131388c2d577d35bab32dc0b8d102ba8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

131388c2d577d35bab32dc0b8d102ba8_JaffaCakes118
Size

365KB
MD5

131388c2d577d35bab32dc0b8d102ba8
SHA1

cd9e8ca718b5387df0517a6e31ea8c5981785087
SHA256

b241b4e24d1fb89540755e93c23770d8283b1d7f5c5ee21cc9c67b2300655347
SHA512

e7ef9ecd95bf856e7ffe4261be49f5ed95263e0d306841cd07ebb975bcc1acc177a73aa5906304d8c6847327118fd202388711d8b8888f7be21ee9e316fae386
SSDEEP

6144:/g1UL/wecwr6m9KDvW4O38Izi99Wsiq8AgtaUkU/IP7aE87U4ov0rXkDW7xxyUY/:/tb8Y9I/O3Jzi9fiqhgt3kU/eaEUHovf

Score

3^/10

Malware Config

Signatures

Unsigned PE 13 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PLUGIN/EFFECT1/effect1.EXE
unpack001/PLUGIN/EFFECT2/effect2.EXE
unpack001/RUNNER/CLEANER/cleaner.EXE
unpack001/SIGN/KEYGEN/keygen.exe
unpack001/SIGN/SIGNER/signer.EXE
unpack001/SYSTEM/CHECK/check.exe
unpack001/SYSTEM/CRC32/crc32.exe
unpack001/SYSTEM/DEBUG/debug.exe
unpack001/SYSTEM/HAXOR/haxor.exe
unpack001/SYSTEM/HEADER/header.exe
unpack001/SYSTEM/HOST/host.exe
unpack001/SYSTEM/PACKER/packer.exe
unpack001/SYSTEM/PE2PGN/pe2pgn.exe

Files

131388c2d577d35bab32dc0b8d102ba8_JaffaCakes118
.rar
DOC/all_api
DOC/compiler.txt
DOC/dpgn.txt
DOC/errors.txt
DOC/events
DOC/events.txt
DOC/fuckapi.txt
.vbs
DOC/map
DOC/mistfall.TXT
DOC/pgn2_fmt.txt
DOC/plugins
DOC/priority.txt
DOC/rsakey.fmt
DOC/sign.txt
DOC/stdlib.txt
DOC/tools
DOC/unique.txt
DOC/updating.txt
DOC/vplugin2.rus
DOC/warning.txt
INCLUDE/CMDLINE.INC
INCLUDE/CONSOLE.INC
INCLUDE/CONSTS.INC
INCLUDE/FIOEXLOW.INC
INCLUDE/MZ.Hpp
INCLUDE/MZ.INC
INCLUDE/PE.Hpp
INCLUDE/PE.INC
INCLUDE/PGN2/pgn2.hpp
INCLUDE/PGN2/pgn2.inc
INCLUDE/RSA/ASM/HASH_z1.INC
INCLUDE/RSA/ASM/rsalib1.INC
INCLUDE/RSA/ASM/rsalib3.inc
INCLUDE/RSA/CPP/RSA.CPP
INCLUDE/RSA/CPP/RSA.HPP
INCLUDE/RSA/CPP/VLONG.CPP
INCLUDE/RSA/CPP/VLONG.HPP
INCLUDE/S2C.INC
INCLUDE/SEH.INC
PLUGIN/AAVFILE/aavfile.asm
PLUGIN/AAVFILE/aavfile.def
PLUGIN/AAVFILE/aavfile.hpp
PLUGIN/AAVFILE/aavfile.inc
PLUGIN/AAVFILE/aavfile.log
PLUGIN/AAVFILE/aavfile.pgn
PLUGIN/AAVFILE/aavfile.txt
PLUGIN/AAVFILE/make.bat
PLUGIN/AAVPATCH/AAVPATCH.txt
PLUGIN/AAVPATCH/aavpatch.asm
PLUGIN/AAVPATCH/aavpatch.def
PLUGIN/AAVPATCH/aavpatch.hpp
PLUGIN/AAVPATCH/aavpatch.inc
PLUGIN/AAVPATCH/aavpatch.log
PLUGIN/AAVPATCH/aavpatch.pgn
PLUGIN/AAVPATCH/make.bat
PLUGIN/ADDPGN/ADDPGN.txt
PLUGIN/ADDPGN/addpgn.asm
PLUGIN/ADDPGN/addpgn.def
PLUGIN/ADDPGN/addpgn.hpp
PLUGIN/ADDPGN/addpgn.inc
PLUGIN/ADDPGN/addpgn.log
PLUGIN/ADDPGN/addpgn.pgn
PLUGIN/ADDPGN/make.bat
PLUGIN/CODEGEN/CODEGEN.ASM
PLUGIN/CODEGEN/CODEGEN.txt
PLUGIN/CODEGEN/codegen.HPP
PLUGIN/CODEGEN/codegen.def
PLUGIN/CODEGEN/codegen.inc
PLUGIN/CODEGEN/codegen.log
PLUGIN/CODEGEN/codegen.pgn
PLUGIN/CODEGEN/make.bat
PLUGIN/DEBUG/DEBUG.txt
PLUGIN/DEBUG/debug.cpp
PLUGIN/DEBUG/debug.def
PLUGIN/DEBUG/debug.hpp
PLUGIN/DEBUG/debug.inc
PLUGIN/DEBUG/debug.log
PLUGIN/DEBUG/debug.pgn
PLUGIN/DEBUG/make.bat
PLUGIN/DPGN1/DATA/0
PLUGIN/DPGN1/DATA/DPGN/DPGN.CPP
PLUGIN/DPGN1/DATA/DPGN/MAKE.BAT
PLUGIN/DPGN1/DATA/DPGNHASH/CRYPTO.INC
PLUGIN/DPGN1/DATA/DPGNHASH/DPGNHASH.ASM
PLUGIN/DPGN1/DATA/DPGNHASH/MAKE.BAT
PLUGIN/DPGN1/DATA/DPGNHASH/RND.INC
PLUGIN/DPGN1/DATA/KEY/DPGN/public.rsa
PLUGIN/DPGN1/DATA/KEY/DPGN/secret.rsa
PLUGIN/DPGN1/DATA/dpgndata.inc
PLUGIN/DPGN1/DATA/file1
PLUGIN/DPGN1/DATA/file2
PLUGIN/DPGN1/DATA/file3
PLUGIN/DPGN1/DATA/make.bat
PLUGIN/DPGN1/DPGN1.txt
PLUGIN/DPGN1/DPGNcrpt.inc
PLUGIN/DPGN1/dpgn1.asm
PLUGIN/DPGN1/dpgn1.def
PLUGIN/DPGN1/dpgn1.log
PLUGIN/DPGN1/dpgn1.pgn
PLUGIN/DPGN1/make.bat
PLUGIN/EFFECT1/EFFECT1.txt
PLUGIN/EFFECT1/MUSIC/10siskin.inc
PLUGIN/EFFECT1/MUSIC/11vampir.inc
PLUGIN/EFFECT1/MUSIC/1holms.inc
PLUGIN/EFFECT1/MUSIC/2ussr.inc
PLUGIN/EFFECT1/MUSIC/3beer.inc
PLUGIN/EFFECT1/MUSIC/4tumen.inc
PLUGIN/EFFECT1/MUSIC/5polonas.inc
PLUGIN/EFFECT1/MUSIC/6lenin.inc
PLUGIN/EFFECT1/MUSIC/7invader.inc
PLUGIN/EFFECT1/MUSIC/8maca.inc
PLUGIN/EFFECT1/MUSIC/9olexy.inc
PLUGIN/EFFECT1/effect1.EXE
.exe windows:1 windows x86 arch:x86

d767a3bd69c01a4c92e69538b07b6f8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CreateThread
GetTickCount
GetStdHandle
ExitProcess
GlobalAlloc
GetCommandLineA
GlobalFree
TerminateThread
WriteFile
GetSystemTime

winmm

mixerSetControlDetails
mixerOpen
mixerClose
PlaySound

Sections

CODE
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PLUGIN/EFFECT1/effect1.asm
PLUGIN/EFFECT1/effect1.def
PLUGIN/EFFECT1/effect1.log
PLUGIN/EFFECT1/effect1.pgn
PLUGIN/EFFECT1/make.bat
PLUGIN/EFFECT2/effect2.EXE
.exe windows:1 windows x86 arch:x86

4d23793d6418d9373f5ae85466c4abfc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CloseHandle
GetWindowsDirectoryA
CreateFileA
GetFileSize
GetLastError
ExitProcess
GetFileAttributesA
ReadFile
SetFileAttributesA
SetFilePointer
SetLastError
WriteFile
lstrcat
GetSystemTime

user32

SendMessageA
SystemParametersInfoA

Sections

CODE
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PLUGIN/EFFECT2/effect2.asm
PLUGIN/EFFECT2/effect2.def
PLUGIN/EFFECT2/effect2.log
PLUGIN/EFFECT2/effect2.pgn
PLUGIN/EFFECT2/effect2.txt
PLUGIN/EFFECT2/image.BMP
PLUGIN/EFFECT2/make.BAT
PLUGIN/ETG/ETG.txt
PLUGIN/ETG/etg.asm
PLUGIN/ETG/etg.def
PLUGIN/ETG/etg.hpp
PLUGIN/ETG/etg.inc
PLUGIN/ETG/etg.log
PLUGIN/ETG/make.bat
PLUGIN/EXAMPLE/example.CPP
PLUGIN/EXAMPLE/example.def
PLUGIN/EXAMPLE/example.hpp
PLUGIN/EXAMPLE/example.inc
PLUGIN/EXAMPLE/example.log
PLUGIN/EXAMPLE/example.pgn
PLUGIN/EXAMPLE/example.txt
PLUGIN/EXAMPLE/make.bat
PLUGIN/EXTMAN/EXTMAN.txt
PLUGIN/EXTMAN/extman.asm
.vbs
PLUGIN/EXTMAN/extman.def
PLUGIN/EXTMAN/extman.hpp
PLUGIN/EXTMAN/extman.inc
PLUGIN/EXTMAN/extman.log
PLUGIN/EXTMAN/make.bat
PLUGIN/FILEIO/FILEIO.txt
PLUGIN/FILEIO/_fukshare
PLUGIN/FILEIO/fileio.asm
PLUGIN/FILEIO/fileio.def
PLUGIN/FILEIO/fileio.hpp
PLUGIN/FILEIO/fileio.inc
PLUGIN/FILEIO/fileio.log
PLUGIN/FILEIO/make.bat
PLUGIN/FIREWALL/firewall.asm
PLUGIN/FIREWALL/firewall.def
PLUGIN/FIREWALL/firewall.log
PLUGIN/FIREWALL/firewall.pgn
PLUGIN/FIREWALL/firewall.txt
PLUGIN/FIREWALL/make.bat
PLUGIN/FUCKICE/FUCKICE.txt
PLUGIN/FUCKICE/fuckice.asm
PLUGIN/FUCKICE/fuckice.def
PLUGIN/FUCKICE/fuckice.hpp
PLUGIN/FUCKICE/fuckice.inc
PLUGIN/FUCKICE/fuckice.log
PLUGIN/FUCKICE/fuckice.pgn
PLUGIN/FUCKICE/make.bat
PLUGIN/IFSHAN/IFSHAN.txt
PLUGIN/IFSHAN/ifshan.asm
PLUGIN/IFSHAN/ifshan.def
PLUGIN/IFSHAN/ifshan.hpp
PLUGIN/IFSHAN/ifshan.inc
PLUGIN/IFSHAN/ifshan.log
PLUGIN/IFSHAN/ifshan.pgn
PLUGIN/IFSHAN/make.bat
PLUGIN/INFECTA/INFECTA.txt
PLUGIN/INFECTA/infecta.asm
PLUGIN/INFECTA/infecta.def
PLUGIN/INFECTA/infecta.hpp
PLUGIN/INFECTA/infecta.inc
PLUGIN/INFECTA/infecta.log
PLUGIN/INFECTA/infecta.pgn
PLUGIN/INFECTA/make.bat
PLUGIN/INFECTB/INFECTB.txt
PLUGIN/INFECTB/infectb.asm
PLUGIN/INFECTB/infectb.def
PLUGIN/INFECTB/infectb.hpp
PLUGIN/INFECTB/infectb.inc
PLUGIN/INFECTB/infectb.log
PLUGIN/INFECTB/infectb.pgn
PLUGIN/INFECTB/make.bat
PLUGIN/INFECTB/mutate.inc
PLUGIN/INSTALL0/INSTALL0.txt
PLUGIN/INSTALL0/install0.asm
PLUGIN/INSTALL0/install0.def
PLUGIN/INSTALL0/install0.log
PLUGIN/INSTALL0/install0.pgn
PLUGIN/INSTALL0/make.bat
PLUGIN/INSTALL3/INSTALL3.txt
PLUGIN/INSTALL3/install3.asm
PLUGIN/INSTALL3/install3.def
PLUGIN/INSTALL3/install3.log
PLUGIN/INSTALL3/install3.pgn
PLUGIN/INSTALL3/make.bat
PLUGIN/IOAVFILT/IOAVFILT.txt
PLUGIN/IOAVFILT/ioavfilt.asm
PLUGIN/IOAVFILT/ioavfilt.def
PLUGIN/IOAVFILT/ioavfilt.hpp
PLUGIN/IOAVFILT/ioavfilt.inc
PLUGIN/IOAVFILT/ioavfilt.log
PLUGIN/IOAVFILT/ioavfilt.pgn
PLUGIN/IOAVFILT/make.bat
PLUGIN/IOHOOKER/IOHOOKER.txt
PLUGIN/IOHOOKER/iohooker.asm
PLUGIN/IOHOOKER/iohooker.def
PLUGIN/IOHOOKER/iohooker.hpp
PLUGIN/IOHOOKER/iohooker.inc
PLUGIN/IOHOOKER/iohooker.log
PLUGIN/IOHOOKER/iohooker.pgn
PLUGIN/IOHOOKER/make.bat
PLUGIN/K1/K1.txt
PLUGIN/K1/k1.asm
PLUGIN/K1/k1.def
PLUGIN/K1/k1.log
PLUGIN/K1/k1.pgn
PLUGIN/K1/key1.inc
PLUGIN/K1/make.bat
PLUGIN/K2/k2.asm
PLUGIN/K2/k2.def
PLUGIN/K2/k2.log
PLUGIN/K2/k2.pgn
PLUGIN/K2/k2.txt
PLUGIN/K2/key2.inc
PLUGIN/K2/make.bat
PLUGIN/KILLAVXD/KILLAVXD.txt
PLUGIN/KILLAVXD/killavxd.asm
PLUGIN/KILLAVXD/killavxd.def
PLUGIN/KILLAVXD/killavxd.hpp
PLUGIN/KILLAVXD/killavxd.inc
PLUGIN/KILLAVXD/killavxd.log
PLUGIN/KILLAVXD/killavxd.pgn
PLUGIN/KILLAVXD/make.bat
PLUGIN/KILLER/CIHflash.inc
PLUGIN/KILLER/KILLER.txt
PLUGIN/KILLER/killer.asm
PLUGIN/KILLER/killer.def
PLUGIN/KILLER/killer.hpp
PLUGIN/KILLER/killer.inc
PLUGIN/KILLER/killer.log
PLUGIN/KILLER/killer.pgn
PLUGIN/KILLER/make.bat
PLUGIN/KME/KME.txt
PLUGIN/KME/kme.asm
PLUGIN/KME/kme.def
PLUGIN/KME/kme.hpp
PLUGIN/KME/kme.inc
PLUGIN/KME/kme.log
PLUGIN/KME/kme.pgn
PLUGIN/KME/make.bat
PLUGIN/LDE/LDE.txt
PLUGIN/LDE/lde.asm
PLUGIN/LDE/lde.def
PLUGIN/LDE/lde.hpp
PLUGIN/LDE/lde.inc
PLUGIN/LDE/lde.log
PLUGIN/LDE/lde.pgn
PLUGIN/LDE/make.bat
PLUGIN/LDRWIN32/K32MAN.INC
PLUGIN/LDRWIN32/LDRWIN32.txt
PLUGIN/LDRWIN32/ldrwin32.asm
PLUGIN/LDRWIN32/ldrwin32.bin
PLUGIN/LDRWIN32/ldrwin32.def
PLUGIN/LDRWIN32/ldrwin32.hpp
PLUGIN/LDRWIN32/ldrwin32.inc
PLUGIN/LDRWIN32/ldrwin32.log
PLUGIN/LDRWIN32/ldrwin32.pgn
PLUGIN/LDRWIN32/make.bat
PLUGIN/LDRWIN32/memory.inc
PLUGIN/LDRWIN32/unique.inc
PLUGIN/MAIN/MAIN.txt
PLUGIN/MAIN/main.asm
PLUGIN/MAIN/main.def
PLUGIN/MAIN/main.hpp
PLUGIN/MAIN/main.inc
PLUGIN/MAIN/main.log
PLUGIN/MAIN/main.pgn
PLUGIN/MAIN/make.bat
PLUGIN/MAKEBODY/DROPPER/dropper.ash
PLUGIN/MAKEBODY/DROPPER/dropper.asi
PLUGIN/MAKEBODY/DROPPER/dropper.asm
PLUGIN/MAKEBODY/DROPPER/make.bat
PLUGIN/MAKEBODY/MAKEBODY.txt
PLUGIN/MAKEBODY/make.bat
PLUGIN/MAKEBODY/makebody.asm
PLUGIN/MAKEBODY/makebody.def
PLUGIN/MAKEBODY/makebody.hpp
PLUGIN/MAKEBODY/makebody.inc
PLUGIN/MAKEBODY/makebody.log
PLUGIN/MAKEBODY/makebody.pgn
PLUGIN/MEMORY/MEMORY.txt
PLUGIN/MEMORY/make.bat
PLUGIN/MEMORY/memory.asm
PLUGIN/MEMORY/memory.def
PLUGIN/MEMORY/memory.hpp
PLUGIN/MEMORY/memory.inc
PLUGIN/MEMORY/memory.log
PLUGIN/MEMORY/memory.pgn
PLUGIN/MISTFALL/MISTFALL.HIS
PLUGIN/MISTFALL/MISTFALL.INC
PLUGIN/MISTFALL/MISTFALL.txt
PLUGIN/MISTFALL/make.bat
PLUGIN/MISTFALL/mistfall.CPP
PLUGIN/MISTFALL/mistfall.HPP
PLUGIN/MISTFALL/mistfall.def
PLUGIN/MISTFALL/mistfall.log
PLUGIN/MISTFALL/mistfall.pgn
PLUGIN/MORPHER/MORPHER.txt
PLUGIN/MORPHER/make.bat
PLUGIN/MORPHER/morpher.asm
.vbs
PLUGIN/MORPHER/morpher.def
PLUGIN/MORPHER/morpher.log
PLUGIN/MORPHER/morpher.pgn
PLUGIN/PLAN/PLAN.txt
PLUGIN/PLAN/make.bat
PLUGIN/PLAN/plan.asm
PLUGIN/PLAN/plan.def
PLUGIN/PLAN/plan.hpp
PLUGIN/PLAN/plan.inc
PLUGIN/PLAN/plan.log
PLUGIN/PLAN/plan.pgn
PLUGIN/R0COPY/R0COPY.txt
PLUGIN/R0COPY/make.bat
PLUGIN/R0COPY/r0copy.asm
PLUGIN/R0COPY/r0copy.def
PLUGIN/R0COPY/r0copy.hpp
PLUGIN/R0COPY/r0copy.inc
PLUGIN/R0COPY/r0copy.log
PLUGIN/R0COPY/r0copy.pgn
PLUGIN/RANDOM/RANDOM.txt
PLUGIN/RANDOM/make.bat
PLUGIN/RANDOM/random.asm
PLUGIN/RANDOM/random.def
PLUGIN/RANDOM/random.hpp
PLUGIN/RANDOM/random.inc
PLUGIN/RANDOM/random.log
PLUGIN/RANDOM/random.pgn
PLUGIN/RARZIP/CRC.INC
PLUGIN/RARZIP/RAR.INC
PLUGIN/RARZIP/RARZIP.txt
PLUGIN/RARZIP/ZIP.INC
PLUGIN/RARZIP/make.bat
PLUGIN/RARZIP/rarzip.asm
PLUGIN/RARZIP/rarzip.def
PLUGIN/RARZIP/rarzip.hpp
PLUGIN/RARZIP/rarzip.inc
PLUGIN/RARZIP/rarzip.log
PLUGIN/RARZIP/rarzip.pgn
PLUGIN/RECSERCH/RECSERCH.txt
PLUGIN/RECSERCH/make.bat
PLUGIN/RECSERCH/recserch.asm
PLUGIN/RECSERCH/recserch.def
PLUGIN/RECSERCH/recserch.hpp
PLUGIN/RECSERCH/recserch.inc
PLUGIN/RECSERCH/recserch.log
PLUGIN/RECSERCH/recserch.pgn
PLUGIN/REGSCAN/REGSCAN.txt
PLUGIN/REGSCAN/make.bat
PLUGIN/REGSCAN/regscan.asm
PLUGIN/REGSCAN/regscan.def
PLUGIN/REGSCAN/regscan.hpp
PLUGIN/REGSCAN/regscan.inc
PLUGIN/REGSCAN/regscan.log
PLUGIN/REGSCAN/regscan.pgn
PLUGIN/RING0/RING0.txt
PLUGIN/RING0/make.bat
PLUGIN/RING0/ring0.asm
PLUGIN/RING0/ring0.def
PLUGIN/RING0/ring0.hpp
PLUGIN/RING0/ring0.inc
PLUGIN/RING0/ring0.log
PLUGIN/RING0/ring0.pgn
PLUGIN/RSA/RSA.txt
PLUGIN/RSA/make.bat
PLUGIN/RSA/rsa.asm
PLUGIN/RSA/rsa.def
PLUGIN/RSA/rsa.hpp
PLUGIN/RSA/rsa.inc
PLUGIN/RSA/rsa.log
PLUGIN/RSA/rsa.pgn
PLUGIN/SIGMAN/SIGMAN.CPP
PLUGIN/SIGMAN/SIGMAN.txt
PLUGIN/SIGMAN/make.bat
PLUGIN/SIGMAN/sigman.def
PLUGIN/SIGMAN/sigman.hpp
PLUGIN/SIGMAN/sigman.inc
PLUGIN/SIGMAN/sigman.log
PLUGIN/SIGMAN/sigman.pgn
PLUGIN/TEST/TEST.txt
PLUGIN/TEST/_x2
PLUGIN/TEST/make.bat
PLUGIN/TEST/test.asm
PLUGIN/TEST/test.def
PLUGIN/TEST/test.hpp
PLUGIN/TEST/test.inc
PLUGIN/TEST/test.log
PLUGIN/TEST/test.pgn
PLUGIN/UTIL/UTIL.txt
PLUGIN/UTIL/make.bat
PLUGIN/UTIL/util.asm
PLUGIN/UTIL/util.def
PLUGIN/UTIL/util.hpp
PLUGIN/UTIL/util.inc
PLUGIN/UTIL/util.log
PLUGIN/UTIL/util.pgn
PLUGIN/UUE/make.bat
PLUGIN/UUE/uue.asm
PLUGIN/UUE/uue.def
PLUGIN/UUE/uue.hpp
PLUGIN/UUE/uue.inc
PLUGIN/UUE/uue.log
PLUGIN/UUE/uue.pgn
PLUGIN/UUE/uue.txt
PLUGIN/WALKER/WALKER.txt
PLUGIN/WALKER/make.bat
PLUGIN/WALKER/walker.asm
PLUGIN/WALKER/walker.def
PLUGIN/WALKER/walker.hpp
PLUGIN/WALKER/walker.inc
PLUGIN/WALKER/walker.log
PLUGIN/WALKER/walker.pgn
PLUGIN/make.bat
PLUGIN/makebcpp.BAT
PLUGIN/maketasm.bat
RUNNER/CLEANER/CLEANER.ASM
RUNNER/CLEANER/MAKE.BAT
RUNNER/CLEANER/cleaner.EXE
.exe windows:1 windows x86 arch:x86

14cbb124969fdc90d535a84e685182bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

RegDeleteKeyA

kernel32

DeleteFileA
GetWindowsDirectoryA
FindClose
FindFirstFileA
GetStdHandle
ExitProcess
GlobalDeleteAtom
GlobalFindAtomA
OpenMutexA
WriteFile
lstrcat
CloseHandle

user32

SystemParametersInfoA
SendMessageA

Sections

CODE
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RUNNER/RUN_9X.BAT
RUNNER/RUN_NT.BAT
RUNNER/check.bat
RUNNER/check.log
RUNNER/plugin.lst
SIGN/0
SIGN/1.bat
SIGN/KEY/K1/public.rsa
SIGN/KEY/K1/secret.rsa
SIGN/KEY/K2/public.rsa
SIGN/KEY/K2/secret.rsa
SIGN/KEYGEN/keygen.CPP
SIGN/KEYGEN/keygen.exe
.exe windows:4 windows x86 arch:x86

a104df12a9d44275aded2e7377d7117d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FlushConsoleInputBuffer
GetACP
GetCPInfo
GetCommandLineA
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetTickCount
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadConsoleInputA
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleWindowInfo
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteConsoleInputA
WriteFile

user32

EnumThreadWindows
MessageBoxA
wsprintfA

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SIGN/KEYGEN/make.BAT
SIGN/SIGNER/MAKE.BAT
SIGN/SIGNER/SIGNer.ASM
SIGN/SIGNER/signer.EXE
.exe windows:1 windows x86 arch:x86

84ac801ae56ecc9f3ce3d700209e5313

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CreateFileA
ExitProcess
GetCommandLineA
GetFileAttributesA
GetFileSize
GetLastError
GetStdHandle
GlobalAlloc
ReadFile
SetFileAttributesA
SetFilePointer
SetLastError
WriteFile
lstrcat
CloseHandle

Sections

CODE
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SIGN/key1.bat
SIGN/key2.bat
SIGN/signer.bat
SYSTEM/CHECK/check.cpp
SYSTEM/CHECK/check.exe
.exe windows:4 windows x86 arch:x86

0f6ee090f3eb1d267a120e4523797b3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentVariableA
GetFileAttributesA
GetFileSize
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetVersion
GetVersionExA
GetVolumeInformationA
GlobalMemoryStatus
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile

user32

EnumThreadWindows
MessageBoxA
wsprintfA

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SYSTEM/CHECK/make.BAT
SYSTEM/CPPSYS/cppsys.asm
SYSTEM/CPPSYS/cppsys.obj
SYSTEM/CPPSYS/make.bat
SYSTEM/CRC32/crc32.cpp
SYSTEM/CRC32/crc32.exe
.exe windows:4 windows x86 arch:x86

cdf6a5f378fdb9190e9877fe679f4503

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentVariableA
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
MultiByteToWideChar
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile

user32

EnumThreadWindows
MessageBoxA
wsprintfA

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SYSTEM/CRC32/crc32.hpp
SYSTEM/CRC32/fuck_api.cpp
SYSTEM/CRC32/make.BAT
SYSTEM/DEBUG/DEBUG.ASM
SYSTEM/DEBUG/DEBUG.INC
SYSTEM/DEBUG/MAKE.BAT
SYSTEM/DEBUG/TRACER.INC
SYSTEM/DEBUG/debug.exe
.exe windows:1 windows x86 arch:x86

4086aa11820cdb1a9aa4c8f06ed26c16

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ContinueDebugEvent
ExitProcess
GetCommandLineA
CreateProcessA
GetStdHandle
ReadProcessMemory
WaitForDebugEvent
WriteFile
GetLastError

user32

SetDebugErrorLevel

Sections

CODE
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SYSTEM/HAXOR/haxor.cpp
SYSTEM/HAXOR/haxor.exe
.exe windows:4 windows x86 arch:x86

03401e0ab973c3e617229738de3c535d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile

user32

EnumThreadWindows
MessageBoxA
wsprintfA

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SYSTEM/HAXOR/make.BAT
SYSTEM/HEADER/MAKE.BAT
SYSTEM/HEADER/header.cpp
SYSTEM/HEADER/header.exe
.exe windows:4 windows x86 arch:x86

4de8ef1ed25cdbc204cbb441fabc2d28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FlushConsoleInputBuffer
GetACP
GetCPInfo
GetCommandLineA
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadConsoleInputA
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleWindowInfo
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteConsoleInputA
WriteFile

user32

EnumThreadWindows
MessageBoxA
wsprintfA

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SYSTEM/HOST/host.cpp
SYSTEM/HOST/host.exe
.exe windows:4 windows x86 arch:x86

e65c38e8f481db72d991ca3aa4813238

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile

user32

EnumThreadWindows
MessageBoxA
wsprintfA

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SYSTEM/HOST/make.BAT
SYSTEM/HOST/unique.asm
SYSTEM/HOST/unique.hpp
SYSTEM/PACKER/MAKE.BAT
SYSTEM/PACKER/packer.cpp
SYSTEM/PACKER/packer.exe
.exe windows:4 windows x86 arch:x86

03401e0ab973c3e617229738de3c535d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile

user32

EnumThreadWindows
MessageBoxA
wsprintfA

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SYSTEM/PE2PGN/make.BAT
SYSTEM/PE2PGN/pe2pgn.cpp
SYSTEM/PE2PGN/pe2pgn.exe
.exe windows:4 windows x86 arch:x86

ac00fe1acbeeb7a3f970e1fadca4ae9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentVariableA
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile

user32

EnumThreadWindows
MessageBoxA
wsprintfA

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SYSTEM/Z_CODING/wrapper.asm
SYSTEM/Z_CODING/z_coding.txt
SYSTEM/Z_CODING/z_decode.inc
SYSTEM/Z_CODING/z_encode.cpp
SYSTEM/Z_CODING/z_encode.inc
SYSTEM/make.bat
build.how
file_id.diz
license.txt
make_all.bat
.bat .vbs
pgn2.his
todo

Sharing

General

Malware Config

Signatures

Files

d767a3bd69c01a4c92e69538b07b6f8b

Headers

File Characteristics

Imports

kernel32

winmm

Sections

CODE Size: 1KB - Virtual size: 4KB

DATA Size: 4KB - Virtual size: 8KB

.idata Size: 512B - Virtual size: 4KB

4d23793d6418d9373f5ae85466c4abfc

Headers

File Characteristics

Imports

kernel32

user32

Sections

CODE Size: 1024B - Virtual size: 4KB

DATA Size: 39KB - Virtual size: 40KB

.idata Size: 512B - Virtual size: 4KB

14cbb124969fdc90d535a84e685182bd

Headers

File Characteristics

Imports

advapi32

kernel32

user32

Sections

CODE Size: 1KB - Virtual size: 4KB

DATA Size: 1024B - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

a104df12a9d44275aded2e7377d7117d

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 52KB

.data Size: 16KB - Virtual size: 20KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 4KB

84ac801ae56ecc9f3ce3d700209e5313

Headers

File Characteristics

Imports

kernel32

Sections

CODE Size: 2KB - Virtual size: 4KB

DATA Size: 512B - Virtual size: 8KB

.idata Size: 512B - Virtual size: 4KB

0f6ee090f3eb1d267a120e4523797b3d

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 47KB - Virtual size: 48KB

.data Size: 13KB - Virtual size: 400KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 4KB

CODE
Size: 1KB - Virtual size: 4KB

DATA
Size: 4KB - Virtual size: 8KB

.idata
Size: 512B - Virtual size: 4KB

CODE
Size: 1024B - Virtual size: 4KB

DATA
Size: 39KB - Virtual size: 40KB

.idata
Size: 512B - Virtual size: 4KB

CODE
Size: 1KB - Virtual size: 4KB

DATA
Size: 1024B - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB

.text
Size: 52KB - Virtual size: 52KB

.data
Size: 16KB - Virtual size: 20KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 4KB

CODE
Size: 2KB - Virtual size: 4KB

DATA
Size: 512B - Virtual size: 8KB

.idata
Size: 512B - Virtual size: 4KB

.text
Size: 47KB - Virtual size: 48KB

.data
Size: 13KB - Virtual size: 400KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 4KB

.text
Size: 35KB - Virtual size: 36KB

.data
Size: 10KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 1KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 4KB

CODE
Size: 1024B - Virtual size: 4KB

DATA
Size: 1KB - Virtual size: 16KB

.idata
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB

.text
Size: 41KB - Virtual size: 44KB

.data
Size: 10KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 1KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 4KB

.text
Size: 42KB - Virtual size: 44KB

.data
Size: 11KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 4KB