3707de4b74ff9d5b87275f8dff1bed3b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3707de4b74ff9d5b87275f8dff1bed3b_JaffaCakes118
Size

1.6MB
MD5

3707de4b74ff9d5b87275f8dff1bed3b
SHA1

4a81875bde46e21b8b58f043e1f7429ce820f80f
SHA256

b819d0b91754c472b4af0e16b83d2d40a205bd16f351ac585947f4de606024fb
SHA512

2e88dbc9fb67c5669396cebabf084a61460abf3a555e71aa7b7e7020a890b45e62f9f617d80f5618e85a9e52fb07de028a87d6e5f4911b23c5681972a882b718
SSDEEP

49152:4nNAGZGh/w2L+32a0yh/khXJry+tl27rV:WZGm2O093yqCV

Score

3^/10

Malware Config

Signatures

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
3707de4b74ff9d5b87275f8dff1bed3b_JaffaCakes118
unpack001/$PLUGINSDIR/Base64.dll
unpack001/$PLUGINSDIR/BrandingURL.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/blowfish.dll
unpack001/$PLUGINSDIR/inetc.dll
unpack001/BCalc.exe
unpack001/libjcc.dll
unpack001/libjsybheap.dll
unpack001/pbvm90.dll
unpack001/uninst.exe

NSIS installer 4 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/uninst.exe	nsis_installer_1
static1/unpack001/uninst.exe	nsis_installer_2

Files

3707de4b74ff9d5b87275f8dff1bed3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/Base64.dll
.dll windows:4 windows x86 arch:x86

1ba6926a1ee4e4cda118768081f528d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrcpyA
lstrcpynA
GlobalAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcess
TerminateProcess

msvcr80

memset
atoi
_crt_debugger_hook

Exports

Exports

Decrypt
Encrypt

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/BrandingURL.dll
.dll windows:4 windows x86 arch:x86

135de77644e2add2fd9dd8176740e7e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GlobalFree

user32

GetWindowRect
SetCapture
InvalidateRect
SendMessageA
GetCapture
ClientToScreen
EnableWindow
LoadImageA
SetPropA
SetWindowLongA
GetWindowLongA
GetDlgItem
PtInRect
ReleaseCapture
SetCursor
GetPropA
CallWindowProcA
RedrawWindow

gdi32

GetObjectA
SetTextColor
CreateFontIndirectA

shell32

ShellExecuteA

Exports

Exports

Set
Unload

Sections

.text
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 839B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/blowfish.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Decrypt
Encrypt

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 89B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/inetc.dll
.dll windows:4 windows x86 arch:x86

3f1149a3053980fe6b461521d2b55a2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_mbschr
_adjust_fdiv
malloc
_initterm
free
_mbsrchr
strtoul
memset
_mbsstr
strtol

kernel32

CloseHandle
CreateThread
WaitForSingleObject
TerminateThread
GetModuleHandleA
MulDiv
lstrcpyA
GlobalAlloc
LoadLibraryA
GetProcAddress
lstrlenA
WriteFile
ReadFile
lstrcmpA
lstrcpynA
GetLastError
GlobalFree
lstrcmpiA
DeleteFileA
SleepEx
SetFilePointer
GetTickCount
lstrcatA
GetFileSize
CreateFileA

user32

MessageBoxA
GetParent
ShowWindow
PostMessageA
SetWindowTextA
GetWindowTextA
IsWindow
GetDlgItem
SetDlgItemTextA
SendDlgItemMessageA
SetWindowPos
SystemParametersInfoA
GetClientRect
GetWindowRect
SetTimer
LoadIconA
SetWindowLongA
GetWindowLongA
UpdateWindow
DestroyWindow
KillTimer
RedrawWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
IsWindowVisible
EnableWindow
CreateDialogParamA
FindWindowExA
wsprintfA
SendMessageA

wininet

HttpSendRequestA
HttpSendRequestExA
HttpQueryInfoA
FtpCreateDirectoryA
FtpOpenFileA
InternetGetLastResponseInfoA
InternetSetFilePointer
InternetSetOptionA
InternetQueryOptionA
InternetCloseHandle
InternetErrorDlg
HttpOpenRequestA
HttpAddRequestHeadersA
HttpEndRequestA
InternetConnectA
InternetCrackUrlA
InternetOpenA
InternetReadFile
InternetWriteFile

comctl32

ord17

Exports

Exports

get
head
post
put

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
BCalc.exe
.exe windows:4 windows x86 arch:x86

bbe06459abbb1d845c350bfe00379c91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pbvm90

ord137

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCommandLineA
GetCPInfo
IsDBCSLeadByte
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
GetACP
GetOEMCP
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
RtlUnwind
VirtualFree
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
LoadLibraryA
WriteFile
GetStringTypeA
GetStringTypeW
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
libjcc.dll
.dll windows:4 windows x86 arch:x86

1cacbb27831291b59a06f22fb24e8d69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

htonl
ntohl
ntohs
WSAGetLastError
closesocket
connect
WSAStartup
setsockopt
recv
__WSAFDIsSet
select
socket
send
htons
gethostbyname
ioctlsocket

kernel32

WaitForSingleObject
DisableThreadLibraryCalls
SetThreadPriority
CloseHandle
CreateEventA
TlsAlloc
GetCurrentThreadId
TlsSetValue
Sleep
SetEvent
SetErrorMode
TlsGetValue
GetTickCount
GetLastError
ResetEvent
DeleteCriticalSection
VirtualAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryA

msvcrt

strcmp
_ftol
vsprintf
strrchr
_adjust_fdiv
_initterm
fread
fclose
memmove
printf
malloc
realloc
free
_endthreadex
_beginthreadex
abort
fputc
strtok
memcmp
sprintf
strlen
_stricmp
strcat
tolower
memset
strncmp
strstr
time
memcpy
strcpy
_strnicmp
sscanf
strchr
vfprintf
strncpy
__p__iob
atoi
_errno
__p__pctype
_isctype
__p___mb_cur_max
toupper
fputs
fprintf
perror
fopen
getenv
fflush

Exports

Exports

JagAny_endValue
JagAny_getValue
JagAny_putValue
JagAny_tc
JagBCD_BinaryToString
JagBCD_StringToBinary
JagCSIIOP_dup_csi_sec_mech_list
JagCSI_GSSUP_ExportName
JagCSI_GSSUP_ImportName
JagCSI_GSSUP_get
JagCSI_GSSUP_put
JagCSI_Get_ITTPrincipalName
JagCSI_SASContextBody_getStream
JagCSI_SASContextBody_putStream
JagClient_FuncLookup
JagClient_LoadLibrary
JagCodesetConvert
JagCosTS_getReceiver
JagCosTS_getSender
JagCosTS_pack_PropCtx
JagCosTS_setCosTSInternalRef
JagCosTS_setReceiver
JagCosTS_setSender
JagCosTS_unpack_PropCtx
JagGetQOP
JagGetSupportedAssertedIdentities
JagHash
JagHashTable_fast_get
JagHashTable_fast_put
JagHashTable_fast_remove
JagHashTable_get
JagHashTable_getByValue
JagHashTable_getKeyValPairs
JagHashTable_put
JagHashTable_remove
JagHashTable_removeAllByValue
JagHashTable_size
JagHashV
JagIIOPStream_asParent
JagIIOPStream_decodeIOR
JagIIOPStream_encodeIOR
JagIIOPStream_endMessage
JagIIOPStream_endPutEncapsulation
JagIIOPStream_getBuffer
JagIIOPStream_getByteOrder
JagIIOPStream_getEndian
JagIIOPStream_getGIOPVersion
JagIIOPStream_getIIOPVersion
JagIIOPStream_getIfFragmented
JagIIOPStream_getJavaBuffer
JagIIOPStream_getJavaInput
JagIIOPStream_getLocateReply
JagIIOPStream_getLocateRequest
JagIIOPStream_getMessage
JagIIOPStream_getRequest
JagIIOPStream_getRequestId
JagIIOPStream_getResponseServiceContextList
JagIIOPStream_getServiceContextList
JagIIOPStream_getTxnContext
JagIIOPStream_initLogFile
JagIIOPStream_initMaxSize
JagIIOPStream_insertServiceContext
JagIIOPStream_isOTSClient
JagIIOPStream_isSharedTxn
JagIIOPStream_isTransactional
JagIIOPStream_isValidGIOPHeader
JagIIOPStream_newBuffer
JagIIOPStream_putByteOrder
JagIIOPStream_putEncapsulation
JagIIOPStream_putJavaOutput
JagIIOPStream_putLocateReply
JagIIOPStream_putLocateRequest
JagIIOPStream_putMessageError
JagIIOPStream_putReplySystemException
JagIIOPStream_putRequest
JagIIOPStream_putServiceContextList
JagIIOPStream_regetServiceContextList
JagIIOPStream_resetOffset
JagIIOPStream_setAsParent
JagIIOPStream_setBuffer
JagIIOPStream_setEndian
JagIIOPStream_setIIOPVersion
JagIIOPStream_setOTSClient
JagIIOPStream_setSharedTxn
JagIIOPStream_setTransactional
JagIIOPStream_toWString
JagIIOPStream_unsetTransactional
JagMemory__alloc
JagMemory__free
JagMemory_checkOff
JagMemory_checkOn
JagMemory_dump
JagMemory_log
JagMemory_setParent
JagMemory_size
JagMemory_traceOff
JagMemory_traceOn
JagORB_async
JagORB_getInstance
JagORB_getTransactionCurrent
JagORB_getTxnControlRef
JagORB_init
JagORB_initErrFunc
JagORB_initLogFile
JagORB_isClient
JagORB_isExPseudoJava
JagORB_isLocal
JagORB_isPseudo
JagORB_isPseudoJava
JagORB_lock
JagORB_log
JagORB_logServer
JagORB_object_to_string
JagORB_setTxnControlRef
JagORB_setenv
JagORB_string_to_object
JagORB_unlock
JagObjectRef_dup
JagObjectRef_isa
JagObjectRef_narrow
JagObjectRef_str
JagPseudoCompByteArrayToStream
JagPseudoCompJStringToString
JagPseudoCompPrepareException
JagPseudoCompStreamToByteArray
JagPseudoCompStringToJString
JagPseudoCompThrowException
JagPseudoJava_attach
JagPseudoJava_checkForException
JagPseudoJava_detach
JagPseudoJava_getJNIEnv
JagPseudoJava_getObjectRef
JagPseudoJava_setJNIEnv
JagPseudoJava_setReplyFunction
JagPseudo_createMethodTable
JagPseudo_fillMethodTable
JagPseudo_getMethod
JagPseudo_getMethodTable
JagPseudo_getObjectInstance
JagPseudo_getObjectRef
JagPseudo_setReplyFunction
JagQOPComparedToCipher
JagQOPCompatible
JagQOPToString
JagStream_JagPseudoGetBuffer
JagStream_JagPseudoGetOffset
JagStream_JagPseudoResetOffset
JagStream_getAny
JagStream_getReplyAsync
JagStream_getTypeCode
JagStream_getUnionDisc
JagStream_invoke
JagStream_local
JagStream_putAny
JagStream_putTypeCode
JagStream_putUnionDisc
JagStream_setInvoke
JagString_alloc
JagString_dup
JagTypeCode_bounds
JagTypeCode_eq
JagTypeCode_id
JagTypeCode_kind
JagTypeCode_labels
JagTypeCode_length
JagTypeCode_max
JagTypeCode_member
JagTypeCode_name
JagTypeCode_switch
JagTypeCode_type
JavaPseudoComp_JNILockMutex
JavaPseudoComp_JNIUnLockMutex
JavaPseudoComp_getMethodId
JavaPseudoComp_getSkeleton
Java_com_sybase_CORBA_PseudoCppProfile_deleteObjectRef
Java_com_sybase_CORBA_PseudoCppProfile_dupObjectRef
Java_com_sybase_CORBA_PseudoCppProfile_invoke
Java_com_sybase_CORBA_PseudoCppProfile_newObjectRef
SybHeap_adopt
SybHeap_alloc
SybHeap_allocPerm
SybHeap_calloc
SybHeap_check
SybHeap_checkAll
SybHeap_checkOff
SybHeap_checkOn
SybHeap_debugOff
SybHeap_debugOn
SybHeap_dump
SybHeap_error
SybHeap_exception
SybHeap_free
SybHeap_freeIfParent
SybHeap_init
SybHeap_initByte
SybHeap_log
SybHeap_malloc
SybHeap_parent
SybHeap_print
SybHeap_realloc
SybHeap_setCheckInterval
SybHeap_showBufferMaximumBytes
SybHeap_showFullPath
SybHeap_showSuffixMaximumBytes
SybHeap_size
SybHeap_totalSize
SybHeap_totalSizeVM
SybHeap_traceOff
SybHeap_traceOn
_Java_com_sybase_CORBA_PseudoCppProfile_setJVMVersion@12
__sybase_DLL_info@0
default_JagORB
delete_JagHashTable
delete_JagObjectRef
jag_client_dbg_stop
lookupCharset
lookupCharsetID
new_JagAny
new_JagHTTPSocket
new_JagHashTable
new_JagHashTableEx
new_JagIIOPSocket
new_JagIIOPStream
new_JagORB
new_JagObjectRef
new_JagPseudoStream
new_JagStream
new_JagStreamEx
new_JagTypeCode

Sections

.text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libjsybheap.dll
.dll windows:4 windows x86 arch:x86

cd185ae96e493c13224d6c93f6fa483f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

strcmp
getenv
sscanf
memcpy
memset
strlen
fputs
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
sprintf
abort
_iob
fputc
fflush
memcmp
vsprintf
free

kernel32

DisableThreadLibraryCalls
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection

Exports

Exports

Syb_Heap__alloc
Syb_Heap_adopt
Syb_Heap_alloc
Syb_Heap_allocFromPool
Syb_Heap_allocPool
Syb_Heap_calloc
Syb_Heap_check
Syb_Heap_checkAll
Syb_Heap_checkOff
Syb_Heap_checkOn
Syb_Heap_debugOff
Syb_Heap_debugOn
Syb_Heap_dump
Syb_Heap_error
Syb_Heap_exception
Syb_Heap_free
Syb_Heap_freeIfParent
Syb_Heap_freePool
Syb_Heap_init
Syb_Heap_initByte
Syb_Heap_log
Syb_Heap_malloc
Syb_Heap_parent
Syb_Heap_poolSize
Syb_Heap_print
Syb_Heap_realloc
Syb_Heap_setCheckInterval
Syb_Heap_setChunkSize
Syb_Heap_showBufferMaximumBytes
Syb_Heap_showFullPath
Syb_Heap_showSuffixMaximumBytes
Syb_Heap_size
Syb_Heap_totalSize
Syb_Heap_totalSizeVM
Syb_Heap_traceOff
Syb_Heap_traceOn
Syb_Heap_userData

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pbvm90.dll
.dll windows:4 windows x86 arch:x86

4ef9f03e71767ed812c5dece40984514

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libjcc

JagORB_object_to_string
JagBCD_BinaryToString
JagObjectRef_isa
JagObjectRef_str
JagObjectRef_dup
new_JagObjectRef
JagORB_init
JagString_dup
JagString_alloc
JagMemory_dump
JagMemory_traceOff
default_JagORB
JagBCD_StringToBinary
JagMemory_checkOn
JagMemory_size
JagMemory_setParent
JagMemory_log
new_JagORB
delete_JagObjectRef
JagMemory__free
JagORB_string_to_object
JagMemory__alloc
JagORB_log
JagObjectRef_narrow
new_JagStream
JagORB_async
JagStream_getReplyAsync
JagMemory_traceOn
JagMemory_checkOff

libjsybheap

ord20
ord33
ord19
ord13
ord16
ord8
ord15
ord37
ord11
ord2
ord34
ord36
ord14
ord35

msvcrt

_onexit
_initterm
_ismbclower
_ismbcupper
_tempnam
free
malloc
_iob
_splitpath
printf
setlocale
longjmp
ceil
__dllonexit
_adjust_fdiv
getenv
_beginthreadex
_endthreadex
getc
putc
fread
ftell
fseek
fwrite
setvbuf
strlen
strcpy
__CxxFrameHandler
??1type_info@@UAE@XZ
__lconv_init
?terminate@@YAXXZ
_CIasin
_CxxThrowException
rand
_setjmp3
_CIfmod
_ismbcspace
isdigit
_getcwd
_strnset
_memicmp
_strupr
_strlwr
_strnicmp
_stricmp
atof
_strdup
memmove
signal
_CIacos
memcpy
strcmp
memset
srand
strncat
memchr
_atoi64
islower
isupper
_mbspbrk
strpbrk
wcscpy
strtod
remove
abort
_ltoa
strtol
fscanf
fgets
_mbsspn
strspn
sscanf
strtoul
isxdigit
fopen
fclose
fputs
fprintf
fputc
_mbscspn
strcspn
toupper
_getsystime
localtime
_ismbbtrail
_ismbcalnum
isalnum
_ismbcalpha
isalpha
_mbscpy
_errno
_ultoa
_mbsupr
ldiv
_CIpow
_ismbcdigit
_mbsrchr
strncmp
atol
sprintf
exit
strtok
_mbstok
qsort
time
_mbsstr
strstr
_mbslwr
wcslen
isspace
strncpy
tolower
strrchr
_itoa
_except_handler3
atoi
_wcsicmp
_purecall
_mbsicmp
_mbschr
strchr
_mbscmp
_mbsbtype
mbstowcs
_ftol
modf
floor
_mbscat
wcstombs

kernel32

WaitForMultipleObjects
OpenSemaphoreA
OpenEventA
OpenMutexA
ResumeThread
SizeofResource
GetProcessTimes
GetThreadTimes
lstrlenA
GlobalUnlock
GetSystemDefaultLangID
ConnectNamedPipe
CreateNamedPipeA
WaitNamedPipeA
GetOverlappedResult
SleepEx
GetComputerNameA
CreateSemaphoreA
ReleaseSemaphore
FormatMessageA
CreateEventA
ResetEvent
SetEvent
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentProcess
GetCurrentThread
GlobalFlags
GlobalGetAtomNameA
GlobalAddAtomA
GlobalDeleteAtom
GetSystemInfo
MoveFileA
CopyFileA
RemoveDirectoryA
GetCPInfo
SetEndOfFile
ReadFile
SetFilePointer
GetFileSize
CreateProcessA
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
lstrcpyA
ReleaseMutex
CreateMutexA
CloseHandle
WaitForSingleObject
GetCurrentThreadId
GetProcAddress
GetModuleHandleA
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
GetUserDefaultLCID
FreeLibrary
IsBadWritePtr
_lclose
_lwrite
_llseek
MulDiv
GlobalSize
GlobalLock
GlobalFree
GetFullPathNameA
_hread
GlobalAlloc
GlobalReAlloc
LoadLibraryExA
lstrcatA
CreateFileA
GetTempFileNameA
GetTempPathA
lstrcpyW
lstrlenW
IsBadReadPtr
lstrcmpiA
FreeResource
LockResource
LoadResource
FindResourceA
lstrcmpA
GetVersion
AddAtomA
DeleteAtom
GetVersionExA
SearchPathA
GlobalHandle
GetProfileStringA
GetPrivateProfileStringA
_lread
FatalAppExitA
GetProfileIntA
GetStringTypeExA
GetLocalTime
GetTickCount
IsDBCSLeadByte
SetHandleCount
GetPrivateProfileIntA
WritePrivateProfileStringA
WriteProfileStringA
LocalFree
LocalUnlock
LocalLock
LocalAlloc
CreateDirectoryA
GetFileAttributesA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
SetConsoleCtrlHandler
AllocConsole
Sleep
WriteFile
DebugBreak
FindClose
FindFirstFileA
GetLogicalDrives
FindNextFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
DeleteFileA
GetLastError

user32

CreateCursor
CharLowerA
FindWindowA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DestroyMenu
ClientToScreen
ChildWindowFromPoint
IsIconic
AppendMenuA
CreatePopupMenu
CreateMenu
EnableMenuItem
GetSystemMenu
GetWindowThreadProcessId
GetMessagePos
SetMenuItemInfoA
GetMenuItemInfoA
CheckMenuItem
ModifyMenuA
IsZoomed
TranslateMDISysAccel
TranslateAcceleratorA
DrawTextExA
InsertMenuItemA
TrackPopupMenu
CreateAcceleratorTableA
GetMenuStringA
CopyImage
PostThreadMessageA
DrawIconEx
CopyIcon
LoadMenuA
DeleteMenu
DefMDIChildProcA
DefFrameProcA
DestroyAcceleratorTable
GetClassLongA
GetClipboardData
IsClipboardFormatAvailable
CharLowerBuffA
UnpackDDElParam
PackDDElParam
DlgDirSelectExA
DlgDirSelectComboBoxExA
GetTabbedTextExtentA
SetCursorPos
GetIconInfo
GetCursor
FreeDDElParam
WaitMessage
SetKeyboardState
GetKeyboardState
MsgWaitForMultipleObjects
MapDialogRect
GetMessageA
PostQuitMessage
IsChild
CreateDialogIndirectParamA
GetCursorPos
GetSysColorBrush
GetMenuState
SetParent
SystemParametersInfoA
CharUpperA
GetKeyboardLayoutList
ActivateKeyboardLayout
TranslateMessage
LoadIconA
DestroyCursor
EnumChildWindows
GetScrollPos
ReleaseCapture
SetCapture
GetKeyState
SetTimer
GetScrollInfo
GetScrollRange
ScrollWindow
KillTimer
IntersectRect
CharNextA
UnionRect
SetScrollInfo
SetScrollRange
SetScrollPos
MoveWindow
GetCapture
IsWindowEnabled
CreateIconIndirect
LoadCursorFromFileA
IsWindowVisible
MapWindowPoints
GetClassInfoA
CreateWindowExA
SetClassLongA
MessageBeep
UnregisterClassA
BringWindowToTop
InflateRect
FrameRect
InvertRect
GetWindowTextLengthA
SetWindowTextA
SetWindowWord
GetWindowWord
GetWindowLongA
BeginPaint
EndPaint
FillRect
DefWindowProcA
RegisterClassA
CreateIcon
DrawIcon
DrawFocusRect
ShowCursor
InvalidateRect
RegisterWindowMessageA
GetSystemMetrics
DestroyIcon
CheckRadioButton
GetWindowTextA
OemToCharA
CharPrevA
GetDialogBaseUnits
IsDlgButtonChecked
CheckDlgButton
GetFocus
GetDlgItemTextA
SendDlgItemMessageA
SetDlgItemTextA
EnableWindow
PeekMessageA
DispatchMessageA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetWindow
GetClassNameA
GetMenu
SetMenu
DrawMenuBar
InsertMenuA
SetRect
LoadBitmapA
UpdateWindow
WinHelpA
DialogBoxParamA
GetSysColor
GetPropA
CallWindowProcA
SetPropA
IsRectEmpty
GetActiveWindow
GetWindowDC
SetRectEmpty
SetWindowLongA
RemovePropA
ScreenToClient
PtInRect
CopyRect
GetClientRect
IsWindow
PostMessageA
GetParent
SendMessageA
LoadCursorA
SetCursor
ShowWindow
SetWindowPos
GetDesktopWindow
CreateDialogParamA
GetWindowRect
DestroyWindow
GetDlgItem
SetFocus
EndDialog
GetDC
ReleaseDC
CharUpperBuffA
wsprintfA
LoadImageA
LoadStringA
MessageBoxA
EqualRect
wvsprintfA
WindowFromPoint
OffsetRect
GetDCEx
DrawTextA
RegisterClipboardFormatA
RedrawWindow

gdi32

CreateCompatibleBitmap
GetTextMetricsA
GetBkColor
CreateSolidBrush
GetTextExtentPoint32A
Rectangle
StretchBlt
SetTextColor
BitBlt
CreateCompatibleDC
ExtTextOutA
EnumMetaFile
GetBitmapBits
SetDIBits
CreateBitmap
SetMapMode
LPtoDP
GetTextColor
SelectObject
GetDeviceCaps
SetBkColor
SetBrushOrgEx
UnrealizeObject
RestoreDC
PlayMetaFile
SetViewportExtEx
SetViewportOrgEx
SaveDC
SetStretchBltMode
DeleteMetaFile
CreateDIBitmap
GetStockObject
SetBkMode
GetObjectA
CreatePatternBrush
CloseMetaFile
DeleteDC
SetWindowOrgEx
CreateMetaFileA
CreatePen
GetDIBits
DeleteObject
CombineRgn
CreateRectRgn
GetTextExtentPointA
SetDIBitsToDevice
Polyline
SelectClipRgn
CreateRectRgnIndirect
SetROP2
CreateFontIndirectA
MoveToEx
LineTo
CreateBrushIndirect
StartPage
StartDocA
SetAbortProc
EndDoc
EndPage
AbortDoc
TextOutA
Escape
GetTextFaceA
StretchDIBits
SetBitmapDimensionEx
CreateDCA
EnumFontsA
CreateFontA
RealizePalette
SelectPalette
GetNearestColor
SetPixel
RoundRect
Ellipse
GetMapMode
DPtoLP
CreateBitmapIndirect
CreatePalette
GetSystemPaletteEntries
PlayMetaFileRecord
GetClipRgn
SetMetaFileBitsEx
GetMetaFileA
CreateHatchBrush
SetTextJustification
SetTextAlign
GetTextAlign
FrameRgn
SetWindowExtEx
PatBlt
FillRgn

comdlg32

ChooseColorA
GetSaveFileNameA
PrintDlgA
GetOpenFileNameA
CommDlgExtendedError
ChooseFontA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

ole32

CoGetMalloc
CLSIDFromString
CreateFileMoniker
CoFreeUnusedLibraries
CoCreateInstance
RegisterDragDrop
CoInitialize
CLSIDFromProgID
CoUninitialize
OleGetIconOfClass
RevokeDragDrop
CoLockObjectExternal
CoRegisterClassObject
OleDuplicateData
OleMetafilePictFromIconAndLabel
OleGetIconOfFile
ReleaseStgMedium
OleRun
OleIsRunning
OleSetContainedObject
OleDoAutoConvert
DoDragDrop
CoTaskMemFree
OleDraw
CreateBindCtx
OleLockRunning
StgCreateDocfile
StringFromCLSID
OleConvertOLESTREAMToIStorage
CoIsOle1Class
GetClassFile
OleQueryLinkFromData
OleGetClipboard
OleQueryCreateFromData
CoRegisterMessageFilter
OleSetMenuDescriptor
OleRegEnumFormatEtc
CoGetClassObject
OleCreateDefaultHandler
OleLoad
OleGetAutoConvert
WriteClassStg
OleSave
StgCreateDocfileOnILockBytes
GetHGlobalFromILockBytes
CreateILockBytesOnHGlobal
StgIsStorageILockBytes
StgOpenStorageOnILockBytes
OleCreateLinkFromData
OleCreateFromData
StgIsStorageFile
StgOpenStorage
IsAccelerator
OleInitialize
CoBuildVersion
OleUninitialize
OleFlushClipboard
OleSetClipboard
MkParseDisplayName
ProgIDFromCLSID
OleCreate
OleCreateFromFile
OleCreateLinkToFile
OleCreateLink
CreateGenericComposite
CreateItemMoniker
CoCreateGuid
CoRevokeClassObject
GetRunningObjectTable

olepro32

ord250

oleaut32

SafeArrayGetElement
GetActiveObject
QueryPathOfRegTypeLi
SysAllocStringLen
SysFreeString
VariantInit
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysStringLen
CreateTypeLi
LoadTypeLi
LoadRegTypeLi
SysAllocString
CreateErrorInfo
SetErrorInfo
SafeArrayPutElement
SafeArrayCreate
VariantCopy
VarDateFromR8
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantChangeType
GetErrorInfo

advapi32

RegDeleteValueA
RegEnumKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
DeregisterEventSource
RegEnumValueA
ReportEventA
RegSetValueA
GetUserNameA
RegCreateKeyA
InitializeSecurityDescriptor
RevertToSelf
SetSecurityDescriptorDacl
RegQueryValueExA
RegOpenKeyExA
RegisterEventSourceA
ImpersonateNamedPipeClient
RegEnumKeyA
RegFlushKey
RegDeleteKeyA

shell32

SHGetMalloc
SHBrowseForFolderA
ExtractIconExA
ExtractIconA
SHGetPathFromIDListA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

oledlg

ord4
ord9
ord5
ord1

imm32

ImmSetCompositionFontA
ImmSetConversionStatus
ImmGetConversionStatus
ImmSetOpenStatus
ImmGetOpenStatus
ImmGetContext
ImmGetCompositionStringA
ImmReleaseContext

wsock32

setsockopt
__WSAFDIsSet
ioctlsocket
getservbyname
htons
closesocket
shutdown
gethostbyname
select
ntohl
socket
WSAGetLastError
connect
WSACleanup
WSAStartup
listen
accept
bind
htonl
send
recv

msvcirt

??0ofstream@@QAE@PBDHH@Z
?openprot@filebuf@@2HB
?flush@ostream@@QAEAAV1@XZ
??6ostream@@QAEAAV0@E@Z
??6ostream@@QAEAAV0@K@Z
??6ostream@@QAEAAV0@PBD@Z
??1ios@@UAE@XZ
??1ofstream@@UAE@XZ

Exports

Exports

?emit_message@@YGXPAUjpeg_common_struct@@H@Z
?error_exit@@YGXPAUjpeg_common_struct@@@Z
?fill_input_buffer@@YGHPAUjpeg_decompress_struct@@@Z
?format_message@@YGXPAUjpeg_common_struct@@PAD@Z
?init_source@@YGXPAUjpeg_decompress_struct@@@Z
?output_message@@YGXPAUjpeg_common_struct@@@Z
?reset_error_mgr@@YGXPAUjpeg_common_struct@@@Z
?resync_to_restart@@YGHPAUjpeg_decompress_struct@@H@Z
?skip_input_data@@YGXPAUjpeg_decompress_struct@@J@Z
?term_source@@YGXPAUjpeg_decompress_struct@@@Z
AbsoluteDecimal
AddDecimal
ArrayBounds_getLowerbound
ArrayBounds_getUpperbound
ChangeSignDecimal
ClassDef_FindMatchingFunction
ClassDef_GetAncestor
ClassDef_GetIsAutoinstantiate
ClassDef_GetNestedClass
ClassDef_GetNestedClassList
ClassDef_GetNumNstClasses
ClassDef_GetNumScripts
ClassDef_GetNumVariables
ClassDef_GetRoutine
ClassDef_GetRoutineList
ClassDef_GetVariable
ClassDef_GetVariableList
ClassDef_GetWithInClass
ClassDefinitionObject_destroyObject
CompareDecimal
ConvAsciiToDecimal
ConvDecToDouble
ConvDecToFloat
ConvDecToInt
ConvDecToLong
ConvDecToLonglong
ConvDecToUns
ConvDecToUnsLong
ConvDecimalToAscii
ConvDoubleToDecimal
ConvDoubleToDecimalRound
ConvFloatToDecimal
ConvIntToDecimal
ConvLongToDecimal
ConvLonglongToDecimal
ConvUnsLongToDecimal
ConvUnsToDecimal
CopyDateTimeToPSH_TIME
CopyDateToPSH_TIME
CopyDecimalToPSH_DEC
CopyTimeToPSH_TIME
CreateBlob
CreateBlobFromBytes
CreateBlobFromLPTSTR
CreateBlobWithSize
CreateDateFromLPTSTR
CreateDateFromPSH_TIME
CreateDateFromString
CreateDateTimeFromLPTSTR
CreateDateTimeFromPSH_TIME
CreateDateTimeFromString
CreateDebugLog
CreateDecimal
CreateDecimalFromDouble
CreateDecimalFromLPTSTR
CreateDecimalFromLong
CreateDecimalFromPSH_DEC
CreateDynamicVector
CreateDynamicVectorFromArray
CreateDynamicVectorWithSize
CreateEnumUnknown
CreateFileType
CreateList
CreateListFromArray
CreateLogManager
CreateNTEventLog
CreatePBIArgument
CreatePBIArray
CreatePBIArrayBounds
CreatePBIArrayBoundsList
CreatePBIArrayOfObject
CreatePBIArrayRuntime
CreatePBIBlob
CreatePBIBlobRuntime
CreatePBIClassDef
CreatePBIClassDefList
CreatePBIContextRuntime
CreatePBIDate
CreatePBIDateRuntime
CreatePBIDateTime
CreatePBIDateTimeRuntime
CreatePBIDateToday
CreatePBIDecimal
CreatePBIDecimalRuntime
CreatePBIException
CreatePBIGeneratorRegistry
CreatePBIInstanceByID
CreatePBIInstanceByName
CreatePBIInstanceRuntime
CreatePBIScriptDef
CreatePBIScriptDefList
CreatePBISession
CreatePBISessionRuntime
CreatePBIString
CreatePBIStringList
CreatePBITime
CreatePBITimeNow
CreatePBITimeRuntime
CreatePBITypeDef
CreatePBIUnboundedArray
CreatePBIUnboundedArrayOfObject
CreatePBIValue
CreatePBIValueRuntime
CreatePBIVariableDefList
CreateString
CreateStringBuffer
CreateStringBufferFromLPTSTR
CreateStringDictionary
CreateStringDictionaryWithFlags
CreateStringDictionaryWithSize
CreateTimeFromLPTSTR
CreateTimeFromPSH_TIME
CreateTimeFromString
CreateUlongDictionary
CreateUlongDictionaryWithFlags
CreateUlongDictionaryWithSize
DBGVW_AddINT
DBGVW_AddLPTSTR
DBGVW_DlgProc
DBGVW_Remove
DBGVW_Show
DBI_AddSyntaxLine
DBI_AlterForeignKeySyntax
DBI_AlterPrimaryKeySyntax
DBI_AttrInfo
DBI_BindSelectBuffer
DBI_BuildComboList
DBI_BuildRPCAlias
DBI_CanIdentifySystemProcs
DBI_Cancel
DBI_CleanUpColumnList
DBI_ComboList
DBI_Command_Tran
DBI_Commit
DBI_Connect
DBI_CreateForeignKeySyntax
DBI_CreateNoLogPKeySyntax
DBI_CreatePrimaryKeySyntax
DBI_CtrlChars2Text
DBI_CursorConnect
DBI_DBHandle
DBI_DWCursorConnect
DBI_DataTypeListString
DBI_DatabaseInfo
DBI_DatabaseLoad
DBI_DateString
DBI_DecimalString
DBI_DeleteDir
DBI_DeleteProcDir
DBI_DeleteSyntaxList
DBI_DelimitReservedWord
DBI_Describe
DBI_DescribeExtra
DBI_DescribeInput
DBI_DescribeOutput
DBI_DialogBoxCenter
DBI_DialogConnect
DBI_Disconnect
DBI_DoCompare
DBI_DoCompareFirst
DBI_DoCompareFirstWithSkip
DBI_DoubleString
DBI_DoubleTheQuotes
DBI_DummyConnect
DBI_DynamicBind
DBI_EditStyleHash
DBI_EditStyleInfo
DBI_EditUpdate
DBI_EndSyntax
DBI_ErrorSQL
DBI_ExecPlan
DBI_Execute
DBI_FetchFirst
DBI_FetchLast
DBI_FetchNext
DBI_FetchPrev
DBI_FetchRandom
DBI_FetchRelative
DBI_FillBlanks
DBI_FindComboListString
DBI_FindComboString
DBI_FinishLine
DBI_FormatHash
DBI_FreeColBlkList
DBI_FreeDBInterface
DBI_FreeMem
DBI_FreeParmList
DBI_FreePrepList
DBI_FreeValidHash
DBI_FreeWhereList
DBI_GetBlobConnect
DBI_GetColumnExpression
DBI_GetDriverObjects
DBI_GetForeignKYOptions
DBI_GetIdentityValue
DBI_GetNextResultSet
DBI_GetPBTypeString
DBI_GetParm
DBI_GetSelectInfo
DBI_GetSelectItems
DBI_GetTimestamp
DBI_LibraryName
DBI_LoadDBInterface
DBI_LoadString
DBI_LogIn
DBI_LookForKeyWord
DBI_MPowerFetchNext
DBI_MatchCombo
DBI_MatchString
DBI_NewDBParm
DBI_NumericString
DBI_OuterJoinSyntax
DBI_OuterJoinSyntax_ANSI
DBI_PBC_DialogBox
DBI_PBC_DialogBoxParam
DBI_PBC_ShowWindow
DBI_PBToArgs
DBI_PBToSQL
DBI_Parse
DBI_ParseBasicSelect
DBI_ParseColList
DBI_ParseColSubset
DBI_ParseFrom
DBI_ParseIdentifier
DBI_ParseKeyWords
DBI_ParseParms
DBI_ParseWhere
DBI_Prepare
DBI_PrepareWithParms
DBI_PrimaryKeyReferences
DBI_ProcDescribe
DBI_ProcInfo
DBI_ProcPrepare
DBI_ProcText
DBI_PubProcList
DBI_PubProcRPCSyntax
DBI_RPC_DoCall
DBI_ReadBlob
DBI_RegisterVendor
DBI_ReleaseInputParms
DBI_ReplaceDbParm
DBI_RollBack
DBI_Rows
DBI_RuntimeExecute
DBI_RuntimeFetchNext
DBI_SQLCacheBegin
DBI_SQLCacheDiscardEntry
DBI_SQLCacheEnd
DBI_SQLCacheFlushEntries
DBI_SQLCacheMakeSQLStatementAvailable
DBI_SQLCacheRegisterDescribe
DBI_SQLCacheRegisterSQLStatement
DBI_SQLCacheRequestDescribe
DBI_SQLCacheRequestSqlStatement
DBI_SQLCacheSetSelectCacheSize
DBI_SQLCacheStatistics
DBI_SearchReplace
DBI_SquishSyntax
DBI_StartSyntax
DBI_StartTran
DBI_Step
DBI_SystemDatabaseLoad
DBI_TableExplode
DBI_TableLoad
DBI_TerminateSQL
DBI_Text2CtrlChars
DBI_ThreadSafeEnabled
DBI_UnRegisterVendor
DBI_UniqueKey
DBI_ValidHash
DBI_ViewText
DBI_WriteBlob
DBI_YesTrue1
DPBApplicationNameGet
DPBApplicationNameSet
DPBConnectStringGet
DPBConnectStringSet
DPBConnectToRemote
DPBCreateConnectObject
DPBCreateInstance
DPBCreateInstanceFromProxy
DPBDestroyConnectObject
DPBDisconnectRemote
DPBDriverErrorCodeGet
DPBDriverErrorStrGet
DPBDriverNameGet
DPBDriverNameSet
DPBGetConnectionInfo
DPBGetSessionInfo
DPBLocationNameGet
DPBLocationNameSet
DPBLookup
DPBORB_Create
DPBORB_Destroy
DPBORB_Init
DPBORB_ObjectToString
DPBORB_ResolveInitialReferences
DPBORB_StringToObject
DPBOptionsGet
DPBOptionsSet
DPBPasswordGet
DPBPasswordSet
DPBRemoteServerStopListen
DPBRemoteServerStopUserConnection
DPBTraceGet
DPBTraceSet
DPBUserIDGet
DPBUserIDSet
DP_ApplyDDLSyntax
DP_ArgdProc
DP_BlocksToText
DP_BuildCreateBlks
DP_BuildCreateSyntax
DP_BuildDropSyntax
DP_BuildNdxBlks
DP_BuildNdxSyntax
DP_BuildPrimaryKeyBlks
DP_BuildPrimaryKeySyntax
DP_BuildTablename
DP_CheckKeytype
DP_CreateTable
DP_DestroyBindBuffer
DP_DestroyColumnList
DP_DestroyCreateBlks
DP_DestroyDPBlob
DP_DestroyDPBlobList
DP_DestroyDPinfo
DP_DestroyDPtable
DP_DestroySyntax
DP_ExecuteError
DP_ExecuteSelect
DP_MatchPBtype
DP_MatchTypeName
DP_Parsecname
DP_Parsetname
DP_RTCancelPipe
DP_RTClosePipe
DP_RTCreatePipe
DP_RTRepairPipe
DP_RTRunPipe
DP_SetBlobs
DP_SetDefaultBind
DP_SetDefaultText
DP_TableStatus
DP_TextToBlocks
DP_TransferData
DP_dwCloseError
DP_dwCreate
DP_dwDestroy
DP_genSQLData
DP_getKeyDef
DP_getTblDef
DP_setKeys
DecimalPrecision
DivideDecimal
DivideDecimalAndRound
DivideDecimalAndTruncate
DllCanUnloadNow
DllGetClassObject
DrawPsppObject
EnumerationDefinition_EnumUpperBound
EnumerationDefinition_GetEnumeration
EnumerationDefinition_GetEnumerationList
EnumerationItemDefinition_getName
EnumerationItemDefinition_getValue
FNX_DataWindowDescribe
FNX_DataWindowGetBandAtPointer
FNX_DataWindowGetChild
FNX_DataWindowGetCurrentColumn
FNX_DataWindowGetCurrentRow
FNX_DataWindowGetItemDateTime
FNX_DataWindowGetItemNumber
FNX_DataWindowGetItemString
FNX_DataWindowGetObjectAtPointer
FNX_DataWindowGetRowCount
FNX_DataWindowSaveAs
FNX_DataWindowSelectRow
FNX_DataWindowSetAllEvents
FNX_DataWindowSetCurrentColumn
FNX_DataWindowSetCurrentRow
FNX_IsPowerObject
FNX_ObjectClassName
FNX_ObjectIUnknown
FNX_RteGetCharFormat
FNX_RteGetCurrentBand
FNX_RteGetLine
FNX_RteGetSelection
FNX_RteLineCount
FNX_RteLineLength
FNX_RteSetCurrentBand
FNX_RteSetSelection
FN_BeginTrace
FN_CheckBoxWnd
FN_CloseTrace
FN_CommandButtonWnd
FN_ConvertUnits
FN_CtlColor
FN_CtlCreate
FN_CtlCreateAll
FN_CtlFree
FN_CtlFreeAll
FN_CtlRecreate
FN_CtlResCreate
FN_CtlResFree
FN_DWGetHandle
FN_DataStoreWnd
FN_DataWindowChange
FN_DataWindowWnd
FN_DisableEventTrace
FN_DrawLine
FN_DrawRectangle
FN_DropDownEditWnd
FN_DropDownListWnd
FN_DropDownMainWnd
FN_DumpTrace
FN_EditMaskWnd
FN_EnableEventTrace
FN_EndTrace
FN_EvtTimerWnd
FN_FieldGetAppString
FN_FieldGetCtl
FN_FieldGetDS
FN_FieldGetDW
FN_FieldGetMN
FN_FieldGetUO
FN_FieldGetWN
FN_FieldItemUpdate
FN_FieldUpdate
FN_FileDlgHook
FN_FileGetHandle
FN_FormatData
FN_GetApplicationObInst
FN_GetDataStoreHWNDUsage
FN_GetExeInstance
FN_GraphWnd
FN_GroupBoxWnd
FN_HScrollBarWnd
FN_HelpWnd
FN_Init
FN_LibraryEntryList
FN_ListBoxWnd
FN_ListViewCompare
FN_ListViewCompare2
FN_ListViewDeleteItem
FN_ListViewGetDispInfo
FN_ListViewWnd
FN_LookupEventDecl
FN_MDIClientWnd
FN_MailIsAvailable
FN_MailWithAttachment
FN_MenuBarCreate
FN_MinimumVersion
FN_MultiLineEditWnd
FN_OleControlWnd
FN_OpenTrace
FN_OwnerDraw
FN_OwnerInit
FN_PictureWnd
FN_PipelineNotify
FN_PluginPollLoop
FN_PluginStart
FN_PluginStop
FN_PostedRoutine
FN_RadioButtonWnd
FN_ResCreateBitmap
FN_ResCreateBitmap3D
FN_ResCreateBitmapFromIcon
FN_ResDestroy
FN_ResGetBitmapID
FN_ResGetBitmapName
FN_ResGetBitmapTable
FN_ResGetColor
FN_ResGetCursorID
FN_ResGetCursorTable
FN_ResGetIconID
FN_ResGetIconTable
FN_RichTextEditWnd
FN_RtActive
FN_RtActiveWnd
FN_RtBroadcast
FN_RtHandle
FN_RtMenuInfo
FN_RtRespCnt
FN_RtSuspend
FN_RtSuspended
FN_RtTerminate
FN_RtWndAccel
FN_RtWndInfo
FN_RtWndMenu
FN_RtWndMenuSelect

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 250KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 442KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
uninst.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 64KB

.rsrc Size: 5KB - Virtual size: 4KB

1ba6926a1ee4e4cda118768081f528d5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcr80

Exports

Exports

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 512B - Virtual size: 503B

.data Size: 512B - Virtual size: 828B

.rsrc Size: 512B - Virtual size: 428B

.reloc Size: 512B - Virtual size: 166B

135de77644e2add2fd9dd8176740e7e0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 992B

.rdata Size: 1024B - Virtual size: 839B

.data Size: 512B - Virtual size: 336B

.reloc Size: 512B - Virtual size: 220B

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 64KB

.rsrc
Size: 5KB - Virtual size: 4KB

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 503B

.data
Size: 512B - Virtual size: 828B

.rsrc
Size: 512B - Virtual size: 428B

.reloc
Size: 512B - Virtual size: 166B

.text
Size: 1024B - Virtual size: 992B

.rdata
Size: 1024B - Virtual size: 839B

.data
Size: 512B - Virtual size: 336B

.reloc
Size: 512B - Virtual size: 220B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 100B

.reloc
Size: 1024B - Virtual size: 520B

CODE
Size: 13KB - Virtual size: 13KB

DATA
Size: 4KB - Virtual size: 4KB

BSS
Size: - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 906B

.edata
Size: 512B - Virtual size: 89B

.reloc
Size: 1024B - Virtual size: 880B

.rsrc
Size: 512B - Virtual size: 512B

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 9KB - Virtual size: 10KB

.rsrc
Size: 3KB - Virtual size:

.text
Size: 180KB - Virtual size: 180KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 172KB - Virtual size: 176KB

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 19KB - Virtual size: 19KB