fb999c9713da021e6f7195f906624eb0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fb999c9713da021e6f7195f906624eb0_JaffaCakes118
Size

4.1MB
MD5

fb999c9713da021e6f7195f906624eb0
SHA1

0122b08dbe02aca53ba76564f52f130648eeba4e
SHA256

ba41706b35c747aca077e902de8f003d00eb792478545f0c815058ef3d9efd16
SHA512

e79ee671f9bdd8b116dc8da583d02b22266ba5e2a1fab90c902f5229a46766d78b8d9d5eb8ba81090056dcd07eafe5f20317ac8559fec8f9f1ef56275383d0d3
SSDEEP

98304:yKmDi1XRFNo//bXXpiRV9C9ut4JCoB//JkGpBShgBl:TFe3bXmfC9ut4JCoB//VpBSiBl

Score

3^/10

Malware Config

Signatures

Unsigned PE 24 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Catanzaro_Script v.1/Cursore/CURSOR.DLL
unpack001/Catanzaro_Script v.1/autoident/dll/MDX.DLL
unpack001/Catanzaro_Script v.1/autoident/dll/POPUPS.DLL
unpack001/Catanzaro_Script v.1/autoident/dll/VIEWS.MDX
unpack001/Catanzaro_Script v.1/cambiasfondo/mdx.dll
unpack001/Catanzaro_Script v.1/games/Darts.EXE
unpack001/Catanzaro_Script v.1/games/Kill cat.exe
unpack001/Catanzaro_Script v.1/games/MICRO2.EXE
unpack001/Catanzaro_Script v.1/mirc.exe
unpack001/Catanzaro_Script v.1/xmplay/Acidian Fire - shadow.xmpskin
unpack001/Catanzaro_Script v.1/xmplay/Flat.II.Indigo.xmpskin
unpack001/Catanzaro_Script v.1/xmplay/NNP-2.xmpskin
unpack001/Catanzaro_Script v.1/xmplay/Neutron.xmpskin
unpack001/Catanzaro_Script v.1/xmplay/TeKnoid Blue.xmpskin
unpack001/Catanzaro_Script v.1/xmplay/xmp-aac.dll
unpack001/Catanzaro_Script v.1/xmplay/xmp-asio.dll
unpack001/Catanzaro_Script v.1/xmplay/xmp-cd.dll
unpack001/Catanzaro_Script v.1/xmplay/xmp-coverart.svp
unpack001/Catanzaro_Script v.1/xmplay/xmp-wadsp.dll
unpack001/Catanzaro_Script v.1/xmplay/xmp-wavis.dll
unpack001/Catanzaro_Script v.1/xmplay/xmp-wma.dll
unpack001/Catanzaro_Script v.1/xmplay/xmplay.exe
unpack001/Catanzaro_Script v.1/xpopup/xpopup/XPopup.dll
unpack001/Catanzaro_Script v.1/zlagbar/tbwin.dll

Files

fb999c9713da021e6f7195f906624eb0_JaffaCakes118
.rar
Catanzaro_Script v.1/Cursore/CURSOR.DLL
.dll windows:4 windows x86 arch:x86

a6db2bcb0d672c0fa8aba87f42c7ea20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
LoadLibraryA
GetModuleFileNameA
FreeLibrary

user32

ShowCursor
GetCursorPos
LoadCursorA
DestroyCursor
GetWindowLongA
LoadImageA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
SetClassLongA
SetCursor
CreateWindowExA
ClipCursor
DestroyWindow
SetCursorPos
GetClipCursor

msvcrt

_stricmp
_adjust_fdiv
malloc
free
??3@YAXPAX@Z
_initterm
??2@YAPAXI@Z
strtok
_itoa
atoi

Exports

Exports

Click
ConfineCursor
CursorVisibility
DLLInfo
MoveCursor
RestoreCursor
SetMouseCursor
SetMouseCursor2
SetStdMouseCursor
SetStdMouseCursor2

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Catanzaro_Script v.1/Cursore/Cursore.mrc
Catanzaro_Script v.1/Cursore/cursore.JPG
.jpg
Catanzaro_Script v.1/Cursore/cursore.cur
Catanzaro_Script v.1/Cursore/cursore2.JPG
.jpg
Catanzaro_Script v.1/Cursore/cursore2.cur
Catanzaro_Script v.1/Cursore/cursore3.JPG
.jpg
Catanzaro_Script v.1/Cursore/cursore3.cur
Catanzaro_Script v.1/Cursore/cursore4.JPG
.jpg
Catanzaro_Script v.1/Cursore/cursore4.cur
Catanzaro_Script v.1/Cursore/cursore5.JPG
.jpg
Catanzaro_Script v.1/Cursore/cursore5.cur
Catanzaro_Script v.1/Cursore/cursore6.JPG
.jpg
Catanzaro_Script v.1/Cursore/cursore6.cur
Catanzaro_Script v.1/GlobalFind/DataBase.db
Catanzaro_Script v.1/GlobalFind/GlobalFind.mrc
.js
Catanzaro_Script v.1/GlobalFind/INSTALL.txt
Catanzaro_Script v.1/GlobalFind/Leggimi.txt
Catanzaro_Script v.1/GlobalFind/NewsAddonFind.txt
Catanzaro_Script v.1/Grafica/Thumbs.db
Catanzaro_Script v.1/Grafica/av-1645226.jpg
.jpg
Catanzaro_Script v.1/Grafica/bkgnd3.jpg
.jpg
Catanzaro_Script v.1/Grafica/botred.PNG
.png
Catanzaro_Script v.1/Grafica/nicn.PNG
.png
Catanzaro_Script v.1/Grafica/pulsanti.bmp
Catanzaro_Script v.1/Grafica/pulsantiera.jpg
.jpg
Catanzaro_Script v.1/Grafica/sidebar.PNG
.png
Catanzaro_Script v.1/Grafica/sidebar3.png
.png
Catanzaro_Script v.1/Grafica/toolbar1.jpg
.jpg
Catanzaro_Script v.1/Grafica/toolbar2.jpg
.jpg
Catanzaro_Script v.1/Grafica/toolbar3.jpg
.jpg
Catanzaro_Script v.1/Grafica/toolbar4.jpg
.jpg
Catanzaro_Script v.1/Grafica/toolbar5.jpg
.jpg
Catanzaro_Script v.1/Grafica/toolbar6.jpg
.jpg
Catanzaro_Script v.1/Grafica/toolbar7.jpg
.jpg
Catanzaro_Script v.1/Grafica/toolbar8.jpg
.jpg
Catanzaro_Script v.1/Ringraziamenti.mrc
Catanzaro_Script v.1/autoident/ReadMe.html
.html
Catanzaro_Script v.1/autoident/autoident.mrc
.js
Catanzaro_Script v.1/autoident/dll/MDX.DLL
.dll windows:4 windows x86 arch:x86

34b86dab5c0b41a24220fe3732aef3a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MapViewOfFile
WaitForSingleObject
ReleaseMutex
CreateFileMappingA
UnmapViewOfFile
CloseHandle
GetProcAddress
SetLastError
GetModuleFileNameA
LoadLibraryA
GetLastError
FreeLibrary
GlobalSize
GlobalFree
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentProcessId
CreateMutexA

user32

SetWindowPos
GetWindowLongA
PostMessageA
DrawTextA
CreateWindowExA
SetWindowLongA
GetSysColorBrush
RedrawWindow
ChildWindowFromPointEx
GetParent
GetDlgCtrlID
GetWindowRect
ScreenToClient
MoveWindow
GetActiveWindow
SendMessageA
GetDlgItem
SetFocus
ShowWindow
InvalidateRgn
DestroyIcon
GetSysColor
CallWindowProcA
GetClientRect
GetClassNameA
EnumChildWindows
DestroyWindow
EnableWindow
MapWindowPoints
GetWindow
RegisterClipboardFormatA
LoadStringA

gdi32

DeleteDC
GetTextFaceA
GetTextMetricsA
SelectObject
CreateCompatibleDC
DeleteObject
GetObjectA
CreateFontIndirectA
CreateBrushIndirect
GetStockObject
GetBkColor
GetTextColor
SetTextColor
SetBkColor

shell32

ExtractIconExA
DragQueryFileA

ole32

ReleaseStgMedium

msvcrt

_initterm
_onexit
malloc
sprintf
vsprintf
__dllonexit
atoi
strtol
strncpy
_adjust_fdiv
_strdup
__CxxFrameHandler
??2@YAPAXI@Z
free
_stricmp
_itoa
??3@YAXPAX@Z

Exports

Exports

ControlFromPoint
ConvertCoords
DLLInfo
DynamicControl
ErrorInfo
GetFont
LoadDll
MarkDialog
MoveControl
Remove
SetBorderStyle
SetColor
SetControlMDX
SetDialog
SetFont
SetMDXStyle
SetMircVersion

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Catanzaro_Script v.1/autoident/dll/POPUPS.DLL
.dll windows:4 windows x86 arch:x86

3a10814cb4c1ecb8f052f0ca2be9a655

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
LoadLibraryA
GetModuleFileNameA

user32

GrayStringA
DrawTextA
CreatePopupMenu
GetSysColorBrush
DrawFrameControl
GetMenuItemInfoA
DeleteMenu
SetMenuItemInfoA
DestroyMenu
FillRect
GetSysColor
SystemParametersInfoA
DefWindowProcA
UnregisterClassA
DestroyWindow
CreateWindowExA
ReleaseDC
RegisterClassA
LoadImageA
DestroyIcon
TrackPopupMenuEx
GetDC
InsertMenuItemA
DrawIconEx
GetMenuItemCount

gdi32

MoveToEx
StretchBlt
CreateBitmap
CreateFontIndirectA
GetStockObject
GetTextExtentPoint32A
SetBkMode
PatBlt
GetBkColor
SetTextColor
LineTo
DeleteObject
SetBkColor
BitBlt
CreateCompatibleDC
GetObjectA
CreateCompatibleBitmap
DeleteDC
CreatePen
SelectObject

shell32

ExtractIconExA

msvcrt

_stricmp
_itoa
_adjust_fdiv
malloc
_initterm
free
atoi
toupper
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z

Exports

Exports

AddItem
Destroy
GetProperty
LoadImg
New
Popup
Remove
RemoveItem
SetMetrics
SetProperty
SetStyle

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Catanzaro_Script v.1/autoident/dll/VIEWS.MDX
.dll windows:4 windows x86 arch:x86

07056cc36c129798d605c78512f748e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetLastError
GlobalFree
GlobalLock
GlobalUnlock
GetCurrentProcessId

user32

CallWindowProcA
SendMessageA
SetTimer
InvalidateRect
KillTimer
LoadStringA
MapWindowPoints
DestroyIcon
RedrawWindow
DefWindowProcA
GetWindowLongA
PostMessageA
LoadIconA
UpdateWindow
GetScrollInfo
SetScrollInfo
ScreenToClient
SetWindowLongA
SetFocus
GetClientRect
MessageBoxA
GetSysColorBrush
FillRect
GetSysColor
GetFocus
GetCursorPos

gdi32

GetBkColor
SetTextColor
CreateDIBPatternBrushPt
SelectObject
PatBlt
CreateSolidBrush
DeleteObject
SetBkMode
SetBkColor
GetTextExtentPoint32A
Ellipse
CreateRectRgnIndirect
SelectClipRgn

shell32

DragQueryFileA
ExtractIconExA

comctl32

InitCommonControlsEx
ImageList_SetOverlayImage
ImageList_Remove
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy

ole32

OleUninitialize
OleInitialize
DoDragDrop
RevokeDragDrop
RegisterDragDrop
ReleaseStgMedium

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
strncpy
atoi
free
vsprintf
__CxxFrameHandler
malloc
_adjust_fdiv
_itoa
_initterm
_stricmp
_strnicmp
_strdup
_purecall

Exports

Exports

getMDXHeader

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Catanzaro_Script v.1/autoident/icons/add.ICO
Catanzaro_Script v.1/autoident/icons/ai.ico
Catanzaro_Script v.1/autoident/icons/clear.ico
Catanzaro_Script v.1/autoident/icons/del.ICO
Catanzaro_Script v.1/autoident/icons/edit.ico
Catanzaro_Script v.1/autoident/icons/error.ico
Catanzaro_Script v.1/autoident/icons/options.ico
Catanzaro_Script v.1/autoident/settings.ini
Catanzaro_Script v.1/cambiasfondo/4.jpg
.jpg
Catanzaro_Script v.1/cambiasfondo/LEGGERE.txt
Catanzaro_Script v.1/cambiasfondo/catanzaro.jpg
.jpg
Catanzaro_Script v.1/cambiasfondo/mdx.dll
.dll windows:4 windows x86 arch:x86

34b86dab5c0b41a24220fe3732aef3a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MapViewOfFile
WaitForSingleObject
ReleaseMutex
CreateFileMappingA
UnmapViewOfFile
CloseHandle
GetProcAddress
SetLastError
GetModuleFileNameA
LoadLibraryA
GetLastError
FreeLibrary
GlobalSize
GlobalFree
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentProcessId
CreateMutexA

user32

SetWindowPos
GetWindowLongA
PostMessageA
DrawTextA
CreateWindowExA
SetWindowLongA
GetSysColorBrush
RedrawWindow
ChildWindowFromPointEx
GetParent
GetDlgCtrlID
GetWindowRect
ScreenToClient
MoveWindow
GetActiveWindow
SendMessageA
GetDlgItem
SetFocus
ShowWindow
InvalidateRgn
DestroyIcon
GetSysColor
CallWindowProcA
GetClientRect
GetClassNameA
EnumChildWindows
DestroyWindow
EnableWindow
MapWindowPoints
GetWindow
RegisterClipboardFormatA
LoadStringA

gdi32

DeleteDC
GetTextFaceA
GetTextMetricsA
SelectObject
CreateCompatibleDC
DeleteObject
GetObjectA
CreateFontIndirectA
CreateBrushIndirect
GetStockObject
GetBkColor
GetTextColor
SetTextColor
SetBkColor

shell32

ExtractIconExA
DragQueryFileA

ole32

ReleaseStgMedium

msvcrt

_initterm
_onexit
malloc
sprintf
vsprintf
__dllonexit
atoi
strtol
strncpy
_adjust_fdiv
_strdup
__CxxFrameHandler
??2@YAPAXI@Z
free
_stricmp
_itoa
??3@YAXPAX@Z

Exports

Exports

ControlFromPoint
ConvertCoords
DLLInfo
DynamicControl
ErrorInfo
GetFont
LoadDll
MarkDialog
MoveControl
Remove
SetBorderStyle
SetColor
SetControlMDX
SetDialog
SetFont
SetMDXStyle
SetMircVersion

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Catanzaro_Script v.1/cambiasfondo/sfondo.mrc
.js
Catanzaro_Script v.1/cambiasfondo/status2.jpg
.jpg
Catanzaro_Script v.1/channels/channels.txt
Catanzaro_Script v.1/comandi-master.txt
.js
Catanzaro_Script v.1/dadi.mrc
.vbs
Catanzaro_Script v.1/defaults/mirc.ini
Catanzaro_Script v.1/defaults/scripts/aliases.ini
Catanzaro_Script v.1/defaults/scripts/popups.ini
Catanzaro_Script v.1/defaults/servers.ini
Catanzaro_Script v.1/defaults/urls.ini
Catanzaro_Script v.1/filmup/Thumbs.db
Catanzaro_Script v.1/filmup/filmup.ico
Catanzaro_Script v.1/filmup/filmup.mrc
.js
Catanzaro_Script v.1/filmup/no.bmp
Catanzaro_Script v.1/games/Darts.EXE
.exe windows:4 windows x86 arch:x86

0e6f5cc5158194c2d8f0790b77d79325

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

winmm

timeGetTime
PlaySoundA

kernel32

QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleA
GetProcAddress
lstrcpyA
LCMapStringW
LCMapStringA
GetStringTypeA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStringTypeW
HeapFree
ExitProcess
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetVersion
RtlUnwind

user32

MoveWindow
GetSystemMetrics
LoadImageA
DialogBoxParamA
SetWindowLongA
DestroyWindow
SetWindowRgn
ShowWindow
ReleaseCapture
GetParent
SetCapture
LoadIconA
DefWindowProcA
UpdateWindow
RegisterClassExA
RegisterClassA
GetDC
BeginPaint
EndPaint
EnableMenuItem
IsIconic
SetForegroundWindow
GetDesktopWindow
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
LoadMenuA
GetSubMenu
CreateWindowExA
CheckMenuItem
DestroyMenu
LoadCursorA
SetCursor
TrackPopupMenu
SendMessageA
FindWindowA
GetWindowRect
InvalidateRect
SetWindowPos
GetWindowLongA
EndDialog
PostQuitMessage

gdi32

GetStockObject
CreateCompatibleBitmap
DeleteObject
GetObjectA
DeleteDC
BitBlt
CombineRgn
CreateEllipticRgn
CreateCompatibleDC
SelectObject
CreatePolygonRgn

shell32

ShellExecuteA

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 482KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Catanzaro_Script v.1/games/Kill cat.exe
.exe windows:4 windows x86 arch:x86

75c3811b239a6c75e270610d830e276d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
SetErrorMode
LoadLibraryA
GetACP
IsDBCSLeadByte
GetCPInfo
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
CreateProcessA
WaitForMultipleObjects
CreateThread
GetLastError
ExitThread
WinExec
CopyFileA
WriteFile
SetEndOfFile
DeleteFileA
GetVersionExA
CreateFileA
GetFileSize
SetFilePointer
ReadFile
CloseHandle
GetStartupInfoA
GetCommandLineA
GlobalUnlock
GlobalLock
lstrlenA
GetModuleHandleA
ExitProcess
GetProcAddress
GlobalAlloc
QueryPerformanceCounter
GlobalFree

user32

ClientToScreen
DeleteMenu
LoadMenuA
ScreenToClient
TrackPopupMenu
WindowFromPoint
GetCursorPos
FillRect
SetTimer
KillTimer
SetCapture
ReleaseCapture
SetCursor
EndPaint
BeginPaint
MessageBoxA
PostMessageA
GetDlgItem
GetWindowTextLengthA
GetDlgItemTextA
EnableWindow
GetWindowLongA
GetClientRect
CheckMenuItem
DestroyMenu
SetMenu
InvalidateRect
MoveWindow
DialogBoxParamA
EndDialog
GetSubMenu
EnableMenuItem
DefWindowProcA
DestroyWindow
PostQuitMessage
LoadStringA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetWindow
GetWindowRect
SetWindowPos
GetKeyState
GetClipboardData
GetMenu
SetWindowLongA
GetDesktopWindow
OpenClipboard
SetClipboardData
CloseClipboard
GetDC
ReleaseDC
SetFocus
SetDlgItemTextA
GetCapture

gdi32

CreatePalette
SetTextAlign
SetDIBitsToDevice
GdiFlush
StretchDIBits
DeleteObject
CreateCompatibleBitmap
DeleteDC
CreateDIBSection
GetDeviceCaps
CreateCompatibleDC
BitBlt
EnumFontFamiliesA
LineTo
MoveToEx
SetBkColor
GetBkColor
SetBkMode
GetBkMode
ExtTextOutA
GetTextExtentPoint32A
CreatePen
Rectangle
GetStockObject
CreateSolidBrush
SetTextColor
GetTextMetricsA
CreateFontIndirectA
RealizePalette
SelectPalette
GetClipBox
SaveDC
SelectObject
RestoreDC
GetSystemPaletteEntries
IntersectClipRect

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegQueryValueA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegSetValueA
RegCloseKey
RegQueryValueExA

shell32

DragAcceptFiles
DragQueryFileA

winmm

waveOutPrepareHeader
waveOutUnprepareHeader
timeKillEvent
timeEndPeriod
timeGetTime
timeBeginPeriod
timeGetDevCaps
waveOutWrite
waveOutReset
timeSetEvent
waveOutOpen
waveOutGetDevCapsA
waveOutClose

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Catanzaro_Script v.1/games/MICRO2.EXE
.exe windows:4 windows x86 arch:x86

25bbf3f3063f16888f304ad9736d1016

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc40

ord731
ord4627
ord2097
ord2909
ord4715
ord2390
ord3579
ord4165
ord4719
ord4703
ord5053
ord2617
ord2754
ord2843
ord3945
ord2744
ord2845
ord2620
ord2696
ord3345
ord3346
ord3340
ord2694
ord3580
ord4096
ord3906
ord3259
ord721
ord3431
ord965
ord706
ord760
ord3068
ord486
ord729
ord2299
ord2320
ord2199
ord570
ord4713
ord5674
ord2514
ord3724
ord4681
ord3859
ord4312
ord4450
ord4173
ord5360
ord3578
ord1539
ord3890
ord4657
ord2086
ord4608
ord5647
ord3837
ord4694
ord504
ord2197
ord5070
ord2323
ord1785
ord5649
ord3268
ord4510
ord1494
ord4677
ord2140
ord1850
ord4691
ord4101
ord3907
ord3134
ord315
ord2255
ord5363
ord1540
ord3879
ord4704
ord4142
ord3113
ord542
ord724
ord1014
ord1035
ord509
ord2008
ord3786
ord3656
ord2081
ord3630
ord3784
ord423
ord3214
ord662
ord421
ord5166
ord3263
ord725
ord5492
ord3158
ord2115
ord3185
ord510
ord5443
ord3242
ord701
ord1842
ord1426
ord3110
ord3262
ord3762
ord5124
ord279
ord3112
ord2510
ord3963
ord5648
ord3761
ord2234
ord4296
ord3922
ord3314
ord2961
ord1368

msvcrt40

exit
__p__acmdln
_XcptFilter
_initterm
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
abs
_exit
__CxxFrameHandler
_EH_prolog
_setmbcp
_mbscmp

kernel32

Sleep
GetModuleHandleA
GetStartupInfoA
GetVersion

user32

GetSystemMenu
GetClientRect
GetUpdateRect
DrawIcon
GetSystemMetrics
LoadIconA
AppendMenuA
SendMessageA
KillTimer
EnableWindow
LoadBitmapA
FillRect
GetDC
CopyRect
CheckMenuItem
IsIconic
GetMenu
SetRect
SetTimer

gdi32

SelectObject
CreatePen

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Catanzaro_Script v.1/games/colors.ico
Catanzaro_Script v.1/ircintro.chm
.chm
Catanzaro_Script v.1/license.txt
Catanzaro_Script v.1/listaimmagini.txt
Catanzaro_Script v.1/messaggi.mrc
.js
Catanzaro_Script v.1/messaggiotemp.mrc
.vbs
Catanzaro_Script v.1/mirc.chm
.chm
Catanzaro_Script v.1/mirc.exe
.exe windows:5 windows x86 arch:x86

15e4889f1ebcb2e7159808df5e891472

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIconSize
ord17
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
InitCommonControlsEx

iphlpapi

GetBestInterface

mpr

WNetCloseEnum
WNetOpenEnumW
WNetEnumResourceW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

winmm

mciSendStringW
mciGetDeviceIDW
mciGetErrorStringW
timeEndPeriod
timeSetEvent
timeKillEvent
timeBeginPeriod
timeGetDevCaps
mixerClose
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetLineInfoW
mixerOpen
PlaySoundW

ws2_32

ntohl
WSASetLastError
ntohs
getservbyport
gethostbyaddr
closesocket
getservbyname
inet_ntoa
gethostbyname
gethostname
connect
WSAGetLastError
accept
WSAAsyncSelect
inet_addr
htonl
getpeername
setsockopt
bind
socket
getsockname
listen
getsockopt
shutdown
recvfrom
sendto
send
recv
WSACleanup
WSAStartup
htons

kernel32

InterlockedIncrement
InterlockedDecrement
SetEndOfFile
SetFilePointer
CreateDirectoryW
DeleteFileW
GetVolumeInformationW
GetDriveTypeW
GetLogicalDriveStringsW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
TryEnterCriticalSection
GetLocalTime
GetCurrentThreadId
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
SetErrorMode
GetModuleFileNameW
FindCloseChangeNotification
FindNextChangeNotification
WaitForMultipleObjects
FindFirstChangeNotificationW
GetPrivateProfileStringW
RemoveDirectoryW
GetShortPathNameW
MultiByteToWideChar
ReleaseMutex
CreateMutexW
GetTimeZoneInformation
FileTimeToSystemTime
DeleteCriticalSection
WideCharToMultiByte
GetUserDefaultLangID
GlobalLock
GetTempPathW
GetSystemDirectoryA
MoveFileW
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
RaiseException
RtlUnwind
SetStdHandle
GetFileType
PeekNamedPipe
GetFileInformationByHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetFullPathNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
SetEnvironmentVariableW
SetConsoleCtrlHandler
HeapSize
FileTimeToLocalFileTime
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
CreateThread
ExitThread
HeapFree
ExitProcess
GetModuleHandleW
GlobalUnlock
GlobalAlloc
GlobalFree
GetLastError
CopyFileW
LoadLibraryA
CompareStringA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CompareStringW
GetProcessHeap
GetCurrentProcessId
WritePrivateProfileStringW
GetCommandLineW
SetEnvironmentVariableA
IsValidLocale
FindFirstFileW
FindNextFileW
FindClose
GetCurrentProcess
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
LoadLibraryExW
EnumResourceTypesW
EnumResourceNamesW
GetTickCount
QueryPerformanceFrequency
QueryPerformanceCounter
GetVersionExW
QueryDosDeviceW
GetFileAttributesW
SetFileAttributesW
MulDiv
GetSystemDefaultLangID
GetWindowsDirectoryW
GetSystemDefaultLCID
GetLocaleInfoW
CreateEventW
WaitForSingleObject
LoadLibraryW
GetProcAddress
FreeLibrary
GetCurrentThread
SetThreadPriority
SetEvent
Sleep
CloseHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
WriteFile
GetStdHandle
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringW
CreateFileW
GetCurrentDirectoryA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetDriveTypeA
LCMapStringA
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStartupInfoA
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA

user32

VkKeyScanExW
GetKeyboardLayout
CopyAcceleratorTableW
CallNextHookEx
MapVirtualKeyW
CharLowerBuffW
DrawIcon
LoadIconW
GetWindowDC
DefMDIChildProcW
GetClassLongW
IsRectEmpty
OffsetRect
IsMenu
GetMenuState
InsertMenuItemW
GetMenuItemInfoW
RemoveMenu
SetMenuItemInfoW
GetMenuItemID
TrackPopupMenu
RegisterWindowMessageW
SetWindowsHookExW
GetWindowThreadProcessId
LoadAcceleratorsW
DispatchMessageW
TranslateMessage
TranslateMDISysAccel
IsDialogMessageW
LoadMenuW
keybd_event
DefFrameProcW
PostQuitMessage
RegisterClassExW
UnhookWindowsHookEx
GetMonitorInfoW
MonitorFromWindow
MonitorFromPoint
ValidateRect
DrawTextA
IsClipboardFormatAvailable
DefWindowProcW
DrawFrameControl
RegisterClassW
wsprintfW
CopyImage
CreateIconIndirect
GetWindowRgn
SetWindowRgn
SetScrollInfo
CallWindowProcW
DdeInitializeW
DdeClientTransaction
DdeQueryStringW
DdeFreeDataHandle
DdeNameService
DdeUninitialize
DdeAccessData
DdeUnaccessData
DdeCreateDataHandle
DdeCreateStringHandleW
DdeConnect
DdeDisconnect
DdeFreeStringHandle
DialogBoxParamW
IsChild
GetScrollRange
BeginDeferWindowPos
InsertMenuW
ModifyMenuW
GetNextDlgTabItem
ChildWindowFromPointEx
GetScrollInfo
SetScrollPos
CreateMenu
SetMenu
SetScrollRange
SetCapture
ReleaseCapture
GetWindowPlacement
SetWindowPlacement
SetActiveWindow
GetMenuStringW
CreateDialogParamW
DestroyWindow
GetGUIThreadInfo
CopyRect
FindWindowExW
SetForegroundWindow
OpenClipboard
GetClipboardData
EmptyClipboard
CloseClipboard
SetClipboardData
ClientToScreen
TrackMouseEvent
ChildWindowFromPoint
WindowFromPoint
BringWindowToTop
GetFocus
GetIconInfo
WinHelpW
GetSysColorBrush
GetPropW
RemovePropW
SetPropW
GetClassNameW
SystemParametersInfoW
GetForegroundWindow
FindWindowW
IntersectRect
EqualRect
GetWindow
CreateWindowExW
DrawTextW
GetMessagePos
GetAsyncKeyState
GetWindowLongW
GetSystemMetrics
LoadStringW
MessageBeep
GetTopWindow
IsZoomed
GetActiveWindow
IsWindow
GetSystemMenu
CheckMenuItem
GetDesktopWindow
IsIconic
GetDialogBaseUnits
SetDlgItemInt
GetDlgItemInt
CreatePopupMenu
DestroyMenu
GetWindowTextW
GetMenu
GetSubMenu
DeferWindowPos
EndDeferWindowPos
CharUpperW
CharUpperBuffW
GetCapture
ShowScrollBar
RedrawWindow
FlashWindow
MessageBoxW
ScrollDC
GetMessageW
GetKeyboardState
SetKeyboardState
GetScrollPos
ClipCursor
RegisterClassExA
CreateWindowExA
DefWindowProcA
SetWindowLongA
IsWindowUnicode
GetWindowLongA
SendMessageA
ReleaseDC
PostMessageW
MapWindowPoints
GetWindowRect
GetDlgItem
GetMenuItemCount
DeleteMenu
EnableMenuItem
AppendMenuW
DrawMenuBar
FrameRect
GetParent
DrawFocusRect
GetSysColor
GetKeyState
LoadCursorW
SetCursor
PeekMessageW
MsgWaitForMultipleObjects
FillRect
DrawEdge
BeginPaint
EndPaint
DrawIconEx
DestroyIcon
LoadImageW
IsWindowVisible
SendMessageW
CheckDlgButton
SetRect
SetFocus
GetDlgCtrlID
GetCursorPos
ScreenToClient
SetWindowPos
IsDlgButtonChecked
EndDialog
SetWindowLongW
UpdateWindow
PtInRect
SetWindowTextW
EnableWindow
ShowWindow
MoveWindow
GetClientRect
SetTimer
KillTimer
IsWindowEnabled
InvalidateRect
SendDlgItemMessageW
GetDC
ToAscii

gdi32

CreateDIBSection
SetBitmapBits
GetBitmapBits
LineTo
MoveToEx
CreatePen
SelectClipRgn
CombineRgn
CreateRectRgn
GetNearestColor
PtInRegion
CreatePolygonRgn
SetBkMode
ExtFloodFill
CreatePatternBrush
Rectangle
RoundRect
Ellipse
CreateDIBitmap
SetROP2
IntersectClipRect
GetClipRgn
GetBkColor
GetTextColor
GetCurrentObject
EnumFontFamiliesExW
GetTextCharset
GetTextFaceW
RestoreDC
SaveDC
ExtTextOutA
GetCharABCWidthsA
GetCharABCWidthsW
GetTextExtentPoint32W
GetTextExtentPoint32A
GetTextExtentExPointW
GetTextExtentExPointA
GetClipBox
Polyline
ExcludeClipRect
GetObjectType
CreateBitmap
Polygon
FrameRgn
CreateRoundRectRgn
GetDIBits
CreateCompatibleBitmap
StretchBlt
SetStretchBltMode
SetBrushOrgEx
CreateCompatibleDC
BitBlt
DeleteDC
GetDeviceCaps
CreateFontW
CreateHatchBrush
GetTextMetricsW
ExtTextOutW
CreateSolidBrush
DeleteObject
GetObjectW
CreateFontIndirectW
SelectObject
SetTextColor
SetBkColor
GetPixel
GetStockObject
SetPixelV

comdlg32

ChooseFontW
CommDlgExtendedError
GetOpenFileNameW
ChooseColorW

advapi32

RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegSetValueW
RegCreateKeyW
RegQueryValueExW
RegQueryValueW

shell32

SHBrowseForFolderW
SHGetDesktopFolder
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
DragQueryFileW
FindExecutableW
SHAppBarMessage
ShellExecuteExW
ShellExecuteW
ExtractIconExW
ExtractIconW
Shell_NotifyIconW

ole32

OleInitialize
OleUninitialize
CoGetInterfaceAndReleaseStream
CLSIDFromProgID
CoCreateInstance
ProgIDFromCLSID
CoLockObjectExternal
RevokeDragDrop
ReleaseStgMedium
OleSetContainedObject
CoGetClassObject
RegisterDragDrop
CoTaskMemFree

oleaut32

VarCyFromR8
VarR8FromDate
VarR8FromCy
DispGetParam
VarDateFromR8
LoadRegTypeLi
SetErrorInfo
SysAllocString
VariantClear
VariantCopy
VariantInit
SysFreeString
VariantChangeType

crypt32

CertEnumCertificatesInStore
CertEnumCRLsInStore
CertCloseStore
CertOpenSystemStoreW

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 614KB - Virtual size: 613KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Catanzaro_Script v.1/mirc.ini
Catanzaro_Script v.1/newzeland.ini
Catanzaro_Script v.1/newzeland.mrc
.vbs
Catanzaro_Script v.1/ozbar/script1.txt
Catanzaro_Script v.1/ozbar/titlebar.txt
.vbs
Catanzaro_Script v.1/ozbar/tltbar.help.txt
Catanzaro_Script v.1/perform.ini
Catanzaro_Script v.1/readme.txt
Catanzaro_Script v.1/reflex.mrc
.js
Catanzaro_Script v.1/script.ini
Catanzaro_Script v.1/scripts/aliases.ini
Catanzaro_Script v.1/scripts/popups.ini
Catanzaro_Script v.1/scripts/users.ini
Catanzaro_Script v.1/scripts/vars.ini
Catanzaro_Script v.1/servers.ini
Catanzaro_Script v.1/slotmachine.txt
.js
Catanzaro_Script v.1/sounds/CHIUSURA.wav
Catanzaro_Script v.1/sounds/DCCCOMPLETE.mp3
Catanzaro_Script v.1/sounds/DCCsend.mp3
Catanzaro_Script v.1/sounds/attivato.wav
Catanzaro_Script v.1/sounds/conferma.wav
Catanzaro_Script v.1/sounds/deattivato.wav
Catanzaro_Script v.1/sounds/me.wav
Catanzaro_Script v.1/sounds/netsplit.wav
Catanzaro_Script v.1/sounds/nickalert.mp3
Catanzaro_Script v.1/sounds/query.wav
Catanzaro_Script v.1/sounds/scan.wav
Catanzaro_Script v.1/sounds/start.mid
Catanzaro_Script v.1/sounds/vaff.mp3
Catanzaro_Script v.1/splitdetect.mrc
Catanzaro_Script v.1/tempcolour.bmp
Catanzaro_Script v.1/ticercano.mrc
Catanzaro_Script v.1/urls.ini
Catanzaro_Script v.1/versions.txt
Catanzaro_Script v.1/xmplay/Acidian Fire - shadow.xmpskin
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 1008KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Catanzaro_Script v.1/xmplay/FILE_ID.DIZ
Catanzaro_Script v.1/xmplay/Flat.II.Indigo.xmpskin
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 924KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Catanzaro_Script v.1/xmplay/MLPlugin.ini
Catanzaro_Script v.1/xmplay/NNP-2.xmpskin
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Catanzaro_Script v.1/xmplay/Neutron.xmpskin
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Catanzaro_Script v.1/xmplay/TeKnoid Blue.xmpskin
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 129KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Catanzaro_Script v.1/xmplay/theotz song.pls
Catanzaro_Script v.1/xmplay/xmp-aac.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

XMPIN_GetInterface

Sections

Size: 135KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 275B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 909B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Catanzaro_Script v.1/xmplay/xmp-asio.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

XMPOUT_GetInterface

Sections

Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Catanzaro_Script v.1/xmplay/xmp-cd.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetTrackList
XMPIN_GetInterface

Sections

Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 987B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Catanzaro_Script v.1/xmplay/xmp-coverart.svp
.dll windows:4 windows x86 arch:x86

0de4dbf003a3affeaeed1e5ea060b7c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
CloseHandle
TerminateThread
WaitForSingleObject
MultiByteToWideChar
WideCharToMultiByte
CreateThread
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetExitCodeThread
FindClose
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
GetModuleFileNameA
GetVersionExA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
HeapAlloc
GetProcessHeap
HeapFree

user32

EnableMenuItem
SetMenuItemInfoA
MessageBoxA
FindWindowA
CheckMenuItem
CreatePopupMenu
GetCursorPos
SendMessageA
DestroyMenu
wsprintfA
ModifyMenuW
ModifyMenuA
AppendMenuA
DeleteMenu
AppendMenuW
TrackPopupMenuEx
MessageBoxW

shell32

ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcrt

fopen
_strnicmp
_strupr
_iob
getenv
fprintf
exit
atoi
malloc
free
sscanf
_ftol
_setjmp3
longjmp
memset
strncpy
wcschr
strstr
strchr
wcscmp
wcscpy
strcat
__CxxFrameHandler
strlen
strncat
wcslen
fwrite
_snwprintf
ftell
fseek
fclose
_wfopen
_itoa
wcsncat
wcscat
_snprintf
strcpy
strcmp
vsprintf
sprintf
clock
memcpy
strncmp

Exports

Exports

QueryModule

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Catanzaro_Script v.1/xmplay/xmp-wadsp.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

XMPDSP_GetInterface2

Sections

Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 377B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 913B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Catanzaro_Script v.1/xmplay/xmp-wavis.dll
.dll windows:4 windows x86 arch:x86

9c6066067d44de8fb6a4b4e8cfde5648

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
FormatMessageA
GetLastError
FreeLibrary
LoadLibraryExA
SetLastError
SetErrorMode
FindClose
FindNextFileA
FindFirstFileA
Sleep
ExitThread
GetExitCodeThread
CloseHandle
TerminateThread
WaitForSingleObject
CreateThread
GetModuleFileNameA
DisableThreadLibraryCalls
ExitProcess
LoadLibraryA
GetVersion
lstrcmpA
HeapAlloc
GetProcessHeap
HeapFree

user32

EndDialog
SendMessageA
GetDlgItem
DefWindowProcA
SetWindowPos
SendMessageTimeoutA
LoadStringA
CreateDialogParamA
EnumChildWindows
DialogBoxParamA
LoadMenuA
GetWindowTextA
SetWindowTextA
SendDlgItemMessageA
MessageBoxA
GetClassLongA
TranslateMessage
MoveWindow
ShowWindow
SendNotifyMessageA
DestroyWindow
LoadCursorA
SetCursor
SetFocus
PostMessageA
GetWindowRect
IsWindowVisible
GetClientRect

comdlg32

GetOpenFileNameA

msvcrt

time
srand
rand
strstr
strncmp
clock
wcscpy
wcscmp
_snwprintf
strncpy
strncat
__CxxFrameHandler
_stricmp
fopen
fclose
sprintf
exit
_iob
fprintf
free
_ftol
malloc
floor

Exports

Exports

XMPDSP_GetInterface2

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Catanzaro_Script v.1/xmplay/xmp-wma.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

XMPIN_GetInterface

Sections

Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 600B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 953B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Catanzaro_Script v.1/xmplay/xmplay.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 187KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Catanzaro_Script v.1/xmplay/xmplay.ini
Catanzaro_Script v.1/xmplay/xmplay.mrc
.js
Catanzaro_Script v.1/xmplay/xmplay.pls
Catanzaro_Script v.1/xmplay/xmplay.txt
Catanzaro_Script v.1/xpopup/xpopup.mrc
Catanzaro_Script v.1/xpopup/xpopup/Thumbs.db
Catanzaro_Script v.1/xpopup/xpopup/XPopup.dll
.dll windows:4 windows x86 arch:x86

cb1d66d29d8b0e66b4ddd09fceac7913

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\VCPP_Projects NET\XPopup\Release\XPopup.pdb

Imports

comctl32

ImageList_Destroy
ImageList_DrawEx
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_Create

kernel32

HeapAlloc
LCMapStringW
LCMapStringA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
IsBadCodePtr
IsBadReadPtr
GetCPInfo
GetOEMCP
GetACP
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
VirtualQuery
InterlockedExchange
LoadLibraryA
IsBadWritePtr
VirtualAlloc
WriteFile
DisableThreadLibraryCalls
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
VirtualFree
HeapCreate
MulDiv
lstrcpynA
lstrcmpA
lstrlenA
CreateFileMappingA
MapViewOfFile
GetModuleHandleA
UnmapViewOfFile
CloseHandle
lstrcpyA
HeapDestroy
GetStartupInfoA
ExitProcess
RtlUnwind
RaiseException
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapReAlloc
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapSize
HeapFree
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType

user32

SendMessageA
wsprintfA
UnregisterClassA
DestroyWindow
LoadImageA
DestroyIcon
TrackPopupMenuEx
SetRect
FillRect
DrawTextExA
InflateRect
CopyRect
GetDC
ReleaseDC
InsertMenuItemA
DeleteMenu
CreatePopupMenu
DestroyMenu
GetMenuItemInfoA
SetMenuItemInfoA
DefWindowProcA
RegisterClassA
CreateWindowExA
CallWindowProcA
PostMessageA
GetMenuItemCount
GetSubMenu
SetWindowLongA
GetMenu

gdi32

CreateCompatibleDC
GetObjectA
StretchBlt
DeleteDC
ExcludeClipRect
SetTextColor
SetBkMode
MoveToEx
LineTo
CreatePen
CreateSolidBrush
SelectObject
Rectangle
GetTextExtentPoint32A
DeleteObject

shell32

ExtractIconExA

Exports

Exports

LoadDll
UnloadDll
Version
_xpop
_xpopup
mpopup
xpop
xpopup

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Catanzaro_Script v.1/xpopup/xpopup/dcx.png
.png
Catanzaro_Script v.1/xpopup/xpopup/index.htm
.html
Catanzaro_Script v.1/xpopup/xpopup/mc.bmp
Catanzaro_Script v.1/xpopup/xpopup/source/Classes/tstring/tstring.cpp
Catanzaro_Script v.1/xpopup/xpopup/source/Classes/tstring/tstring.h
Catanzaro_Script v.1/xpopup/xpopup/source/Classes/xpopupmenu.cpp
Catanzaro_Script v.1/xpopup/xpopup/source/Classes/xpopupmenu.h
Catanzaro_Script v.1/xpopup/xpopup/source/Classes/xpopupmenuitem.cpp
Catanzaro_Script v.1/xpopup/xpopup/source/Classes/xpopupmenuitem.h
Catanzaro_Script v.1/xpopup/xpopup/source/Classes/xpopupmenumanager.cpp
Catanzaro_Script v.1/xpopup/xpopup/source/Classes/xpopupmenumanager.h
Catanzaro_Script v.1/xpopup/xpopup/source/Classes/xpopupmenuwindow.cpp
Catanzaro_Script v.1/xpopup/xpopup/source/Classes/xpopupmenuwindow.h
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/annotated.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_t_string-members.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_t_string.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu-members.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu__coll__graph.map
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu__coll__graph.md5
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu__coll__graph.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu_item-members.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu_item.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu_item__coll__graph.map
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu_item__coll__graph.md5
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu_item__coll__graph.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu_manager-members.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu_manager.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu_manager__coll__graph.map
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu_manager__coll__graph.md5
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu_manager__coll__graph.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu_window-members.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/class_x_popup_menu_window.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/classes.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/classstd_1_1vector-members.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/classstd_1_1vector.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/defines_8h-source.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/defines_8h.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/dll_8cpp.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/doxygen.css
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/doxygen.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/files.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/functions.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/functions_enum.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/functions_func.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/functions_vars.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/globals.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/globals_defs.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/globals_func.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/globals_type.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/globals_vars.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/graph_legend.dot
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/graph_legend.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/graph_legend.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/hierarchy.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/index.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__0.map
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__0.md5
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__0.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__1.map
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__1.md5
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__1.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__2.map
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__2.md5
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__2.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__3.map
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__3.md5
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__3.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__4.map
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__4.md5
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__4.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__5.map
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__5.md5
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__5.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__6.map
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__6.md5
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__6.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__7.map
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__7.md5
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__7.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__8.map
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__8.md5
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__8.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__9.map
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__9.md5
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherit__graph__9.png
.png
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/inherits.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/pages.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/struct_l_o_a_d_i_n_f_o-members.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/struct_l_o_a_d_i_n_f_o.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/struct_x_switch_flags-members.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/struct_x_switch_flags.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/structm_i_r_c_d_l_l-members.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/structm_i_r_c_d_l_l.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/structtag_x_p_m_e_n_u_c_o_l_o_r_s-members.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/structtag_x_p_m_e_n_u_c_o_l_o_r_s.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/tab_b.gif
.gif
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/tab_l.gif
.gif
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/tab_r.gif
.gif
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/tabs.css
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/tstring_8cpp.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/tstring_8h-source.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/tstring_8h.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/vector_8h-source.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/vector_8h.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopup.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopupdoc_8h-source.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopupdoc_8h.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopupmenu_8cpp.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopupmenu_8h-source.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopupmenu_8h.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopupmenuitem_8cpp.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopupmenuitem_8h-source.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopupmenuitem_8h.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopupmenumanager_8cpp.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopupmenumanager_8h-source.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopupmenumanager_8h.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopupmenuwindow_8cpp.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopupmenuwindow_8h-source.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/html/xpopupmenuwindow_8h.html
.html
Catanzaro_Script v.1/xpopup/xpopup/source/Docs/xpopup.dox
Catanzaro_Script v.1/xpopup/xpopup/source/XPopup.sln
Catanzaro_Script v.1/xpopup/xpopup/source/XPopup.vcproj
.xml
Catanzaro_Script v.1/xpopup/xpopup/source/defines.h
Catanzaro_Script v.1/xpopup/xpopup/source/dll.cpp
Catanzaro_Script v.1/xpopup/xpopup/source/dll.def
Catanzaro_Script v.1/xpopup/xpopup/source/vector.h
Catanzaro_Script v.1/xpopup/xpopup/source/xpopupdoc.h
Catanzaro_Script v.1/xpopup/xpopup/xpopup.png
.png
Catanzaro_Script v.1/xpopup/xpopup/xpopup2.png
.png
Catanzaro_Script v.1/xpopup/xpopup/xpopup3.png
.png
Catanzaro_Script v.1/zlagbar/lagbkg.bmp
Catanzaro_Script v.1/zlagbar/tbwin.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Attach
Detach
GetMouse
GetTBInfo
LoadDll
OnMouse
OnSize
Select
UnloadDll

Sections

CODE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 213B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Catanzaro_Script v.1/zlagbar/zlagbar-readme.txt
Catanzaro_Script v.1/zlagbar/zlagbar.mrc

Sharing

General

Malware Config

Signatures

Files

a6db2bcb0d672c0fa8aba87f42c7ea20

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 456B

.reloc Size: 512B - Virtual size: 500B

34b86dab5c0b41a24220fe3732aef3a1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

msvcrt

Exports

Exports

Sections

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

3a10814cb4c1ecb8f052f0ca2be9a655

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

msvcrt

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 3KB

.reloc Size: 1KB - Virtual size: 1KB

07056cc36c129798d605c78512f748e3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comctl32

ole32

msvcrt

Exports

Exports

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 8KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 2KB

34b86dab5c0b41a24220fe3732aef3a1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 456B

.reloc
Size: 512B - Virtual size: 500B

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 3KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 8KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 484KB - Virtual size: 482KB

.text
Size: 204KB - Virtual size: 203KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 4KB - Virtual size: 10KB

.data1
Size: 4KB - Virtual size: 176B

.rsrc
Size: 32KB - Virtual size: 30KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 412B

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 11KB - Virtual size: 11KB

.reloc
Size: 2KB - Virtual size: 2KB