localtime
__p__timezone
__p__daylight
mktime
tolower
strcmp
strlen
strcpy
memcpy
__p___mb_cur_max
_isctype
_findfirst
vsprintf
sscanf
memset
fflush
fclose
fmod
strchr
strncpy
_stricmp
strncmp
_mbsnbicmp
log10
floor
malloc
realloc
tmpnam
_makepath

kernel32

GetPrivateProfileStringA
WaitForSingleObject
CreateEventA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
GetModuleFileNameA
lstrcpyA
LocalAlloc
LocalFree
QueryPerformanceFrequency
QueryPerformanceCounter
SleepEx
SetThreadPriority
ReleaseSemaphore
GetCurrentThread
CreateSemaphoreA
OpenSemaphoreA
DeviceIoControl
WriteFile
ReadFile
CreateFileA
GetPrivateProfileIntA
GetVersionExA
FindNextFileA
GetCurrentProcess
GetProcessTimes
GetDriveTypeA
GetVolumeInformationA
SetErrorMode
GetLastError
GetTickCount
SetEvent
FindResourceA
FreeLibrary
ResetEvent
CloseHandle
Sleep
GetVersion
GetWindowsDirectoryA
OutputDebugStringA
GetShortPathNameA
GetModuleHandleA
LoadLibraryA
GetProcAddress
FindFirstFileA
FindClose
LoadResource
LockResource
GlobalSize
MultiByteToWideChar
WideCharToMultiByte
OpenFile
InterlockedIncrement
GetTempPathA
lstrlenA

user32

DestroyWindow
CreateDialogParamA
IsWindow
ReleaseDC
wsprintfA
GetDlgItem
MessageBeep
WinHelpA
GetDlgItemTextA
SetDlgItemTextA
PostMessageA
MessageBoxA
ShowWindow
GetParent
GetFocus
LoadCursorFromFileA
SetRect
DrawFrameControl
GetSystemMetrics
DrawFocusRect
InvalidateRect
CreateCaret
ShowCaret
HideCaret
DestroyCaret
SetCapture
GetMessageA
GetCapture
DispatchMessageA
ReleaseCapture
OffsetRect
SetCaretPos
RegisterClipboardFormatA
IntersectRect
PtInRect
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
EnableWindow
EqualRect
UnionRect
FillRect
GetAsyncKeyState
GetKeyState
SetTimer
SetCursor
KillTimer
SendMessageA
GetDC
GetCursorPos
GetSysColor
PeekMessageA
CopyRect
GetWindowRect
ScreenToClient
GetClientRect
LoadCursorA
LoadBitmapA
InflateRect
RedrawWindow

gdi32

SaveDC
RestoreDC
GetBitmapDimensionEx
SetBitmapDimensionEx
GetMapMode
SelectObject
GetNearestColor
CreatePalette
CreateDIBitmap
GetDIBits
GetMetaFileBitsEx
GetTextMetricsA
GetObjectA
GetViewportExtEx
CreatePen
IntersectClipRect
GetWindowOrgEx
SetMapMode
CreateMetaFileA
DeleteDC
CloseMetaFile
DeleteMetaFile
DeleteObject
CreateDCA
GetTextExtentPoint32A
CreateFontIndirectA
GetBkColor
GetDeviceCaps
CreateSolidBrush
Rectangle
DPtoLP
GetWindowExtEx
PatBlt
GetViewportOrgEx
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
SelectPalette
RealizePalette
GetStockObject

comdlg32

GetOpenFileNameA

advapi32

RegCreateKeyExA
CloseServiceHandle
QueryServiceStatus
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
GetUserNameA
RegQueryValueA
RegOpenKeyA
OpenServiceA
OpenSCManagerA

comctl32

ord17
PropertySheetA

ole32

StringFromCLSID
OleInitialize
CoTaskMemFree
ReleaseStgMedium
OleUninitialize
CoGetMalloc
CoGetClassObject
CLSIDFromString

olepro32

ord254

oleaut32

GetErrorInfo
VariantTimeToSystemTime
SafeArrayGetLBound
LoadRegTypeLi
SysFreeString
SysAllocString
VariantClear
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreate
VariantInit
VariantChangeType
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopyInd
LoadTypeLi
VariantCopy
SafeArrayGetElement
SafeArrayGetUBound
SysAllocStringByteLen

msvcp60

??1_Lockit@std@@QAE@XZ
?_Xlen@std@@YAXXZ
??0_Lockit@std@@QAE@XZ
?_Xran@std@@YAXXZ

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 872KB - Virtual size: 868KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
20071810451101/房屋测绘系统gis/房屋测绘系统/Size3_3.cur
20071810451101/房屋测绘系统gis/房屋测绘系统/cursor1.cur
20071810451101/房屋测绘系统gis/房屋测绘系统/cursor2.cur
20071810451101/房屋测绘系统gis/房屋测绘系统/db/housedb.mdb
20071810451101/房屋测绘系统gis/房屋测绘系统/doc/面积计算标准/中华人民共和国国家标准.htm
.html
20071810451101/房屋测绘系统gis/房屋测绘系统/doc/面积计算标准/商品房销售面积测量与计算计量技术规范.mht
.eml
attachment-3
attachment-4
email-html-1.txt
.html
20071810451101/房屋测绘系统gis/房屋测绘系统/frmAbout.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmAbout.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmAddToLog.frm
20071810451101/房屋测绘系统gis/房屋测绘系统/frmAddToLog.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmAreaResult.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmAreaResult.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmBackup.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmBackup.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmBusy.frm
20071810451101/房屋测绘系统gis/房屋测绘系统/frmBusy.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmFTType.frm
20071810451101/房屋测绘系统gis/房屋测绘系统/frmFTType.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmInput.frm
20071810451101/房屋测绘系统gis/房屋测绘系统/frmMProperties.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmMProperties.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmMain.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmMain.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmMain.log
20071810451101/房屋测绘系统gis/房屋测绘系统/frmOption.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmOption.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmPreview.frm
20071810451101/房屋测绘系统gis/房屋测绘系统/frmPreview.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmRecover.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmRecover.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmReport.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmReport.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmSProperties.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmSProperties.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmSelectLoc.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmSelectLoc.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmSetWidthHeight.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmSetWidthHeight.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmSplash.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmSplash.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmSysLog.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmSysLog.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmText.frm
20071810451101/房屋测绘系统gis/房屋测绘系统/frmText.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmTriangle.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmTriangle.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/frmWallHeight.frm
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/frmWallHeight.frx
20071810451101/房屋测绘系统gis/房屋测绘系统/house_map.PDM
20071810451101/房屋测绘系统gis/房屋测绘系统/house_map.exe
.exe windows:4 windows x86 arch:x86

2b63d8ae08c8f35a571667949cad414a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
__vbaVarSub
ord582
ord690
__vbaStrI2
ord583
_CIcos
_adj_fptan
ord585
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaAryMove
__vbaFreeVar
ord588
__vbaLateIdCall
__vbaLenBstr
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaPut4
EVENT_SINK_Invoke
ord621
__vbaFreeObjList
ord516
ord517
__vbaStrErrVarCopy
_adj_fprem1
__vbaCopyBytes
__vbaResume
__vbaStrCat
ord553
ord660
__vbaSetSystemError
__vbaHresultCheckObj
ord558
__vbaLenVar
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaAryDestruct
ord591
__vbaLateMemSt
__vbaBoolStr
__vbaStrBool
__vbaForEachCollObj
__vbaExitProc
__vbaOnError
ord595
__vbaObjSet
_adj_fdiv_m16i
ord303
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
ord599
__vbaFpR4
__vbaBoolVar
ord520
ord309
__vbaBoolVarNull
__vbaVarTstLt
__vbaFpR8
_CIsin
__vbaErase
__vbaVarZero
__vbaNextEachCollObj
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaExitEachColl
ord529
__vbaStrCmp
__vbaPutOwner3
__vbaAryConstruct2
__vbaVarTstEq
ord560
__vbaPrintObj
__vbaObjVar
ord561
__vbaI2I4
DllFunctionCall
__vbaCastObjVar
__vbaRedimPreserve
_adj_fpatan
__vbaR4Var
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
__vbaRedim
__vbaStrR8
EVENT_SINK_Release
__vbaNew
ord600
ord601
_CIsqrt
__vbaVarAnd
__vbaObjIs
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
ord714
__vbaLateIdStAd
ord607
ord716
__vbaFPException
__vbaUbound
__vbaGetOwner3
__vbaStrVarVal
__vbaVarCat
ord535
__vbaI2Var
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaVar2Vec
ord648
ord570
__vbaR8Str
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
ord573
__vbaStrCopy
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaI4Var
ord689
__vbaVarCmpEq
ord610
__vbaAryLock
__vbaVarAdd
ord612
__vbaFreeVarg
__vbaStrToAnsi
__vbaVarDup
ord613
__vbaVerifyVarObj
ord614
__vbaFpI2
__vbaVarTstGe
__vbaVarCopy
__vbaFpI4
ord616
__vbaLateMemCallLd
ord617
_CIatan
ord618
__vbaCastObj
__vbaStrMove
ord619
ord542
ord650
_allmul
__vbaLateIdSt
ord652
ord545
_CItan
ord546
__vbaAryUnlock
_CIexp
__vbaI4ErrVar
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
20071810451101/房屋测绘系统gis/房屋测绘系统/house_map.vbp
20071810451101/房屋测绘系统gis/房屋测绘系统/house_map.vbw
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/Arc.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/Arc.ico
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/ArcGrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/ArcGrey.ico
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/Arrow.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/Arrowgrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/CLOSE.BMP
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/CLOSEgrey.BMP
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/HOUSE2.BMP
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/ICON11.ICO
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/Move.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/Movegrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/PointSel.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/PointSelgrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/SelRect.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/SelRectgrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/Select.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/SelectArea.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/SelectAreaGrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/SelectLine.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/SelectLineGrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/Selectgrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/Thumbs.db
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/back3232.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/busy.gif
.gif
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/close.ico
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/closeGrey.ico
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/line.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/line.ico
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/linegrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/linegrey.ico
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/login.gif
.gif
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/move.ico
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/movegrey.ico
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/pan.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/pangrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/ploygon.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/ploygongrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/ployline.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/ploylinegrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/point.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/pointgrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/text.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/textgrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/zoomin.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/zoomingrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/zoomout.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/icon/zoomoutgrey.bmp
20071810451101/房屋测绘系统gis/房屋测绘系统/mainprog.bas
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/move_r.cur
20071810451101/房屋测绘系统gis/房屋测绘系统/mssccprj.scc
20071810451101/房屋测绘系统gis/房屋测绘系统/ocx/readme.txt
20071810451101/房屋测绘系统gis/房屋测绘系统/pdm/Check Model.log
20071810451101/房屋测绘系统gis/房屋测绘系统/pdm/Generation.log
20071810451101/房屋测绘系统gis/房屋测绘系统/pdm/House.sws
.xml
20071810451101/房屋测绘系统gis/房屋测绘系统/pdm/House_MIS.sql
20071810451101/房屋测绘系统gis/房屋测绘系统/pdm/housedb.pdb
20071810451101/房屋测绘系统gis/房屋测绘系统/pdm/housedb.pdm
20071810451101/房屋测绘系统gis/房屋测绘系统/rptArea.DCA
20071810451101/房屋测绘系统gis/房屋测绘系统/rptArea.Dsr
20071810451101/房屋测绘系统gis/房屋测绘系统/rptArea.dsx
20071810451101/房屋测绘系统gis/房屋测绘系统/rptAreaFree.DCA
20071810451101/房屋测绘系统gis/房屋测绘系统/rptAreaFree.Dsr
20071810451101/房屋测绘系统gis/房屋测绘系统/rptAreaFree.dsx
20071810451101/房屋测绘系统gis/房屋测绘系统/rptFT.DCA
20071810451101/房屋测绘系统gis/房屋测绘系统/rptFT.Dsr
20071810451101/房屋测绘系统gis/房屋测绘系统/rptFT.dsx
20071810451101/房屋测绘系统gis/房屋测绘系统/rptLayer.DCA
20071810451101/房屋测绘系统gis/房屋测绘系统/rptLayer.Dsr
20071810451101/房屋测绘系统gis/房屋测绘系统/rptLayer.dsx
20071810451101/房屋测绘系统gis/房屋测绘系统/rptPreview.DCA
20071810451101/房屋测绘系统gis/房屋测绘系统/rptPreview.Dsr
20071810451101/房屋测绘系统gis/房屋测绘系统/rptPreview.dsx
20071810451101/房屋测绘系统gis/房屋测绘系统/rptTX.DCA
20071810451101/房屋测绘系统gis/房屋测绘系统/rptTX.Dsr
.vbs
20071810451101/房屋测绘系统gis/房屋测绘系统/rptTX.dsx
20071810451101/房屋测绘系统gis/房屋测绘系统/sql/House_MIS.sql
20071810451101/房屋测绘系统gis/房屋测绘系统/system.log
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011100.DAT
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011100.ID
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011100.IND
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011100.MAP
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011100.TAB
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011100L.DAT
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011100L.ID
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011100L.MAP
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011100L.TAB
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011103.DAT
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011103.ID
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011103.IND
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011103.MAP
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011103.TAB
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011103L.DAT
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011103L.ID
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011103L.MAP
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001011103L.TAB
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001022800.DAT
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001022800.ID
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001022800.IND
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001022800.MAP
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001022800.TAB
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001022800L.DAT
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001022800L.ID
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001022800L.MAP
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2001022800L.TAB
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004021100.DAT
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004021100.IND
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004021100.MAP
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004021100.tab
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004021100L.DAT
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004021100L.ID
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004021100L.MAP
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004021100L.tab
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004030200.DAT
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004030200.IND
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004030200.MAP
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004030200.tab
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004030200L.DAT
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004030200L.MAP
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2004030200L.tab
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2005090400.DAT
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2005090400.ID
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2005090400.IND
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2005090400.MAP
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2005090400.tab
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2005090400L.DAT
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2005090400L.ID
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2005090400L.MAP
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/2005090400L.tab
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/border.DAT
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/border.ID
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/border.IND
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/border.MAP
20071810451101/房屋测绘系统gis/房屋测绘系统/tab/border.tab
20071810451101/房屋测绘系统gis/房屋测绘系统/uml/House_MIS.mdl
20071810451101/房屋测绘系统gis/房屋测绘系统/uml/House_MIS.md~
20071810451101/房屋测绘系统gis/房屋测绘系统/vssver.scc
20071810451101/新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

98feaf0f8f73f7370e6122d9107f77bd

Headers

File Characteristics

Imports

shell32

msvcrt

advapi32

kernel32

gdi32

user32

Sections

.text Size: 72KB - Virtual size: 72KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 16KB - Virtual size: 12KB

d888046a1bad0283ea811082132550e8

Headers

File Characteristics

Imports

msvbvm60

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 50KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 8KB - Virtual size: 4KB

6515a0f9564a3766d3f214c230cab9a3

Headers

File Characteristics

Imports

version

alltype

commandprocessor

collookupsystem

coordsys

customproperties

daengine

exprpacket

find

geo

geoobject

geoset

legend

netapi32

mapper

mimetadata

styles

thematics

tokens

tools

utility

mfc42

msvcrt

kernel32

user32

gdi32

comdlg32

advapi32

comctl32

ole32

olepro32

oleaut32

msvcp60

Exports

Exports

Sections

.text Size: 872KB - Virtual size: 868KB

.rdata Size: 164KB - Virtual size: 161KB

.data Size: 36KB - Virtual size: 62KB

.rsrc Size: 96KB - Virtual size: 95KB

.reloc Size: 72KB - Virtual size: 70KB

2b63d8ae08c8f35a571667949cad414a

Headers

File Characteristics

Imports

.text
Size: 72KB - Virtual size: 72KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 16KB - Virtual size: 12KB

.text
Size: 52KB - Virtual size: 50KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 8KB - Virtual size: 4KB

.text
Size: 872KB - Virtual size: 868KB

.rdata
Size: 164KB - Virtual size: 161KB

.data
Size: 36KB - Virtual size: 62KB

.rsrc
Size: 96KB - Virtual size: 95KB

.reloc
Size: 72KB - Virtual size: 70KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 4KB - Virtual size: 42KB

.rsrc
Size: 4KB - Virtual size: 1KB