Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [*] MalFamily: ""
- [*] MalScore: 10.0
- [*] File Name: "2602377"
- [*] File Size: 629760
- [*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
- [*] SHA256: "e7b4bf79876c739e3c7156a4288327d61d7a53b0ab9a2e23cfca0c410fcc935d"
- [*] MD5: "c3cce5b6016bd39aa2b0db98a3389844"
- [*] SHA1: "bf3e043b1faec112f630121bec1c970f86004d7e"
- [*] SHA512: "2725988af9d7ebcba3fbc8f0bcb1996ec316a4e4e85c4a5fefad3ef606d4d3761f73594122e35fd421102955d3474e0beec1ddb5c2e2398f211e494b8e1ba37f"
- [*] CRC32: "A2A183E7"
- [*] SSDEEP: "12288:uKqiWyy2ewg7fz5DzJ/Xy2rqzTePAhiezh5TyxAH4r/ev4t:Smowg7BzNROzToAsBrewt"
- [*] Process Execution: []
- [*] Signatures Detected: [
- {
- "Description": "File has been identified by 23 Antiviruses on VirusTotal as malicious",
- "Details": [
- {
- "FireEye": "Generic.mg.c3cce5b6016bd39a"
- },
- {
- "Cybereason": "malicious.b1faec"
- },
- {
- "TrendMicro": "TrojanSpy.Win32.LOKI.SMDD.hp"
- },
- {
- "Symantec": "Packed.Generic.516"
- },
- {
- "APEX": "Malicious"
- },
- {
- "Paloalto": "generic.ml"
- },
- {
- "Kaspersky": "HEUR:Backdoor.Win32.Androm.gen"
- },
- {
- "Rising": "Trojan.Wacatac!8.10C01/N3#87% (RDM+:cmRtazpBGS4gmSyjJN2Ih6UKVlbq)"
- },
- {
- "Invincea": "heuristic"
- },
- {
- "McAfee-GW-Edition": "BehavesLike.Win32.Fareit.jh"
- },
- {
- "Endgame": "malicious (high confidence)"
- },
- {
- "ZoneAlarm": "HEUR:Backdoor.Win32.Androm.gen"
- },
- {
- "Microsoft": "Trojan:Win32/Wacatac.B!ml"
- },
- {
- "AhnLab-V3": "Win-Trojan/Delphiless.Exp"
- },
- {
- "Acronis": "suspicious"
- },
- {
- "Cylance": "Unsafe"
- },
- {
- "ESET-NOD32": "a variant of Win32/Injector.EGIV"
- },
- {
- "TrendMicro-HouseCall": "TrojanSpy.Win32.LOKI.SMDD.hp"
- },
- {
- "SentinelOne": "DFI - Suspicious PE"
- },
- {
- "AVG": "Win32:Trojan-gen"
- },
- {
- "Avast": "Win32:Trojan-gen"
- },
- {
- "CrowdStrike": "win/malicious_confidence_80% (D)"
- },
- {
- "Qihoo-360": "HEUR/QVM05.1.39C7.Malware.Gen"
- }
- ]
- },
- {
- "Description": "Anomalous binary characteristics",
- "Details": [
- {
- "anomaly": "Timestamp on binary predates the release date of the OS version it requires by at least a year"
- }
- ]
- }
- ]
- [*] Started Service: []
- [*] Executed Commands: []
- [*] Mutexes: []
- [*] Modified Files: []
- [*] Deleted Files: []
- [*] Modified Registry Keys: []
- [*] Deleted Registry Keys: []
- [*] DNS Communications: []
- [*] Domains: []
- [*] Network Communication - ICMP: []
- [*] Network Communication - HTTP: []
- [*] Network Communication - SMTP: []
- [*] Network Communication - Hosts: []
- [*] Network Communication - IRC: []
- [*] Static Analysis: {
- "pe": {
- "peid_signatures": null,
- "imports": [
- {
- "imports": [
- {
- "name": "DeleteCriticalSection",
- "address": "0x473154"
- },
- {
- "name": "LeaveCriticalSection",
- "address": "0x473158"
- },
- {
- "name": "EnterCriticalSection",
- "address": "0x47315c"
- },
- {
- "name": "InitializeCriticalSection",
- "address": "0x473160"
- },
- {
- "name": "VirtualFree",
- "address": "0x473164"
- },
- {
- "name": "VirtualAlloc",
- "address": "0x473168"
- },
- {
- "name": "LocalFree",
- "address": "0x47316c"
- },
- {
- "name": "LocalAlloc",
- "address": "0x473170"
- },
- {
- "name": "GetVersion",
- "address": "0x473174"
- },
- {
- "name": "GetCurrentThreadId",
- "address": "0x473178"
- },
- {
- "name": "InterlockedDecrement",
- "address": "0x47317c"
- },
- {
- "name": "InterlockedIncrement",
- "address": "0x473180"
- },
- {
- "name": "VirtualQuery",
- "address": "0x473184"
- },
- {
- "name": "WideCharToMultiByte",
- "address": "0x473188"
- },
- {
- "name": "MultiByteToWideChar",
- "address": "0x47318c"
- },
- {
- "name": "lstrlenA",
- "address": "0x473190"
- },
- {
- "name": "lstrcpynA",
- "address": "0x473194"
- },
- {
- "name": "LoadLibraryExA",
- "address": "0x473198"
- },
- {
- "name": "GetThreadLocale",
- "address": "0x47319c"
- },
- {
- "name": "GetStartupInfoA",
- "address": "0x4731a0"
- },
- {
- "name": "GetProcAddress",
- "address": "0x4731a4"
- },
- {
- "name": "GetModuleHandleA",
- "address": "0x4731a8"
- },
- {
- "name": "GetModuleFileNameA",
- "address": "0x4731ac"
- },
- {
- "name": "GetLocaleInfoA",
- "address": "0x4731b0"
- },
- {
- "name": "GetCommandLineA",
- "address": "0x4731b4"
- },
- {
- "name": "FreeLibrary",
- "address": "0x4731b8"
- },
- {
- "name": "FindFirstFileA",
- "address": "0x4731bc"
- },
- {
- "name": "FindClose",
- "address": "0x4731c0"
- },
- {
- "name": "ExitProcess",
- "address": "0x4731c4"
- },
- {
- "name": "WriteFile",
- "address": "0x4731c8"
- },
- {
- "name": "UnhandledExceptionFilter",
- "address": "0x4731cc"
- },
- {
- "name": "RtlUnwind",
- "address": "0x4731d0"
- },
- {
- "name": "RaiseException",
- "address": "0x4731d4"
- },
- {
- "name": "GetStdHandle",
- "address": "0x4731d8"
- }
- ],
- "dll": "kernel32.dll"
- },
- {
- "imports": [
- {
- "name": "GetKeyboardType",
- "address": "0x4731e0"
- },
- {
- "name": "LoadStringA",
- "address": "0x4731e4"
- },
- {
- "name": "MessageBoxA",
- "address": "0x4731e8"
- },
- {
- "name": "CharNextA",
- "address": "0x4731ec"
- }
- ],
- "dll": "user32.dll"
- },
- {
- "imports": [
- {
- "name": "RegQueryValueExA",
- "address": "0x4731f4"
- },
- {
- "name": "RegOpenKeyExA",
- "address": "0x4731f8"
- },
- {
- "name": "RegCloseKey",
- "address": "0x4731fc"
- }
- ],
- "dll": "advapi32.dll"
- },
- {
- "imports": [
- {
- "name": "SysFreeString",
- "address": "0x473204"
- },
- {
- "name": "SysReAllocStringLen",
- "address": "0x473208"
- },
- {
- "name": "SysAllocStringLen",
- "address": "0x47320c"
- }
- ],
- "dll": "oleaut32.dll"
- },
- {
- "imports": [
- {
- "name": "TlsSetValue",
- "address": "0x473214"
- },
- {
- "name": "TlsGetValue",
- "address": "0x473218"
- },
- {
- "name": "LocalAlloc",
- "address": "0x47321c"
- },
- {
- "name": "GetModuleHandleA",
- "address": "0x473220"
- }
- ],
- "dll": "kernel32.dll"
- },
- {
- "imports": [
- {
- "name": "RegQueryValueExA",
- "address": "0x473228"
- },
- {
- "name": "RegOpenKeyExA",
- "address": "0x47322c"
- },
- {
- "name": "RegCloseKey",
- "address": "0x473230"
- }
- ],
- "dll": "advapi32.dll"
- },
- {
- "imports": [
- {
- "name": "lstrcpyA",
- "address": "0x473238"
- },
- {
- "name": "WriteFile",
- "address": "0x47323c"
- },
- {
- "name": "WaitForSingleObject",
- "address": "0x473240"
- },
- {
- "name": "VirtualQuery",
- "address": "0x473244"
- },
- {
- "name": "VirtualAlloc",
- "address": "0x473248"
- },
- {
- "name": "Sleep",
- "address": "0x47324c"
- },
- {
- "name": "SizeofResource",
- "address": "0x473250"
- },
- {
- "name": "SetThreadLocale",
- "address": "0x473254"
- },
- {
- "name": "SetFilePointer",
- "address": "0x473258"
- },
- {
- "name": "SetEvent",
- "address": "0x47325c"
- },
- {
- "name": "SetErrorMode",
- "address": "0x473260"
- },
- {
- "name": "SetEndOfFile",
- "address": "0x473264"
- },
- {
- "name": "ResetEvent",
- "address": "0x473268"
- },
- {
- "name": "ReadFile",
- "address": "0x47326c"
- },
- {
- "name": "MultiByteToWideChar",
- "address": "0x473270"
- },
- {
- "name": "MulDiv",
- "address": "0x473274"
- },
- {
- "name": "LockResource",
- "address": "0x473278"
- },
- {
- "name": "LoadResource",
- "address": "0x47327c"
- },
- {
- "name": "LoadLibraryA",
- "address": "0x473280"
- },
- {
- "name": "LeaveCriticalSection",
- "address": "0x473284"
- },
- {
- "name": "InitializeCriticalSection",
- "address": "0x473288"
- },
- {
- "name": "GlobalUnlock",
- "address": "0x47328c"
- },
- {
- "name": "GlobalSize",
- "address": "0x473290"
- },
- {
- "name": "GlobalReAlloc",
- "address": "0x473294"
- },
- {
- "name": "GlobalHandle",
- "address": "0x473298"
- },
- {
- "name": "GlobalLock",
- "address": "0x47329c"
- },
- {
- "name": "GlobalFree",
- "address": "0x4732a0"
- },
- {
- "name": "GlobalFindAtomA",
- "address": "0x4732a4"
- },
- {
- "name": "GlobalDeleteAtom",
- "address": "0x4732a8"
- },
- {
- "name": "GlobalAlloc",
- "address": "0x4732ac"
- },
- {
- "name": "GlobalAddAtomA",
- "address": "0x4732b0"
- },
- {
- "name": "GetVersionExA",
- "address": "0x4732b4"
- },
- {
- "name": "GetVersion",
- "address": "0x4732b8"
- },
- {
- "name": "GetUserDefaultLCID",
- "address": "0x4732bc"
- },
- {
- "name": "GetTickCount",
- "address": "0x4732c0"
- },
- {
- "name": "GetThreadLocale",
- "address": "0x4732c4"
- },
- {
- "name": "GetTempPathA",
- "address": "0x4732c8"
- },
- {
- "name": "GetSystemInfo",
- "address": "0x4732cc"
- },
- {
- "name": "GetStringTypeExA",
- "address": "0x4732d0"
- },
- {
- "name": "GetStdHandle",
- "address": "0x4732d4"
- },
- {
- "name": "GetProcAddress",
- "address": "0x4732d8"
- },
- {
- "name": "GetModuleHandleA",
- "address": "0x4732dc"
- },
- {
- "name": "GetModuleFileNameA",
- "address": "0x4732e0"
- },
- {
- "name": "GetLocaleInfoA",
- "address": "0x4732e4"
- },
- {
- "name": "GetLocalTime",
- "address": "0x4732e8"
- },
- {
- "name": "GetLastError",
- "address": "0x4732ec"
- },
- {
- "name": "GetFullPathNameA",
- "address": "0x4732f0"
- },
- {
- "name": "GetFileSize",
- "address": "0x4732f4"
- },
- {
- "name": "GetDiskFreeSpaceA",
- "address": "0x4732f8"
- },
- {
- "name": "GetDateFormatA",
- "address": "0x4732fc"
- },
- {
- "name": "GetCurrentThreadId",
- "address": "0x473300"
- },
- {
- "name": "GetCurrentProcessId",
- "address": "0x473304"
- },
- {
- "name": "GetCPInfo",
- "address": "0x473308"
- },
- {
- "name": "GetACP",
- "address": "0x47330c"
- },
- {
- "name": "FreeResource",
- "address": "0x473310"
- },
- {
- "name": "InterlockedExchange",
- "address": "0x473314"
- },
- {
- "name": "FreeLibrary",
- "address": "0x473318"
- },
- {
- "name": "FormatMessageA",
- "address": "0x47331c"
- },
- {
- "name": "FindResourceA",
- "address": "0x473320"
- },
- {
- "name": "ExitProcess",
- "address": "0x473324"
- },
- {
- "name": "EnumCalendarInfoA",
- "address": "0x473328"
- },
- {
- "name": "EnterCriticalSection",
- "address": "0x47332c"
- },
- {
- "name": "DeleteCriticalSection",
- "address": "0x473330"
- },
- {
- "name": "CreateThread",
- "address": "0x473334"
- },
- {
- "name": "CreateFileA",
- "address": "0x473338"
- },
- {
- "name": "CreateEventA",
- "address": "0x47333c"
- },
- {
- "name": "CompareStringA",
- "address": "0x473340"
- },
- {
- "name": "CloseHandle",
- "address": "0x473344"
- }
- ],
- "dll": "kernel32.dll"
- },
- {
- "imports": [
- {
- "name": "VerQueryValueA",
- "address": "0x47334c"
- },
- {
- "name": "GetFileVersionInfoSizeA",
- "address": "0x473350"
- },
- {
- "name": "GetFileVersionInfoA",
- "address": "0x473354"
- }
- ],
- "dll": "version.dll"
- },
- {
- "imports": [
- {
- "name": "UnrealizeObject",
- "address": "0x47335c"
- },
- {
- "name": "StretchBlt",
- "address": "0x473360"
- },
- {
- "name": "SetWindowOrgEx",
- "address": "0x473364"
- },
- {
- "name": "SetWinMetaFileBits",
- "address": "0x473368"
- },
- {
- "name": "SetViewportOrgEx",
- "address": "0x47336c"
- },
- {
- "name": "SetTextColor",
- "address": "0x473370"
- },
- {
- "name": "SetStretchBltMode",
- "address": "0x473374"
- },
- {
- "name": "SetROP2",
- "address": "0x473378"
- },
- {
- "name": "SetPixel",
- "address": "0x47337c"
- },
- {
- "name": "SetMapMode",
- "address": "0x473380"
- },
- {
- "name": "SetEnhMetaFileBits",
- "address": "0x473384"
- },
- {
- "name": "SetDIBColorTable",
- "address": "0x473388"
- },
- {
- "name": "SetBrushOrgEx",
- "address": "0x47338c"
- },
- {
- "name": "SetBkMode",
- "address": "0x473390"
- },
- {
- "name": "SetBkColor",
- "address": "0x473394"
- },
- {
- "name": "SelectPalette",
- "address": "0x473398"
- },
- {
- "name": "SelectObject",
- "address": "0x47339c"
- },
- {
- "name": "ScaleWindowExtEx",
- "address": "0x4733a0"
- },
- {
- "name": "SaveDC",
- "address": "0x4733a4"
- },
- {
- "name": "RestoreDC",
- "address": "0x4733a8"
- },
- {
- "name": "ResizePalette",
- "address": "0x4733ac"
- },
- {
- "name": "RectVisible",
- "address": "0x4733b0"
- },
- {
- "name": "RealizePalette",
- "address": "0x4733b4"
- },
- {
- "name": "PlayEnhMetaFile",
- "address": "0x4733b8"
- },
- {
- "name": "PatBlt",
- "address": "0x4733bc"
- },
- {
- "name": "MoveToEx",
- "address": "0x4733c0"
- },
- {
- "name": "MaskBlt",
- "address": "0x4733c4"
- },
- {
- "name": "LineTo",
- "address": "0x4733c8"
- },
- {
- "name": "LPtoDP",
- "address": "0x4733cc"
- },
- {
- "name": "IntersectClipRect",
- "address": "0x4733d0"
- },
- {
- "name": "GetWindowOrgEx",
- "address": "0x4733d4"
- },
- {
- "name": "GetWinMetaFileBits",
- "address": "0x4733d8"
- },
- {
- "name": "GetTextMetricsA",
- "address": "0x4733dc"
- },
- {
- "name": "GetTextExtentPoint32A",
- "address": "0x4733e0"
- },
- {
- "name": "GetSystemPaletteEntries",
- "address": "0x4733e4"
- },
- {
- "name": "GetStockObject",
- "address": "0x4733e8"
- },
- {
- "name": "GetPixel",
- "address": "0x4733ec"
- },
- {
- "name": "GetPaletteEntries",
- "address": "0x4733f0"
- },
- {
- "name": "GetObjectA",
- "address": "0x4733f4"
- },
- {
- "name": "GetEnhMetaFilePaletteEntries",
- "address": "0x4733f8"
- },
- {
- "name": "GetEnhMetaFileHeader",
- "address": "0x4733fc"
- },
- {
- "name": "GetEnhMetaFileDescriptionA",
- "address": "0x473400"
- },
- {
- "name": "GetEnhMetaFileBits",
- "address": "0x473404"
- },
- {
- "name": "GetDeviceCaps",
- "address": "0x473408"
- },
- {
- "name": "GetDIBits",
- "address": "0x47340c"
- },
- {
- "name": "GetDIBColorTable",
- "address": "0x473410"
- },
- {
- "name": "GetDCOrgEx",
- "address": "0x473414"
- },
- {
- "name": "GetCurrentPositionEx",
- "address": "0x473418"
- },
- {
- "name": "GetClipBox",
- "address": "0x47341c"
- },
- {
- "name": "GetBrushOrgEx",
- "address": "0x473420"
- },
- {
- "name": "GetBitmapBits",
- "address": "0x473424"
- },
- {
- "name": "ExcludeClipRect",
- "address": "0x473428"
- },
- {
- "name": "DeleteObject",
- "address": "0x47342c"
- },
- {
- "name": "DeleteEnhMetaFile",
- "address": "0x473430"
- },
- {
- "name": "DeleteDC",
- "address": "0x473434"
- },
- {
- "name": "CreateSolidBrush",
- "address": "0x473438"
- },
- {
- "name": "CreatePenIndirect",
- "address": "0x47343c"
- },
- {
- "name": "CreatePalette",
- "address": "0x473440"
- },
- {
- "name": "CreateHalftonePalette",
- "address": "0x473444"
- },
- {
- "name": "CreateFontIndirectA",
- "address": "0x473448"
- },
- {
- "name": "CreateEnhMetaFileA",
- "address": "0x47344c"
- },
- {
- "name": "CreateDIBitmap",
- "address": "0x473450"
- },
- {
- "name": "CreateDIBSection",
- "address": "0x473454"
- },
- {
- "name": "CreateCompatibleDC",
- "address": "0x473458"
- },
- {
- "name": "CreateCompatibleBitmap",
- "address": "0x47345c"
- },
- {
- "name": "CreateBrushIndirect",
- "address": "0x473460"
- },
- {
- "name": "CreateBitmap",
- "address": "0x473464"
- },
- {
- "name": "CopyEnhMetaFileA",
- "address": "0x473468"
- },
- {
- "name": "CloseEnhMetaFile",
- "address": "0x47346c"
- },
- {
- "name": "BitBlt",
- "address": "0x473470"
- }
- ],
- "dll": "gdi32.dll"
- },
- {
- "imports": [
- {
- "name": "CreateWindowExA",
- "address": "0x473478"
- },
- {
- "name": "WindowFromPoint",
- "address": "0x47347c"
- },
- {
- "name": "WinHelpA",
- "address": "0x473480"
- },
- {
- "name": "WaitMessage",
- "address": "0x473484"
- },
- {
- "name": "UpdateWindow",
- "address": "0x473488"
- },
- {
- "name": "UnregisterClassA",
- "address": "0x47348c"
- },
- {
- "name": "UnhookWindowsHookEx",
- "address": "0x473490"
- },
- {
- "name": "TranslateMessage",
- "address": "0x473494"
- },
- {
- "name": "TranslateMDISysAccel",
- "address": "0x473498"
- },
- {
- "name": "TrackPopupMenu",
- "address": "0x47349c"
- },
- {
- "name": "SystemParametersInfoA",
- "address": "0x4734a0"
- },
- {
- "name": "ShowWindow",
- "address": "0x4734a4"
- },
- {
- "name": "ShowScrollBar",
- "address": "0x4734a8"
- },
- {
- "name": "ShowOwnedPopups",
- "address": "0x4734ac"
- },
- {
- "name": "ShowCursor",
- "address": "0x4734b0"
- },
- {
- "name": "SetWindowsHookExA",
- "address": "0x4734b4"
- },
- {
- "name": "SetWindowTextA",
- "address": "0x4734b8"
- },
- {
- "name": "SetWindowPos",
- "address": "0x4734bc"
- },
- {
- "name": "SetWindowPlacement",
- "address": "0x4734c0"
- },
- {
- "name": "SetWindowLongA",
- "address": "0x4734c4"
- },
- {
- "name": "SetTimer",
- "address": "0x4734c8"
- },
- {
- "name": "SetScrollRange",
- "address": "0x4734cc"
- },
- {
- "name": "SetScrollPos",
- "address": "0x4734d0"
- },
- {
- "name": "SetScrollInfo",
- "address": "0x4734d4"
- },
- {
- "name": "SetRect",
- "address": "0x4734d8"
- },
- {
- "name": "SetPropA",
- "address": "0x4734dc"
- },
- {
- "name": "SetParent",
- "address": "0x4734e0"
- },
- {
- "name": "SetMenuItemInfoA",
- "address": "0x4734e4"
- },
- {
- "name": "SetMenu",
- "address": "0x4734e8"
- },
- {
- "name": "SetForegroundWindow",
- "address": "0x4734ec"
- },
- {
- "name": "SetFocus",
- "address": "0x4734f0"
- },
- {
- "name": "SetCursor",
- "address": "0x4734f4"
- },
- {
- "name": "SetClassLongA",
- "address": "0x4734f8"
- },
- {
- "name": "SetCapture",
- "address": "0x4734fc"
- },
- {
- "name": "SetActiveWindow",
- "address": "0x473500"
- },
- {
- "name": "SendMessageA",
- "address": "0x473504"
- },
- {
- "name": "ScrollWindow",
- "address": "0x473508"
- },
- {
- "name": "ScreenToClient",
- "address": "0x47350c"
- },
- {
- "name": "RemovePropA",
- "address": "0x473510"
- },
- {
- "name": "RemoveMenu",
- "address": "0x473514"
- },
- {
- "name": "ReleaseDC",
- "address": "0x473518"
- },
- {
- "name": "ReleaseCapture",
- "address": "0x47351c"
- },
- {
- "name": "RegisterWindowMessageA",
- "address": "0x473520"
- },
- {
- "name": "RegisterClipboardFormatA",
- "address": "0x473524"
- },
- {
- "name": "RegisterClassA",
- "address": "0x473528"
- },
- {
- "name": "RedrawWindow",
- "address": "0x47352c"
- },
- {
- "name": "PtInRect",
- "address": "0x473530"
- },
- {
- "name": "PostQuitMessage",
- "address": "0x473534"
- },
- {
- "name": "PostMessageA",
- "address": "0x473538"
- },
- {
- "name": "PeekMessageA",
- "address": "0x47353c"
- },
- {
- "name": "OffsetRect",
- "address": "0x473540"
- },
- {
- "name": "OemToCharA",
- "address": "0x473544"
- },
- {
- "name": "MessageBoxA",
- "address": "0x473548"
- },
- {
- "name": "MapWindowPoints",
- "address": "0x47354c"
- },
- {
- "name": "MapVirtualKeyA",
- "address": "0x473550"
- },
- {
- "name": "LoadStringA",
- "address": "0x473554"
- },
- {
- "name": "LoadKeyboardLayoutA",
- "address": "0x473558"
- },
- {
- "name": "LoadIconA",
- "address": "0x47355c"
- },
- {
- "name": "LoadCursorA",
- "address": "0x473560"
- },
- {
- "name": "LoadBitmapA",
- "address": "0x473564"
- },
- {
- "name": "KillTimer",
- "address": "0x473568"
- },
- {
- "name": "IsZoomed",
- "address": "0x47356c"
- },
- {
- "name": "IsWindowVisible",
- "address": "0x473570"
- },
- {
- "name": "IsWindowEnabled",
- "address": "0x473574"
- },
- {
- "name": "IsWindow",
- "address": "0x473578"
- },
- {
- "name": "IsRectEmpty",
- "address": "0x47357c"
- },
- {
- "name": "IsIconic",
- "address": "0x473580"
- },
- {
- "name": "IsDialogMessageA",
- "address": "0x473584"
- },
- {
- "name": "IsChild",
- "address": "0x473588"
- },
- {
- "name": "InvalidateRect",
- "address": "0x47358c"
- },
- {
- "name": "IntersectRect",
- "address": "0x473590"
- },
- {
- "name": "InsertMenuItemA",
- "address": "0x473594"
- },
- {
- "name": "InsertMenuA",
- "address": "0x473598"
- },
- {
- "name": "InflateRect",
- "address": "0x47359c"
- },
- {
- "name": "GetWindowThreadProcessId",
- "address": "0x4735a0"
- },
- {
- "name": "GetWindowTextA",
- "address": "0x4735a4"
- },
- {
- "name": "GetWindowRect",
- "address": "0x4735a8"
- },
- {
- "name": "GetWindowPlacement",
- "address": "0x4735ac"
- },
- {
- "name": "GetWindowLongA",
- "address": "0x4735b0"
- },
- {
- "name": "GetWindowDC",
- "address": "0x4735b4"
- },
- {
- "name": "GetTopWindow",
- "address": "0x4735b8"
- },
- {
- "name": "GetSystemMetrics",
- "address": "0x4735bc"
- },
- {
- "name": "GetSystemMenu",
- "address": "0x4735c0"
- },
- {
- "name": "GetSysColorBrush",
- "address": "0x4735c4"
- },
- {
- "name": "GetSysColor",
- "address": "0x4735c8"
- },
- {
- "name": "GetSubMenu",
- "address": "0x4735cc"
- },
- {
- "name": "GetScrollRange",
- "address": "0x4735d0"
- },
- {
- "name": "GetScrollPos",
- "address": "0x4735d4"
- },
- {
- "name": "GetScrollInfo",
- "address": "0x4735d8"
- },
- {
- "name": "GetPropA",
- "address": "0x4735dc"
- },
- {
- "name": "GetParent",
- "address": "0x4735e0"
- },
- {
- "name": "GetWindow",
- "address": "0x4735e4"
- },
- {
- "name": "GetMessageTime",
- "address": "0x4735e8"
- },
- {
- "name": "GetMenuStringA",
- "address": "0x4735ec"
- },
- {
- "name": "GetMenuState",
- "address": "0x4735f0"
- },
- {
- "name": "GetMenuItemInfoA",
- "address": "0x4735f4"
- },
- {
- "name": "GetMenuItemID",
- "address": "0x4735f8"
- },
- {
- "name": "GetMenuItemCount",
- "address": "0x4735fc"
- },
- {
- "name": "GetMenu",
- "address": "0x473600"
- },
- {
- "name": "GetLastActivePopup",
- "address": "0x473604"
- },
- {
- "name": "GetKeyboardState",
- "address": "0x473608"
- },
- {
- "name": "GetKeyboardLayoutList",
- "address": "0x47360c"
- },
- {
- "name": "GetKeyboardLayout",
- "address": "0x473610"
- },
- {
- "name": "GetKeyState",
- "address": "0x473614"
- },
- {
- "name": "GetKeyNameTextA",
- "address": "0x473618"
- },
- {
- "name": "GetIconInfo",
- "address": "0x47361c"
- },
- {
- "name": "GetForegroundWindow",
- "address": "0x473620"
- },
- {
- "name": "GetFocus",
- "address": "0x473624"
- },
- {
- "name": "GetDesktopWindow",
- "address": "0x473628"
- },
- {
- "name": "GetDCEx",
- "address": "0x47362c"
- },
- {
- "name": "GetDC",
- "address": "0x473630"
- },
- {
- "name": "GetCursorPos",
- "address": "0x473634"
- },
- {
- "name": "GetCursor",
- "address": "0x473638"
- },
- {
- "name": "GetClipboardData",
- "address": "0x47363c"
- },
- {
- "name": "GetClientRect",
- "address": "0x473640"
- },
- {
- "name": "GetClassNameA",
- "address": "0x473644"
- },
- {
- "name": "GetClassInfoA",
- "address": "0x473648"
- },
- {
- "name": "GetCapture",
- "address": "0x47364c"
- },
- {
- "name": "GetActiveWindow",
- "address": "0x473650"
- },
- {
- "name": "FrameRect",
- "address": "0x473654"
- },
- {
- "name": "FindWindowA",
- "address": "0x473658"
- },
- {
- "name": "FillRect",
- "address": "0x47365c"
- },
- {
- "name": "EqualRect",
- "address": "0x473660"
- },
- {
- "name": "EnumWindows",
- "address": "0x473664"
- },
- {
- "name": "EnumThreadWindows",
- "address": "0x473668"
- },
- {
- "name": "EndPaint",
- "address": "0x47366c"
- },
- {
- "name": "EnableWindow",
- "address": "0x473670"
- },
- {
- "name": "EnableScrollBar",
- "address": "0x473674"
- },
- {
- "name": "EnableMenuItem",
- "address": "0x473678"
- },
- {
- "name": "DrawTextA",
- "address": "0x47367c"
- },
- {
- "name": "DrawMenuBar",
- "address": "0x473680"
- },
- {
- "name": "DrawIconEx",
- "address": "0x473684"
- },
- {
- "name": "DrawIcon",
- "address": "0x473688"
- },
- {
- "name": "DrawFrameControl",
- "address": "0x47368c"
- },
- {
- "name": "DrawEdge",
- "address": "0x473690"
- },
- {
- "name": "DispatchMessageA",
- "address": "0x473694"
- },
- {
- "name": "DestroyWindow",
- "address": "0x473698"
- },
- {
- "name": "DestroyMenu",
- "address": "0x47369c"
- },
- {
- "name": "DestroyIcon",
- "address": "0x4736a0"
- },
- {
- "name": "DestroyCursor",
- "address": "0x4736a4"
- },
- {
- "name": "DeleteMenu",
- "address": "0x4736a8"
- },
- {
- "name": "DefWindowProcA",
- "address": "0x4736ac"
- },
- {
- "name": "DefMDIChildProcA",
- "address": "0x4736b0"
- },
- {
- "name": "DefFrameProcA",
- "address": "0x4736b4"
- },
- {
- "name": "CreatePopupMenu",
- "address": "0x4736b8"
- },
- {
- "name": "CreateMenu",
- "address": "0x4736bc"
- },
- {
- "name": "CreateIcon",
- "address": "0x4736c0"
- },
- {
- "name": "ClientToScreen",
- "address": "0x4736c4"
- },
- {
- "name": "CheckMenuItem",
- "address": "0x4736c8"
- },
- {
- "name": "CallWindowProcA",
- "address": "0x4736cc"
- },
- {
- "name": "CallNextHookEx",
- "address": "0x4736d0"
- },
- {
- "name": "BringWindowToTop",
- "address": "0x4736d4"
- },
- {
- "name": "BeginPaint",
- "address": "0x4736d8"
- },
- {
- "name": "CharNextA",
- "address": "0x4736dc"
- },
- {
- "name": "CharLowerBuffA",
- "address": "0x4736e0"
- },
- {
- "name": "CharLowerA",
- "address": "0x4736e4"
- },
- {
- "name": "CharToOemA",
- "address": "0x4736e8"
- },
- {
- "name": "AdjustWindowRectEx",
- "address": "0x4736ec"
- },
- {
- "name": "ActivateKeyboardLayout",
- "address": "0x4736f0"
- }
- ],
- "dll": "user32.dll"
- },
- {
- "imports": [
- {
- "name": "Sleep",
- "address": "0x4736f8"
- }
- ],
- "dll": "kernel32.dll"
- },
- {
- "imports": [
- {
- "name": "SafeArrayPtrOfIndex",
- "address": "0x473700"
- },
- {
- "name": "SafeArrayGetUBound",
- "address": "0x473704"
- },
- {
- "name": "SafeArrayGetLBound",
- "address": "0x473708"
- },
- {
- "name": "SafeArrayCreate",
- "address": "0x47370c"
- },
- {
- "name": "VariantChangeType",
- "address": "0x473710"
- },
- {
- "name": "VariantCopy",
- "address": "0x473714"
- },
- {
- "name": "VariantClear",
- "address": "0x473718"
- },
- {
- "name": "VariantInit",
- "address": "0x47371c"
- }
- ],
- "dll": "oleaut32.dll"
- },
- {
- "imports": [
- {
- "name": "CreateStreamOnHGlobal",
- "address": "0x473724"
- },
- {
- "name": "IsAccelerator",
- "address": "0x473728"
- },
- {
- "name": "OleDraw",
- "address": "0x47372c"
- },
- {
- "name": "OleSetMenuDescriptor",
- "address": "0x473730"
- },
- {
- "name": "CoCreateInstance",
- "address": "0x473734"
- },
- {
- "name": "CoGetClassObject",
- "address": "0x473738"
- },
- {
- "name": "CoUninitialize",
- "address": "0x47373c"
- },
- {
- "name": "CoInitialize",
- "address": "0x473740"
- },
- {
- "name": "IsEqualGUID",
- "address": "0x473744"
- }
- ],
- "dll": "ole32.dll"
- },
- {
- "imports": [
- {
- "name": "GetErrorInfo",
- "address": "0x47374c"
- },
- {
- "name": "SysFreeString",
- "address": "0x473750"
- }
- ],
- "dll": "oleaut32.dll"
- },
- {
- "imports": [
- {
- "name": "ImageList_SetIconSize",
- "address": "0x473758"
- },
- {
- "name": "ImageList_GetIconSize",
- "address": "0x47375c"
- },
- {
- "name": "ImageList_Write",
- "address": "0x473760"
- },
- {
- "name": "ImageList_Read",
- "address": "0x473764"
- },
- {
- "name": "ImageList_GetDragImage",
- "address": "0x473768"
- },
- {
- "name": "ImageList_DragShowNolock",
- "address": "0x47376c"
- },
- {
- "name": "ImageList_SetDragCursorImage",
- "address": "0x473770"
- },
- {
- "name": "ImageList_DragMove",
- "address": "0x473774"
- },
- {
- "name": "ImageList_DragLeave",
- "address": "0x473778"
- },
- {
- "name": "ImageList_DragEnter",
- "address": "0x47377c"
- },
- {
- "name": "ImageList_EndDrag",
- "address": "0x473780"
- },
- {
- "name": "ImageList_BeginDrag",
- "address": "0x473784"
- },
- {
- "name": "ImageList_Remove",
- "address": "0x473788"
- },
- {
- "name": "ImageList_DrawEx",
- "address": "0x47378c"
- },
- {
- "name": "ImageList_Draw",
- "address": "0x473790"
- },
- {
- "name": "ImageList_GetBkColor",
- "address": "0x473794"
- },
- {
- "name": "ImageList_SetBkColor",
- "address": "0x473798"
- },
- {
- "name": "ImageList_ReplaceIcon",
- "address": "0x47379c"
- },
- {
- "name": "ImageList_Add",
- "address": "0x4737a0"
- },
- {
- "name": "ImageList_GetImageCount",
- "address": "0x4737a4"
- },
- {
- "name": "ImageList_Destroy",
- "address": "0x4737a8"
- },
- {
- "name": "ImageList_Create",
- "address": "0x4737ac"
- },
- {
- "name": "InitCommonControls",
- "address": "0x4737b0"
- }
- ],
- "dll": "comctl32.dll"
- },
- {
- "imports": [
- {
- "name": "ReplaceTextA",
- "address": "0x4737b8"
- },
- {
- "name": "FindTextA",
- "address": "0x4737bc"
- }
- ],
- "dll": "comdlg32.dll"
- }
- ],
- "digital_signers": null,
- "exported_dll_name": null,
- "actual_checksum": "0x000a3699",
- "overlay": null,
- "imagebase": "0x00400000",
- "reported_checksum": "0x00000000",
- "icon_hash": null,
- "entrypoint": "0x00467be0",
- "timestamp": "1992-04-08 18:26:18",
- "osversion": "4.0",
- "sections": [
- {
- "name": "CODE",
- "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00001000",
- "size_of_data": "0x00066e00",
- "entropy": "6.53",
- "raw_address": "0x00000400",
- "virtual_size": "0x00066c28",
- "characteristics_raw": "0x60000020"
- },
- {
- "name": "DATA",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x00068000",
- "size_of_data": "0x00009c00",
- "entropy": "5.09",
- "raw_address": "0x00067200",
- "virtual_size": "0x00009a90",
- "characteristics_raw": "0xc0000040"
- },
- {
- "name": "BSS",
- "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x00072000",
- "size_of_data": "0x00000000",
- "entropy": "0.00",
- "raw_address": "0x00070e00",
- "virtual_size": "0x00000f55",
- "characteristics_raw": "0xc0000000"
- },
- {
- "name": ".idata",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x00073000",
- "size_of_data": "0x00002400",
- "entropy": "4.90",
- "raw_address": "0x00070e00",
- "virtual_size": "0x00002342",
- "characteristics_raw": "0xc0000040"
- },
- {
- "name": ".tls",
- "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x00076000",
- "size_of_data": "0x00000000",
- "entropy": "0.00",
- "raw_address": "0x00073200",
- "virtual_size": "0x00000010",
- "characteristics_raw": "0xc0000000"
- },
- {
- "name": ".rdata",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00077000",
- "size_of_data": "0x00000200",
- "entropy": "0.21",
- "raw_address": "0x00073200",
- "virtual_size": "0x00000018",
- "characteristics_raw": "0x50000040"
- },
- {
- "name": ".reloc",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00078000",
- "size_of_data": "0x00008000",
- "entropy": "6.66",
- "raw_address": "0x00073400",
- "virtual_size": "0x00007f70",
- "characteristics_raw": "0x50000040"
- },
- {
- "name": ".rsrc",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00080000",
- "size_of_data": "0x0001e800",
- "entropy": "7.35",
- "raw_address": "0x0007b400",
- "virtual_size": "0x0001e628",
- "characteristics_raw": "0x50000040"
- }
- ],
- "resources": [],
- "dirents": [
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00073000",
- "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
- "size": "0x00002342"
- },
- {
- "virtual_address": "0x00080000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
- "size": "0x0001e628"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00078000",
- "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
- "size": "0x00007f70"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00077000",
- "name": "IMAGE_DIRECTORY_ENTRY_TLS",
- "size": "0x00000018"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_IAT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
- "size": "0x00000000"
- }
- ],
- "exports": [],
- "guest_signers": {},
- "imphash": "ffa3b46bd2034198985d725252fa90e2",
- "icon_fuzzy": null,
- "icon": null,
- "pdbpath": null,
- "imported_dll_count": 16,
- "versioninfo": []
- }
- }
- [*] Resolved APIs: []
- [*] Static Analysis: {
- "pe": {
- "peid_signatures": null,
- "imports": [
- {
- "imports": [
- {
- "name": "DeleteCriticalSection",
- "address": "0x473154"
- },
- {
- "name": "LeaveCriticalSection",
- "address": "0x473158"
- },
- {
- "name": "EnterCriticalSection",
- "address": "0x47315c"
- },
- {
- "name": "InitializeCriticalSection",
- "address": "0x473160"
- },
- {
- "name": "VirtualFree",
- "address": "0x473164"
- },
- {
- "name": "VirtualAlloc",
- "address": "0x473168"
- },
- {
- "name": "LocalFree",
- "address": "0x47316c"
- },
- {
- "name": "LocalAlloc",
- "address": "0x473170"
- },
- {
- "name": "GetVersion",
- "address": "0x473174"
- },
- {
- "name": "GetCurrentThreadId",
- "address": "0x473178"
- },
- {
- "name": "InterlockedDecrement",
- "address": "0x47317c"
- },
- {
- "name": "InterlockedIncrement",
- "address": "0x473180"
- },
- {
- "name": "VirtualQuery",
- "address": "0x473184"
- },
- {
- "name": "WideCharToMultiByte",
- "address": "0x473188"
- },
- {
- "name": "MultiByteToWideChar",
- "address": "0x47318c"
- },
- {
- "name": "lstrlenA",
- "address": "0x473190"
- },
- {
- "name": "lstrcpynA",
- "address": "0x473194"
- },
- {
- "name": "LoadLibraryExA",
- "address": "0x473198"
- },
- {
- "name": "GetThreadLocale",
- "address": "0x47319c"
- },
- {
- "name": "GetStartupInfoA",
- "address": "0x4731a0"
- },
- {
- "name": "GetProcAddress",
- "address": "0x4731a4"
- },
- {
- "name": "GetModuleHandleA",
- "address": "0x4731a8"
- },
- {
- "name": "GetModuleFileNameA",
- "address": "0x4731ac"
- },
- {
- "name": "GetLocaleInfoA",
- "address": "0x4731b0"
- },
- {
- "name": "GetCommandLineA",
- "address": "0x4731b4"
- },
- {
- "name": "FreeLibrary",
- "address": "0x4731b8"
- },
- {
- "name": "FindFirstFileA",
- "address": "0x4731bc"
- },
- {
- "name": "FindClose",
- "address": "0x4731c0"
- },
- {
- "name": "ExitProcess",
- "address": "0x4731c4"
- },
- {
- "name": "WriteFile",
- "address": "0x4731c8"
- },
- {
- "name": "UnhandledExceptionFilter",
- "address": "0x4731cc"
- },
- {
- "name": "RtlUnwind",
- "address": "0x4731d0"
- },
- {
- "name": "RaiseException",
- "address": "0x4731d4"
- },
- {
- "name": "GetStdHandle",
- "address": "0x4731d8"
- }
- ],
- "dll": "kernel32.dll"
- },
- {
- "imports": [
- {
- "name": "GetKeyboardType",
- "address": "0x4731e0"
- },
- {
- "name": "LoadStringA",
- "address": "0x4731e4"
- },
- {
- "name": "MessageBoxA",
- "address": "0x4731e8"
- },
- {
- "name": "CharNextA",
- "address": "0x4731ec"
- }
- ],
- "dll": "user32.dll"
- },
- {
- "imports": [
- {
- "name": "RegQueryValueExA",
- "address": "0x4731f4"
- },
- {
- "name": "RegOpenKeyExA",
- "address": "0x4731f8"
- },
- {
- "name": "RegCloseKey",
- "address": "0x4731fc"
- }
- ],
- "dll": "advapi32.dll"
- },
- {
- "imports": [
- {
- "name": "SysFreeString",
- "address": "0x473204"
- },
- {
- "name": "SysReAllocStringLen",
- "address": "0x473208"
- },
- {
- "name": "SysAllocStringLen",
- "address": "0x47320c"
- }
- ],
- "dll": "oleaut32.dll"
- },
- {
- "imports": [
- {
- "name": "TlsSetValue",
- "address": "0x473214"
- },
- {
- "name": "TlsGetValue",
- "address": "0x473218"
- },
- {
- "name": "LocalAlloc",
- "address": "0x47321c"
- },
- {
- "name": "GetModuleHandleA",
- "address": "0x473220"
- }
- ],
- "dll": "kernel32.dll"
- },
- {
- "imports": [
- {
- "name": "RegQueryValueExA",
- "address": "0x473228"
- },
- {
- "name": "RegOpenKeyExA",
- "address": "0x47322c"
- },
- {
- "name": "RegCloseKey",
- "address": "0x473230"
- }
- ],
- "dll": "advapi32.dll"
- },
- {
- "imports": [
- {
- "name": "lstrcpyA",
- "address": "0x473238"
- },
- {
- "name": "WriteFile",
- "address": "0x47323c"
- },
- {
- "name": "WaitForSingleObject",
- "address": "0x473240"
- },
- {
- "name": "VirtualQuery",
- "address": "0x473244"
- },
- {
- "name": "VirtualAlloc",
- "address": "0x473248"
- },
- {
- "name": "Sleep",
- "address": "0x47324c"
- },
- {
- "name": "SizeofResource",
- "address": "0x473250"
- },
- {
- "name": "SetThreadLocale",
- "address": "0x473254"
- },
- {
- "name": "SetFilePointer",
- "address": "0x473258"
- },
- {
- "name": "SetEvent",
- "address": "0x47325c"
- },
- {
- "name": "SetErrorMode",
- "address": "0x473260"
- },
- {
- "name": "SetEndOfFile",
- "address": "0x473264"
- },
- {
- "name": "ResetEvent",
- "address": "0x473268"
- },
- {
- "name": "ReadFile",
- "address": "0x47326c"
- },
- {
- "name": "MultiByteToWideChar",
- "address": "0x473270"
- },
- {
- "name": "MulDiv",
- "address": "0x473274"
- },
- {
- "name": "LockResource",
- "address": "0x473278"
- },
- {
- "name": "LoadResource",
- "address": "0x47327c"
- },
- {
- "name": "LoadLibraryA",
- "address": "0x473280"
- },
- {
- "name": "LeaveCriticalSection",
- "address": "0x473284"
- },
- {
- "name": "InitializeCriticalSection",
- "address": "0x473288"
- },
- {
- "name": "GlobalUnlock",
- "address": "0x47328c"
- },
- {
- "name": "GlobalSize",
- "address": "0x473290"
- },
- {
- "name": "GlobalReAlloc",
- "address": "0x473294"
- },
- {
- "name": "GlobalHandle",
- "address": "0x473298"
- },
- {
- "name": "GlobalLock",
- "address": "0x47329c"
- },
- {
- "name": "GlobalFree",
- "address": "0x4732a0"
- },
- {
- "name": "GlobalFindAtomA",
- "address": "0x4732a4"
- },
- {
- "name": "GlobalDeleteAtom",
- "address": "0x4732a8"
- },
- {
- "name": "GlobalAlloc",
- "address": "0x4732ac"
- },
- {
- "name": "GlobalAddAtomA",
- "address": "0x4732b0"
- },
- {
- "name": "GetVersionExA",
- "address": "0x4732b4"
- },
- {
- "name": "GetVersion",
- "address": "0x4732b8"
- },
- {
- "name": "GetUserDefaultLCID",
- "address": "0x4732bc"
- },
- {
- "name": "GetTickCount",
- "address": "0x4732c0"
- },
- {
- "name": "GetThreadLocale",
- "address": "0x4732c4"
- },
- {
- "name": "GetTempPathA",
- "address": "0x4732c8"
- },
- {
- "name": "GetSystemInfo",
- "address": "0x4732cc"
- },
- {
- "name": "GetStringTypeExA",
- "address": "0x4732d0"
- },
- {
- "name": "GetStdHandle",
- "address": "0x4732d4"
- },
- {
- "name": "GetProcAddress",
- "address": "0x4732d8"
- },
- {
- "name": "GetModuleHandleA",
- "address": "0x4732dc"
- },
- {
- "name": "GetModuleFileNameA",
- "address": "0x4732e0"
- },
- {
- "name": "GetLocaleInfoA",
- "address": "0x4732e4"
- },
- {
- "name": "GetLocalTime",
- "address": "0x4732e8"
- },
- {
- "name": "GetLastError",
- "address": "0x4732ec"
- },
- {
- "name": "GetFullPathNameA",
- "address": "0x4732f0"
- },
- {
- "name": "GetFileSize",
- "address": "0x4732f4"
- },
- {
- "name": "GetDiskFreeSpaceA",
- "address": "0x4732f8"
- },
- {
- "name": "GetDateFormatA",
- "address": "0x4732fc"
- },
- {
- "name": "GetCurrentThreadId",
- "address": "0x473300"
- },
- {
- "name": "GetCurrentProcessId",
- "address": "0x473304"
- },
- {
- "name": "GetCPInfo",
- "address": "0x473308"
- },
- {
- "name": "GetACP",
- "address": "0x47330c"
- },
- {
- "name": "FreeResource",
- "address": "0x473310"
- },
- {
- "name": "InterlockedExchange",
- "address": "0x473314"
- },
- {
- "name": "FreeLibrary",
- "address": "0x473318"
- },
- {
- "name": "FormatMessageA",
- "address": "0x47331c"
- },
- {
- "name": "FindResourceA",
- "address": "0x473320"
- },
- {
- "name": "ExitProcess",
- "address": "0x473324"
- },
- {
- "name": "EnumCalendarInfoA",
- "address": "0x473328"
- },
- {
- "name": "EnterCriticalSection",
- "address": "0x47332c"
- },
- {
- "name": "DeleteCriticalSection",
- "address": "0x473330"
- },
- {
- "name": "CreateThread",
- "address": "0x473334"
- },
- {
- "name": "CreateFileA",
- "address": "0x473338"
- },
- {
- "name": "CreateEventA",
- "address": "0x47333c"
- },
- {
- "name": "CompareStringA",
- "address": "0x473340"
- },
- {
- "name": "CloseHandle",
- "address": "0x473344"
- }
- ],
- "dll": "kernel32.dll"
- },
- {
- "imports": [
- {
- "name": "VerQueryValueA",
- "address": "0x47334c"
- },
- {
- "name": "GetFileVersionInfoSizeA",
- "address": "0x473350"
- },
- {
- "name": "GetFileVersionInfoA",
- "address": "0x473354"
- }
- ],
- "dll": "version.dll"
- },
- {
- "imports": [
- {
- "name": "UnrealizeObject",
- "address": "0x47335c"
- },
- {
- "name": "StretchBlt",
- "address": "0x473360"
- },
- {
- "name": "SetWindowOrgEx",
- "address": "0x473364"
- },
- {
- "name": "SetWinMetaFileBits",
- "address": "0x473368"
- },
- {
- "name": "SetViewportOrgEx",
- "address": "0x47336c"
- },
- {
- "name": "SetTextColor",
- "address": "0x473370"
- },
- {
- "name": "SetStretchBltMode",
- "address": "0x473374"
- },
- {
- "name": "SetROP2",
- "address": "0x473378"
- },
- {
- "name": "SetPixel",
- "address": "0x47337c"
- },
- {
- "name": "SetMapMode",
- "address": "0x473380"
- },
- {
- "name": "SetEnhMetaFileBits",
- "address": "0x473384"
- },
- {
- "name": "SetDIBColorTable",
- "address": "0x473388"
- },
- {
- "name": "SetBrushOrgEx",
- "address": "0x47338c"
- },
- {
- "name": "SetBkMode",
- "address": "0x473390"
- },
- {
- "name": "SetBkColor",
- "address": "0x473394"
- },
- {
- "name": "SelectPalette",
- "address": "0x473398"
- },
- {
- "name": "SelectObject",
- "address": "0x47339c"
- },
- {
- "name": "ScaleWindowExtEx",
- "address": "0x4733a0"
- },
- {
- "name": "SaveDC",
- "address": "0x4733a4"
- },
- {
- "name": "RestoreDC",
- "address": "0x4733a8"
- },
- {
- "name": "ResizePalette",
- "address": "0x4733ac"
- },
- {
- "name": "RectVisible",
- "address": "0x4733b0"
- },
- {
- "name": "RealizePalette",
- "address": "0x4733b4"
- },
- {
- "name": "PlayEnhMetaFile",
- "address": "0x4733b8"
- },
- {
- "name": "PatBlt",
- "address": "0x4733bc"
- },
- {
- "name": "MoveToEx",
- "address": "0x4733c0"
- },
- {
- "name": "MaskBlt",
- "address": "0x4733c4"
- },
- {
- "name": "LineTo",
- "address": "0x4733c8"
- },
- {
- "name": "LPtoDP",
- "address": "0x4733cc"
- },
- {
- "name": "IntersectClipRect",
- "address": "0x4733d0"
- },
- {
- "name": "GetWindowOrgEx",
- "address": "0x4733d4"
- },
- {
- "name": "GetWinMetaFileBits",
- "address": "0x4733d8"
- },
- {
- "name": "GetTextMetricsA",
- "address": "0x4733dc"
- },
- {
- "name": "GetTextExtentPoint32A",
- "address": "0x4733e0"
- },
- {
- "name": "GetSystemPaletteEntries",
- "address": "0x4733e4"
- },
- {
- "name": "GetStockObject",
- "address": "0x4733e8"
- },
- {
- "name": "GetPixel",
- "address": "0x4733ec"
- },
- {
- "name": "GetPaletteEntries",
- "address": "0x4733f0"
- },
- {
- "name": "GetObjectA",
- "address": "0x4733f4"
- },
- {
- "name": "GetEnhMetaFilePaletteEntries",
- "address": "0x4733f8"
- },
- {
- "name": "GetEnhMetaFileHeader",
- "address": "0x4733fc"
- },
- {
- "name": "GetEnhMetaFileDescriptionA",
- "address": "0x473400"
- },
- {
- "name": "GetEnhMetaFileBits",
- "address": "0x473404"
- },
- {
- "name": "GetDeviceCaps",
- "address": "0x473408"
- },
- {
- "name": "GetDIBits",
- "address": "0x47340c"
- },
- {
- "name": "GetDIBColorTable",
- "address": "0x473410"
- },
- {
- "name": "GetDCOrgEx",
- "address": "0x473414"
- },
- {
- "name": "GetCurrentPositionEx",
- "address": "0x473418"
- },
- {
- "name": "GetClipBox",
- "address": "0x47341c"
- },
- {
- "name": "GetBrushOrgEx",
- "address": "0x473420"
- },
- {
- "name": "GetBitmapBits",
- "address": "0x473424"
- },
- {
- "name": "ExcludeClipRect",
- "address": "0x473428"
- },
- {
- "name": "DeleteObject",
- "address": "0x47342c"
- },
- {
- "name": "DeleteEnhMetaFile",
- "address": "0x473430"
- },
- {
- "name": "DeleteDC",
- "address": "0x473434"
- },
- {
- "name": "CreateSolidBrush",
- "address": "0x473438"
- },
- {
- "name": "CreatePenIndirect",
- "address": "0x47343c"
- },
- {
- "name": "CreatePalette",
- "address": "0x473440"
- },
- {
- "name": "CreateHalftonePalette",
- "address": "0x473444"
- },
- {
- "name": "CreateFontIndirectA",
- "address": "0x473448"
- },
- {
- "name": "CreateEnhMetaFileA",
- "address": "0x47344c"
- },
- {
- "name": "CreateDIBitmap",
- "address": "0x473450"
- },
- {
- "name": "CreateDIBSection",
- "address": "0x473454"
- },
- {
- "name": "CreateCompatibleDC",
- "address": "0x473458"
- },
- {
- "name": "CreateCompatibleBitmap",
- "address": "0x47345c"
- },
- {
- "name": "CreateBrushIndirect",
- "address": "0x473460"
- },
- {
- "name": "CreateBitmap",
- "address": "0x473464"
- },
- {
- "name": "CopyEnhMetaFileA",
- "address": "0x473468"
- },
- {
- "name": "CloseEnhMetaFile",
- "address": "0x47346c"
- },
- {
- "name": "BitBlt",
- "address": "0x473470"
- }
- ],
- "dll": "gdi32.dll"
- },
- {
- "imports": [
- {
- "name": "CreateWindowExA",
- "address": "0x473478"
- },
- {
- "name": "WindowFromPoint",
- "address": "0x47347c"
- },
- {
- "name": "WinHelpA",
- "address": "0x473480"
- },
- {
- "name": "WaitMessage",
- "address": "0x473484"
- },
- {
- "name": "UpdateWindow",
- "address": "0x473488"
- },
- {
- "name": "UnregisterClassA",
- "address": "0x47348c"
- },
- {
- "name": "UnhookWindowsHookEx",
- "address": "0x473490"
- },
- {
- "name": "TranslateMessage",
- "address": "0x473494"
- },
- {
- "name": "TranslateMDISysAccel",
- "address": "0x473498"
- },
- {
- "name": "TrackPopupMenu",
- "address": "0x47349c"
- },
- {
- "name": "SystemParametersInfoA",
- "address": "0x4734a0"
- },
- {
- "name": "ShowWindow",
- "address": "0x4734a4"
- },
- {
- "name": "ShowScrollBar",
- "address": "0x4734a8"
- },
- {
- "name": "ShowOwnedPopups",
- "address": "0x4734ac"
- },
- {
- "name": "ShowCursor",
- "address": "0x4734b0"
- },
- {
- "name": "SetWindowsHookExA",
- "address": "0x4734b4"
- },
- {
- "name": "SetWindowTextA",
- "address": "0x4734b8"
- },
- {
- "name": "SetWindowPos",
- "address": "0x4734bc"
- },
- {
- "name": "SetWindowPlacement",
- "address": "0x4734c0"
- },
- {
- "name": "SetWindowLongA",
- "address": "0x4734c4"
- },
- {
- "name": "SetTimer",
- "address": "0x4734c8"
- },
- {
- "name": "SetScrollRange",
- "address": "0x4734cc"
- },
- {
- "name": "SetScrollPos",
- "address": "0x4734d0"
- },
- {
- "name": "SetScrollInfo",
- "address": "0x4734d4"
- },
- {
- "name": "SetRect",
- "address": "0x4734d8"
- },
- {
- "name": "SetPropA",
- "address": "0x4734dc"
- },
- {
- "name": "SetParent",
- "address": "0x4734e0"
- },
- {
- "name": "SetMenuItemInfoA",
- "address": "0x4734e4"
- },
- {
- "name": "SetMenu",
- "address": "0x4734e8"
- },
- {
- "name": "SetForegroundWindow",
- "address": "0x4734ec"
- },
- {
- "name": "SetFocus",
- "address": "0x4734f0"
- },
- {
- "name": "SetCursor",
- "address": "0x4734f4"
- },
- {
- "name": "SetClassLongA",
- "address": "0x4734f8"
- },
- {
- "name": "SetCapture",
- "address": "0x4734fc"
- },
- {
- "name": "SetActiveWindow",
- "address": "0x473500"
- },
- {
- "name": "SendMessageA",
- "address": "0x473504"
- },
- {
- "name": "ScrollWindow",
- "address": "0x473508"
- },
- {
- "name": "ScreenToClient",
- "address": "0x47350c"
- },
- {
- "name": "RemovePropA",
- "address": "0x473510"
- },
- {
- "name": "RemoveMenu",
- "address": "0x473514"
- },
- {
- "name": "ReleaseDC",
- "address": "0x473518"
- },
- {
- "name": "ReleaseCapture",
- "address": "0x47351c"
- },
- {
- "name": "RegisterWindowMessageA",
- "address": "0x473520"
- },
- {
- "name": "RegisterClipboardFormatA",
- "address": "0x473524"
- },
- {
- "name": "RegisterClassA",
- "address": "0x473528"
- },
- {
- "name": "RedrawWindow",
- "address": "0x47352c"
- },
- {
- "name": "PtInRect",
- "address": "0x473530"
- },
- {
- "name": "PostQuitMessage",
- "address": "0x473534"
- },
- {
- "name": "PostMessageA",
- "address": "0x473538"
- },
- {
- "name": "PeekMessageA",
- "address": "0x47353c"
- },
- {
- "name": "OffsetRect",
- "address": "0x473540"
- },
- {
- "name": "OemToCharA",
- "address": "0x473544"
- },
- {
- "name": "MessageBoxA",
- "address": "0x473548"
- },
- {
- "name": "MapWindowPoints",
- "address": "0x47354c"
- },
- {
- "name": "MapVirtualKeyA",
- "address": "0x473550"
- },
- {
- "name": "LoadStringA",
- "address": "0x473554"
- },
- {
- "name": "LoadKeyboardLayoutA",
- "address": "0x473558"
- },
- {
- "name": "LoadIconA",
- "address": "0x47355c"
- },
- {
- "name": "LoadCursorA",
- "address": "0x473560"
- },
- {
- "name": "LoadBitmapA",
- "address": "0x473564"
- },
- {
- "name": "KillTimer",
- "address": "0x473568"
- },
- {
- "name": "IsZoomed",
- "address": "0x47356c"
- },
- {
- "name": "IsWindowVisible",
- "address": "0x473570"
- },
- {
- "name": "IsWindowEnabled",
- "address": "0x473574"
- },
- {
- "name": "IsWindow",
- "address": "0x473578"
- },
- {
- "name": "IsRectEmpty",
- "address": "0x47357c"
- },
- {
- "name": "IsIconic",
- "address": "0x473580"
- },
- {
- "name": "IsDialogMessageA",
- "address": "0x473584"
- },
- {
- "name": "IsChild",
- "address": "0x473588"
- },
- {
- "name": "InvalidateRect",
- "address": "0x47358c"
- },
- {
- "name": "IntersectRect",
- "address": "0x473590"
- },
- {
- "name": "InsertMenuItemA",
- "address": "0x473594"
- },
- {
- "name": "InsertMenuA",
- "address": "0x473598"
- },
- {
- "name": "InflateRect",
- "address": "0x47359c"
- },
- {
- "name": "GetWindowThreadProcessId",
- "address": "0x4735a0"
- },
- {
- "name": "GetWindowTextA",
- "address": "0x4735a4"
- },
- {
- "name": "GetWindowRect",
- "address": "0x4735a8"
- },
- {
- "name": "GetWindowPlacement",
- "address": "0x4735ac"
- },
- {
- "name": "GetWindowLongA",
- "address": "0x4735b0"
- },
- {
- "name": "GetWindowDC",
- "address": "0x4735b4"
- },
- {
- "name": "GetTopWindow",
- "address": "0x4735b8"
- },
- {
- "name": "GetSystemMetrics",
- "address": "0x4735bc"
- },
- {
- "name": "GetSystemMenu",
- "address": "0x4735c0"
- },
- {
- "name": "GetSysColorBrush",
- "address": "0x4735c4"
- },
- {
- "name": "GetSysColor",
- "address": "0x4735c8"
- },
- {
- "name": "GetSubMenu",
- "address": "0x4735cc"
- },
- {
- "name": "GetScrollRange",
- "address": "0x4735d0"
- },
- {
- "name": "GetScrollPos",
- "address": "0x4735d4"
- },
- {
- "name": "GetScrollInfo",
- "address": "0x4735d8"
- },
- {
- "name": "GetPropA",
- "address": "0x4735dc"
- },
- {
- "name": "GetParent",
- "address": "0x4735e0"
- },
- {
- "name": "GetWindow",
- "address": "0x4735e4"
- },
- {
- "name": "GetMessageTime",
- "address": "0x4735e8"
- },
- {
- "name": "GetMenuStringA",
- "address": "0x4735ec"
- },
- {
- "name": "GetMenuState",
- "address": "0x4735f0"
- },
- {
- "name": "GetMenuItemInfoA",
- "address": "0x4735f4"
- },
- {
- "name": "GetMenuItemID",
- "address": "0x4735f8"
- },
- {
- "name": "GetMenuItemCount",
- "address": "0x4735fc"
- },
- {
- "name": "GetMenu",
- "address": "0x473600"
- },
- {
- "name": "GetLastActivePopup",
- "address": "0x473604"
- },
- {
- "name": "GetKeyboardState",
- "address": "0x473608"
- },
- {
- "name": "GetKeyboardLayoutList",
- "address": "0x47360c"
- },
- {
- "name": "GetKeyboardLayout",
- "address": "0x473610"
- },
- {
- "name": "GetKeyState",
- "address": "0x473614"
- },
- {
- "name": "GetKeyNameTextA",
- "address": "0x473618"
- },
- {
- "name": "GetIconInfo",
- "address": "0x47361c"
- },
- {
- "name": "GetForegroundWindow",
- "address": "0x473620"
- },
- {
- "name": "GetFocus",
- "address": "0x473624"
- },
- {
- "name": "GetDesktopWindow",
- "address": "0x473628"
- },
- {
- "name": "GetDCEx",
- "address": "0x47362c"
- },
- {
- "name": "GetDC",
- "address": "0x473630"
- },
- {
- "name": "GetCursorPos",
- "address": "0x473634"
- },
- {
- "name": "GetCursor",
- "address": "0x473638"
- },
- {
- "name": "GetClipboardData",
- "address": "0x47363c"
- },
- {
- "name": "GetClientRect",
- "address": "0x473640"
- },
- {
- "name": "GetClassNameA",
- "address": "0x473644"
- },
- {
- "name": "GetClassInfoA",
- "address": "0x473648"
- },
- {
- "name": "GetCapture",
- "address": "0x47364c"
- },
- {
- "name": "GetActiveWindow",
- "address": "0x473650"
- },
- {
- "name": "FrameRect",
- "address": "0x473654"
- },
- {
- "name": "FindWindowA",
- "address": "0x473658"
- },
- {
- "name": "FillRect",
- "address": "0x47365c"
- },
- {
- "name": "EqualRect",
- "address": "0x473660"
- },
- {
- "name": "EnumWindows",
- "address": "0x473664"
- },
- {
- "name": "EnumThreadWindows",
- "address": "0x473668"
- },
- {
- "name": "EndPaint",
- "address": "0x47366c"
- },
- {
- "name": "EnableWindow",
- "address": "0x473670"
- },
- {
- "name": "EnableScrollBar",
- "address": "0x473674"
- },
- {
- "name": "EnableMenuItem",
- "address": "0x473678"
- },
- {
- "name": "DrawTextA",
- "address": "0x47367c"
- },
- {
- "name": "DrawMenuBar",
- "address": "0x473680"
- },
- {
- "name": "DrawIconEx",
- "address": "0x473684"
- },
- {
- "name": "DrawIcon",
- "address": "0x473688"
- },
- {
- "name": "DrawFrameControl",
- "address": "0x47368c"
- },
- {
- "name": "DrawEdge",
- "address": "0x473690"
- },
- {
- "name": "DispatchMessageA",
- "address": "0x473694"
- },
- {
- "name": "DestroyWindow",
- "address": "0x473698"
- },
- {
- "name": "DestroyMenu",
- "address": "0x47369c"
- },
- {
- "name": "DestroyIcon",
- "address": "0x4736a0"
- },
- {
- "name": "DestroyCursor",
- "address": "0x4736a4"
- },
- {
- "name": "DeleteMenu",
- "address": "0x4736a8"
- },
- {
- "name": "DefWindowProcA",
- "address": "0x4736ac"
- },
- {
- "name": "DefMDIChildProcA",
- "address": "0x4736b0"
- },
- {
- "name": "DefFrameProcA",
- "address": "0x4736b4"
- },
- {
- "name": "CreatePopupMenu",
- "address": "0x4736b8"
- },
- {
- "name": "CreateMenu",
- "address": "0x4736bc"
- },
- {
- "name": "CreateIcon",
- "address": "0x4736c0"
- },
- {
- "name": "ClientToScreen",
- "address": "0x4736c4"
- },
- {
- "name": "CheckMenuItem",
- "address": "0x4736c8"
- },
- {
- "name": "CallWindowProcA",
- "address": "0x4736cc"
- },
- {
- "name": "CallNextHookEx",
- "address": "0x4736d0"
- },
- {
- "name": "BringWindowToTop",
- "address": "0x4736d4"
- },
- {
- "name": "BeginPaint",
- "address": "0x4736d8"
- },
- {
- "name": "CharNextA",
- "address": "0x4736dc"
- },
- {
- "name": "CharLowerBuffA",
- "address": "0x4736e0"
- },
- {
- "name": "CharLowerA",
- "address": "0x4736e4"
- },
- {
- "name": "CharToOemA",
- "address": "0x4736e8"
- },
- {
- "name": "AdjustWindowRectEx",
- "address": "0x4736ec"
- },
- {
- "name": "ActivateKeyboardLayout",
- "address": "0x4736f0"
- }
- ],
- "dll": "user32.dll"
- },
- {
- "imports": [
- {
- "name": "Sleep",
- "address": "0x4736f8"
- }
- ],
- "dll": "kernel32.dll"
- },
- {
- "imports": [
- {
- "name": "SafeArrayPtrOfIndex",
- "address": "0x473700"
- },
- {
- "name": "SafeArrayGetUBound",
- "address": "0x473704"
- },
- {
- "name": "SafeArrayGetLBound",
- "address": "0x473708"
- },
- {
- "name": "SafeArrayCreate",
- "address": "0x47370c"
- },
- {
- "name": "VariantChangeType",
- "address": "0x473710"
- },
- {
- "name": "VariantCopy",
- "address": "0x473714"
- },
- {
- "name": "VariantClear",
- "address": "0x473718"
- },
- {
- "name": "VariantInit",
- "address": "0x47371c"
- }
- ],
- "dll": "oleaut32.dll"
- },
- {
- "imports": [
- {
- "name": "CreateStreamOnHGlobal",
- "address": "0x473724"
- },
- {
- "name": "IsAccelerator",
- "address": "0x473728"
- },
- {
- "name": "OleDraw",
- "address": "0x47372c"
- },
- {
- "name": "OleSetMenuDescriptor",
- "address": "0x473730"
- },
- {
- "name": "CoCreateInstance",
- "address": "0x473734"
- },
- {
- "name": "CoGetClassObject",
- "address": "0x473738"
- },
- {
- "name": "CoUninitialize",
- "address": "0x47373c"
- },
- {
- "name": "CoInitialize",
- "address": "0x473740"
- },
- {
- "name": "IsEqualGUID",
- "address": "0x473744"
- }
- ],
- "dll": "ole32.dll"
- },
- {
- "imports": [
- {
- "name": "GetErrorInfo",
- "address": "0x47374c"
- },
- {
- "name": "SysFreeString",
- "address": "0x473750"
- }
- ],
- "dll": "oleaut32.dll"
- },
- {
- "imports": [
- {
- "name": "ImageList_SetIconSize",
- "address": "0x473758"
- },
- {
- "name": "ImageList_GetIconSize",
- "address": "0x47375c"
- },
- {
- "name": "ImageList_Write",
- "address": "0x473760"
- },
- {
- "name": "ImageList_Read",
- "address": "0x473764"
- },
- {
- "name": "ImageList_GetDragImage",
- "address": "0x473768"
- },
- {
- "name": "ImageList_DragShowNolock",
- "address": "0x47376c"
- },
- {
- "name": "ImageList_SetDragCursorImage",
- "address": "0x473770"
- },
- {
- "name": "ImageList_DragMove",
- "address": "0x473774"
- },
- {
- "name": "ImageList_DragLeave",
- "address": "0x473778"
- },
- {
- "name": "ImageList_DragEnter",
- "address": "0x47377c"
- },
- {
- "name": "ImageList_EndDrag",
- "address": "0x473780"
- },
- {
- "name": "ImageList_BeginDrag",
- "address": "0x473784"
- },
- {
- "name": "ImageList_Remove",
- "address": "0x473788"
- },
- {
- "name": "ImageList_DrawEx",
- "address": "0x47378c"
- },
- {
- "name": "ImageList_Draw",
- "address": "0x473790"
- },
- {
- "name": "ImageList_GetBkColor",
- "address": "0x473794"
- },
- {
- "name": "ImageList_SetBkColor",
- "address": "0x473798"
- },
- {
- "name": "ImageList_ReplaceIcon",
- "address": "0x47379c"
- },
- {
- "name": "ImageList_Add",
- "address": "0x4737a0"
- },
- {
- "name": "ImageList_GetImageCount",
- "address": "0x4737a4"
- },
- {
- "name": "ImageList_Destroy",
- "address": "0x4737a8"
- },
- {
- "name": "ImageList_Create",
- "address": "0x4737ac"
- },
- {
- "name": "InitCommonControls",
- "address": "0x4737b0"
- }
- ],
- "dll": "comctl32.dll"
- },
- {
- "imports": [
- {
- "name": "ReplaceTextA",
- "address": "0x4737b8"
- },
- {
- "name": "FindTextA",
- "address": "0x4737bc"
- }
- ],
- "dll": "comdlg32.dll"
- }
- ],
- "digital_signers": null,
- "exported_dll_name": null,
- "actual_checksum": "0x000a3699",
- "overlay": null,
- "imagebase": "0x00400000",
- "reported_checksum": "0x00000000",
- "icon_hash": null,
- "entrypoint": "0x00467be0",
- "timestamp": "1992-04-08 18:26:18",
- "osversion": "4.0",
- "sections": [
- {
- "name": "CODE",
- "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00001000",
- "size_of_data": "0x00066e00",
- "entropy": "6.53",
- "raw_address": "0x00000400",
- "virtual_size": "0x00066c28",
- "characteristics_raw": "0x60000020"
- },
- {
- "name": "DATA",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x00068000",
- "size_of_data": "0x00009c00",
- "entropy": "5.09",
- "raw_address": "0x00067200",
- "virtual_size": "0x00009a90",
- "characteristics_raw": "0xc0000040"
- },
- {
- "name": "BSS",
- "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x00072000",
- "size_of_data": "0x00000000",
- "entropy": "0.00",
- "raw_address": "0x00070e00",
- "virtual_size": "0x00000f55",
- "characteristics_raw": "0xc0000000"
- },
- {
- "name": ".idata",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x00073000",
- "size_of_data": "0x00002400",
- "entropy": "4.90",
- "raw_address": "0x00070e00",
- "virtual_size": "0x00002342",
- "characteristics_raw": "0xc0000040"
- },
- {
- "name": ".tls",
- "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x00076000",
- "size_of_data": "0x00000000",
- "entropy": "0.00",
- "raw_address": "0x00073200",
- "virtual_size": "0x00000010",
- "characteristics_raw": "0xc0000000"
- },
- {
- "name": ".rdata",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00077000",
- "size_of_data": "0x00000200",
- "entropy": "0.21",
- "raw_address": "0x00073200",
- "virtual_size": "0x00000018",
- "characteristics_raw": "0x50000040"
- },
- {
- "name": ".reloc",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00078000",
- "size_of_data": "0x00008000",
- "entropy": "6.66",
- "raw_address": "0x00073400",
- "virtual_size": "0x00007f70",
- "characteristics_raw": "0x50000040"
- },
- {
- "name": ".rsrc",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00080000",
- "size_of_data": "0x0001e800",
- "entropy": "7.35",
- "raw_address": "0x0007b400",
- "virtual_size": "0x0001e628",
- "characteristics_raw": "0x50000040"
- }
- ],
- "resources": [],
- "dirents": [
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00073000",
- "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
- "size": "0x00002342"
- },
- {
- "virtual_address": "0x00080000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
- "size": "0x0001e628"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00078000",
- "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
- "size": "0x00007f70"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00077000",
- "name": "IMAGE_DIRECTORY_ENTRY_TLS",
- "size": "0x00000018"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_IAT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
- "size": "0x00000000"
- }
- ],
- "exports": [],
- "guest_signers": {},
- "imphash": "ffa3b46bd2034198985d725252fa90e2",
- "icon_fuzzy": null,
- "icon": null,
- "pdbpath": null,
- "imported_dll_count": 16,
- "versioninfo": []
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment