c886eed537c9dd9a78992cc2972c4594_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c886eed537c9dd9a78992cc2972c4594_JaffaCakes118
Size

1.2MB
MD5

c886eed537c9dd9a78992cc2972c4594
SHA1

31ad6f9cf23bc3dbf3dfdbb1dda5d6663cb3a472
SHA256

d78214bfc3e23381161cf7e96c49571ee0661cde4be324d4b3beea2a76eac27e
SHA512

727431e26f786507c70d68cff8f28af78797f3a9423780afbdc2c4e537432aa23ea00983b6f7a616439d48fe2476adea4a32e0731ff3843ff378823c9d199627
SSDEEP

24576:6JZ62FJXht4fSA9h/Zx2G7485id5X3jrWn83FKP8B+11I0oQox0dfVGoyHgRz:6JZ6aZf4TWd85ibDrWnQE8ByAuVGt0z

Score

3^/10

Malware Config

Signatures

Unsigned PE 9 IoCs

Checks for missing Authenticode signature.

resource
unpack001/JMRJ/编程傻瓜/逗死汇编/SYS/BSASM.EXE
unpack001/JMRJ/编程傻瓜/逗死汇编/SYS/HX60.DLL
unpack001/JMRJ/编程傻瓜/逗死汇编/SYS/HX60A.DLL
unpack001/JMRJ/编程傻瓜/逗死汇编/SYS/JMRJ.SYS
unpack001/JMRJ/编程傻瓜/逗死汇编/SYS/LSYS.EXE
unpack001/JMRJ/编程傻瓜/逗死汇编/SYS/RX.EXE
unpack001/JMRJ/编程傻瓜/逗死汇编/SYS/TABCTL32.OCX
unpack001/JMRJ/编程傻瓜/逗死汇编/SYS/VB40032.DLL
unpack001/JMRJ/编程傻瓜/逗死汇编/开始运行.EXE

Files

c886eed537c9dd9a78992cc2972c4594_JaffaCakes118
.rar
JMRJ/下载说明.htm
.html .js polyglot
JMRJ/编程傻瓜/逗死汇编/CHR.ICO
JMRJ/编程傻瓜/逗死汇编/DAT/SET.INI
JMRJ/编程傻瓜/逗死汇编/QD123.$$$
JMRJ/编程傻瓜/逗死汇编/SETUP.INI
JMRJ/编程傻瓜/逗死汇编/SYS/ALLEX.DLL
JMRJ/编程傻瓜/逗死汇编/SYS/BOTTOM.DLL
JMRJ/编程傻瓜/逗死汇编/SYS/BSASM.EXE
.exe windows:4 windows x86 arch:x86

4eeb6676ce0f224cf1809751448e7151

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

vb40032

ord617
ord619
ord614
ord629
ord632
ord648
ord647
ord652
ord651
ord685
ord693
ord695
ord100
ord187
ord189
ord188
ord186
ord190
ord199
ord513
ord518
ord516
ord515
ord520
ord522
ord524
ord526
ord528
ord529
ord531
ord530
ord534
ord535
ord533
ord545
ord542
ord543
ord544
ord547
ord540
ord541
ord546
ord558
ord552
ord553
ord556
ord563
ord569
ord568
ord578
ord571
ord570
ord573
ord575
ord576
ord587
ord581
ord585
ord583
ord586
ord589
ord582
ord584
ord588
ord592
ord593
ord594
ord595
ord598
ord608
ord607
ord600
ord605
ord613
ord610
ord612

Sections

.text
Size: 1009KB - Virtual size: 1012KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JMRJ/编程傻瓜/逗死汇编/SYS/BSASM.INI
JMRJ/编程傻瓜/逗死汇编/SYS/COMDLG32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

988f29c1eb8054253091352741683c76

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

HeapReAlloc
GetLastError
LockResource
GetWindowsDirectoryA
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
CompareStringA
CompareStringW
lstrcmpA
GetLocaleInfoA
GetVersion
GetModuleFileNameA
GetFileAttributesA
IsBadWritePtr
DisableThreadLibraryCalls
GlobalAlloc
lstrcmpiA
LoadLibraryA
GetProcAddress
lstrcatA
lstrlenA
lstrcpyA
WriteProfileStringA
GlobalLock
GlobalUnlock
LoadResource
FindResourceA
lstrcpynA
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
GetProfileStringA
EnterCriticalSection
GetProcessHeap
GetCurrentThreadId
MultiByteToWideChar
InitializeCriticalSection
GlobalFree

user32

SetWindowRgn
IntersectRect
EqualRect
PtInRect
IsDialogMessageA
IsChild
GetKeyState
CreateDialogIndirectParamA
MessageBeep
PostMessageA
ClientToScreen
wsprintfA
SendMessageTimeoutA
CharNextA
GetActiveWindow
GetWindowThreadProcessId
LoadCursorA
MessageBoxA
GetWindowLongA
GetWindowRect
CreateWindowExA
SetWindowLongA
ShowWindow
DialogBoxParamA
EnableWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
OffsetRect
GetParent
GetDlgItem
SendMessageA
SetFocus
SetParent
SetDlgItemInt
EndPaint
SetActiveWindow
IsWindowVisible
WinHelpA
GetDlgItemInt
EndDialog
GetDlgItemTextA
DestroyWindow
SetDlgItemTextA
GetWindowTextA
GetNextDlgTabItem
SendDlgItemMessageA
RegisterClassA
GetDC
ReleaseDC
LoadIconA
DrawIcon
DestroyIcon
GetSystemMetrics
RegisterWindowMessageA
LoadStringA
DefWindowProcA
UnregisterClassA
GetClientRect
BeginPaint
RegisterClipboardFormatA
SetWindowPos
MoveWindow

ole32

CreateOleAdviseHolder
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

LoadRegTypeLi
OleCreatePropertyFrame
SetErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
OleLoadPicture
VariantChangeType
RegisterTypeLi
VariantInit
GetErrorInfo
VariantClear
SysStringLen
SysAllocStringLen
OleTranslateColor
SysFreeString
SysAllocString
CreateErrorInfo

comdlg32

CommDlgExtendedError
PrintDlgA
ChooseFontA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA

gdi32

GetDIBits
CreateCompatibleDC
CreateBitmap
GetSystemPaletteEntries
StretchDIBits
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
LPtoDP
SetViewportExtEx
GetViewportExtEx
CreateRectRgnIndirect
GetWindowExtEx
CreateDCA
GetObjectA
EnumFontFamiliesA
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JMRJ/编程傻瓜/逗死汇编/SYS/DISKDLL.DLL
JMRJ/编程傻瓜/逗死汇编/SYS/HX60.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

addrlong
addrstr
addrword
arr2str
arrcmps
arrmovs
arrs
convppp
dll32ver
doloop
dopwd
getmmpwd
getmmpwde
getmmstr
getmmstre
getmmstre7
getrtf
getsetfdt
getsetfdt1
getsetshare
isring0
mem2arr
ntrwhd
ntsiji
pickstr
plclose
plopen
plread
pscopy
ring02q
ring0torun
rwphymem
setenable
setkey
setmmpwd
setmmpwde
setmmstr
setmmstre
setmmstre7
setrtf
slen
str2arr
sysreboot
test32

Sections

CODE
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 873B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
JMRJ/编程傻瓜/逗死汇编/SYS/HX60A.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

proc32
proc32a
proc32b

Sections

CODE
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 183B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
JMRJ/编程傻瓜/逗死汇编/SYS/JMRJ.SYS
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JMRJ/编程傻瓜/逗死汇编/SYS/LSYS.EXE
.exe windows:4 windows x86 arch:x86

3f433b5c6cd21555a1bc4cd304de58bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCurrentDirectoryA

advapi32

CreateServiceA
StartServiceA
CloseServiceHandle
OpenSCManagerA
DeleteService

Sections

.text
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JMRJ/编程傻瓜/逗死汇编/SYS/MSFLXGRD.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

e87e749ebc55d5130c2bb4db48b707d0

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
GetStringTypeA
GetStringTypeW
GlobalFree
LCMapStringA
LCMapStringW
GlobalLock
GlobalSize
GetVersionExA
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
GetFileAttributesA
GetVersion
DisableThreadLibraryCalls
FindResourceA
LoadResource
LockResource
GetLastError
GetProcAddress
GetLocaleInfoA
LoadLibraryA
GetWindowsDirectoryA
HeapReAlloc
GetModuleFileNameA
InterlockedDecrement
MultiByteToWideChar
GetProfileStringA
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
lstrcmpiA
lstrcpynA
InterlockedIncrement
GlobalUnlock
GlobalAlloc
lstrcmpA
HeapAlloc
lstrcatA
HeapFree
WideCharToMultiByte
lstrlenW
lstrcpyA
lstrlenA
MulDiv
GetProcessHeap
LeaveCriticalSection
EnterCriticalSection
lstrcpyW
IsDBCSLeadByte
InterlockedExchange

user32

SendMessageA
GetDlgItemInt
RegisterWindowMessageA
PeekMessageA
IsDlgButtonChecked
DrawTextExA
GetFocus
GetSysColor
GetSystemMetrics
PostMessageW
PostMessageA
SetWindowLongA
CheckDlgButton
LoadStringA
SendDlgItemMessageA
InvalidateRect
GetActiveWindow
DialogBoxParamA
EndDialog
GetDlgItemTextA
GetWindowRect
MoveWindow
SetDlgItemTextA
PeekMessageW
GetClipboardFormatNameA
MapWindowPoints
SetCursorPos
RegisterClipboardFormatA
UnregisterClassA
CreateDialogIndirectParamA
IsChild
IsWindowEnabled
GetNextDlgTabItem
IsDialogMessageA
WinHelpA
ShowWindow
SetWindowRgn
IntersectRect
EqualRect
GetParent
ClientToScreen
GetWindow
BeginPaint
GetDlgItem
wsprintfA
DestroyWindow
CreateWindowExA
FillRect
GetWindowLongA
SetFocus
DrawTextA
SetDlgItemInt
SetWindowPos
ReleaseCapture
KillTimer
DrawFocusRect
SetTimer
SetCapture
SetCursor
GetKeyState
DefWindowProcA
EnableWindow
GetCursorPos
ScreenToClient
PtInRect
DrawEdge
FrameRect
InflateRect
LoadCursorA
RegisterClassA
GetDC
ReleaseDC
CharNextA
SetRect
UpdateWindow
IsWindow
GetScrollRange
ScrollWindow
OffsetRect
SetScrollRange
GetClientRect
SetScrollPos
IsWindowVisible
SetParent
MessageBoxA
MessageBeep
EndPaint

ole32

CreateOleAdviseHolder
ReleaseStgMedium
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CoCreateInstance
OleLoadFromStream
OleSaveToStream
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopyInd
VariantCopy
LoadTypeLibEx
UnRegisterTypeLi
RegisterTypeLi
CreateErrorInfo
SetErrorInfo
LoadTypeLi
LoadRegTypeLi
OleCreatePropertyFrame
VariantClear
SysAllocString
GetErrorInfo
SysAllocStringLen
SysStringLen
VariantInit
VariantChangeType
OleCreatePictureIndirect
SysFreeString
OleTranslateColor
SafeArrayRedim
OleCreateFontIndirect

gdi32

SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
LPtoDP
SetWindowOrgEx
GetNearestColor
CreatePalette
GetBitmapBits
CreateDIBitmap
SelectPalette
RealizePalette
GetDIBits
GetPaletteEntries
CopyEnhMetaFileA
CopyMetaFileA
CreateDCA
CreatePen
DeleteObject
CreateSolidBrush
SelectObject
GetObjectA
DeleteDC
StretchBlt
GetStockObject
CreateCompatibleBitmap
CreateCompatibleDC
GetTextMetricsA
RestoreDC
ExcludeClipRect
SaveDC
LineTo
MoveToEx
SetTextColor
SetBkMode
GetCurrentPositionEx
SetViewportExtEx
SetWindowExtEx
DPtoLP
SetMapMode
GetTextColor
CreateBitmap
EnumFontFamiliesExA
GetDeviceCaps
GetTextExtentPoint32A
CreateFontIndirectA
CreateRectRgnIndirect

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JMRJ/编程傻瓜/逗死汇编/SYS/PICCLP32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

ad0e1ca092759137521ddb1f91aa1604

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
LoadResource
lstrcmpA
CompareStringW
FindResourceA
lstrcmpiA
LockResource
GetLastError
InterlockedIncrement
HeapReAlloc
InterlockedDecrement
LoadLibraryA
GetProcAddress
GetLocaleInfoA
MultiByteToWideChar
GetWindowsDirectoryA
lstrcpyA
lstrlenA
GetModuleFileNameA
lstrcatA
GetVersion
lstrcpynA
GetFileAttributesA
GlobalAlloc
HeapAlloc
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
InitializeCriticalSection
EnterCriticalSection
GetProcessHeap
GlobalUnlock
GlobalLock
DisableThreadLibraryCalls
GlobalFree

user32

SetWindowLongA
CharNextA
UnregisterClassA
EndPaint
EqualRect
CreateWindowExA
IsWindowVisible
ClientToScreen
BeginPaint
GetWindowRect
GetWindow
MoveWindow
SetFocus
GetWindowLongA
InvalidateRect
CreateDialogIndirectParamA
GetKeyState
IsChild
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
SetParent
ShowWindow
OffsetRect
GetParent
SetWindowPos
GetClientRect
DestroyWindow
GetSystemMetrics
wsprintfA
RegisterClipboardFormatA
GetDlgItemInt
SetDlgItemInt
GetDesktopWindow
GetDC
ReleaseDC
GetActiveWindow
SendMessageA
EndDialog
DialogBoxParamA
DefWindowProcA
LoadCursorA
RegisterClassA
LoadStringA
WinHelpA
IsDialogMessageA
IntersectRect
SetWindowRgn
PtInRect

ole32

CreateOleAdviseHolder
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
ReleaseStgMedium

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

SetErrorInfo
LoadRegTypeLi
OleCreatePropertyFrame
SysAllocStringLen
LoadTypeLibEx
UnRegisterTypeLi
LoadTypeLi
RegisterTypeLi
VariantInit
VariantChangeType
VariantClear
OleTranslateColor
OleCreatePictureIndirect
SysStringLen
SysFreeString
OleLoadPicture
CreateErrorInfo
SysAllocString

gdi32

SetMapMode
GetWindowExtEx
GetViewportExtEx
LPtoDP
SetViewportExtEx
CreateRectRgnIndirect
CreateICA
CreateDCA
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
CreateSolidBrush
SelectObject
Rectangle
RealizePalette
SelectPalette
CreatePen
DeleteDC
StretchBlt
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetPaletteEntries
GetObjectA
GetDeviceCaps
CreatePalette

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JMRJ/编程傻瓜/逗死汇编/SYS/RICHTX32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

f879ec87b93340bacfa917edf4e1aee5

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

shell32

DragAcceptFiles
DragFinish
DragQueryFileA

oledlg

ord1

kernel32

GlobalSize
GlobalUnlock
lstrcmpA
GetVersionExA
GlobalLock
FindResourceA
GlobalAlloc
GlobalFree
GetProcAddress
LoadResource
LockResource
HeapReAlloc
GetLocaleInfoA
GetWindowsDirectoryA
lstrcpynA
GetModuleFileNameA
lstrcatA
DisableThreadLibraryCalls
GetFileAttributesA
GetVersion
GetAtomNameA
FindAtomA
AddAtomA
IsBadWritePtr
DeleteAtom
InterlockedIncrement
FreeLibrary
LoadLibraryA
InterlockedDecrement
GetProcessHeap
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
WriteFile
GetLastError
ReadFile
LeaveCriticalSection
CreateFileA
lstrcpyA
HeapAlloc
lstrlenA
HeapFree
WideCharToMultiByte
lstrlenW
SetFilePointer
MultiByteToWideChar
IsDBCSLeadByte
CloseHandle
lstrcmpiA

user32

GetClipboardFormatNameA
PeekMessageW
ScreenToClient
PostMessageW
PeekMessageA
RegisterWindowMessageA
IsDlgButtonChecked
SetDlgItemInt
SetDlgItemTextA
CheckDlgButton
ReleaseCapture
LoadCursorA
SetCursor
SetFocus
CreateDialogIndirectParamA
SetCursorPos
MapWindowPoints
FillRect
PostMessageA
InvalidateRect
ValidateRect
SetRect
GetSysColor
InflateRect
GetClassInfoA
EnableMenuItem
TrackPopupMenu
GetWindow
GetWindowTextA
CharNextA
MessageBoxA
SendDlgItemMessageA
GetDlgItem
DispatchMessageA
TranslateMessage
WindowFromDC
IsChild
IsWindowEnabled
GetNextDlgTabItem
IsDialogMessageA
WinHelpA
MoveWindow
SetParent
BeginPaint
EndPaint
GetMenuItemCount
IsWindowVisible
DeleteMenu
IntersectRect
ShowWindow
SetWindowRgn
GetDlgItemTextA
EqualRect
GetDlgItemInt
SetWindowPos
GetWindowRect
SetWindowLongA
DestroyWindow
GetActiveWindow
UnregisterClassA
RemoveMenu
LoadMenuA
GetSubMenu
GetParent
DestroyMenu
GetFocus
IsWindow
DefWindowProcA
GetClientRect
RegisterClassA
LoadStringA
RegisterClipboardFormatA
GetCapture
GetCursorPos
EnableWindow
EndDialog
wsprintfA
GetKeyState
MessageBeep
CallWindowProcA
GetDC
GetSystemMetrics
ReleaseDC
UpdateWindow
SendMessageA
DialogBoxParamA
GetWindowLongA
CreateWindowExA
ClientToScreen
OffsetRect
PtInRect

ole32

DoDragDrop
RegisterDragDrop
CreateOleAdviseHolder
OleCreateFromFile
CLSIDFromProgID
OleCreate
OleSetContainedObject
StringFromCLSID
OleGetIconOfClass
CoGetMalloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSaveToStream
OleLoadFromStream
RevokeDragDrop
CoTaskMemRealloc
ReleaseStgMedium
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree

advapi32

RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegCloseKey
RegOpenKeyExA

oleaut32

SafeArrayCopy
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetElement
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetUBound
VariantCopy
CreateErrorInfo
VariantCopyInd
OleCreatePropertyFrame
LoadTypeLibEx
SetErrorInfo
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
SafeArrayPutElement
GetErrorInfo
SafeArrayCreate
LoadRegTypeLi
OleLoadPicture
OleCreatePictureIndirect
SysAllocStringLen
SysFreeString
OleCreateFontIndirect
SysStringLen
SysAllocString
VariantInit
VariantChangeType
VariantClear
OleTranslateColor
SafeArrayRedim

comdlg32

GetOpenFileNameA
CommDlgExtendedError

gdi32

GetNearestColor
CreateSolidBrush
DeleteObject
EnumFontFamiliesExA
StretchBlt
PatBlt
GetObjectType
GetBitmapBits
CreateDIBitmap
CreatePalette
SelectPalette
RealizePalette
GetObjectA
GetPaletteEntries
GetStockObject
GetDIBits
CopyEnhMetaFileA
CopyMetaFileA
CreateBitmap
LPtoDP
GetWindowExtEx
CreateDCA
CreateRectRgnIndirect
SetBkColor
GetViewportExtEx
GetClipBox
SetWindowExtEx
IntersectClipRect
SelectObject
CreateCompatibleBitmap
SetViewportExtEx
EndDoc
EndPage
DeleteDC
StartDocA
DPtoLP
StartPage
SetViewportOrgEx
SetMapMode
SetWindowOrgEx
GetMapMode
GetDeviceCaps
CreateICA
CreateCompatibleDC

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JMRJ/编程傻瓜/逗死汇编/SYS/RX.EXE
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
JMRJ/编程傻瓜/逗死汇编/SYS/TABCTL32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

485fe921aa9fe9684fe6a83f2caeb15f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc40

ord2617
ord1494
ord4677
ord2140
ord1850
ord3268
ord4510
ord2754
ord2843
ord3945
ord2744
ord2845
ord4691
ord2620
ord3345
ord3346
ord3340
ord2694
ord3580
ord4101
ord3907
ord3134
ord570
ord315
ord3724
ord2707
ord5139
ord2696
ord3786
ord3630
ord3784
ord421
ord265
ord5637
ord2894
ord5638
ord3952
ord2860
ord2916
ord4096
ord3906
ord3202
ord651
ord403
ord1073
ord1035
ord1084
ord4046
ord4141
ord4302
ord4462
ord5644
ord4700
ord3919
ord1785
ord5649
ord654
ord4173
ord4099
ord5405
ord2004
ord2064
ord1989
ord2007
ord1975
ord2072
ord1995
ord3080
ord5273
ord4176
ord5341
ord957
ord3010
ord5352
ord2451
ord5461
ord5241
ord1097
ord3049
ord1456
ord5389
ord1786
ord2557
ord483
ord2317
ord4435
ord2389
ord3458
ord5648
ord3963
ord2234
ord2197
ord5070
ord3431
ord965
ord4627
ord2097
ord2909
ord4713
ord4715
ord3579
ord4165
ord4719
ord4703
ord5053
ord2960
ord3192
ord721
ord504
ord5630
ord1075
ord5560
ord2861
ord406
ord5299
ord2792
ord5200
ord1633
ord3738
ord1986
ord4296
ord1043
ord1071
ord2135
ord1464
ord4973
ord881
ord3827
ord4154
ord4113
ord5023
ord1873
ord4314
ord4375
ord5001
ord3611
ord4133
ord4132
ord4230
ord4124
ord4360
ord4024
ord3997
ord4070
ord4441
ord4380
ord4385
ord4390
ord4156
ord4473
ord4127
ord4060
ord3854
ord3840
ord4202
ord4204
ord4201
ord3892
ord4079
ord626
ord3898
ord4432
ord2177
ord2963
ord4015
ord5363
ord1540
ord5643
ord2618
ord2755
ord2844
ord3946
ord2851
ord2621
ord2695
ord3581
ord4098
ord5160
ord632
ord2312
ord3452
ord381
ord3838
ord1394
ord569
ord2106
ord481
ord4737
ord4735
ord2223
ord2378
ord4403
ord4649
ord4685
ord4444
ord4262
ord4268
ord4110
ord3844
ord4111
ord4123
ord4241
ord5296
ord4198
ord2081
ord4448
ord4206
ord3524
ord4498
ord4219
ord4223
ord1647
ord3714
ord5370
ord3656
ord3028
ord615
ord362
ord810
ord4952
ord3684
ord5550
ord978
ord979
ord729
ord731
ord375
ord4953
ord1395
ord763
ord4742
ord4736
ord4740
ord4724
ord1426
ord5121
ord2115
ord3158
ord3110
ord3185
ord1875
ord1881
ord2323
ord3922
ord3837
ord3314
ord4694
ord2086
ord5647
ord4608
ord1539
ord4657
ord3890
ord2199
ord3578
ord5360
ord3859
ord4450
ord4312
ord2176
ord4681
ord2358
ord1882
ord2510
ord4999
ord3523
ord2795
ord3620
ord2635
ord2801
ord2548
ord5568
ord3530
ord314
ord1425
ord3335
ord665
ord974
ord426
ord1868
ord4931
ord762
ord1366
ord4961
ord486
ord4739
ord4723
ord1387
ord2434
ord760
ord836
ord485
ord4741
ord706
ord1400
ord3098
ord2595
ord3804
ord883
ord5301
ord1085
ord3320
ord4459
ord671
ord733
ord711
ord1370
ord988
ord269
ord1367
ord1046
ord5681
ord1042
ord1369
ord328
ord999
ord1000
ord1105

msvcrt40

__CxxFrameHandler
_itoa
_ftol
wcslen
wcstombs
memmove
_mbsicmp
modf
mbstowcs
_mbsrev
_EH_prolog
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ

kernel32

FindResourceA
LoadResource
MulDiv
SizeofResource
GetPrivateProfileStringA
LockResource
lstrcmpA
GlobalAlloc
GetModuleFileNameA
GlobalFree
LocalAlloc
GlobalReAlloc
LocalUnlock
LocalFree
LocalLock
lstrcpyA
GlobalLock
lstrlenA
GetVersion
Sleep
GlobalUnlock
lstrcmpiA

user32

PtInRect
GetKeyState
GetWindowRect
GetWindowDC
LockWindowUpdate
EqualRect
IntersectRect
CallWindowProcA
SendMessageA
ScreenToClient
OffsetRect
GrayStringA
FillRect
UpdateWindow
GetDlgItem
MoveWindow
GetParent
DrawIcon
GetSystemMetrics
InvalidateRect
IsWindow
SetWindowPos
GetClientRect
ClientToScreen
GetClassNameA
GetDC
SetWindowTextA
ShowWindow
GetFocus
ReleaseDC
DrawFocusRect
CharNextA
CopyRect
DrawTextA
EnableWindow
wsprintfA
LoadCursorA
WinHelpA
CreateAcceleratorTableA
GetCursorPos
SetCursor
DestroyCursor
MessageBoxA
CharUpperA
MessageBeep
SetWindowLongA
GetSysColor
SetRectEmpty

gdi32

CreateCompatibleDC
SelectObject
CombineRgn
CreateRectRgn
CreatePolygonRgn
DeleteDC
BitBlt
CreateCompatibleBitmap
SetTextColor
SetBkColor
SelectClipRgn
CreateFontIndirectA
GetObjectA
SetBkMode
RealizePalette
SelectPalette
TextOutA
CreatePen
GetTextColor
LineTo
MoveToEx
GetTextExtentPoint32A
SetTextAlign
GetStockObject
GetCharWidthA
GetCurrentPositionEx
GetOutlineTextMetricsA
StretchBlt
RestoreDC
PlayMetaFile
SetViewportOrgEx
SetViewportExtEx
SetMapMode
SaveDC
IntersectClipRect
CreateSolidBrush
StretchDIBits
SetBrushOrgEx
GetDIBits
GetSystemPaletteEntries
CreateBitmap
OffsetRgn
FrameRgn
FillRgn
DeleteObject
UnrealizeObject
GetPaletteEntries
GetDeviceCaps
CreateDCA
CreateICA
EnumFontFamiliesA

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyA

ole32

CoTaskMemFree
CoGetMalloc

oleaut32

LoadTypeLi
SysReAllocString
VariantInit
SysAllocString
SysFreeString
SysStringLen
LoadRegTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JMRJ/编程傻瓜/逗死汇编/SYS/VB40032.DLL
.dll windows:1 windows x86 arch:x86

07bebe0245f57bd5ea8738e7cd4d783f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt20

_CIexp
_except_handler3
_adjust_fdiv
_initterm
_onexit
__dllonexit
strtoul
_ultoa
atol
_ltoa
exit
_isatty
memcpy
wcslen
_chdrive
_getdrive
strchr
memmove
getenv
_clearfp
_ftol
_chdir
_errno
_getdcwd
_chmod
strncpy
_access
_getcwd
free
__p__pctype
modf
_splitpath
memchr
floor
_CIpow
_adj_fdivr_m32
_adj_fdiv_r
_adj_fdiv_m32i
_adj_fdivr_m64
_adj_fdiv_m64
_adj_fdiv_m32
__p__environ
__p__wenviron
_wgetenv
qsort
_adj_fpatan
_locking
_close
_lseek
_write
_read
_sopen
rename
_purecall
remove
_rmdir
_mkdir
_findfirst
_findnext
_findclose
__doserrno
_commit
wcstod
strtod
wcspbrk
wcsncmp
_fcvt
_ecvt
_itoa
strstr
toupper
strpbrk
strrchr
iswctype
wcschr
wcscat
_wcsicmp
atoi
wcscmp
wcsncpy
_isctype
__p___mb_cur_max
malloc
wcscpy
_strnicmp
_fpreset
_statusfp
_exit

kernel32

CreateFileMappingA
LocalAlloc
LocalFree
SetHandleCount
GetSystemDirectoryA
SetErrorMode
GetCurrentProcessId
FileTimeToLocalFileTime
Sleep
GetSystemTime
LoadLibraryExA
GlobalDeleteAtom
ExitProcess
UnhandledExceptionFilter
GetStartupInfoA
CloseHandle
SetLocalTime
VirtualProtect
GetVersionExA
SystemTimeToFileTime
FileTimeToSystemTime
GetFileTime
SetFileTime
IsValidCodePage
LoadLibraryW
LCMapStringA
LCMapStringW
CompareStringW
GetUserDefaultLangID
CreateProcessW
RtlUnwind
RaiseException
FormatMessageW
WinExec
GetVersion
GetCurrentProcess
FlushInstructionCache
CompareStringA
lstrcmpiW
MultiByteToWideChar
CreateProcessA
GetUserDefaultLCID
GetLocaleInfoA
FreeResource
WaitForSingleObject
GetExitCodeProcess
VirtualFree
VirtualQuery
VirtualAlloc
GetCurrentThreadId
GlobalSize
WideCharToMultiByte
GetProfileStringA
GetModuleHandleA
GlobalAddAtomA
SearchPathA
GlobalReAlloc
GetFileAttributesA
CreateFileA
GetFullPathNameA
SetLastError
GetFileType
GlobalHandle
SizeofResource
FindResourceA
LoadResource
LockResource
_lwrite
_lread
GetWindowsDirectoryA
GetTempPathA
GetTempFileNameA
_llseek
GetLastError
_lclose
MulDiv
GetPrivateProfileStringA
IsBadReadPtr
SetCurrentDirectoryA
lstrcmpiA
GetTickCount
GetVolumeInformationA
GetDriveTypeA
GetCurrentDirectoryA
GetShortPathNameA
FindFirstFileA
FindClose
GlobalAlloc
lstrcatA
IsDBCSLeadByte
lstrlenA
GlobalFree
GlobalLock
lstrcpyA
GlobalUnlock
lstrcmpA
GetProcAddress
GetModuleFileNameA
LoadLibraryA
GetLocalTime
FreeLibrary
SetFileAttributesA
GetCommandLineA

user32

SendDlgItemMessageA
ClientToScreen
ScreenToClient
GetMessagePos
FillRect
GetMessageTime
ReleaseDC
SetWindowPos
GetClassNameA
GetParent
InvalidateRect
UpdateWindow
SetMenuDefaultItem
DispatchMessageA
GetDoubleClickTime
TrackPopupMenu
UnhookWindowsHookEx
EnableWindow
IsWindow
PostMessageA
CallWindowProcA
GetWindow
CharNextA
InflateRect
DrawFocusRect
CharPrevA
LoadBitmapA
GetWindowTextA
CopyRect
CharLowerA
GetCaretPos
KillTimer
SetCaretPos
GetWindowDC
DestroyIcon
CharUpperA
IsIconic
GetWindowTextLengthA
IsZoomed
SetFocus
DrawMenuBar
DestroyMenu
WinHelpA
DefMDIChildProcA
SetActiveWindow
FindWindowW
CharUpperBuffA
CharUpperBuffW
LoadStringW
SetWindowsHookExW
CharLowerBuffW
VkKeyScanW
GetKeyboardState
keybd_event
SetKeyboardState
GetForegroundWindow
GetWindowLongA
VkKeyScanA
DeferWindowPos
EndDeferWindowPos
MoveWindow
BeginDeferWindowPos
GetClientRect
GetSystemMenu
IsWindowVisible
SetWindowTextA
wsprintfA
WaitForInputIdle
CloseClipboard
EmptyClipboard
OpenClipboard
SetScrollRange
ShowWindow
IsClipboardFormatAvailable
GetKeyState
IsChild
GetCapture
GetFocus
SendMessageA
MapWindowPoints
GetWindowRect
DdeConnect
DdeFreeStringHandle
DdeFreeDataHandle
DdeCreateStringHandleA
DdeNameService
DdeQueryStringA
DdeQueryConvInfo
DdeUninitialize
DdeInitializeA
DdeSetUserHandle
FindWindowA
SetWindowLongA
SetRect
CharToOemA
LoadStringA
UnregisterClassA
SetWindowWord
GetClassLongA
DestroyWindow
GetAsyncKeyState
SetPropA
GetPropA
RemovePropA
GetTabbedTextExtentA
CreateIcon
CreateCursor
EnumClipboardFormats
DestroyCursor
GetCursor
LoadIconA
IsDialogMessageA
IsRectEmpty
CreateDialogParamA
GetLastActivePopup
PostQuitMessage
MessageBeep
DialogBoxParamA
MessageBoxA
DrawIcon
EndDialog
SetDlgItemTextA
CreatePopupMenu
GetMenu
OffsetRect
BringWindowToTop
LoadAcceleratorsA
TranslateMDISysAccel
RegisterClipboardFormatA
GetClipboardFormatNameA
CharToOemBuffA
OemToCharA
ShowCursor
PostThreadMessageA
WaitMessage
CallNextHookEx
SetWindowsHookExA
RegisterWindowMessageA
AttachThreadInput
DdeClientTransaction
DdeAbandonTransaction
DdePostAdvise
DdeCreateDataHandle
DdeGetData
DdeGetLastError
SetCursor
PtInRect
SetMenu
DdeDisconnect
GetUpdateRgn
SetCapture
WindowFromPoint
ReleaseCapture
GetScrollPos
SetParent
SetTimer
LoadCursorA
SetScrollPos
SetCursorPos
GetClipboardData
SetClipboardData
SetForegroundWindow
PeekMessageA
GetCursorPos
CheckMenuItem
ModifyMenuA
GetMenuState
GetMenuItemID
GetDlgItem
GetSubMenu
GetMenuStringA
AppendMenuA
GetMenuItemCount
DeleteMenu
RegisterClassA
DefFrameProcA
TabbedTextOutA
IntersectRect
IsWindowEnabled
TranslateMessage
RemoveMenu
EnableMenuItem
GetActiveWindow
InsertMenuA
GetClassInfoA
DrawTextA
GetDC
CharLowerBuffA
GetSystemMetrics
GetSysColor
FrameRect
ValidateRect
CreateMenu
CreateWindowExA
SetWindowContextHelpId
BeginPaint
EndPaint
DefWindowProcA
GetDesktopWindow
GetWindowThreadProcessId

gdi32

OffsetWindowOrgEx
SaveDC
CreateSolidBrush
GetTextExtentPointA
UnrealizeObject
SetBkColor
CreateHatchBrush
CreatePen
SelectObject
SetTextColor
SetBrushOrgEx
PatBlt
StretchBlt
ExtTextOutA
GetClipBox
RealizePalette
SetBkMode
GetTextMetricsA
GetStockObject
GetViewportExtEx
GetDeviceCaps
SelectPalette
MoveToEx
SetROP2
GetObjectA
RestoreDC
GetROP2
LineTo
CreateCompatibleBitmap
IntersectClipRect
Escape
RoundRect
CreateCompatibleDC
DeleteDC
CombineRgn
Ellipse
CreateDCA
ExcludeClipRect
SetRectRgn
Rectangle
GetWindowExtEx
SetWindowOrgEx
CreateRectRgn
TextOutA
SetAbortProc
BitBlt
EnumFontsA
CreateBrushIndirect
Arc
CreatePenIndirect
SetStretchBltMode
GetPixel
Pie
StretchDIBits
CreateBitmap
GetBitmapBits
CopyEnhMetaFileA
CreatePalette
CopyMetaFileA
CreateDIBitmap
GetPaletteEntries
GetNearestColor
ScaleViewportExtEx
SetViewportExtEx
GetDIBits
SetWindowExtEx
SetMapMode
SetViewportOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
SelectClipRgn
CreateRectRgnIndirect
PlayMetaFile
CreateICA
EndDoc
StartPage
EndPage
AbortDoc
ResetDCA
CreatePatternBrush
StartDocA
DeleteObject
GetBkColor

advapi32

RegQueryValueExW
RegDeleteValueW
RegQueryInfoKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyW
RegQueryValueExA
RegCloseKey
RegQueryValueW
RegEnumValueA
RegEnumValueW
RegEnumKeyW
RegDeleteValueA
RegOpenKeyA
RegDeleteKeyW
RegOpenKeyW
RegSetValueExA
RegSetValueExW
RegSetValueW
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyA
RegSetValueA
RegQueryValueA

ole32

OleCreateFromFile
OleQueryCreateFromData
ReadClassStm
OleSaveToStream
CoIsOle1Class
OleDoAutoConvert
OleLoad
OleSave
OleQueryLinkFromData
MkParseDisplayName
CoLockObjectExternal
CreateILockBytesOnHGlobal
OleDuplicateData
CoGetMalloc
RevokeDragDrop
RegisterDragDrop
OleInitialize
OleBuildVersion
BindMoniker
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleCreateFromData
OleCreateLinkFromData
OleGetIconOfClass
OleGetClipboard
OleSetClipboard
OleCreateLink
OleCreateLinkToFile
GetClassFile
CLSIDFromProgID
OleGetAutoConvert
IsAccelerator
CoCreateInstance
OleSetMenuDescriptor
OleConvertIStorageToOLESTREAM
OleConvertOLESTREAMToIStorage
ReadClassStg
WriteClassStg
OleRun
CreateBindCtx
OleLockRunning
OleIsCurrentClipboard
OleFlushClipboard
ReleaseStgMedium
OleIsRunning
StgCreateDocfile
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
CLSIDFromString
ProgIDFromCLSID
StringFromCLSID
StringFromGUID2
CoFreeUnusedLibraries
CoGetClassObject
IsValidInterface
CoDisconnectObject
CreateStreamOnHGlobal
OleUninitialize
StgIsStorageILockBytes

oleaut32

RegisterTypeLi
SafeArrayGetLBound
DispInvoke
VariantInit
VariantChangeType
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
SysFreeString
SysAllocStringByteLen
SysStringLen
SysAllocString
SafeArrayDestroy
SysStringByteLen
GetErrorInfo
SysAllocStringLen
SetErrorInfo
CreateErrorInfo
LoadRegTypeLi
LoadTypeLi
CreateDispTypeInfo
DispGetIDsOfNames
OaBuildVersion
VarUI1FromI2
SafeArrayGetUBound
GetActiveObject
VarBstrFromDate
VarBstrFromR4
SafeArrayLock
SafeArrayUnlock
VariantCopy
VariantCopyInd
SafeArrayDestroyDescriptor
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayDestroyData
RevokeActiveObject
VarDateFromStr
VarR8FromStr
VarCyFromStr
VarBstrFromCy
VarI2FromStr
VarCyFromR8
SysReAllocStringLen
SafeArrayPutElement
VariantChangeTypeEx
SafeArrayGetElement
SafeArrayGetDim
SafeArrayRedim
VarCyFromI4
VarBstrFromI2
VarBstrFromI4
VarBstrFromR8
SysReAllocString
VarI4FromStr
VarI4FromR8
VarR4FromStr
VarI2FromI4
VarR4FromR8

olepro32

ord254
ord252
ord248
ord251
ord250
ord253

Exports

Exports

AssignRecord
CopyRecord
CreateIExprSrvObj
DestructRecord
DllFunctionCall
EbGetHandleOfExecutingProject
EbGetObjConnectionCounts
EbGetVBAObject
EbResetProject
EbResetProjectNormal
GetMem1
GetMem2
GetMem4
GetMem8
GetMemNewObj
GetMemObj
GetMemStr
GetMemVar
IID_IVbaHost
IntlInitializeTable
MethCallEngine
ProcCallEngine
PutMem1
PutMem2
PutMem4
PutMem8
PutMemNewObj
PutMemObj
PutMemStr
PutMemVar
SetMemNewObj
SetMemObj
SetMemVar
ThunRTMain
TipCreateInstanceProject
TipGetAddressOfPredeclaredInstance
TipInvokeMethod
TipUnloadProject
UserDllMain
VBDllCanUnloadNow
VBDllGetClassObject
VBDllRegisterServer
VBDllUnRegisterServer
VarPtr
rtBoolFromErrVar
rtBstrFromErrVar
rtCyFromErrVar
rtI2FromErrVar
rtI4FromErrVar
rtR4FromErrVar
rtR8FromErrVar
rtUI1FromErrVar
rtcAbsVar
rtcAnsiValueBstr
rtcAppActivate
rtcAppleScript
rtcArray
rtcAtn
rtcBeep
rtcBstrFromAnsi
rtcBstrFromByte
rtcBstrFromChar
rtcBstrFromError
rtcBstrFromFormatVar
rtcByteValueBstr
rtcCVErrFromVar
rtcChangeDir
rtcChangeDrive
rtcCharValueBstr
rtcChoose
rtcCommandBstr
rtcCommandVar
rtcCompareBstr
rtcCos
rtcCreateObject
rtcCurrentDir
rtcCurrentDirBstr
rtcDDB
rtcDateAdd
rtcDateDiff
rtcDateFromVar
rtcDatePart
rtcDeleteSetting
rtcDir
rtcDoEvents
rtcEndOfFile
rtcEnvironBstr
rtcEnvironVar
rtcErrObj
rtcExp
rtcFV
rtcFileAttributes
rtcFileCopy
rtcFileDateTime
rtcFileLen
rtcFileLength
rtcFileLocation
rtcFileReset
rtcFileSeek
rtcFileWidth
rtcFixVar
rtcFreeFile
rtcGetAllSettings
rtcGetDateBstr
rtcGetDateValue
rtcGetDateVar
rtcGetDayOfMonth
rtcGetDayOfWeek
rtcGetErl
rtcGetFileAttr
rtcGetHourOfDay
rtcGetMinuteOfHour
rtcGetMonthOfYear
rtcGetObject
rtcGetPresentDate
rtcGetProjectLCID
rtcGetSecondOfMinute
rtcGetSetting
rtcGetTimeBstr
rtcGetTimeValue
rtcGetTimeVar
rtcGetTimer
rtcGetYear
rtcHexBstrFromVar
rtcHexVarFromVar
rtcIMEStatus
rtcIPMT
rtcIRR
rtcImmediateIf
rtcInStr
rtcInStrChar
rtcInputBox
rtcInputCharCount
rtcInputCharCountVar
rtcInputCount
rtcInputCountVar
rtcIntVar
rtcIsArray
rtcIsDate
rtcIsEmpty
rtcIsError
rtcIsMissing
rtcIsNull
rtcIsNumeric
rtcIsObject
rtcKillFiles
rtcLeftBstr
rtcLeftCharBstr
rtcLeftCharVar
rtcLeftTrimBstr
rtcLeftTrimVar
rtcLeftVar
rtcLenCharVar
rtcLenVar
rtcLog
rtcLowerCaseBstr
rtcLowerCaseVar
rtcMIRR
rtcMacId
rtcMakeDir
rtcMidBstr
rtcMidCharBstr
rtcMidCharVar
rtcMidVar
rtcMsgBox
rtcNPV
rtcNPer
rtcOctBstrFromVar
rtcOctVarFromVar
rtcPMT
rtcPPMT
rtcPV
rtcPackDate
rtcPackTime
rtcPartition
rtcQBColor
rtcR8ValFromBstr
rtcRandomNext
rtcRandomize
rtcRate
rtcRemoveDir
rtcRgb
rtcRightBstr
rtcRightCharBstr
rtcRightCharVar
rtcRightTrimBstr
rtcRightTrimVar
rtcRightVar
rtcSLN
rtcSYD
rtcSaveSetting
rtcSendKeys
rtcSetDateBstr
rtcSetDateVar
rtcSetFileAttr
rtcSetTimeBstr
rtcSetTimeVar
rtcSgnVar
rtcShell
rtcSin
rtcSpaceBstr
rtcSpaceVar
rtcSqr
rtcStrConvVar
rtcStrFromVar
rtcStringBstr
rtcStringVar
rtcSwitch
rtcTan
rtcTrimBstr
rtcTrimVar
rtcTypeName
rtcUpperCaseBstr
rtcUpperCaseVar
rtcVarBstrFromAnsi
rtcVarBstrFromByte
rtcVarBstrFromChar
rtcVarDateFromVar
rtcVarFromError
rtcVarFromFormatVar
rtcVarFromVar
rtcVarStrFromVar
rtcVarType

Sections

.text
Size: 515KB - Virtual size: 514KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ENGINE
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JMRJ/编程傻瓜/逗死汇编/TXT/256C.DAT
JMRJ/编程傻瓜/逗死汇编/TXT/JGOU.TXT
JMRJ/编程傻瓜/逗死汇编/TXT/MXX1.HDS
JMRJ/编程傻瓜/逗死汇编/TXT/MXXMXX1.ACE
JMRJ/编程傻瓜/逗死汇编/TXT/PP.TXT
JMRJ/编程傻瓜/逗死汇编/TXT/TEST2.TXT
JMRJ/编程傻瓜/逗死汇编/TXT/TEST3.TXT
JMRJ/编程傻瓜/逗死汇编/TXT/TX1.HDS
JMRJ/编程傻瓜/逗死汇编/TXT/TXTX1.ACE
JMRJ/编程傻瓜/逗死汇编/TXT/TXX1.HDS
JMRJ/编程傻瓜/逗死汇编/TXT/TXXTXX1.ACE
JMRJ/编程傻瓜/逗死汇编/TXT/字符256.BMP
JMRJ/编程傻瓜/逗死汇编/TXT/扩展1.HDS
JMRJ/编程傻瓜/逗死汇编/TXT/扩展X1.ACE
JMRJ/编程傻瓜/逗死汇编/TXT/芯片1.HDS
JMRJ/编程傻瓜/逗死汇编/TXT/芯片X1.ACE
JMRJ/编程傻瓜/逗死汇编/开始运行.EXE
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
JMRJ/编程傻瓜/逗死汇编/思路/西方负数.RTF
.rtf
JMRJ/编程傻瓜/逗死汇编/组实例/甲乙丙丁.组
JMRJ/编程傻瓜/逗死汇编/联系我们.EML
.eml
email-html-2.txt
.html
email-plain-1.txt
JMRJ/编程傻瓜/逗死汇编/许可证7.TXT
JMRJ/编程傻瓜/逗死汇编/说明书/说明书1.RTF
.rtf
JMRJ/编程傻瓜/逗死汇编/说明书/说明书10.RTF
.rtf
JMRJ/编程傻瓜/逗死汇编/说明书/说明书2.RTF
.rtf
JMRJ/编程傻瓜/逗死汇编/说明书/说明书3.RTF
.rtf
JMRJ/编程傻瓜/逗死汇编/说明书/说明书4.RTF
.rtf
JMRJ/编程傻瓜/逗死汇编/说明书/说明书5.RTF
.rtf
JMRJ/编程傻瓜/逗死汇编/说明书/说明书6.RTF
.rtf
JMRJ/编程傻瓜/逗死汇编/说明书/说明书7.RTF
.rtf
JMRJ/编程傻瓜/逗死汇编/说明书/说明书8.RTF
.rtf
JMRJ/编程傻瓜/逗死汇编/说明书/说明书9.RTF
.rtf
JMRJ/编程傻瓜/逗死汇编/说明书7.RTF
.rtf
下载说明.htm
.html .js polyglot

Sharing

General

Malware Config

Signatures

Files

4eeb6676ce0f224cf1809751448e7151

Headers

File Characteristics

Imports

vb40032

Sections

.text Size: 1009KB - Virtual size: 1012KB

.bss Size: - Virtual size: 4KB

.rsrc Size: 9KB - Virtual size: 12KB

.idata Size: 1024B - Virtual size: 4KB

.reloc Size: 28KB - Virtual size: 32KB

988f29c1eb8054253091352741683c76

Code Sign

Signer

Headers

File Characteristics

Imports

kernel32

user32

ole32

advapi32

oleaut32

comdlg32

gdi32

Exports

Exports

Sections

.text Size: 69KB - Virtual size: 68KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 51KB - Virtual size: 51KB

.reloc Size: 5KB - Virtual size: 5KB

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 104KB - Virtual size: 103KB

DATA Size: 2KB - Virtual size: 1KB

BSS Size: - Virtual size: 2KB

.idata Size: 3KB - Virtual size: 3KB

.edata Size: 1024B - Virtual size: 873B

.reloc Size: 7KB - Virtual size: 6KB

.rsrc Size: 5KB - Virtual size: 5KB

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 97KB - Virtual size: 97KB

DATA Size: 2KB - Virtual size: 1KB

BSS Size: - Virtual size: 2KB

.idata Size: 3KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 183B

.reloc Size: 7KB - Virtual size: 6KB

.rsrc Size: 5KB - Virtual size: 5KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 512B - Virtual size: 76B

.reloc Size: 512B - Virtual size: 12B

3f433b5c6cd21555a1bc4cd304de58bc

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 512B - Virtual size: 234B

.rdata Size: 512B - Virtual size: 288B

.data Size: 512B - Virtual size: 319B

e87e749ebc55d5130c2bb4db48b707d0

Code Sign

Signer

Headers

.text
Size: 1009KB - Virtual size: 1012KB

.bss
Size: - Virtual size: 4KB

.rsrc
Size: 9KB - Virtual size: 12KB

.idata
Size: 1024B - Virtual size: 4KB

.reloc
Size: 28KB - Virtual size: 32KB

.text
Size: 69KB - Virtual size: 68KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 51KB - Virtual size: 51KB

.reloc
Size: 5KB - Virtual size: 5KB

CODE
Size: 104KB - Virtual size: 103KB

DATA
Size: 2KB - Virtual size: 1KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 3KB - Virtual size: 3KB

.edata
Size: 1024B - Virtual size: 873B

.reloc
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 5KB - Virtual size: 5KB

CODE
Size: 97KB - Virtual size: 97KB

DATA
Size: 2KB - Virtual size: 1KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 3KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 183B

.reloc
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 5KB - Virtual size: 5KB

.text
Size: 512B - Virtual size: 76B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 512B - Virtual size: 234B

.rdata
Size: 512B - Virtual size: 288B

.data
Size: 512B - Virtual size: 319B

.text
Size: 129KB - Virtual size: 129KB

.data
Size: 13KB - Virtual size: 13KB

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 51KB - Virtual size: 50KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 114KB - Virtual size: 113KB

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 67KB - Virtual size: 67KB

.reloc
Size: 7KB - Virtual size: 7KB

CODE
Size: 20KB - Virtual size: 20KB

DATA
Size: 512B - Virtual size: 344B

BSS
Size: - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 1KB - Virtual size: 1KB