166d5aaf3a945ff1e66b346cc8b5bd05_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

166d5aaf3a945ff1e66b346cc8b5bd05_JaffaCakes118
Size

424KB
MD5

166d5aaf3a945ff1e66b346cc8b5bd05
SHA1

19c54962476165220d26c8ff3feb0db99fcbc551
SHA256

6904064da47534db4e7704a78d79aaffaed85c517ec9d47d7cdaf7f27b9dc4e4
SHA512

beda666bd3399108ce66abf5b7f3ae2002a91857e501096d2af7522f84c93e06cfe7071a548cb0ad5b81de30612e0a4857ebf7a1bcf04531e21cb99946da8311
SSDEEP

12288:geVc/REdrF2hNqkfQFWRdB+bgVAV1nlT/:qA2HqixVAV1lj

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/GetQQMail.exe	upx

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/GetQQMail.exe
unpack002/out.upx
unpack001/暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/SendMailDLL.dll
unpack001/暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/SkinPPWTL.dll
unpack001/暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/破解补丁.exe

Files

166d5aaf3a945ff1e66b346cc8b5bd05_JaffaCakes118
.rar
暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/!创e下载┆绿色软件天堂.URL
.url
暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/GetQQMail.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/SendMailDLL.dll
.dll windows:4 windows x86 arch:x86

3e56572f364349190943ba20989be1bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetLastError
CloseHandle
ReadFile
SetFilePointer
InitializeCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
FlushFileBuffers
CreateFileA
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Exports

Exports

GetMyComput
ReadOfEndReg
isRegUser

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/SkinPPWTL.dll
.dll windows:4 windows x86 arch:x86

8415b02065effcf3e8ba3b1c65054435

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FileTimeToDosDateTime
DeleteFileA
SetFileTime
CreateDirectoryA
SystemTimeToFileTime
ResumeThread
GetModuleHandleA
GetCurrentDirectoryA
DosDateTimeToFileTime
VirtualProtectEx
WriteProcessMemory
CreateRemoteThread
WaitForSingleObject
CloseHandle
OutputDebugStringA
DebugBreak
InterlockedDecrement
InterlockedIncrement
lstrlenA
GetTempPathA
GetFileType
GetWindowsDirectoryA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProcessHeap
HeapAlloc
HeapFree
GlobalFree
lstrcmpA
Sleep
lstrlenW
GetVersion
GetVersionExA
FindResourceExW
FindResourceExA
GetCurrentThreadId
WideCharToMultiByte
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FindNextFileA
GetLastError
GetModuleFileNameA
GetShortPathNameA
lstrcmpiA
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
lstrcpyA
FindFirstFileA
FindClose
lstrcpynA
GetFileTime
GetFileSize
GetFileAttributesA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
MulDiv
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
GlobalAlloc
GlobalLock
GlobalUnlock
VirtualProtect
VirtualQuery
GetCurrentProcess
LoadLibraryA
FreeLibrary
SetLastError
CreateProcessW
SuspendThread
GetThreadContext
FlushInstructionCache
SetThreadContext
CreateProcessA
GetProcAddress
VirtualAllocEx
GetFileInformationByHandle
GetLocalTime

user32

GetCursorPos
KillTimer
RemoveMenu
UpdateWindow
InsertMenuA
GetDlgItem
GetWindowTextA
CheckMenuItem
GetForegroundWindow
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
IntersectRect
IsRectEmpty
EqualRect
GetClientRect
GetSysColor
FindWindowExA
SetPropA
GetMenu
CreateWindowExA
DestroyMenu
EnableScrollBar
GetScrollInfo
EndPaint
IsWindow
SetScrollPos
SetScrollInfo
GetWindowRect
TrackPopupMenuEx
OffsetRect
InflateRect
CopyRect
GetScrollPos
GetScrollRange
GetDlgCtrlID
MoveWindow
GetWindowDC
GetMenuItemInfoA
GetSubMenu
GetMenuItemID
SetRectEmpty
PtInRect
SetTimer
SetCursor
IsWindowEnabled
LoadCursorA
GetMenuItemCount
SetScrollRange
CharLowerA
GetSystemMetrics
DrawIconEx
CharUpperA
GetDesktopWindow
GetDC
ReleaseDC
LoadCursorFromFileA
LoadImageA
LoadStringA
CharNextA
wvsprintfA
ShowScrollBar
GetSysColorBrush
DrawFrameControl
SetWindowRgn
SetMenu
DeleteMenu
InsertMenuItemA
InsertMenuItemW
InsertMenuW
SetWindowPos
LoadStringW
DrawIcon
LoadIconA
LoadIconW
LoadImageW
LoadBitmapA
LoadBitmapW
TrackPopupMenu
DrawTextA
DrawTextW
DrawTextExA
DrawTextExW
MessageBoxIndirectA
WindowFromDC
MessageBoxA
SetMenuItemInfoA
AppendMenuA
GetMenuStringA
CreatePopupMenu
IsMenu
SendMessageTimeoutA
GetIconInfo
wsprintfA
ClientToScreen
CallWindowProcA
GetFocus
RedrawWindow
GetWindowTextLengthA
DestroyWindow
SetWindowTextA
DestroyIcon
GetMessagePos
ReleaseCapture
SetCapture
RemovePropA
FillRect
SetMenuInfo
GetMenuState
UnionRect
GetMenuItemRect
GetMenuDefaultItem
SetRect
GetCapture
WindowFromPoint
ScreenToClient
DrawFocusRect
IsWindowVisible
GetAsyncKeyState
MapWindowPoints
MonitorFromPoint
GetMonitorInfoA
EnableMenuItem
GetPropA
SetWindowLongA
GetWindow
GetClassLongA
SendMessageA
BeginPaint
GetParent
InvalidateRect
GetClassNameA
GetWindowLongA
DrawStateA
CreateIconIndirect
ModifyMenuA
PostMessageA
GetSystemMenu
SystemParametersInfoA
ShowWindow
GetMenuCheckMarkDimensions

gdi32

SetBkColor
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
SetPixel
GetPixel
SetWindowOrgEx
SetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
SetMapMode
GetObjectA
ExtCreateRegion
GetDIBits
CreateICA
GetClipBox
GetCurrentObject
BitBlt
SetBoundsRect
SetTextColor
SetBkMode
GetTextColor
GetBkMode
GetBkColor
PlgBlt
CreateSolidBrush
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextExtentPointW
StretchBlt
SetStretchBltMode
CreateBitmap
SetPixelV
CreateDIBSection
PatBlt
SetBrushOrgEx
CreatePatternBrush
CreateBitmapIndirect
GetNearestColor
RoundRect
CreatePen
CreateFontIndirectA
RestoreDC
ExcludeClipRect
SaveDC
CombineRgn
CreateRectRgnIndirect
Rectangle
OffsetRgn
CreateRectRgn
LineTo
MoveToEx
DPtoLP
TextOutA
SelectClipRgn
GetViewportOrgEx
GetWindowOrgEx
SetTextAlign
GetCharWidthA
CreateFontA
RealizePalette
SelectPalette
CreateDIBitmap
SetDIBitsToDevice
RectVisible
StretchDIBits
GetStockObject
DeleteObject
ExtTextOutA
SelectObject
DeleteDC

comdlg32

ChooseColorA
ChooseColorW
GetFileTitleA

advapi32

RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA

shell32

ShellExecuteA

ole32

CreateStreamOnHGlobal
CoCreateGuid

oleaut32

OleLoadPicture

comctl32

ImageList_Destroy
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_Copy
ImageList_Duplicate
ImageList_DrawIndirect
_TrackMouseEvent
ImageList_GetIcon
ImageList_Draw

msimg32

AlphaBlend

msvcrt

_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_CxxThrowException
strncpy
getc
fputc
fflush
ftell
fseek
fwrite
fread
realloc
fopen
fclose
div
sqrt
calloc
_mbsnbcpy
ceil
floor
malloc
free
strchr
strftime
_ismbblead
localtime
gmtime
time
mktime
sprintf
sin
cos
fabs
abs
_ftol
__RTDynamicCast
wcsncpy
toupper
_purecall
_mbschr
_mbsicmp
atof
_splitpath
_fullpath
_mbsrchr
_mbsinc
_mbsstr
memcmp
strcmp
_except_handler3
strcpy
strcat
memset
strlen
memmove
_ismbcspace
_ismbcdigit
wcslen
memcpy
atoi
_mbscmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_EH_prolog
__CxxFrameHandler
_stricmp
_tzset
_adjust_fdiv

msvcp60

??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z

Exports

Exports

??0CSkinIniFile@@QAE@ABV0@@Z
??0CSkinIniFile@@QAE@VCString@WTL@@@Z
??0CSkinIniFile@@QAE@XZ
??1CSkinIniFile@@UAE@XZ
??4CSkinIniFile@@QAEAAV0@ABV0@@Z
??_7CSkinIniFile@@6B@
?DeleteKey@CSkinIniFile@@QAE_NABVCString@WTL@@@Z
?DeleteValue@CSkinIniFile@@QAE_NABVCString@WTL@@0@Z
?FindKey@CSkinIniFile@@QAEHABVCString@WTL@@@Z
?FindValue@CSkinIniFile@@QAEHHABVCString@WTL@@@Z
?GetNumKeys@CSkinIniFile@@QAEHXZ
?GetNumValues@CSkinIniFile@@QAEHVCString@WTL@@@Z
?GetValue@CSkinIniFile@@QAE?AVCString@WTL@@ABV23@00@Z
?GetValue@CSkinIniFile@@QAE?AVCString@WTL@@ABV23@HAAV23@@Z
?GetValueF@CSkinIniFile@@QAENABVCString@WTL@@0@Z
?GetValueI@CSkinIniFile@@QAEHABVCString@WTL@@0H@Z
?ReadFile@CSkinIniFile@@QAE_NABVCString@WTL@@@Z
?ReadFile@CSkinIniFile@@QAE_NPAEH@Z
?ReadProfile@CSkinIniFile@@QAEXABVCString@WTL@@@Z
?Reset@CSkinIniFile@@QAEXXZ
?SetPath@CSkinIniFile@@QAEXABVCString@WTL@@@Z
?SetValue@CSkinIniFile@@QAE_NABVCString@WTL@@000_N@Z
?SetValueF@CSkinIniFile@@QAE_NABVCString@WTL@@0N_N@Z
?SetValueI@CSkinIniFile@@QAE_NABVCString@WTL@@0HH_N@Z
?WriteFile@CSkinIniFile@@QAEXXZ
?getline2@CSkinIniFile@@QAEHVCString@WTL@@AAV23@@Z
?getline@CSkinIniFile@@QAEAAV?$basic_istream@DU?$char_traits@D@std@@@std@@AAV23@AAVCString@WTL@@@Z
?skinppDrawSkinObject@@YAXPAUHDC__@@UtagRECT@@W4DRAWTYPE@@H@Z
?skinppGetBitmapRes@@YAPAUHBITMAP__@@PBD@Z
?skinppGetBitmapResRect@@YAHPBDAAH111@Z
?skinppGetBitmapSize@@YAXPAUHBITMAP__@@AAH1@Z
?skinppGetImageListFromID@@YAPAU_IMAGELIST@@H@Z
?skinppGetMainFrameMenu@@YAPAUHMENU__@@XZ
?skinppGetMultiLangMenu@@YAPAUHMENU__@@XZ
?skinppGetResFromID@@YAPAUHBITMAP__@@W4SKINOBJTYPE@@HH@Z
?skinppGetResFromID@@YAPAXPAU_ResourceInfo@@@Z
?skinppGetSkinResource@@YAPAEPBDAAH@Z
?skinppLoadLanguageStr@@YAHPBDPADH@Z
?skinppLoadSkinFromRes@@YAHPAUHINSTANCE__@@PBD1PAD@Z
?skinppLoadString@@YAHHPADH@Z
?skinppSetBackgroundDC@@YAXPAUHWND__@@PAUHDC__@@@Z
?skinppSetButtonSounds@@YAXPAUHWND__@@PBD1@Z
?skinppSetButtonTooltip@@YAXPAUHWND__@@PBD@Z
?skinppSetCustomDraw@@YAXPAUHWND__@@H@Z
?skinppSetDialogBkClipRgn@@YAXPAUHWND__@@HH@Z
?skinppSetDialogEraseBkgnd@@YAXPAUHWND__@@H@Z
?skinppSetDrawMenu@@YAXPAUHMENU__@@H@Z
?skinppSetMenuItemImage@@YAHIPAU_IMAGELIST@@H@Z
?skinppSetMenuSkinObjectID@@YAXPAUHWND__@@H@Z
?skinppSetNoDrawText@@YAXPAUHWND__@@H@Z
?skinppSetSkinOwnerMenu@@YAXH@Z
?skinppSetStaticFont@@YAHHPBDH@Z
?skinppSetStaticTextAlign@@YAHHH@Z
?skinppSetStaticTextColor@@YAHHK@Z
?skinppSetStatusBarTransparent@@YAXPAUHWND__@@H@Z
?skinppSetTabItemImageID@@YAXPAUHWND__@@HH@Z
skinppExitSkin
skinppGetDefaultSysColor
skinppGetIconFromRes
skinppGetSkinSysColor
skinppInitializeSkin
skinppLoadSkin
skinppRemoveSkin
skinppRemoveSkinHwnd
skinppSetFreeDlgID
skinppSetListBoxItemDrawInfo
skinppSetListHeaderCtrlItemID
skinppSetListHeaderSortInfo
skinppSetNoSkinHwnd
skinppSetSkinHwnd
skinppSetSkinResID
skinppSetTrackPopupMenuID
skinppSetWindowResID

Sections

.text
Size: 348KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HookSec
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/demo.gif
暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/help.doc
.doc windows office2003
暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/skin/vladstudio.ssk
暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/破解补丁.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 48KB

UPX1 Size: 7KB - Virtual size: 8KB

.rsrc Size: 22KB - Virtual size: 24KB

Headers

File Characteristics

Sections

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 24KB - Virtual size: 21KB

3e56572f364349190943ba20989be1bf

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.reloc Size: 4KB - Virtual size: 3KB

8415b02065effcf3e8ba3b1c65054435

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

msvcrt

msvcp60

Exports

Exports

Sections

.text Size: 348KB - Virtual size: 345KB

.rdata Size: 88KB - Virtual size: 85KB

.data Size: 20KB - Virtual size: 18KB

.HookSec Size: 4KB - Virtual size: 4B

.rsrc Size: 36KB - Virtual size: 33KB

.reloc Size: 36KB - Virtual size: 34KB

Headers

File Characteristics

Sections

.bss Size: - Virtual size: 24KB

.packed Size: 2KB - Virtual size: 4KB

.rsrc Size: 7KB - Virtual size: 8KB

.loader Size: 15KB - Virtual size: 24KB

UPX0
Size: - Virtual size: 48KB

UPX1
Size: 7KB - Virtual size: 8KB

.rsrc
Size: 22KB - Virtual size: 24KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 24KB - Virtual size: 21KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 348KB - Virtual size: 345KB

.rdata
Size: 88KB - Virtual size: 85KB

.data
Size: 20KB - Virtual size: 18KB

.HookSec
Size: 4KB - Virtual size: 4B

.rsrc
Size: 36KB - Virtual size: 33KB

.reloc
Size: 36KB - Virtual size: 34KB

.bss
Size: - Virtual size: 24KB

.packed
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 7KB - Virtual size: 8KB

.loader
Size: 15KB - Virtual size: 24KB