8920447_2019-07-03_13_30.json

[*] MalFamily: "Bypassuac"

[*] MalScore: 10.0

[*] File Name: "8920447"
[*] File Size: 1223168
[*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
[*] SHA256: "e2ed796720a63cc427bfbeb42314a314b548c7f1ef21ab305e26bb0e16501f06"
[*] MD5: "cf236d42801a2314531b0a682b318187"
[*] SHA1: "ace8ca853fceb2ccb3a3f1092d8fcbcf88d4eb9b"
[*] SHA512: "37502fcfcfc57794044f6a5de0d091fbaed9809ea5ab5faf27b1b57368dbaa0e50e3d35edce42e62760a0ff1c31ee0512f7f4328a5c8f3570005f85f416aeea2"
[*] CRC32: "830D2521"
[*] SSDEEP: "24576:1rRoraaLCu/LNPubIz9aPw04aKIjwnGYCjRiPr8lv9:1rR6XhubIRan4nITki"

[*] Process Execution: [
    "8920447.exe",
    "jkcgjj.exe",
    "jkcgjj.exe",
    "jkcgjj.exe"
]

[*] Signatures Detected: [
    {
        "Description": "Creates RWX memory",
        "Details": []
    },
    {
        "Description": "Reads data out of its own binary image",
        "Details": [
            {
                "self_read": "process: jkcgjj.exe, pid: 2236, offset: 0x00000000, length: 0x00062a00"
            }
        ]
    },
    {
        "Description": "Drops a binary and executes it",
        "Details": [
            {
                "binary": "C:\\Users\\user\\AppData\\Roaming\\jkcgjj.exe"
            }
        ]
    },
    {
        "Description": "The binary likely contains encrypted or compressed data.",
        "Details": [
            {
                "section": "name: .rsrc, entropy: 7.01, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ, raw_size: 0x000ac000, virtual_size: 0x000abf84"
            }
        ]
    },
    {
        "Description": "Executed a process and injected code into it, probably while unpacking",
        "Details": [
            {
                "Injection": "jkcgjj.exe(2236) -> jkcgjj.exe(180)"
            }
        ]
    },
    {
        "Description": "Installs itself for autorun at Windows startup",
        "Details": [
            {
                "key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\jkcgjj"
            },
            {
                "data": "C:\\Users\\user\\AppData\\Local\\jkcgjj\\jkcgjj.vbs"
            }
        ]
    },
    {
        "Description": "File has been identified by 21 Antiviruses on VirusTotal as malicious",
        "Details": [
            {
                "FireEye": "Generic.mg.cf236d42801a2314"
            },
            {
                "F-Prot": "W32/Injector.IAE"
            },
            {
                "APEX": "Malicious"
            },
            {
                "Kaspersky": "HEUR:Trojan.Win32.BypassUAC.gen"
            },
            {
                "Avast": "Win32:Malware-gen"
            },
            {
                "F-Secure": "Heuristic.HEUR/AGEN.1019171"
            },
            {
                "DrWeb": "Trojan.MulDrop9.16741"
            },
            {
                "Ikarus": "Trojan.Inject"
            },
            {
                "Cyren": "W32/Injector.UPUH-4899"
            },
            {
                "Avira": "HEUR/AGEN.1019171"
            },
            {
                "Antiy-AVL": "Trojan/Win32.BypassUAC"
            },
            {
                "ZoneAlarm": "HEUR:Trojan.Win32.BypassUAC.gen"
            },
            {
                "AhnLab-V3": "Trojan/Win32.BypassUAC.R279450"
            },
            {
                "Cylance": "Unsafe"
            },
            {
                "ESET-NOD32": "a variant of Win32/Injector.EGJJ"
            },
            {
                "Rising": "Trojan.Injector!8.C4 (C64:YzY0Oi4ReW3eAln1)"
            },
            {
                "SentinelOne": "DFI - Suspicious PE"
            },
            {
                "Fortinet": "W32/Injector.EGJJ!tr"
            },
            {
                "AVG": "Win32:Malware-gen"
            },
            {
                "Cybereason": "malicious.53fceb"
            },
            {
                "Qihoo-360": "HEUR/QVM05.1.468D.Malware.Gen"
            }
        ]
    },
    {
        "Description": "Collects information to fingerprint the system",
        "Details": []
    },
    {
        "Description": "Anomalous binary characteristics",
        "Details": [
            {
                "anomaly": "Timestamp on binary predates the release date of the OS version it requires by at least a year"
            }
        ]
    }
]

[*] Started Service: []

[*] Executed Commands: [
    "C:\\Users\\user\\AppData\\Roaming\\jkcgjj.exe"
]

[*] Mutexes: [
    "A81FB8C6-0BBE6E18-6FC9B5DB-536DA455-933946726"
]

[*] Modified Files: [
    "C:\\Users\\user\\AppData\\Roaming\\jkcgjj.jpg",
    "C:\\Users\\user\\AppData\\Roaming\\jkcgjj.exe",
    "C:\\Users\\user\\AppData\\Local\\jkcgjj\\jkcgjj.exe",
    "C:\\Users\\user\\AppData\\Local\\jkcgjj\\jkcgjj.jpg",
    "C:\\Users\\user\\AppData\\Local\\jkcgjj\\jkcgjj.vbs"
]

[*] Deleted Files: []

[*] Modified Registry Keys: [
    "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\jkcgjj"
]

[*] Deleted Registry Keys: []

[*] DNS Communications: [
    {
        "type": "A",
        "request": "bexojine.xyz",
        "answers": []
    }
]

[*] Domains: [
    {
        "ip": "188.68.211.5",
        "domain": "bexojine.xyz"
    }
]

[*] Network Communication - ICMP: []

[*] Network Communication - HTTP: []

[*] Network Communication - SMTP: []

[*] Network Communication - Hosts: []

[*] Network Communication - IRC: []

[*] Static Analysis: {
    "pe": {
        "peid_signatures": null,
        "imports": [
            {
                "imports": [
                    {
                        "name": "DeleteCriticalSection",
                        "address": "0x477168"
                    },
                    {
                        "name": "LeaveCriticalSection",
                        "address": "0x47716c"
                    },
                    {
                        "name": "EnterCriticalSection",
                        "address": "0x477170"
                    },
                    {
                        "name": "InitializeCriticalSection",
                        "address": "0x477174"
                    },
                    {
                        "name": "VirtualFree",
                        "address": "0x477178"
                    },
                    {
                        "name": "VirtualAlloc",
                        "address": "0x47717c"
                    },
                    {
                        "name": "LocalFree",
                        "address": "0x477180"
                    },
                    {
                        "name": "LocalAlloc",
                        "address": "0x477184"
                    },
                    {
                        "name": "GetVersion",
                        "address": "0x477188"
                    },
                    {
                        "name": "GetCurrentThreadId",
                        "address": "0x47718c"
                    },
                    {
                        "name": "InterlockedDecrement",
                        "address": "0x477190"
                    },
                    {
                        "name": "InterlockedIncrement",
                        "address": "0x477194"
                    },
                    {
                        "name": "VirtualQuery",
                        "address": "0x477198"
                    },
                    {
                        "name": "WideCharToMultiByte",
                        "address": "0x47719c"
                    },
                    {
                        "name": "MultiByteToWideChar",
                        "address": "0x4771a0"
                    },
                    {
                        "name": "lstrlenA",
                        "address": "0x4771a4"
                    },
                    {
                        "name": "lstrcpynA",
                        "address": "0x4771a8"
                    },
                    {
                        "name": "LoadLibraryExA",
                        "address": "0x4771ac"
                    },
                    {
                        "name": "GetThreadLocale",
                        "address": "0x4771b0"
                    },
                    {
                        "name": "GetStartupInfoA",
                        "address": "0x4771b4"
                    },
                    {
                        "name": "GetProcAddress",
                        "address": "0x4771b8"
                    },
                    {
                        "name": "GetModuleHandleA",
                        "address": "0x4771bc"
                    },
                    {
                        "name": "GetModuleFileNameA",
                        "address": "0x4771c0"
                    },
                    {
                        "name": "GetLocaleInfoA",
                        "address": "0x4771c4"
                    },
                    {
                        "name": "GetLastError",
                        "address": "0x4771c8"
                    },
                    {
                        "name": "GetCommandLineA",
                        "address": "0x4771cc"
                    },
                    {
                        "name": "FreeLibrary",
                        "address": "0x4771d0"
                    },
                    {
                        "name": "FindFirstFileA",
                        "address": "0x4771d4"
                    },
                    {
                        "name": "FindClose",
                        "address": "0x4771d8"
                    },
                    {
                        "name": "ExitProcess",
                        "address": "0x4771dc"
                    },
                    {
                        "name": "WriteFile",
                        "address": "0x4771e0"
                    },
                    {
                        "name": "UnhandledExceptionFilter",
                        "address": "0x4771e4"
                    },
                    {
                        "name": "SetFilePointer",
                        "address": "0x4771e8"
                    },
                    {
                        "name": "SetEndOfFile",
                        "address": "0x4771ec"
                    },
                    {
                        "name": "RtlUnwind",
                        "address": "0x4771f0"
                    },
                    {
                        "name": "ReadFile",
                        "address": "0x4771f4"
                    },
                    {
                        "name": "RaiseException",
                        "address": "0x4771f8"
                    },
                    {
                        "name": "GetStdHandle",
                        "address": "0x4771fc"
                    },
                    {
                        "name": "GetFileSize",
                        "address": "0x477200"
                    },
                    {
                        "name": "GetFileType",
                        "address": "0x477204"
                    },
                    {
                        "name": "CreateFileA",
                        "address": "0x477208"
                    },
                    {
                        "name": "CloseHandle",
                        "address": "0x47720c"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "GetKeyboardType",
                        "address": "0x477214"
                    },
                    {
                        "name": "LoadStringA",
                        "address": "0x477218"
                    },
                    {
                        "name": "MessageBoxA",
                        "address": "0x47721c"
                    },
                    {
                        "name": "CharNextA",
                        "address": "0x477220"
                    }
                ],
                "dll": "user32.dll"
            },
            {
                "imports": [
                    {
                        "name": "RegQueryValueExA",
                        "address": "0x477228"
                    },
                    {
                        "name": "RegOpenKeyExA",
                        "address": "0x47722c"
                    },
                    {
                        "name": "RegCloseKey",
                        "address": "0x477230"
                    }
                ],
                "dll": "advapi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SysFreeString",
                        "address": "0x477238"
                    },
                    {
                        "name": "SysReAllocStringLen",
                        "address": "0x47723c"
                    },
                    {
                        "name": "SysAllocStringLen",
                        "address": "0x477240"
                    }
                ],
                "dll": "oleaut32.dll"
            },
            {
                "imports": [
                    {
                        "name": "TlsSetValue",
                        "address": "0x477248"
                    },
                    {
                        "name": "TlsGetValue",
                        "address": "0x47724c"
                    },
                    {
                        "name": "LocalAlloc",
                        "address": "0x477250"
                    },
                    {
                        "name": "GetModuleHandleA",
                        "address": "0x477254"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "RegQueryValueExA",
                        "address": "0x47725c"
                    },
                    {
                        "name": "RegOpenKeyExA",
                        "address": "0x477260"
                    },
                    {
                        "name": "RegCloseKey",
                        "address": "0x477264"
                    }
                ],
                "dll": "advapi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "lstrcpyA",
                        "address": "0x47726c"
                    },
                    {
                        "name": "WriteFile",
                        "address": "0x477270"
                    },
                    {
                        "name": "WaitForSingleObject",
                        "address": "0x477274"
                    },
                    {
                        "name": "VirtualQuery",
                        "address": "0x477278"
                    },
                    {
                        "name": "VirtualAlloc",
                        "address": "0x47727c"
                    },
                    {
                        "name": "Sleep",
                        "address": "0x477280"
                    },
                    {
                        "name": "SizeofResource",
                        "address": "0x477284"
                    },
                    {
                        "name": "SetThreadLocale",
                        "address": "0x477288"
                    },
                    {
                        "name": "SetFilePointer",
                        "address": "0x47728c"
                    },
                    {
                        "name": "SetEvent",
                        "address": "0x477290"
                    },
                    {
                        "name": "SetErrorMode",
                        "address": "0x477294"
                    },
                    {
                        "name": "SetEndOfFile",
                        "address": "0x477298"
                    },
                    {
                        "name": "ResetEvent",
                        "address": "0x47729c"
                    },
                    {
                        "name": "ReadFile",
                        "address": "0x4772a0"
                    },
                    {
                        "name": "MulDiv",
                        "address": "0x4772a4"
                    },
                    {
                        "name": "LockResource",
                        "address": "0x4772a8"
                    },
                    {
                        "name": "LoadResource",
                        "address": "0x4772ac"
                    },
                    {
                        "name": "LoadLibraryA",
                        "address": "0x4772b0"
                    },
                    {
                        "name": "LeaveCriticalSection",
                        "address": "0x4772b4"
                    },
                    {
                        "name": "InitializeCriticalSection",
                        "address": "0x4772b8"
                    },
                    {
                        "name": "GlobalUnlock",
                        "address": "0x4772bc"
                    },
                    {
                        "name": "GlobalReAlloc",
                        "address": "0x4772c0"
                    },
                    {
                        "name": "GlobalHandle",
                        "address": "0x4772c4"
                    },
                    {
                        "name": "GlobalLock",
                        "address": "0x4772c8"
                    },
                    {
                        "name": "GlobalFree",
                        "address": "0x4772cc"
                    },
                    {
                        "name": "GlobalFindAtomA",
                        "address": "0x4772d0"
                    },
                    {
                        "name": "GlobalDeleteAtom",
                        "address": "0x4772d4"
                    },
                    {
                        "name": "GlobalAlloc",
                        "address": "0x4772d8"
                    },
                    {
                        "name": "GlobalAddAtomA",
                        "address": "0x4772dc"
                    },
                    {
                        "name": "GetVersionExA",
                        "address": "0x4772e0"
                    },
                    {
                        "name": "GetVersion",
                        "address": "0x4772e4"
                    },
                    {
                        "name": "GetTickCount",
                        "address": "0x4772e8"
                    },
                    {
                        "name": "GetThreadLocale",
                        "address": "0x4772ec"
                    },
                    {
                        "name": "GetSystemInfo",
                        "address": "0x4772f0"
                    },
                    {
                        "name": "GetStringTypeExA",
                        "address": "0x4772f4"
                    },
                    {
                        "name": "GetStdHandle",
                        "address": "0x4772f8"
                    },
                    {
                        "name": "GetProfileStringA",
                        "address": "0x4772fc"
                    },
                    {
                        "name": "GetProcAddress",
                        "address": "0x477300"
                    },
                    {
                        "name": "GetModuleHandleA",
                        "address": "0x477304"
                    },
                    {
                        "name": "GetModuleFileNameA",
                        "address": "0x477308"
                    },
                    {
                        "name": "GetLocaleInfoA",
                        "address": "0x47730c"
                    },
                    {
                        "name": "GetLocalTime",
                        "address": "0x477310"
                    },
                    {
                        "name": "GetLastError",
                        "address": "0x477314"
                    },
                    {
                        "name": "GetFullPathNameA",
                        "address": "0x477318"
                    },
                    {
                        "name": "GetDiskFreeSpaceA",
                        "address": "0x47731c"
                    },
                    {
                        "name": "GetDateFormatA",
                        "address": "0x477320"
                    },
                    {
                        "name": "GetCurrentThreadId",
                        "address": "0x477324"
                    },
                    {
                        "name": "GetCurrentProcessId",
                        "address": "0x477328"
                    },
                    {
                        "name": "GetCPInfo",
                        "address": "0x47732c"
                    },
                    {
                        "name": "GetACP",
                        "address": "0x477330"
                    },
                    {
                        "name": "FreeResource",
                        "address": "0x477334"
                    },
                    {
                        "name": "InterlockedExchange",
                        "address": "0x477338"
                    },
                    {
                        "name": "FreeLibrary",
                        "address": "0x47733c"
                    },
                    {
                        "name": "FormatMessageA",
                        "address": "0x477340"
                    },
                    {
                        "name": "FindResourceA",
                        "address": "0x477344"
                    },
                    {
                        "name": "ExitProcess",
                        "address": "0x477348"
                    },
                    {
                        "name": "EnumCalendarInfoA",
                        "address": "0x47734c"
                    },
                    {
                        "name": "EnterCriticalSection",
                        "address": "0x477350"
                    },
                    {
                        "name": "DeleteCriticalSection",
                        "address": "0x477354"
                    },
                    {
                        "name": "CreateThread",
                        "address": "0x477358"
                    },
                    {
                        "name": "CreateProcessA",
                        "address": "0x47735c"
                    },
                    {
                        "name": "CreateFileA",
                        "address": "0x477360"
                    },
                    {
                        "name": "CreateEventA",
                        "address": "0x477364"
                    },
                    {
                        "name": "CreateDirectoryA",
                        "address": "0x477368"
                    },
                    {
                        "name": "CompareStringA",
                        "address": "0x47736c"
                    },
                    {
                        "name": "CloseHandle",
                        "address": "0x477370"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "VerQueryValueA",
                        "address": "0x477378"
                    },
                    {
                        "name": "GetFileVersionInfoSizeA",
                        "address": "0x47737c"
                    },
                    {
                        "name": "GetFileVersionInfoA",
                        "address": "0x477380"
                    }
                ],
                "dll": "version.dll"
            },
            {
                "imports": [
                    {
                        "name": "UnrealizeObject",
                        "address": "0x477388"
                    },
                    {
                        "name": "StretchBlt",
                        "address": "0x47738c"
                    },
                    {
                        "name": "StartPage",
                        "address": "0x477390"
                    },
                    {
                        "name": "StartDocA",
                        "address": "0x477394"
                    },
                    {
                        "name": "SetWindowOrgEx",
                        "address": "0x477398"
                    },
                    {
                        "name": "SetWinMetaFileBits",
                        "address": "0x47739c"
                    },
                    {
                        "name": "SetViewportOrgEx",
                        "address": "0x4773a0"
                    },
                    {
                        "name": "SetTextColor",
                        "address": "0x4773a4"
                    },
                    {
                        "name": "SetStretchBltMode",
                        "address": "0x4773a8"
                    },
                    {
                        "name": "SetROP2",
                        "address": "0x4773ac"
                    },
                    {
                        "name": "SetPixel",
                        "address": "0x4773b0"
                    },
                    {
                        "name": "SetMapMode",
                        "address": "0x4773b4"
                    },
                    {
                        "name": "SetEnhMetaFileBits",
                        "address": "0x4773b8"
                    },
                    {
                        "name": "SetDIBColorTable",
                        "address": "0x4773bc"
                    },
                    {
                        "name": "SetBrushOrgEx",
                        "address": "0x4773c0"
                    },
                    {
                        "name": "SetBkMode",
                        "address": "0x4773c4"
                    },
                    {
                        "name": "SetBkColor",
                        "address": "0x4773c8"
                    },
                    {
                        "name": "SetAbortProc",
                        "address": "0x4773cc"
                    },
                    {
                        "name": "SelectPalette",
                        "address": "0x4773d0"
                    },
                    {
                        "name": "SelectObject",
                        "address": "0x4773d4"
                    },
                    {
                        "name": "SaveDC",
                        "address": "0x4773d8"
                    },
                    {
                        "name": "RestoreDC",
                        "address": "0x4773dc"
                    },
                    {
                        "name": "Rectangle",
                        "address": "0x4773e0"
                    },
                    {
                        "name": "RectVisible",
                        "address": "0x4773e4"
                    },
                    {
                        "name": "RealizePalette",
                        "address": "0x4773e8"
                    },
                    {
                        "name": "Polyline",
                        "address": "0x4773ec"
                    },
                    {
                        "name": "PlayEnhMetaFile",
                        "address": "0x4773f0"
                    },
                    {
                        "name": "PatBlt",
                        "address": "0x4773f4"
                    },
                    {
                        "name": "MoveToEx",
                        "address": "0x4773f8"
                    },
                    {
                        "name": "MaskBlt",
                        "address": "0x4773fc"
                    },
                    {
                        "name": "LineTo",
                        "address": "0x477400"
                    },
                    {
                        "name": "IntersectClipRect",
                        "address": "0x477404"
                    },
                    {
                        "name": "GetWindowOrgEx",
                        "address": "0x477408"
                    },
                    {
                        "name": "GetWinMetaFileBits",
                        "address": "0x47740c"
                    },
                    {
                        "name": "GetTextMetricsA",
                        "address": "0x477410"
                    },
                    {
                        "name": "GetTextExtentPoint32A",
                        "address": "0x477414"
                    },
                    {
                        "name": "GetSystemPaletteEntries",
                        "address": "0x477418"
                    },
                    {
                        "name": "GetStockObject",
                        "address": "0x47741c"
                    },
                    {
                        "name": "GetPixel",
                        "address": "0x477420"
                    },
                    {
                        "name": "GetPaletteEntries",
                        "address": "0x477424"
                    },
                    {
                        "name": "GetObjectA",
                        "address": "0x477428"
                    },
                    {
                        "name": "GetMapMode",
                        "address": "0x47742c"
                    },
                    {
                        "name": "GetEnhMetaFilePaletteEntries",
                        "address": "0x477430"
                    },
                    {
                        "name": "GetEnhMetaFileHeader",
                        "address": "0x477434"
                    },
                    {
                        "name": "GetEnhMetaFileBits",
                        "address": "0x477438"
                    },
                    {
                        "name": "GetDeviceCaps",
                        "address": "0x47743c"
                    },
                    {
                        "name": "GetDIBits",
                        "address": "0x477440"
                    },
                    {
                        "name": "GetDIBColorTable",
                        "address": "0x477444"
                    },
                    {
                        "name": "GetDCOrgEx",
                        "address": "0x477448"
                    },
                    {
                        "name": "GetDCBrushColor",
                        "address": "0x47744c"
                    },
                    {
                        "name": "GetCurrentPositionEx",
                        "address": "0x477450"
                    },
                    {
                        "name": "GetClipBox",
                        "address": "0x477454"
                    },
                    {
                        "name": "GetBrushOrgEx",
                        "address": "0x477458"
                    },
                    {
                        "name": "GetBkColor",
                        "address": "0x47745c"
                    },
                    {
                        "name": "GetBitmapBits",
                        "address": "0x477460"
                    },
                    {
                        "name": "GdiFlush",
                        "address": "0x477464"
                    },
                    {
                        "name": "ExcludeClipRect",
                        "address": "0x477468"
                    },
                    {
                        "name": "EndPage",
                        "address": "0x47746c"
                    },
                    {
                        "name": "EndDoc",
                        "address": "0x477470"
                    },
                    {
                        "name": "DeleteObject",
                        "address": "0x477474"
                    },
                    {
                        "name": "DeleteEnhMetaFile",
                        "address": "0x477478"
                    },
                    {
                        "name": "DeleteDC",
                        "address": "0x47747c"
                    },
                    {
                        "name": "CreateSolidBrush",
                        "address": "0x477480"
                    },
                    {
                        "name": "CreatePenIndirect",
                        "address": "0x477484"
                    },
                    {
                        "name": "CreatePalette",
                        "address": "0x477488"
                    },
                    {
                        "name": "CreateICA",
                        "address": "0x47748c"
                    },
                    {
                        "name": "CreateHalftonePalette",
                        "address": "0x477490"
                    },
                    {
                        "name": "CreateFontIndirectA",
                        "address": "0x477494"
                    },
                    {
                        "name": "CreateDIBitmap",
                        "address": "0x477498"
                    },
                    {
                        "name": "CreateDIBSection",
                        "address": "0x47749c"
                    },
                    {
                        "name": "CreateDCA",
                        "address": "0x4774a0"
                    },
                    {
                        "name": "CreateCompatibleDC",
                        "address": "0x4774a4"
                    },
                    {
                        "name": "CreateCompatibleBitmap",
                        "address": "0x4774a8"
                    },
                    {
                        "name": "CreateBrushIndirect",
                        "address": "0x4774ac"
                    },
                    {
                        "name": "CreateBitmap",
                        "address": "0x4774b0"
                    },
                    {
                        "name": "CopyEnhMetaFileA",
                        "address": "0x4774b4"
                    },
                    {
                        "name": "BitBlt",
                        "address": "0x4774b8"
                    }
                ],
                "dll": "gdi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "CreateWindowExA",
                        "address": "0x4774c0"
                    },
                    {
                        "name": "WindowFromPoint",
                        "address": "0x4774c4"
                    },
                    {
                        "name": "WinHelpA",
                        "address": "0x4774c8"
                    },
                    {
                        "name": "WaitMessage",
                        "address": "0x4774cc"
                    },
                    {
                        "name": "UpdateWindow",
                        "address": "0x4774d0"
                    },
                    {
                        "name": "UnregisterClassA",
                        "address": "0x4774d4"
                    },
                    {
                        "name": "UnhookWindowsHookEx",
                        "address": "0x4774d8"
                    },
                    {
                        "name": "TranslateMessage",
                        "address": "0x4774dc"
                    },
                    {
                        "name": "TranslateMDISysAccel",
                        "address": "0x4774e0"
                    },
                    {
                        "name": "TrackPopupMenu",
                        "address": "0x4774e4"
                    },
                    {
                        "name": "SystemParametersInfoA",
                        "address": "0x4774e8"
                    },
                    {
                        "name": "ShowWindow",
                        "address": "0x4774ec"
                    },
                    {
                        "name": "ShowScrollBar",
                        "address": "0x4774f0"
                    },
                    {
                        "name": "ShowOwnedPopups",
                        "address": "0x4774f4"
                    },
                    {
                        "name": "ShowCursor",
                        "address": "0x4774f8"
                    },
                    {
                        "name": "SetWindowsHookExA",
                        "address": "0x4774fc"
                    },
                    {
                        "name": "SetWindowTextA",
                        "address": "0x477500"
                    },
                    {
                        "name": "SetWindowPos",
                        "address": "0x477504"
                    },
                    {
                        "name": "SetWindowPlacement",
                        "address": "0x477508"
                    },
                    {
                        "name": "SetWindowLongA",
                        "address": "0x47750c"
                    },
                    {
                        "name": "SetTimer",
                        "address": "0x477510"
                    },
                    {
                        "name": "SetScrollRange",
                        "address": "0x477514"
                    },
                    {
                        "name": "SetScrollPos",
                        "address": "0x477518"
                    },
                    {
                        "name": "SetScrollInfo",
                        "address": "0x47751c"
                    },
                    {
                        "name": "SetRect",
                        "address": "0x477520"
                    },
                    {
                        "name": "SetPropA",
                        "address": "0x477524"
                    },
                    {
                        "name": "SetParent",
                        "address": "0x477528"
                    },
                    {
                        "name": "SetMenuItemInfoA",
                        "address": "0x47752c"
                    },
                    {
                        "name": "SetMenu",
                        "address": "0x477530"
                    },
                    {
                        "name": "SetForegroundWindow",
                        "address": "0x477534"
                    },
                    {
                        "name": "SetFocus",
                        "address": "0x477538"
                    },
                    {
                        "name": "SetCursor",
                        "address": "0x47753c"
                    },
                    {
                        "name": "SetClassLongA",
                        "address": "0x477540"
                    },
                    {
                        "name": "SetCapture",
                        "address": "0x477544"
                    },
                    {
                        "name": "SetActiveWindow",
                        "address": "0x477548"
                    },
                    {
                        "name": "SendMessageA",
                        "address": "0x47754c"
                    },
                    {
                        "name": "ScrollWindow",
                        "address": "0x477550"
                    },
                    {
                        "name": "ScreenToClient",
                        "address": "0x477554"
                    },
                    {
                        "name": "RemovePropA",
                        "address": "0x477558"
                    },
                    {
                        "name": "RemoveMenu",
                        "address": "0x47755c"
                    },
                    {
                        "name": "ReleaseDC",
                        "address": "0x477560"
                    },
                    {
                        "name": "ReleaseCapture",
                        "address": "0x477564"
                    },
                    {
                        "name": "RegisterWindowMessageA",
                        "address": "0x477568"
                    },
                    {
                        "name": "RegisterClipboardFormatA",
                        "address": "0x47756c"
                    },
                    {
                        "name": "RegisterClassA",
                        "address": "0x477570"
                    },
                    {
                        "name": "RedrawWindow",
                        "address": "0x477574"
                    },
                    {
                        "name": "PtInRect",
                        "address": "0x477578"
                    },
                    {
                        "name": "PostQuitMessage",
                        "address": "0x47757c"
                    },
                    {
                        "name": "PostMessageA",
                        "address": "0x477580"
                    },
                    {
                        "name": "PeekMessageA",
                        "address": "0x477584"
                    },
                    {
                        "name": "OffsetRect",
                        "address": "0x477588"
                    },
                    {
                        "name": "OemToCharA",
                        "address": "0x47758c"
                    },
                    {
                        "name": "MessageBoxA",
                        "address": "0x477590"
                    },
                    {
                        "name": "MapWindowPoints",
                        "address": "0x477594"
                    },
                    {
                        "name": "MapVirtualKeyA",
                        "address": "0x477598"
                    },
                    {
                        "name": "LoadStringA",
                        "address": "0x47759c"
                    },
                    {
                        "name": "LoadKeyboardLayoutA",
                        "address": "0x4775a0"
                    },
                    {
                        "name": "LoadIconA",
                        "address": "0x4775a4"
                    },
                    {
                        "name": "LoadCursorA",
                        "address": "0x4775a8"
                    },
                    {
                        "name": "LoadBitmapA",
                        "address": "0x4775ac"
                    },
                    {
                        "name": "KillTimer",
                        "address": "0x4775b0"
                    },
                    {
                        "name": "IsZoomed",
                        "address": "0x4775b4"
                    },
                    {
                        "name": "IsWindowVisible",
                        "address": "0x4775b8"
                    },
                    {
                        "name": "IsWindowEnabled",
                        "address": "0x4775bc"
                    },
                    {
                        "name": "IsWindow",
                        "address": "0x4775c0"
                    },
                    {
                        "name": "IsRectEmpty",
                        "address": "0x4775c4"
                    },
                    {
                        "name": "IsIconic",
                        "address": "0x4775c8"
                    },
                    {
                        "name": "IsDialogMessageA",
                        "address": "0x4775cc"
                    },
                    {
                        "name": "IsChild",
                        "address": "0x4775d0"
                    },
                    {
                        "name": "InvalidateRect",
                        "address": "0x4775d4"
                    },
                    {
                        "name": "IntersectRect",
                        "address": "0x4775d8"
                    },
                    {
                        "name": "InsertMenuItemA",
                        "address": "0x4775dc"
                    },
                    {
                        "name": "InsertMenuA",
                        "address": "0x4775e0"
                    },
                    {
                        "name": "InflateRect",
                        "address": "0x4775e4"
                    },
                    {
                        "name": "GetWindowThreadProcessId",
                        "address": "0x4775e8"
                    },
                    {
                        "name": "GetWindowTextA",
                        "address": "0x4775ec"
                    },
                    {
                        "name": "GetWindowRect",
                        "address": "0x4775f0"
                    },
                    {
                        "name": "GetWindowPlacement",
                        "address": "0x4775f4"
                    },
                    {
                        "name": "GetWindowLongA",
                        "address": "0x4775f8"
                    },
                    {
                        "name": "GetWindowDC",
                        "address": "0x4775fc"
                    },
                    {
                        "name": "GetUpdateRect",
                        "address": "0x477600"
                    },
                    {
                        "name": "GetTopWindow",
                        "address": "0x477604"
                    },
                    {
                        "name": "GetSystemMetrics",
                        "address": "0x477608"
                    },
                    {
                        "name": "GetSystemMenu",
                        "address": "0x47760c"
                    },
                    {
                        "name": "GetSysColorBrush",
                        "address": "0x477610"
                    },
                    {
                        "name": "GetSysColor",
                        "address": "0x477614"
                    },
                    {
                        "name": "GetSubMenu",
                        "address": "0x477618"
                    },
                    {
                        "name": "GetScrollRange",
                        "address": "0x47761c"
                    },
                    {
                        "name": "GetScrollPos",
                        "address": "0x477620"
                    },
                    {
                        "name": "GetScrollInfo",
                        "address": "0x477624"
                    },
                    {
                        "name": "GetPropA",
                        "address": "0x477628"
                    },
                    {
                        "name": "GetParent",
                        "address": "0x47762c"
                    },
                    {
                        "name": "GetWindow",
                        "address": "0x477630"
                    },
                    {
                        "name": "GetMenuStringA",
                        "address": "0x477634"
                    },
                    {
                        "name": "GetMenuState",
                        "address": "0x477638"
                    },
                    {
                        "name": "GetMenuItemInfoA",
                        "address": "0x47763c"
                    },
                    {
                        "name": "GetMenuItemID",
                        "address": "0x477640"
                    },
                    {
                        "name": "GetMenuItemCount",
                        "address": "0x477644"
                    },
                    {
                        "name": "GetMenu",
                        "address": "0x477648"
                    },
                    {
                        "name": "GetLastActivePopup",
                        "address": "0x47764c"
                    },
                    {
                        "name": "GetKeyboardState",
                        "address": "0x477650"
                    },
                    {
                        "name": "GetKeyboardLayoutList",
                        "address": "0x477654"
                    },
                    {
                        "name": "GetKeyboardLayout",
                        "address": "0x477658"
                    },
                    {
                        "name": "GetKeyState",
                        "address": "0x47765c"
                    },
                    {
                        "name": "GetKeyNameTextA",
                        "address": "0x477660"
                    },
                    {
                        "name": "GetIconInfo",
                        "address": "0x477664"
                    },
                    {
                        "name": "GetForegroundWindow",
                        "address": "0x477668"
                    },
                    {
                        "name": "GetFocus",
                        "address": "0x47766c"
                    },
                    {
                        "name": "GetDesktopWindow",
                        "address": "0x477670"
                    },
                    {
                        "name": "GetDCEx",
                        "address": "0x477674"
                    },
                    {
                        "name": "GetDC",
                        "address": "0x477678"
                    },
                    {
                        "name": "GetCursorPos",
                        "address": "0x47767c"
                    },
                    {
                        "name": "GetCursor",
                        "address": "0x477680"
                    },
                    {
                        "name": "GetClipboardData",
                        "address": "0x477684"
                    },
                    {
                        "name": "GetClientRect",
                        "address": "0x477688"
                    },
                    {
                        "name": "GetClassNameA",
                        "address": "0x47768c"
                    },
                    {
                        "name": "GetClassInfoA",
                        "address": "0x477690"
                    },
                    {
                        "name": "GetCapture",
                        "address": "0x477694"
                    },
                    {
                        "name": "GetActiveWindow",
                        "address": "0x477698"
                    },
                    {
                        "name": "FrameRect",
                        "address": "0x47769c"
                    },
                    {
                        "name": "FindWindowA",
                        "address": "0x4776a0"
                    },
                    {
                        "name": "FillRect",
                        "address": "0x4776a4"
                    },
                    {
                        "name": "EqualRect",
                        "address": "0x4776a8"
                    },
                    {
                        "name": "EnumWindows",
                        "address": "0x4776ac"
                    },
                    {
                        "name": "EnumThreadWindows",
                        "address": "0x4776b0"
                    },
                    {
                        "name": "EndPaint",
                        "address": "0x4776b4"
                    },
                    {
                        "name": "EnableWindow",
                        "address": "0x4776b8"
                    },
                    {
                        "name": "EnableScrollBar",
                        "address": "0x4776bc"
                    },
                    {
                        "name": "EnableMenuItem",
                        "address": "0x4776c0"
                    },
                    {
                        "name": "DrawTextA",
                        "address": "0x4776c4"
                    },
                    {
                        "name": "DrawMenuBar",
                        "address": "0x4776c8"
                    },
                    {
                        "name": "DrawIconEx",
                        "address": "0x4776cc"
                    },
                    {
                        "name": "DrawIcon",
                        "address": "0x4776d0"
                    },
                    {
                        "name": "DrawFrameControl",
                        "address": "0x4776d4"
                    },
                    {
                        "name": "DrawFocusRect",
                        "address": "0x4776d8"
                    },
                    {
                        "name": "DrawEdge",
                        "address": "0x4776dc"
                    },
                    {
                        "name": "DispatchMessageA",
                        "address": "0x4776e0"
                    },
                    {
                        "name": "DestroyWindow",
                        "address": "0x4776e4"
                    },
                    {
                        "name": "DestroyMenu",
                        "address": "0x4776e8"
                    },
                    {
                        "name": "DestroyIcon",
                        "address": "0x4776ec"
                    },
                    {
                        "name": "DestroyCursor",
                        "address": "0x4776f0"
                    },
                    {
                        "name": "DeleteMenu",
                        "address": "0x4776f4"
                    },
                    {
                        "name": "DefWindowProcA",
                        "address": "0x4776f8"
                    },
                    {
                        "name": "DefMDIChildProcA",
                        "address": "0x4776fc"
                    },
                    {
                        "name": "DefFrameProcA",
                        "address": "0x477700"
                    },
                    {
                        "name": "CreatePopupMenu",
                        "address": "0x477704"
                    },
                    {
                        "name": "CreateMenu",
                        "address": "0x477708"
                    },
                    {
                        "name": "CreateIcon",
                        "address": "0x47770c"
                    },
                    {
                        "name": "ClientToScreen",
                        "address": "0x477710"
                    },
                    {
                        "name": "CheckMenuItem",
                        "address": "0x477714"
                    },
                    {
                        "name": "CallWindowProcA",
                        "address": "0x477718"
                    },
                    {
                        "name": "CallNextHookEx",
                        "address": "0x47771c"
                    },
                    {
                        "name": "BeginPaint",
                        "address": "0x477720"
                    },
                    {
                        "name": "CharNextA",
                        "address": "0x477724"
                    },
                    {
                        "name": "CharLowerBuffA",
                        "address": "0x477728"
                    },
                    {
                        "name": "CharLowerA",
                        "address": "0x47772c"
                    },
                    {
                        "name": "CharToOemA",
                        "address": "0x477730"
                    },
                    {
                        "name": "AdjustWindowRectEx",
                        "address": "0x477734"
                    },
                    {
                        "name": "ActivateKeyboardLayout",
                        "address": "0x477738"
                    }
                ],
                "dll": "user32.dll"
            },
            {
                "imports": [
                    {
                        "name": "Sleep",
                        "address": "0x477740"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SafeArrayPtrOfIndex",
                        "address": "0x477748"
                    },
                    {
                        "name": "SafeArrayGetUBound",
                        "address": "0x47774c"
                    },
                    {
                        "name": "SafeArrayGetLBound",
                        "address": "0x477750"
                    },
                    {
                        "name": "SafeArrayCreate",
                        "address": "0x477754"
                    },
                    {
                        "name": "VariantChangeType",
                        "address": "0x477758"
                    },
                    {
                        "name": "VariantCopy",
                        "address": "0x47775c"
                    },
                    {
                        "name": "VariantClear",
                        "address": "0x477760"
                    },
                    {
                        "name": "VariantInit",
                        "address": "0x477764"
                    }
                ],
                "dll": "oleaut32.dll"
            },
            {
                "imports": [
                    {
                        "name": "ImageList_SetIconSize",
                        "address": "0x47776c"
                    },
                    {
                        "name": "ImageList_GetIconSize",
                        "address": "0x477770"
                    },
                    {
                        "name": "ImageList_Write",
                        "address": "0x477774"
                    },
                    {
                        "name": "ImageList_Read",
                        "address": "0x477778"
                    },
                    {
                        "name": "ImageList_GetDragImage",
                        "address": "0x47777c"
                    },
                    {
                        "name": "ImageList_DragShowNolock",
                        "address": "0x477780"
                    },
                    {
                        "name": "ImageList_SetDragCursorImage",
                        "address": "0x477784"
                    },
                    {
                        "name": "ImageList_DragMove",
                        "address": "0x477788"
                    },
                    {
                        "name": "ImageList_DragLeave",
                        "address": "0x47778c"
                    },
                    {
                        "name": "ImageList_DragEnter",
                        "address": "0x477790"
                    },
                    {
                        "name": "ImageList_EndDrag",
                        "address": "0x477794"
                    },
                    {
                        "name": "ImageList_BeginDrag",
                        "address": "0x477798"
                    },
                    {
                        "name": "ImageList_Remove",
                        "address": "0x47779c"
                    },
                    {
                        "name": "ImageList_DrawEx",
                        "address": "0x4777a0"
                    },
                    {
                        "name": "ImageList_Draw",
                        "address": "0x4777a4"
                    },
                    {
                        "name": "ImageList_GetBkColor",
                        "address": "0x4777a8"
                    },
                    {
                        "name": "ImageList_SetBkColor",
                        "address": "0x4777ac"
                    },
                    {
                        "name": "ImageList_ReplaceIcon",
                        "address": "0x4777b0"
                    },
                    {
                        "name": "ImageList_Add",
                        "address": "0x4777b4"
                    },
                    {
                        "name": "ImageList_SetImageCount",
                        "address": "0x4777b8"
                    },
                    {
                        "name": "ImageList_GetImageCount",
                        "address": "0x4777bc"
                    },
                    {
                        "name": "ImageList_Destroy",
                        "address": "0x4777c0"
                    },
                    {
                        "name": "ImageList_Create",
                        "address": "0x4777c4"
                    },
                    {
                        "name": "InitCommonControls",
                        "address": "0x4777c8"
                    }
                ],
                "dll": "comctl32.dll"
            },
            {
                "imports": [
                    {
                        "name": "OpenPrinterA",
                        "address": "0x4777d0"
                    },
                    {
                        "name": "EnumPrintersA",
                        "address": "0x4777d4"
                    },
                    {
                        "name": "DocumentPropertiesA",
                        "address": "0x4777d8"
                    },
                    {
                        "name": "ClosePrinter",
                        "address": "0x4777dc"
                    }
                ],
                "dll": "winspool.drv"
            },
            {
                "imports": [
                    {
                        "name": "ShellExecuteA",
                        "address": "0x4777e4"
                    }
                ],
                "dll": "shell32.dll"
            },
            {
                "imports": [
                    {
                        "name": "WSACleanup",
                        "address": "0x4777ec"
                    },
                    {
                        "name": "WSAStartup",
                        "address": "0x4777f0"
                    }
                ],
                "dll": "wsock32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SHGetFolderPathA",
                        "address": "0x4777f8"
                    }
                ],
                "dll": "shfolder.dll"
            }
        ],
        "digital_signers": null,
        "exported_dll_name": null,
        "actual_checksum": "0x00139096",
        "overlay": null,
        "imagebase": "0x00400000",
        "reported_checksum": "0x00000000",
        "icon_hash": null,
        "entrypoint": "0x00473ab4",
        "timestamp": "1992-06-19 22:22:17",
        "osversion": "4.0",
        "sections": [
            {
                "name": "CODE",
                "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00001000",
                "size_of_data": "0x00072c00",
                "entropy": "6.54",
                "raw_address": "0x00000400",
                "virtual_size": "0x00072b1c",
                "characteristics_raw": "0x60000020"
            },
            {
                "name": "DATA",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00074000",
                "size_of_data": "0x00001e00",
                "entropy": "4.60",
                "raw_address": "0x00073000",
                "virtual_size": "0x00001c98",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": "BSS",
                "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00076000",
                "size_of_data": "0x00000000",
                "entropy": "0.00",
                "raw_address": "0x00074e00",
                "virtual_size": "0x00000db1",
                "characteristics_raw": "0xc0000000"
            },
            {
                "name": ".idata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00077000",
                "size_of_data": "0x00002400",
                "entropy": "5.00",
                "raw_address": "0x00074e00",
                "virtual_size": "0x000023d0",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": ".tls",
                "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x0007a000",
                "size_of_data": "0x00000000",
                "entropy": "0.00",
                "raw_address": "0x00077200",
                "virtual_size": "0x00000010",
                "characteristics_raw": "0xc0000000"
            },
            {
                "name": ".rdata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0007b000",
                "size_of_data": "0x00000200",
                "entropy": "0.20",
                "raw_address": "0x00077200",
                "virtual_size": "0x00000018",
                "characteristics_raw": "0x50000040"
            },
            {
                "name": ".reloc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0007c000",
                "size_of_data": "0x00007600",
                "entropy": "6.63",
                "raw_address": "0x00077400",
                "virtual_size": "0x00007408",
                "characteristics_raw": "0x50000040"
            },
            {
                "name": ".rsrc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00084000",
                "size_of_data": "0x000ac000",
                "entropy": "7.01",
                "raw_address": "0x0007ea00",
                "virtual_size": "0x000abf84",
                "characteristics_raw": "0x50000040"
            }
        ],
        "resources": [],
        "dirents": [
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00077000",
                "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
                "size": "0x000023d0"
            },
            {
                "virtual_address": "0x00084000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
                "size": "0x000abf84"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x0007c000",
                "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
                "size": "0x00007408"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x0007b000",
                "name": "IMAGE_DIRECTORY_ENTRY_TLS",
                "size": "0x00000018"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_IAT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
                "size": "0x00000000"
            }
        ],
        "exports": [],
        "guest_signers": {},
        "imphash": "a1ed11b5632f36a184355bd0ef71cfff",
        "icon_fuzzy": null,
        "icon": null,
        "pdbpath": null,
        "imported_dll_count": 17,
        "versioninfo": []
    }
}

[*] Resolved APIs: [
    "kernel32.dll.GetDiskFreeSpaceExA",
    "oleaut32.dll.VariantChangeTypeEx",
    "oleaut32.dll.VarNeg",
    "oleaut32.dll.VarNot",
    "oleaut32.dll.VarAdd",
    "oleaut32.dll.VarSub",
    "oleaut32.dll.VarMul",
    "oleaut32.dll.VarDiv",
    "oleaut32.dll.VarIdiv",
    "oleaut32.dll.VarMod",
    "oleaut32.dll.VarAnd",
    "oleaut32.dll.VarOr",
    "oleaut32.dll.VarXor",
    "oleaut32.dll.VarCmp",
    "oleaut32.dll.VarI4FromStr",
    "oleaut32.dll.VarR4FromStr",
    "oleaut32.dll.VarR8FromStr",
    "oleaut32.dll.VarDateFromStr",
    "oleaut32.dll.VarCyFromStr",
    "oleaut32.dll.VarBoolFromStr",
    "oleaut32.dll.VarBstrFromCy",
    "oleaut32.dll.VarBstrFromDate",
    "oleaut32.dll.VarBstrFromBool",
    "user32.dll.GetMonitorInfoA",
    "user32.dll.GetSystemMetrics",
    "user32.dll.EnumDisplayMonitors",
    "dwmapi.dll.DwmIsCompositionEnabled",
    "gdi32.dll.GetLayout",
    "gdi32.dll.GdiRealizationInfo",
    "gdi32.dll.FontIsLinked",
    "advapi32.dll.RegOpenKeyExW",
    "advapi32.dll.RegQueryInfoKeyW",
    "gdi32.dll.GetTextFaceAliasW",
    "advapi32.dll.RegEnumValueW",
    "advapi32.dll.RegCloseKey",
    "advapi32.dll.RegQueryValueExW",
    "gdi32.dll.GetFontAssocStatus",
    "advapi32.dll.RegQueryValueExA",
    "advapi32.dll.RegEnumKeyExW",
    "gdi32.dll.GdiIsMetaPrintDC",
    "user32.dll.AnimateWindow",
    "comctl32.dll.InitializeFlatSB",
    "comctl32.dll.UninitializeFlatSB",
    "comctl32.dll.FlatSB_GetScrollProp",
    "comctl32.dll.FlatSB_SetScrollProp",
    "comctl32.dll.FlatSB_EnableScrollBar",
    "comctl32.dll.FlatSB_ShowScrollBar",
    "comctl32.dll.FlatSB_GetScrollRange",
    "comctl32.dll.FlatSB_GetScrollInfo",
    "comctl32.dll.FlatSB_GetScrollPos",
    "comctl32.dll.FlatSB_SetScrollPos",
    "comctl32.dll.FlatSB_SetScrollInfo",
    "comctl32.dll.FlatSB_SetScrollRange",
    "user32.dll.SetLayeredWindowAttributes",
    "comctl32.dll.HIMAGELIST_QueryInterface",
    "comctl32.dll.DrawShadowText",
    "comctl32.dll.DrawSizeBox",
    "comctl32.dll.DrawScrollBar",
    "comctl32.dll.SizeBoxHwnd",
    "comctl32.dll.ScrollBar_MouseMove",
    "comctl32.dll.ScrollBar_Menu",
    "comctl32.dll.HandleScrollCmd",
    "comctl32.dll.DetachScrollBars",
    "comctl32.dll.AttachScrollBars",
    "comctl32.dll.CCSetScrollInfo",
    "comctl32.dll.CCGetScrollInfo",
    "comctl32.dll.CCEnableScrollBar",
    "comctl32.dll.QuerySystemGestureStatus",
    "uxtheme.dll.#49",
    "uxtheme.dll.CloseThemeData",
    "lpk.dll.LpkEditControl",
    "kernel32.dll.SortGetHandle",
    "kernel32.dll.SortCloseHandle",
    "kernel32.dll.LoadLibraryA",
    "kernel32.dll.GetModuleHandleA",
    "kernel32.dll.GetProcAddress",
    "kernel32.dll.ExitThread",
    "kernel32.dll.DeleteCriticalSection",
    "kernel32.dll.LeaveCriticalSection",
    "kernel32.dll.EnterCriticalSection",
    "kernel32.dll.InitializeCriticalSection",
    "kernel32.dll.VirtualFree",
    "kernel32.dll.VirtualAlloc",
    "kernel32.dll.LocalFree",
    "kernel32.dll.LocalAlloc",
    "kernel32.dll.GetVersion",
    "kernel32.dll.GetCurrentThreadId",
    "kernel32.dll.InterlockedDecrement",
    "kernel32.dll.InterlockedIncrement",
    "kernel32.dll.VirtualQuery",
    "kernel32.dll.WideCharToMultiByte",
    "kernel32.dll.MultiByteToWideChar",
    "kernel32.dll.lstrlenA",
    "kernel32.dll.lstrcpynA",
    "kernel32.dll.LoadLibraryExA",
    "kernel32.dll.GetThreadLocale",
    "kernel32.dll.GetStartupInfoA",
    "kernel32.dll.GetModuleFileNameA",
    "kernel32.dll.GetLocaleInfoA",
    "kernel32.dll.GetLastError",
    "kernel32.dll.GetCommandLineA",
    "kernel32.dll.FreeLibrary",
    "kernel32.dll.FindFirstFileA",
    "kernel32.dll.FindClose",
    "kernel32.dll.ExitProcess",
    "kernel32.dll.WriteFile",
    "kernel32.dll.UnhandledExceptionFilter",
    "kernel32.dll.SetFilePointer",
    "kernel32.dll.SetEndOfFile",
    "kernel32.dll.RtlUnwind",
    "kernel32.dll.ReadFile",
    "kernel32.dll.RaiseException",
    "kernel32.dll.GetStdHandle",
    "kernel32.dll.GetFileSize",
    "kernel32.dll.GetFileType",
    "kernel32.dll.CreateFileA",
    "kernel32.dll.CloseHandle",
    "user32.dll.GetKeyboardType",
    "user32.dll.LoadStringA",
    "user32.dll.MessageBoxA",
    "user32.dll.CharNextA",
    "advapi32.dll.RegOpenKeyExA",
    "oleaut32.dll.SysFreeString",
    "oleaut32.dll.SysReAllocStringLen",
    "oleaut32.dll.SysAllocStringLen",
    "kernel32.dll.TlsSetValue",
    "kernel32.dll.TlsGetValue",
    "kernel32.dll.TlsFree",
    "kernel32.dll.TlsAlloc",
    "advapi32.dll.RegSetValueExA",
    "advapi32.dll.RegFlushKey",
    "advapi32.dll.RegCreateKeyExA",
    "kernel32.dll.WaitForSingleObject",
    "kernel32.dll.SizeofResource",
    "kernel32.dll.SetEvent",
    "kernel32.dll.ResetEvent",
    "kernel32.dll.LockResource",
    "kernel32.dll.LoadResource",
    "kernel32.dll.GetVersionExA",
    "kernel32.dll.GetStringTypeExA",
    "kernel32.dll.GetModuleFileNameW",
    "kernel32.dll.GetLocalTime",
    "kernel32.dll.GetFullPathNameA",
    "kernel32.dll.GetDiskFreeSpaceA",
    "kernel32.dll.GetDateFormatA",
    "kernel32.dll.GetCPInfo",
    "kernel32.dll.GetACP",
    "kernel32.dll.FreeResource",
    "kernel32.dll.FormatMessageA",
    "kernel32.dll.FindResourceA",
    "kernel32.dll.FileTimeToLocalFileTime",
    "kernel32.dll.FileTimeToDosDateTime",
    "kernel32.dll.EnumCalendarInfoA",
    "kernel32.dll.CreateEventA",
    "kernel32.dll.CreateDirectoryA",
    "kernel32.dll.CompareStringA",
    "gdi32.dll.GetGraphicsMode",
    "gdi32.dll.GetDCPenColor",
    "gdi32.dll.GetBkMode",
    "user32.dll.GetDC",
    "user32.dll.CallWindowProcW",
    "user32.dll.CharToOemA",
    "kernel32.dll.Sleep",
    "oleaut32.dll.SafeArrayPtrOfIndex",
    "oleaut32.dll.SafeArrayGetUBound",
    "oleaut32.dll.SafeArrayGetLBound",
    "oleaut32.dll.SafeArrayCreate",
    "oleaut32.dll.VariantChangeType",
    "oleaut32.dll.VariantCopy",
    "oleaut32.dll.VariantClear",
    "oleaut32.dll.VariantInit",
    "shfolder.dll.SHGetFolderPathA",
    "crypt32.dll.CryptUnprotectData",
    "crtdll.dll.wcscmp",
    "gdiplus.dll.GdiplusStartup",
    "gdiplus.dll.GdiplusShutdown",
    "gdiplus.dll.GdipCreateBitmapFromHBITMAP",
    "gdiplus.dll.GdipGetImageEncodersSize",
    "gdiplus.dll.GdipGetImageEncoders",
    "gdiplus.dll.GdipDisposeImage",
    "gdiplus.dll.GdipSaveImageToStream",
    "ole32.dll.CreateStreamOnHGlobal",
    "ole32.dll.GetHGlobalFromStream",
    "kernel32.dll.ExpandEnvironmentStringsW",
    "kernel32.dll.GetComputerNameW",
    "kernel32.dll.GlobalMemoryStatus",
    "kernel32.dll.CreateFileW",
    "kernel32.dll.GetFileAttributesW",
    "kernel32.dll.CreateMutexA",
    "kernel32.dll.ReleaseMutex",
    "kernel32.dll.GetCurrentDirectoryW",
    "kernel32.dll.SetEnvironmentVariableW",
    "kernel32.dll.SetCurrentDirectoryW",
    "kernel32.dll.FindFirstFileW",
    "kernel32.dll.FindNextFileW",
    "kernel32.dll.GetTickCount",
    "kernel32.dll.CopyFileW",
    "kernel32.dll.GlobalMemoryStatusEx",
    "kernel32.dll.CreateToolhelp32Snapshot",
    "kernel32.dll.Process32FirstW",
    "kernel32.dll.Process32NextW",
    "kernel32.dll.SetDllDirectoryW",
    "kernel32.dll.GetTimeZoneInformation",
    "kernel32.dll.RemoveDirectoryW",
    "kernel32.dll.DeleteFileW",
    "kernel32.dll.GetLogicalDriveStringsA",
    "kernel32.dll.GetDriveTypeA",
    "kernel32.dll.CreateProcessW",
    "advapi32.dll.GetUserNameW",
    "advapi32.dll.RegCreateKeyExW",
    "advapi32.dll.AllocateAndInitializeSid",
    "advapi32.dll.LookupAccountSidA",
    "advapi32.dll.CreateProcessAsUserW",
    "advapi32.dll.CheckTokenMembership",
    "advapi32.dll.RegOpenKeyW",
    "advapi32.dll.RegEnumKeyW",
    "advapi32.dll.CryptAcquireContextA",
    "advapi32.dll.CryptCreateHash",
    "advapi32.dll.CryptHashData",
    "advapi32.dll.CryptGetHashParam",
    "advapi32.dll.CryptDestroyHash",
    "advapi32.dll.CryptReleaseContext",
    "user32.dll.EnumDisplayDevicesW",
    "user32.dll.wvsprintfA",
    "user32.dll.GetKeyboardLayoutList",
    "shell32.dll.ShellExecuteExW",
    "ntdll.dll.RtlComputeCrc32",
    "sechost.dll.LookupAccountSidLocalA",
    "wininet.dll.InternetOpenA",
    "wininet.dll.InternetConnectA",
    "wininet.dll.HttpOpenRequestA",
    "wininet.dll.HttpAddRequestHeadersA",
    "wininet.dll.HttpSendRequestA",
    "wininet.dll.InternetReadFile",
    "wininet.dll.InternetCloseHandle",
    "wininet.dll.InternetCrackUrlA",
    "wininet.dll.InternetSetOptionA",
    "rasapi32.dll.RasConnectionNotificationW",
    "sechost.dll.NotifyServiceStatusChangeA",
    "cryptbase.dll.SystemFunction036",
    "wsock32.dll.WSAStartup",
    "wsock32.dll.gethostbyname",
    "wsock32.dll.socket",
    "wsock32.dll.send",
    "wsock32.dll.recv",
    "wsock32.dll.htons",
    "wsock32.dll.connect",
    "wsock32.dll.closesocket",
    "rpcrt4.dll.RpcBindingFree"
]

[*] Static Analysis: {
    "pe": {
        "peid_signatures": null,
        "imports": [
            {
                "imports": [
                    {
                        "name": "DeleteCriticalSection",
                        "address": "0x477168"
                    },
                    {
                        "name": "LeaveCriticalSection",
                        "address": "0x47716c"
                    },
                    {
                        "name": "EnterCriticalSection",
                        "address": "0x477170"
                    },
                    {
                        "name": "InitializeCriticalSection",
                        "address": "0x477174"
                    },
                    {
                        "name": "VirtualFree",
                        "address": "0x477178"
                    },
                    {
                        "name": "VirtualAlloc",
                        "address": "0x47717c"
                    },
                    {
                        "name": "LocalFree",
                        "address": "0x477180"
                    },
                    {
                        "name": "LocalAlloc",
                        "address": "0x477184"
                    },
                    {
                        "name": "GetVersion",
                        "address": "0x477188"
                    },
                    {
                        "name": "GetCurrentThreadId",
                        "address": "0x47718c"
                    },
                    {
                        "name": "InterlockedDecrement",
                        "address": "0x477190"
                    },
                    {
                        "name": "InterlockedIncrement",
                        "address": "0x477194"
                    },
                    {
                        "name": "VirtualQuery",
                        "address": "0x477198"
                    },
                    {
                        "name": "WideCharToMultiByte",
                        "address": "0x47719c"
                    },
                    {
                        "name": "MultiByteToWideChar",
                        "address": "0x4771a0"
                    },
                    {
                        "name": "lstrlenA",
                        "address": "0x4771a4"
                    },
                    {
                        "name": "lstrcpynA",
                        "address": "0x4771a8"
                    },
                    {
                        "name": "LoadLibraryExA",
                        "address": "0x4771ac"
                    },
                    {
                        "name": "GetThreadLocale",
                        "address": "0x4771b0"
                    },
                    {
                        "name": "GetStartupInfoA",
                        "address": "0x4771b4"
                    },
                    {
                        "name": "GetProcAddress",
                        "address": "0x4771b8"
                    },
                    {
                        "name": "GetModuleHandleA",
                        "address": "0x4771bc"
                    },
                    {
                        "name": "GetModuleFileNameA",
                        "address": "0x4771c0"
                    },
                    {
                        "name": "GetLocaleInfoA",
                        "address": "0x4771c4"
                    },
                    {
                        "name": "GetLastError",
                        "address": "0x4771c8"
                    },
                    {
                        "name": "GetCommandLineA",
                        "address": "0x4771cc"
                    },
                    {
                        "name": "FreeLibrary",
                        "address": "0x4771d0"
                    },
                    {
                        "name": "FindFirstFileA",
                        "address": "0x4771d4"
                    },
                    {
                        "name": "FindClose",
                        "address": "0x4771d8"
                    },
                    {
                        "name": "ExitProcess",
                        "address": "0x4771dc"
                    },
                    {
                        "name": "WriteFile",
                        "address": "0x4771e0"
                    },
                    {
                        "name": "UnhandledExceptionFilter",
                        "address": "0x4771e4"
                    },
                    {
                        "name": "SetFilePointer",
                        "address": "0x4771e8"
                    },
                    {
                        "name": "SetEndOfFile",
                        "address": "0x4771ec"
                    },
                    {
                        "name": "RtlUnwind",
                        "address": "0x4771f0"
                    },
                    {
                        "name": "ReadFile",
                        "address": "0x4771f4"
                    },
                    {
                        "name": "RaiseException",
                        "address": "0x4771f8"
                    },
                    {
                        "name": "GetStdHandle",
                        "address": "0x4771fc"
                    },
                    {
                        "name": "GetFileSize",
                        "address": "0x477200"
                    },
                    {
                        "name": "GetFileType",
                        "address": "0x477204"
                    },
                    {
                        "name": "CreateFileA",
                        "address": "0x477208"
                    },
                    {
                        "name": "CloseHandle",
                        "address": "0x47720c"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "GetKeyboardType",
                        "address": "0x477214"
                    },
                    {
                        "name": "LoadStringA",
                        "address": "0x477218"
                    },
                    {
                        "name": "MessageBoxA",
                        "address": "0x47721c"
                    },
                    {
                        "name": "CharNextA",
                        "address": "0x477220"
                    }
                ],
                "dll": "user32.dll"
            },
            {
                "imports": [
                    {
                        "name": "RegQueryValueExA",
                        "address": "0x477228"
                    },
                    {
                        "name": "RegOpenKeyExA",
                        "address": "0x47722c"
                    },
                    {
                        "name": "RegCloseKey",
                        "address": "0x477230"
                    }
                ],
                "dll": "advapi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SysFreeString",
                        "address": "0x477238"
                    },
                    {
                        "name": "SysReAllocStringLen",
                        "address": "0x47723c"
                    },
                    {
                        "name": "SysAllocStringLen",
                        "address": "0x477240"
                    }
                ],
                "dll": "oleaut32.dll"
            },
            {
                "imports": [
                    {
                        "name": "TlsSetValue",
                        "address": "0x477248"
                    },
                    {
                        "name": "TlsGetValue",
                        "address": "0x47724c"
                    },
                    {
                        "name": "LocalAlloc",
                        "address": "0x477250"
                    },
                    {
                        "name": "GetModuleHandleA",
                        "address": "0x477254"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "RegQueryValueExA",
                        "address": "0x47725c"
                    },
                    {
                        "name": "RegOpenKeyExA",
                        "address": "0x477260"
                    },
                    {
                        "name": "RegCloseKey",
                        "address": "0x477264"
                    }
                ],
                "dll": "advapi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "lstrcpyA",
                        "address": "0x47726c"
                    },
                    {
                        "name": "WriteFile",
                        "address": "0x477270"
                    },
                    {
                        "name": "WaitForSingleObject",
                        "address": "0x477274"
                    },
                    {
                        "name": "VirtualQuery",
                        "address": "0x477278"
                    },
                    {
                        "name": "VirtualAlloc",
                        "address": "0x47727c"
                    },
                    {
                        "name": "Sleep",
                        "address": "0x477280"
                    },
                    {
                        "name": "SizeofResource",
                        "address": "0x477284"
                    },
                    {
                        "name": "SetThreadLocale",
                        "address": "0x477288"
                    },
                    {
                        "name": "SetFilePointer",
                        "address": "0x47728c"
                    },
                    {
                        "name": "SetEvent",
                        "address": "0x477290"
                    },
                    {
                        "name": "SetErrorMode",
                        "address": "0x477294"
                    },
                    {
                        "name": "SetEndOfFile",
                        "address": "0x477298"
                    },
                    {
                        "name": "ResetEvent",
                        "address": "0x47729c"
                    },
                    {
                        "name": "ReadFile",
                        "address": "0x4772a0"
                    },
                    {
                        "name": "MulDiv",
                        "address": "0x4772a4"
                    },
                    {
                        "name": "LockResource",
                        "address": "0x4772a8"
                    },
                    {
                        "name": "LoadResource",
                        "address": "0x4772ac"
                    },
                    {
                        "name": "LoadLibraryA",
                        "address": "0x4772b0"
                    },
                    {
                        "name": "LeaveCriticalSection",
                        "address": "0x4772b4"
                    },
                    {
                        "name": "InitializeCriticalSection",
                        "address": "0x4772b8"
                    },
                    {
                        "name": "GlobalUnlock",
                        "address": "0x4772bc"
                    },
                    {
                        "name": "GlobalReAlloc",
                        "address": "0x4772c0"
                    },
                    {
                        "name": "GlobalHandle",
                        "address": "0x4772c4"
                    },
                    {
                        "name": "GlobalLock",
                        "address": "0x4772c8"
                    },
                    {
                        "name": "GlobalFree",
                        "address": "0x4772cc"
                    },
                    {
                        "name": "GlobalFindAtomA",
                        "address": "0x4772d0"
                    },
                    {
                        "name": "GlobalDeleteAtom",
                        "address": "0x4772d4"
                    },
                    {
                        "name": "GlobalAlloc",
                        "address": "0x4772d8"
                    },
                    {
                        "name": "GlobalAddAtomA",
                        "address": "0x4772dc"
                    },
                    {
                        "name": "GetVersionExA",
                        "address": "0x4772e0"
                    },
                    {
                        "name": "GetVersion",
                        "address": "0x4772e4"
                    },
                    {
                        "name": "GetTickCount",
                        "address": "0x4772e8"
                    },
                    {
                        "name": "GetThreadLocale",
                        "address": "0x4772ec"
                    },
                    {
                        "name": "GetSystemInfo",
                        "address": "0x4772f0"
                    },
                    {
                        "name": "GetStringTypeExA",
                        "address": "0x4772f4"
                    },
                    {
                        "name": "GetStdHandle",
                        "address": "0x4772f8"
                    },
                    {
                        "name": "GetProfileStringA",
                        "address": "0x4772fc"
                    },
                    {
                        "name": "GetProcAddress",
                        "address": "0x477300"
                    },
                    {
                        "name": "GetModuleHandleA",
                        "address": "0x477304"
                    },
                    {
                        "name": "GetModuleFileNameA",
                        "address": "0x477308"
                    },
                    {
                        "name": "GetLocaleInfoA",
                        "address": "0x47730c"
                    },
                    {
                        "name": "GetLocalTime",
                        "address": "0x477310"
                    },
                    {
                        "name": "GetLastError",
                        "address": "0x477314"
                    },
                    {
                        "name": "GetFullPathNameA",
                        "address": "0x477318"
                    },
                    {
                        "name": "GetDiskFreeSpaceA",
                        "address": "0x47731c"
                    },
                    {
                        "name": "GetDateFormatA",
                        "address": "0x477320"
                    },
                    {
                        "name": "GetCurrentThreadId",
                        "address": "0x477324"
                    },
                    {
                        "name": "GetCurrentProcessId",
                        "address": "0x477328"
                    },
                    {
                        "name": "GetCPInfo",
                        "address": "0x47732c"
                    },
                    {
                        "name": "GetACP",
                        "address": "0x477330"
                    },
                    {
                        "name": "FreeResource",
                        "address": "0x477334"
                    },
                    {
                        "name": "InterlockedExchange",
                        "address": "0x477338"
                    },
                    {
                        "name": "FreeLibrary",
                        "address": "0x47733c"
                    },
                    {
                        "name": "FormatMessageA",
                        "address": "0x477340"
                    },
                    {
                        "name": "FindResourceA",
                        "address": "0x477344"
                    },
                    {
                        "name": "ExitProcess",
                        "address": "0x477348"
                    },
                    {
                        "name": "EnumCalendarInfoA",
                        "address": "0x47734c"
                    },
                    {
                        "name": "EnterCriticalSection",
                        "address": "0x477350"
                    },
                    {
                        "name": "DeleteCriticalSection",
                        "address": "0x477354"
                    },
                    {
                        "name": "CreateThread",
                        "address": "0x477358"
                    },
                    {
                        "name": "CreateProcessA",
                        "address": "0x47735c"
                    },
                    {
                        "name": "CreateFileA",
                        "address": "0x477360"
                    },
                    {
                        "name": "CreateEventA",
                        "address": "0x477364"
                    },
                    {
                        "name": "CreateDirectoryA",
                        "address": "0x477368"
                    },
                    {
                        "name": "CompareStringA",
                        "address": "0x47736c"
                    },
                    {
                        "name": "CloseHandle",
                        "address": "0x477370"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "VerQueryValueA",
                        "address": "0x477378"
                    },
                    {
                        "name": "GetFileVersionInfoSizeA",
                        "address": "0x47737c"
                    },
                    {
                        "name": "GetFileVersionInfoA",
                        "address": "0x477380"
                    }
                ],
                "dll": "version.dll"
            },
            {
                "imports": [
                    {
                        "name": "UnrealizeObject",
                        "address": "0x477388"
                    },
                    {
                        "name": "StretchBlt",
                        "address": "0x47738c"
                    },
                    {
                        "name": "StartPage",
                        "address": "0x477390"
                    },
                    {
                        "name": "StartDocA",
                        "address": "0x477394"
                    },
                    {
                        "name": "SetWindowOrgEx",
                        "address": "0x477398"
                    },
                    {
                        "name": "SetWinMetaFileBits",
                        "address": "0x47739c"
                    },
                    {
                        "name": "SetViewportOrgEx",
                        "address": "0x4773a0"
                    },
                    {
                        "name": "SetTextColor",
                        "address": "0x4773a4"
                    },
                    {
                        "name": "SetStretchBltMode",
                        "address": "0x4773a8"
                    },
                    {
                        "name": "SetROP2",
                        "address": "0x4773ac"
                    },
                    {
                        "name": "SetPixel",
                        "address": "0x4773b0"
                    },
                    {
                        "name": "SetMapMode",
                        "address": "0x4773b4"
                    },
                    {
                        "name": "SetEnhMetaFileBits",
                        "address": "0x4773b8"
                    },
                    {
                        "name": "SetDIBColorTable",
                        "address": "0x4773bc"
                    },
                    {
                        "name": "SetBrushOrgEx",
                        "address": "0x4773c0"
                    },
                    {
                        "name": "SetBkMode",
                        "address": "0x4773c4"
                    },
                    {
                        "name": "SetBkColor",
                        "address": "0x4773c8"
                    },
                    {
                        "name": "SetAbortProc",
                        "address": "0x4773cc"
                    },
                    {
                        "name": "SelectPalette",
                        "address": "0x4773d0"
                    },
                    {
                        "name": "SelectObject",
                        "address": "0x4773d4"
                    },
                    {
                        "name": "SaveDC",
                        "address": "0x4773d8"
                    },
                    {
                        "name": "RestoreDC",
                        "address": "0x4773dc"
                    },
                    {
                        "name": "Rectangle",
                        "address": "0x4773e0"
                    },
                    {
                        "name": "RectVisible",
                        "address": "0x4773e4"
                    },
                    {
                        "name": "RealizePalette",
                        "address": "0x4773e8"
                    },
                    {
                        "name": "Polyline",
                        "address": "0x4773ec"
                    },
                    {
                        "name": "PlayEnhMetaFile",
                        "address": "0x4773f0"
                    },
                    {
                        "name": "PatBlt",
                        "address": "0x4773f4"
                    },
                    {
                        "name": "MoveToEx",
                        "address": "0x4773f8"
                    },
                    {
                        "name": "MaskBlt",
                        "address": "0x4773fc"
                    },
                    {
                        "name": "LineTo",
                        "address": "0x477400"
                    },
                    {
                        "name": "IntersectClipRect",
                        "address": "0x477404"
                    },
                    {
                        "name": "GetWindowOrgEx",
                        "address": "0x477408"
                    },
                    {
                        "name": "GetWinMetaFileBits",
                        "address": "0x47740c"
                    },
                    {
                        "name": "GetTextMetricsA",
                        "address": "0x477410"
                    },
                    {
                        "name": "GetTextExtentPoint32A",
                        "address": "0x477414"
                    },
                    {
                        "name": "GetSystemPaletteEntries",
                        "address": "0x477418"
                    },
                    {
                        "name": "GetStockObject",
                        "address": "0x47741c"
                    },
                    {
                        "name": "GetPixel",
                        "address": "0x477420"
                    },
                    {
                        "name": "GetPaletteEntries",
                        "address": "0x477424"
                    },
                    {
                        "name": "GetObjectA",
                        "address": "0x477428"
                    },
                    {
                        "name": "GetMapMode",
                        "address": "0x47742c"
                    },
                    {
                        "name": "GetEnhMetaFilePaletteEntries",
                        "address": "0x477430"
                    },
                    {
                        "name": "GetEnhMetaFileHeader",
                        "address": "0x477434"
                    },
                    {
                        "name": "GetEnhMetaFileBits",
                        "address": "0x477438"
                    },
                    {
                        "name": "GetDeviceCaps",
                        "address": "0x47743c"
                    },
                    {
                        "name": "GetDIBits",
                        "address": "0x477440"
                    },
                    {
                        "name": "GetDIBColorTable",
                        "address": "0x477444"
                    },
                    {
                        "name": "GetDCOrgEx",
                        "address": "0x477448"
                    },
                    {
                        "name": "GetDCBrushColor",
                        "address": "0x47744c"
                    },
                    {
                        "name": "GetCurrentPositionEx",
                        "address": "0x477450"
                    },
                    {
                        "name": "GetClipBox",
                        "address": "0x477454"
                    },
                    {
                        "name": "GetBrushOrgEx",
                        "address": "0x477458"
                    },
                    {
                        "name": "GetBkColor",
                        "address": "0x47745c"
                    },
                    {
                        "name": "GetBitmapBits",
                        "address": "0x477460"
                    },
                    {
                        "name": "GdiFlush",
                        "address": "0x477464"
                    },
                    {
                        "name": "ExcludeClipRect",
                        "address": "0x477468"
                    },
                    {
                        "name": "EndPage",
                        "address": "0x47746c"
                    },
                    {
                        "name": "EndDoc",
                        "address": "0x477470"
                    },
                    {
                        "name": "DeleteObject",
                        "address": "0x477474"
                    },
                    {
                        "name": "DeleteEnhMetaFile",
                        "address": "0x477478"
                    },
                    {
                        "name": "DeleteDC",
                        "address": "0x47747c"
                    },
                    {
                        "name": "CreateSolidBrush",
                        "address": "0x477480"
                    },
                    {
                        "name": "CreatePenIndirect",
                        "address": "0x477484"
                    },
                    {
                        "name": "CreatePalette",
                        "address": "0x477488"
                    },
                    {
                        "name": "CreateICA",
                        "address": "0x47748c"
                    },
                    {
                        "name": "CreateHalftonePalette",
                        "address": "0x477490"
                    },
                    {
                        "name": "CreateFontIndirectA",
                        "address": "0x477494"
                    },
                    {
                        "name": "CreateDIBitmap",
                        "address": "0x477498"
                    },
                    {
                        "name": "CreateDIBSection",
                        "address": "0x47749c"
                    },
                    {
                        "name": "CreateDCA",
                        "address": "0x4774a0"
                    },
                    {
                        "name": "CreateCompatibleDC",
                        "address": "0x4774a4"
                    },
                    {
                        "name": "CreateCompatibleBitmap",
                        "address": "0x4774a8"
                    },
                    {
                        "name": "CreateBrushIndirect",
                        "address": "0x4774ac"
                    },
                    {
                        "name": "CreateBitmap",
                        "address": "0x4774b0"
                    },
                    {
                        "name": "CopyEnhMetaFileA",
                        "address": "0x4774b4"
                    },
                    {
                        "name": "BitBlt",
                        "address": "0x4774b8"
                    }
                ],
                "dll": "gdi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "CreateWindowExA",
                        "address": "0x4774c0"
                    },
                    {
                        "name": "WindowFromPoint",
                        "address": "0x4774c4"
                    },
                    {
                        "name": "WinHelpA",
                        "address": "0x4774c8"
                    },
                    {
                        "name": "WaitMessage",
                        "address": "0x4774cc"
                    },
                    {
                        "name": "UpdateWindow",
                        "address": "0x4774d0"
                    },
                    {
                        "name": "UnregisterClassA",
                        "address": "0x4774d4"
                    },
                    {
                        "name": "UnhookWindowsHookEx",
                        "address": "0x4774d8"
                    },
                    {
                        "name": "TranslateMessage",
                        "address": "0x4774dc"
                    },
                    {
                        "name": "TranslateMDISysAccel",
                        "address": "0x4774e0"
                    },
                    {
                        "name": "TrackPopupMenu",
                        "address": "0x4774e4"
                    },
                    {
                        "name": "SystemParametersInfoA",
                        "address": "0x4774e8"
                    },
                    {
                        "name": "ShowWindow",
                        "address": "0x4774ec"
                    },
                    {
                        "name": "ShowScrollBar",
                        "address": "0x4774f0"
                    },
                    {
                        "name": "ShowOwnedPopups",
                        "address": "0x4774f4"
                    },
                    {
                        "name": "ShowCursor",
                        "address": "0x4774f8"
                    },
                    {
                        "name": "SetWindowsHookExA",
                        "address": "0x4774fc"
                    },
                    {
                        "name": "SetWindowTextA",
                        "address": "0x477500"
                    },
                    {
                        "name": "SetWindowPos",
                        "address": "0x477504"
                    },
                    {
                        "name": "SetWindowPlacement",
                        "address": "0x477508"
                    },
                    {
                        "name": "SetWindowLongA",
                        "address": "0x47750c"
                    },
                    {
                        "name": "SetTimer",
                        "address": "0x477510"
                    },
                    {
                        "name": "SetScrollRange",
                        "address": "0x477514"
                    },
                    {
                        "name": "SetScrollPos",
                        "address": "0x477518"
                    },
                    {
                        "name": "SetScrollInfo",
                        "address": "0x47751c"
                    },
                    {
                        "name": "SetRect",
                        "address": "0x477520"
                    },
                    {
                        "name": "SetPropA",
                        "address": "0x477524"
                    },
                    {
                        "name": "SetParent",
                        "address": "0x477528"
                    },
                    {
                        "name": "SetMenuItemInfoA",
                        "address": "0x47752c"
                    },
                    {
                        "name": "SetMenu",
                        "address": "0x477530"
                    },
                    {
                        "name": "SetForegroundWindow",
                        "address": "0x477534"
                    },
                    {
                        "name": "SetFocus",
                        "address": "0x477538"
                    },
                    {
                        "name": "SetCursor",
                        "address": "0x47753c"
                    },
                    {
                        "name": "SetClassLongA",
                        "address": "0x477540"
                    },
                    {
                        "name": "SetCapture",
                        "address": "0x477544"
                    },
                    {
                        "name": "SetActiveWindow",
                        "address": "0x477548"
                    },
                    {
                        "name": "SendMessageA",
                        "address": "0x47754c"
                    },
                    {
                        "name": "ScrollWindow",
                        "address": "0x477550"
                    },
                    {
                        "name": "ScreenToClient",
                        "address": "0x477554"
                    },
                    {
                        "name": "RemovePropA",
                        "address": "0x477558"
                    },
                    {
                        "name": "RemoveMenu",
                        "address": "0x47755c"
                    },
                    {
                        "name": "ReleaseDC",
                        "address": "0x477560"
                    },
                    {
                        "name": "ReleaseCapture",
                        "address": "0x477564"
                    },
                    {
                        "name": "RegisterWindowMessageA",
                        "address": "0x477568"
                    },
                    {
                        "name": "RegisterClipboardFormatA",
                        "address": "0x47756c"
                    },
                    {
                        "name": "RegisterClassA",
                        "address": "0x477570"
                    },
                    {
                        "name": "RedrawWindow",
                        "address": "0x477574"
                    },
                    {
                        "name": "PtInRect",
                        "address": "0x477578"
                    },
                    {
                        "name": "PostQuitMessage",
                        "address": "0x47757c"
                    },
                    {
                        "name": "PostMessageA",
                        "address": "0x477580"
                    },
                    {
                        "name": "PeekMessageA",
                        "address": "0x477584"
                    },
                    {
                        "name": "OffsetRect",
                        "address": "0x477588"
                    },
                    {
                        "name": "OemToCharA",
                        "address": "0x47758c"
                    },
                    {
                        "name": "MessageBoxA",
                        "address": "0x477590"
                    },
                    {
                        "name": "MapWindowPoints",
                        "address": "0x477594"
                    },
                    {
                        "name": "MapVirtualKeyA",
                        "address": "0x477598"
                    },
                    {
                        "name": "LoadStringA",
                        "address": "0x47759c"
                    },
                    {
                        "name": "LoadKeyboardLayoutA",
                        "address": "0x4775a0"
                    },
                    {
                        "name": "LoadIconA",
                        "address": "0x4775a4"
                    },
                    {
                        "name": "LoadCursorA",
                        "address": "0x4775a8"
                    },
                    {
                        "name": "LoadBitmapA",
                        "address": "0x4775ac"
                    },
                    {
                        "name": "KillTimer",
                        "address": "0x4775b0"
                    },
                    {
                        "name": "IsZoomed",
                        "address": "0x4775b4"
                    },
                    {
                        "name": "IsWindowVisible",
                        "address": "0x4775b8"
                    },
                    {
                        "name": "IsWindowEnabled",
                        "address": "0x4775bc"
                    },
                    {
                        "name": "IsWindow",
                        "address": "0x4775c0"
                    },
                    {
                        "name": "IsRectEmpty",
                        "address": "0x4775c4"
                    },
                    {
                        "name": "IsIconic",
                        "address": "0x4775c8"
                    },
                    {
                        "name": "IsDialogMessageA",
                        "address": "0x4775cc"
                    },
                    {
                        "name": "IsChild",
                        "address": "0x4775d0"
                    },
                    {
                        "name": "InvalidateRect",
                        "address": "0x4775d4"
                    },
                    {
                        "name": "IntersectRect",
                        "address": "0x4775d8"
                    },
                    {
                        "name": "InsertMenuItemA",
                        "address": "0x4775dc"
                    },
                    {
                        "name": "InsertMenuA",
                        "address": "0x4775e0"
                    },
                    {
                        "name": "InflateRect",
                        "address": "0x4775e4"
                    },
                    {
                        "name": "GetWindowThreadProcessId",
                        "address": "0x4775e8"
                    },
                    {
                        "name": "GetWindowTextA",
                        "address": "0x4775ec"
                    },
                    {
                        "name": "GetWindowRect",
                        "address": "0x4775f0"
                    },
                    {
                        "name": "GetWindowPlacement",
                        "address": "0x4775f4"
                    },
                    {
                        "name": "GetWindowLongA",
                        "address": "0x4775f8"
                    },
                    {
                        "name": "GetWindowDC",
                        "address": "0x4775fc"
                    },
                    {
                        "name": "GetUpdateRect",
                        "address": "0x477600"
                    },
                    {
                        "name": "GetTopWindow",
                        "address": "0x477604"
                    },
                    {
                        "name": "GetSystemMetrics",
                        "address": "0x477608"
                    },
                    {
                        "name": "GetSystemMenu",
                        "address": "0x47760c"
                    },
                    {
                        "name": "GetSysColorBrush",
                        "address": "0x477610"
                    },
                    {
                        "name": "GetSysColor",
                        "address": "0x477614"
                    },
                    {
                        "name": "GetSubMenu",
                        "address": "0x477618"
                    },
                    {
                        "name": "GetScrollRange",
                        "address": "0x47761c"
                    },
                    {
                        "name": "GetScrollPos",
                        "address": "0x477620"
                    },
                    {
                        "name": "GetScrollInfo",
                        "address": "0x477624"
                    },
                    {
                        "name": "GetPropA",
                        "address": "0x477628"
                    },
                    {
                        "name": "GetParent",
                        "address": "0x47762c"
                    },
                    {
                        "name": "GetWindow",
                        "address": "0x477630"
                    },
                    {
                        "name": "GetMenuStringA",
                        "address": "0x477634"
                    },
                    {
                        "name": "GetMenuState",
                        "address": "0x477638"
                    },
                    {
                        "name": "GetMenuItemInfoA",
                        "address": "0x47763c"
                    },
                    {
                        "name": "GetMenuItemID",
                        "address": "0x477640"
                    },
                    {
                        "name": "GetMenuItemCount",
                        "address": "0x477644"
                    },
                    {
                        "name": "GetMenu",
                        "address": "0x477648"
                    },
                    {
                        "name": "GetLastActivePopup",
                        "address": "0x47764c"
                    },
                    {
                        "name": "GetKeyboardState",
                        "address": "0x477650"
                    },
                    {
                        "name": "GetKeyboardLayoutList",
                        "address": "0x477654"
                    },
                    {
                        "name": "GetKeyboardLayout",
                        "address": "0x477658"
                    },
                    {
                        "name": "GetKeyState",
                        "address": "0x47765c"
                    },
                    {
                        "name": "GetKeyNameTextA",
                        "address": "0x477660"
                    },
                    {
                        "name": "GetIconInfo",
                        "address": "0x477664"
                    },
                    {
                        "name": "GetForegroundWindow",
                        "address": "0x477668"
                    },
                    {
                        "name": "GetFocus",
                        "address": "0x47766c"
                    },
                    {
                        "name": "GetDesktopWindow",
                        "address": "0x477670"
                    },
                    {
                        "name": "GetDCEx",
                        "address": "0x477674"
                    },
                    {
                        "name": "GetDC",
                        "address": "0x477678"
                    },
                    {
                        "name": "GetCursorPos",
                        "address": "0x47767c"
                    },
                    {
                        "name": "GetCursor",
                        "address": "0x477680"
                    },
                    {
                        "name": "GetClipboardData",
                        "address": "0x477684"
                    },
                    {
                        "name": "GetClientRect",
                        "address": "0x477688"
                    },
                    {
                        "name": "GetClassNameA",
                        "address": "0x47768c"
                    },
                    {
                        "name": "GetClassInfoA",
                        "address": "0x477690"
                    },
                    {
                        "name": "GetCapture",
                        "address": "0x477694"
                    },
                    {
                        "name": "GetActiveWindow",
                        "address": "0x477698"
                    },
                    {
                        "name": "FrameRect",
                        "address": "0x47769c"
                    },
                    {
                        "name": "FindWindowA",
                        "address": "0x4776a0"
                    },
                    {
                        "name": "FillRect",
                        "address": "0x4776a4"
                    },
                    {
                        "name": "EqualRect",
                        "address": "0x4776a8"
                    },
                    {
                        "name": "EnumWindows",
                        "address": "0x4776ac"
                    },
                    {
                        "name": "EnumThreadWindows",
                        "address": "0x4776b0"
                    },
                    {
                        "name": "EndPaint",
                        "address": "0x4776b4"
                    },
                    {
                        "name": "EnableWindow",
                        "address": "0x4776b8"
                    },
                    {
                        "name": "EnableScrollBar",
                        "address": "0x4776bc"
                    },
                    {
                        "name": "EnableMenuItem",
                        "address": "0x4776c0"
                    },
                    {
                        "name": "DrawTextA",
                        "address": "0x4776c4"
                    },
                    {
                        "name": "DrawMenuBar",
                        "address": "0x4776c8"
                    },
                    {
                        "name": "DrawIconEx",
                        "address": "0x4776cc"
                    },
                    {
                        "name": "DrawIcon",
                        "address": "0x4776d0"
                    },
                    {
                        "name": "DrawFrameControl",
                        "address": "0x4776d4"
                    },
                    {
                        "name": "DrawFocusRect",
                        "address": "0x4776d8"
                    },
                    {
                        "name": "DrawEdge",
                        "address": "0x4776dc"
                    },
                    {
                        "name": "DispatchMessageA",
                        "address": "0x4776e0"
                    },
                    {
                        "name": "DestroyWindow",
                        "address": "0x4776e4"
                    },
                    {
                        "name": "DestroyMenu",
                        "address": "0x4776e8"
                    },
                    {
                        "name": "DestroyIcon",
                        "address": "0x4776ec"
                    },
                    {
                        "name": "DestroyCursor",
                        "address": "0x4776f0"
                    },
                    {
                        "name": "DeleteMenu",
                        "address": "0x4776f4"
                    },
                    {
                        "name": "DefWindowProcA",
                        "address": "0x4776f8"
                    },
                    {
                        "name": "DefMDIChildProcA",
                        "address": "0x4776fc"
                    },
                    {
                        "name": "DefFrameProcA",
                        "address": "0x477700"
                    },
                    {
                        "name": "CreatePopupMenu",
                        "address": "0x477704"
                    },
                    {
                        "name": "CreateMenu",
                        "address": "0x477708"
                    },
                    {
                        "name": "CreateIcon",
                        "address": "0x47770c"
                    },
                    {
                        "name": "ClientToScreen",
                        "address": "0x477710"
                    },
                    {
                        "name": "CheckMenuItem",
                        "address": "0x477714"
                    },
                    {
                        "name": "CallWindowProcA",
                        "address": "0x477718"
                    },
                    {
                        "name": "CallNextHookEx",
                        "address": "0x47771c"
                    },
                    {
                        "name": "BeginPaint",
                        "address": "0x477720"
                    },
                    {
                        "name": "CharNextA",
                        "address": "0x477724"
                    },
                    {
                        "name": "CharLowerBuffA",
                        "address": "0x477728"
                    },
                    {
                        "name": "CharLowerA",
                        "address": "0x47772c"
                    },
                    {
                        "name": "CharToOemA",
                        "address": "0x477730"
                    },
                    {
                        "name": "AdjustWindowRectEx",
                        "address": "0x477734"
                    },
                    {
                        "name": "ActivateKeyboardLayout",
                        "address": "0x477738"
                    }
                ],
                "dll": "user32.dll"
            },
            {
                "imports": [
                    {
                        "name": "Sleep",
                        "address": "0x477740"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SafeArrayPtrOfIndex",
                        "address": "0x477748"
                    },
                    {
                        "name": "SafeArrayGetUBound",
                        "address": "0x47774c"
                    },
                    {
                        "name": "SafeArrayGetLBound",
                        "address": "0x477750"
                    },
                    {
                        "name": "SafeArrayCreate",
                        "address": "0x477754"
                    },
                    {
                        "name": "VariantChangeType",
                        "address": "0x477758"
                    },
                    {
                        "name": "VariantCopy",
                        "address": "0x47775c"
                    },
                    {
                        "name": "VariantClear",
                        "address": "0x477760"
                    },
                    {
                        "name": "VariantInit",
                        "address": "0x477764"
                    }
                ],
                "dll": "oleaut32.dll"
            },
            {
                "imports": [
                    {
                        "name": "ImageList_SetIconSize",
                        "address": "0x47776c"
                    },
                    {
                        "name": "ImageList_GetIconSize",
                        "address": "0x477770"
                    },
                    {
                        "name": "ImageList_Write",
                        "address": "0x477774"
                    },
                    {
                        "name": "ImageList_Read",
                        "address": "0x477778"
                    },
                    {
                        "name": "ImageList_GetDragImage",
                        "address": "0x47777c"
                    },
                    {
                        "name": "ImageList_DragShowNolock",
                        "address": "0x477780"
                    },
                    {
                        "name": "ImageList_SetDragCursorImage",
                        "address": "0x477784"
                    },
                    {
                        "name": "ImageList_DragMove",
                        "address": "0x477788"
                    },
                    {
                        "name": "ImageList_DragLeave",
                        "address": "0x47778c"
                    },
                    {
                        "name": "ImageList_DragEnter",
                        "address": "0x477790"
                    },
                    {
                        "name": "ImageList_EndDrag",
                        "address": "0x477794"
                    },
                    {
                        "name": "ImageList_BeginDrag",
                        "address": "0x477798"
                    },
                    {
                        "name": "ImageList_Remove",
                        "address": "0x47779c"
                    },
                    {
                        "name": "ImageList_DrawEx",
                        "address": "0x4777a0"
                    },
                    {
                        "name": "ImageList_Draw",
                        "address": "0x4777a4"
                    },
                    {
                        "name": "ImageList_GetBkColor",
                        "address": "0x4777a8"
                    },
                    {
                        "name": "ImageList_SetBkColor",
                        "address": "0x4777ac"
                    },
                    {
                        "name": "ImageList_ReplaceIcon",
                        "address": "0x4777b0"
                    },
                    {
                        "name": "ImageList_Add",
                        "address": "0x4777b4"
                    },
                    {
                        "name": "ImageList_SetImageCount",
                        "address": "0x4777b8"
                    },
                    {
                        "name": "ImageList_GetImageCount",
                        "address": "0x4777bc"
                    },
                    {
                        "name": "ImageList_Destroy",
                        "address": "0x4777c0"
                    },
                    {
                        "name": "ImageList_Create",
                        "address": "0x4777c4"
                    },
                    {
                        "name": "InitCommonControls",
                        "address": "0x4777c8"
                    }
                ],
                "dll": "comctl32.dll"
            },
            {
                "imports": [
                    {
                        "name": "OpenPrinterA",
                        "address": "0x4777d0"
                    },
                    {
                        "name": "EnumPrintersA",
                        "address": "0x4777d4"
                    },
                    {
                        "name": "DocumentPropertiesA",
                        "address": "0x4777d8"
                    },
                    {
                        "name": "ClosePrinter",
                        "address": "0x4777dc"
                    }
                ],
                "dll": "winspool.drv"
            },
            {
                "imports": [
                    {
                        "name": "ShellExecuteA",
                        "address": "0x4777e4"
                    }
                ],
                "dll": "shell32.dll"
            },
            {
                "imports": [
                    {
                        "name": "WSACleanup",
                        "address": "0x4777ec"
                    },
                    {
                        "name": "WSAStartup",
                        "address": "0x4777f0"
                    }
                ],
                "dll": "wsock32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SHGetFolderPathA",
                        "address": "0x4777f8"
                    }
                ],
                "dll": "shfolder.dll"
            }
        ],
        "digital_signers": null,
        "exported_dll_name": null,
        "actual_checksum": "0x00139096",
        "overlay": null,
        "imagebase": "0x00400000",
        "reported_checksum": "0x00000000",
        "icon_hash": null,
        "entrypoint": "0x00473ab4",
        "timestamp": "1992-06-19 22:22:17",
        "osversion": "4.0",
        "sections": [
            {
                "name": "CODE",
                "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00001000",
                "size_of_data": "0x00072c00",
                "entropy": "6.54",
                "raw_address": "0x00000400",
                "virtual_size": "0x00072b1c",
                "characteristics_raw": "0x60000020"
            },
            {
                "name": "DATA",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00074000",
                "size_of_data": "0x00001e00",
                "entropy": "4.60",
                "raw_address": "0x00073000",
                "virtual_size": "0x00001c98",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": "BSS",
                "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00076000",
                "size_of_data": "0x00000000",
                "entropy": "0.00",
                "raw_address": "0x00074e00",
                "virtual_size": "0x00000db1",
                "characteristics_raw": "0xc0000000"
            },
            {
                "name": ".idata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00077000",
                "size_of_data": "0x00002400",
                "entropy": "5.00",
                "raw_address": "0x00074e00",
                "virtual_size": "0x000023d0",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": ".tls",
                "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x0007a000",
                "size_of_data": "0x00000000",
                "entropy": "0.00",
                "raw_address": "0x00077200",
                "virtual_size": "0x00000010",
                "characteristics_raw": "0xc0000000"
            },
            {
                "name": ".rdata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0007b000",
                "size_of_data": "0x00000200",
                "entropy": "0.20",
                "raw_address": "0x00077200",
                "virtual_size": "0x00000018",
                "characteristics_raw": "0x50000040"
            },
            {
                "name": ".reloc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0007c000",
                "size_of_data": "0x00007600",
                "entropy": "6.63",
                "raw_address": "0x00077400",
                "virtual_size": "0x00007408",
                "characteristics_raw": "0x50000040"
            },
            {
                "name": ".rsrc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00084000",
                "size_of_data": "0x000ac000",
                "entropy": "7.01",
                "raw_address": "0x0007ea00",
                "virtual_size": "0x000abf84",
                "characteristics_raw": "0x50000040"
            }
        ],
        "resources": [],
        "dirents": [
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00077000",
                "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
                "size": "0x000023d0"
            },
            {
                "virtual_address": "0x00084000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
                "size": "0x000abf84"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x0007c000",
                "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
                "size": "0x00007408"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x0007b000",
                "name": "IMAGE_DIRECTORY_ENTRY_TLS",
                "size": "0x00000018"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_IAT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
                "size": "0x00000000"
            }
        ],
        "exports": [],
        "guest_signers": {},
        "imphash": "a1ed11b5632f36a184355bd0ef71cfff",
        "icon_fuzzy": null,
        "icon": null,
        "pdbpath": null,
        "imported_dll_count": 17,
        "versioninfo": []
    }
}