d43f3268dacfa4f127c626f3da8de6ef_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d43f3268dacfa4f127c626f3da8de6ef_JaffaCakes118
Size

1.2MB
MD5

d43f3268dacfa4f127c626f3da8de6ef
SHA1

ee88843bd022c93d8cef3c5ad02ff8855cad1b55
SHA256

22ca321cf1ce863aba18c7f2bd0b0575fbc806a7b9ee31b4f019fffd42ded21d
SHA512

e3960aa121c4bb178a9702d24a1c289d771d00ce0e58bed705f4a2ecf1261d6d38b76963cd26da104b216aa6918b9717cd9e8b08dbf6c561dd2209fd5b98c74a
SSDEEP

24576:Lq8sEbSGwESKaVM6pk5sNwbGWUnCK+PG3F2GjEX+CmOuy:u8ssYMI85KTnC/EF2i1CmY

Score

3^/10

Malware Config

Signatures

Unsigned PE 19 IoCs

Checks for missing Authenticode signature.

resource
unpack001/343623356/FilterTdiDriver/Setup/FilterTdiDriver.sys
unpack001/343623356/GuiDesign/XFILTER.EXE
unpack001/343623356/MinDriver/MinDriver.sys
unpack001/343623356/MinDriverInVc/MinDriver/MinDriver.sys
unpack001/343623356/MinLSP/Release/Install.exe
unpack001/343623356/MinLSP/Release/MinLSP.dll
unpack001/343623356/MinLSP/Release/Sporder.Dll
unpack001/343623356/MinWinsockSpi/Release/Install.exe
unpack001/343623356/MinWinsockSpi/Release/MinWinsockSpi.dll
unpack001/343623356/PacketCapture/Release/Install.exe
unpack001/343623356/PacketCapture/Release/TcpIpDog.dll
unpack001/343623356/Tools/DumpSpi.exe
unpack001/343623356/XFILTER/Release/Xfilter.dll
unpack001/343623356/XFILTER/Release/Xfilter.exe
unpack001/343623356/XFILTER/Setup/Files/Xfilter.dll
unpack001/343623356/XFILTER/Setup/Files/Xfilter.exe
unpack001/343623356/XFILTER/Setup/Xfilter102.EXE
unpack001/343623356/xpassthru/Setup/XPASSTHRU.sys
unpack001/343623356/xpassthru/Setup/XSFILTER.DLL

Files

d43f3268dacfa4f127c626f3da8de6ef_JaffaCakes118
.rar
343623356/FilterTdiDriver/MAKEFILE
343623356/FilterTdiDriver/PACKET.H
343623356/FilterTdiDriver/Packet.c
343623356/FilterTdiDriver/Setup/FilterTdiDriver.reg
343623356/FilterTdiDriver/Setup/FilterTdiDriver.sys
.sys windows:5 windows x86 arch:x86

57b8acde880a5132f8d95d229ccaccf9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCallDriver
IofCompleteRequest
ObfDereferenceObject
IoAttachDeviceToDeviceStack
IoCreateDevice
IoDeleteDevice
RtlAssert
KeInitializeEvent
KeInitializeSpinLock
IoDetachDevice
KeWaitForSingleObject
_except_handler3
IoGetDeviceObjectPointer
DbgPrint
RtlInitUnicodeString

hal

KfAcquireSpinLock
KfReleaseSpinLock

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 288B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
343623356/FilterTdiDriver/Setup/SAMPLE.TXT
343623356/FilterTdiDriver/Sources
343623356/GuiDesign/MSSCCPRJ.SCC
343623356/GuiDesign/XFILTER.EXE
.exe windows:4 windows x86 arch:x86

225eb5c9b8196fe1208b7f998c2b716d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaLateIdCall
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
__vbaStrMove
_allmul
__vbaLateIdSt
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
343623356/GuiDesign/XFILTER.VBP
343623356/GuiDesign/XFILTER.VBW
343623356/GuiDesign/frmAcl.frm
343623356/GuiDesign/frmAcl.frx
343623356/GuiDesign/frmInfo.frm
343623356/GuiDesign/frmInfo.frx
343623356/GuiDesign/frmMain.frm
343623356/GuiDesign/frmMain.frx
343623356/MinDriver/MAKEFILE
343623356/MinDriver/MinDriver.c
343623356/MinDriver/MinDriver.h
343623356/MinDriver/MinDriver.reg
343623356/MinDriver/MinDriver.sys
.sys windows:5 windows x86 arch:x86

b31d13b9f5ba686accb2a4fe9d3bc565

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoDeleteDevice
DbgPrint

Sections

.text
Size: 352B - Virtual size: 322B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 96B - Virtual size: 96B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32B - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
343623356/MinDriver/Sources
343623356/MinDriverInVc/Build.bat
343623356/MinDriverInVc/MinDriver/MAKEFILE
343623356/MinDriverInVc/MinDriver/MinDriver.c
343623356/MinDriverInVc/MinDriver/MinDriver.h
343623356/MinDriverInVc/MinDriver/MinDriver.reg
343623356/MinDriverInVc/MinDriver/MinDriver.sys
.sys windows:5 windows x86 arch:x86

b31d13b9f5ba686accb2a4fe9d3bc565

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoDeleteDevice
DbgPrint

Sections

.text
Size: 352B - Virtual size: 322B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 96B - Virtual size: 96B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32B - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
343623356/MinDriverInVc/MinDriver/Sources
343623356/MinDriverInVc/MinDriverInVc.dsp
343623356/MinDriverInVc/MinDriverInVc.dsw
343623356/MinLSP/InstallExe/INSTLSP.CPP
343623356/MinLSP/InstallExe/INSTLSP.DSP
343623356/MinLSP/MinLSP.dsw
343623356/MinLSP/Release/Install.exe
.exe windows:4 windows x86 arch:x86

538dcf89fcdd9e425bb1acf73a2c3e1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetLastError
GlobalAlloc
GlobalFree
WideCharToMultiByte
FreeEnvironmentStringsW
CloseHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
SetStdHandle
LCMapStringA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
WriteFile
SetFilePointer
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
FlushFileBuffers

ws2_32

WSCDeinstallProvider
WSCInstallProvider
WSCEnumProtocols

sporder

WSCWriteProviderOrder

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
343623356/MinLSP/Release/MinLSP.dll
.dll windows:4 windows x86 arch:x86

60b883eda5b75e76468b0b1aa411ca05

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSCEnumProtocols
WSCGetProviderPath

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetLastError
GlobalAlloc
GlobalFree
ExpandEnvironmentStringsW
OutputDebugStringW
GetProcAddress
LoadLibraryW
RtlUnwind
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
IsBadWritePtr
IsBadReadPtr
HeapValidate
CompareStringW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
InitializeCriticalSection
FatalAppExitA
SetConsoleCtrlHandler
UnhandledExceptionFilter
HeapAlloc
HeapReAlloc
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
Sleep
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CloseHandle
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA

Exports

Exports

WSPStartup

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
343623356/MinLSP/Release/Sporder.Dll
.dll windows:5 windows x86 arch:x86

6abd26d532ebd1c429b3b41007e22348

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

OpenMutexA
lstrcpyA
WaitForSingleObject
CloseHandle
LoadLibraryA
lstrcmpA
ReleaseMutex
lstrcatA
lstrlenA
CreateMutexA
FreeLibrary
GetProcAddress

advapi32

RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegSetValueExA
RegCloseKey

user32

MessageBoxA

Exports

Exports

WSCWriteProviderOrder

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
343623356/MinLSP/TcpIpDog/LspServ.def
343623356/MinLSP/TcpIpDog/TcpIpDog.dsp
343623356/MinLSP/TcpIpDog/TcpIpdog.cpp
343623356/MinWinsockSpi/Common/XInstall.cpp
343623356/MinWinsockSpi/Common/XInstall.h
343623356/MinWinsockSpi/InstallExe/InstallExe.cpp
343623356/MinWinsockSpi/InstallExe/InstallExe.dsp
343623356/MinWinsockSpi/InstallExe/StdAfx.cpp
343623356/MinWinsockSpi/InstallExe/StdAfx.h
343623356/MinWinsockSpi/MinWinsockSpi.dsw
343623356/MinWinsockSpi/Release/Install.exe
.exe windows:4 windows x86 arch:x86

d5c9d13a702152a67e4c042a6ba19648

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
FreeEnvironmentStringsW
GetFileType
GetStartupInfoA
GetLastError
GetFileAttributesA
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
LCMapStringA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeW
GetStringTypeA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
MultiByteToWideChar
VirtualAlloc
LCMapStringW
SetStdHandle
CloseHandle
HeapAlloc
SetFilePointer
HeapReAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers

advapi32

RegCloseKey
RegDeleteKeyA
RegQueryValueExA
RegDeleteValueA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
343623356/MinWinsockSpi/Release/MinWinsockSpi.dll
.dll windows:4 windows x86 arch:x86

64085d225fc93b0d2d973e2e64a8f6a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
IsBadWritePtr
IsBadReadPtr
HeapValidate
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
SetConsoleCtrlHandler
InitializeCriticalSection
FatalAppExitA
UnhandledExceptionFilter
HeapAlloc
HeapReAlloc
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
Sleep
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
RtlUnwind
CloseHandle
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
OutputDebugStringA
ExpandEnvironmentStringsA
VirtualFree
SetFilePointer

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

WSPStartup

Sections

.text
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
343623356/MinWinsockSpi/TcpIpDog/LspServ.def
343623356/MinWinsockSpi/TcpIpDog/TcpIpDog.dsp
343623356/MinWinsockSpi/TcpIpDog/TcpIpdog.cpp
.vbs
343623356/PacketCapture/Common/Debug.h
343623356/PacketCapture/Common/XInstall.cpp
343623356/PacketCapture/Common/XInstall.h
343623356/PacketCapture/InstallExe/InstallExe.cpp
343623356/PacketCapture/InstallExe/InstallExe.dsp
343623356/PacketCapture/InstallExe/StdAfx.cpp
343623356/PacketCapture/InstallExe/StdAfx.h
343623356/PacketCapture/PacketCapture.dsw
343623356/PacketCapture/Release/Install.exe
.exe windows:4 windows x86 arch:x86

d5c9d13a702152a67e4c042a6ba19648

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
FreeEnvironmentStringsW
GetFileType
GetStartupInfoA
GetLastError
GetFileAttributesA
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
LCMapStringA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeW
GetStringTypeA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
MultiByteToWideChar
VirtualAlloc
LCMapStringW
SetStdHandle
CloseHandle
HeapAlloc
SetFilePointer
HeapReAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers

advapi32

RegCloseKey
RegDeleteKeyA
RegQueryValueExA
RegDeleteValueA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
343623356/PacketCapture/Release/TcpIpDog.dll
.dll windows:4 windows x86 arch:x86

c8165a27adfe25b105231b4f9da0af29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

getpeername
ntohs
getsockname

kernel32

GetLocalTime
SetLastError
GetVersion
GetLastError
lstrcpynA
TlsAlloc
DeleteCriticalSection
LocalAlloc
GlobalHandle
GlobalFree
GlobalUnlock
GlobalReAlloc
TlsFree
GlobalLock
LocalReAlloc
GlobalAlloc
TlsSetValue
FileTimeToLocalFileTime
TlsGetValue
FileTimeToSystemTime
FindResourceA
FreeResource
LoadResource
lstrcpyA
LockResource
GetModuleHandleA
GetLocaleInfoW
GlobalDeleteAtom
GetVersionExA
SetEnvironmentVariableA
SetStdHandle
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsBadCodePtr
IsValidCodePage
IsValidLocale
GetStringTypeW
UnhandledExceptionFilter
Sleep
SetConsoleCtrlHandler
GetStringTypeA
SetUnhandledExceptionFilter
HeapAlloc
VirtualAlloc
HeapReAlloc
LCMapStringW
CompareStringW
CompareStringA
VirtualFree
LCMapStringA
FatalAppExitA
HeapDestroy
HeapFree
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetFileType
FreeEnvironmentStringsA
GetStartupInfoA
ExitProcess
SetHandleCount
TerminateProcess
GetACP
ExitThread
CreateThread
GetSystemTime
FormatMessageA
LocalFree
GetTimeZoneInformation
RaiseException
GetStdHandle
DebugBreak
HeapValidate
GetCommandLineA
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetOEMCP
GetCPInfo
GetCurrentThread
SizeofResource
CreateEventA
SetEvent
WaitForSingleObject
CloseHandle
GlobalFlags
GetProcessVersion
GetPrivateProfileIntA
GetProfileIntA
MulDiv
VirtualProtect
SuspendThread
ResumeThread
GetThreadPriority
SetThreadPriority
FreeLibrary
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
InterlockedDecrement
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
ExpandEnvironmentStringsA
GetModuleFileNameA
InterlockedIncrement
LoadLibraryA
lstrlenA
lstrcmpA
IsBadStringPtrW
IsBadStringPtrA
IsBadWritePtr
IsBadReadPtr

user32

LoadMenuA
RemoveMenu
ModifyMenuA
LoadMenuIndirectA
InsertMenuA
GetSubMenu
GetMenuItemInfoA
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
IsMenu
CreatePopupMenu
CreateMenu
GetMenuContextHelpId
SetMenuContextHelpId
GrayStringA
DrawTextA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
SubtractRect
UnionRect
InflateRect
SetRectEmpty
IsRectEmpty
GetAsyncKeyState
GetMenuCheckMarkDimensions
LoadBitmapA
ScrollDC
GetTabbedTextExtentA
PostThreadMessageA
MapDialogRect
SetMenuItemBitmaps
SetWindowContextHelpId
SendNotifyMessageA
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
GetLastActivePopup
FindWindowA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
GetDesktopWindow
SetCapture
KillTimer
SetTimer
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
ValidateRect
InvalidateRgn
OpenIcon
GetWindowContextHelpId
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
ReleaseCapture
CheckMenuRadioItem
ClientToScreen
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
HiliteMenuItem
GetSystemMenu
DrawMenuBar
SetMenu
GetMenu
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
LoadIconA
SendDlgItemMessageA
GetClientRect
MapWindowPoints
GetSysColor
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
GetParent
GetWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetKeyState
DefWindowProcA
GetClassNameA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
RegisterWindowMessageA
EndDialog
GetActiveWindow
SetActiveWindow
DestroyCursor
SetCursor
GetCursorPos
GetMessageA
LoadStringA
TranslateMessage
GetDialogBaseUnits
GetClipboardFormatNameA
UnpackDDElParam
DestroyMenu
LoadAcceleratorsA
TranslateAcceleratorA
ReuseDDElParam
CharUpperA
DestroyIcon
SetCursorPos
EndPaint
BeginPaint
InvalidateRect
GetUpdateRgn
BringWindowToTop
EnableWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
UnhookWindowsHookEx
OemToCharA
CharToOemA
wsprintfA
PeekMessageA
PostQuitMessage
TabbedTextOutA
PostMessageA
IsWindow
SendMessageA
SetRect
LoadCursorA
CloseWindow
PtInRect

gdi32

SetTextCharacterExtra
SetViewportOrgEx
OffsetViewportOrgEx
CloseMetaFile
CreateEnhMetaFileA
CloseEnhMetaFile
ExtTextOutA
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
GetStockObject
UnrealizeObject
GetObjectType
CreatePen
CreatePenIndirect
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateBrushIndirect
CreatePatternBrush
CreateDIBPatternBrushPt
CreateFontIndirectA
CreateFontA
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateCompatibleBitmap
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreateDCA
CreateICA
CreateCompatibleDC
GetDeviceCaps
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
SelectObject
GetNearestColor
SetViewportExtEx
UpdateColors
RealizePalette
GetBkMode
GetPolyFillMode
GetBkColor
GetStretchBltMode
GetTextColor
GetROP2
GetViewportOrgEx
GetViewportExtEx
GetMapMode
GetWindowExtEx
DPtoLP
GetWindowOrgEx
FillRgn
FrameRgn
LPtoDP
PaintRgn
PtVisible
InvertRgn
GetCurrentPositionEx
Arc
RectVisible
Chord
Ellipse
Polyline
Polygon
PolyPolygon
Pie
RoundRect
PatBlt
Rectangle
StretchBlt
GetPixel
BitBlt
FloodFill
ExtFloodFill
SetPixel
GetTextExtentPoint32A
GetTextAlign
TextOutA
GetTextMetricsA
GetTextCharacterExtra
GetTextFaceA
GetAspectRatioFilterEx
Escape
GetCharWidthA
GetBoundsRect
ResetDCA
SetBoundsRect
GetCharABCWidthsA
GetFontData
GetOutlineTextMetricsA
GetGlyphOutlineA
StartDocA
GetKerningPairsA
EndPage
SetAbortProc
StartPage
EndDoc
MaskBlt
AbortDoc
SetPixelV
AngleArc
PlgBlt
PolyPolyline
GetColorAdjustment
StretchDIBits
PlayMetaFile
EnumMetaFile
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
GetClipRgn
DeleteObject
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
SetMapperFlags
CreateMetaFileA
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
StrokeAndFillPath
GetArcDirection
SetMiterLimit
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
RestoreDC
SaveDC
DeleteDC
PlayEnhMetaFile
GdiComment
WidenPath
StrokePath
BeginPath
CloseFigure
GetPath
GetMiterLimit
FlattenPath
FillPath
EndPath
PolyBezier
GetCurrentObject
AbortPath
GetCharWidthFloatA
GetCharABCWidthsFloatA
ExtEscape
DrawEscape

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
ChooseColorA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyA
RegCloseKey
GetFileSecurityA
RegOpenKeyExA
RegQueryValueA
RegSetValueA
RegCreateKeyA
RegEnumKeyA
RegCreateKeyExA
RegQueryValueExA
SetFileSecurityA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA

shell32

ExtractIconA
DragQueryFileA
DragFinish
SHGetFileInfoA
DragAcceptFiles

comctl32

ImageList_DragEnter
ImageList_DragLeave
ImageList_GetIcon
PropertySheetA
ImageList_Replace
ImageList_GetDragImage
ImageList_Draw
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ord17
ImageList_Remove
DestroyPropertySheetPage
CreatePropertySheetPageA
ord8
ord13
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read
ImageList_Write
ord14
ImageList_GetImageCount
ImageList_Add
ImageList_AddMasked

Exports

Exports

WSPStartup

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inidata
Size: 4KB - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
343623356/PacketCapture/Sample/Sample.txt
343623356/PacketCapture/TcpIpDog/LspServ.def
343623356/PacketCapture/TcpIpDog/Overlapped.cpp
.js
343623356/PacketCapture/TcpIpDog/Overlapped.h
343623356/PacketCapture/TcpIpDog/STDAFX.H
343623356/PacketCapture/TcpIpDog/StdAfx.cpp
343623356/PacketCapture/TcpIpDog/TcpIpDog.dsp
343623356/PacketCapture/TcpIpDog/TcpIpdog.cpp
.vbs
343623356/Tools/DumpSpi.exe
.exe windows:4 windows x86 arch:x86

3986b83ae58b98a5d1a2d7248fb6b7ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
FreeEnvironmentStringsA
GetACP
UnhandledExceptionFilter
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
SetHandleCount
SetUnhandledExceptionFilter
HeapSize
VirtualFree
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
LockFile
HeapReAlloc
FlushFileBuffers
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapFree
TerminateProcess
ExitProcess
HeapAlloc
RaiseException
RtlUnwind
GetCommandLineA
GetStartupInfoA
GetFileAttributesA
GetFileTime
GetFileSize
FileTimeToSystemTime
GetTickCount
FileTimeToLocalFileTime
FindFirstFileA
GetFullPathNameA
GetVolumeInformationA
FindClose
VirtualAlloc
IsBadWritePtr
SetEndOfFile
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
lstrlenA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
UnlockFile
SetFilePointer
GetProfileStringA
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetThreadLocale
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SizeofResource
GetLastError
GlobalFlags
lstrcpynA
MulDiv
SetLastError
CloseHandle
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
FormatMessageA
LocalFree
LCMapStringA
LoadResource

user32

InvalidateRect
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
LoadCursorA
InflateRect
GetDesktopWindow
PtInRect
GetClassNameA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
LoadStringA
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
PostMessageA
UpdateWindow
SendDlgItemMessageA
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
GetNextDlgGroupItem
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
MessageBeep
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
CopyRect
GetDC
ReleaseDC
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
EnableWindow
SendMessageA
GetSysColor
MapWindowPoints
DrawFocusRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
CreateDIBitmap
CreateCompatibleDC
BitBlt
GetTextExtentPointA
IntersectClipRect
SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
SetViewportOrgEx
SetMapMode
OffsetViewportOrgEx
GetStockObject
SetBkMode
RestoreDC
SaveDC
SelectObject
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetObjectA
PatBlt
GetClipBox

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

comctl32

ImageList_Destroy
ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc

olepro32

ord253

oleaut32

SysStringLen
SysFreeString
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
343623356/XFILTER/Common/Debug.h
343623356/XFILTER/Common/TypeStruct.h
343623356/XFILTER/Common/XCommon.cpp
343623356/XFILTER/Common/XCommon.h
343623356/XFILTER/Common/XFile.cpp
.js
343623356/XFILTER/Common/XFile.h
343623356/XFILTER/Common/XFileRes.h
343623356/XFILTER/Common/XInstall.cpp
343623356/XFILTER/Common/XInstall.h
343623356/XFILTER/Common/XLogFile.cpp
.js
343623356/XFILTER/Common/XLogFile.h
343623356/XFILTER/FILELIST.TXT
343623356/XFILTER/Help/Html/CONT0.HTM
.html .vbs polyglot
343623356/XFILTER/Help/Html/CONT1.HTM
.html .vbs polyglot
343623356/XFILTER/Help/Html/CONT2.HTM
.html .vbs polyglot
343623356/XFILTER/Help/Html/CONT3.HTM
.html .vbs polyglot
343623356/XFILTER/Help/Html/CONT4.HTM
.html .vbs polyglot
343623356/XFILTER/Help/Html/CONT5.HTM
.html .vbs polyglot
343623356/XFILTER/Help/Html/CONT6.HTM
.html .vbs polyglot
343623356/XFILTER/Help/Html/CONT7.HTM
.html .vbs polyglot
343623356/XFILTER/Help/Html/CONT8.HTM
.html .vbs polyglot
343623356/XFILTER/Help/Html/CONT9.HTM
.html .vbs polyglot
343623356/XFILTER/Help/Xfilter.chm
.chm
343623356/XFILTER/Help/Xfilter.h
343623356/XFILTER/Help/Xfilter.hhc
.html
343623356/XFILTER/Help/Xfilter.hhk
.html
343623356/XFILTER/Help/Xfilter.hhp
343623356/XFILTER/Lib/HTMLHELP.H
343623356/XFILTER/Lib/HTMLHELP.LIB
343623356/XFILTER/NetCommand/Command.txt
343623356/XFILTER/Property/About.cpp
343623356/XFILTER/Property/About.h
343623356/XFILTER/Property/Acl.cpp
343623356/XFILTER/Property/Acl.h
343623356/XFILTER/Property/AclSet.cpp
343623356/XFILTER/Property/AclSet.h
343623356/XFILTER/Property/GuiRes.h
.vbs
343623356/XFILTER/Property/HyperLink/Hyperlink.cpp
343623356/XFILTER/Property/HyperLink/Hyperlink.h
343623356/XFILTER/Property/Internet/Internet.cpp
.js
343623356/XFILTER/Property/Internet/Internet.h
343623356/XFILTER/Property/LogQuery.cpp
.js
343623356/XFILTER/Property/LogQuery.h
343623356/XFILTER/Property/MainFrame/MainFrame.cpp
343623356/XFILTER/Property/MainFrame/mainframe.h
343623356/XFILTER/Property/MainSheet.cpp
343623356/XFILTER/Property/MainSheet.h
343623356/XFILTER/Property/NetIPAria.cpp
343623356/XFILTER/Property/NetIPAria.h
343623356/XFILTER/Property/NetTimeSheet.cpp
343623356/XFILTER/Property/NetTimeSheet.h
343623356/XFILTER/Property/PacketMonitor.cpp
343623356/XFILTER/Property/PacketMonitor.h
343623356/XFILTER/Property/Property.clw
343623356/XFILTER/Property/Property.cpp
343623356/XFILTER/Property/Property.dsp
343623356/XFILTER/Property/Property.h
343623356/XFILTER/Property/Property.rc
343623356/XFILTER/Property/RES/ABOUT.BMP
343623356/XFILTER/Property/RES/ACLSET.ICO
343623356/XFILTER/Property/RES/ALERTSET.ICO
343623356/XFILTER/Property/RES/APPSET.ICO
343623356/XFILTER/Property/RES/Alert.ico
343623356/XFILTER/Property/RES/BASESET.ICO
343623356/XFILTER/Property/RES/COMMONSET.ICO
343623356/XFILTER/Property/RES/DenyEx1.ico
343623356/XFILTER/Property/RES/Email.ico
343623356/XFILTER/Property/RES/IPSET.ICO
343623356/XFILTER/Property/RES/MEMO.ICO
343623356/XFILTER/Property/RES/Message.ico
343623356/XFILTER/Property/RES/Monitor.ico
343623356/XFILTER/Property/RES/NETSET.ICO
343623356/XFILTER/Property/RES/NULL.ICO
343623356/XFILTER/Property/RES/PassEx1.ico
343623356/XFILTER/Property/RES/Property.ico
343623356/XFILTER/Property/RES/Property.rc2
343623356/XFILTER/Property/RES/QueryEx1.ico
343623356/XFILTER/Property/RES/QueryResult.ico
343623356/XFILTER/Property/RES/QuerySet.ICO
343623356/XFILTER/Property/RES/SPLASH.BMP
343623356/XFILTER/Property/RES/SUPERSET.ICO
343623356/XFILTER/Property/RES/TIMESET.ICO
343623356/XFILTER/Property/RES/UserInfo.ico
343623356/XFILTER/Property/RES/Xfilter.ico
343623356/XFILTER/Property/RESOURCE.H
343623356/XFILTER/Property/Register.cpp
343623356/XFILTER/Property/Register.h
343623356/XFILTER/Property/SetNet.cpp
343623356/XFILTER/Property/SetNet.h
343623356/XFILTER/Property/SetTime.cpp
343623356/XFILTER/Property/SetTime.h
343623356/XFILTER/Property/Splash.cpp
343623356/XFILTER/Property/Splash.h
343623356/XFILTER/Property/StdAfx.cpp
343623356/XFILTER/Property/StdAfx.h
343623356/XFILTER/Property/SystemSet.cpp
343623356/XFILTER/Property/SystemSet.h
343623356/XFILTER/Property/SystemTray/SystemTray.cpp
343623356/XFILTER/Property/SystemTray/SystemTray.h
343623356/XFILTER/Release/XACL.CFG
343623356/XFILTER/Release/Xfilter.chm
.chm
343623356/XFILTER/Release/Xfilter.dll
.dll windows:4 windows x86 arch:x86

2dcdd3959ed519ef99249037869bdbea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

htonl
getsockname
WSASetLastError
getpeername
ntohs

kernel32

SetFilePointer
WriteFile
ReadFile
FlushFileBuffers
UnlockFile
SetEndOfFile
MoveFileA
LockFile
DeleteFileA
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
GetFileAttributesA
GetFileSize
FindClose
GetFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
RtlUnwind
GetCommandLineA
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
RaiseException
CreateThread
ExitThread
HeapSize
HeapReAlloc
DuplicateHandle
LocalFileTimeToFileTime
GetModuleHandleA
CreateFileA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
InitializeCriticalSection
LeaveCriticalSection
GetSystemDirectoryA
GetCurrentProcess
WritePrivateProfileStringA
SetErrorMode
GetCurrentDirectoryA
GetOEMCP
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalFlags
GetCPInfo
GetCurrentThread
FreeLibrary
MulDiv
GetProcessVersion
LockResource
FindResourceA
LoadResource
lstrcmpiA
lstrcatA
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
ExitProcess
CreateEventA
GetModuleFileNameA
SuspendThread
GetCurrentThreadId
SetThreadPriority
ResumeThread
EnterCriticalSection
SetEvent
GetVersionExA
WaitForSingleObject
CloseHandle
lstrcpyA
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalAlloc
GlobalReAlloc
GlobalLock
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
LocalAlloc
GetVersion
DeleteCriticalSection
lstrcpynA
GetLastError
SetLastError
FormatMessageA
LocalFree
lstrcmpA
FileTimeToLocalFileTime
FileTimeToSystemTime
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
ExpandEnvironmentStringsA
Sleep
LoadLibraryA
GetProcAddress
TerminateProcess
FatalAppExitA
LCMapStringA

user32

GetClassInfoA
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
SetFocus
IsWindow
SetActiveWindow
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
LoadIconA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
GetDesktopWindow
PostQuitMessage
DestroyMenu
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
ShowOwnedPopups
SetCursor
InsertMenuA
DeleteMenu
GetMenuStringA
CharUpperA
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetScrollRange
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetMenuState
ModifyMenuA
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SendMessageA
MessageBoxA
EnableWindow
LoadStringA
UnhookWindowsHookEx
wsprintfA
OemToCharA
CharToOemA
PostMessageA
LoadBitmapA
GetMenuCheckMarkDimensions
CheckMenuItem
SetMenuItemBitmaps
GetWindowRect

gdi32

SetBkColor
SetTextColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectObject
GetStockObject
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
GetClipBox
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetDCOrgEx
CreateRectRgn
SelectClipPath
GetClipRgn
PlayMetaFileRecord
GetObjectType
ExtSelectClipRgn
PlayMetaFile
GetViewportExtEx
EnumMetaFile
CreatePen
ExtCreatePen
GetWindowExtEx
CreateHatchBrush
CreatePatternBrush
CreateSolidBrush
PtVisible
RectVisible
CreateDIBPatternBrushPt
ExtTextOutA
Escape
TextOutA
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA

shell32

DragAcceptFiles
SHGetFileInfoA

comctl32

ord17

Exports

Exports

WSPStartup
XfIoControl

Sections

.text
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uinidat
Size: - Virtual size: 114KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inidata
Size: 4KB - Virtual size: 286B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
343623356/XFILTER/Release/Xfilter.exe
.exe windows:4 windows x86 arch:x86

df0a93732815a957972f6554c43fe9d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
WSACleanup

kernel32

RtlUnwind
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
GetTimeZoneInformation
GetLocalTime
TerminateProcess
HeapSize
HeapReAlloc
SetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetSystemTime
GetACP
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
WritePrivateProfileStringA
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
LockResource
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
TerminateThread
GetVersion
GetProcAddress
Sleep
CreateThread
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
DeleteCriticalSection
LocalAlloc
GlobalAlloc
lstrcmpA
GetCurrentThread
GetFileTime
GetFileSize
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
WaitForSingleObject
CloseHandle
GetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpynA
MulDiv
SetLastError
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
IsBadWritePtr

user32

SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
DestroyMenu
PostQuitMessage
ShowOwnedPopups
GetClassNameA
GetSysColorBrush
LoadStringA
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
MapDialogRect
ShowWindow
GetActiveWindow
GetAsyncKeyState
IsWindowEnabled
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
MessageBoxA
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
LoadAcceleratorsA
GetDesktopWindow
DrawTextA
GetDlgItem
GetWindowTextLengthA
TranslateMessage
GetMessageA
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
ValidateRect
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
GetWindowLongA
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetCursorPos
TrackPopupMenu
PostMessageA
GetMenuItemID
LoadMenuA
GetSubMenu
SetMenuDefaultItem
FindWindowA
GetWindowRect
GetSysColor
OffsetRect
TabbedTextOutA
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
KillTimer
MessageBeep
IsWindowVisible
SetForegroundWindow
IsWindow
CopyIcon
SetWindowLongA
GetClientRect
PtInRect
ReleaseCapture
RedrawWindow
TranslateAcceleratorA
WindowFromPoint
SetRectEmpty
CharUpperA
RegisterClassA
GrayStringA
GetDlgCtrlID
SetCapture
SetTimer
LoadBitmapA
UpdateWindow
LoadCursorA
SetCursor
LoadIconA
SetWindowPos
GetParent
SendMessageA
EnableWindow
GetWindowTextA
CallNextHookEx
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetMenu
GetMenuItemCount
GetTopWindow
UnregisterClassA

gdi32

CreateCompatibleDC
GetObjectA
BitBlt
GetClipBox
SetBkColor
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
CreateFontA
CreateFontIndirectA
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetTextColor
GetStockObject

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA

shell32

DragQueryFileA
DragFinish
Shell_NotifyIconA
ShellExecuteA

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageA
ord17
PropertySheetA
ImageList_Destroy

wininet

InternetSetStatusCallback
InternetGetLastResponseInfoA
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetOpenA
InternetGetConnectedState
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetConnectA
InternetCloseHandle
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetQueryDataAvailable

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 376KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
343623356/XFILTER/Setup/Files/Xfilter.chm
.chm
343623356/XFILTER/Setup/Files/Xfilter.dll
.dll windows:4 windows x86 arch:x86

9a31e5a9d3b859960ea35302d615979b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

htonl
getsockname
WSASetLastError
getpeername
ntohs

kernel32

SetFilePointer
WriteFile
ReadFile
FlushFileBuffers
UnlockFile
SetEndOfFile
MoveFileA
LockFile
DeleteFileA
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
GetFileAttributesA
GetFileSize
FindClose
GetFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
HeapFree
RtlUnwind
GetCommandLineA
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
RaiseException
CreateThread
ExitThread
HeapSize
HeapReAlloc
DuplicateHandle
LocalFileTimeToFileTime
GetModuleHandleA
CreateFileA
VirtualFree
FatalAppExitA
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
InitializeCriticalSection
LeaveCriticalSection
GetSystemDirectoryA
GetCurrentProcess
WritePrivateProfileStringA
SetErrorMode
GetCurrentDirectoryA
GetOEMCP
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalFlags
GetCPInfo
GetCurrentThread
FreeLibrary
MulDiv
GetProcessVersion
LockResource
FindResourceA
LoadResource
lstrcmpiA
lstrcatA
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
ExitProcess
CreateEventA
GetModuleFileNameA
SuspendThread
GetCurrentThreadId
SetThreadPriority
ResumeThread
EnterCriticalSection
SetEvent
GetVersionExA
WaitForSingleObject
CloseHandle
lstrcpyA
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalAlloc
GlobalReAlloc
GlobalLock
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
LocalAlloc
GetVersion
DeleteCriticalSection
lstrcpynA
GetLastError
SetLastError
FormatMessageA
LocalFree
lstrcmpA
FileTimeToLocalFileTime
FileTimeToSystemTime
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
ExpandEnvironmentStringsA
Sleep
LoadLibraryA
GetProcAddress
TerminateProcess
HeapDestroy
HeapCreate

user32

GetClassInfoA
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
SetFocus
IsWindow
SetActiveWindow
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
LoadIconA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
GetDesktopWindow
PostQuitMessage
DestroyMenu
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
ShowOwnedPopups
SetCursor
InsertMenuA
DeleteMenu
GetMenuStringA
CharUpperA
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetScrollRange
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetMenuState
ModifyMenuA
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SendMessageA
MessageBoxA
EnableWindow
LoadStringA
UnhookWindowsHookEx
wsprintfA
OemToCharA
CharToOemA
PostMessageA
LoadBitmapA
GetMenuCheckMarkDimensions
CheckMenuItem
SetMenuItemBitmaps
GetWindowRect

gdi32

SetBkColor
SetTextColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectObject
GetStockObject
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
GetClipBox
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetDCOrgEx
CreateRectRgn
SelectClipPath
GetClipRgn
PlayMetaFileRecord
GetObjectType
ExtSelectClipRgn
PlayMetaFile
GetViewportExtEx
EnumMetaFile
CreatePen
ExtCreatePen
GetWindowExtEx
CreateHatchBrush
CreatePatternBrush
CreateSolidBrush
PtVisible
RectVisible
CreateDIBPatternBrushPt
ExtTextOutA
Escape
TextOutA
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA

shell32

DragAcceptFiles
SHGetFileInfoA

comctl32

ord17

Exports

Exports

WSPStartup
XfIoControl

Sections

.text
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uinidat
Size: - Virtual size: 114KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inidata
Size: 4KB - Virtual size: 286B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
343623356/XFILTER/Setup/Files/Xfilter.exe
.exe windows:4 windows x86 arch:x86

df0a93732815a957972f6554c43fe9d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
WSACleanup

kernel32

RtlUnwind
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
GetTimeZoneInformation
GetLocalTime
TerminateProcess
HeapSize
HeapReAlloc
SetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetSystemTime
GetACP
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
WritePrivateProfileStringA
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
LockResource
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
TerminateThread
GetVersion
GetProcAddress
Sleep
CreateThread
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
DeleteCriticalSection
LocalAlloc
GlobalAlloc
lstrcmpA
GetCurrentThread
GetFileTime
GetFileSize
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
WaitForSingleObject
CloseHandle
GetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpynA
MulDiv
SetLastError
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
IsBadWritePtr

user32

SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
DestroyMenu
PostQuitMessage
ShowOwnedPopups
GetClassNameA
GetSysColorBrush
LoadStringA
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
MapDialogRect
ShowWindow
GetActiveWindow
GetAsyncKeyState
IsWindowEnabled
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
MessageBoxA
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
LoadAcceleratorsA
GetDesktopWindow
DrawTextA
GetDlgItem
GetWindowTextLengthA
TranslateMessage
GetMessageA
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
ValidateRect
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
GetWindowLongA
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetCursorPos
TrackPopupMenu
PostMessageA
GetMenuItemID
LoadMenuA
GetSubMenu
SetMenuDefaultItem
FindWindowA
GetWindowRect
GetSysColor
OffsetRect
TabbedTextOutA
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
KillTimer
MessageBeep
IsWindowVisible
SetForegroundWindow
IsWindow
CopyIcon
SetWindowLongA
GetClientRect
PtInRect
ReleaseCapture
RedrawWindow
TranslateAcceleratorA
WindowFromPoint
SetRectEmpty
CharUpperA
RegisterClassA
GrayStringA
GetDlgCtrlID
SetCapture
SetTimer
LoadBitmapA
UpdateWindow
LoadCursorA
SetCursor
LoadIconA
SetWindowPos
GetParent
SendMessageA
EnableWindow
GetWindowTextA
CallNextHookEx
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetMenu
GetMenuItemCount
GetTopWindow
UnregisterClassA

gdi32

CreateCompatibleDC
GetObjectA
BitBlt
GetClipBox
SetBkColor
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
CreateFontA
CreateFontIndirectA
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetTextColor
GetStockObject

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA

shell32

DragQueryFileA
DragFinish
Shell_NotifyIconA
ShellExecuteA

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageA
ord17
PropertySheetA
ImageList_Destroy

wininet

InternetSetStatusCallback
InternetGetLastResponseInfoA
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetOpenA
InternetGetConnectedState
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetConnectA
InternetCloseHandle
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetQueryDataAvailable

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 376KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
343623356/XFILTER/Setup/Xfilter102.EXE
.exe windows:4 windows x86 arch:x86

fc1300250f0ecc0cf4491b54efe75246

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
FreeLibrary
OpenFile
LoadLibraryA
_lclose
_lopen
lstrcpyA
_lcreat
GetModuleFileNameA
GetVersionExA
SetErrorMode
lstrlenA
GetWindowsDirectoryA
GlobalHandle
_lwrite
WinExec
GlobalAlloc
GlobalFree
ExitProcess
_lread
_llseek
GlobalUnlock
GetCommandLineA
GetModuleHandleA
GlobalLock

user32

GetClientRect
DefWindowProcA
SendMessageA
EndPaint
BeginPaint
InvalidateRect
PostQuitMessage
wsprintfA
CreateWindowExA
GetDC
ReleaseDC
SetWindowPos
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
ExitWindowsEx
MessageBoxA
RegisterClassA

gdi32

CreatePalette
DeleteObject
GetStockObject
GetDeviceCaps
PatBlt
CreateSolidBrush
SelectObject
SelectPalette
RealizePalette

Exports

Exports

_MainWndProc@16
_StubFileWrite@12

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
343623356/XFILTER/Setup/Xfilter102.wse
343623356/XFILTER/TcpIpDog/CheckAcl.cpp
343623356/XFILTER/TcpIpDog/CheckAcl.h
343623356/XFILTER/TcpIpDog/Codes.h
343623356/XFILTER/TcpIpDog/LspServ.def
343623356/XFILTER/TcpIpDog/Overlapped.cpp
.js
343623356/XFILTER/TcpIpDog/Overlapped.h
343623356/XFILTER/TcpIpDog/ProtocolInfo.cpp
343623356/XFILTER/TcpIpDog/ProtocolInfo.h
343623356/XFILTER/TcpIpDog/StdAfx.cpp
343623356/XFILTER/TcpIpDog/StdAfx.h
343623356/XFILTER/TcpIpDog/TcpIpDog.dsp
343623356/XFILTER/TcpIpDog/TcpIpDog.h
343623356/XFILTER/TcpIpDog/TcpIpdog.cpp
.vbs
343623356/XFILTER/Xfilter.dsw
343623356/xpassthru/MAKEFILE
343623356/xpassthru/MINIHOOK.C
343623356/xpassthru/MINIHOOK.H
343623356/xpassthru/PACKET.H
343623356/xpassthru/PREXSIM.H
343623356/xpassthru/PROTHOOK.C
343623356/xpassthru/PROTHOOK.H
343623356/xpassthru/Packet.c
343623356/xpassthru/RECV.C
343623356/xpassthru/RESOURCE.H
343623356/xpassthru/SEND.C
343623356/xpassthru/SOURCES
343623356/xpassthru/Sample/SampleLog.txt
343623356/xpassthru/Setup/XFTOWIN.INF
343623356/xpassthru/Setup/XPASSTHRU.sys
.sys windows:5 windows x86 arch:x86

050dd5acd9ad2bdeb8dbc3cf907871fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlAssert
DbgPrint
RtlEqualUnicodeString
RtlCopyUnicodeString
KeInitializeSpinLock

hal

KfAcquireSpinLock
KfReleaseSpinLock

ndis.sys

NdisIMInitializeDeviceInstanceEx
NdisAllocatePacketPoolEx
NdisInitializeEvent
NdisInitAnsiString
NdisQueryBufferOffset
NdisIMAssociateMiniport
NdisMRegisterUnloadHandler
NdisInitializeWrapper
NdisIMRegisterLayeredMiniport
NdisMSetAttributesEx
NdisIMGetDeviceContext
NdisRequest
NdisFreeMemory
NdisFreePacketPool
NdisWaitEvent
NdisCloseAdapter
NdisResetEvent
NdisMSetMiniportSecondary
NdisMPromoteMiniport
NdisRegisterProtocol
NdisInitUnicodeString
NdisCloseConfiguration
NdisPacketPoolUsage
NdisOpenAdapter
NdisFreePacket
NdisReturnPackets
NdisAllocateMemoryWithTag
NdisReadConfiguration
NdisOpenProtocolConfiguration
NdisSetEvent
NdisIMDeInitializeDeviceInstance
NdisDeregisterProtocol
NdisReEnumerateProtocolBindings
NdisMSleep
NdisGetReceivedPacket
NDIS_BUFFER_TO_SPAN_PAGES
NdisIMCopySendCompletePerPacketInfo
NdisSend
NdisIMCopySendPerPacketInfo
NdisAllocatePacket
NdisTransferData
NdisDprFreePacket
NdisDprAllocatePacket

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 800B - Virtual size: 794B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
343623356/xpassthru/Setup/XSFILTER.DLL
.dll regsvr32 windows:5 windows x86 arch:x86

0a77860539ee78aee0b360dbd4ff131a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_EH_prolog
malloc
realloc
free
_purecall
wcscpy
wcslen
swprintf
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ

advapi32

RegQueryInfoKeyW
RegSetValueExW
RegDeleteKeyW
RegQueryValueExW
RegEnumValueW
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey

comctl32

CreatePropertySheetPageW

kernel32

lstrlenW
LoadResource
FindResourceW
InterlockedDecrement
LeaveCriticalSection
lstrcatW
lstrcpyW
LoadLibraryW
GetProcAddress
HeapDestroy
lstrcpynW
lstrcmpiW
InterlockedIncrement
LoadLibraryExW
SizeofResource
lstrlenA
MultiByteToWideChar
FreeLibrary
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
GetModuleFileNameW
GetLastError
EnterCriticalSection
GetShortPathNameW

ole32

CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr
SysFreeString

user32

SetWindowLongW
CharNextW
SetWindowTextW
GetWindowLongW
GetWindowTextW
GetDlgItem
SendMessageW
GetParent

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
343623356/xpassthru/Setup/xpassthru.inf
343623356/xpassthru/xpassthru.c
343623356/xpassthru/xpassthru.h
343623356/xpassthru/xpassthru.rc
343623356/下载说明.htm
.html .js polyglot
343623356/读者调查表.doc
.doc windows office2003

Sharing

General

Malware Config

Signatures

Files

57b8acde880a5132f8d95d229ccaccf9

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 192B - Virtual size: 192B

INIT Size: 512B - Virtual size: 508B

.reloc Size: 288B - Virtual size: 268B

225eb5c9b8196fe1208b7f998c2b716d

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 52KB - Virtual size: 49KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 2KB

b31d13b9f5ba686accb2a4fe9d3bc565

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 352B - Virtual size: 322B

.rdata Size: 128B - Virtual size: 100B

INIT Size: 96B - Virtual size: 96B

.reloc Size: 32B - Virtual size: 30B

b31d13b9f5ba686accb2a4fe9d3bc565

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 352B - Virtual size: 322B

.rdata Size: 128B - Virtual size: 100B

INIT Size: 96B - Virtual size: 96B

.reloc Size: 32B - Virtual size: 30B

538dcf89fcdd9e425bb1acf73a2c3e1b

Headers

File Characteristics

Imports

kernel32

ws2_32

sporder

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 8KB

60b883eda5b75e76468b0b1aa411ca05

Headers

File Characteristics

Imports

ws2_32

kernel32

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 158KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 12KB - Virtual size: 16KB

.idata Size: 4KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 5KB

6abd26d532ebd1c429b3b41007e22348

Headers

File Characteristics

Imports

kernel32

advapi32

user32

Exports

Exports

Sections

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 192B - Virtual size: 192B

INIT
Size: 512B - Virtual size: 508B

.reloc
Size: 288B - Virtual size: 268B

.text
Size: 52KB - Virtual size: 49KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 352B - Virtual size: 322B

.rdata
Size: 128B - Virtual size: 100B

INIT
Size: 96B - Virtual size: 96B

.reloc
Size: 32B - Virtual size: 30B

.text
Size: 352B - Virtual size: 322B

.rdata
Size: 128B - Virtual size: 100B

INIT
Size: 96B - Virtual size: 96B

.reloc
Size: 32B - Virtual size: 30B

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 8KB

.text
Size: 160KB - Virtual size: 158KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 12KB - Virtual size: 16KB

.idata
Size: 4KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 5KB

.text
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 1.1MB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 8KB

.text
Size: 160KB - Virtual size: 157KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 12KB - Virtual size: 15KB

.idata
Size: 4KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 5KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 8KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 72KB - Virtual size: 68KB

.data
Size: 44KB - Virtual size: 56KB

.idata
Size: 20KB - Virtual size: 18KB

.inidata
Size: 4KB - Virtual size: 260B

.reloc
Size: 48KB - Virtual size: 45KB