Valorant RPC[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Valorant RPC.zip
Size

5.7MB
MD5

7d014d9be4d1d0bad1668fcc4245b7c9
SHA1

f55e916ea92af53c63e9851a66a0b529d6ffb012
SHA256

6b3038b1ba0f406cd94fd0a8892e93b5ccc6d705ea25810856a9af68c8bed86a
SHA512

690d518acaae31f594fd288d3bb0689434f0aa744ea7320909f3d2c9ccb80a7ebf3e1b8e4b7a39ccc95f143b02399f5b32ba09616cb085da6e38c4b9f8d06818
SSDEEP

98304:noSUa3mroSwJCZNh9Tc+5I7CI+xRyI6wqdoNkH2O/j+Pcp6WBiUz42gEuMKD0T+:oSUa37Cj9T47CZxRpqCc77prQjxPz

Score

3^/10

Malware Config

Signatures

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Valorant RPC/Valorant rpc.exe
unpack001/Valorant RPC/uninstall.exe
unpack002/$PLUGINSDIR/LangDLL.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/nsis_tauri_utils.dll

Files

Valorant RPC.zip
.zip
Valorant RPC/Valorant rpc.exe
.exe windows:6 windows x64 arch:x64

4d9031bb3d374329dfd82647babd16a7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

app.pdb

Imports

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle
WakeByAddressAll
WaitOnAddress

kernel32

GetModuleHandleW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
LoadLibraryW
OpenProcess
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetNativeSystemInfo
WakeAllConditionVariable
SetUnhandledExceptionFilter
LoadLibraryExA
FreeLibrary
LCIDToLocaleName
UnhandledExceptionFilter
GetUserDefaultUILanguage
GetCurrentThreadId
WaitForSingleObjectEx
GetTempPathW
GetFullPathNameW
CreateThread
WriteConsoleW
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
CreateProcessW
GetWindowsDirectoryW
GetSystemDirectoryW
WaitForMultipleObjects
ReadFileEx
CreateNamedPipeW
SleepConditionVariableSRW
ExitProcess
IsProcessorFeaturePresent
CancelIo
GetSystemTimeAsFileTime
CloseHandle
CreateMutexA
IsDebuggerPresent
GetFinalPathNameByHandleW
RemoveDirectoryW
MoveFileExW
DeleteFileW
FindFirstFileW
CreateDirectoryW
GetFileInformationByHandleEx
CreateFileW
GetFileAttributesW
GetModuleFileNameW
OutputDebugStringA
OutputDebugStringW
FindClose
GetLastError
FindNextFileW
ReleaseMutex
LoadLibraryExW
HeapReAlloc
GetEnvironmentVariableW
QueryPerformanceFrequency
HeapAlloc
HeapFree
CreatePipe
GetProcessId
TerminateProcess
GetExitCodeProcess
SleepEx
WriteFileEx
GetCurrentProcessId
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
GetProcessHeap
SetFilePointerEx
GlobalFree
RtlUnwindEx
RtlPcToFileHeader
FormatMessageW
GetCurrentThread
CopyFileExW
InitializeSListHead
RaiseException
GlobalAlloc
GlobalUnlock
GlobalSize
GlobalLock
EncodePointer
LoadLibraryA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
GetUserPreferredUILanguages
TlsSetValue
SetFileInformationByHandle
WaitForSingleObject
lstrlenW
CreateEventW
GetCommandLineW
SetEnvironmentVariableW
GetEnvironmentStringsW
GetQueuedCompletionStatusEx
GetCurrentDirectoryW
GetCurrentProcess
DuplicateHandle
SetLastError
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
SetWaitableTimer
CreateWaitableTimerExW
SwitchToThread
SetThreadStackGuarantee
AddVectoredExceptionHandler
SetHandleInformation
CompareStringOrdinal
DeleteProcThreadAttributeList
FreeEnvironmentStringsW
GetConsoleMode
GetFileInformationByHandle
Sleep
SetFileCompletionNotificationModes
GetOverlappedResult
ReadFile
CreateIoCompletionPort
TlsFree
PostQueuedCompletionStatus

psapi

EnumProcesses
GetModuleFileNameExW

user32

OpenClipboard
IsClipboardFormatAvailable
DispatchMessageA
GetMessageA
UnregisterHotKey
RegisterHotKey
ToUnicodeEx
GetClipboardData
SystemParametersInfoA
IsWindowVisible
AdjustWindowRectEx
GetWindowRect
SetForegroundWindow
GetWindowTextW
GetWindowTextLengthW
SetClipboardData
GetDC
SetWindowTextW
CloseClipboard
GetRawInputData
IsProcessDPIAware
PostQuitMessage
SendInput
AppendMenuW
CreateMenu
SetMenuItemInfoW
GetKeyboardLayout
CreateAcceleratorTableW
MonitorFromPoint
EnumDisplayMonitors
CreateIcon
VkKeyScanW
MapVirtualKeyExW
GetKeyState
GetAsyncKeyState
TrackMouseEvent
GetKeyboardState
GetWindowLongPtrW
RegisterClipboardFormatW
EnumChildWindows
SetWindowDisplayAffinity
RegisterWindowMessageA
RegisterClassExW
RegisterRawInputDevices
MsgWaitForMultipleObjectsEx
DestroyWindow
GetMenu
PostMessageW
SetWindowLongPtrW
ShowCursor
ClipCursor
GetClipCursor
SetWindowLongW
GetClientRect
RedrawWindow
SendMessageW
GetMonitorInfoW
MonitorFromWindow
SetMenu
CloseTouchInputHandle
ScreenToClient
GetTouchInputInfo
EmptyClipboard
MonitorFromRect
GetWindowLongW
GetActiveWindow
GetUpdateRect
ValidateRect
IsIconic
MapVirtualKeyW
GetSystemMenu
ShowWindow
CheckMenuItem
RegisterTouchWindow
GetSystemMetrics
IsWindow
CreateWindowExW
EnableMenuItem
GetForegroundWindow
SetCursorPos
SetCursor
LoadCursorW
InvalidateRgn
SetWindowPos
GetWindowPlacement
SetWindowPlacement
ChangeDisplaySettingsExW
ClientToScreen
ReleaseCapture
GetCursorPos
FlashWindowEx
DestroyAcceleratorTable
DestroyIcon
DefWindowProcW
PostThreadMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetAncestor
GetMessageW
SetCapture

comctl32

DefSubclassProc
RemoveWindowSubclass
SetWindowSubclass
TaskDialogIndirect

gdi32

GetDeviceCaps
DeleteObject
CreateRectRgn

dwmapi

DwmEnableBlurBehindWindow

ole32

CoCreateInstance
CoUninitialize
CreateStreamOnHGlobal
CoInitializeEx
OleInitialize
RegisterDragDrop
RevokeDragDrop
CoTaskMemFree
CoTaskMemAlloc
CoIncrementMTAUsage

shell32

ShellExecuteW
DragFinish
DragQueryFileW
SHCreateItemFromParsingName
SHGetKnownFolderPath
SHAppBarMessage

advapi32

RevertToSelf
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
RegCloseKey
RegGetValueW
SystemFunction036
RegQueryValueExW
RegOpenKeyExW
ImpersonateAnonymousToken

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

oleaut32

SysFreeString
SysStringLen
GetErrorInfo
SetErrorInfo

uxtheme

SetWindowTheme

ntdll

NtCancelIoFileEx
NtReadFile
RtlGetVersion
NtDeviceIoControlFile
NtCreateFile
RtlNtStatusToDosError
NtWriteFile

bcrypt

BCryptGenRandom

secur32

DeleteSecurityContext
QueryContextAttributesW
AcquireCredentialsHandleA
ApplyControlToken
FreeCredentialsHandle
DecryptMessage
FreeContextBuffer
InitializeSecurityContextW
AcceptSecurityContext
EncryptMessage

ws2_32

getsockopt
recv
send
ioctlsocket
connect
bind
WSACleanup
WSASend
WSASocketW
WSAStartup
getsockname
getpeername
shutdown
freeaddrinfo
closesocket
getaddrinfo
setsockopt
WSAIoctl
WSAGetLastError

crypt32

CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertOpenStore
CertCloseStore
CertDuplicateStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertDuplicateCertificateChain
CertFreeCertificateChain

api-ms-win-crt-math-l1-1-0

trunc
floor
__setusermatherr
round
pow

api-ms-win-crt-string-l1-1-0

wcslen
wcsncmp
_wcsicmp
strlen
strcpy_s

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe
_register_onexit_function
_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_crt_atexit
__p___argc
strerror
_initialize_onexit_table
_c_exit
__p___argv
_cexit
terminate
abort
_register_thread_local_exe_atexit_callback

api-ms-win-crt-convert-l1-1-0

_ultow_s
wcstol

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
calloc
_set_new_mode
malloc
_callnewh

Sections

.text
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 333KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant RPC/uninstall.exe
.exe windows:4 windows x86 arch:x86

61259b55b8912888e90f516ca08dc514

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW

ole32

OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

user32

GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu

gdi32

SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject

kernel32

GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LangDLL.dll
.dll windows:4 windows x86 arch:x86

3e8d18bb71c7ebbda2ddc2a4bb03547b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
GlobalFree
lstrcpynW
lstrcmpW
GlobalAlloc
MulDiv
GetModuleHandleW
lstrcpyW

user32

DialogBoxParamW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
SetWindowTextW
LoadIconW
ShowWindow
SendMessageW
GetDC

gdi32

GetDeviceCaps
CreateFontIndirectW
DeleteObject

Exports

Exports

LangDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 681B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsis_tauri_utils.dll
.dll windows:6 windows x86 arch:x86

17cb20871354b907f678c7c220e4ca60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

nsis_tauri_utils.pdb

Imports

kernel32

OpenProcess
ExitProcess
HeapAlloc
CloseHandle
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
HeapFree
TerminateProcess
GetProcessHeap
GlobalFree
InitializeProcThreadAttributeList
GetLastError
UpdateProcThreadAttribute
CreateProcessW
HeapReAlloc
GlobalAlloc
lstrcpyW

advapi32

GetTokenInformation
OpenProcessToken
EqualSid

user32

GetShellWindow
GetWindowThreadProcessId

Exports

Exports

DllMain
FindProcess
FindProcessCurrentUser
KillProcess
KillProcessCurrentUser
RunAsUser
SemverCompare
memcmp
memcpy
memset

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d9031bb3d374329dfd82647babd16a7

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

psapi

user32

comctl32

gdi32

dwmapi

ole32

shell32

advapi32

api-ms-win-core-winrt-l1-1-0

oleaut32

uxtheme

ntdll

bcrypt

secur32

ws2_32

crypt32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 5.6MB - Virtual size: 5.6MB

.rdata Size: 5.1MB - Virtual size: 5.1MB

.data Size: 13KB - Virtual size: 24KB

.pdata Size: 333KB - Virtual size: 333KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 30KB - Virtual size: 30KB

61259b55b8912888e90f516ca08dc514

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 128KB

.ndata Size: - Virtual size: 176KB

.rsrc Size: 17KB - Virtual size: 17KB

3e8d18bb71c7ebbda2ddc2a4bb03547b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 681B

.data Size: 512B - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 352B

.reloc Size: 512B - Virtual size: 352B

fc0224e99e736751432961db63a41b76

.text
Size: 5.6MB - Virtual size: 5.6MB

.rdata
Size: 5.1MB - Virtual size: 5.1MB

.data
Size: 13KB - Virtual size: 24KB

.pdata
Size: 333KB - Virtual size: 333KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 30KB - Virtual size: 30KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 128KB

.ndata
Size: - Virtual size: 176KB

.rsrc
Size: 17KB - Virtual size: 17KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 681B

.data
Size: 512B - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 352B

.reloc
Size: 512B - Virtual size: 352B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 1024B - Virtual size: 867B

.data
Size: 512B - Virtual size: 120B

.reloc
Size: 1024B - Virtual size: 662B

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: - Virtual size: 9B

.reloc
Size: 512B - Virtual size: 376B