Bd2 Injector.rar
- SHA256 47fd97aa76feb4ee85e935af2a33605897231319529c3ae4bc4948fe0b5d7f84
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Bd2 Injector/Bd2 Injector.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Bd2 Injector/DevComponents.DotNetBar2.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Bd2 Injector/Quick_Any2Ico.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
General
- Target Bd2 Injector.rar
- Size 2.9MB
- Sample261027-3sn6daws6r
- SHA256 47fd97aa76feb4ee85e935af2a33605897231319529c3ae4bc4948fe0b5d7f84
- MD5 e883b72080be81848baa84dd6b906735
- SHA1 7e35b5fe6710eb7ab69d092ffdd0c14d3440ce39
- SHA512 79ff5f6fc6b0a41d0cae2363107062b11b9ae783f4ff5fd71edecd9dad06f838c0f1121ee04d0457e6769a0f7dc612582b3c46ac77d9990a22859effe4771783
- SSDEEP 49152:fOY+thqCEoisVOLjyhEuanqkXQGDLqSwvaImWTwKt2W+8r3zrvZ0Xt4ioRuS:fOYYHEoidy6LnPgGDmSwSIy/AZ0Xt41b
- TLSH T1D9E5332900F8762B37EF5C9370CB7165E131A5EF0936B46B19E9E07C6D6CA53E09AC81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Bd2 Injector/Bd2 Injector.exe unpack001/Bd2 Injector/DevComponents.DotNetBar2.dll
File Explorer
-
Bd2 Injector.rar.rar 2.9MB
-
Bd2 Injector/Bd2 Injector.exe.exe 9.3MB
-
Bd2 Injector/CipherMasonry.ico93KB
-
Bd2 Injector/CipherMasonry.png.png 1.1MB
-
Bd2 Injector/DevComponents.DotNetBar2.dll.dll 4.3MB
-
Bd2 Injector/Quick_Any2Ico.exe.exe 604KB
Bd2 Injector/Bd2 Injector.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 df5fadcfe2cad2ca14e728da046557c0939759b092d4af6634043750428703a7
- MD5 15507a03b8b2745420831676581b3520
- SHA1 fe26858f67998b2b840fe0722505c6eedc943f9c
- SHA512 a7a3bfb7904596439a5f0fc4d88371d965b7ca4ff1533d3ba20b2b9d4227cb07eaebdcc2320c1d2ad7bee25a3edf074a6c7fbe35317640dea75b5be4a782855f
- SSDEEP 6144:6owtqoqMEOOmGGfjGRioCRDjRlA1+kHmkHMfWuvz2lofVIKvmGF:thyEOukhhjrYxQiKrF
- TLSH T14BA6D4B9F607E4B1C34FC6700498A8EC12A53ED7D4D24A8997BDF1465C62FCEAE07921
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9510254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
9.1MB
Virtual Size
9.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
258KB
Virtual Size
257KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Bd2 Injector/CipherMasonry.ico
- SHA256 da8f4a347048a2659870f4de27cbbc1df97d95408ab09490f4be842c23e9018e
- MD5 5d5d5a921139092e3370bc49e7e328b2
- SHA1 1b446ac1a841a51eed2bc80352d0555c47e1492b
- SHA512 4f2ea62dde39b1a5ec3ebb60ac199796c14a0984da949badb0172307cfcfc8ce38d987045c0cc83c54ed8d785af48f9995abd46f24cac0d391b71b2860e25901
- SSDEEP 1536:5qqqqqqqqqWCvqqlacqqShW0QSxHOa6dnkcEJlTrzgLZcHUc5UvlGS5/5Ko+8hFc:fWnSxuzkHlTwLq0B5/nyJxjmMx
- TLSH T1FF939DC4E9F68E1AC06F6BB114A9C53655BAC2241333C5E659B276A1BF82C427F005FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Bd2 Injector/CipherMasonry.png
- SHA256 d5ebcbf4db864f91375fdbb7229209bdd55d3f475416b1cf94e442a933129d0d
- MD5 4e509770e81c555bc146e8b79a820681
- SHA1 dc138ef764b8aa3a5e4338d74ae313f8c224a672
- SHA512 6acdca27748e0a456b3a6d469a07f12eeaad846a8ef6cc22ab56190e510db47e7630742cd1bd45f7c3b64967b8531bc5ff08d7fd5a9c07e49ea0d9599d4c1b23
- SSDEEP 24576:W+pvORabn+UzfHrA+OGT+OAZcrRiUF51KXdG:npvESJ8+OGT9YcNiUF5n
- TLSH T1B63523B11E5A9616DA30F5F3549C7D85F3B938D47F85088E005AE8F09FD0E4A49BE23A
- MD5 SHA1 SHA512 SSDEEP TLSH
Bd2 Injector/DevComponents.DotNetBar2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3e0a315bc5496aa8e701c83c0b277d30fe78b0b567418baa268912df51c09b22
- MD5 d499c22917c1a95a1d80b9ff48673596
- SHA1 638ad22483e5aec468dede04fdc1defe1f7494bf
- SHA512 7c5272619c546efcd1ded6b3c8b7caae8be9c18683d862aa956847c49a703cc1d6ac878a65f20083f1fafcb8ce5fd7bf4cb90aa115ce58d4c33d3b7aa916cfb4
- SSDEEP 49152:jfbOYjjGPzyrpoU9L2+46BLhFt+eCdmvMAeQt6xfYUanWPsrtm/l:GYjjJoWLXB+Xda
- TLSH T18F267C4173B4DA3BE0AF8374C12A219943F6D61AE3E3FB665AA1B07D3D43B405907297
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4544211
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.textxc
Size
4.3MB
Virtual Size
4.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.datax
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
86B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dotnet
Bd2 Injector/Quick_Any2Ico.exe
- IMPHASH 8d52eced451405641e40b828c939be90
- SHA256 743ef7485a91b491a372d980fc436e050cdf1875a5ae7f0f318d764fc0815506
- MD5 922fbb3f8c8c9fa22b1e56a19204fcf8
- SHA1 abf6db58082b299e4749213e67a4aa2a1d94785c
- SHA512 972f1f51e5e9f66ae37f1ba148fccf2889692ca0a9359707c0b62ee12c722f4bb74621e0da92cbccb86f132a2f28133e383f5814a23738e87a7725b4dcb467dc
- SSDEEP 12288:1Fq8T/5aDd5+6C0ylreuv2YJH9JSogw+V:1Y8TBaDdc6xylr/jJdEw+V
- TLSH T1BDD46C5279638571C8A5453CC279BAF2022CAC262B3549DF63D42A2F6F625D22F33773
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
54:08:a9:c9:e4:e0:4e:87:40:f9:f6:4d:50:98:4f:e2:cf:5a:f9:3c:a7:6c:db:f4:fc:b3:5e:46:44:ee:1a:1d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=789 849 163 00025,CN=DOS SANTOS DA SILVA ALFREDO,O=DOS SANTOS DA SILVA ALFREDO,ST=Occitanie,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652
Chains
Apr 10, 2023
SERIALNUMBER=789 849 163 00025,CN=DOS SANTOS DA SILVA ALFREDO,O=DOS SANTOS DA SILVA ALFREDO,ST=Occitanie,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
SERIALNUMBER=789 849 163 00025,CN=DOS SANTOS DA SILVA ALFREDO,O=DOS SANTOS DA SILVA ALFREDO,ST=Occitanie,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Digest
b0:1c:95:47:ca:0b:71:d9:c6:7e:97:82:21:e9:2e:c5:14:bc:5b:78
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=789 849 163 00025,CN=DOS SANTOS DA SILVA ALFREDO,O=DOS SANTOS DA SILVA ALFREDO,ST=Occitanie,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652
Chains
Apr 10, 2023
SERIALNUMBER=789 849 163 00025,CN=DOS SANTOS DA SILVA ALFREDO,O=DOS SANTOS DA SILVA ALFREDO,ST=Occitanie,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
SERIALNUMBER=789 849 163 00025,CN=DOS SANTOS DA SILVA ALFREDO,O=DOS SANTOS DA SILVA ALFREDO,ST=Occitanie,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Serial Number
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 11, 2022 - Aug 10, 2033
Subject
SERIALNUMBER=789 849 163 00025,CN=DOS SANTOS DA SILVA ALFREDO,O=DOS SANTOS DA SILVA ALFREDO,ST=Occitanie,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652
Serial Number
9e:b8:63:20:bc:00:ab:f1:85:bb:de:03:32:c2:6f:58
Issuer
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 10, 2022 - Jan 9, 2025
Minor OS version
1
Major OS version
5
Entry point
231552
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\VisualStudio\Projects\Quick_Any2Ico\Release\Quick_Any2Ico.pdb
kernel32
GetStringTypeW
GetACP
GetStdHandle
GetModuleHandleExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
HeapAlloc
EncodePointer
RaiseException
RtlUnwind
InitializeSListHead
GetCurrentThreadId
GetStartupInfoW
WriteConsoleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
DecodePointer
LoadLibraryExW
OpenThread
QueryPerformanceCounter
GetSystemWindowsDirectoryW
GetSystemTimeAsFileTime
WritePrivateProfileSectionW
VerifyVersionInfoW
SleepEx
WideCharToMultiByte
CopyFileW
FreeLibrary
GetFileSize
GetModuleHandleW
CreateProcessW
GetCurrentProcessId
MoveFileExW
LocalFree
SetFilePointerEx
GlobalLock
CreateDirectoryW
GetProcAddress
FindResourceW
LoadResource
CreateThread
LoadLibraryW
CloseHandle
LCMapStringW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetFileType
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GlobalUnlock
GetConsoleMode
VerSetConditionMask
ExitProcess
IsDebuggerPresent
GlobalFree
DeleteFileW
GlobalAlloc
QueryPerformanceFrequency
LockResource
TerminateThread
GetLastError
Sleep
GetPrivateProfileStringW
GetExitCodeThread
MultiByteToWideChar
CreateToolhelp32Snapshot
SetFileAttributesW
OpenProcess
GetSystemDirectoryW
GetFileAttributesW
CreateFileW
LocalAlloc
WaitForSingleObject
FindClose
GetPrivateProfileSectionW
Thread32First
EnumResourceNamesW
SetFilePointer
SetErrorMode
Thread32Next
GetProcessId
GetModuleFileNameW
RemoveDirectoryW
TerminateProcess
InterlockedDecrement
ExpandEnvironmentStringsW
WriteFile
GetCurrentProcess
GetLongPathNameW
FindNextFileW
SetLastError
WritePrivateProfileStringW
GetFileSizeEx
FindFirstFileW
SizeofResource
ReadFile
EnterCriticalSection
user32
GetWindow
PostMessageW
ShowWindowAsync
AdjustWindowRectEx
DefWindowProcW
GetMenuItemInfoW
DeferWindowPos
GetMessageW
GetCursorPos
ReleaseDC
ChildWindowFromPoint
InvalidateRect
LoadImageW
SetForegroundWindow
UpdateWindow
PtInRect
GetParent
SetSystemCursor
GetDC
GetWindowRect
SetWindowPos
CopyImage
EnumChildWindows
SetWindowRgn
CopyIcon
FillRect
CreateWindowExW
GetIconInfo
DeleteMenu
SendMessageW
GetSystemMetrics
UnregisterClassW
GetClassInfoExW
SystemParametersInfoW
GetSysColorBrush
DrawIconEx
GetClassLongW
GetClientRect
RemoveMenu
SetWindowLongW
SetCursor
SetClipboardData
EndDeferWindowPos
GetWindowDC
GetClassNameW
LoadCursorW
TranslateMessage
GetUpdateRect
TranslateAcceleratorW
BringWindowToTop
GetMenuStringW
SetFocus
GetWindowRgnBox
DestroyMenu
CreateAcceleratorTableW
EnumWindows
IsWindowEnabled
GetForegroundWindow
GetSysColor
GetTopWindow
SetMenuDefaultItem
SetMenuInfo
MapWindowPoints
PeekMessageW
EmptyClipboard
DestroyAcceleratorTable
SetMenuItemInfoW
GetMenuItemID
GetFocus
DestroyWindow
BeginPaint
EndPaint
GetWindowRgn
CloseClipboard
DefDlgProcW
GetWindowThreadProcessId
GetWindowLongW
EnableWindow
GetWindowTextW
FindWindowExW
RegisterClassExW
IsWindowVisible
DestroyIcon
IsDialogMessageW
RedrawWindow
DispatchMessageW
OpenClipboard
GetAsyncKeyState
BeginDeferWindowPos
IsWindow
ShowWindow
WindowFromPoint
gdi32
GetBkColor
BitBlt
CreateCompatibleBitmap
SelectObject
CreateDIBSection
CreateCompatibleDC
PatBlt
StretchBlt
CreateFontW
GetStockObject
GetDIBits
CreatePatternBrush
OffsetRgn
CreateRectRgn
DeleteDC
GetTextExtentPoint32W
SetTextColor
SetBkMode
SelectClipRgn
GetObjectW
ExcludeClipRect
SetBkColor
SetStretchBltMode
DeleteObject
CreateSolidBrush
ExtSelectClipRgn
CombineRgn
FillRgn
SetBrushOrgEx
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
AllocateAndInitializeSid
TreeResetNamedSecurityInfoW
CreateWellKnownSid
CryptDecrypt
RegCreateKeyExW
SetNamedSecurityInfoW
CryptCreateHash
CryptHashData
IsValidSid
RegSetValueExW
AddAce
CryptDestroyHash
FreeSid
CheckTokenMembership
InitializeAcl
RegOpenKeyExW
CryptSetKeyParam
CryptImportKey
GetLengthSid
CryptGetHashParam
RegQueryValueExW
CryptReleaseContext
CryptEncrypt
GetAce
CryptAcquireContextW
RegCloseKey
CryptDestroyKey
shell32
SHGetDesktopFolder
ord62
ord155
ord190
DragQueryPoint
SHGetFolderPathW
CommandLineToArgvW
FindExecutableW
SHGetPathFromIDListW
SHChangeNotify
DragQueryFileW
ShellExecuteExW
ord6
SHBrowseForFolderW
SHCreateItemFromParsingName
DragFinish
ExtractAssociatedIconW
Shell_NotifyIconW
ole32
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
oleaut32
SysFreeString
SysAllocString
VariantClear
shlwapi
PathParseIconLocationW
PathFindOnPathW
ord176
PathFileExistsW
PathIsRootW
PathUnmakeSystemFolderW
PathIsDirectoryW
PathMakeSystemFolderW
gdiplus
GdipSetInterpolationMode
GdipCreatePath
GdipSetSmoothingMode
GdipDisposeImage
GdipDeletePath
GdiplusStartup
GdiplusShutdown
GdipAddPathLine
GdipGetImageHeight
GdipFillPolygonI
GdipGetRegionHRgn
GdipSetCompositingQuality
GdipGetImageEncoders
GdipResetPath
GdipCreateFromHWND
GdipCreateRegionPath
GdipCreateHBITMAPFromBitmap
GdipSetPixelOffsetMode
GdipFillRectangle
GdipClosePathFigure
GdipFree
GdipDrawPath
GdipBitmapLockBits
GdipDrawRectangleI
GdipImageRotateFlip
GdipAddPathPolygon
GdipCreateFromHDC
GdipFillEllipseI
GdipFillEllipse
GdipDrawEllipse
GdipDeleteRegion
GdipGetImageGraphicsContext
GdipFillRectangleI
ord1
GdipGetImageEncodersSize
GdipDeleteGraphics
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipSaveImageToStream
GdipDeletePen
GdipCreateBitmapFromScan0
GdipDrawImageI
GdipCreatePen1
GdipDrawImageRectRectI
GdipDrawLineI
GdipSaveImageToFile
GdipCreateSolidFill
GdipDrawImageRect
GdipCloneImage
GdipBitmapUnlockBits
GdipDeleteBrush
GdipFillPath
GdipCreateBitmapFromStream
GdipAlloc
GdipDrawImageRectI
comctl32
ord413
ImageList_Destroy
ImageList_DrawEx
ord412
ord411
ImageList_Replace
ImageList_Create
ImageList_GetImageCount
ImageList_Add
ImageList_ReplaceIcon
ord410
psapi
EnumProcesses
GetModuleFileNameExW
uxtheme
SetWindowTheme
wininet
InternetQueryDataAvailable
InternetOpenUrlW
FtpOpenFileW
InternetReadFile
InternetOpenW
InternetSetOptionW
InternetGetConnectedState
InternetConnectW
InternetCloseHandle
InternetCrackUrlW
HttpQueryInfoW
FtpGetFileSize
Name
.text
Size
301KB
Virtual Size
300KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
186KB
Virtual Size
186KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
80KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=129, id=243, version=40116,
count=26, id=242, version=40116,
count=18, id=260, version=26706,
count=21, id=259, version=26706,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=53, id=261, version=26706,
count=20, id=260, productName=VS2019 v16.1.2 build 27702, version=27702,
count=11, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=57, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=663, id=1, productName=Unmarked objects,
count=2, id=265, version=27048,
count=1, id=255, version=27048,
count=1, id=151,
count=1, id=258, version=27048,