02051648389fa5abe00a3e6761669db3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

02051648389fa5abe00a3e6761669db3_JaffaCakes118
Size

1.5MB
MD5

02051648389fa5abe00a3e6761669db3
SHA1

1fafae3ad20ee47bea545da63769a0d7279a9395
SHA256

aec7c27c03b95f5733f64cf4f4f3427846c0e8c67644831d08105f3ce0922ba8
SHA512

3d4b5fccf281de9188801440473e5df0882dbcb6927e5cf3b7ff989205f4d52b62841603e0f342a8fa6da2db1dbcb8718b867cd1ca7f156dfca2caf0003dd869
SSDEEP

49152:Yoxj38BH1dztLJ3ZlJsSBUnasdMD6QB7iIETk+o:Y2zo1dztLJJ/sfjdMF7iIQk+o

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/AudioPlugins/lame.dll	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/AudioPlugins/lame.dll	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/out.upx

Files

02051648389fa5abe00a3e6761669db3_JaffaCakes118
.zip
AudioPlugins/lame.dll
.dll windows:4 windows x86 arch:x86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3c:df:fb:8b:3a:a1:2c:53:36:ac:2a:b3:f5:40:7f:aa
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

21/04/2009, 00:00

Not After

21/04/2011, 23:59

Subject

CN=Guangzhou KuGou Computer Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Guangzhou KuGou Computer Technology Co.\, Ltd.,L=Guangzhou,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:ef:49:b2:45:dc:26:d5:e5:d5:11:ae:a7:ce:af:b2:af:b7:41:74
Signer

Actual PE Digest

7b:ef:49:b2:45:dc:26:d5:e5:d5:11:ae:a7:ce:af:b2:af:b7:41:74

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

get_lame_short_version
get_lame_url
get_lame_version
get_lame_version_numerical
get_lame_very_short_version
get_psy_version
lame_bitrate_hist
lame_bitrate_kbps
lame_bitrate_stereo_mode_hist
lame_close
lame_decode
lame_decode1
lame_decode1_headers
lame_decode1_headersB
lame_decode_exit
lame_decode_headers
lame_decode_init
lame_encode
lame_encode_buffer
lame_encode_buffer_float
lame_encode_buffer_int
lame_encode_buffer_interleaved
lame_encode_buffer_long
lame_encode_buffer_long2
lame_encode_buffer_sample_t
lame_encode_finish
lame_encode_flush
lame_encode_flush_nogap
lame_encode_frame
lame_encode_mp3_frame
lame_get_ATHlower
lame_get_ATHonly
lame_get_ATHshort
lame_get_ATHtype
lame_get_VBR
lame_get_VBR_hard_min
lame_get_VBR_max_bitrate_kbps
lame_get_VBR_mean_bitrate_kbps
lame_get_VBR_min_bitrate_kbps
lame_get_VBR_q
lame_get_allow_diff_short
lame_get_analysis
lame_get_athaa_loudapprox
lame_get_athaa_sensitivity
lame_get_athaa_type
lame_get_bWriteVbrTag
lame_get_brate
lame_get_compression_ratio
lame_get_copyright
lame_get_cwlimit
lame_get_decode_only
lame_get_disable_reservoir
lame_get_emphasis
lame_get_encoder_delay
lame_get_encoder_padding
lame_get_error_protection
lame_get_exp_nspsytune
lame_get_experimentalX
lame_get_experimentalY
lame_get_experimentalZ
lame_get_extension
lame_get_force_ms
lame_get_force_short_blocks
lame_get_frameNum
lame_get_framesize
lame_get_free_format
lame_get_highpassfreq
lame_get_highpasswidth
lame_get_in_samplerate
lame_get_interChRatio
lame_get_lowpassfreq
lame_get_lowpasswidth
lame_get_mf_samples_to_encode
lame_get_mode
lame_get_mode_automs
lame_get_noATH
lame_get_no_short_blocks
lame_get_num_channels
lame_get_num_samples
lame_get_ogg
lame_get_original
lame_get_out_samplerate
lame_get_padding_type
lame_get_quality
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_get_size_mp3buffer
lame_get_strict_ISO
lame_get_totalframes
lame_get_useTemporal
lame_get_version
lame_init
lame_init_bitstream
lame_init_old
lame_init_params
lame_mp3_tags_fid
lame_print_config
lame_print_internals
lame_set_ATHlower
lame_set_ATHonly
lame_set_ATHshort
lame_set_ATHtype
lame_set_VBR
lame_set_VBR_hard_min
lame_set_VBR_max_bitrate_kbps
lame_set_VBR_mean_bitrate_kbps
lame_set_VBR_min_bitrate_kbps
lame_set_VBR_q
lame_set_allow_diff_short
lame_set_analysis
lame_set_asm_optimizations
lame_set_athaa_loudapprox
lame_set_athaa_sensitivity
lame_set_athaa_type
lame_set_bWriteVbrTag
lame_set_brate
lame_set_compression_ratio
lame_set_copyright
lame_set_cwlimit
lame_set_debugf
lame_set_decode_only
lame_set_disable_reservoir
lame_set_emphasis
lame_set_error_protection
lame_set_errorf
lame_set_exp_nspsytune
lame_set_exp_nspsytune2_int
lame_set_exp_nspsytune2_pointer
lame_set_exp_nspsytune2_real
lame_set_experimentalX
lame_set_experimentalY
lame_set_experimentalZ
lame_set_extension
lame_set_force_ms
lame_set_force_short_blocks
lame_set_free_format
lame_set_highpassfreq
lame_set_highpasswidth
lame_set_in_samplerate
lame_set_interChRatio
lame_set_lowpassfreq
lame_set_lowpasswidth
lame_set_mode
lame_set_mode_automs
lame_set_msfix
lame_set_msgf
lame_set_noATH
lame_set_no_short_blocks
lame_set_num_channels
lame_set_num_samples
lame_set_ogg
lame_set_original
lame_set_out_samplerate
lame_set_padding_type
lame_set_preset
lame_set_preset_expopts
lame_set_preset_notune
lame_set_quality
lame_set_scale
lame_set_scale_left
lame_set_scale_right
lame_set_strict_ISO
lame_set_tune
lame_set_useTemporal
lame_stereo_mode_hist

Sections

UPX0
Size: - Virtual size: 340KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 174KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KGPlayer.dll
.dll windows:5 windows x86 arch:x86

df4c7698d8cb67d2d54f24379e46e6d3

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3c:df:fb:8b:3a:a1:2c:53:36:ac:2a:b3:f5:40:7f:aa
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

21/04/2009, 00:00

Not After

21/04/2011, 23:59

Subject

CN=Guangzhou KuGou Computer Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Guangzhou KuGou Computer Technology Co.\, Ltd.,L=Guangzhou,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e7:fc:66:a4:ce:20:d2:32:c8:75:b3:55:04:f0:1e:28:24:5b:b6:6e
Signer

Actual PE Digest

e7:fc:66:a4:ce:20:d2:32:c8:75:b3:55:04:f0:1e:28:24:5b:b6:6e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\AutoBuild\KuGoo6\Bin\KGPlayer.pdb

Imports

winmm

waveOutWrite
waveOutPause
waveOutClose
waveOutGetPosition
waveOutRestart
waveOutReset
waveOutSetVolume
waveOutUnprepareHeader
waveOutOpen
waveOutPrepareHeader
waveOutGetDevCapsW
waveOutGetNumDevs
waveInClose
mixerSetControlDetails
mixerGetNumDevs
mixerGetLineInfoW
waveInPrepareHeader
mixerClose
waveInOpen
waveInAddBuffer
waveInReset
waveInUnprepareHeader
mixerGetID
waveInStop
waveInStart
mixerOpen
mixerGetLineControlsW
timeKillEvent
timeBeginPeriod
timeEndPeriod
waveOutGetVolume
timeSetEvent

dsound

ord3
ord1

user32

DispatchMessageW
MsgWaitForMultipleObjects
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
GetWindowThreadProcessId
GetDesktopWindow
SetTimer
PostMessageW
KillTimer
WaitMessage
PeekMessageW
PostThreadMessageW
GetQueueStatus
RegisterWindowMessageW

ole32

CoCreateInstance
CoTaskMemAlloc
CoFreeUnusedLibraries
CoTaskMemFree
CoInitialize
CoUninitialize

setupapi

SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceInterfaceAlias
SetupDiGetClassDevsW

advapi32

RegCloseKey
RegQueryValueExW

kernel32

WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LCMapStringA
GetLocaleInfoW
GetModuleHandleA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
CreateFileA
LCMapStringW
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
HeapDestroy
HeapCreate
RtlUnwind
GetCommandLineA
ExitProcess
GetCurrentProcessId
SetErrorMode
FreeLibrary
LoadLibraryW
GetProcAddress
GetFileSize
OutputDebugStringW
GetFileAttributesW
GetModuleFileNameW
CreateFileW
CloseHandle
WaitForSingleObject
SetEvent
InitializeCriticalSection
Sleep
LeaveCriticalSection
EnterCriticalSection
CreateEventW
DeleteCriticalSection
OutputDebugStringA
TryEnterCriticalSection
GetTickCount
GetLastError
GetFullPathNameW
FindFirstFileW
lstrlenW
SetLastError
FindClose
FindNextFileW
SleepEx
MulDiv
SetFilePointer
WriteFile
ReadFile
InterlockedIncrement
InterlockedDecrement
Thread32First
Thread32Next
SetThreadPriority
GetExitCodeThread
GetThreadPriority
CreateToolhelp32Snapshot
GetCurrentThreadId
ResumeThread
LocalAlloc
LocalFree
ResetEvent
WaitForMultipleObjects
lstrcmpW
lstrcpynW
GetCurrentProcess
VirtualAlloc
VirtualFree
CreateThread
GetModuleHandleW
GetCurrentThread
DeviceIoControl
HeapFree
HeapAlloc
HeapReAlloc
MultiByteToWideChar
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread

Sections

.text
Size: 611KB - Virtual size: 611KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MakeRing.exe
.exe windows:4 windows x86 arch:x86

0e472bd1a80dfc6f6208c9cdfdef87e4

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3c:df:fb:8b:3a:a1:2c:53:36:ac:2a:b3:f5:40:7f:aa
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

21/04/2009, 00:00

Not After

21/04/2011, 23:59

Subject

CN=Guangzhou KuGou Computer Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Guangzhou KuGou Computer Technology Co.\, Ltd.,L=Guangzhou,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

c8:66:a9:22:af:f0:96:18:db:96:49:3a:e9:cb:5c:60:5a:df:1a:3e
Signer

Actual PE Digest

c8:66:a9:22:af:f0:96:18:db:96:49:3a:e9:cb:5c:60:5a:df:1a:3e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
GetActiveObject
VariantInit
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegFlushKey
RegEnumKeyExA
RegCloseKey

user32

GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
CreateWindowExW
CreateWindowExA
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCaret
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetClassLongA
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
NotifyWinEvent
MsgWaitForMultipleObjects
MoveWindow
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyA
LoadStringA
LoadKeyboardLayoutA
LoadImageA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessageTime
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassLongA
GetClassInfoA
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextA
DrawStateA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DragDetect
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DeferWindowPos
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CharNextW
CallWindowProcA
CallNextHookEx
BeginPaint
BeginDeferWindowPos
CharNextA
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringA
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
lstrcpynW
lstrcpyW
lstrcpyA
lstrcmpA
WriteFile
WinExec
WaitForSingleObject
VirtualQuery
VirtualAlloc
UnmapViewOfFile
Sleep
SizeofResource
SetThreadLocale
SetLastError
SetFilePointer
SetFileAttributesA
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringA
OpenFileMappingA
MultiByteToWideChar
MulDiv
MapViewOfFile
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalSize
GlobalLock
GlobalFree
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVolumeInformationA
GetVersionExA
GetVersion
GetUserDefaultLCID
GetTimeZoneInformation
GetTickCount
GetThreadPriority
GetThreadLocale
GetTempPathA
GetStdHandle
GetProcAddress
GetPrivateProfileStringA
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLogicalDrives
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileSize
GetFileAttributesW
GetFileAttributesA
GetExitCodeThread
GetDriveTypeA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetComputerNameA
GetCommandLineW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
FreeLibrary
FormatMessageA
FindResourceW
FindResourceA
FindNextFileW
FindFirstFileW
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitProcess
EnumSystemCodePagesA
EnumCalendarInfoA
EnterCriticalSection
DeleteFileA
DeleteCriticalSection
CreateThread
CreateFileMappingW
CreateFileMappingA
CreateFileW
CreateFileA
CreateEventA
CreateDirectoryA
CopyFileA
CompareStringW
CompareStringA
CloseHandle
Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PlayEnhMetaFile
PatBlt
OffsetRgn
MoveToEx
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectA
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionA
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
ExtTextOutA
ExcludeClipRect
EqualRgn
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateFontIndirectA
CreateEnhMetaFileA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
CombineRgn
CloseEnhMetaFile
BitBlt

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal
IsAccelerator
ReleaseStgMedium
OleDraw
OleSetMenuDescriptor
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoGetClassObject
CoUninitialize
CoInitialize
IsEqualGUID

comctl32

_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls

shell32

ShellExecuteA
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetSpecialFolderLocation
SHGetPathFromIDListA

comdlg32

GetSaveFileNameW
GetOpenFileNameW

gdiplus

GdipSetStringFormatMeasurableCharacterRanges
GdipGetStringFormatHotkeyPrefix
GdipSetStringFormatHotkeyPrefix
GdipSetStringFormatTrimming
GdipGetStringFormatLineAlign
GdipSetStringFormatLineAlign
GdipGetStringFormatAlign
GdipSetStringFormatAlign
GdipGetStringFormatFlags
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCreateStringFormat
GdipMeasureCharacterRanges
GdipDrawString
GdipDeleteFont
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipRestoreGraphics
GdipSaveGraphics
GdipIsVisibleRectI
GdipIsVisibleClipEmpty
GdipGetClip
GdipResetClip
GdipSetClipPath
GdipSetClipRectI
GdipDrawImagePointsRectI
GdipDrawImagePointsRect
GdipDrawImageRectRectI
GdipDrawImagePointRectI
GdipFillRectangleI
GdipDrawRectangleI
GdipDrawLineI
GdipGetWorldTransform
GdipTranslateWorldTransform
GdipGetRenderingOrigin
GdipReleaseDC
GdipGetDC
GdipDeleteGraphics
GdipCreateFromHWNDICM
GdipCreateFromHWND
GdipCreateFromHDC
GdipSetImageAttributesColorKeys
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipBitmapSetPixel
GdipBitmapGetPixel
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipSetPenDashStyle
GdipSetPenMode
GdipSetPenDashCap197819
GdipDeletePen
GdipCreatePen1
GdipSetLineWrapMode
GdipSetLinePresetBlend
GdipCreateLineBrushFromRectI
GdipSetSolidFillColor
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipGetRegionHRgn
GdipGetRegionBounds
GdipDeleteRegion
GdipCreateRegion
GdipGetMatrixElements
GdipDeleteMatrix
GdipCreateMatrix
GdipAddPathRectangleI
GdipDeletePath
GdipCreatePath
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc

oleacc

LresultFromObject

winmm

sndPlaySoundA

shlwapi

ColorAdjustLuma

wsock32

WSACleanup
WSAStartup
gethostname
gethostbyname
ntohl
htonl

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 27KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 128B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Skins/Blue.zip
.zip
AlbumLarge.png
.png
AlbumSmall.png
.png
BestSearchBack.png
.png
BtnIndexPlay.png
.png
BtnkcmbSource.png
.png
Button.png
.png
Button1.png
.png
CMenuImage.PNG
.png
CheckBox.png
.png
ColDownDel.png
.png
ColDownStop.png
.png
ColorButton.png
.png
ColorRing.png
.png
CommentLarge.png
.png
CommentSmall.png
.png
Dialog.png
.png
DownFailed.png
.png
DownItemFailed.png
.png
DownItemWait.png
.png
DownProgressBack.png
.png
DownProgressFore.png
.png
DowningBackImage.png
.png
DowningForeImage.png
.png
EQEnabled.png
.png
EQForm.png
.png
EQPreset.png
.png
EQReset.png
.png
EQtbProgress.png
.png
EQtbVolThumb.png
.png
EqualityHigh.png
.png
EqualityHighest.png
.png
EqualityLow.png
.png
EqualityMid.png
.png
Error.png
.png
ExpandCollapse.png
.png
FillImage.png
.png
FilterBack.png
.png
FingerPrintPanel.png
.png
FrameTipImage.png
.png
HeadSort.png
.png
ImgUploadHead.png
.png
ItemFemale.png
.png
ItemMale.png
.png
ItemUser.png
.png
KtreeBK.png
.png
KuiSplitter.png
.png
KuiSplitterback.png
.png
ListHot.png
.png
ListNew.png
.png
ListNormal.png
.png
LrcFrameBack.png
.png
LyricLarge.png
.png
LyricSmall.png
.png
MP3PIC.png
.png
MainDialog.png
.png
MainRing.png
.png
MenuBBS.png
.png
MenuBK.png
.png
MenuExit.png
.png
MenuGame.png
.png
MenuHomeSite.png
.png
MenuLogin.png
.png
MenuReport.png
.png
MenuRing.png
.png
MenuUpdate.png
.png
Minimode.png
.png
MusicBill.png
.png
MusicClassfied.png
.png
MusicSinger.png
.png
OptionsSelect.png
.png
PlBottomBack.png
.png
PlayList.png
.png
PlayerTab.png
.png
PlayingBack.png
.png
Preview.jpg
.png
ProgressNor.png
.png
ProgressRed.png
.png
PromptMp3.png
.png
RadioBox.png
.png
RecommentLarge.png
.png
RecommentSmall.png
.png
RenameLarge.png
.png
RenameSmall.png
.png
RingLarge.png
.png
RingSaveRing.png
.png
RingSmall.png
.png
RingTabBK.png
.png
RingbtnHelp.png
.png
RingbtnListen.png
.png
RingbtnOpen.png
.png
RingbtnPlay.png
.png
RingbtnSearch.png
.png
STBBack.png
.png
STBSection.png
.png
ScoreEmpty.png
.png
ScoreFull.png
.png
ScrollBarBack.png
.png
ScrollBarBtn.png
.png
ScrollBarThumb.png
.png
SearchColDown.png
.png
SearchColListen.png
.png
SearchFrameback.png
.png
SearchHeadCol.png
.png
SearchHotBack.png
.png
SearchHotFore.png
.png
SearchItemDown.png
.png
SearchItemDowning.png
.png
SearchItemExist.png
.png
SearchItemListen.png
.png
SearchItemNew.png
.png
SearchItemPause.png
.png
SearchItemShopcart.png
.png
SearchTab.png
.png
SearchTab1.png
.png
SearchTabBtn.png
.png
SearchTabScroll.png
.png
SearchTop.png
.png
ShareDir.png
.png
SkinColor.png
.png
SkinResDef.xml
SkinTab.png
.png
SongDevice.png
.png
SongInfoLarge.png
.png
SongInfoSmall.png
.png
SongSynDialog.png
.png
SpinEditBtn.png
.png
SplitterBackImage.png
.png
Splitterback.png
.png
StartCopyBtn.png
.png
StopCopyBtn.png
.png
SuiteCommunity.png
.png
SuiteTab.png
.png
SuiteTabBk.png
.png
TabBK.png
.png
ThumbDown.png
.png
ThumbTop.png
.png
TpControlPanelBK.png
.png
being.png
.png
btSearchHistory.png
.png
btnAdd.png
.png
btnAddSong.png
.png
btnAppIcon.png
.png
btnChangeAnother.png
.png
btnClearDownloaded.png
.png
btnClose.png
.png
btnCutEnd.png
.png
btnCutStart.png
.png
btnDelete.png
.png
btnDeleteDowning.png
.png
btnExit.png
.png
btnFavorite.png
.png
btnFilterClose.png
.png
btnFind.png
.png
btnKRCNext.png
.png
btnKRCPlay.png
.png
btnKRCPrev.png
.png
btnKRCStop.png
.png
btnKalaFormWidthIn.png
.png
btnKalaFormWidthOut.png
.png
btnLrcClose.png
.png
btnLrcColor.png
.png
btnLrcFont.png
.png
btnLrcLock.png
.png
btnLrcNext.png
.png
btnLrcOption.png
.png
btnLrcPause.png
.png
btnLrcPrev.png
.png
btnLrcSearch.png
.png
btnLrcTopMost.png
.png
btnLrcZoomIn.png
.png
btnLrcZoomOut.png
.png
btnLyric.png
.png
btnMainMenu.png
.png
btnMakeLrc.png
.png
btnMatch.png
.png
btnMiniClose.png
.png
btnMiniLRC.png
.png
btnMiniMinimize.png
.png
btnMinimize.png
.png
btnMinimize1.png
.png
btnMinimode.png
.png
btnModeMenu.png
.png
btnMute.png
.png
btnNext.png
.png
btnPageNavigator.png
.png
btnPlayPause.png
.png
btnPrev.png
.png
btnRemoveDownloaded.png
.png
btnReturn.png
.png
btnSearch.png
.png
btnSearchDropdown.png
.png
btnSelectAllDowning.png
.png
btnSendToPhone.png
.png
btnSkin.png
.png
btnSpecLrc.png
.png
btnStartDowning.png
.png
btnStop.png
.png
btnStopDowning.png
.png
btnSuite.png
.png
btnTestSpeed.png
.png
btnTool.png
.png
btnViewList.png
.png
btnWebHome.png
.png
btnWebNext.png
.png
btnWebPrev.png
.png
btnWebRefresh.png
.png
btnfullscreen.png
.png
btnkaraoke.png
.png
btnlist.png
.png
btnlyric1.png
.png
btnpicture.png
.png
btnsetting.png
.png
dlgFinger.png
.png
equalizer.png
.png
fmFloatPanel.png
.png
fmPlayer.png
.png
fmPlayerToolBk.png
.png
frmFileNameTips.png
.png
imgDownLarge.png
.png
imgDownSmall.png
.png
imgListenLarge.png
.png
imgListenSmall.png
.png
imgSuiteGame.png
.png
imgSuiteLrc.png
.png
imgSuiteMusic.png
.png
imgSuiteSearch.png
.png
imgSuiteWeb.png
.png
kbtnSearch.png
.png
kbtnSubmit.png
.png
kpnlImage.png
.png
kpnlState.png
.png
led.png
.png
led1.png
.png
logo.png
.png
miniform.png
.png
plBottomBK.png
.png
pnlDownloadTop.png
.png
pnlback1.png
.png
pnlback2.png
.png
tbHue.png
.png
tbLum.png
.png
tbMusicBack.png
.png
tbMusicTab.png
.png
tbProgress.png
.png
tbProgressThumb.png
.png
tbSat.png
.png
tbVolThumb.png
.png
tbVolThumb1.png
.png
tbVolume.png
.png
tpAddedSong.png
.png
tpMakeRing.png
.png
tpNotAddedSong.png
.png
tpRingSaveConfig.png
.png

Sharing

General

Malware Config

Signatures

Files

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

3c:df:fb:8b:3a:a1:2c:53:36:ac:2a:b3:f5:40:7f:aaCertificate

Extended Key Usages

Key Usages

7b:ef:49:b2:45:dc:26:d5:e5:d5:11:ae:a7:ce:af:b2:af:b7:41:74Signer

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 340KB

UPX1 Size: 104KB - Virtual size: 104KB

UPX2 Size: 5KB - Virtual size: 8KB

Headers

File Characteristics

Sections

.text Size: 192KB - Virtual size: 191KB

.data Size: 4KB - Virtual size: 4KB

.rdata Size: 36KB - Virtual size: 36KB

.bss Size: - Virtual size: 174KB

.edata Size: 5KB - Virtual size: 5KB

.idata Size: 1024B - Virtual size: 780B

.reloc Size: 5KB - Virtual size: 4KB

df4c7698d8cb67d2d54f24379e46e6d3

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

3c:df:fb:8b:3a:a1:2c:53:36:ac:2a:b3:f5:40:7f:aaCertificate

Extended Key Usages

Key Usages

e7:fc:66:a4:ce:20:d2:32:c8:75:b3:55:04:f0:1e:28:24:5b:b6:6eSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winmm

dsound

user32

ole32

setupapi

advapi32

kernel32

Sections

.text Size: 611KB - Virtual size: 611KB

.rdata Size: 226KB - Virtual size: 226KB

.data Size: 56KB - Virtual size: 135KB

.rodata Size: 512B - Virtual size: 240B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 33KB - Virtual size: 33KB

0e472bd1a80dfc6f6208c9cdfdef87e4

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

3c:df:fb:8b:3a:a1:2c:53:36:ac:2a:b3:f5:40:7f:aa
Certificate

7b:ef:49:b2:45:dc:26:d5:e5:d5:11:ae:a7:ce:af:b2:af:b7:41:74
Signer

UPX0
Size: - Virtual size: 340KB

UPX1
Size: 104KB - Virtual size: 104KB

UPX2
Size: 5KB - Virtual size: 8KB

.text
Size: 192KB - Virtual size: 191KB

.data
Size: 4KB - Virtual size: 4KB

.rdata
Size: 36KB - Virtual size: 36KB

.bss
Size: - Virtual size: 174KB

.edata
Size: 5KB - Virtual size: 5KB

.idata
Size: 1024B - Virtual size: 780B

.reloc
Size: 5KB - Virtual size: 4KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

3c:df:fb:8b:3a:a1:2c:53:36:ac:2a:b3:f5:40:7f:aa
Certificate

e7:fc:66:a4:ce:20:d2:32:c8:75:b3:55:04:f0:1e:28:24:5b:b6:6e
Signer

.text
Size: 611KB - Virtual size: 611KB

.rdata
Size: 226KB - Virtual size: 226KB

.data
Size: 56KB - Virtual size: 135KB

.rodata
Size: 512B - Virtual size: 240B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 33KB - Virtual size: 33KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

3c:df:fb:8b:3a:a1:2c:53:36:ac:2a:b3:f5:40:7f:aa
Certificate

c8:66:a9:22:af:f0:96:18:db:96:49:3a:e9:cb:5c:60:5a:df:1a:3e
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.itext
Size: 4KB - Virtual size: 4KB

.data
Size: 22KB - Virtual size: 21KB

.bss
Size: - Virtual size: 27KB

.idata
Size: 16KB - Virtual size: 16KB

.tls
Size: - Virtual size: 128B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 78KB - Virtual size: 78KB

.rsrc
Size: 57KB - Virtual size: 57KB