11339ac087d4853a4629e8e2fc864a7e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

11339ac087d4853a4629e8e2fc864a7e_JaffaCakes118
Size

5.6MB
MD5

11339ac087d4853a4629e8e2fc864a7e
SHA1

d2bbd1b469e37368484e26f353b1ae4b25d4f5c3
SHA256

b8c975fdd57d03f3f7ec9e851f76b063d0065fc3f31d73043ca23992cc0fbdb9
SHA512

3dffcf989b76f1d45f45a94ae8e92a5d52e2060d29a4a6767abcd722d82aba826d34c4074760a68c5d96f0783e0673c8260dbb5f24964e32d29d1f211d1b5878
SSDEEP

98304:SvTa/Op6ZVuc8WoFp/pdhhV5puHvvJ3kHE+hLTRmyFKxttsR7mQgzc:T2e8Tj/pdhYx3kHnhPgd8mQn

Score

3^/10

Malware Config

Signatures

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
11339ac087d4853a4629e8e2fc864a7e_JaffaCakes118
unpack001/$PLUGINSDIR/FindProcDLL.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/KTXNews.exe
unpack001/KTXNewsStartup.exe
unpack001/LiveUpdate.exe
unpack001/ktxexist.ocx
unpack001/msxml3.dll
unpack001/msxml3r.dll
unpack001/pdf.dll
unpack001/uninst.exe
unpack002/$PLUGINSDIR/FindProcDLL.dll

NSIS installer 4 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/uninst.exe	nsis_installer_1
static1/unpack001/uninst.exe	nsis_installer_2

Files

11339ac087d4853a4629e8e2fc864a7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c042238f43557c055fca8642de8a074

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
MulDiv
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
RegisterClassA
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
EmptyClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetForegroundWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 280KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/FindProcDLL.dll
.dll windows:4 windows x86 arch:x86

8df26927f8978d4eb40ff179c0aa961b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
lstrcmpA
OpenProcess
lstrcpyA
LoadLibraryA
CloseHandle
FreeLibrary
GetVersionExA
lstrlenA
GlobalFree

user32

wsprintfA

Exports

Exports

FindProc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
MessageBoxA
CallWindowProcA
PostMessageA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/ktxpage.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
CJK_CONFIG
KTXNews.exe
.exe windows:4 windows x86 arch:x86

bb3237204c454f209290448584ba10b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Working\KTXNews\bin\common\KTXNews.pdb

Imports

kernel32

EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
GetPrivateProfileIntW
WritePrivateProfileStringW
GetDiskFreeSpaceW
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
SetErrorMode
GetStartupInfoW
RtlUnwind
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapReAlloc
SetStdHandle
ExitProcess
HeapSize
VirtualProtect
GetSystemInfo
VirtualQuery
GetLocaleInfoW
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
GetCurrentDirectoryA
GetDriveTypeA
SetEnvironmentVariableA
CompareStringA
InterlockedExchange
GlobalGetAtomNameW
GetFileTime
GetFileAttributesW
LocalFileTimeToFileTime
GetFullPathNameW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
GetStringTypeExW
MoveFileW
SuspendThread
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetVersionExA
GetModuleHandleA
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpA
OpenFileMappingW
CreateFileMappingW
MapViewOfFile
CreateSemaphoreW
LoadLibraryA
Sleep
GetPrivateProfileStringW
VirtualFree
VirtualAlloc
GetExitCodeThread
LocalAlloc
CreateThread
SetThreadPriority
TerminateThread
SetFileTime
DosDateTimeToFileTime
SystemTimeToFileTime
GetCurrentProcess
DuplicateHandle
GetFileType
SetFilePointer
GetStdHandle
AllocConsole
SetConsoleTitleW
SetConsoleCP
WriteConsoleW
FormatMessageW
LocalFree
GetSystemDirectoryW
FreeLibrary
CreateDirectoryW
GetCurrentDirectoryW
GetProcessHeap
HeapAlloc
SetCurrentDirectoryW
FindFirstFileW
FindNextFileW
FindClose
HeapFree
GetTempPathW
GetTempFileNameW
GetModuleFileNameW
GetLogicalDriveStringsW
GetDriveTypeW
GetVolumeInformationW
SetFileAttributesW
RemoveDirectoryW
CreateFileW
GetFileSize
ReadFile
WriteFile
GetShortPathNameW
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
TerminateProcess
Process32NextW
GetDiskFreeSpaceExW
WinExec
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
QueryPerformanceFrequency
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
CreateFileA
GetModuleFileNameA
DeviceIoControl
WideCharToMultiByte
DeleteFileW
MulDiv
CreateEventW
ResumeThread
SetEvent
WaitForSingleObject
CloseHandle
ResetEvent
GlobalUnlock
GlobalAlloc
GlobalLock
GlobalFree
GetLastError
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
FreeResource
GetCPInfo
lstrlenA
lstrlenW
lstrcmpiW
MultiByteToWideChar
GetVersion
GetVersionExW
CopyFileW
FindResourceW
LoadResource
LockResource
FreeEnvironmentStringsA
SizeofResource

user32

GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
CharUpperW
GetWindowThreadProcessId
GetMessageW
TranslateMessage
ValidateRect
DestroyMenu
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
UnhookWindowsHookEx
GetMessageTime
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
BeginPaint
GetWindowDC
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
IsWindowEnabled
EndDialog
GetMenuStringW
FindWindowExW
RemovePropW
SetPropW
IsClipboardFormatAvailable
GetClipboardData
UnregisterHotKey
RegisterWindowMessageW
GetWindow
GetPropW
IsIconic
RegisterHotKey
GetLastActivePopup
GetMessagePos
SetMenu
ShowWindow
GetFocus
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetForegroundWindow
BringWindowToTop
SetParent
SetWindowLongW
GetAsyncKeyState
EnableMenuItem
CheckMenuItem
IsWindowVisible
FindWindowW
LoadMenuW
MessageBoxW
ScreenToClient
GetCursorPos
EqualRect
PtInRect
OffsetRect
UnregisterClassA
PostMessageW
SetWindowRgn
GetWindowRect
IsWindow
KillTimer
SetTimer
RedrawWindow
LoadIconW
UpdateWindow
ReleaseCapture
GetTopWindow
ChildWindowFromPointEx
ChildWindowFromPoint
SetCapture
LoadImageW
DestroyCursor
GetWindowLongW
WindowFromPoint
GetParent
InvalidateRgn
CopyAcceleratorTableW
LockWindowUpdate
GetDCEx
UnregisterClassW
RegisterClipboardFormatW
SetWindowContextHelpId
CharNextW
MapDialogRect
ShowOwnedPopups
PostQuitMessage
DrawIcon
GetNextDlgTabItem
GetActiveWindow
ClientToScreen
DrawFocusRect
FrameRect
IsRectEmpty
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
TranslateAcceleratorW
EndPaint
GetClientRect
InvalidateRect
LoadCursorW
SetCursor
EnableWindow
GetSysColor
SetRectEmpty
InflateRect
UnionRect
CopyRect
SendMessageW
SetRect
LoadBitmapW
FillRect
DrawEdge
CreateMenu
CreatePopupMenu
DeleteMenu
AppendMenuW
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSubMenu
InsertMenuW
ModifyMenuW
RemoveMenu
GetDC
ReleaseDC
GetDesktopWindow
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
SystemParametersInfoW
GetSystemMetrics
GetSysColorBrush
DestroyIcon
DrawIconEx
GetMenuItemInfoW
GetIconInfo
CreateIconIndirect
DrawStateW
IsMenu
IsChild

gdi32

SelectClipRgn
GetViewportExtEx
GetWindowExtEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
CreatePatternBrush
SetRectRgn
GetMapMode
DPtoLP
GetCharWidthW
CreateFontW
GetBkColor
GetTextColor
CreateEllipticRgn
LPtoDP
GetRgnBox
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetBkMode
RestoreDC
SaveDC
ExtSelectClipRgn
CreateSolidBrush
SelectPalette
RealizePalette
EnumFontFamiliesExW
GetWindowOrgEx
CreateRectRgnIndirect
EnumFontFamiliesW
GetDIBits
SetStretchBltMode
StretchDIBits
CombineRgn
FrameRgn
FillRgn
CreatePolygonRgn
CreateRectRgn
GetViewportOrgEx
SetViewportOrgEx
CreateBitmap
SetBkColor
SetTextColor
GetStockObject
StretchBlt
CreateDIBSection
DeleteObject
DeleteDC
Escape
TextOutW
RectVisible
PtVisible
SetPixel
GetPixel
PatBlt
Rectangle
Ellipse
GetBkMode
GetDeviceCaps
GetObjectW
CreateCompatibleBitmap
CreateFontIndirectW
CreateHatchBrush
CreatePen
ExtTextOutW
GetTextExtentPoint32W
BitBlt
Polyline
SelectObject
CreateCompatibleDC
CreateRoundRectRgn
CreateDCW

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCreateKeyW
GetFileSecurityW
SetFileSecurityW
RegEnumKeyW
RegDeleteKeyW
RegCloseKey
IsTextUnicode
RegDeleteValueW
RegOpenKeyW
RegQueryValueW
RegSetValueExW

shell32

SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHChangeNotify
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderPathW
ExtractIconW
DragQueryFileW
DragFinish
Shell_NotifyIconW
ShellExecuteExW

comctl32

_TrackMouseEvent
ImageList_Draw
ImageList_GetIconSize
ord17

shlwapi

UrlUnescapeW
PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW

oledlg

OleUIBusyW

ole32

CreateStreamOnHGlobal
OleRun
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoInitialize
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysStringByteLen
SysFreeString
VariantInit
VariantCopy
VariantClear
VariantChangeType
SysAllocStringLen
SysStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SysAllocStringByteLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
GetErrorInfo
OleLoadPicture

ws2_32

inet_addr
recv
send
connect
gethostbyname
socket
gethostname
WSASocketW
sendto
closesocket
recvfrom
WSACleanup
select
htons
WSAStartup

winmm

PlaySoundW

netapi32

Netbios

wininet

InternetQueryOptionW
InternetCanonicalizeUrlW
HttpOpenRequestW
InternetOpenUrlW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
FtpPutFileW
FtpSetCurrentDirectoryW
InternetQueryDataAvailable
InternetCrackUrlW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 340KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 508KB - Virtual size: 506KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
KTXNewsStartup.exe
.exe windows:4 windows x86 arch:x86

3cf231bee3c1a9708019a7520362bf3b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Working\KTXNews\release\KTXNewsStartup.pdb

Imports

kernel32

RaiseException
HeapReAlloc
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlUnwind
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
SetErrorMode
GetTickCount
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
FileTimeToSystemTime
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetCurrentProcessId
WritePrivateProfileStringW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetThreadLocale
InterlockedIncrement
lstrcmpA
GlobalFree
GlobalAlloc
FormatMessageW
LocalFree
WideCharToMultiByte
InterlockedDecrement
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GetCurrentThreadId
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetModuleFileNameW
lstrcpynW
CloseHandle
CreateSemaphoreW
MultiByteToWideChar
SizeofResource
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
SetLastError
lstrcmpiW
lstrlenW
FreeResource
LockResource
LoadResource
FindResourceW
GetCPInfo
lstrlenA
GetVersionExW
TerminateProcess
GetVersion

user32

ReleaseCapture
LoadCursorW
UnregisterClassW
SetCapture
CopyAcceleratorTableW
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
CharUpperW
RegisterClipboardFormatW
PostThreadMessageW
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetForegroundWindow
GetMenu
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
ValidateRect
IntersectRect
GetMenuStringW
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
IsWindow
PtInRect
SetWindowLongW
SetParent
KillTimer
GetCursorPos
LoadMenuW
UpdateWindow
FindWindowExW
DrawIcon
IsIconic
SetTimer
FindWindowW
GetSystemMenu
LoadIconW
FrameRect
LoadImageW
DrawStateW
OffsetRect
GetClientRect
DrawFocusRect
InflateRect
PostMessageW
SendMessageW
GetWindowRect
GetActiveWindow
WindowFromPoint
ClientToScreen
GetWindowThreadProcessId
CreateDialogIndirectParamW
EndDialog
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
CharNextW
IsWindowEnabled
ShowWindow
MoveWindow
IsMenu
GetWindowLongW
DestroyCursor
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
EnableWindow
GetSubMenu
LoadBitmapW
GetSysColorBrush
FillRect
CreatePopupMenu
CreateMenu
GetMenuItemID
GetMenuState
ModifyMenuW
GetMenuItemCount
AppendMenuW
ReleaseDC
GetDC
GetDesktopWindow
GetSystemMetrics
DestroyIcon
DrawIconEx
SystemParametersInfoW
GetMenuItemInfoW
SetRect
DrawEdge
GetSysColor
CopyRect
UnregisterClassA

gdi32

GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
SetBkMode
MoveToEx
LineTo
GetClipBox
CreateCompatibleBitmap
RestoreDC
SaveDC
StretchBlt
SetTextColor
SetBkColor
CreateBitmap
GetStockObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
PatBlt
SetPixel
GetPixel
GetObjectW
DeleteDC
DeleteObject
CreateSolidBrush
BitBlt
SelectObject
CreateDIBSection
CreateCompatibleDC
Ellipse
GetTextExtentPoint32W
CreateFontIndirectW
GetBkMode
CreatePen
GetDeviceCaps
SetMapMode

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueExW
RegCloseKey
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW

shell32

Shell_NotifyIconW
ShellExecuteW
ShellExecuteExW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
OleCreateFontIndirect
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysFreeString
SysAllocStringLen

winmm

PlaySoundW

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LiveUpdate.exe
.exe windows:4 windows x86 arch:x86

c51a892479eae0721c053d41198c6a7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\MFC\KtxUpdate\Release\KtxUpdate.pdb

Imports

kernel32

TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetStartupInfoW
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
HeapReAlloc
ExitThread
CreateThread
ExitProcess
SetStdHandle
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
SetErrorMode
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
WritePrivateProfileStringW
GetCurrentProcessId
GetTickCount
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetModuleHandleW
GetVersionExA
FreeResource
GetModuleHandleA
GetFileTime
GetFileAttributesW
LocalAlloc
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
GetProcAddress
GetFullPathNameW
GetVolumeInformationW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
LoadLibraryW
GetThreadLocale
lstrlenW
SetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
SetFileTime
WriteFile
DosDateTimeToFileTime
SystemTimeToFileTime
ReadFile
SetFilePointer
GetFileType
CreateFileW
GetCurrentProcess
DuplicateHandle
WideCharToMultiByte
GetLastError
lstrlenA
InterlockedDecrement
InterlockedIncrement
TerminateThread
WaitForSingleObject
GetModuleFileNameW
CopyFileW
Sleep
MultiByteToWideChar
Process32NextW
CloseHandle
TerminateProcess
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
SetFileAttributesW
CreateDirectoryW
FindResourceW
LoadResource
LockResource
SizeofResource
HeapFree
FindClose
FindNextFileW
FindFirstFileW
SetCurrentDirectoryW
HeapAlloc
GetProcessHeap
GetCurrentDirectoryW
RemoveDirectoryW
DeleteFileW
GetStartupInfoA
GetShortPathNameW

user32

SetCapture
UnregisterClassW
LoadCursorW
GetSysColorBrush
DestroyMenu
GetWindowThreadProcessId
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
ShowWindow
MoveWindow
SetWindowTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenu
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SendMessageW
LoadBitmapW
UnregisterClassA
GetParent
PostMessageW
EnableWindow
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
PostThreadMessageW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
IsRectEmpty
EndDialog
EndPaint
CopyAcceleratorTableW
CharNextW
ReleaseCapture
RemovePropW
LoadIconW
GetSystemMenu
AppendMenuW
GetSystemMetrics
IsIconic
GetClientRect
DrawIcon
GetFocus
GetSysColor
GetWindowRect
RedrawWindow
InvalidateRect
UpdateWindow
FillRect
OffsetRect
SetCursor
IsWindow
KillTimer
SetTimer
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
CharUpperW
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetDesktopWindow
ScreenToClient
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
IsDialogMessageW

gdi32

ExtSelectClipRgn
DeleteDC
CreateBitmap
ScaleWindowExtEx
CreateRectRgnIndirect
GetMapMode
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SelectObject
GetWindowExtEx
GetViewportExtEx
CreateCompatibleDC
SetTextAlign
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateRectRgn
Rectangle
GetStockObject
SetViewportOrgEx
GetViewportOrgEx
GetObjectW
CreateCompatibleBitmap
CreateFontIndirectW
DeleteObject
CreateSolidBrush
BitBlt
SelectClipRgn

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyW
RegCloseKey

shell32

ShellExecuteW
SHFileOperationW

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCW
UrlUnescapeW
PathFindExtensionW
PathStripToRootW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

OleRun
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc

oleaut32

SysFreeString
VariantInit
VariantCopy
VariantClear
SysStringLen
SysAllocStringLen
VariantChangeType
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
GetErrorInfo
SysAllocString

wininet

InternetOpenUrlW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
InternetQueryDataAvailable
InternetQueryOptionW
InternetCanonicalizeUrlW
InternetCrackUrlW

Sections

.text
Size: 296KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cjk_code/cMap/Adobe-CNS1/Adobe-CNS1-0
cjk_code/cMap/Adobe-CNS1/Adobe-CNS1-1
cjk_code/cMap/Adobe-CNS1/Adobe-CNS1-2
cjk_code/cMap/Adobe-CNS1/Adobe-CNS1-3
cjk_code/cMap/Adobe-CNS1/Adobe-CNS1-4
cjk_code/cMap/Adobe-CNS1/Adobe-CNS1-5
cjk_code/cMap/Adobe-CNS1/Adobe-CNS1-B5pc
cjk_code/cMap/Adobe-CNS1/Adobe-CNS1-ETenms-B5
cjk_code/cMap/Adobe-CNS1/Adobe-CNS1-H-CID
cjk_code/cMap/Adobe-CNS1/Adobe-CNS1-H-Host
cjk_code/cMap/Adobe-CNS1/Adobe-CNS1-H-Mac
cjk_code/cMap/Adobe-CNS1/Adobe-CNS1-UCS2
cjk_code/cMap/Adobe-CNS1/B5-H
cjk_code/cMap/Adobe-CNS1/B5-V
cjk_code/cMap/Adobe-CNS1/B5pc-H
cjk_code/cMap/Adobe-CNS1/B5pc-UCS2
cjk_code/cMap/Adobe-CNS1/B5pc-UCS2C
cjk_code/cMap/Adobe-CNS1/B5pc-V
cjk_code/cMap/Adobe-CNS1/CNS-EUC-H
cjk_code/cMap/Adobe-CNS1/CNS-EUC-V
cjk_code/cMap/Adobe-CNS1/CNS01-RKSJ-H
cjk_code/cMap/Adobe-CNS1/CNS02-RKSJ-H
cjk_code/cMap/Adobe-CNS1/CNS03-RKSJ-H
cjk_code/cMap/Adobe-CNS1/CNS04-RKSJ-H
cjk_code/cMap/Adobe-CNS1/CNS05-RKSJ-H
cjk_code/cMap/Adobe-CNS1/CNS06-RKSJ-H
cjk_code/cMap/Adobe-CNS1/CNS07-RKSJ-H
cjk_code/cMap/Adobe-CNS1/CNS1-H
cjk_code/cMap/Adobe-CNS1/CNS1-V
cjk_code/cMap/Adobe-CNS1/CNS15-RKSJ-H
cjk_code/cMap/Adobe-CNS1/CNS2-H
cjk_code/cMap/Adobe-CNS1/CNS2-V
cjk_code/cMap/Adobe-CNS1/ETHK-B5-H
cjk_code/cMap/Adobe-CNS1/ETHK-B5-V
cjk_code/cMap/Adobe-CNS1/ETen-B5-H
cjk_code/cMap/Adobe-CNS1/ETen-B5-UCS2
cjk_code/cMap/Adobe-CNS1/ETen-B5-V
cjk_code/cMap/Adobe-CNS1/ETenms-B5-H
cjk_code/cMap/Adobe-CNS1/ETenms-B5-V
cjk_code/cMap/Adobe-CNS1/HKdla-B5-H
cjk_code/cMap/Adobe-CNS1/HKdla-B5-V
cjk_code/cMap/Adobe-CNS1/HKdlb-B5-H
cjk_code/cMap/Adobe-CNS1/HKdlb-B5-V
cjk_code/cMap/Adobe-CNS1/HKgccs-B5-H
cjk_code/cMap/Adobe-CNS1/HKgccs-B5-V
cjk_code/cMap/Adobe-CNS1/HKm314-B5-H
cjk_code/cMap/Adobe-CNS1/HKm314-B5-V
cjk_code/cMap/Adobe-CNS1/HKm471-B5-H
cjk_code/cMap/Adobe-CNS1/HKm471-B5-V
cjk_code/cMap/Adobe-CNS1/HKscs-B5-H
cjk_code/cMap/Adobe-CNS1/HKscs-B5-V
cjk_code/cMap/Adobe-CNS1/UCS2-B5pc
cjk_code/cMap/Adobe-CNS1/UCS2-ETen-B5
cjk_code/cMap/Adobe-CNS1/UniCNS-UCS2-H
cjk_code/cMap/Adobe-CNS1/UniCNS-UCS2-V
cjk_code/cMap/Adobe-CNS1/UniCNS-UTF16-H
cjk_code/cMap/Adobe-CNS1/UniCNS-UTF16-V
cjk_code/cMap/Adobe-CNS1/UniCNS-UTF32-H
cjk_code/cMap/Adobe-CNS1/UniCNS-UTF32-V
cjk_code/cMap/Adobe-CNS1/UniCNS-UTF8-H
cjk_code/cMap/Adobe-CNS1/UniCNS-UTF8-V
cjk_code/cMap/Adobe-GB1/Adobe-GB1-0
cjk_code/cMap/Adobe-GB1/Adobe-GB1-1
cjk_code/cMap/Adobe-GB1/Adobe-GB1-2
cjk_code/cMap/Adobe-GB1/Adobe-GB1-3
cjk_code/cMap/Adobe-GB1/Adobe-GB1-4
cjk_code/cMap/Adobe-GB1/Adobe-GB1-5
cjk_code/cMap/Adobe-GB1/Adobe-GB1-GBK-EUC
cjk_code/cMap/Adobe-GB1/Adobe-GB1-GBpc-EUC
cjk_code/cMap/Adobe-GB1/Adobe-GB1-H-CID
cjk_code/cMap/Adobe-GB1/Adobe-GB1-H-Host
cjk_code/cMap/Adobe-GB1/Adobe-GB1-H-Mac
cjk_code/cMap/Adobe-GB1/Adobe-GB1-UCS2
cjk_code/cMap/Adobe-GB1/GB-EUC-H
cjk_code/cMap/Adobe-GB1/GB-EUC-V
cjk_code/cMap/Adobe-GB1/GB-H
cjk_code/cMap/Adobe-GB1/GB-RKSJ-H
cjk_code/cMap/Adobe-GB1/GB-V
cjk_code/cMap/Adobe-GB1/GBK-EUC-H
cjk_code/cMap/Adobe-GB1/GBK-EUC-UCS2
cjk_code/cMap/Adobe-GB1/GBK-EUC-V
cjk_code/cMap/Adobe-GB1/GBK2K-H
cjk_code/cMap/Adobe-GB1/GBK2K-V
cjk_code/cMap/Adobe-GB1/GBKp-EUC-H
cjk_code/cMap/Adobe-GB1/GBKp-EUC-V
cjk_code/cMap/Adobe-GB1/GBT-EUC-H
cjk_code/cMap/Adobe-GB1/GBT-EUC-V
cjk_code/cMap/Adobe-GB1/GBT-H
cjk_code/cMap/Adobe-GB1/GBT-RKSJ-H
cjk_code/cMap/Adobe-GB1/GBT-V
cjk_code/cMap/Adobe-GB1/GBTpc-EUC-H
cjk_code/cMap/Adobe-GB1/GBTpc-EUC-V
cjk_code/cMap/Adobe-GB1/GBpc-EUC-H
cjk_code/cMap/Adobe-GB1/GBpc-EUC-UCS2
cjk_code/cMap/Adobe-GB1/GBpc-EUC-UCS2C
cjk_code/cMap/Adobe-GB1/GBpc-EUC-V
cjk_code/cMap/Adobe-GB1/UCS2-GBK-EUC
cjk_code/cMap/Adobe-GB1/UCS2-GBpc-EUC
cjk_code/cMap/Adobe-GB1/UniGB-UCS2-H
cjk_code/cMap/Adobe-GB1/UniGB-UCS2-V
cjk_code/cMap/Adobe-GB1/UniGB-UTF16-H
cjk_code/cMap/Adobe-GB1/UniGB-UTF16-V
cjk_code/cMap/Adobe-GB1/UniGB-UTF32-H
cjk_code/cMap/Adobe-GB1/UniGB-UTF32-V
cjk_code/cMap/Adobe-GB1/UniGB-UTF8-H
cjk_code/cMap/Adobe-GB1/UniGB-UTF8-V
cjk_code/cMap/Adobe-HongKong1/HK-RKSJ-H
cjk_code/cMap/Adobe-Japan1/78-EUC-H
cjk_code/cMap/Adobe-Japan1/78-EUC-V
cjk_code/cMap/Adobe-Japan1/78-H
cjk_code/cMap/Adobe-Japan1/78-RKSJ-H
cjk_code/cMap/Adobe-Japan1/78-RKSJ-V
cjk_code/cMap/Adobe-Japan1/78-V
cjk_code/cMap/Adobe-Japan1/78ms-RKSJ-H
cjk_code/cMap/Adobe-Japan1/78ms-RKSJ-V
cjk_code/cMap/Adobe-Japan1/83pv-RKSJ-H
cjk_code/cMap/Adobe-Japan1/90ms-RKSJ-H
cjk_code/cMap/Adobe-Japan1/90ms-RKSJ-UCS2
cjk_code/cMap/Adobe-Japan1/90ms-RKSJ-V
cjk_code/cMap/Adobe-Japan1/90msp-RKSJ-H
cjk_code/cMap/Adobe-Japan1/90msp-RKSJ-V
cjk_code/cMap/Adobe-Japan1/90pv-RKSJ-H
cjk_code/cMap/Adobe-Japan1/90pv-RKSJ-UCS2
cjk_code/cMap/Adobe-Japan1/90pv-RKSJ-UCS2C
cjk_code/cMap/Adobe-Japan1/90pv-RKSJ-V
cjk_code/cMap/Adobe-Japan1/Add-H
cjk_code/cMap/Adobe-Japan1/Add-RKSJ-H
cjk_code/cMap/Adobe-Japan1/Add-RKSJ-V
cjk_code/cMap/Adobe-Japan1/Add-V
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-0
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-1
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-2
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-3
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-4
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-5
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-6
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-90ms-RKSJ
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-90pv-RKSJ
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-H-CID
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-H-Host
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-H-Mac
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-PS-H
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-PS-V
cjk_code/cMap/Adobe-Japan1/Adobe-Japan1-UCS2
cjk_code/cMap/Adobe-Japan1/EUC-H
cjk_code/cMap/Adobe-Japan1/EUC-V
cjk_code/cMap/Adobe-Japan1/Ext-H
cjk_code/cMap/Adobe-Japan1/Ext-RKSJ-H
cjk_code/cMap/Adobe-Japan1/Ext-RKSJ-V
cjk_code/cMap/Adobe-Japan1/Ext-V
cjk_code/cMap/Adobe-Japan1/H
cjk_code/cMap/Adobe-Japan1/Hankaku
cjk_code/cMap/Adobe-Japan1/Hiragana
cjk_code/cMap/Adobe-Japan1/Hojo-EUC-H
cjk_code/cMap/Adobe-Japan1/Hojo-EUC-V
cjk_code/cMap/Adobe-Japan1/Hojo-H
cjk_code/cMap/Adobe-Japan1/Hojo-RKSJ-H
cjk_code/cMap/Adobe-Japan1/Hojo-V
cjk_code/cMap/Adobe-Japan1/Katakana
cjk_code/cMap/Adobe-Japan1/NWP-H
cjk_code/cMap/Adobe-Japan1/NWP-V
cjk_code/cMap/Adobe-Japan1/RKSJ-H
cjk_code/cMap/Adobe-Japan1/RKSJ-V
cjk_code/cMap/Adobe-Japan1/Roman
cjk_code/cMap/Adobe-Japan1/UCS2-90ms-RKSJ
cjk_code/cMap/Adobe-Japan1/UCS2-90pv-RKSJ
cjk_code/cMap/Adobe-Japan1/UniHojo-UCS2-H
cjk_code/cMap/Adobe-Japan1/UniHojo-UCS2-V
cjk_code/cMap/Adobe-Japan1/UniHojo-UTF16-H
cjk_code/cMap/Adobe-Japan1/UniHojo-UTF16-V
cjk_code/cMap/Adobe-Japan1/UniHojo-UTF32-H
cjk_code/cMap/Adobe-Japan1/UniHojo-UTF32-V
cjk_code/cMap/Adobe-Japan1/UniHojo-UTF8-H
cjk_code/cMap/Adobe-Japan1/UniHojo-UTF8-V
cjk_code/cMap/Adobe-Japan1/UniJIS-UCS2-H
cjk_code/cMap/Adobe-Japan1/UniJIS-UCS2-HW-H
cjk_code/cMap/Adobe-Japan1/UniJIS-UCS2-HW-V
cjk_code/cMap/Adobe-Japan1/UniJIS-UCS2-V
cjk_code/cMap/Adobe-Japan1/UniJIS-UTF16-H
cjk_code/cMap/Adobe-Japan1/UniJIS-UTF16-V
cjk_code/cMap/Adobe-Japan1/UniJIS-UTF32-H
cjk_code/cMap/Adobe-Japan1/UniJIS-UTF32-V
cjk_code/cMap/Adobe-Japan1/UniJIS-UTF8-H
cjk_code/cMap/Adobe-Japan1/UniJIS-UTF8-V
cjk_code/cMap/Adobe-Japan1/UniJIS2004-UTF16-H
cjk_code/cMap/Adobe-Japan1/UniJIS2004-UTF16-V
cjk_code/cMap/Adobe-Japan1/UniJIS2004-UTF32-H
cjk_code/cMap/Adobe-Japan1/UniJIS2004-UTF32-V
cjk_code/cMap/Adobe-Japan1/UniJIS2004-UTF8-H
cjk_code/cMap/Adobe-Japan1/UniJIS2004-UTF8-V
cjk_code/cMap/Adobe-Japan1/UniJISPro-UCS2-HW-V
cjk_code/cMap/Adobe-Japan1/UniJISPro-UCS2-V
cjk_code/cMap/Adobe-Japan1/UniJISPro-UTF8-V
cjk_code/cMap/Adobe-Japan1/UniJISX0213-UTF32-H
cjk_code/cMap/Adobe-Japan1/UniJISX0213-UTF32-V
cjk_code/cMap/Adobe-Japan1/UniJISX02132004-UTF32-H
cjk_code/cMap/Adobe-Japan1/UniJISX02132004-UTF32-V
cjk_code/cMap/Adobe-Japan1/V
cjk_code/cMap/Adobe-Japan1/WP-Symbol
cjk_code/cMap/Adobe-Japan2/Adobe-Japan2-0
cjk_code/cMap/Adobe-Korea1/Adobe-Korea1-0
cjk_code/cMap/Adobe-Korea1/Adobe-Korea1-1
cjk_code/cMap/Adobe-Korea1/Adobe-Korea1-2
cjk_code/cMap/Adobe-Korea1/Adobe-Korea1-H-CID
cjk_code/cMap/Adobe-Korea1/Adobe-Korea1-H-Host
cjk_code/cMap/Adobe-Korea1/Adobe-Korea1-H-Mac
cjk_code/cMap/Adobe-Korea1/Adobe-Korea1-KSCms-UHC
cjk_code/cMap/Adobe-Korea1/Adobe-Korea1-KSCpc-EUC
cjk_code/cMap/Adobe-Korea1/Adobe-Korea1-UCS2
cjk_code/cMap/Adobe-Korea1/KSC-EUC-H
cjk_code/cMap/Adobe-Korea1/KSC-EUC-V
cjk_code/cMap/Adobe-Korea1/KSC-H
cjk_code/cMap/Adobe-Korea1/KSC-Johab-H
cjk_code/cMap/Adobe-Korea1/KSC-Johab-V
cjk_code/cMap/Adobe-Korea1/KSC-RKSJ-H
cjk_code/cMap/Adobe-Korea1/KSC-V
cjk_code/cMap/Adobe-Korea1/KSC2-RKSJ-H
cjk_code/cMap/Adobe-Korea1/KSCms-UHC-H
cjk_code/cMap/Adobe-Korea1/KSCms-UHC-HW-H
cjk_code/cMap/Adobe-Korea1/KSCms-UHC-HW-V
cjk_code/cMap/Adobe-Korea1/KSCms-UHC-UCS2
cjk_code/cMap/Adobe-Korea1/KSCms-UHC-V
cjk_code/cMap/Adobe-Korea1/KSCpc-EUC-H
cjk_code/cMap/Adobe-Korea1/KSCpc-EUC-UCS2
cjk_code/cMap/Adobe-Korea1/KSCpc-EUC-UCS2C
cjk_code/cMap/Adobe-Korea1/KSCpc-EUC-V
cjk_code/cMap/Adobe-Korea1/UCS2-KSCms-UHC
cjk_code/cMap/Adobe-Korea1/UCS2-KSCpc-EUC
cjk_code/cMap/Adobe-Korea1/UniKS-UCS2-H
cjk_code/cMap/Adobe-Korea1/UniKS-UCS2-V
cjk_code/cMap/Adobe-Korea1/UniKS-UTF16-H
cjk_code/cMap/Adobe-Korea1/UniKS-UTF16-V
cjk_code/cMap/Adobe-Korea1/UniKS-UTF32-H
cjk_code/cMap/Adobe-Korea1/UniKS-UTF32-V
cjk_code/cMap/Adobe-Korea1/UniKS-UTF8-H
cjk_code/cMap/Adobe-Korea1/UniKS-UTF8-V
cjk_code/cMap/Adobe-Vietnam1/TCVN-RKSJ-H
cjk_code/cidToUnicode/Adobe-CNS1
cjk_code/cidToUnicode/Adobe-GB1
cjk_code/cidToUnicode/Adobe-Japan1
cjk_code/cidToUnicode/Adobe-Japan2
cjk_code/cidToUnicode/Adobe-Korea1
cjk_code/nameToUnicode/Bulgarian
cjk_code/nameToUnicode/Greek
cjk_code/nameToUnicode/Thai
cjk_code/unicodeMap/Big5
cjk_code/unicodeMap/Big5ascii
cjk_code/unicodeMap/EUC-CN
cjk_code/unicodeMap/EUC-JP
cjk_code/unicodeMap/GBK
cjk_code/unicodeMap/ISO-2022-CN
cjk_code/unicodeMap/ISO-2022-JP
cjk_code/unicodeMap/ISO-2022-KR
cjk_code/unicodeMap/ISO-8859-6
cjk_code/unicodeMap/ISO-8859-7
cjk_code/unicodeMap/ISO-8859-8
cjk_code/unicodeMap/ISO-8859-9
cjk_code/unicodeMap/KOI8-R
cjk_code/unicodeMap/Latin2
cjk_code/unicodeMap/Shift-JIS
cjk_code/unicodeMap/TIS-620
cjk_code/unicodeMap/Windows-1255
db1.mdb
ktxexist.ocx
.dll regsvr32 windows:4 windows x86 arch:x86

358d459d03d8e702a2cecf1a1bf11e30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Working\KTXNews\KTXExist\Release\ktxexist.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
RtlUnwind
ExitProcess
RaiseException
HeapSize
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapFree
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetCommandLineA
GetProfileIntW
GetFileTime
GetFileAttributesW
FindResourceExW
lstrlenA
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileW
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
CopyFileW
GlobalSize
FormatMessageW
GlobalFlags
WritePrivateProfileStringW
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
IsDBCSLeadByte
FreeResource
GlobalFindAtomW
LoadLibraryA
GetVersionExA
GetUserDefaultLCID
MulDiv
GetModuleHandleA
GlobalFree
GlobalUnlock
GetCurrentProcessId
GetLastError
GlobalAddAtomW
CloseHandle
InterlockedIncrement
lstrlenW
CompareStringW
InterlockedDecrement
SetLastError
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameW
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryW
WideCharToMultiByte
CompareStringA
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
GetModuleHandleW
HeapCreate
GetProcAddress

user32

GetMenuStringW
AppendMenuW
RemoveMenu
InsertMenuW
UnregisterClassW
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
LockWindowUpdate
EnumChildWindows
RegisterClipboardFormatW
SetRect
SetWindowRgn
IsRectEmpty
CreateMenu
DestroyMenu
SetRectEmpty
LoadCursorW
SetCapture
ReleaseCapture
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextW
GetForegroundWindow
SetActiveWindow
GetDlgItem
DestroyIcon
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
EqualRect
PtInRect
GetDlgCtrlID
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
CallWindowProcW
GetMenu
SetWindowPos
DestroyWindow
GetDesktopWindow
SetWindowLongW
InvalidateRect
UpdateWindow
GetWindowRect
GetSubMenu
GetMenuItemID
GetMenuItemCount
CharUpperW
GetSysColorBrush
GetDCEx
GetDialogBaseUnits
GetTopWindow
GetTabbedTextExtentA
OffsetRect
InflateRect
DefWindowProcW
CopyRect
ShowWindow
DrawEdge
SetParent
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
SendMessageW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
UnhookWindowsHookEx
PostMessageW
PostQuitMessage
EnableWindow
FillRect
RegisterClassW
UnregisterClassA

gdi32

CreatePatternBrush
CreatePen
CreateSolidBrush
ExtTextOutW
CombineRgn
CopyMetaFileW
CreateDCW
CreateFontIndirectW
GetTextExtentPoint32W
GetTextAlign
GetTextMetricsW
SetRectRgn
PatBlt
EnumFontFamiliesExW
Rectangle
UnrealizeObject
TextOutW
RectVisible
PtVisible
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
CreateRectRgnIndirect
GetStockObject
GetObjectW
CreateRectRgn
SelectClipRgn
DeleteObject
MoveToEx
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetBkMode
SetBkColor
RestoreDC
SaveDC
DeleteDC
DeleteMetaFile
CloseMetaFile
CreateMetaFileW
LPtoDP
GetDeviceCaps
CreateBitmap
Ellipse
Escape

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegDeleteValueW
RegSetValueExW
RegQueryValueW
RegCreateKeyW
RegDeleteKeyW
RegOpenKeyW
RegEnumKeyW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegSetValueW

shell32

ExtractIconW

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW

ole32

ReadClassStm
CreateStreamOnHGlobal
CoDisconnectObject
OleDuplicateData
ReadFmtUserTypeStg
OleLoadFromStream
ReleaseStgMedium
CreateDataAdviseHolder
OleSaveToStream
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateOleAdviseHolder
CoTaskMemAlloc
CreateDataCache
StringFromCLSID
CoTaskMemFree
CoRevokeClassObject
CoRegisterClassObject
StringFromGUID2
CoCreateInstance
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal

oleaut32

OleCreatePictureIndirect
OleCreateFontIndirect
VariantCopy
SysAllocString
OleLoadPicture
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
OleCreatePropertyFrame
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysFreeString
SysStringByteLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 236KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msxml3.dll
.dll regsvr32 windows:5 windows x86 arch:x86

786f5b386407a34bf3e6064e69a906f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msxml3.pdb

Imports

advapi32

RegSetValueExW
RegEnumValueW
OpenThreadToken
RevertToSelf
SetThreadToken
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW

kernel32

FormatMessageW
LocalFree
LCMapStringW
LCMapStringA
GetStringTypeW
TlsGetValue
GetLastError
OutputDebugStringW
InterlockedIncrement
InterlockedDecrement
ExpandEnvironmentStringsW
GetModuleFileNameW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
HeapFree
GetProcessHeap
InterlockedCompareExchange
CloseHandle
TlsSetValue
DuplicateHandle
GetCurrentThread
GetVersionExW
TlsAlloc
TlsFree
InitializeCriticalSection
WaitForSingleObject
ReleaseSemaphore
InterlockedExchange
CreateSemaphoreW
CreateEventW
Sleep
InterlockedExchangeAdd
TryEnterCriticalSection
VirtualQuery
GetThreadContext
ResumeThread
SuspendThread
SetEvent
ResetEvent
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleW
SetLastError
GetSystemInfo
RaiseException
MultiByteToWideChar
FreeLibrary
LocalAlloc
LoadLibraryExW
LoadLibraryW
LoadResource
FindResourceW
SizeofResource
LockResource
FileTimeToSystemTime
SystemTimeToFileTime
LoadLibraryA
SetFilePointer
GetFileType
CreateFileW
FlushFileBuffers
ReadFile
WriteFile
SetEndOfFile
CompareStringW
GetThreadLocale
GetTimeFormatW
GetDateFormatW
GetUserDefaultLCID
GlobalAlloc
GetTempPathW
SetThreadPriority
CreateThread
WideCharToMultiByte
GetCommandLineA
GetVersionExA
VirtualProtect
RtlUnwind
ExitProcess
GetModuleHandleA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapReAlloc
HeapSize
GetACP
GetOEMCP
GetCPInfo
GetLocaleInfoA
GetStringTypeA

ole32

CoInitialize
CoUninitialize
CLSIDFromProgID
StringFromCLSID
CreateBindCtx
CoTaskMemAlloc
CreateStreamOnHGlobal
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoCreateInstance

shlwapi

PathFindExtensionW
PathFindFileNameW
PathIsURLW
UrlUnescapeW
PathSearchAndQualifyW
UrlCreateFromPathW
PathCreateFromUrlW
UrlGetLocationW
UrlCanonicalizeW
UrlIsW
StrToIntW
StrCmpNIW
StrCmpW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 800KB - Virtual size: 799KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msxml3r.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pdf.dll
.dll windows:4 windows x86 arch:x86

5ade57a48ee176970f14988fb2bb32d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Sumatra\release-0.7\Release\pdf.pdb

Imports

comctl32

InitCommonControlsEx
ImageList_Create
ImageList_AddMasked

msimg32

AlphaBlend

kernel32

FreeLibrary
GetProcAddress
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
RaiseException
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
FlushFileBuffers
SetFilePointer
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
RtlUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ExitProcess
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
CreateThread
GetModuleHandleA
GetModuleFileNameA
CopyFileExA
GlobalFree
GetVersion
GetLastError
FormatMessageA
LocalFree
GetCommandLineA
GetLocaleInfoA
WaitForSingleObject
ReleaseSemaphore
CreateSemaphoreA
WriteFile
CreateFileA
ReadFile
CloseHandle
FindFirstFileA
FindNextFileA
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
Sleep
GetProcessHeap
GetCurrentThreadId
CreateDirectoryA
HeapReAlloc
HeapAlloc
HeapFree
GetWindowsDirectoryA
FindClose
GetFileAttributesA
GetFullPathNameA
GetVersionExA
DeleteFileA

user32

ReleaseCapture
SetCursor
LoadCursorA
SetFocus
SetWindowLongA
GetDlgItem
GetWindowLongA
EndDialog
DialogBoxParamA
LoadStringA
LoadIconA
RegisterClassExA
SystemParametersInfoA
KillTimer
SetTimer
DefWindowProcA
LoadBitmapA
SetActiveWindow
CreateWindowExA
GetKeyState
ShowWindow
MoveWindow
SetMenu
GetScrollInfo
MessageBoxA
PostQuitMessage
BeginPaint
EndPaint
GetCapture
DestroyWindow
SetCapture
GetParent
ClientToScreen
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DrawTextA
SetScrollInfo
PostMessageA
GetDesktopWindow
EnableMenuItem
ShowScrollBar
SendMessageA
InvalidateRect
UpdateWindow
GetDC
FillRect
GetWindowRect
SetWindowPos
DestroyMenu
CreateMenu
AppendMenuW
AppendMenuA
GetMenu
CheckMenuItem
GetClientRect

gdi32

StartDocA
StartPage
SetMapMode
EndPage
EndDoc
AbortDoc
CreateDCA
GetDeviceCaps
CreateSolidBrush
CreatePen
GetTextExtentPoint32A
Rectangle
SetTextColor
TextOutA
MoveToEx
LineTo
CreateDIBSection
SetBkMode
GetStockObject
GetObjectA
CreateFontIndirectA
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
DeleteObject
CreatePenIndirect
StretchDIBits
CreateDIBitmap

comdlg32

PrintDlgA
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

DragQueryFileA
SHGetSpecialFolderPathA
SHAppBarMessage
SHChangeNotify
DragFinish
DragAcceptFiles
ShellExecuteExA

Exports

Exports

Sumatra_ClosePdf
Sumatra_CopySnapShotToClip
Sumatra_Exit
Sumatra_GetCurrentPage
Sumatra_GetCurrentZoom
Sumatra_GetNumberOfPages
Sumatra_GetSelectRect
Sumatra_GoToFirstPage
Sumatra_GoToLastPage
Sumatra_GoToNextPage
Sumatra_GoToPreviousPage
Sumatra_GoToThisPage
Sumatra_Init
Sumatra_LoadPDF
Sumatra_Print
Sumatra_PrintPDF
Sumatra_Resize
Sumatra_SetDisplayMode
Sumatra_SetDragMode
Sumatra_SetSelectMode
Sumatra_SetZoom
Sumatra_ShowPrintDialog
Sumatra_ZoomIn
Sumatra_ZoomOut

Sections

.text
Size: 992KB - Virtual size: 991KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 828KB - Virtual size: 826KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
res/images/back2_1_2.gif
.gif
res/images/back2_2_2.gif
.gif
res/images/back2_3.gif
.gif
res/images/back2_4.gif
.gif
res/images/back2_4_2.gif
.gif
res/images/back2_5.gif
.gif
res/images/back2_7.gif
.gif
res/images/back_2.gif
.gif
res/images/back_4.gif
.gif
res/images/back_5.gif
.gif
res/images/back_5_2.gif
.gif
res/images/back_7.gif
.gif
res/images/back_8.gif
.gif
res/images/bg.gif
.gif
res/images/busns_001_coo_01.gif
.gif
res/images/busns_001_coo_05.gif
.gif
res/images/busns_001_coo_06.gif
.gif
res/images/busns_001_coo_14.gif
.gif
res/images/busns_001_coo_grid.gif
.gif
res/images/line.gif
res/images/littergreen_bottom.gif
.gif
res/images/littergreen_mid.gif
.gif
res/images/littergreen_top.gif
.gif
res/images/notebook.gif
res/images/pink.gif
.gif
res/images/season_6_bot_bg.gif
.gif
res/images/season_6_bot_left.gif
.gif
res/images/season_6_bot_right.gif
.gif
res/images/season_6_left.gif
.gif
res/images/season_6_right.gif
.gif
res/images/season_6_top1_1.gif
.gif
res/images/season_6_top1_2.gif
.gif
res/images/season_6_top1_bg.gif
.gif
res/images/shuye.gif
res/images/sum-3-coo_01.gif
.gif
res/images/sum-3-coo_03.gif
.gif
res/images/sum-3-coo_17.gif
.gif
res/images/sum-3-coo_18.gif
.gif
res/images/sum-3-coo_grid.gif
.gif
res/template/d.ini
res/template/default.htm
.html
res/template/ǳɫ.xtp
.html
res/template/̫.xtp
.html
res/template/ѩ.xtp
.html
res/template/ʼǱ.xtp
.html
res/template/֮.xtp
.html
res/template/Ҷ.xtp
.html
res/template/ۺĻ.xtp
.html
res/template/ܱʼ.xtp
.html
res/template/ɳ̲.xtp
.html
res/template/.xtp
.html
res/template/հ.xtp
.html
res/template/.xtp
.html
res/template/λ.xtp
.html
res/template/Һ.xtp
.html
res/template/Ϭ.xtp
.html
res/template/ٺ.xtp
.html
res/weathericons/ѩ.gif
.gif
res/weathericons/Ƽ.gif
.gif
res/weathericons/.gif
.gif
res/weathericons/.gif
.gif
res/weathericons/.gif
.gif
res/weathericons/.gif
.gif
res/weathericons/.gif
.gif
res/weathericons/.gif
.gif
skin/bookcover_left.bmp
skin/bookcover_right.bmp
skin/config.xml
.xml
skin/default/Thumbs.db
skin/default/asksub_cancel_mousein.bmp
skin/default/asksub_cancel_mouseout.bmp
skin/default/asksub_center_title.bmp
skin/default/asksub_left_title.bmp
skin/default/asksub_right_title_mousein.bmp
skin/default/asksub_right_title_mouseout.bmp
skin/default/asksub_sub_mousein.bmp
skin/default/asksub_sub_mouseout.bmp
skin/default/button_my_book_c.bmp
skin/default/diary/bold1.bmp
skin/default/diary/bold2.bmp
skin/default/diary/center1.bmp
skin/default/diary/center2.bmp
skin/default/diary/export1.bmp
skin/default/diary/face.bmp
skin/default/diary/find.bmp
skin/default/diary/image.bmp
skin/default/diary/italic1.bmp
skin/default/diary/italic2.bmp
skin/default/diary/left1.bmp
skin/default/diary/left2.bmp
skin/default/diary/link1.bmp
skin/default/diary/new.bmp
skin/default/diary/new2.bmp
skin/default/diary/print.bmp
skin/default/diary/right1.bmp
skin/default/diary/right2.bmp
skin/default/diary/save1.bmp
skin/default/diary/time.bmp
skin/default/diary/underline1.bmp
skin/default/diary/underline2.bmp
skin/default/diary/weather.bmp
skin/default/dlg_title_closebox_mousein.bmp
skin/default/dlg_title_closebox_mouseout.bmp
skin/default/dlg_title_left.bmp
skin/default/dlg_title_middle.bmp
skin/default/folder_button_mousein.bmp
skin/default/folder_button_mouseout.bmp
skin/default/least.bmp
skin/default/leftpane_bkleft.bmp
skin/default/leftpane_bkmiddle.bmp
skin/default/leftpane_bkright.bmp
skin/default/leftpane_folder_mouseout.bmp
skin/default/leftpane_logo.bmp
skin/default/leftpane_nail_lock.ico
skin/default/leftpane_nail_unlock.ico
skin/default/leftpane_stretch_left_mousein.bmp
skin/default/leftpane_stretch_left_mouseout.bmp
skin/default/leftpane_stretch_right_mousein.bmp
skin/default/leftpane_stretch_right_mouseout.bmp
skin/default/leftpane_tab_bookmark_mousein.bmp
skin/default/leftpane_tab_bookmark_mouseout.bmp
skin/default/leftpane_tab_bookmark_sel.bmp
skin/default/leftpane_tab_collect_nosel.bmp
skin/default/leftpane_tab_collect_sel.bmp
skin/default/leftpane_tab_downtask_nosel.bmp
skin/default/leftpane_tab_downtask_sel.bmp
skin/default/leftpane_tab_localpaper_mousein.bmp
skin/default/leftpane_tab_localpaper_mouseout.bmp
skin/default/leftpane_tab_localpaper_nosel.bmp
skin/default/leftpane_tab_localpaper_sel.bmp
skin/default/leftpane_tab_newspaper_mousein.bmp
skin/default/leftpane_tab_newspaper_mouseout.bmp
skin/default/leftpane_tab_newspaper_nosel.bmp
skin/default/leftpane_tab_newspaper_sel.bmp
skin/default/leftpane_tab_rjb_mousein.bmp
skin/default/leftpane_tab_rjb_mouseout.bmp
skin/default/leftpane_tab_rjb_sel.bmp
skin/default/leftpane_tab_subscribe_mousein.bmp
skin/default/leftpane_tab_subscribe_mouseout.bmp
skin/default/leftpane_tab_subscribe_nosel.bmp
skin/default/leftpane_tab_subscribe_sel.bmp
skin/default/loing_logo.bmp
skin/default/open.bmp
skin/default/skin.config
.xml
skin/default/skin.config.bak
.xml
skin/default/toolbar_background.bmp
skin/default/toolbar_booktotxt_mousein.ico
skin/default/toolbar_booktotxt_mouseout.ico
skin/default/toolbar_closebox.bmp
skin/default/toolbar_configmenu_mousein.bmp
skin/default/toolbar_configmenu_mouseout.bmp
skin/default/toolbar_downtask_mousein.bmp
skin/default/toolbar_downtask_mouseout.bmp
skin/default/toolbar_email.ico
skin/default/toolbar_htmlbookmark_mousein.ico
skin/default/toolbar_htmlbookmark_mouseout.ico
skin/default/toolbar_ie_go_mouseout.ico
skin/default/toolbar_ie_goback_mousein.ico
skin/default/toolbar_ie_goback_mouseout.ico
skin/default/toolbar_ie_goforward_mousein.ico
skin/default/toolbar_ie_goforward_mouseout.ico
skin/default/toolbar_ie_homepage_mousein.ico
skin/default/toolbar_ie_homepage_mouseout.ico
skin/default/toolbar_ie_refresh_mousein.ico
skin/default/toolbar_ie_refresh_mouseout.ico
skin/default/toolbar_ie_stop_mousein.ico
skin/default/toolbar_ie_stop_mouseout.ico
skin/default/toolbar_ie_txtpage_mouseout.ico
skin/default/toolbar_iemode_off.bmp
skin/default/toolbar_iemode_on.bmp
skin/default/toolbar_minimizebox.bmp
skin/default/toolbar_pdf_collect_mousein.ico
skin/default/toolbar_pdf_collect_mouseout.ico
skin/default/toolbar_pdf_doublepage_disable.bmp
skin/default/toolbar_pdf_doublepage_enable.bmp
skin/default/toolbar_pdf_fitpage_mousein.ico
skin/default/toolbar_pdf_fitpage_mouseout.ico
skin/default/toolbar_pdf_handmode_hand.ico
skin/default/toolbar_pdf_handmode_selectarea.ico
skin/default/toolbar_pdf_help_mousein.ico
skin/default/toolbar_pdf_help_mouseout.ico
skin/default/toolbar_pdf_homepage_mousein.ico
skin/default/toolbar_pdf_homepage_mouseout.ico
skin/default/toolbar_pdf_nextpage_mousein.ico
skin/default/toolbar_pdf_nextpage_mouseout.ico
skin/default/toolbar_pdf_openpdf_mousein.ico
skin/default/toolbar_pdf_openpdf_mouseout.ico
skin/default/toolbar_pdf_prevpage_mousein.ico
skin/default/toolbar_pdf_prevpage_mouseout.ico
skin/default/toolbar_pdf_print.ico
skin/default/toolbar_pdf_singlepage.bmp
skin/default/toolbar_pdf_zoomin_mousein.ico
skin/default/toolbar_pdf_zoomin_mouseout.ico
skin/default/toolbar_pdf_zoomout_mousein.ico
skin/default/toolbar_pdf_zoomout_mouseout.ico
skin/default/toolbar_pdfmode_off.bmp
skin/default/toolbar_pdfmode_on.bmp
skin/default/toolbar_user_localauth.ico
skin/default/toolbar_user_offline.ico
skin/default/toolbar_user_serverauth.ico
skin/ktxfile.ico
skin/load.gif
.gif
skin/stat.ini
uninst.exe
.exe windows:4 windows x86 arch:x86

1c042238f43557c055fca8642de8a074

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
MulDiv
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
RegisterClassA
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
EmptyClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetForegroundWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 280KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/FindProcDLL.dll
.dll windows:4 windows x86 arch:x86

8df26927f8978d4eb40ff179c0aa961b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
lstrcmpA
OpenProcess
lstrcpyA
LoadLibraryA
CloseHandle
FreeLibrary
GetVersionExA
lstrlenA
GlobalFree

user32

wsprintfA

Exports

Exports

FindProc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp

Sharing

General

Malware Config

Signatures

Files

1c042238f43557c055fca8642de8a074

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 3KB - Virtual size: 252KB

.ndata Size: - Virtual size: 280KB

.rsrc Size: 27KB - Virtual size: 27KB

8df26927f8978d4eb40ff179c0aa961b

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 104B

0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

bb3237204c454f209290448584ba10b8

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

winmm

netapi32

wininet

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 340KB - Virtual size: 336KB

.data Size: 36KB - Virtual size: 53KB

.rsrc Size: 508KB - Virtual size: 506KB

3cf231bee3c1a9708019a7520362bf3b

Headers

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 252KB

.ndata
Size: - Virtual size: 280KB

.rsrc
Size: 27KB - Virtual size: 27KB

.text
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 104B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 340KB - Virtual size: 336KB

.data
Size: 36KB - Virtual size: 53KB

.rsrc
Size: 508KB - Virtual size: 506KB

.text
Size: 240KB - Virtual size: 239KB

.rdata
Size: 60KB - Virtual size: 59KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 232KB - Virtual size: 231KB

.text
Size: 296KB - Virtual size: 294KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 236KB - Virtual size: 234KB

.rdata
Size: 64KB - Virtual size: 60KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 32KB - Virtual size: 28KB