53ddf74c9e800d3d6acbf81ee654d442_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

53ddf74c9e800d3d6acbf81ee654d442_JaffaCakes118
Size

5.4MB
MD5

53ddf74c9e800d3d6acbf81ee654d442
SHA1

59831e9fee6f8d03a2027d6e50fd8fac9129fe9f
SHA256

83fac430a208f00b030009a873464c0159133dc733d60ec5a7c166201de1fad3
SHA512

5699ceb97aed5b91b08cabd2ed3227857c696a01bec29a184b691bd3de6803a2893fed5a5c2d84df53a7fa7e800797e51ac968422fc794e2343803122c32773e
SSDEEP

98304:G6mdfwqRdWBKfPKVK8N4xdH5TEvScjvDAiWA5Ohz9pTaP7tn07eTsFnFbxX8BE1/:GlwqDWBK6VK8WFEvXPAG49Z/q2FbxX9

Score

7^/10

upx aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/运行程序.exe	aspack_v212_v242

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/keygen.exe	upx

Unsigned PE 25 IoCs

Checks for missing Authenticode signature.

resource
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulk Mailer.exe
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/Address Book.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/Appearance Pak.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/Browser Plugin.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHBase649381.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHIconLib4101.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHInterfaces4701.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHLocation5721.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHMD59381.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHSpelling1601.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHStringArray4701.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHTLEncryption6001.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHTLStreams6001.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHTypes6001.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHUUCoderStream9381.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHWindowSplitter7201.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/Internet Encodings.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/MySQLPlugin600.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/PostgreSQLPlugin600.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/RegEx.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/SSLSocket.dll
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/keygen.exe
unpack002/out.upx
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/unins000.exe
unpack001/maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/运行程序.exe

Files

53ddf74c9e800d3d6acbf81ee654d442_JaffaCakes118
.rar
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/09年全新VIP课程下载【点击下载】.url
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/09年培训班大暴光.txt
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/52z.ini
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/History.txt
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/License.rtf
.rtf
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulk Mailer.exe
.exe windows:4 windows x86 arch:x86

941cd493112e8d408acde59b18d1fc3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\2008r5d\REALbasic\REALbasic Visual Studio\release\X86RunHoudini.pdb

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

comctl32

ord17
ImageList_Create
ImageList_Destroy
InitCommonControlsEx
ImageList_Add

winmm

midiOutOpen
midiOutShortMsg
midiOutClose
mciSendStringA
mciSendStringW

iphlpapi

GetAdaptersInfo

kernel32

GetEnvironmentVariableW
GetCurrentProcess
ExitProcess
OutputDebugStringA
GetUserDefaultLangID
CreateEventW
SwitchToFiber
CreateFiber
ConvertThreadToFiber
DeleteFiber
GetACP
IsValidCodePage
MulDiv
GetVersion
GetLogicalDrives
InterlockedIncrement
InterlockedDecrement
ClearCommError
ResetEvent
GetCommState
WaitForSingleObject
SetCommBreak
GetCommProperties
EscapeCommFunction
ClearCommBreak
SetCommState
SetCommTimeouts
CreateEventA
GetCommModemStatus
GetOverlappedResult
GetCommandLineA
GetCommandLineW
HeapFree
VirtualProtect
VirtualFree
GetProcessHeap
IsBadReadPtr
GetSystemDirectoryA
GetModuleHandleA
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
GetSystemTimeAsFileTime
HeapReAlloc
GetFileType
SetStdHandle
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
GetStdHandle
HeapDestroy
HeapCreate
GetConsoleCP
GetConsoleMode
SetHandleCount
RtlUnwind
SetEnvironmentVariableW
OutputDebugStringW
ExpandEnvironmentStringsW
WideCharToMultiByte
GetModuleFileNameA
LoadLibraryW
VirtualAlloc
_lopen
_llseek
_lread
_lclose
lstrcpyA
LoadResource
FindResourceA
LockResource
CreateDirectoryW
GetCurrentThread
GetFileAttributesW
DeleteFileW
GetLongPathNameW
GetLogicalDriveStringsW
GetWindowsDirectoryW
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
FindFirstFileW
RemoveDirectoryW
SetCurrentDirectoryW
GetShortPathNameW
CopyFileW
GetFileTime
FindNextFileW
GetSystemDirectoryW
FindClose
SetFileTime
SetFileAttributesW
MoveFileW
GetCurrentDirectoryW
GlobalSize
GlobalFree
GlobalAlloc
GlobalReAlloc
CreateFileA
GetCurrentProcessId
CompareFileTime
FileTimeToLocalFileTime
GetTimeFormatA
SystemTimeToFileTime
GetTimeZoneInformation
FileTimeToSystemTime
GetLocalTime
LocalFileTimeToFileTime
GetDateFormatA
GetSystemTime
TlsGetValue
GetFileSize
GetTempFileNameW
CloseHandle
GetLastError
WriteFile
GetTempPathW
FlushFileBuffers
CreateFileW
ReadFile
SetEndOfFile
SetFilePointer
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
GlobalUnlock
GlobalLock
LoadLibraryA
Sleep
GetVersionExA
GetProcAddress
GetLocaleInfoW
MultiByteToWideChar
GetUserDefaultLCID
FreeLibrary
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
GetLocaleInfoA
IsDBCSLeadByteEx
GetStringTypeExA
CompareStringW
CompareStringA
GetModuleHandleW
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
HeapAlloc

user32

PostMessageA
RegisterWindowMessageA
TrackMouseEvent
GetFocus
GetMenuState
TranslateMDISysAccel
GetWindow
IsZoomed
GetTopWindow
BringWindowToTop
AdjustWindowRect
GetSystemMenu
GetClassInfoW
EnumChildWindows
FrameRect
VkKeyScanA
GetMenuItemID
SetMenuItemInfoW
CheckMenuItem
DrawMenuBar
CreateMenu
GetMenuItemCount
CopyRect
GetKeyState
GetPropA
EnableWindow
RemovePropA
SetWindowTextW
GetMessagePos
SetPropA
GetMenuStringW
GetMenuItemInfoW
GetSubMenu
RegisterClipboardFormatA
OpenClipboard
IsClipboardFormatAvailable
wsprintfA
DragDetect
GetClassNameA
ValidateRect
InvalidateRgn
SetParent
CreateWindowExW
BeginPaint
EndPaint
UpdateWindow
ShowCursor
EnumDisplayMonitors
GetMonitorInfoA
RegisterClassA
SetTimer
KillTimer
WindowFromPoint
ReleaseCapture
DispatchMessageW
GetMessageW
SetCapture
RegisterClassW
MsgWaitForMultipleObjectsEx
SystemParametersInfoA
DrawFrameControl
GetActiveWindow
FindWindowW
GetMenu
CreateWindowExA
ChildWindowFromPointEx
DestroyWindow
CreateIconIndirect
DefWindowProcA
RedrawWindow
DestroyCursor
CreateCursor
LoadImageA
GetWindowTextW
GetWindowTextLengthA
MessageBoxW
ScreenToClient
MoveWindow
MapVirtualKeyA
GetKeyNameTextW
CreateIconFromResource
CreateIconFromResourceEx
SetClipboardData
GetClipboardData
EmptyClipboard
DrawIcon
GetSysColorBrush
GetWindowDC
DrawFocusRect
GetSystemMetrics
DrawTextW
LoadIconA
InvertRect
DestroyIcon
GetIconInfo
LoadCursorFromFileW
SendMessageW
GetParent
SetWindowPos
FillRect
MessageBoxA
EnumWindows
PeekMessageA
TranslateMessage
SetForegroundWindow
DispatchMessageA
IsWindowVisible
GetWindowRect
ClientToScreen
GetClientRect
GetForegroundWindow
TrackPopupMenu
GetCursorPos
CreatePopupMenu
CallWindowProcW
DefWindowProcW
CreateMDIWindowW
IsIconic
SetScrollRange
GetScrollRange
SetScrollInfo
GetScrollPos
GetScrollInfo
SetScrollPos
SetWindowLongA
GetWindowLongA
PeekMessageW
DrawEdge
GetWindowLongW
DefFrameProcW
ReleaseDC
SetWindowLongW
GetDC
DefMDIChildProcW
SendMessageA
GetDoubleClickTime
MessageBeep
SetRect
ScrollWindow
OffsetRect
CloseClipboard
InvalidateRect
InsertMenuW
EnableMenuItem
DeleteMenu
ShowWindow
DestroyMenu
SetFocus
WindowFromDC
CharLowerBuffA
CharUpperBuffA
GetAsyncKeyState
SetMenu
GetMessageTime
SetCursor
LoadCursorA
GetSysColor
DrawIconEx

gdi32

CreateDIBitmap
Polygon
SetTextAlign
SetBrushOrgEx
CloseMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
CreateMetaFileW
EnumFontsW
EnumFontFamiliesExW
CreateRectRgn
CombineRgn
CreateSolidBrush
GetFontLanguageInfo
Ellipse
MoveToEx
GetClipRgn
GetPixel
Rectangle
SetTextColor
RoundRect
GetTextMetricsA
LineTo
SelectClipRgn
CreatePatternBrush
SetBkMode
SetPixelV
GetTextExtentPoint32W
CreateBitmap
GetTextMetricsW
GetEnhMetaFileA
GetObjectA
DeleteEnhMetaFile
DeleteMetaFile
GetEnhMetaFileHeader
GetMetaFileA
CreateFontIndirectA
SetViewportOrgEx
ExcludeClipRect
SetMapMode
CreateFontW
CreateBrushIndirect
SetAbortProc
EndDoc
CreateICA
SetViewportExtEx
StartPage
SetWindowExtEx
EndPage
StartDocA
GetStockObject
CreateDCA
StretchDIBits
BitBlt
SetDIBitsToDevice
SelectPalette
DeleteObject
SelectObject
SetStretchBltMode
CreateCompatibleDC
DeleteDC
GetDIBits
CreatePalette
GetSystemPaletteEntries
CreateDIBSection
EnumEnhMetaFile
StretchBlt
CreateCompatibleBitmap
RealizePalette
CreatePen
TranslateCharsetInfo
GetDeviceCaps

comdlg32

GetSaveFileNameW
GetOpenFileNameW
ChooseColorA
PageSetupDlgA
PrintDlgA

advapi32

DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegDeleteKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumValueW
RegQueryValueExW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
OpenThreadToken
MapGenericMask
GetFileSecurityW
RevertToSelf
ImpersonateSelf
AccessCheck
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA

shell32

DragFinish
DragQueryFileW
Shell_NotifyIconW
SHGetDesktopFolder
SHFileOperationW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHBrowseForFolderW
ShellExecuteW
DragAcceptFiles

ole32

CLSIDFromProgID
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromString
CoTaskMemFree
CoGetClassObject
OleUninitialize
OleInitialize
CoTaskMemAlloc
RegisterDragDrop
RevokeDragDrop
DoDragDrop

oleaut32

OleCreatePictureIndirect
SysFreeString
SysAllocString
OleLoadPicturePath

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 220KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 264KB - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/Address Book.dll
.dll windows:4 windows x86 arch:x86

71a90e9452d3040a947a6b9fe5523598

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\2008r5d\REALbasic\REALbasic Visual Studio\release\Address Book.pdb

Imports

kernel32

HeapAlloc
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

REALPluginMain

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/Appearance Pak.dll
.dll windows:4 windows x86 arch:x86

9c0860f70c7fd3f4151f9b5db89acf3c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\2008r5d\REALbasic\REALbasic Visual Studio\release\Appearance Pak.pdb

Imports

kernel32

GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
WriteConsoleW
GetLocaleInfoA
CreateFileA
CloseHandle
FlushFileBuffers
FreeLibrary
LoadLibraryA
GetProcAddress
WideCharToMultiByte
IsValidCodePage
GetACP
MultiByteToWideChar
GetLastError
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
GetVersionExA
SetFilePointer
Sleep
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
LCMapStringW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RaiseException
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetStringTypeA
GetStringTypeW

user32

GetKeyState
CreatePopupMenu
AppendMenuA
AppendMenuW
ClientToScreen
TrackPopupMenu
DestroyMenu
SetRect
GetSysColor
InflateRect
FrameRect
GetWindowRect
ScreenToClient
FillRect
OffsetRect
DrawTextW
DrawTextA
DrawFocusRect
GetParent
GetClassNameA

gdi32

CreateSolidBrush
GetStockObject
LineTo
CreatePen
SelectObject
MoveToEx
DeleteObject
CreateRectRgn
GetClipRgn
SelectClipRgn
CreateFontA
GetTextMetricsA
GetTextExtentPoint32W
GetTextExtentPoint32A
SetBkMode
SetTextAlign
SetTextColor
Polygon
SetPixelV

Exports

Exports

REALPluginMain

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/Browser Plugin.dll
.dll windows:4 windows x86 arch:x86

174afd58029ae44d1928cfb082dee19f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\2008r5d\REALbasic\REALbasic Visual Studio\release\Browser Plugin.pdb

Imports

kernel32

OutputDebugStringA
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetLastError
GetACP
IsValidCodePage
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
GetCPInfo
GetOEMCP
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
CloseHandle
FlushFileBuffers

Exports

Exports

REALPluginMain

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHBase649381.dll
.dll windows:4 windows x86 arch:x86

9c95343b1cd26e48917d476da029794a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
ExitProcess

user32

MessageBoxA

Exports

Exports

REALPluginMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 269B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.exc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 514B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 78B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHIconLib4101.dll
.dll windows:4 windows x86 arch:x86

d14d6bb479a21b486ba840f805f98d82

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetVersion
GetProcAddress
FreeLibrary
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GlobalAlloc
GlobalFree

shell32

SHGetFileInfoA

user32

DestroyIcon
DrawIconEx
MessageBoxA

Exports

Exports

REALPluginMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 269B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.exc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHInterfaces4701.dll
.dll windows:4 windows x86 arch:x86

58f69f0d2f0d0086f343348c5cfbb504

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

REALPluginMain

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHLocation5721.dll
.dll windows:4 windows x86 arch:x86

8e347849119ca643010352668d5f9ee5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

GetUserNameA

kernel32

LoadLibraryA
GetProcAddress
FreeLibrary
GetComputerNameA
GetTimeZoneInformation
GetUserDefaultLCID
GetSystemDefaultLCID
GetLocaleInfoA
GetVersionExA
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
DuplicateHandle
GetLastError
GetStdHandle
InitializeCriticalSection
DeleteCriticalSection
FindFirstFileA
GetFileAttributesA
FindNextFileA
FindClose
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
CloseHandle
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GlobalAlloc
GlobalFree
ExitProcess
SetFilePointer
WriteFile
ReadFile
DeleteFileA

user32

MessageBoxA

Exports

Exports

REALPluginMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.exc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHMD59381.dll
.dll windows:4 windows x86 arch:x86

9c95343b1cd26e48917d476da029794a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
ExitProcess

user32

MessageBoxA

Exports

Exports

REALPluginMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 353B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.exc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 514B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHSpelling1601.dll
.dll windows:4 windows x86 arch:x86

9c95343b1cd26e48917d476da029794a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
ExitProcess

user32

MessageBoxA

Exports

Exports

REALPluginMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 269B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.exc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 514B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHStringArray4701.dll
.dll windows:4 windows x86 arch:x86

fe19a1310d59d5d8a7defcd18d9f04a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetLastError
HeapFree
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

REALPluginMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHTLEncryption6001.dll
.dll windows:4 windows x86 arch:x86

58f69f0d2f0d0086f343348c5cfbb504

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

REALPluginMain

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHTLStreams6001.dll
.dll windows:4 windows x86 arch:x86

58f69f0d2f0d0086f343348c5cfbb504

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

REALPluginMain

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHTypes6001.dll
.dll windows:4 windows x86 arch:x86

58f69f0d2f0d0086f343348c5cfbb504

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

REALPluginMain

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHUUCoderStream9381.dll
.dll windows:4 windows x86 arch:x86

7bb4a02c90dfa067a41df726753f51c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetLastError
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
MultiByteToWideChar
ReadFile
CloseHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
HeapSize
GetLocaleInfoA
SetEndOfFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Exports

Exports

REALPluginMain

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/EHWindowSplitter7201.dll
.dll windows:4 windows x86 arch:x86

cbf37c48a113076ba62c01411dd02f70

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetTickCount
HeapAlloc
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetLastError
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
LoadLibraryA
HeapSize
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetLocaleInfoA

user32

GetWindowRect
GetParent
GetClientRect
GetDoubleClickTime
GetDC
GetAsyncKeyState
ReleaseDC
GetCursorPos
WindowFromDC
ClipCursor

gdi32

LineTo
SetPixel
DeleteObject
SelectObject
Rectangle
CreatePen
SetROP2
GetStockObject
MoveToEx

Exports

Exports

REALPluginMain

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/Internet Encodings.dll
.dll windows:4 windows x86 arch:x86

71a90e9452d3040a947a6b9fe5523598

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\2008r5d\REALbasic\REALbasic Visual Studio\release\Internet Encodings.pdb

Imports

kernel32

HeapAlloc
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

REALPluginMain

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/MySQLPlugin600.dll
.dll windows:4 windows x86 arch:x86

d1e3383aa92f3b93dbe3ec9a6163eed1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

inet_addr
WSAStartup
WSACleanup
gethostbyname
send
recv
getpeername
shutdown
closesocket
setsockopt
select
__WSAFDIsSet
inet_ntoa
getservbyname
socket
WSAGetLastError
ioctlsocket
htons
connect
ntohs

kernel32

GetLocaleInfoW
SetEndOfFile
GetCurrentProcessId
GetTickCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
LoadLibraryA
GetSystemInfo
VirtualProtect
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
VirtualQuery
CloseHandle
SetNamedPipeHandleState
WaitNamedPipeA
CreateFileA
GetLastError
UnmapViewOfFile
WaitForSingleObject
SetEvent
MapViewOfFile
OpenFileMappingA
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
ReadFile
WriteFile
WaitForMultipleObjects
DeleteCriticalSection
TlsFree
InitializeCriticalSection
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedIncrement
CreateSemaphoreA
GetFileAttributesExA
QueryPerformanceCounter
QueryPerformanceFrequency
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
OpenEventA
TerminateProcess
RtlUnwind
RaiseException
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
ExitProcess
SetEnvironmentVariableW
GetCurrentProcess
HeapFree
WideCharToMultiByte
GetTimeZoneInformation
SetStdHandle
GetFileType
GetSystemTimeAsFileTime
HeapReAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
SetLastError
SetUnhandledExceptionFilter
LCMapStringA
MultiByteToWideChar
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetFilePointer
FlushFileBuffers
GetCPInfo
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
HeapSize
InterlockedExchange

advapi32

CryptAcquireContextA
CryptReleaseContext
RegOpenKeyExA
RegEnumValueA
RegCloseKey
CryptGenRandom

Exports

Exports

REALPluginMain

Sections

.text
Size: 348KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 984KB - Virtual size: 994KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/PostgreSQLPlugin600.dll
.dll windows:4 windows x86 arch:x86

a9433aada287e4f0ccd502711fceeb57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

inet_ntoa
htons
select
ntohl
WSAStartup
getsockopt
getsockname
socket
htonl
send
WSASetLastError
recv
WSACleanup
closesocket
setsockopt
WSAGetLastError
connect
gethostbyname
ntohs

kernel32

LoadLibraryExA
FormatMessageA
SetLastError
GetCurrentDirectoryA
HeapCreate
GetFullPathNameA
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
SetEndOfFile
GetTimeZoneInformation
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
LoadLibraryA
InterlockedExchange
InitializeCriticalSection
VirtualQuery
RtlUnwind
RaiseException
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
HeapReAlloc
GetLastError
ReadFile
CloseHandle
WriteFile
GetProcAddress
GetModuleHandleA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
DeleteCriticalSection
HeapDestroy
VirtualFree
VirtualAlloc
IsBadWritePtr
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
FlushFileBuffers
SetFilePointer
SetStdHandle
HeapSize
GetStringTypeA
GetStringTypeW
GetCPInfo
GetLocaleInfoA
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr
VirtualProtect
GetSystemInfo

advapi32

GetUserNameA

shell32

SHGetFolderPathA

Exports

Exports

REALPluginMain

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/RegEx.dll
.dll windows:4 windows x86 arch:x86

94ec982aec9490d794cdfba4f176e862

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\2008r5d\REALbasic\REALbasic Visual Studio\release\RegEx.pdb

Imports

kernel32

HeapAlloc
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSection
RtlUnwind
LoadLibraryA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

Exports

Exports

REALPluginMain

Sections

.text
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/MaxBulkMailer Libs/SSLSocket.dll
.dll windows:4 windows x86 arch:x86

6a83dcdfeb60f4599617805e2d78e593

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

DeregisterEventSource
RegisterEventSourceA
ReportEventA

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
DeleteDC
DeleteObject
GetBitmapBits
GetDeviceCaps
GetObjectA
SelectObject

kernel32

AddAtomA
CloseHandle
CreateMutexA
CreateSemaphoreA
FindAtomA
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetAtomNameA
GetCurrentProcessId
GetCurrentThreadId
GetFileType
GetLastError
GetProcAddress
GetStdHandle
GetTickCount
GetVersion
GetVersionExA
GlobalMemoryStatus
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
QueryPerformanceCounter
ReleaseMutex
ReleaseSemaphore
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject

msvcrt

_getch
_stat
__dllonexit
__mb_cur_max
_errno
_iob
_isctype
_pctype
_setmode
_vsnprintf
abort
fclose
fflush
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
gmtime
localtime
malloc
memchr
memcpy
memmove
memset
qsort
realloc
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strtol
strtoul
time
tolower
vfprintf
wcsstr

user32

GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA

wsock32

WSAGetLastError
WSASetLastError
closesocket
recv
send
shutdown

Exports

Exports

REALPluginMain

Sections

.text
Size: 692KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/Readme.rtf
.rtf
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/Resources/de.mo
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/Resources/en.mo
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/Resources/es.mo
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/Resources/fr.mo
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/Resources/it.mo
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/Resources/ja.mo
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/Resources/nl.mo
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/Resources/pt.mo
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/Resources/ru.mo
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/Resources/zh_CN.mo
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/UserGuide.rtf
.rtf
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/file_id.diz
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/icons/Icon_App.ico
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/icons/Icon_Doc.ico
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/keygen.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 148KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 29KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/mlm/html/subscribe_multiple.php
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/mlm/html/subscribe_single_fixed.php
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/mlm/html/subscribe_single_selection.php
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/mlm/html/upload_list.php
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/mlm/mlm.php
.ps1
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/mlm/mlm_readme.html
.html
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/mlm/mlm_settings.php
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/mlm/templates/msg_confirmation.txt
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/mlm/templates/msg_subscribe.txt
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/mlm/templates/msg_unsubscribe.txt
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/mlm/templates/pagefooter.html
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/mlm/templates/pageheader.html
.html
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/unins000.dat
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/unins000.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 571KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/vip课程免费看[点击下载].url
.url
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/我要加入网安VIP培训.txt
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/超多经典培训班参观【点击进入】.url
maxbulkmailer/maxbulkmailer/MaxBulk Mailer Pro(邮件群发注册版)/运行程序.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 208KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

941cd493112e8d408acde59b18d1fc3f

Headers

File Characteristics

PDB Paths

Imports

version

comctl32

winmm

iphlpapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 220KB - Virtual size: 217KB

.data Size: 264KB - Virtual size: 415KB

.rsrc Size: 28KB - Virtual size: 26KB

71a90e9452d3040a947a6b9fe5523598

Headers

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 176B

.reloc Size: 4KB - Virtual size: 3KB

9c0860f70c7fd3f4151f9b5db89acf3c

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 20KB - Virtual size: 26KB

.rsrc Size: 4KB - Virtual size: 248B

.reloc Size: 12KB - Virtual size: 9KB

174afd58029ae44d1928cfb082dee19f

Headers

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 20KB - Virtual size: 24KB

.rsrc Size: 4KB - Virtual size: 176B

.reloc Size: 8KB - Virtual size: 6KB

9c95343b1cd26e48917d476da029794a

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 220KB - Virtual size: 217KB

.data
Size: 264KB - Virtual size: 415KB

.rsrc
Size: 28KB - Virtual size: 26KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 20KB - Virtual size: 26KB

.rsrc
Size: 4KB - Virtual size: 248B

.reloc
Size: 12KB - Virtual size: 9KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 20KB - Virtual size: 24KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 8KB - Virtual size: 6KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 512B - Virtual size: 269B

.exc
Size: 512B - Virtual size: 244B

.data
Size: 2KB - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 514B

.CRT
Size: 512B - Virtual size: 8B

.bss
Size: - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 78B

.reloc
Size: 1024B - Virtual size: 824B

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 512B - Virtual size: 269B

.exc
Size: 512B - Virtual size: 244B

.data
Size: 3KB - Virtual size: 3KB

.idata
Size: 1024B - Virtual size: 722B

.CRT
Size: 512B - Virtual size: 8B

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 79B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 18KB - Virtual size: 18KB

.rdata
Size: 1024B - Virtual size: 568B

.exc
Size: 512B - Virtual size: 172B

.data
Size: 6KB - Virtual size: 5KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 16B

.bss
Size: - Virtual size: 8KB

.edata
Size: 512B - Virtual size: 80B

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 12KB