bred3[.]0[.]3-setup_2k[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

bred3.0.3-setup_2k.exe
Size

579KB
MD5

1bc0082a091948766b632c085adebf1d
SHA1

8cda45567cc2998ea3d6923c24ee9040c3a6ba90
SHA256

39fe598bd8ecbb17ff9548bfe94a9db3a3de562fa8544d69499db733157c5ab3
SHA512

160ece9c86d84ed4fb12527ae560b9f5842176ec7e9615a9f653baf5c29fe4af76c703544c9dd335ee5a13f4cfe2927f7d97482173ebdef7ad5e904b96b5d5bf
SSDEEP

12288:MZwHQt1IGR9MCVBGFJImzXUVx+RkyvSbHIU7KslOPSP9zUnp/dSc9a:lc7+kwhr+qSbHIULla89zUK

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
bred3.0.3-setup_2k.exe
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/StartMenu.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/bred3_2k.exe
unpack001/icolore.dll

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_1

Files

bred3.0.3-setup_2k.exe
.exe windows:4 windows x86 arch:x86

9632e80596371cfa7f563f680f3c4498

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_AddMasked
ord17
ImageList_Destroy
ImageList_Create

kernel32

SetErrorMode
GetExitCodeProcess
WaitForSingleObject
ExpandEnvironmentStringsA
GetEnvironmentVariableA
lstrcmpiA
FindNextFileA
DeleteFileA
FindFirstFileA
SetFileTime
GetFileAttributesA
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
CreateDirectoryA
SetFileAttributesA
CreateFileA
GetFileSize
GetModuleFileNameA
GetTickCount
GetModuleHandleA
ExitProcess
lstrcpynA
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GetVersion
GlobalUnlock
GlobalLock
GlobalAlloc
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
GetSystemDirectoryA
EnterCriticalSection
Sleep
LeaveCriticalSection
InitializeCriticalSection
CloseHandle
GlobalFree
LoadLibraryA
GetProcAddress
CreateThread
FreeLibrary
MultiByteToWideChar
GetCurrentProcess
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
MulDiv
CopyFileA

user32

CharNextA
DialogBoxParamA
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
ExitWindowsEx
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
PostQuitMessage

gdi32

GetDeviceCaps
CreateFontIndirectA
DeleteObject
CreateBrushIndirect
CreateFontA
SetBkMode
SetTextColor
SetBkColor
SelectObject

advapi32

RegEnumValueA
RegEnumKeyA
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
SHFileOperationA

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

3764e6c387ce3c76b39936a24d523dce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileIntA
MultiByteToWideChar
GetPrivateProfileStringA
MulDiv
lstrcmpiA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GetModuleHandleA
GlobalAlloc

user32

PtInRect
MapWindowPoints
GetDlgCtrlID
LoadIconA
LoadImageA
LoadCursorA
CreateWindowExA
GetDC
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
EnableWindow
SendMessageA
SetWindowTextA
GetWindowTextA
wsprintfA
CharNextA
SetWindowLongA

gdi32

SetTextColor
CreateCompatibleDC
SelectObject
GetTextMetricsA
GetTextExtentPoint32A
DeleteDC
DeleteObject

comdlg32

GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/StartMenu.dll
.dll windows:4 windows x86 arch:x86

aebc3107701149edfc563b8db7a789fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpynA
GlobalAlloc
MulDiv
GetModuleHandleA
GlobalFree
FindClose
FindNextFileA
FindFirstFileA
lstrcmpiA
lstrcatA
lstrcpyA

user32

GetDlgItem
PostMessageA
CallWindowProcA
CreateDialogParamA
CheckDlgButton
ShowWindow
LoadIconA
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextA
SendMessageA
GetWindowTextA
IsDlgButtonChecked
SetWindowLongA
IsDialogMessageA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
GetWindowLongA

gdi32

GetTextMetricsA
SelectObject

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Exports

Exports

Select

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

445ca064c668ebcb89957d525a8bef23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\Cpp\!nsis!\System\Release\System.pdb

Imports

kernel32

GlobalAlloc
GlobalSize
GlobalFree
lstrcpyA
lstrcpynA
FreeLibrary
GetModuleHandleA
LoadLibraryA
GetProcAddress
lstrcatA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-wizard.bmp
.empty
License.txt
Readme.txt
aditor.hrc
.xml
adm.hrc
.xml
ant.hrc
.xml
atl.hrc
.xml
bred3_2k.exe
.exe windows:4 windows x86 arch:x86

0a0818650fe464607ddfdb79d77eddca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Borland\Bred3r\Literal\ReleaseW\Literal.pdb

Imports

kernel32

GetSystemInfo
SetErrorMode
FreeLibrary
LoadLibraryW
GetProcAddress
ExitProcess
HeapDestroy
HeapCreate
GetFullPathNameW
GetVersionExW
GetLongPathNameW
GetProcessHeap
HeapSize
RtlUnwind
RaiseException
LoadLibraryA
InterlockedExchange
LocalAlloc
GetModuleHandleW
LocalFree
GetShortPathNameW
lstrcmpiW
GetLastError
GetStartupInfoW
GetModuleFileNameW
GetTimeFormatW
FormatMessageW
GetLocaleInfoW
GetTickCount
GetDateFormatW
GetCommandLineW
GlobalFree
GlobalAlloc
GlobalUnlock
MultiByteToWideChar
lstrcmpW
MulDiv
WideCharToMultiByte
GlobalLock
SetFileAttributesW
lstrcpyW
CloseHandle
GetFileAttributesExW
SetLastError
CreateFileW
ReadFile
GetFileAttributesW
lstrcpynW
WriteFile
HeapFree
MoveFileExW
HeapAlloc
SetEndOfFile
SetFilePointer
GetFileSize
GetDriveTypeW
HeapReAlloc
VirtualQuery

user32

ShowWindow
SetWindowPos
EndDialog
PeekMessageW
AppendMenuW
InvalidateRect
CheckMenuRadioItem
TrackPopupMenuEx
EnumChildWindows
LoadIconW
RegisterClassExW
GetMenu
TranslateMessage
wsprintfW
EnumWindows
GetMenuItemInfoW
DrawEdge
CharLowerBuffW
DialogBoxParamW
DeleteMenu
SetForegroundWindow
IsZoomed
PostMessageW
LoadImageW
IsIconic
ShowWindowAsync
PostQuitMessage
GetMessageW
TranslateAcceleratorW
SetWindowPlacement
InternalGetWindowText
EnableWindow
GetDlgItem
IsWindowEnabled
DestroyMenu
CreateDialogParamW
SetParent
GetSubMenu
DrawTextW
ClientToScreen
IsRectEmpty
SetScrollInfo
SetCaretPos
ReleaseCapture
CreateCaret
GetCursorPos
DestroyCaret
ScrollWindow
UnionRect
GetScrollInfo
IntersectRect
OffsetRect
GetCapture
GetMenuItemCount
ShowCaret
GetKeyState
SetCapture
FillRect
ScreenToClient
HideCaret
GetWindowTextW
GetWindowTextLengthW
GetSystemMetrics
GetKeyboardLayoutList
SystemParametersInfoW
GetKeyboardLayout
LoadAcceleratorsW
LoadMenuIndirectW
VkKeyScanExW
FindWindowExW
GetDlgCtrlID
SetWindowTextW
GetSysColor
CharUpperBuffW
IsCharAlphaNumericW
CharUpperBuffA
EmptyClipboard
RegisterClipboardFormatW
SetClipboardData
IsCharAlphaNumericA
EndPaint
DestroyWindow
SetCursor
CloseClipboard
SetTimer
RemovePropW
GetWindowRect
IsChild
KillTimer
GetFocus
IsClipboardFormatAvailable
GetParent
LoadCursorW
GetClientRect
SetFocus
BeginPaint
SetPropW
GetDC
GetWindowLongW
GetClipboardData
ReleaseDC
SetWindowLongW
IsWindow
CreateWindowExW
OpenClipboard
SendMessageW
SetDlgItemTextW
SetMenuItemInfoW
DispatchMessageW
PtInRect
GetClassNameW
MapWindowPoints
UpdateWindow
GetPropW
DefWindowProcW
CopyRect
MoveWindow
MessageBoxW
GetWindowPlacement

gdi32

DeleteDC
StartPage
SetViewportOrgEx
EndPage
EnumFontFamiliesExW
SetBkMode
SetTextColor
SetBkColor
ExtTextOutA
CreatePen
SetPixelV
GetBkColor
LineTo
MoveToEx
GetObjectW
SetMapMode
ExtTextOutW
StartDocW
EndDoc
AbortDoc
GetTextMetricsW
CreateFontIndirectW
GetDeviceCaps
DeleteObject
GetTextColor
GetStockObject
SelectObject

advapi32

RegOpenKeyExW
RegSetValueExW
RegCloseKey
IsTextUnicode
RegDeleteValueW
RegQueryValueExW
RegCreateKeyExW

shell32

DragFinish
DragQueryFileW
ShellExecuteW
CommandLineToArgvW

comctl32

InitCommonControlsEx

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
calcset.hrc
.xml
catalog.xml
.xml
ccsql.hrc
.xml
changes.txt
cobolsql.hrc
.xml
colorer.hrc
.xml
colorer5catalog.hrc
.xml
cppsql.hrc
.xml
csql.hrc
.xml
default.hrc
.xml
dii.hrc
.xml
docbook.hrc
.xml
edif.hrc
.xml
esc.hrc
.xml
farhelp.hrc
.xml
farmailscript.hrc
.xml
farmanager.hrc
.xml
farmsg.hrc
.xml
flex.hrc
.xml
gen.hrc
.xml
gpss.hrc
.xml
hrc.xsl
.xml
icolore.dll
.dll windows:4 windows x86 arch:x86

9ddfdaee1f051e7a0fc6482289ec4650

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Borland\Bred3r\Hlam\Colorer-take5.beta2\src\icolore\Release\icolore.pdb

Imports

kernel32

CreateFileA
SetFilePointer
WriteFile
GetModuleFileNameA
CloseHandle
FindFirstFileA
FindClose
FindNextFileA
GetModuleHandleA
IsBadReadPtr
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WideCharToMultiByte
FlushFileBuffers
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
DisableThreadLibraryCalls
VirtualAlloc
IsBadWritePtr
SetStdHandle
CompareStringA
MultiByteToWideChar
GetCPInfo
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetTimeZoneInformation
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
SetEndOfFile
ReadFile
GetLocaleInfoA
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
RaiseException
IsBadCodePtr

Exports

Exports

GetColorerObject
HeapEndDebug
HeapStartDebug

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
irclog.hrc
.xml
kixtart.hrc
.xml
linkdef.hrc
.xml
litestep.hrc
.xml
mason.hrc
.xml
mathml.hrc
.xml
qrm.hrc
.xml
rare-scripts.hrc
.xml
rpt.hrc
.xml
taglib.hrc
.xml
vim.hrc
.xml
web-app.hrc
.xml
xsd2hrc.custom.hrc
.xml
xslfo.hrc
.xml

Sharing

General

Malware Config

Signatures

Files

9632e80596371cfa7f563f680f3c4498

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

version

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 44KB

.rsrc Size: 18KB - Virtual size: 20KB

3764e6c387ce3c76b39936a24d523dce

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 924B

aebc3107701149edfc563b8db7a789fd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 296B

.reloc Size: 512B - Virtual size: 444B

445ca064c668ebcb89957d525a8bef23

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 1024B - Virtual size: 864B

.data Size: - Virtual size: 56B

.reloc Size: 512B - Virtual size: 478B

0a0818650fe464607ddfdb79d77eddca

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 44KB

.rsrc
Size: 18KB - Virtual size: 20KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 924B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 296B

.reloc
Size: 512B - Virtual size: 444B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 1024B - Virtual size: 864B

.data
Size: - Virtual size: 56B

.reloc
Size: 512B - Virtual size: 478B

.text
Size: 128KB - Virtual size: 127KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 30KB - Virtual size: 30KB

.text
Size: 153KB - Virtual size: 152KB

.rdata
Size: 38KB - Virtual size: 38KB

.data
Size: 86KB - Virtual size: 91KB

.reloc
Size: 13KB - Virtual size: 12KB