45B65D_exe_2019-07-02_15_30.json

[*] MalFamily: "Malicious"

[*] MalScore: 10.0

[*] File Name: "45B65D.exe"
[*] File Size: 403968
[*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
[*] SHA256: "df8f5a9fce368f8155317d97b69197785ddb9e7bbcf04c51c6905e612881118b"
[*] MD5: "4e8c43fdbcc064da8ae6f6dcc9397c33"
[*] SHA1: "605a63b41c570b7d35bf20af48f2da3719e32b4e"
[*] SHA512: "7e15c234baef7d0a85fd869c31594ab92e4828921a54bf671ffafe93117de8fd31db25b31a381591643661dad644d7a7d04c0d036a334265fa5499ff6c632d5b"
[*] CRC32: "4DDEB1C1"
[*] SSDEEP: "12288:bAkK3lVtC9Lsty7hsfisTy4gi9BYGxVE9N:bAkcsThUAi95x4"

[*] Process Execution: [
    "45B65D.exe"
]

[*] Signatures Detected: [
    {
        "Description": "Creates RWX memory",
        "Details": []
    },
    {
        "Description": "Possible date expiration check, exits too soon after checking local time",
        "Details": [
            {
                "process": "45B65D.exe, PID 2236"
            }
        ]
    },
    {
        "Description": "File has been identified by 19 Antiviruses on VirusTotal as malicious",
        "Details": [
            {
                "FireEye": "Generic.mg.4e8c43fdbcc064da"
            },
            {
                "McAfee": "GenericRXGI-CF!4E8C43FDBCC0"
            },
            {
                "CrowdStrike": "win/malicious_confidence_70% (W)"
            },
            {
                "Alibaba": "Trojan:Win32/Injector.32652822"
            },
            {
                "Symantec": "Packed.Generic.516"
            },
            {
                "APEX": "Malicious"
            },
            {
                "Paloalto": "generic.ml"
            },
            {
                "AegisLab": "Trojan.Win32.Generic.4!c"
            },
            {
                "McAfee-GW-Edition": "BehavesLike.Win32.Injector.fh"
            },
            {
                "CMC": "Packed.Win32.PePatch!O"
            },
            {
                "MaxSecure": "Trojan.Malware.300983.susgen"
            },
            {
                "Microsoft": "Trojan:Win32/Casur.A!cl"
            },
            {
                "Endgame": "malicious (moderate confidence)"
            },
            {
                "Acronis": "suspicious"
            },
            {
                "Cylance": "Unsafe"
            },
            {
                "ESET-NOD32": "a variant of Win32/Injector.EGJK"
            },
            {
                "Rising": "Trojan.Injector!8.C4 (CLOUD)"
            },
            {
                "SentinelOne": "DFI - Malicious PE"
            },
            {
                "Cybereason": "malicious.41c570"
            }
        ]
    },
    {
        "Description": "Anomalous binary characteristics",
        "Details": [
            {
                "anomaly": "Timestamp on binary predates the release date of the OS version it requires by at least a year"
            }
        ]
    }
]

[*] Started Service: []

[*] Executed Commands: []

[*] Mutexes: []

[*] Modified Files: []

[*] Deleted Files: []

[*] Modified Registry Keys: []

[*] Deleted Registry Keys: []

[*] DNS Communications: []

[*] Domains: []

[*] Network Communication - ICMP: []

[*] Network Communication - HTTP: []

[*] Network Communication - SMTP: []

[*] Network Communication - Hosts: []

[*] Network Communication - IRC: []

[*] Static Analysis: {
    "pe": {
        "peid_signatures": null,
        "imports": [
            {
                "imports": [
                    {
                        "name": "DeleteCriticalSection",
                        "address": "0x456140"
                    },
                    {
                        "name": "LeaveCriticalSection",
                        "address": "0x456144"
                    },
                    {
                        "name": "EnterCriticalSection",
                        "address": "0x456148"
                    },
                    {
                        "name": "InitializeCriticalSection",
                        "address": "0x45614c"
                    },
                    {
                        "name": "VirtualFree",
                        "address": "0x456150"
                    },
                    {
                        "name": "VirtualAlloc",
                        "address": "0x456154"
                    },
                    {
                        "name": "LocalFree",
                        "address": "0x456158"
                    },
                    {
                        "name": "LocalAlloc",
                        "address": "0x45615c"
                    },
                    {
                        "name": "GetVersion",
                        "address": "0x456160"
                    },
                    {
                        "name": "GetCurrentThreadId",
                        "address": "0x456164"
                    },
                    {
                        "name": "InterlockedDecrement",
                        "address": "0x456168"
                    },
                    {
                        "name": "InterlockedIncrement",
                        "address": "0x45616c"
                    },
                    {
                        "name": "VirtualQuery",
                        "address": "0x456170"
                    },
                    {
                        "name": "WideCharToMultiByte",
                        "address": "0x456174"
                    },
                    {
                        "name": "MultiByteToWideChar",
                        "address": "0x456178"
                    },
                    {
                        "name": "lstrlenA",
                        "address": "0x45617c"
                    },
                    {
                        "name": "lstrcpynA",
                        "address": "0x456180"
                    },
                    {
                        "name": "LoadLibraryExA",
                        "address": "0x456184"
                    },
                    {
                        "name": "GetThreadLocale",
                        "address": "0x456188"
                    },
                    {
                        "name": "GetStartupInfoA",
                        "address": "0x45618c"
                    },
                    {
                        "name": "GetProcAddress",
                        "address": "0x456190"
                    },
                    {
                        "name": "GetModuleHandleA",
                        "address": "0x456194"
                    },
                    {
                        "name": "GetModuleFileNameA",
                        "address": "0x456198"
                    },
                    {
                        "name": "GetLocaleInfoA",
                        "address": "0x45619c"
                    },
                    {
                        "name": "GetCommandLineA",
                        "address": "0x4561a0"
                    },
                    {
                        "name": "FreeLibrary",
                        "address": "0x4561a4"
                    },
                    {
                        "name": "FindFirstFileA",
                        "address": "0x4561a8"
                    },
                    {
                        "name": "FindClose",
                        "address": "0x4561ac"
                    },
                    {
                        "name": "ExitProcess",
                        "address": "0x4561b0"
                    },
                    {
                        "name": "WriteFile",
                        "address": "0x4561b4"
                    },
                    {
                        "name": "UnhandledExceptionFilter",
                        "address": "0x4561b8"
                    },
                    {
                        "name": "RtlUnwind",
                        "address": "0x4561bc"
                    },
                    {
                        "name": "RaiseException",
                        "address": "0x4561c0"
                    },
                    {
                        "name": "GetStdHandle",
                        "address": "0x4561c4"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "GetKeyboardType",
                        "address": "0x4561cc"
                    },
                    {
                        "name": "LoadStringA",
                        "address": "0x4561d0"
                    },
                    {
                        "name": "MessageBoxA",
                        "address": "0x4561d4"
                    },
                    {
                        "name": "CharNextA",
                        "address": "0x4561d8"
                    }
                ],
                "dll": "user32.dll"
            },
            {
                "imports": [
                    {
                        "name": "RegQueryValueExA",
                        "address": "0x4561e0"
                    },
                    {
                        "name": "RegOpenKeyExA",
                        "address": "0x4561e4"
                    },
                    {
                        "name": "RegCloseKey",
                        "address": "0x4561e8"
                    }
                ],
                "dll": "advapi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SysFreeString",
                        "address": "0x4561f0"
                    },
                    {
                        "name": "SysReAllocStringLen",
                        "address": "0x4561f4"
                    },
                    {
                        "name": "SysAllocStringLen",
                        "address": "0x4561f8"
                    }
                ],
                "dll": "oleaut32.dll"
            },
            {
                "imports": [
                    {
                        "name": "TlsSetValue",
                        "address": "0x456200"
                    },
                    {
                        "name": "TlsGetValue",
                        "address": "0x456204"
                    },
                    {
                        "name": "LocalAlloc",
                        "address": "0x456208"
                    },
                    {
                        "name": "GetModuleHandleA",
                        "address": "0x45620c"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "RegQueryValueExA",
                        "address": "0x456214"
                    },
                    {
                        "name": "RegOpenKeyExA",
                        "address": "0x456218"
                    },
                    {
                        "name": "RegCloseKey",
                        "address": "0x45621c"
                    }
                ],
                "dll": "advapi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "lstrcpyA",
                        "address": "0x456224"
                    },
                    {
                        "name": "lstrcmpiA",
                        "address": "0x456228"
                    },
                    {
                        "name": "WriteProcessMemory",
                        "address": "0x45622c"
                    },
                    {
                        "name": "WriteFile",
                        "address": "0x456230"
                    },
                    {
                        "name": "WaitForSingleObject",
                        "address": "0x456234"
                    },
                    {
                        "name": "VirtualQuery",
                        "address": "0x456238"
                    },
                    {
                        "name": "VirtualProtect",
                        "address": "0x45623c"
                    },
                    {
                        "name": "VirtualFree",
                        "address": "0x456240"
                    },
                    {
                        "name": "VirtualAllocEx",
                        "address": "0x456244"
                    },
                    {
                        "name": "VirtualAlloc",
                        "address": "0x456248"
                    },
                    {
                        "name": "Sleep",
                        "address": "0x45624c"
                    },
                    {
                        "name": "SizeofResource",
                        "address": "0x456250"
                    },
                    {
                        "name": "SetThreadLocale",
                        "address": "0x456254"
                    },
                    {
                        "name": "SetFilePointer",
                        "address": "0x456258"
                    },
                    {
                        "name": "SetEvent",
                        "address": "0x45625c"
                    },
                    {
                        "name": "SetErrorMode",
                        "address": "0x456260"
                    },
                    {
                        "name": "SetEndOfFile",
                        "address": "0x456264"
                    },
                    {
                        "name": "ResetEvent",
                        "address": "0x456268"
                    },
                    {
                        "name": "ReadProcessMemory",
                        "address": "0x45626c"
                    },
                    {
                        "name": "ReadFile",
                        "address": "0x456270"
                    },
                    {
                        "name": "MulDiv",
                        "address": "0x456274"
                    },
                    {
                        "name": "LockResource",
                        "address": "0x456278"
                    },
                    {
                        "name": "LoadResource",
                        "address": "0x45627c"
                    },
                    {
                        "name": "LoadLibraryA",
                        "address": "0x456280"
                    },
                    {
                        "name": "LeaveCriticalSection",
                        "address": "0x456284"
                    },
                    {
                        "name": "InitializeCriticalSection",
                        "address": "0x456288"
                    },
                    {
                        "name": "GlobalUnlock",
                        "address": "0x45628c"
                    },
                    {
                        "name": "GlobalReAlloc",
                        "address": "0x456290"
                    },
                    {
                        "name": "GlobalHandle",
                        "address": "0x456294"
                    },
                    {
                        "name": "GlobalLock",
                        "address": "0x456298"
                    },
                    {
                        "name": "GlobalFree",
                        "address": "0x45629c"
                    },
                    {
                        "name": "GlobalFindAtomA",
                        "address": "0x4562a0"
                    },
                    {
                        "name": "GlobalDeleteAtom",
                        "address": "0x4562a4"
                    },
                    {
                        "name": "GlobalAlloc",
                        "address": "0x4562a8"
                    },
                    {
                        "name": "GlobalAddAtomA",
                        "address": "0x4562ac"
                    },
                    {
                        "name": "GetVersionExA",
                        "address": "0x4562b0"
                    },
                    {
                        "name": "GetVersion",
                        "address": "0x4562b4"
                    },
                    {
                        "name": "GetTickCount",
                        "address": "0x4562b8"
                    },
                    {
                        "name": "GetThreadLocale",
                        "address": "0x4562bc"
                    },
                    {
                        "name": "GetSystemInfo",
                        "address": "0x4562c0"
                    },
                    {
                        "name": "GetStringTypeExA",
                        "address": "0x4562c4"
                    },
                    {
                        "name": "GetStdHandle",
                        "address": "0x4562c8"
                    },
                    {
                        "name": "GetProcAddress",
                        "address": "0x4562cc"
                    },
                    {
                        "name": "GetModuleHandleA",
                        "address": "0x4562d0"
                    },
                    {
                        "name": "GetModuleFileNameA",
                        "address": "0x4562d4"
                    },
                    {
                        "name": "GetLocaleInfoA",
                        "address": "0x4562d8"
                    },
                    {
                        "name": "GetLocalTime",
                        "address": "0x4562dc"
                    },
                    {
                        "name": "GetLastError",
                        "address": "0x4562e0"
                    },
                    {
                        "name": "GetFullPathNameA",
                        "address": "0x4562e4"
                    },
                    {
                        "name": "GetExitCodeThread",
                        "address": "0x4562e8"
                    },
                    {
                        "name": "GetDiskFreeSpaceA",
                        "address": "0x4562ec"
                    },
                    {
                        "name": "GetDateFormatA",
                        "address": "0x4562f0"
                    },
                    {
                        "name": "GetCurrentThreadId",
                        "address": "0x4562f4"
                    },
                    {
                        "name": "GetCurrentProcessId",
                        "address": "0x4562f8"
                    },
                    {
                        "name": "GetCPInfo",
                        "address": "0x4562fc"
                    },
                    {
                        "name": "GetACP",
                        "address": "0x456300"
                    },
                    {
                        "name": "FreeResource",
                        "address": "0x456304"
                    },
                    {
                        "name": "InterlockedExchange",
                        "address": "0x456308"
                    },
                    {
                        "name": "FreeLibrary",
                        "address": "0x45630c"
                    },
                    {
                        "name": "FormatMessageA",
                        "address": "0x456310"
                    },
                    {
                        "name": "FindResourceA",
                        "address": "0x456314"
                    },
                    {
                        "name": "FindFirstFileA",
                        "address": "0x456318"
                    },
                    {
                        "name": "FindClose",
                        "address": "0x45631c"
                    },
                    {
                        "name": "FileTimeToLocalFileTime",
                        "address": "0x456320"
                    },
                    {
                        "name": "FileTimeToDosDateTime",
                        "address": "0x456324"
                    },
                    {
                        "name": "ExitProcess",
                        "address": "0x456328"
                    },
                    {
                        "name": "EnumCalendarInfoA",
                        "address": "0x45632c"
                    },
                    {
                        "name": "EnterCriticalSection",
                        "address": "0x456330"
                    },
                    {
                        "name": "DeleteCriticalSection",
                        "address": "0x456334"
                    },
                    {
                        "name": "CreateThread",
                        "address": "0x456338"
                    },
                    {
                        "name": "CreateRemoteThread",
                        "address": "0x45633c"
                    },
                    {
                        "name": "CreateProcessA",
                        "address": "0x456340"
                    },
                    {
                        "name": "CreateFileA",
                        "address": "0x456344"
                    },
                    {
                        "name": "CreateEventA",
                        "address": "0x456348"
                    },
                    {
                        "name": "CompareStringA",
                        "address": "0x45634c"
                    },
                    {
                        "name": "CloseHandle",
                        "address": "0x456350"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "VerQueryValueA",
                        "address": "0x456358"
                    },
                    {
                        "name": "GetFileVersionInfoSizeA",
                        "address": "0x45635c"
                    },
                    {
                        "name": "GetFileVersionInfoA",
                        "address": "0x456360"
                    }
                ],
                "dll": "version.dll"
            },
            {
                "imports": [
                    {
                        "name": "UnrealizeObject",
                        "address": "0x456368"
                    },
                    {
                        "name": "StretchBlt",
                        "address": "0x45636c"
                    },
                    {
                        "name": "SetWindowOrgEx",
                        "address": "0x456370"
                    },
                    {
                        "name": "SetViewportOrgEx",
                        "address": "0x456374"
                    },
                    {
                        "name": "SetTextColor",
                        "address": "0x456378"
                    },
                    {
                        "name": "SetStretchBltMode",
                        "address": "0x45637c"
                    },
                    {
                        "name": "SetROP2",
                        "address": "0x456380"
                    },
                    {
                        "name": "SetPixel",
                        "address": "0x456384"
                    },
                    {
                        "name": "SetDIBColorTable",
                        "address": "0x456388"
                    },
                    {
                        "name": "SetBrushOrgEx",
                        "address": "0x45638c"
                    },
                    {
                        "name": "SetBkMode",
                        "address": "0x456390"
                    },
                    {
                        "name": "SetBkColor",
                        "address": "0x456394"
                    },
                    {
                        "name": "SelectPalette",
                        "address": "0x456398"
                    },
                    {
                        "name": "SelectObject",
                        "address": "0x45639c"
                    },
                    {
                        "name": "SaveDC",
                        "address": "0x4563a0"
                    },
                    {
                        "name": "RestoreDC",
                        "address": "0x4563a4"
                    },
                    {
                        "name": "Rectangle",
                        "address": "0x4563a8"
                    },
                    {
                        "name": "RectVisible",
                        "address": "0x4563ac"
                    },
                    {
                        "name": "RealizePalette",
                        "address": "0x4563b0"
                    },
                    {
                        "name": "PatBlt",
                        "address": "0x4563b4"
                    },
                    {
                        "name": "MoveToEx",
                        "address": "0x4563b8"
                    },
                    {
                        "name": "MaskBlt",
                        "address": "0x4563bc"
                    },
                    {
                        "name": "LineTo",
                        "address": "0x4563c0"
                    },
                    {
                        "name": "IntersectClipRect",
                        "address": "0x4563c4"
                    },
                    {
                        "name": "GetWindowOrgEx",
                        "address": "0x4563c8"
                    },
                    {
                        "name": "GetTextMetricsA",
                        "address": "0x4563cc"
                    },
                    {
                        "name": "GetTextExtentPoint32A",
                        "address": "0x4563d0"
                    },
                    {
                        "name": "GetSystemPaletteEntries",
                        "address": "0x4563d4"
                    },
                    {
                        "name": "GetStockObject",
                        "address": "0x4563d8"
                    },
                    {
                        "name": "GetPixel",
                        "address": "0x4563dc"
                    },
                    {
                        "name": "GetPaletteEntries",
                        "address": "0x4563e0"
                    },
                    {
                        "name": "GetObjectA",
                        "address": "0x4563e4"
                    },
                    {
                        "name": "GetMapMode",
                        "address": "0x4563e8"
                    },
                    {
                        "name": "GetDeviceCaps",
                        "address": "0x4563ec"
                    },
                    {
                        "name": "GetDIBits",
                        "address": "0x4563f0"
                    },
                    {
                        "name": "GetDIBColorTable",
                        "address": "0x4563f4"
                    },
                    {
                        "name": "GetDCOrgEx",
                        "address": "0x4563f8"
                    },
                    {
                        "name": "GetCurrentPositionEx",
                        "address": "0x4563fc"
                    },
                    {
                        "name": "GetClipBox",
                        "address": "0x456400"
                    },
                    {
                        "name": "GetBrushOrgEx",
                        "address": "0x456404"
                    },
                    {
                        "name": "GetBitmapBits",
                        "address": "0x456408"
                    },
                    {
                        "name": "ExcludeClipRect",
                        "address": "0x45640c"
                    },
                    {
                        "name": "DeleteObject",
                        "address": "0x456410"
                    },
                    {
                        "name": "DeleteDC",
                        "address": "0x456414"
                    },
                    {
                        "name": "CreateSolidBrush",
                        "address": "0x456418"
                    },
                    {
                        "name": "CreatePenIndirect",
                        "address": "0x45641c"
                    },
                    {
                        "name": "CreatePalette",
                        "address": "0x456420"
                    },
                    {
                        "name": "CreateHalftonePalette",
                        "address": "0x456424"
                    },
                    {
                        "name": "CreateFontIndirectA",
                        "address": "0x456428"
                    },
                    {
                        "name": "CreateDIBitmap",
                        "address": "0x45642c"
                    },
                    {
                        "name": "CreateDIBSection",
                        "address": "0x456430"
                    },
                    {
                        "name": "CreateCompatibleDC",
                        "address": "0x456434"
                    },
                    {
                        "name": "CreateCompatibleBitmap",
                        "address": "0x456438"
                    },
                    {
                        "name": "CreateBrushIndirect",
                        "address": "0x45643c"
                    },
                    {
                        "name": "CreateBitmap",
                        "address": "0x456440"
                    },
                    {
                        "name": "BitBlt",
                        "address": "0x456444"
                    }
                ],
                "dll": "gdi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "CreateWindowExA",
                        "address": "0x45644c"
                    },
                    {
                        "name": "WindowFromPoint",
                        "address": "0x456450"
                    },
                    {
                        "name": "WinHelpA",
                        "address": "0x456454"
                    },
                    {
                        "name": "WaitMessage",
                        "address": "0x456458"
                    },
                    {
                        "name": "UpdateWindow",
                        "address": "0x45645c"
                    },
                    {
                        "name": "UnregisterClassA",
                        "address": "0x456460"
                    },
                    {
                        "name": "UnhookWindowsHookEx",
                        "address": "0x456464"
                    },
                    {
                        "name": "TranslateMessage",
                        "address": "0x456468"
                    },
                    {
                        "name": "TranslateMDISysAccel",
                        "address": "0x45646c"
                    },
                    {
                        "name": "TrackPopupMenu",
                        "address": "0x456470"
                    },
                    {
                        "name": "SystemParametersInfoA",
                        "address": "0x456474"
                    },
                    {
                        "name": "ShowWindow",
                        "address": "0x456478"
                    },
                    {
                        "name": "ShowScrollBar",
                        "address": "0x45647c"
                    },
                    {
                        "name": "ShowOwnedPopups",
                        "address": "0x456480"
                    },
                    {
                        "name": "ShowCursor",
                        "address": "0x456484"
                    },
                    {
                        "name": "SetWindowsHookExA",
                        "address": "0x456488"
                    },
                    {
                        "name": "SetWindowPos",
                        "address": "0x45648c"
                    },
                    {
                        "name": "SetWindowPlacement",
                        "address": "0x456490"
                    },
                    {
                        "name": "SetWindowLongA",
                        "address": "0x456494"
                    },
                    {
                        "name": "SetTimer",
                        "address": "0x456498"
                    },
                    {
                        "name": "SetScrollRange",
                        "address": "0x45649c"
                    },
                    {
                        "name": "SetScrollPos",
                        "address": "0x4564a0"
                    },
                    {
                        "name": "SetScrollInfo",
                        "address": "0x4564a4"
                    },
                    {
                        "name": "SetRect",
                        "address": "0x4564a8"
                    },
                    {
                        "name": "SetPropA",
                        "address": "0x4564ac"
                    },
                    {
                        "name": "SetParent",
                        "address": "0x4564b0"
                    },
                    {
                        "name": "SetMenuItemInfoA",
                        "address": "0x4564b4"
                    },
                    {
                        "name": "SetMenu",
                        "address": "0x4564b8"
                    },
                    {
                        "name": "SetForegroundWindow",
                        "address": "0x4564bc"
                    },
                    {
                        "name": "SetFocus",
                        "address": "0x4564c0"
                    },
                    {
                        "name": "SetCursor",
                        "address": "0x4564c4"
                    },
                    {
                        "name": "SetClassLongA",
                        "address": "0x4564c8"
                    },
                    {
                        "name": "SetCapture",
                        "address": "0x4564cc"
                    },
                    {
                        "name": "SetActiveWindow",
                        "address": "0x4564d0"
                    },
                    {
                        "name": "SendMessageA",
                        "address": "0x4564d4"
                    },
                    {
                        "name": "ScrollWindow",
                        "address": "0x4564d8"
                    },
                    {
                        "name": "ScreenToClient",
                        "address": "0x4564dc"
                    },
                    {
                        "name": "RemovePropA",
                        "address": "0x4564e0"
                    },
                    {
                        "name": "RemoveMenu",
                        "address": "0x4564e4"
                    },
                    {
                        "name": "ReleaseDC",
                        "address": "0x4564e8"
                    },
                    {
                        "name": "ReleaseCapture",
                        "address": "0x4564ec"
                    },
                    {
                        "name": "RegisterWindowMessageA",
                        "address": "0x4564f0"
                    },
                    {
                        "name": "RegisterClipboardFormatA",
                        "address": "0x4564f4"
                    },
                    {
                        "name": "RegisterClassA",
                        "address": "0x4564f8"
                    },
                    {
                        "name": "RedrawWindow",
                        "address": "0x4564fc"
                    },
                    {
                        "name": "PtInRect",
                        "address": "0x456500"
                    },
                    {
                        "name": "PostQuitMessage",
                        "address": "0x456504"
                    },
                    {
                        "name": "PostMessageA",
                        "address": "0x456508"
                    },
                    {
                        "name": "PeekMessageA",
                        "address": "0x45650c"
                    },
                    {
                        "name": "OffsetRect",
                        "address": "0x456510"
                    },
                    {
                        "name": "OemToCharA",
                        "address": "0x456514"
                    },
                    {
                        "name": "MessageBoxA",
                        "address": "0x456518"
                    },
                    {
                        "name": "MapWindowPoints",
                        "address": "0x45651c"
                    },
                    {
                        "name": "MapVirtualKeyA",
                        "address": "0x456520"
                    },
                    {
                        "name": "LoadStringA",
                        "address": "0x456524"
                    },
                    {
                        "name": "LoadKeyboardLayoutA",
                        "address": "0x456528"
                    },
                    {
                        "name": "LoadIconA",
                        "address": "0x45652c"
                    },
                    {
                        "name": "LoadCursorA",
                        "address": "0x456530"
                    },
                    {
                        "name": "LoadBitmapA",
                        "address": "0x456534"
                    },
                    {
                        "name": "KillTimer",
                        "address": "0x456538"
                    },
                    {
                        "name": "IsZoomed",
                        "address": "0x45653c"
                    },
                    {
                        "name": "IsWindowVisible",
                        "address": "0x456540"
                    },
                    {
                        "name": "IsWindowEnabled",
                        "address": "0x456544"
                    },
                    {
                        "name": "IsWindow",
                        "address": "0x456548"
                    },
                    {
                        "name": "IsRectEmpty",
                        "address": "0x45654c"
                    },
                    {
                        "name": "IsIconic",
                        "address": "0x456550"
                    },
                    {
                        "name": "IsDialogMessageA",
                        "address": "0x456554"
                    },
                    {
                        "name": "IsChild",
                        "address": "0x456558"
                    },
                    {
                        "name": "InvalidateRect",
                        "address": "0x45655c"
                    },
                    {
                        "name": "IntersectRect",
                        "address": "0x456560"
                    },
                    {
                        "name": "InsertMenuItemA",
                        "address": "0x456564"
                    },
                    {
                        "name": "InsertMenuA",
                        "address": "0x456568"
                    },
                    {
                        "name": "InflateRect",
                        "address": "0x45656c"
                    },
                    {
                        "name": "GetWindowThreadProcessId",
                        "address": "0x456570"
                    },
                    {
                        "name": "GetWindowTextA",
                        "address": "0x456574"
                    },
                    {
                        "name": "GetWindowRect",
                        "address": "0x456578"
                    },
                    {
                        "name": "GetWindowPlacement",
                        "address": "0x45657c"
                    },
                    {
                        "name": "GetWindowLongA",
                        "address": "0x456580"
                    },
                    {
                        "name": "GetWindowDC",
                        "address": "0x456584"
                    },
                    {
                        "name": "GetTopWindow",
                        "address": "0x456588"
                    },
                    {
                        "name": "GetSystemMetrics",
                        "address": "0x45658c"
                    },
                    {
                        "name": "GetSystemMenu",
                        "address": "0x456590"
                    },
                    {
                        "name": "GetSysColorBrush",
                        "address": "0x456594"
                    },
                    {
                        "name": "GetSysColor",
                        "address": "0x456598"
                    },
                    {
                        "name": "GetSubMenu",
                        "address": "0x45659c"
                    },
                    {
                        "name": "GetScrollRange",
                        "address": "0x4565a0"
                    },
                    {
                        "name": "GetScrollPos",
                        "address": "0x4565a4"
                    },
                    {
                        "name": "GetScrollInfo",
                        "address": "0x4565a8"
                    },
                    {
                        "name": "GetPropA",
                        "address": "0x4565ac"
                    },
                    {
                        "name": "GetParent",
                        "address": "0x4565b0"
                    },
                    {
                        "name": "GetWindow",
                        "address": "0x4565b4"
                    },
                    {
                        "name": "GetMenuStringA",
                        "address": "0x4565b8"
                    },
                    {
                        "name": "GetMenuState",
                        "address": "0x4565bc"
                    },
                    {
                        "name": "GetMenuItemInfoA",
                        "address": "0x4565c0"
                    },
                    {
                        "name": "GetMenuItemID",
                        "address": "0x4565c4"
                    },
                    {
                        "name": "GetMenuItemCount",
                        "address": "0x4565c8"
                    },
                    {
                        "name": "GetMenu",
                        "address": "0x4565cc"
                    },
                    {
                        "name": "GetLastActivePopup",
                        "address": "0x4565d0"
                    },
                    {
                        "name": "GetKeyboardState",
                        "address": "0x4565d4"
                    },
                    {
                        "name": "GetKeyboardLayoutList",
                        "address": "0x4565d8"
                    },
                    {
                        "name": "GetKeyboardLayout",
                        "address": "0x4565dc"
                    },
                    {
                        "name": "GetKeyState",
                        "address": "0x4565e0"
                    },
                    {
                        "name": "GetKeyNameTextA",
                        "address": "0x4565e4"
                    },
                    {
                        "name": "GetIconInfo",
                        "address": "0x4565e8"
                    },
                    {
                        "name": "GetForegroundWindow",
                        "address": "0x4565ec"
                    },
                    {
                        "name": "GetFocus",
                        "address": "0x4565f0"
                    },
                    {
                        "name": "GetDesktopWindow",
                        "address": "0x4565f4"
                    },
                    {
                        "name": "GetDCEx",
                        "address": "0x4565f8"
                    },
                    {
                        "name": "GetDC",
                        "address": "0x4565fc"
                    },
                    {
                        "name": "GetCursorPos",
                        "address": "0x456600"
                    },
                    {
                        "name": "GetCursor",
                        "address": "0x456604"
                    },
                    {
                        "name": "GetClientRect",
                        "address": "0x456608"
                    },
                    {
                        "name": "GetClassNameA",
                        "address": "0x45660c"
                    },
                    {
                        "name": "GetClassInfoA",
                        "address": "0x456610"
                    },
                    {
                        "name": "GetCapture",
                        "address": "0x456614"
                    },
                    {
                        "name": "GetActiveWindow",
                        "address": "0x456618"
                    },
                    {
                        "name": "FrameRect",
                        "address": "0x45661c"
                    },
                    {
                        "name": "FindWindowA",
                        "address": "0x456620"
                    },
                    {
                        "name": "FillRect",
                        "address": "0x456624"
                    },
                    {
                        "name": "EqualRect",
                        "address": "0x456628"
                    },
                    {
                        "name": "EnumWindows",
                        "address": "0x45662c"
                    },
                    {
                        "name": "EnumThreadWindows",
                        "address": "0x456630"
                    },
                    {
                        "name": "EndPaint",
                        "address": "0x456634"
                    },
                    {
                        "name": "EnableWindow",
                        "address": "0x456638"
                    },
                    {
                        "name": "EnableScrollBar",
                        "address": "0x45663c"
                    },
                    {
                        "name": "EnableMenuItem",
                        "address": "0x456640"
                    },
                    {
                        "name": "DrawTextA",
                        "address": "0x456644"
                    },
                    {
                        "name": "DrawMenuBar",
                        "address": "0x456648"
                    },
                    {
                        "name": "DrawIconEx",
                        "address": "0x45664c"
                    },
                    {
                        "name": "DrawIcon",
                        "address": "0x456650"
                    },
                    {
                        "name": "DrawFrameControl",
                        "address": "0x456654"
                    },
                    {
                        "name": "DrawFocusRect",
                        "address": "0x456658"
                    },
                    {
                        "name": "DrawEdge",
                        "address": "0x45665c"
                    },
                    {
                        "name": "DispatchMessageA",
                        "address": "0x456660"
                    },
                    {
                        "name": "DestroyWindow",
                        "address": "0x456664"
                    },
                    {
                        "name": "DestroyMenu",
                        "address": "0x456668"
                    },
                    {
                        "name": "DestroyIcon",
                        "address": "0x45666c"
                    },
                    {
                        "name": "DestroyCursor",
                        "address": "0x456670"
                    },
                    {
                        "name": "DeleteMenu",
                        "address": "0x456674"
                    },
                    {
                        "name": "DefWindowProcA",
                        "address": "0x456678"
                    },
                    {
                        "name": "DefMDIChildProcA",
                        "address": "0x45667c"
                    },
                    {
                        "name": "DefFrameProcA",
                        "address": "0x456680"
                    },
                    {
                        "name": "CreatePopupMenu",
                        "address": "0x456684"
                    },
                    {
                        "name": "CreateMenu",
                        "address": "0x456688"
                    },
                    {
                        "name": "CreateIcon",
                        "address": "0x45668c"
                    },
                    {
                        "name": "ClientToScreen",
                        "address": "0x456690"
                    },
                    {
                        "name": "CheckMenuItem",
                        "address": "0x456694"
                    },
                    {
                        "name": "CallWindowProcA",
                        "address": "0x456698"
                    },
                    {
                        "name": "CallNextHookEx",
                        "address": "0x45669c"
                    },
                    {
                        "name": "BeginPaint",
                        "address": "0x4566a0"
                    },
                    {
                        "name": "CharNextA",
                        "address": "0x4566a4"
                    },
                    {
                        "name": "CharLowerA",
                        "address": "0x4566a8"
                    },
                    {
                        "name": "CharToOemA",
                        "address": "0x4566ac"
                    },
                    {
                        "name": "AdjustWindowRectEx",
                        "address": "0x4566b0"
                    },
                    {
                        "name": "ActivateKeyboardLayout",
                        "address": "0x4566b4"
                    }
                ],
                "dll": "user32.dll"
            },
            {
                "imports": [
                    {
                        "name": "Sleep",
                        "address": "0x4566bc"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SafeArrayPtrOfIndex",
                        "address": "0x4566c4"
                    },
                    {
                        "name": "SafeArrayGetUBound",
                        "address": "0x4566c8"
                    },
                    {
                        "name": "SafeArrayGetLBound",
                        "address": "0x4566cc"
                    },
                    {
                        "name": "SafeArrayCreate",
                        "address": "0x4566d0"
                    },
                    {
                        "name": "VariantChangeType",
                        "address": "0x4566d4"
                    },
                    {
                        "name": "VariantCopy",
                        "address": "0x4566d8"
                    },
                    {
                        "name": "VariantClear",
                        "address": "0x4566dc"
                    },
                    {
                        "name": "VariantInit",
                        "address": "0x4566e0"
                    }
                ],
                "dll": "oleaut32.dll"
            },
            {
                "imports": [
                    {
                        "name": "ImageList_SetIconSize",
                        "address": "0x4566e8"
                    },
                    {
                        "name": "ImageList_GetIconSize",
                        "address": "0x4566ec"
                    },
                    {
                        "name": "ImageList_Write",
                        "address": "0x4566f0"
                    },
                    {
                        "name": "ImageList_Read",
                        "address": "0x4566f4"
                    },
                    {
                        "name": "ImageList_GetDragImage",
                        "address": "0x4566f8"
                    },
                    {
                        "name": "ImageList_DragShowNolock",
                        "address": "0x4566fc"
                    },
                    {
                        "name": "ImageList_SetDragCursorImage",
                        "address": "0x456700"
                    },
                    {
                        "name": "ImageList_DragMove",
                        "address": "0x456704"
                    },
                    {
                        "name": "ImageList_DragLeave",
                        "address": "0x456708"
                    },
                    {
                        "name": "ImageList_DragEnter",
                        "address": "0x45670c"
                    },
                    {
                        "name": "ImageList_EndDrag",
                        "address": "0x456710"
                    },
                    {
                        "name": "ImageList_BeginDrag",
                        "address": "0x456714"
                    },
                    {
                        "name": "ImageList_Remove",
                        "address": "0x456718"
                    },
                    {
                        "name": "ImageList_DrawEx",
                        "address": "0x45671c"
                    },
                    {
                        "name": "ImageList_Draw",
                        "address": "0x456720"
                    },
                    {
                        "name": "ImageList_GetBkColor",
                        "address": "0x456724"
                    },
                    {
                        "name": "ImageList_SetBkColor",
                        "address": "0x456728"
                    },
                    {
                        "name": "ImageList_ReplaceIcon",
                        "address": "0x45672c"
                    },
                    {
                        "name": "ImageList_Add",
                        "address": "0x456730"
                    },
                    {
                        "name": "ImageList_SetImageCount",
                        "address": "0x456734"
                    },
                    {
                        "name": "ImageList_GetImageCount",
                        "address": "0x456738"
                    },
                    {
                        "name": "ImageList_Destroy",
                        "address": "0x45673c"
                    },
                    {
                        "name": "ImageList_Create",
                        "address": "0x456740"
                    }
                ],
                "dll": "comctl32.dll"
            },
            {
                "imports": [
                    {
                        "name": "mciSendCommandA",
                        "address": "0x456748"
                    },
                    {
                        "name": "mciGetErrorStringA",
                        "address": "0x45674c"
                    }
                ],
                "dll": "winmm.dll"
            },
            {
                "imports": [
                    {
                        "name": "SHGetFolderPathA",
                        "address": "0x456754"
                    }
                ],
                "dll": "shfolder.dll"
            }
        ],
        "digital_signers": null,
        "exported_dll_name": null,
        "actual_checksum": "0x0006d0c7",
        "overlay": null,
        "imagebase": "0x00400000",
        "reported_checksum": "0x00000000",
        "icon_hash": null,
        "entrypoint": "0x004525d0",
        "timestamp": "1992-06-19 22:22:17",
        "osversion": "4.0",
        "sections": [
            {
                "name": "CODE",
                "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00001000",
                "size_of_data": "0x00051800",
                "entropy": "6.52",
                "raw_address": "0x00000400",
                "virtual_size": "0x0005162c",
                "characteristics_raw": "0x60000020"
            },
            {
                "name": "DATA",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00053000",
                "size_of_data": "0x00001800",
                "entropy": "4.37",
                "raw_address": "0x00051c00",
                "virtual_size": "0x000016d8",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": "BSS",
                "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00055000",
                "size_of_data": "0x00000000",
                "entropy": "0.00",
                "raw_address": "0x00053400",
                "virtual_size": "0x00000bfd",
                "characteristics_raw": "0xc0000000"
            },
            {
                "name": ".idata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00056000",
                "size_of_data": "0x00002200",
                "entropy": "4.85",
                "raw_address": "0x00053400",
                "virtual_size": "0x00002148",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": ".tls",
                "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00059000",
                "size_of_data": "0x00000000",
                "entropy": "0.00",
                "raw_address": "0x00055600",
                "virtual_size": "0x00000010",
                "characteristics_raw": "0xc0000000"
            },
            {
                "name": ".rdata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0005a000",
                "size_of_data": "0x00000200",
                "entropy": "0.20",
                "raw_address": "0x00055600",
                "virtual_size": "0x00000018",
                "characteristics_raw": "0x50000040"
            },
            {
                "name": ".reloc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0005b000",
                "size_of_data": "0x00005a00",
                "entropy": "6.67",
                "raw_address": "0x00055800",
                "virtual_size": "0x0000595c",
                "characteristics_raw": "0x50000040"
            },
            {
                "name": ".rsrc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00061000",
                "size_of_data": "0x00007800",
                "entropy": "4.19",
                "raw_address": "0x0005b200",
                "virtual_size": "0x00007800",
                "characteristics_raw": "0x50000040"
            }
        ],
        "resources": [],
        "dirents": [
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00056000",
                "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
                "size": "0x00002148"
            },
            {
                "virtual_address": "0x00061000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
                "size": "0x00007800"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x0005b000",
                "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
                "size": "0x0000595c"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x0005a000",
                "name": "IMAGE_DIRECTORY_ENTRY_TLS",
                "size": "0x00000018"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_IAT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
                "size": "0x00000000"
            }
        ],
        "exports": [],
        "guest_signers": {},
        "imphash": "1af5df0664b47e052dffb16ade0f4b7f",
        "icon_fuzzy": null,
        "icon": null,
        "pdbpath": null,
        "imported_dll_count": 15,
        "versioninfo": []
    }
}

[*] Resolved APIs: [
    "kernel32.dll.GetDiskFreeSpaceExA",
    "oleaut32.dll.VariantChangeTypeEx",
    "oleaut32.dll.VarNeg",
    "oleaut32.dll.VarNot",
    "oleaut32.dll.VarAdd",
    "oleaut32.dll.VarSub",
    "oleaut32.dll.VarMul",
    "oleaut32.dll.VarDiv",
    "oleaut32.dll.VarIdiv",
    "oleaut32.dll.VarMod",
    "oleaut32.dll.VarAnd",
    "oleaut32.dll.VarOr",
    "oleaut32.dll.VarXor",
    "oleaut32.dll.VarCmp",
    "oleaut32.dll.VarI4FromStr",
    "oleaut32.dll.VarR4FromStr",
    "oleaut32.dll.VarR8FromStr",
    "oleaut32.dll.VarDateFromStr",
    "oleaut32.dll.VarCyFromStr",
    "oleaut32.dll.VarBoolFromStr",
    "oleaut32.dll.VarBstrFromCy",
    "oleaut32.dll.VarBstrFromDate",
    "oleaut32.dll.VarBstrFromBool",
    "user32.dll.GetMonitorInfoA",
    "user32.dll.GetSystemMetrics",
    "user32.dll.EnumDisplayMonitors",
    "dwmapi.dll.DwmIsCompositionEnabled",
    "gdi32.dll.GetLayout",
    "gdi32.dll.GdiRealizationInfo",
    "gdi32.dll.FontIsLinked",
    "advapi32.dll.RegOpenKeyExW",
    "advapi32.dll.RegQueryInfoKeyW",
    "gdi32.dll.GetTextFaceAliasW",
    "advapi32.dll.RegEnumValueW",
    "advapi32.dll.RegCloseKey",
    "advapi32.dll.RegQueryValueExW",
    "gdi32.dll.GetFontAssocStatus",
    "advapi32.dll.RegQueryValueExA",
    "advapi32.dll.RegEnumKeyExW",
    "gdi32.dll.GdiIsMetaPrintDC",
    "user32.dll.AnimateWindow",
    "comctl32.dll.InitializeFlatSB",
    "comctl32.dll.UninitializeFlatSB",
    "comctl32.dll.FlatSB_GetScrollProp",
    "comctl32.dll.FlatSB_SetScrollProp",
    "comctl32.dll.FlatSB_EnableScrollBar",
    "comctl32.dll.FlatSB_ShowScrollBar",
    "comctl32.dll.FlatSB_GetScrollRange",
    "comctl32.dll.FlatSB_GetScrollInfo",
    "comctl32.dll.FlatSB_GetScrollPos",
    "comctl32.dll.FlatSB_SetScrollPos",
    "comctl32.dll.FlatSB_SetScrollInfo",
    "comctl32.dll.FlatSB_SetScrollRange",
    "user32.dll.SetLayeredWindowAttributes",
    "lpk.dll.LpkEditControl",
    "comctl32.dll.HIMAGELIST_QueryInterface",
    "comctl32.dll.DrawShadowText",
    "comctl32.dll.DrawSizeBox",
    "comctl32.dll.DrawScrollBar",
    "comctl32.dll.SizeBoxHwnd",
    "comctl32.dll.ScrollBar_MouseMove",
    "comctl32.dll.ScrollBar_Menu",
    "comctl32.dll.HandleScrollCmd",
    "comctl32.dll.DetachScrollBars",
    "comctl32.dll.AttachScrollBars",
    "comctl32.dll.CCSetScrollInfo",
    "comctl32.dll.CCGetScrollInfo",
    "comctl32.dll.CCEnableScrollBar",
    "comctl32.dll.QuerySystemGestureStatus",
    "uxtheme.dll.#49",
    "uxtheme.dll.CloseThemeData",
    "kernel32.dll.SortGetHandle",
    "kernel32.dll.SortCloseHandle"
]

[*] Static Analysis: {
    "pe": {
        "peid_signatures": null,
        "imports": [
            {
                "imports": [
                    {
                        "name": "DeleteCriticalSection",
                        "address": "0x456140"
                    },
                    {
                        "name": "LeaveCriticalSection",
                        "address": "0x456144"
                    },
                    {
                        "name": "EnterCriticalSection",
                        "address": "0x456148"
                    },
                    {
                        "name": "InitializeCriticalSection",
                        "address": "0x45614c"
                    },
                    {
                        "name": "VirtualFree",
                        "address": "0x456150"
                    },
                    {
                        "name": "VirtualAlloc",
                        "address": "0x456154"
                    },
                    {
                        "name": "LocalFree",
                        "address": "0x456158"
                    },
                    {
                        "name": "LocalAlloc",
                        "address": "0x45615c"
                    },
                    {
                        "name": "GetVersion",
                        "address": "0x456160"
                    },
                    {
                        "name": "GetCurrentThreadId",
                        "address": "0x456164"
                    },
                    {
                        "name": "InterlockedDecrement",
                        "address": "0x456168"
                    },
                    {
                        "name": "InterlockedIncrement",
                        "address": "0x45616c"
                    },
                    {
                        "name": "VirtualQuery",
                        "address": "0x456170"
                    },
                    {
                        "name": "WideCharToMultiByte",
                        "address": "0x456174"
                    },
                    {
                        "name": "MultiByteToWideChar",
                        "address": "0x456178"
                    },
                    {
                        "name": "lstrlenA",
                        "address": "0x45617c"
                    },
                    {
                        "name": "lstrcpynA",
                        "address": "0x456180"
                    },
                    {
                        "name": "LoadLibraryExA",
                        "address": "0x456184"
                    },
                    {
                        "name": "GetThreadLocale",
                        "address": "0x456188"
                    },
                    {
                        "name": "GetStartupInfoA",
                        "address": "0x45618c"
                    },
                    {
                        "name": "GetProcAddress",
                        "address": "0x456190"
                    },
                    {
                        "name": "GetModuleHandleA",
                        "address": "0x456194"
                    },
                    {
                        "name": "GetModuleFileNameA",
                        "address": "0x456198"
                    },
                    {
                        "name": "GetLocaleInfoA",
                        "address": "0x45619c"
                    },
                    {
                        "name": "GetCommandLineA",
                        "address": "0x4561a0"
                    },
                    {
                        "name": "FreeLibrary",
                        "address": "0x4561a4"
                    },
                    {
                        "name": "FindFirstFileA",
                        "address": "0x4561a8"
                    },
                    {
                        "name": "FindClose",
                        "address": "0x4561ac"
                    },
                    {
                        "name": "ExitProcess",
                        "address": "0x4561b0"
                    },
                    {
                        "name": "WriteFile",
                        "address": "0x4561b4"
                    },
                    {
                        "name": "UnhandledExceptionFilter",
                        "address": "0x4561b8"
                    },
                    {
                        "name": "RtlUnwind",
                        "address": "0x4561bc"
                    },
                    {
                        "name": "RaiseException",
                        "address": "0x4561c0"
                    },
                    {
                        "name": "GetStdHandle",
                        "address": "0x4561c4"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "GetKeyboardType",
                        "address": "0x4561cc"
                    },
                    {
                        "name": "LoadStringA",
                        "address": "0x4561d0"
                    },
                    {
                        "name": "MessageBoxA",
                        "address": "0x4561d4"
                    },
                    {
                        "name": "CharNextA",
                        "address": "0x4561d8"
                    }
                ],
                "dll": "user32.dll"
            },
            {
                "imports": [
                    {
                        "name": "RegQueryValueExA",
                        "address": "0x4561e0"
                    },
                    {
                        "name": "RegOpenKeyExA",
                        "address": "0x4561e4"
                    },
                    {
                        "name": "RegCloseKey",
                        "address": "0x4561e8"
                    }
                ],
                "dll": "advapi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SysFreeString",
                        "address": "0x4561f0"
                    },
                    {
                        "name": "SysReAllocStringLen",
                        "address": "0x4561f4"
                    },
                    {
                        "name": "SysAllocStringLen",
                        "address": "0x4561f8"
                    }
                ],
                "dll": "oleaut32.dll"
            },
            {
                "imports": [
                    {
                        "name": "TlsSetValue",
                        "address": "0x456200"
                    },
                    {
                        "name": "TlsGetValue",
                        "address": "0x456204"
                    },
                    {
                        "name": "LocalAlloc",
                        "address": "0x456208"
                    },
                    {
                        "name": "GetModuleHandleA",
                        "address": "0x45620c"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "RegQueryValueExA",
                        "address": "0x456214"
                    },
                    {
                        "name": "RegOpenKeyExA",
                        "address": "0x456218"
                    },
                    {
                        "name": "RegCloseKey",
                        "address": "0x45621c"
                    }
                ],
                "dll": "advapi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "lstrcpyA",
                        "address": "0x456224"
                    },
                    {
                        "name": "lstrcmpiA",
                        "address": "0x456228"
                    },
                    {
                        "name": "WriteProcessMemory",
                        "address": "0x45622c"
                    },
                    {
                        "name": "WriteFile",
                        "address": "0x456230"
                    },
                    {
                        "name": "WaitForSingleObject",
                        "address": "0x456234"
                    },
                    {
                        "name": "VirtualQuery",
                        "address": "0x456238"
                    },
                    {
                        "name": "VirtualProtect",
                        "address": "0x45623c"
                    },
                    {
                        "name": "VirtualFree",
                        "address": "0x456240"
                    },
                    {
                        "name": "VirtualAllocEx",
                        "address": "0x456244"
                    },
                    {
                        "name": "VirtualAlloc",
                        "address": "0x456248"
                    },
                    {
                        "name": "Sleep",
                        "address": "0x45624c"
                    },
                    {
                        "name": "SizeofResource",
                        "address": "0x456250"
                    },
                    {
                        "name": "SetThreadLocale",
                        "address": "0x456254"
                    },
                    {
                        "name": "SetFilePointer",
                        "address": "0x456258"
                    },
                    {
                        "name": "SetEvent",
                        "address": "0x45625c"
                    },
                    {
                        "name": "SetErrorMode",
                        "address": "0x456260"
                    },
                    {
                        "name": "SetEndOfFile",
                        "address": "0x456264"
                    },
                    {
                        "name": "ResetEvent",
                        "address": "0x456268"
                    },
                    {
                        "name": "ReadProcessMemory",
                        "address": "0x45626c"
                    },
                    {
                        "name": "ReadFile",
                        "address": "0x456270"
                    },
                    {
                        "name": "MulDiv",
                        "address": "0x456274"
                    },
                    {
                        "name": "LockResource",
                        "address": "0x456278"
                    },
                    {
                        "name": "LoadResource",
                        "address": "0x45627c"
                    },
                    {
                        "name": "LoadLibraryA",
                        "address": "0x456280"
                    },
                    {
                        "name": "LeaveCriticalSection",
                        "address": "0x456284"
                    },
                    {
                        "name": "InitializeCriticalSection",
                        "address": "0x456288"
                    },
                    {
                        "name": "GlobalUnlock",
                        "address": "0x45628c"
                    },
                    {
                        "name": "GlobalReAlloc",
                        "address": "0x456290"
                    },
                    {
                        "name": "GlobalHandle",
                        "address": "0x456294"
                    },
                    {
                        "name": "GlobalLock",
                        "address": "0x456298"
                    },
                    {
                        "name": "GlobalFree",
                        "address": "0x45629c"
                    },
                    {
                        "name": "GlobalFindAtomA",
                        "address": "0x4562a0"
                    },
                    {
                        "name": "GlobalDeleteAtom",
                        "address": "0x4562a4"
                    },
                    {
                        "name": "GlobalAlloc",
                        "address": "0x4562a8"
                    },
                    {
                        "name": "GlobalAddAtomA",
                        "address": "0x4562ac"
                    },
                    {
                        "name": "GetVersionExA",
                        "address": "0x4562b0"
                    },
                    {
                        "name": "GetVersion",
                        "address": "0x4562b4"
                    },
                    {
                        "name": "GetTickCount",
                        "address": "0x4562b8"
                    },
                    {
                        "name": "GetThreadLocale",
                        "address": "0x4562bc"
                    },
                    {
                        "name": "GetSystemInfo",
                        "address": "0x4562c0"
                    },
                    {
                        "name": "GetStringTypeExA",
                        "address": "0x4562c4"
                    },
                    {
                        "name": "GetStdHandle",
                        "address": "0x4562c8"
                    },
                    {
                        "name": "GetProcAddress",
                        "address": "0x4562cc"
                    },
                    {
                        "name": "GetModuleHandleA",
                        "address": "0x4562d0"
                    },
                    {
                        "name": "GetModuleFileNameA",
                        "address": "0x4562d4"
                    },
                    {
                        "name": "GetLocaleInfoA",
                        "address": "0x4562d8"
                    },
                    {
                        "name": "GetLocalTime",
                        "address": "0x4562dc"
                    },
                    {
                        "name": "GetLastError",
                        "address": "0x4562e0"
                    },
                    {
                        "name": "GetFullPathNameA",
                        "address": "0x4562e4"
                    },
                    {
                        "name": "GetExitCodeThread",
                        "address": "0x4562e8"
                    },
                    {
                        "name": "GetDiskFreeSpaceA",
                        "address": "0x4562ec"
                    },
                    {
                        "name": "GetDateFormatA",
                        "address": "0x4562f0"
                    },
                    {
                        "name": "GetCurrentThreadId",
                        "address": "0x4562f4"
                    },
                    {
                        "name": "GetCurrentProcessId",
                        "address": "0x4562f8"
                    },
                    {
                        "name": "GetCPInfo",
                        "address": "0x4562fc"
                    },
                    {
                        "name": "GetACP",
                        "address": "0x456300"
                    },
                    {
                        "name": "FreeResource",
                        "address": "0x456304"
                    },
                    {
                        "name": "InterlockedExchange",
                        "address": "0x456308"
                    },
                    {
                        "name": "FreeLibrary",
                        "address": "0x45630c"
                    },
                    {
                        "name": "FormatMessageA",
                        "address": "0x456310"
                    },
                    {
                        "name": "FindResourceA",
                        "address": "0x456314"
                    },
                    {
                        "name": "FindFirstFileA",
                        "address": "0x456318"
                    },
                    {
                        "name": "FindClose",
                        "address": "0x45631c"
                    },
                    {
                        "name": "FileTimeToLocalFileTime",
                        "address": "0x456320"
                    },
                    {
                        "name": "FileTimeToDosDateTime",
                        "address": "0x456324"
                    },
                    {
                        "name": "ExitProcess",
                        "address": "0x456328"
                    },
                    {
                        "name": "EnumCalendarInfoA",
                        "address": "0x45632c"
                    },
                    {
                        "name": "EnterCriticalSection",
                        "address": "0x456330"
                    },
                    {
                        "name": "DeleteCriticalSection",
                        "address": "0x456334"
                    },
                    {
                        "name": "CreateThread",
                        "address": "0x456338"
                    },
                    {
                        "name": "CreateRemoteThread",
                        "address": "0x45633c"
                    },
                    {
                        "name": "CreateProcessA",
                        "address": "0x456340"
                    },
                    {
                        "name": "CreateFileA",
                        "address": "0x456344"
                    },
                    {
                        "name": "CreateEventA",
                        "address": "0x456348"
                    },
                    {
                        "name": "CompareStringA",
                        "address": "0x45634c"
                    },
                    {
                        "name": "CloseHandle",
                        "address": "0x456350"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "VerQueryValueA",
                        "address": "0x456358"
                    },
                    {
                        "name": "GetFileVersionInfoSizeA",
                        "address": "0x45635c"
                    },
                    {
                        "name": "GetFileVersionInfoA",
                        "address": "0x456360"
                    }
                ],
                "dll": "version.dll"
            },
            {
                "imports": [
                    {
                        "name": "UnrealizeObject",
                        "address": "0x456368"
                    },
                    {
                        "name": "StretchBlt",
                        "address": "0x45636c"
                    },
                    {
                        "name": "SetWindowOrgEx",
                        "address": "0x456370"
                    },
                    {
                        "name": "SetViewportOrgEx",
                        "address": "0x456374"
                    },
                    {
                        "name": "SetTextColor",
                        "address": "0x456378"
                    },
                    {
                        "name": "SetStretchBltMode",
                        "address": "0x45637c"
                    },
                    {
                        "name": "SetROP2",
                        "address": "0x456380"
                    },
                    {
                        "name": "SetPixel",
                        "address": "0x456384"
                    },
                    {
                        "name": "SetDIBColorTable",
                        "address": "0x456388"
                    },
                    {
                        "name": "SetBrushOrgEx",
                        "address": "0x45638c"
                    },
                    {
                        "name": "SetBkMode",
                        "address": "0x456390"
                    },
                    {
                        "name": "SetBkColor",
                        "address": "0x456394"
                    },
                    {
                        "name": "SelectPalette",
                        "address": "0x456398"
                    },
                    {
                        "name": "SelectObject",
                        "address": "0x45639c"
                    },
                    {
                        "name": "SaveDC",
                        "address": "0x4563a0"
                    },
                    {
                        "name": "RestoreDC",
                        "address": "0x4563a4"
                    },
                    {
                        "name": "Rectangle",
                        "address": "0x4563a8"
                    },
                    {
                        "name": "RectVisible",
                        "address": "0x4563ac"
                    },
                    {
                        "name": "RealizePalette",
                        "address": "0x4563b0"
                    },
                    {
                        "name": "PatBlt",
                        "address": "0x4563b4"
                    },
                    {
                        "name": "MoveToEx",
                        "address": "0x4563b8"
                    },
                    {
                        "name": "MaskBlt",
                        "address": "0x4563bc"
                    },
                    {
                        "name": "LineTo",
                        "address": "0x4563c0"
                    },
                    {
                        "name": "IntersectClipRect",
                        "address": "0x4563c4"
                    },
                    {
                        "name": "GetWindowOrgEx",
                        "address": "0x4563c8"
                    },
                    {
                        "name": "GetTextMetricsA",
                        "address": "0x4563cc"
                    },
                    {
                        "name": "GetTextExtentPoint32A",
                        "address": "0x4563d0"
                    },
                    {
                        "name": "GetSystemPaletteEntries",
                        "address": "0x4563d4"
                    },
                    {
                        "name": "GetStockObject",
                        "address": "0x4563d8"
                    },
                    {
                        "name": "GetPixel",
                        "address": "0x4563dc"
                    },
                    {
                        "name": "GetPaletteEntries",
                        "address": "0x4563e0"
                    },
                    {
                        "name": "GetObjectA",
                        "address": "0x4563e4"
                    },
                    {
                        "name": "GetMapMode",
                        "address": "0x4563e8"
                    },
                    {
                        "name": "GetDeviceCaps",
                        "address": "0x4563ec"
                    },
                    {
                        "name": "GetDIBits",
                        "address": "0x4563f0"
                    },
                    {
                        "name": "GetDIBColorTable",
                        "address": "0x4563f4"
                    },
                    {
                        "name": "GetDCOrgEx",
                        "address": "0x4563f8"
                    },
                    {
                        "name": "GetCurrentPositionEx",
                        "address": "0x4563fc"
                    },
                    {
                        "name": "GetClipBox",
                        "address": "0x456400"
                    },
                    {
                        "name": "GetBrushOrgEx",
                        "address": "0x456404"
                    },
                    {
                        "name": "GetBitmapBits",
                        "address": "0x456408"
                    },
                    {
                        "name": "ExcludeClipRect",
                        "address": "0x45640c"
                    },
                    {
                        "name": "DeleteObject",
                        "address": "0x456410"
                    },
                    {
                        "name": "DeleteDC",
                        "address": "0x456414"
                    },
                    {
                        "name": "CreateSolidBrush",
                        "address": "0x456418"
                    },
                    {
                        "name": "CreatePenIndirect",
                        "address": "0x45641c"
                    },
                    {
                        "name": "CreatePalette",
                        "address": "0x456420"
                    },
                    {
                        "name": "CreateHalftonePalette",
                        "address": "0x456424"
                    },
                    {
                        "name": "CreateFontIndirectA",
                        "address": "0x456428"
                    },
                    {
                        "name": "CreateDIBitmap",
                        "address": "0x45642c"
                    },
                    {
                        "name": "CreateDIBSection",
                        "address": "0x456430"
                    },
                    {
                        "name": "CreateCompatibleDC",
                        "address": "0x456434"
                    },
                    {
                        "name": "CreateCompatibleBitmap",
                        "address": "0x456438"
                    },
                    {
                        "name": "CreateBrushIndirect",
                        "address": "0x45643c"
                    },
                    {
                        "name": "CreateBitmap",
                        "address": "0x456440"
                    },
                    {
                        "name": "BitBlt",
                        "address": "0x456444"
                    }
                ],
                "dll": "gdi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "CreateWindowExA",
                        "address": "0x45644c"
                    },
                    {
                        "name": "WindowFromPoint",
                        "address": "0x456450"
                    },
                    {
                        "name": "WinHelpA",
                        "address": "0x456454"
                    },
                    {
                        "name": "WaitMessage",
                        "address": "0x456458"
                    },
                    {
                        "name": "UpdateWindow",
                        "address": "0x45645c"
                    },
                    {
                        "name": "UnregisterClassA",
                        "address": "0x456460"
                    },
                    {
                        "name": "UnhookWindowsHookEx",
                        "address": "0x456464"
                    },
                    {
                        "name": "TranslateMessage",
                        "address": "0x456468"
                    },
                    {
                        "name": "TranslateMDISysAccel",
                        "address": "0x45646c"
                    },
                    {
                        "name": "TrackPopupMenu",
                        "address": "0x456470"
                    },
                    {
                        "name": "SystemParametersInfoA",
                        "address": "0x456474"
                    },
                    {
                        "name": "ShowWindow",
                        "address": "0x456478"
                    },
                    {
                        "name": "ShowScrollBar",
                        "address": "0x45647c"
                    },
                    {
                        "name": "ShowOwnedPopups",
                        "address": "0x456480"
                    },
                    {
                        "name": "ShowCursor",
                        "address": "0x456484"
                    },
                    {
                        "name": "SetWindowsHookExA",
                        "address": "0x456488"
                    },
                    {
                        "name": "SetWindowPos",
                        "address": "0x45648c"
                    },
                    {
                        "name": "SetWindowPlacement",
                        "address": "0x456490"
                    },
                    {
                        "name": "SetWindowLongA",
                        "address": "0x456494"
                    },
                    {
                        "name": "SetTimer",
                        "address": "0x456498"
                    },
                    {
                        "name": "SetScrollRange",
                        "address": "0x45649c"
                    },
                    {
                        "name": "SetScrollPos",
                        "address": "0x4564a0"
                    },
                    {
                        "name": "SetScrollInfo",
                        "address": "0x4564a4"
                    },
                    {
                        "name": "SetRect",
                        "address": "0x4564a8"
                    },
                    {
                        "name": "SetPropA",
                        "address": "0x4564ac"
                    },
                    {
                        "name": "SetParent",
                        "address": "0x4564b0"
                    },
                    {
                        "name": "SetMenuItemInfoA",
                        "address": "0x4564b4"
                    },
                    {
                        "name": "SetMenu",
                        "address": "0x4564b8"
                    },
                    {
                        "name": "SetForegroundWindow",
                        "address": "0x4564bc"
                    },
                    {
                        "name": "SetFocus",
                        "address": "0x4564c0"
                    },
                    {
                        "name": "SetCursor",
                        "address": "0x4564c4"
                    },
                    {
                        "name": "SetClassLongA",
                        "address": "0x4564c8"
                    },
                    {
                        "name": "SetCapture",
                        "address": "0x4564cc"
                    },
                    {
                        "name": "SetActiveWindow",
                        "address": "0x4564d0"
                    },
                    {
                        "name": "SendMessageA",
                        "address": "0x4564d4"
                    },
                    {
                        "name": "ScrollWindow",
                        "address": "0x4564d8"
                    },
                    {
                        "name": "ScreenToClient",
                        "address": "0x4564dc"
                    },
                    {
                        "name": "RemovePropA",
                        "address": "0x4564e0"
                    },
                    {
                        "name": "RemoveMenu",
                        "address": "0x4564e4"
                    },
                    {
                        "name": "ReleaseDC",
                        "address": "0x4564e8"
                    },
                    {
                        "name": "ReleaseCapture",
                        "address": "0x4564ec"
                    },
                    {
                        "name": "RegisterWindowMessageA",
                        "address": "0x4564f0"
                    },
                    {
                        "name": "RegisterClipboardFormatA",
                        "address": "0x4564f4"
                    },
                    {
                        "name": "RegisterClassA",
                        "address": "0x4564f8"
                    },
                    {
                        "name": "RedrawWindow",
                        "address": "0x4564fc"
                    },
                    {
                        "name": "PtInRect",
                        "address": "0x456500"
                    },
                    {
                        "name": "PostQuitMessage",
                        "address": "0x456504"
                    },
                    {
                        "name": "PostMessageA",
                        "address": "0x456508"
                    },
                    {
                        "name": "PeekMessageA",
                        "address": "0x45650c"
                    },
                    {
                        "name": "OffsetRect",
                        "address": "0x456510"
                    },
                    {
                        "name": "OemToCharA",
                        "address": "0x456514"
                    },
                    {
                        "name": "MessageBoxA",
                        "address": "0x456518"
                    },
                    {
                        "name": "MapWindowPoints",
                        "address": "0x45651c"
                    },
                    {
                        "name": "MapVirtualKeyA",
                        "address": "0x456520"
                    },
                    {
                        "name": "LoadStringA",
                        "address": "0x456524"
                    },
                    {
                        "name": "LoadKeyboardLayoutA",
                        "address": "0x456528"
                    },
                    {
                        "name": "LoadIconA",
                        "address": "0x45652c"
                    },
                    {
                        "name": "LoadCursorA",
                        "address": "0x456530"
                    },
                    {
                        "name": "LoadBitmapA",
                        "address": "0x456534"
                    },
                    {
                        "name": "KillTimer",
                        "address": "0x456538"
                    },
                    {
                        "name": "IsZoomed",
                        "address": "0x45653c"
                    },
                    {
                        "name": "IsWindowVisible",
                        "address": "0x456540"
                    },
                    {
                        "name": "IsWindowEnabled",
                        "address": "0x456544"
                    },
                    {
                        "name": "IsWindow",
                        "address": "0x456548"
                    },
                    {
                        "name": "IsRectEmpty",
                        "address": "0x45654c"
                    },
                    {
                        "name": "IsIconic",
                        "address": "0x456550"
                    },
                    {
                        "name": "IsDialogMessageA",
                        "address": "0x456554"
                    },
                    {
                        "name": "IsChild",
                        "address": "0x456558"
                    },
                    {
                        "name": "InvalidateRect",
                        "address": "0x45655c"
                    },
                    {
                        "name": "IntersectRect",
                        "address": "0x456560"
                    },
                    {
                        "name": "InsertMenuItemA",
                        "address": "0x456564"
                    },
                    {
                        "name": "InsertMenuA",
                        "address": "0x456568"
                    },
                    {
                        "name": "InflateRect",
                        "address": "0x45656c"
                    },
                    {
                        "name": "GetWindowThreadProcessId",
                        "address": "0x456570"
                    },
                    {
                        "name": "GetWindowTextA",
                        "address": "0x456574"
                    },
                    {
                        "name": "GetWindowRect",
                        "address": "0x456578"
                    },
                    {
                        "name": "GetWindowPlacement",
                        "address": "0x45657c"
                    },
                    {
                        "name": "GetWindowLongA",
                        "address": "0x456580"
                    },
                    {
                        "name": "GetWindowDC",
                        "address": "0x456584"
                    },
                    {
                        "name": "GetTopWindow",
                        "address": "0x456588"
                    },
                    {
                        "name": "GetSystemMetrics",
                        "address": "0x45658c"
                    },
                    {
                        "name": "GetSystemMenu",
                        "address": "0x456590"
                    },
                    {
                        "name": "GetSysColorBrush",
                        "address": "0x456594"
                    },
                    {
                        "name": "GetSysColor",
                        "address": "0x456598"
                    },
                    {
                        "name": "GetSubMenu",
                        "address": "0x45659c"
                    },
                    {
                        "name": "GetScrollRange",
                        "address": "0x4565a0"
                    },
                    {
                        "name": "GetScrollPos",
                        "address": "0x4565a4"
                    },
                    {
                        "name": "GetScrollInfo",
                        "address": "0x4565a8"
                    },
                    {
                        "name": "GetPropA",
                        "address": "0x4565ac"
                    },
                    {
                        "name": "GetParent",
                        "address": "0x4565b0"
                    },
                    {
                        "name": "GetWindow",
                        "address": "0x4565b4"
                    },
                    {
                        "name": "GetMenuStringA",
                        "address": "0x4565b8"
                    },
                    {
                        "name": "GetMenuState",
                        "address": "0x4565bc"
                    },
                    {
                        "name": "GetMenuItemInfoA",
                        "address": "0x4565c0"
                    },
                    {
                        "name": "GetMenuItemID",
                        "address": "0x4565c4"
                    },
                    {
                        "name": "GetMenuItemCount",
                        "address": "0x4565c8"
                    },
                    {
                        "name": "GetMenu",
                        "address": "0x4565cc"
                    },
                    {
                        "name": "GetLastActivePopup",
                        "address": "0x4565d0"
                    },
                    {
                        "name": "GetKeyboardState",
                        "address": "0x4565d4"
                    },
                    {
                        "name": "GetKeyboardLayoutList",
                        "address": "0x4565d8"
                    },
                    {
                        "name": "GetKeyboardLayout",
                        "address": "0x4565dc"
                    },
                    {
                        "name": "GetKeyState",
                        "address": "0x4565e0"
                    },
                    {
                        "name": "GetKeyNameTextA",
                        "address": "0x4565e4"
                    },
                    {
                        "name": "GetIconInfo",
                        "address": "0x4565e8"
                    },
                    {
                        "name": "GetForegroundWindow",
                        "address": "0x4565ec"
                    },
                    {
                        "name": "GetFocus",
                        "address": "0x4565f0"
                    },
                    {
                        "name": "GetDesktopWindow",
                        "address": "0x4565f4"
                    },
                    {
                        "name": "GetDCEx",
                        "address": "0x4565f8"
                    },
                    {
                        "name": "GetDC",
                        "address": "0x4565fc"
                    },
                    {
                        "name": "GetCursorPos",
                        "address": "0x456600"
                    },
                    {
                        "name": "GetCursor",
                        "address": "0x456604"
                    },
                    {
                        "name": "GetClientRect",
                        "address": "0x456608"
                    },
                    {
                        "name": "GetClassNameA",
                        "address": "0x45660c"
                    },
                    {
                        "name": "GetClassInfoA",
                        "address": "0x456610"
                    },
                    {
                        "name": "GetCapture",
                        "address": "0x456614"
                    },
                    {
                        "name": "GetActiveWindow",
                        "address": "0x456618"
                    },
                    {
                        "name": "FrameRect",
                        "address": "0x45661c"
                    },
                    {
                        "name": "FindWindowA",
                        "address": "0x456620"
                    },
                    {
                        "name": "FillRect",
                        "address": "0x456624"
                    },
                    {
                        "name": "EqualRect",
                        "address": "0x456628"
                    },
                    {
                        "name": "EnumWindows",
                        "address": "0x45662c"
                    },
                    {
                        "name": "EnumThreadWindows",
                        "address": "0x456630"
                    },
                    {
                        "name": "EndPaint",
                        "address": "0x456634"
                    },
                    {
                        "name": "EnableWindow",
                        "address": "0x456638"
                    },
                    {
                        "name": "EnableScrollBar",
                        "address": "0x45663c"
                    },
                    {
                        "name": "EnableMenuItem",
                        "address": "0x456640"
                    },
                    {
                        "name": "DrawTextA",
                        "address": "0x456644"
                    },
                    {
                        "name": "DrawMenuBar",
                        "address": "0x456648"
                    },
                    {
                        "name": "DrawIconEx",
                        "address": "0x45664c"
                    },
                    {
                        "name": "DrawIcon",
                        "address": "0x456650"
                    },
                    {
                        "name": "DrawFrameControl",
                        "address": "0x456654"
                    },
                    {
                        "name": "DrawFocusRect",
                        "address": "0x456658"
                    },
                    {
                        "name": "DrawEdge",
                        "address": "0x45665c"
                    },
                    {
                        "name": "DispatchMessageA",
                        "address": "0x456660"
                    },
                    {
                        "name": "DestroyWindow",
                        "address": "0x456664"
                    },
                    {
                        "name": "DestroyMenu",
                        "address": "0x456668"
                    },
                    {
                        "name": "DestroyIcon",
                        "address": "0x45666c"
                    },
                    {
                        "name": "DestroyCursor",
                        "address": "0x456670"
                    },
                    {
                        "name": "DeleteMenu",
                        "address": "0x456674"
                    },
                    {
                        "name": "DefWindowProcA",
                        "address": "0x456678"
                    },
                    {
                        "name": "DefMDIChildProcA",
                        "address": "0x45667c"
                    },
                    {
                        "name": "DefFrameProcA",
                        "address": "0x456680"
                    },
                    {
                        "name": "CreatePopupMenu",
                        "address": "0x456684"
                    },
                    {
                        "name": "CreateMenu",
                        "address": "0x456688"
                    },
                    {
                        "name": "CreateIcon",
                        "address": "0x45668c"
                    },
                    {
                        "name": "ClientToScreen",
                        "address": "0x456690"
                    },
                    {
                        "name": "CheckMenuItem",
                        "address": "0x456694"
                    },
                    {
                        "name": "CallWindowProcA",
                        "address": "0x456698"
                    },
                    {
                        "name": "CallNextHookEx",
                        "address": "0x45669c"
                    },
                    {
                        "name": "BeginPaint",
                        "address": "0x4566a0"
                    },
                    {
                        "name": "CharNextA",
                        "address": "0x4566a4"
                    },
                    {
                        "name": "CharLowerA",
                        "address": "0x4566a8"
                    },
                    {
                        "name": "CharToOemA",
                        "address": "0x4566ac"
                    },
                    {
                        "name": "AdjustWindowRectEx",
                        "address": "0x4566b0"
                    },
                    {
                        "name": "ActivateKeyboardLayout",
                        "address": "0x4566b4"
                    }
                ],
                "dll": "user32.dll"
            },
            {
                "imports": [
                    {
                        "name": "Sleep",
                        "address": "0x4566bc"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SafeArrayPtrOfIndex",
                        "address": "0x4566c4"
                    },
                    {
                        "name": "SafeArrayGetUBound",
                        "address": "0x4566c8"
                    },
                    {
                        "name": "SafeArrayGetLBound",
                        "address": "0x4566cc"
                    },
                    {
                        "name": "SafeArrayCreate",
                        "address": "0x4566d0"
                    },
                    {
                        "name": "VariantChangeType",
                        "address": "0x4566d4"
                    },
                    {
                        "name": "VariantCopy",
                        "address": "0x4566d8"
                    },
                    {
                        "name": "VariantClear",
                        "address": "0x4566dc"
                    },
                    {
                        "name": "VariantInit",
                        "address": "0x4566e0"
                    }
                ],
                "dll": "oleaut32.dll"
            },
            {
                "imports": [
                    {
                        "name": "ImageList_SetIconSize",
                        "address": "0x4566e8"
                    },
                    {
                        "name": "ImageList_GetIconSize",
                        "address": "0x4566ec"
                    },
                    {
                        "name": "ImageList_Write",
                        "address": "0x4566f0"
                    },
                    {
                        "name": "ImageList_Read",
                        "address": "0x4566f4"
                    },
                    {
                        "name": "ImageList_GetDragImage",
                        "address": "0x4566f8"
                    },
                    {
                        "name": "ImageList_DragShowNolock",
                        "address": "0x4566fc"
                    },
                    {
                        "name": "ImageList_SetDragCursorImage",
                        "address": "0x456700"
                    },
                    {
                        "name": "ImageList_DragMove",
                        "address": "0x456704"
                    },
                    {
                        "name": "ImageList_DragLeave",
                        "address": "0x456708"
                    },
                    {
                        "name": "ImageList_DragEnter",
                        "address": "0x45670c"
                    },
                    {
                        "name": "ImageList_EndDrag",
                        "address": "0x456710"
                    },
                    {
                        "name": "ImageList_BeginDrag",
                        "address": "0x456714"
                    },
                    {
                        "name": "ImageList_Remove",
                        "address": "0x456718"
                    },
                    {
                        "name": "ImageList_DrawEx",
                        "address": "0x45671c"
                    },
                    {
                        "name": "ImageList_Draw",
                        "address": "0x456720"
                    },
                    {
                        "name": "ImageList_GetBkColor",
                        "address": "0x456724"
                    },
                    {
                        "name": "ImageList_SetBkColor",
                        "address": "0x456728"
                    },
                    {
                        "name": "ImageList_ReplaceIcon",
                        "address": "0x45672c"
                    },
                    {
                        "name": "ImageList_Add",
                        "address": "0x456730"
                    },
                    {
                        "name": "ImageList_SetImageCount",
                        "address": "0x456734"
                    },
                    {
                        "name": "ImageList_GetImageCount",
                        "address": "0x456738"
                    },
                    {
                        "name": "ImageList_Destroy",
                        "address": "0x45673c"
                    },
                    {
                        "name": "ImageList_Create",
                        "address": "0x456740"
                    }
                ],
                "dll": "comctl32.dll"
            },
            {
                "imports": [
                    {
                        "name": "mciSendCommandA",
                        "address": "0x456748"
                    },
                    {
                        "name": "mciGetErrorStringA",
                        "address": "0x45674c"
                    }
                ],
                "dll": "winmm.dll"
            },
            {
                "imports": [
                    {
                        "name": "SHGetFolderPathA",
                        "address": "0x456754"
                    }
                ],
                "dll": "shfolder.dll"
            }
        ],
        "digital_signers": null,
        "exported_dll_name": null,
        "actual_checksum": "0x0006d0c7",
        "overlay": null,
        "imagebase": "0x00400000",
        "reported_checksum": "0x00000000",
        "icon_hash": null,
        "entrypoint": "0x004525d0",
        "timestamp": "1992-06-19 22:22:17",
        "osversion": "4.0",
        "sections": [
            {
                "name": "CODE",
                "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00001000",
                "size_of_data": "0x00051800",
                "entropy": "6.52",
                "raw_address": "0x00000400",
                "virtual_size": "0x0005162c",
                "characteristics_raw": "0x60000020"
            },
            {
                "name": "DATA",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00053000",
                "size_of_data": "0x00001800",
                "entropy": "4.37",
                "raw_address": "0x00051c00",
                "virtual_size": "0x000016d8",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": "BSS",
                "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00055000",
                "size_of_data": "0x00000000",
                "entropy": "0.00",
                "raw_address": "0x00053400",
                "virtual_size": "0x00000bfd",
                "characteristics_raw": "0xc0000000"
            },
            {
                "name": ".idata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00056000",
                "size_of_data": "0x00002200",
                "entropy": "4.85",
                "raw_address": "0x00053400",
                "virtual_size": "0x00002148",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": ".tls",
                "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00059000",
                "size_of_data": "0x00000000",
                "entropy": "0.00",
                "raw_address": "0x00055600",
                "virtual_size": "0x00000010",
                "characteristics_raw": "0xc0000000"
            },
            {
                "name": ".rdata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0005a000",
                "size_of_data": "0x00000200",
                "entropy": "0.20",
                "raw_address": "0x00055600",
                "virtual_size": "0x00000018",
                "characteristics_raw": "0x50000040"
            },
            {
                "name": ".reloc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0005b000",
                "size_of_data": "0x00005a00",
                "entropy": "6.67",
                "raw_address": "0x00055800",
                "virtual_size": "0x0000595c",
                "characteristics_raw": "0x50000040"
            },
            {
                "name": ".rsrc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00061000",
                "size_of_data": "0x00007800",
                "entropy": "4.19",
                "raw_address": "0x0005b200",
                "virtual_size": "0x00007800",
                "characteristics_raw": "0x50000040"
            }
        ],
        "resources": [],
        "dirents": [
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00056000",
                "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
                "size": "0x00002148"
            },
            {
                "virtual_address": "0x00061000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
                "size": "0x00007800"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x0005b000",
                "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
                "size": "0x0000595c"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x0005a000",
                "name": "IMAGE_DIRECTORY_ENTRY_TLS",
                "size": "0x00000018"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_IAT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
                "size": "0x00000000"
            }
        ],
        "exports": [],
        "guest_signers": {},
        "imphash": "1af5df0664b47e052dffb16ade0f4b7f",
        "icon_fuzzy": null,
        "icon": null,
        "pdbpath": null,
        "imported_dll_count": 15,
        "versioninfo": []
    }
}