RedButton.zip
- SHA256 507fd9fdd7eef694c78feeee6ad8827839ef0fdd8ef98918ce67e5ff67908e4a
Overview
overview
7Static
static
3RedButton.exe
windows10-2004-x64
7RedButton.exe
windows11-ltsc_2024-x64
7$DESKTOP/D...ux.url
windows10-2004-x64
1$DESKTOP/D...ux.url
windows11-ltsc_2024-x64
1$PLUGINSDIR/INetC.dll
windows10-2004-x64
3$PLUGINSDIR/INetC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$SMPROGRAM...ux.url
windows10-2004-x64
1$SMPROGRAM...ux.url
windows11-ltsc_2024-x64
1Uninstall.exe
windows10-2004-x64
7Uninstall.exe
windows11-ltsc_2024-x64
7redbutton.exe
windows10-2004-x64
3redbutton.exe
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
RedButton.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
RedButton.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
$DESKTOP/Desktop Lux.url
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
$DESKTOP/Desktop Lux.url
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/INetC.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/INetC.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
$SMPROGRAMS/Desktop Lux.url
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
$SMPROGRAMS/Desktop Lux.url
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Uninstall.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral14
Sample
Uninstall.exe
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral15
Sample
redbutton.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
redbutton.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target RedButton.zip
- Size 1.0MB
- Sample260710-pcfbmsa17q
- SHA256 507fd9fdd7eef694c78feeee6ad8827839ef0fdd8ef98918ce67e5ff67908e4a
- MD5 15ce821b8e4dc458325fa4910bc61590
- SHA1 8a8752c5489e3198bacf9e84c1672cab6582c1c6
- SHA512 c8aae0cf6135317f4bf63e4fe7b3ac92edea87f69f8799f79b35c49c3d785e926da38279955b2d973afe277df7e56a499041785af09316a8e198334547ddf31a
- SSDEEP 24576:eG604H0YShcE9oymr4ZLe/+BdZ0KganSfpkdKzjNFjRYzK8w:x6hHdSh19ogLegEjfD5b4w
- TLSH T1343533C9F79A79C533B0625732C1103C2D061DA9F2E8E73A7C3E55B9E144898B5AC63E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
resource unpack001/RedButton.exe unpack002/$PLUGINSDIR/INetC.dll unpack002/$PLUGINSDIR/InstallOptions.dll unpack002/$PLUGINSDIR/LangDLL.dll unpack002/Uninstall.exe unpack002/redbutton.exe - NSIS installer 4 IoCs
resource yara_rule static1/unpack001/RedButton.exe nsis_installer_1 static1/unpack001/RedButton.exe nsis_installer_2 static1/unpack002/Uninstall.exe nsis_installer_1 static1/unpack002/Uninstall.exe nsis_installer_2
File Explorer
-
RedButton.zip.zip 1.0MB
-
RedButton.exe.exe 1.1MB
-
$DESKTOP/Desktop Lux.url107B
-
$PLUGINSDIR/INetC.dll.dll 21KB
-
$PLUGINSDIR/InstallOptions.dll.dll 14KB
-
$PLUGINSDIR/LangDLL.dll.dll 5KB
-
$PLUGINSDIR/ioSpecial.ini211B
-
$PLUGINSDIR/modern-wizard.bmp150KB
-
$SMPROGRAMS/Desktop Lux.url107B
-
English.lng45KB
-
Russian.lng49KB
-
Uninstall.exe.exe 73KB
-
license_eng.txt1KB
-
license_rus.txt1KB
-
redbutton.exe.exe 2.5MB
RedButton.exe
- IMPHASH 57e98d9a5a72c8d7ad8fb7a6a58b3daf
- SHA256 2603c2c4d4538e50d637cecf8c7faaeb84a73bc6d2a58fc37aa6054f44263186
- MD5 895f0cfb0263b15d73f0ca7e1206835a
- SHA1 4279be03d5f8133793e77d62560c2190baeda207
- SHA512 bf77c4b96778d6a7a420511b664ad034b857f8c457625d86e694c2185ecf5d40ed5312c13a3bb221a288fb136aae3650caedc4398642218dab4269adb1e8a1b8
- SSDEEP 24576:nnwPI4H0qM7c49oyIreZl+b+bdh0KgaNStdCdUdjtFh9SzQ3j:nCNHRM739oil+wg/trZZpj
- TLSH T1D4352385B6A8E4C6E3B40273BD9250B92D412C6EE3D4562F3F69FFAD71B0251A00E53D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
13069
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetEnvironmentVariableA
CreateFileA
GetFileSize
GetModuleFileNameA
ReadFile
GetCurrentProcess
CopyFileA
Sleep
GetTickCount
GetWindowsDirectoryA
GetTempPathA
GetCommandLineA
lstrlenA
GetVersion
SetErrorMode
lstrcpynA
ExitProcess
SetCurrentDirectoryA
GlobalLock
CreateThread
GetLastError
CreateDirectoryA
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
WriteFile
lstrcpyA
MoveFileExA
lstrcatA
GetSystemDirectoryA
GetProcAddress
GetExitCodeProcess
WaitForSingleObject
CompareFileTime
SetFileAttributesA
GetFileAttributesA
GetShortPathNameA
MoveFileA
GetFullPathNameA
SetFileTime
SearchPathA
CloseHandle
lstrcmpiA
GlobalUnlock
GetDiskFreeSpaceA
lstrcmpA
FindFirstFileA
FindNextFileA
DeleteFileA
SetFilePointer
GetPrivateProfileStringA
FindClose
MultiByteToWideChar
FreeLibrary
MulDiv
WritePrivateProfileStringA
LoadLibraryExA
GetModuleHandleA
GlobalAlloc
GlobalFree
ExpandEnvironmentStringsA
user32
ScreenToClient
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
PostQuitMessage
GetWindowRect
EnableMenuItem
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
ReleaseDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndDialog
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
GetDC
CreateDialogParamA
SetTimer
GetDlgItem
SetWindowLongA
SetForegroundWindow
LoadImageA
IsWindow
SendMessageTimeoutA
FindWindowExA
OpenClipboard
TrackPopupMenu
AppendMenuA
EndPaint
DestroyWindow
wsprintfA
ShowWindow
SetWindowTextA
gdi32
SelectObject
SetBkMode
CreateFontIndirectA
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
ShellExecuteExA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHFileOperationA
advapi32
AdjustTokenPrivileges
RegCreateKeyExA
RegOpenKeyExA
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueA
RegEnumValueA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegEnumKeyA
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=159, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$DESKTOP/Desktop Lux.url
- SHA256 159ea6bb92e64ef0155107a354798b3c02f9120a7c8f4c67f53cd784017805d5
- MD5 bc0a8ed5659719c7975ad411764cb60c
- SHA1 72ba508f65e4b7d37d35987db31e8e31fc5e53da
- SHA512 0f42a5d2dbe0962b716688d0c58f5e714e75b4d6e3bc5cbf50b669060d647f0cc34bcef96e1eb3c3c96230c4ae2cbc0f726a4ce5cd862d4a6fd16250980a469f
- TLSH T1E4B092774E0C94A88F62006D817BA808F9066DA8CCEAC88092C56B044D85022288461C
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/INetC.dll
- IMPHASH 8e4c63f70f7cc6490634d743e795c93e
- SHA256 2d5d89025911e2e273f90f393624be4819641dbee1606de792362e442e54612f
- MD5 2b342079303895c50af8040a91f30f71
- SHA1 b11335e1cb8356d9c337cb89fe81d669a69de17e
- SHA512 550452dadc86ecd205f40668894116790a456fe46e9985d68093d36cf32abf00edecb5c56ff0287464a0e819db7b3cc53926037a116de6c651332a7cc8035d47
- SSDEEP 384:KOoVVefeWsI7rsIquPLNN546o0Ac9khYLMkIX0+Gzyekv:4VVaeE7wIqyJN5i
- TLSH T158A22B5353A01FFEF3E7153878B27B3745A99A6450938A9F07B32D8D2566282BD32342
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16201
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
TerminateThread
CreateThread
LocalAlloc
lstrcpyA
WaitForSingleObject
MulDiv
ReadFile
GetModuleHandleA
SleepEx
lstrcatA
GetTickCount
CreateFileA
GetFileSize
DeleteFileA
lstrcmpA
lstrcmpiA
SetFilePointer
WriteFile
GetProcAddress
CloseHandle
lstrlenA
LoadLibraryA
lstrcpynA
LocalFree
GlobalAlloc
GlobalFree
GetLastError
WideCharToMultiByte
user32
LoadIconA
SystemParametersInfoA
GetWindowLongA
GetParent
MessageBoxA
DispatchMessageA
SetWindowLongA
KillTimer
PostMessageA
IsWindow
GetWindowTextA
ShowWindow
SendDlgItemMessageA
TranslateMessage
IsDialogMessageA
CreateDialogParamA
SetDlgItemTextA
GetWindowRect
SetWindowPos
SetTimer
SendMessageA
RedrawWindow
GetClientRect
EnableWindow
FindWindowExA
UpdateWindow
GetMessageA
GetDlgItem
wsprintfA
DestroyWindow
SetWindowTextA
IsWindowVisible
comctl32
ord17
wininet
InternetSetOptionA
InternetQueryOptionA
FtpCreateDirectoryA
InternetConnectA
InternetWriteFile
FtpOpenFileA
InternetSetFilePointer
HttpEndRequestA
HttpAddRequestHeadersA
HttpSendRequestA
InternetGetLastResponseInfoA
InternetOpenA
InternetCrackUrlA
HttpOpenRequestA
HttpSendRequestExA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetErrorDlg
get
head
post
put
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=123, productName=VS2005 build 50727, version=50727,
count=81, id=1, productName=Unmarked objects,
count=3, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$PLUGINSDIR/InstallOptions.dll
- IMPHASH 610235b90207a63ccf481f0d4375d329
- SHA256 0e014352b64abc431d97460d79757cbafbf6ba997c08b608c294e1f582af269a
- MD5 20f3184efe7edddfef3325efc25d12a5
- SHA1 8db4c500d73f9525a7e9834df6caea2e70189939
- SHA512 433188957a4603c9c61ec698a720021aacf61f46ccc32d5a11bcb6f2d0b1f01e5680635707d8a0ec7a9ef2aa2a85d6dec07ded452e4cb9e280062c0bed555c1a
- SSDEEP 192:v4n3T5aK+dHCMR1aQR9RuZl3WWmU7WYZsw1JpVGnrjWK72dwF7dBOne:wn3T5KdHCMRD/R1cOnrjW+BO
- TLSH T1A4622B55738488F3DBE2043E785237079B995565B4929ED2CA275FC66C3B08D7EB2303
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10722
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetPrivateProfileIntA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileStringA
SetCurrentDirectoryA
GetModuleHandleA
lstrcmpiA
WritePrivateProfileStringA
lstrcatA
lstrcpynA
GlobalFree
lstrlenA
lstrcpyA
GlobalUnlock
GlobalAlloc
GlobalLock
user32
MapWindowPoints
PtInRect
CloseClipboard
LoadCursorA
GetDlgCtrlID
OpenClipboard
GetClientRect
SetWindowRgn
DrawFocusRect
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
DrawTextA
SetCursor
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
CallWindowProcA
PostMessageA
MessageBoxA
GetSysColor
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetWindowLongA
EnableMenuItem
GetSystemMenu
GetClipboardData
LoadIconA
gdi32
DeleteObject
CombineRgn
SetTextColor
GetDIBits
SelectObject
CreateRectRgn
GetObjectA
CreateCompatibleDC
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
SHGetDesktopFolder
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
dialog
initDialog
show
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=74, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=48, version=9044,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/LangDLL.dll
- IMPHASH 274b99a815ba574d8c9e1712916d8b30
- SHA256 4e72c8b4d36f128b25281440e59e39af7ec2080d02e024f35ac413d769d91f39
- MD5 ea60c7bd5edd6048601729bd31362c16
- SHA1 6e6919d969eb61a141595014395b6c3f44139073
- SHA512 f9dc35220697153bb06e3a06caf645079881cb75aed008dbe5381ecaf3442d5be03500b36bbca8b3d114845fac3d667ddf4063c16bc35d29bbea862930939993
- SSDEEP 48:im1nEhqneMPUptuMMNvimk2BAZuMTRCpYEvJdUJvR0J6of5dwe:F1jpl9NLBAZuYtR0xd
- TLSH T1DDC17537B3C105F5E6954633265363C36713A9747766804FCB6712BA1A208B7DD2EB83
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalFree
GlobalAlloc
lstrcmpA
GetModuleHandleA
lstrlenA
MulDiv
lstrcpynA
GetACP
lstrcpyA
user32
SetDlgItemTextA
SendDlgItemMessageA
EndDialog
DialogBoxParamA
SetWindowTextA
LoadIconA
GetDC
ShowWindow
SendMessageA
gdi32
DeleteObject
CreateFontIndirectA
GetDeviceCaps
LangDialog
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
697B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
362B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/ioSpecial.ini
- SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
- MD5 e2d5070bc28db1ac745613689ff86067
- SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
- SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
- TLSH T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/modern-wizard.bmp
- SHA256 807f4285f32809db7eabbd656b632bb53f1900c2226f80934b0ec638583c565b
- MD5 477417fd266b6d90b2a81c4069160c6d
- SHA1 e0d73f0dc35aeb8ef1adee6156608cb1824a81bc
- SHA512 45e8b296a1efeb60296ce194daef3f4c8982f60cdfc6e7f48f937bb31a2bcb7ea46bc59a67cddfe5f3e296a9a8f30d064e7402e45fbc3e21294ee452ec4ea55b
- SSDEEP 3072:I8tQiQ+QXT63fbcbgrq++O3963LwSkrpPOpbTDSM/toCNOzAvU3YcsZFJuY:I8tQiQ+QXT63fbcbgrq++iEErpPOxrrJ
- TLSH T153E3D57B530ABD76138D9D3325999406E0C4E284C5FA1F801DB0722141BBBBE67B4EEE
- MD5 SHA1 SHA512 SSDEEP TLSH
$SMPROGRAMS/Desktop Lux.url
- SHA256 159ea6bb92e64ef0155107a354798b3c02f9120a7c8f4c67f53cd784017805d5
- MD5 bc0a8ed5659719c7975ad411764cb60c
- SHA1 72ba508f65e4b7d37d35987db31e8e31fc5e53da
- SHA512 0f42a5d2dbe0962b716688d0c58f5e714e75b4d6e3bc5cbf50b669060d647f0cc34bcef96e1eb3c3c96230c4ae2cbc0f726a4ce5cd862d4a6fd16250980a469f
- TLSH T1E4B092774E0C94A88F62006D817BA808F9066DA8CCEAC88092C56B044D85022288461C
- MD5 SHA1 SHA512 TLSH
English.lng
- SHA256 d9c79fe238a4665a72fa279875bef60c17f2d728d31196ca64823469b41d0d81
- MD5 79ae4bb1b23d0f0c5f91d8ff7a28c322
- SHA1 cc25ac0a710f8edd273ceba929a2f1218677a05a
- SHA512 9b74db928a7f1670ec4af804c0309d87838157a684ff625d2d1ad85e41a5afa88370843679487c1d0bf836f25831d2670ea2de6624f327beaffdccf7e8fe43f0
- SSDEEP 768:tL7l7hUWiWgm6r6Rfb6yi2MCBfyQ0BZIo+XaWX8069vIq:l7DUSRTy5BZe69Qq
- TLSH T11F23413273972CB410E6A157FB6B6A0336EA02838AD9E11026D7704DD7D6F1F829D3E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Russian.lng
- SHA256 b0ed6b9fb4b7447827901c5f5a272347127f6fe58c5d1d1dc3add895693affba
- MD5 582b56884787d1924563db9dc50a0cfe
- SHA1 ca2610df7ba2a8ace42557180973addfe55f6d53
- SHA512 6627385cccad89eef6a7187b80c9008d564f86fbd1af959272b842471780050bce32e686630d20df7c2b7449acf52809f0adfbfe85b575280218066eb2a91626
- SSDEEP 768:zFpHTOLiWiuU0v0bzb/2aEblXPPFrsso+cHQ//YOOijEOKHVaAvWLleQ8q:zvFrbzEXstdXvWLf8q
- TLSH T14433852067D41CB594B959DBEF6F6E0300D90282CAC9E11226C3604AEFD9F3FF1566AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Uninstall.exe
- IMPHASH 57e98d9a5a72c8d7ad8fb7a6a58b3daf
- SHA256 64c296fb8b5a94ca54587ca42466d76c77dddf3d4504d0022153bca15ee0cc29
- MD5 20d21b16eaf095886b887f2e866dabdb
- SHA1 b36550b7dcad3366c8c1739b471e0884ac5b2c11
- SHA512 4695a3b70eaa8b4b08528b0f31abb617acb26bd690d6b6f1a2184a2bdf46deae2b26fa947c45c3c0cef62f309a884dacfcf8700c7d468fdec3e4f35b9b02fef0
- SSDEEP 1536:NU+dcy3fxBk9UmZHs/hcsgra3dVxCUhuc+ELnImocQUxGAdgotlSzj:NNzPHk9Mpcsg2qc9vGAdg1j
- TLSH T176737D023664C0D6DB7902719CBF9AFA2AE17DAB4381465B2BC4FF5E38F1342460F55A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
13069
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetEnvironmentVariableA
CreateFileA
GetFileSize
GetModuleFileNameA
ReadFile
GetCurrentProcess
CopyFileA
Sleep
GetTickCount
GetWindowsDirectoryA
GetTempPathA
GetCommandLineA
lstrlenA
GetVersion
SetErrorMode
lstrcpynA
ExitProcess
SetCurrentDirectoryA
GlobalLock
CreateThread
GetLastError
CreateDirectoryA
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
WriteFile
lstrcpyA
MoveFileExA
lstrcatA
GetSystemDirectoryA
GetProcAddress
GetExitCodeProcess
WaitForSingleObject
CompareFileTime
SetFileAttributesA
GetFileAttributesA
GetShortPathNameA
MoveFileA
GetFullPathNameA
SetFileTime
SearchPathA
CloseHandle
lstrcmpiA
GlobalUnlock
GetDiskFreeSpaceA
lstrcmpA
FindFirstFileA
FindNextFileA
DeleteFileA
SetFilePointer
GetPrivateProfileStringA
FindClose
MultiByteToWideChar
FreeLibrary
MulDiv
WritePrivateProfileStringA
LoadLibraryExA
GetModuleHandleA
GlobalAlloc
GlobalFree
ExpandEnvironmentStringsA
user32
ScreenToClient
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
PostQuitMessage
GetWindowRect
EnableMenuItem
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
ReleaseDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndDialog
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
GetDC
CreateDialogParamA
SetTimer
GetDlgItem
SetWindowLongA
SetForegroundWindow
LoadImageA
IsWindow
SendMessageTimeoutA
FindWindowExA
OpenClipboard
TrackPopupMenu
AppendMenuA
EndPaint
DestroyWindow
wsprintfA
ShowWindow
SetWindowTextA
gdi32
SelectObject
SetBkMode
CreateFontIndirectA
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
ShellExecuteExA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHFileOperationA
advapi32
AdjustTokenPrivileges
RegCreateKeyExA
RegOpenKeyExA
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueA
RegEnumValueA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegEnumKeyA
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=159, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
license_eng.txt
- SHA256 dfb57d11dbb9a157db936da8a0b141d1e2723a4d55abfd1a065d9a5c74e3690d
- MD5 e5e7345564f3bb18ff1f9c0f6dd05111
- SHA1 431dc104d4f4c20ac6dc6fe56c6710d0deb5b57a
- SHA512 175641b839282d885193bc409164980eb484bca579092d72b8d697a87f9352ce84212077bafff240e49ddc5aeadf4bf140c1b1a79b5411682bf450877ebebc8e
- TLSH T165311F9EA64617B212E621983F47848BF32A84743AAE9C546049C0DC3B86CF9773959F
- MD5 SHA1 SHA512 TLSH
license_rus.txt
- SHA256 ddebf01a2fa5e120f5ed059dfef5a70562b0f99ba8acdcf4520918382f2bff6e
- MD5 46f9cb20a51fe4be1ba372f4a1ba660c
- SHA1 7171d1789b384e394abb78ff2477220524247bb8
- SHA512 c19d51db2ff85dfbf2167a20d50128606cdd358c955120404f039ec0900e0cecb3feb6af36cfdc548af79882b0bd9e66b31cbe05a0ecc53ee4f4566837d954de
- TLSH T1AE3168C2ABC101A946780B641D47D91EC9F86A8ED5A9BF15F407984F53C40E9321F96F
- MD5 SHA1 SHA512 TLSH
redbutton.exe
- IMPHASH 78ceaee2e7e58b73bd576e0168d54b87
- SHA256 176f28605f148650f5ce34a465eed8e3c74111c9579aab9cda31ed1290ac951c
- MD5 cd46b91de08f035a2f22a27d5c7a7d76
- SHA1 0a91010f86f73f1fb8649eb13714a342f728ec62
- SHA512 c83236a4e21b6c0077aa6cd6723d5ffca2b5979429d86752e8c272459de839cb07b645cb5d284524591a9b0baac1b5bcdcb9f6a9db9e765798acd109317c5484
- SSDEEP 49152:x44yhkA5vjEbnsAQ0nOShw9woEEZrKTAzSVoWYswkQdtcgs4ENdcP:xHyensAdnOShwnOiSaiw
- TLSH T1F8C5495063F4A125E3B72EB13E79E6944AB3BD694F39DA4F2240751E2936E50DC30B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
5
Entry point
775713
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
f:\Pothos\projects\redbutton\source code\redbutton.pdb
shlwapi
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW
PathMatchSpecW
PathIsDirectoryW
StrStrW
SHDeleteKeyW
wininet
FindFirstUrlCacheEntryW
FindNextUrlCacheEntryW
InternetCloseHandle
FindCloseUrlCache
InternetReadFile
InternetOpenUrlW
InternetOpenW
DeleteUrlCacheEntryW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
winmm
PlaySoundW
gdiplus
GdipFree
GdipDeleteGraphics
GdiplusStartup
GdipAlloc
GdipGetImageHeight
GdipDrawImageRectI
GdipCreateFromHDC
GdipGetImageWidth
GdipResetWorldTransform
GdipSetWorldTransform
GdipRotateMatrix
GdipTranslateMatrix
GdipDeleteMatrix
GdipCreateMatrix
GdipDrawLine
GdipDeletePen
GdipCreatePen1
GdipCloneImage
GdipDisposeImage
GdipLoadImageFromStream
GdiplusShutdown
kernel32
ResumeThread
SetEvent
SuspendThread
CreateEventW
ReadFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
lstrlenA
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
SetThreadPriority
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
InterlockedIncrement
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
SetErrorMode
GetStartupInfoW
SetStdHandle
GetFileType
GetSystemTimeAsFileTime
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
HeapReAlloc
ExitThread
CreateThread
HeapSize
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
WideCharToMultiByte
GetModuleHandleA
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
GetVersionExA
RaiseException
LoadLibraryA
InterlockedExchange
CopyFileW
SetLastError
lstrcmpW
HeapFree
GetProcessHeap
HeapAlloc
Sleep
GetTickCount
Process32NextW
TerminateProcess
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
GetTempFileNameW
GetTempPathW
WaitForSingleObject
GetLogicalDrives
GetFileInformationByHandle
CreateDirectoryW
DeviceIoControl
VirtualFree
VirtualAlloc
GlobalMemoryStatusEx
SetFilePointer
WriteFile
GetDiskFreeSpaceExW
CreateFileW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
GetLastError
GetDriveTypeW
GetLogicalDriveStringsW
ExpandEnvironmentStringsW
DeleteFileW
MultiByteToWideChar
CreateProcessW
WritePrivateProfileStringW
FindClose
FindNextFileW
FindFirstFileW
InterlockedDecrement
FreeResource
LocalFree
LocalSize
LocalAlloc
GlobalFree
GetProcAddress
GlobalUnlock
lstrlenW
FormatMessageW
LoadLibraryW
GlobalAlloc
GlobalLock
FreeLibrary
GetModuleHandleW
GetStdHandle
GetCurrentProcess
SetConsoleTitleW
AllocConsole
GetPrivateProfileIntW
GetPrivateProfileStringW
GetModuleFileNameW
CloseHandle
MulDiv
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersionExW
InitializeCriticalSection
user32
UnregisterClassW
LoadCursorW
GetSysColorBrush
DestroyMenu
CharUpperW
SetCursor
GetMessageW
TranslateMessage
ValidateRect
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
EndPaint
BeginPaint
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMenuState
EnableMenuItem
CheckMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
PostMessageW
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetSubMenu
DrawMenuBar
GetFocus
FillRect
DrawIcon
IsIconic
GetSystemMenu
LoadBitmapW
SetLayeredWindowAttributes
LoadStringW
PostQuitMessage
UpdateWindow
GetDesktopWindow
IsZoomed
GetClientRect
LoadIconW
RedrawWindow
UpdateLayeredWindow
SetTimer
GetWindowLongW
SetWindowLongW
GetSystemMetrics
AppendMenuW
CreatePopupMenu
GetCursorPos
SetDlgItemTextW
GetDlgItem
ModifyMenuW
GetWindowRect
GetParent
IsWindow
SendMessageW
ExitWindowsEx
CharToOemW
SendDlgItemMessageW
MessageBoxW
DispatchMessageW
gdi32
SetMapMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreatePatternBrush
GetObjectW
DeleteObject
SelectObject
CreateCompatibleDC
CreateDIBSection
CreateSolidBrush
CreateFontIndirectW
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
AddFontMemResourceEx
GetDeviceCaps
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
comdlg32
GetOpenFileNameW
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegDeleteKeyW
LookupPrivilegeValueW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
ChangeServiceConfigW
StartServiceW
SetFileSecurityW
GetTokenInformation
DeleteService
EnumDependentServicesW
ControlService
QueryServiceStatusEx
CloseServiceHandle
OpenServiceW
OpenSCManagerW
OpenProcessToken
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegDeleteValueW
RegOpenKeyExW
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetEntriesInAclW
CreateWellKnownSid
InitializeSecurityDescriptor
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
AdjustTokenPrivileges
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFolderPathW
SHEmptyRecycleBinW
SHQueryRecycleBinW
SHAddToRecentDocs
ShellExecuteW
comctl32
_TrackMouseEvent
InitCommonControlsEx
ole32
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
CreateStreamOnHGlobal
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
oleaut32
SysAllocString
SysFreeString
VariantClear
VariantChangeType
VariantInit
Name
.text
Size
929KB
Virtual Size
929KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
551KB
Virtual Size
551KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
309KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
956KB
Virtual Size
955KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
81KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=25, id=149, productName=VS2008 build 21022, version=21022,
count=165, id=131, productName=VS2008 build 21022, version=21022,
count=139, id=132, productName=VS2008 build 21022, version=21022,
count=31, id=123, productName=VS2005 build 50727, version=50727,
count=12, id=109, productName=VS2005 build 50727, version=50727,
count=2, id=110, productName=VS2005 build 50727, version=50727,
count=617, id=1, productName=Unmarked objects,
count=53, id=138, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,