1PactRZ98A5nocy93588_8087_UCG2CRatif23396.zip
- SHA256 5ee2f94f05dd266a716ff5affdf6f6cc5e15eca8a6f5c07b8e43acda63bde23c
Overview
overview
9Static
static
5Franqu8Int...HF.vbs
windows10-2004-x64
9Franqu8Int...HF.vbs
windows11-ltsc_2024-x64
9~/hgqsm/hj...y2.pdf
windows10-2004-x64
3~/hgqsm/hj...y2.pdf
windows11-ltsc_2024-x64
3~/hgqsm/hj...f1.pdf
windows10-2004-x64
3~/hgqsm/hj...f1.pdf
windows11-ltsc_2024-x64
3~/uurp1.dll
windows10-2004-x64
3~/uurp1.dll
windows11-ltsc_2024-x64
3~/viop2.dll
windows10-2004-x64
3~/viop2.dll
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
Franqu8Intern6-Cod-Cerr-tplgtcNum163030-Extern-FUIXHF.vbs
Resource
win10v2004-20260911-en
windows10-2004-x64
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Franqu8Intern6-Cod-Cerr-tplgtcNum163030-Extern-FUIXHF.vbs
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
16 signatures
150 seconds
Behavioral task
behavioral3
Sample
~/hgqsm/hjhob/djnyu/oglrkl/gskty2.pdf
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
~/hgqsm/hjhob/djnyu/oglrkl/gskty2.pdf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral5
Sample
~/hgqsm/hjhob/djnyu/oglrkl/hsrvf1.pdf
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral6
Sample
~/hgqsm/hjhob/djnyu/oglrkl/hsrvf1.pdf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral7
Sample
~/uurp1.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
~/uurp1.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
~/viop2.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
~/viop2.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 1PactRZ98A5nocy93588_8087_UCG2CRatif23396.zip
- Size 5.0MB
- Sample261113-pcwcvsbs3w
- SHA256 5ee2f94f05dd266a716ff5affdf6f6cc5e15eca8a6f5c07b8e43acda63bde23c
- MD5 54dfcf6ef1553417e580e91d3ff01712
- SHA1 0fdfd9ab5839fbd60fdabf3754b2416850568dc5
- SHA512 bbe3860b00ace254421702d0ba55a73c8a8345c1189a412048c19a16c63712dd089b99b3c93014c162ed4b053c29fd16c0b330b07a1cc07141017023c10a0bc1
- SSDEEP 98304:iGo7oYK1HSHYA9R+YJKMWhH1HpwOwSVwESr5BTUwG3pXzHZ/Rni2A:iGafHt+xpHwSVGr5DGZDHzTA
- TLSH T10D363333605910E0673872F13B96FC1FE41703A9161267D39776788C63BBA6AB1ADCD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Malformed data in PDF
A PDF can contain malformed data to evade detection
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/~/viop2.xml
File Explorer
-
1PactRZ98A5nocy93588_8087_UCG2CRatif23396.zip.zip 5.0MB
-
Franqu8Intern6-Cod-Cerr-tplgtcNum163030-Extern-FUIXHF.vbs7.0MB
-
~/hgqsm/hjhob/djnyu/oglrkl/gskty2.pdf.pdf 24KB
-
~/hgqsm/hjhob/djnyu/oglrkl/hsrvf1.pdf.pdf 22KB
-
~/uurp1.xml.dll 42KB
-
~/viop2.xml.dll 46KB
Franqu8Intern6-Cod-Cerr-tplgtcNum163030-Extern-FUIXHF.vbs
- SHA256 478e2f7937a751525ade56cd4d4b80b03804c28852ed03cb371da3c8714d236b
- MD5 f7fd23a4cfec3e42801518f553d35859
- SHA1 e063638b81b80d94dd02afca74f4b69c58437b09
- SHA512 a9fb165f3aefff6465c28064a175dd789f9eb8cad9504ab8c598d97d84d9b31cfe65ba1b638515b4fc4bf7fa6bce1b16f47124bdae9b1a25e285abadeb7c2c16
- SSDEEP 49152:t2uQh7Rzh8xzQaIC/EovNODIrqGDN3d4v+uFT8pkVHoMQxaorgjnkzOxV07oJfoH:l
- TLSH T13C760236EBA8051705A2476AF00A6273FF77C423874D82A6D8DDF21D368B4DE816F5E4
- MD5 SHA1 SHA512 SSDEEP TLSH
~/hgqsm/hjhob/djnyu/oglrkl/gskty2.pdf
- SHA256 e5953e034a05460eed3b99a55887adff98471b1a1ab1bb958cccdefc76169b2f
- MD5 0d35cd1ac7f5cd85b909c6d387cdf741
- SHA1 79db70b6b9b4427f6a3128cfbb77ae99e57cbeae
- SHA512 37729d7165585f052a4d7f1a55093f97cdf21ccc2bbff1b8c1eb5d91737a8e532f2c85b8403e67a6fe01f771d3897224f12cad0bcc0e9a7d4be8cd0639a8101f
- SSDEEP 768:EqKgmQHghb3lHY2cr7vwi4gJbik3+VVFHRkiqKIA+hk:/mQHgpWP4OJbikOzV6e+S
- TLSH T136B2AE0C5103D960DA2B17EBFF0E688752A8F34F61608DA06E6D4D558993EF4F94E2C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
qr https://verificacfdi.facturaelectronica.sat.gob.mx/?id=CB1CDB20-D0A1-48F5-859C-89EC05F7F13E&re=QCS931209G49&rr=IMH240401J77&tt=717.48&fe=A5Inog==
~/hgqsm/hjhob/djnyu/oglrkl/hsrvf1.pdf
- SHA256 d6a3ad7f39bfdd099fe5a878c0e7ef5c0cbbc54abb8082907ffa9d70621befd5
- MD5 4eef9bd6f9b64015e03cca66d66109f3
- SHA1 669e73ea6c4fa218fd208fe793064343311b0777
- SHA512 33358562e5034cac30395b5a1403221330bcdd3053e7acce8f8e3193d72b4da1bbcd8071df45dc3fb6e8327c1dfc4099c18e8f7ebf5d802b0d3cc0c00d0daf85
- SSDEEP 384:eP7vdUVl8cE0jwBj03wj/hSlBaDEXbbGAWl127Wwc35B:ejl4lQSwVuUkPD7WN35B
- TLSH T16FA218B2E5A41D8CEC828F8644B53DA4082DF623D6CD7CD150B54F81B99CE9C7B036EA
- MD5 SHA1 SHA512 SSDEEP TLSH
~/uurp1.xml
- IMPHASH 6c8408bb5d7d5a5b75b9314f94e68763
- SHA256 3550cb86af43eec7b5944659c60977180408d59af62daee1bb059f865db94136
- MD5 94c5694d5663ae96a05df1cfbe9f0e37
- SHA1 635f57bcfb193e53179119ccc36b6a64e6d15dc7
- SHA512 d33cd71138c9b25fb351780dcfbf12d0e1335a38c8f6814b8b1d412598bf1dcf8478be0100c37e123f7d7a010419a452f8d4cb78061ef1ac8fd4720fa3a4a76d
- SSDEEP 384:5ek4k4+J2keNyEIYi2mL4/y8RLVH9CKguQ:MkZJPTYiDLk5/U
- TLSH T1F113413946085C0EE727FA3175941A3E45276DCC6BE0F3861198A53C9D703236BAEF6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0a:17:f7:5b:99:ff:9b:59:56:39:77:06:64:37:53:41:8e:1e:f1:0c:40:7f:7e:6a:ef:dc:80:38:53:1f:76:37
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US
Chains
Jul 17, 2026
CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US
Serial Number
0e:98:2f:dd:f0:6e:93:e9:11:06:5d:03:7d:4d:d4:82
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 28, 2024 - Aug 6, 2027
Minor OS version
1
Major OS version
5
Entry point
4820
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
goopdateres_unsigned_am.pdb
kernel32
DisableThreadLibraryCalls
Name
.text
Size
1024B
Virtual Size
820B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
868B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
512B
Virtual Size
106B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=260, version=33808,
count=3, id=257, version=30795,
count=6, id=1, productName=Unmarked objects,
count=1, id=265, version=34123,
count=1, id=256, version=34123,
count=1, id=255, version=34123,
count=1, id=258, version=34123,
~/viop2.xml
- IMPHASH 83575ad6aced1d50ea51ef6b9838d7c1
- SHA256 992484d2d4aa3d9522406823c5fafe7809be48ee4bc13733bf14eea333c61234
- MD5 5e84f38f9b3b0b3cd01babaadf33abc1
- SHA1 d2514ed1befed05329a23e648f50f9344e246a61
- SHA512 5f7d308fb98cefbdd6102fb93d3ead85f3475a57eb846763497b6bc1a5186eb645cec7e100c609b8af969e2d4a0237affffc703ee2efbf1d2cc8192aecb55ddf
- SSDEEP 768:wiO8S6pjf11dUBBBI4JDOE7YeQ7yx5Kri5fDnuGGHdSLJ4:wixzpFURPJDOE7lQ2KrilbuGGHYy
- TLSH T1BE235B66AD0040B3FEE10636EBFE9C8A5EBC61161B2CA0E72777409D6D546D36B30B46
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
7f:58:2d:d9:ae:64:00:02:d4:5d:8b:da:6f:49:17:27:7f:1b:3d:de
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Mar 30, 2012
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2010 - Dec 14, 2012
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
14880
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GlobalLock
GlobalAlloc
GlobalSize
GlobalHandle
GlobalReAlloc
GlobalUnlock
GlobalFree
lstrcmpA
GetTickCount
CreateFileA
DeleteFileA
SetFilePointer
GetFileSize
GetModuleHandleA
GetLastError
WriteFile
lstrlenA
LoadLibraryW
SetLastError
GetModuleFileNameW
OutputDebugStringA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
WaitForMultipleObjects
CreateEventA
CreateThread
ResumeThread
GetVersion
GetSystemInfo
GetPrivateProfileIntA
CloseHandle
WaitForSingleObject
ResetEvent
SetEvent
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
ReadFile
FreeResource
IsDebuggerPresent
user32
SetRect
UpdateWindow
InvalidateRect
EndPaint
BeginPaint
FillRect
GetSysColorBrush
FrameRect
IsWindowEnabled
RegisterClassA
UnregisterClassA
ReleaseCapture
GetAsyncKeyState
GetCursorPos
SetCapture
GetDlgCtrlID
DefWindowProcA
RegisterWindowMessageA
SetPropA
IntersectRect
MoveWindow
IsWindow
ClientToScreen
GetParent
GetDesktopWindow
GetWindowRect
GetSystemMetrics
GetWindowLongA
ScreenToClient
SetWindowPos
GetDlgItem
SetFocus
GetWindowTextA
SendMessageA
MessageBeep
SendDlgItemMessageA
RemovePropA
GetPropA
GetDialogBaseUnits
DialogBoxIndirectParamA
InflateRect
DrawFocusRect
DrawTextA
GetDC
ReleaseDC
MessageBoxA
GetClientRect
GetSysColor
LoadCursorA
GetActiveWindow
GetDlgItemTextA
SetDlgItemTextA
TranslateMessage
DispatchMessageA
GetQueueStatus
PeekMessageA
LoadStringA
LoadStringW
EndDialog
gdi32
CreateSolidBrush
ExtTextOutA
SetBkColor
SetBkMode
RoundRect
CreatePen
SelectObject
SetTextColor
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
LineTo
MoveToEx
DeleteObject
msvcr100
_crt_debugger_hook
_except_handler4_common
memset
rand
strtol
_ltoa_s
memcpy
malloc
free
wcsncpy
strncpy
_CIatan
_CItan
AboutDlgProc
AllocPointer
AllocSlider
AngleFromSlope
BlockMove
BlockMoveData
BufferedDraw
CalcProxyRect
CalcProxyRectCore
CenterWindow
CentreDialog
CheckProxiesSupported
CstrToUnicode
DefPaintBack
DefPlotThumb
DeinitializePIExpressDialogs
DisposPtr
DisposeHandle
DisposePtr
DoYield
DragThumb
DrawSmallButton
DrawTheSmallButton
DrawTicksBack
DupHandle
EditFail
EmptyRect
FSClose
FSGetForkPosition
FSGetForkSize
FSRead
FSReadFork
FSSetForkPosition
FSWrite
FSWriteFork
FSpCreate
FSpDelete
FSpOpenDF
Fix2Frac
Fix2Long
Fix2X
FixATan2
FixDiv
FixHypot
FixMul
FixRatio
FixRound
FixSqrt
Frac2Fix
Frac2X
FracCos
FracDiv
FracHypot
FracMul
FracSin
FracSqrt
FreePointer
FreeSlider
GetDlgItemRect
GetEOF
GetFPos
GetHandleSize
GetIndString
GetIndStringPreferred
GetSliderPos
GetSliderRange
GetThumbRect
HLock
HUnlock
HandFromPtr
HostAddPIResource
HostAllocateBuffer
HostAllocateStripBuffer
HostBufferProcsAvailable
HostBufferSpace
HostCountPIResources
HostDeletePIResource
HostDisposeHandle
HostFreeBuffer
HostGetHandleSize
HostGetPIResource
HostHandleProcsAvailable
HostLockBuffer
HostLockHandle
HostNewHandle
HostResourceProcsAvailable
HostSetHandleSize
HostUnlockBuffer
HostUnlockHandle
Hypot
InitCursor
InitEditWnd
InitHypotTable
InitializePIExpressDialogs
Interpolate1D
Interpolate1DMulti
Interpolate2D
Interpolate2DMulti
InvalThumbRect
LockSliderData
Long2Fix
Long2X
LongHypot
LongMul
LongSqrt
MPSafe_Random
MPSafe_SetRandomSeed
MacToWinRect
MapRect
MemError
MoveHHi
NewCalcProxyRect
NewHandle
NewHandleClear
NewPtr
NewPtrClear
Num2Comp
NumToString
OutputMessage
PIDMDisposeDialog
PIDMExpressHandleDialog
PIDMExpressResDialog
PIDMGetControl
PIDMGetControlIndex
PIDMGetMacDialog
PIDMModalDialog
PIDMNewHandleDialog
PIDMNewResDialog
PIDMWinExpressDialog
PIExpressDialogsAvailable
PIInsetRect
PIOffsetRect
PIPtInRect
PIQuickZResToCString
PIQuickZResToPascalString
PIQuickZToCString
PIQuickZToCStringLen
PIQuickZToCStringW
PIQuickZToPascalString
PIQuickZToPascalStringLen
PISetRect
PIThreadsDoAll
PIThreadsEndThreads
PIThreadsGetNumThreads
PIThreadsGetParamsPtr
PIThreadsInit
PIThreadsStart1
PIThreadsWaitForCompletion
PIZGetIndString
PIZGetIndStringPreferred
PIZGetIndStringPreferredW
PIZLoadString
PIZLoadStringW
PIZNoteAlert
PIZStopAlert
PIZToUnicodeCString
PIZToUnicodeStringLen
PackBits
PaintSlider
ParamText
Random
RegisterSlider
SectRect
SetFPos
SetHandleSize
SetPIExpressDialogSuiteVersion
SetSliderData
SetSliderFlags
SetSliderMax
SetSliderMin
SetSliderPos
SetSliderProc
SetSliderRange
SetSliderThumbOff
SetSliderThumbSize
ShortHypot
ShortMul
ShowAlert
ShowOutputBuffer
SliderWndProc
SlopeFromAngle
SnapToLogPos
TickCount
TranslatePos
TruncateFileName
UnRegisterSlider
UnlockSliderData
UnpackBits
UserChangedEditText
UserInputAvail
UtilReadDescriptors
UtilReadPlatformFilePathDescriptor
UtilReadPointDescriptor
UtilReadPointListDescriptor
UtilWriteDescriptors
UtilWriteNoDescForceUI
UtilWritePlatformFilePathDescriptor
UtilWritePointDescriptor
UtilWritePointListDescriptor
ValidateDlgLong
WAllocBuffer
WFreeBuffer
WSizeBuffer
WarnHostAdvanceStateAvailable
WarnHostBufferProcsAvailable
WarnHostHandleProcsAvailable
WarnHostResourceProcsAvailable
WinToMacRect
X2Fix
X2Frac
X2Long
map_one
map_to_logical
map_to_physical
sASZString
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=138, id=1, productName=Unmarked objects,
count=1, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=18, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,