bred3[.]0[.]3-setup_9x[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

bred3.0.3-setup_9x.exe
Size

579KB
MD5

b0f7e5f3a7b8b009d438bc5a50a59697
SHA1

efad1da9c03e16c150ba3317dcb0adfd2156cc64
SHA256

056463d4dbd859f179d11d3e49e9d97b4b97a93968b6e7adacf2e4634f72a7a4
SHA512

c8ea411bd3d635e732b861e820600595e166d802aa37fad15050d8670face44221abf4ca4172fe1834bf55954a57e988927a5e06db55db74e7e46fa59f12e21d
SSDEEP

12288:MZwjmSrwa6EU/2cl6/aRtSA1XRdgNahQFw:ljNwa6EUl6/aRDZabw

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
bred3.0.3-setup_9x.exe
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/StartMenu.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/bred3_9x.exe
unpack001/icolore.dll

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_1

Files

bred3.0.3-setup_9x.exe
.exe windows:4 windows x86 arch:x86

9632e80596371cfa7f563f680f3c4498

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_AddMasked
ord17
ImageList_Destroy
ImageList_Create

kernel32

SetErrorMode
GetExitCodeProcess
WaitForSingleObject
ExpandEnvironmentStringsA
GetEnvironmentVariableA
lstrcmpiA
FindNextFileA
DeleteFileA
FindFirstFileA
SetFileTime
GetFileAttributesA
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
CreateDirectoryA
SetFileAttributesA
CreateFileA
GetFileSize
GetModuleFileNameA
GetTickCount
GetModuleHandleA
ExitProcess
lstrcpynA
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GetVersion
GlobalUnlock
GlobalLock
GlobalAlloc
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
GetSystemDirectoryA
EnterCriticalSection
Sleep
LeaveCriticalSection
InitializeCriticalSection
CloseHandle
GlobalFree
LoadLibraryA
GetProcAddress
CreateThread
FreeLibrary
MultiByteToWideChar
GetCurrentProcess
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
MulDiv
CopyFileA

user32

CharNextA
DialogBoxParamA
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
ExitWindowsEx
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
PostQuitMessage

gdi32

GetDeviceCaps
CreateFontIndirectA
DeleteObject
CreateBrushIndirect
CreateFontA
SetBkMode
SetTextColor
SetBkColor
SelectObject

advapi32

RegEnumValueA
RegEnumKeyA
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
SHFileOperationA

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

3764e6c387ce3c76b39936a24d523dce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileIntA
MultiByteToWideChar
GetPrivateProfileStringA
MulDiv
lstrcmpiA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GetModuleHandleA
GlobalAlloc

user32

PtInRect
MapWindowPoints
GetDlgCtrlID
LoadIconA
LoadImageA
LoadCursorA
CreateWindowExA
GetDC
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
EnableWindow
SendMessageA
SetWindowTextA
GetWindowTextA
wsprintfA
CharNextA
SetWindowLongA

gdi32

SetTextColor
CreateCompatibleDC
SelectObject
GetTextMetricsA
GetTextExtentPoint32A
DeleteDC
DeleteObject

comdlg32

GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/StartMenu.dll
.dll windows:4 windows x86 arch:x86

aebc3107701149edfc563b8db7a789fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpynA
GlobalAlloc
MulDiv
GetModuleHandleA
GlobalFree
FindClose
FindNextFileA
FindFirstFileA
lstrcmpiA
lstrcatA
lstrcpyA

user32

GetDlgItem
PostMessageA
CallWindowProcA
CreateDialogParamA
CheckDlgButton
ShowWindow
LoadIconA
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextA
SendMessageA
GetWindowTextA
IsDlgButtonChecked
SetWindowLongA
IsDialogMessageA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
GetWindowLongA

gdi32

GetTextMetricsA
SelectObject

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Exports

Exports

Select

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

445ca064c668ebcb89957d525a8bef23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\Cpp\!nsis!\System\Release\System.pdb

Imports

kernel32

GlobalAlloc
GlobalSize
GlobalFree
lstrcpyA
lstrcpynA
FreeLibrary
GetModuleHandleA
LoadLibraryA
GetProcAddress
lstrcatA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-wizard.bmp
.empty
License.txt
Readme.txt
aditor.hrc
.xml
adm.hrc
.xml
ant.hrc
.xml
atl.hrc
.xml
bred3_9x.exe
.exe windows:4 windows x86 arch:x86

c64226fde8655bc9d05108b69bcaa98a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Borland\Bred3r\Literal\ReleaseA\Literal.pdb

Imports

kernel32

GetModuleHandleA
GetVersionExA
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
ExitProcess
HeapDestroy
HeapCreate
GetSystemInfo
GetDriveTypeA
GetLongPathNameA
LocalAlloc
GetProcessHeap
HeapSize
RtlUnwind
RaiseException
InterlockedExchange
LocalFree
GetModuleFileNameA
lstrcmpiA
GetLastError
GetStartupInfoA
GetShortPathNameA
GetCommandLineA
GetDateFormatA
FormatMessageA
GetTickCount
GetTimeFormatA
GetLocaleInfoA
GlobalFree
GlobalAlloc
GlobalUnlock
MultiByteToWideChar
MulDiv
WideCharToMultiByte
GlobalLock
lstrcmpA
lstrcpyA
CloseHandle
SetFileAttributesA
SetLastError
ReadFile
GetFileAttributesA
WriteFile
GetFileAttributesExA
HeapFree
HeapAlloc
SetEndOfFile
lstrcpynA
MoveFileExA
SetFilePointer
GetFileSize
CreateFileA
GetFullPathNameA
HeapReAlloc
VirtualQuery

user32

SetMenuItemInfoA
LoadImageA
DispatchMessageA
PostMessageA
GetMenuItemCount
AppendMenuA
ShowWindow
GetMenuItemInfoA
EnumChildWindows
CharLowerBuffA
EndDialog
TranslateAcceleratorA
PeekMessageA
InvalidateRect
CheckMenuRadioItem
TrackPopupMenuEx
GetWindowTextA
GetWindowPlacement
GetMenu
TranslateMessage
EnumWindows
DrawEdge
wsprintfA
LoadIconA
DeleteMenu
SetForegroundWindow
IsZoomed
IsIconic
ShowWindowAsync
PostQuitMessage
RegisterClassExA
GetMessageA
SetWindowPlacement
EnableWindow
GetDlgItem
IsWindowEnabled
DestroyMenu
SetParent
GetSubMenu
DrawTextA
CreateDialogParamA
ClientToScreen
IsRectEmpty
SetScrollInfo
SetCaretPos
ReleaseCapture
CreateCaret
GetCursorPos
DestroyCaret
ScrollWindow
UnionRect
GetScrollInfo
IntersectRect
DialogBoxParamA
GetCapture
PtInRect
ShowCaret
GetKeyState
SetCapture
FillRect
ScreenToClient
HideCaret
GetWindowTextLengthA
GetSystemMetrics
GetKeyboardLayoutList
SystemParametersInfoA
LoadAcceleratorsA
GetKeyboardLayout
VkKeyScanExA
LoadMenuIndirectA
SetWindowTextA
GetDlgCtrlID
GetSysColor
RegisterClipboardFormatA
CharUpperBuffA
EmptyClipboard
SetClipboardData
IsCharAlphaNumericA
EndPaint
DestroyWindow
SetCursor
CloseClipboard
SetTimer
GetWindowRect
IsChild
KillTimer
GetPropA
GetFocus
IsClipboardFormatAvailable
GetParent
RemovePropA
GetClientRect
SetFocus
SendMessageA
BeginPaint
GetDC
SetPropA
SetWindowLongA
GetWindowLongA
GetClipboardData
CreateWindowExA
ReleaseDC
DefWindowProcA
IsWindow
OpenClipboard
MapWindowPoints
SetDlgItemTextA
GetClassNameA
OffsetRect
FindWindowExA
UpdateWindow
LoadCursorA
CopyRect
MoveWindow
MessageBoxA
SetWindowPos

gdi32

SetBkColor
DeleteDC
StartPage
SetViewportOrgEx
EndPage
EnumFontFamiliesExA
SetBkMode
SetTextColor
SetMapMode
CreatePen
SetPixelV
GetBkColor
ExtTextOutW
LineTo
MoveToEx
GetObjectA
StartDocA
EndDoc
ExtTextOutA
AbortDoc
GetDeviceCaps
CreateFontIndirectA
DeleteObject
SelectObject
GetTextColor
GetStockObject
GetTextMetricsA

advapi32

RegDeleteValueA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA

shell32

ShellExecuteA
DragQueryFileA
DragFinish

comctl32

InitCommonControlsEx

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
calcset.hrc
.xml
catalog.xml
.xml
ccsql.hrc
.xml
changes.txt
cobolsql.hrc
.xml
colorer.hrc
.xml
colorer5catalog.hrc
.xml
cppsql.hrc
.xml
csql.hrc
.xml
default.hrc
.xml
dii.hrc
.xml
docbook.hrc
.xml
edif.hrc
.xml
esc.hrc
.xml
farhelp.hrc
.xml
farmailscript.hrc
.xml
farmanager.hrc
.xml
farmsg.hrc
.xml
flex.hrc
.xml
gen.hrc
.xml
gpss.hrc
.xml
hrc.xsl
.xml
icolore.dll
.dll windows:4 windows x86 arch:x86

9ddfdaee1f051e7a0fc6482289ec4650

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Borland\Bred3r\Hlam\Colorer-take5.beta2\src\icolore\Release\icolore.pdb

Imports

kernel32

CreateFileA
SetFilePointer
WriteFile
GetModuleFileNameA
CloseHandle
FindFirstFileA
FindClose
FindNextFileA
GetModuleHandleA
IsBadReadPtr
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WideCharToMultiByte
FlushFileBuffers
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
DisableThreadLibraryCalls
VirtualAlloc
IsBadWritePtr
SetStdHandle
CompareStringA
MultiByteToWideChar
GetCPInfo
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetTimeZoneInformation
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
SetEndOfFile
ReadFile
GetLocaleInfoA
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
RaiseException
IsBadCodePtr

Exports

Exports

GetColorerObject
HeapEndDebug
HeapStartDebug

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
irclog.hrc
.xml
kixtart.hrc
.xml
linkdef.hrc
.xml
litestep.hrc
.xml
mason.hrc
.xml
mathml.hrc
.xml
qrm.hrc
.xml
rare-scripts.hrc
.xml
rpt.hrc
.xml
taglib.hrc
.xml
vim.hrc
.xml
web-app.hrc
.xml
xsd2hrc.custom.hrc
.xml
xslfo.hrc
.xml

Sharing

General

Malware Config

Signatures

Files

9632e80596371cfa7f563f680f3c4498

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

version

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 44KB

.rsrc Size: 18KB - Virtual size: 20KB

3764e6c387ce3c76b39936a24d523dce

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 924B

aebc3107701149edfc563b8db7a789fd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 296B

.reloc Size: 512B - Virtual size: 444B

445ca064c668ebcb89957d525a8bef23

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 1024B - Virtual size: 864B

.data Size: - Virtual size: 56B

.reloc Size: 512B - Virtual size: 478B

c64226fde8655bc9d05108b69bcaa98a

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 44KB

.rsrc
Size: 18KB - Virtual size: 20KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 924B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 296B

.reloc
Size: 512B - Virtual size: 444B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 1024B - Virtual size: 864B

.data
Size: - Virtual size: 56B

.reloc
Size: 512B - Virtual size: 478B

.text
Size: 128KB - Virtual size: 128KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 30KB - Virtual size: 30KB

.text
Size: 153KB - Virtual size: 152KB

.rdata
Size: 38KB - Virtual size: 38KB

.data
Size: 86KB - Virtual size: 91KB

.reloc
Size: 13KB - Virtual size: 12KB