| File Path | Type and Hashes |
|---|
| Match Rules |
|---|
| File Name: | ogZWC9ed.zk |
| File Type: | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows |
| SHA1: | 08da52a59efa983c08df72d05b24e6e11f812979 |
| MD5: | 3d2673c65c832a9eec1686ef8780c138 |
| First Seen Date: | 2016-12-28 09:30:37.557245 ( ) |
| Number of Clients Seen: | 2 |
| Last Analysis Date: | 2016-12-28 09:30:37.557245 ( ) |
| Human Expert Analysis Result: | No human expert analysis verdict given to this sample yet. |
| Property | Value |
|---|---|
| number of sections | 6 |
| compilation time stamp | 0x5853A7FF [Fri Dec 16 08:38:23 2016 UTC] |
| LegalCopyright | Brian Harper, \xa9 1997-2005 Stardock.net, Inc |
| InternalName | IconPackager |
| FileVersion | 3.10.00 |
| CompanyName | Stardock.net, Inc |
| PrivateBuild | |
| LegalTrademarks | |
| Comments | December 12, 2005 |
| ProductName | IconPackager for ObjectDesktop |
| OLESelfRegister | |
| SpecialBuild | |
| ProductVersion | 3.10.00 |
| FileDescription | IconPackager Repair Module |
| OriginalFilename | iprepair.dll |
| Translation | 0x0409 0x04b0 |
| entry point | 0x1015f37 (.text) |
| machine type | Intel 386 or later - 32Bit |
| file size | 172123 |
| sha256 | 1e2db9b036dc85109e0bfadac229bfdd7a94d9cc75c91d7cf084b3e06c01ae1c |
| mime type | application/x-dosexec |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | MD5 |
|---|---|---|---|---|---|
| .text | 0x1000 | 0x1b0fc | 0x1b200 | 7.167726[SUSPICIOUS] | - |
| .rdata | 0x1d000 | 0x2536 | 0x2600 | 6.782987 | - |
| .data | 0x20000 | 0xa2f4 | 0x400 | 1.769186 | - |
| .zodec | 0x2b000 | 0x4640 | 0x4800 | 7.255388[SUSPICIOUS] | - |
| .rsrc | 0x30000 | 0x3758 | 0x3800 | 4.175801 | - |
| .reloc | 0x34000 | 0x474 | 0x600 | 2.837833 | - |
-
KERNEL32.dll
- GetProcAddress
- WriteFile
- WriteConsoleW
- VirtualQuery
- GetCurrentThreadId
- GetOEMCP
- GetModuleHandleW
- GetProcessHeap
- GetStartupInfoW
- FreeEnvironmentStringsW
- LocalFree
- HeapSize
- SetStdHandle
- GetStdHandle
- TlsFree
- TerminateProcess
- LeaveCriticalSection
- GetCommandLineA
- FlushFileBuffers
- HeapReAlloc
- IsDebuggerPresent
- OutputDebugStringW
- GetACP
- RtlUnwind
- lstrlenA
- IsProcessorFeaturePresent
- TlsAlloc
- CreateFileW
- DeleteFileW
- LoadLibraryExW
- InitializeCriticalSectionAndSpinCount
- HeapFree
- FreeLibrary
- LCMapStringW
- Sleep
- GetCurrentProcessId
- GetLastError
- SetUnhandledExceptionFilter
- GetSystemTimeAsFileTime
- GetFileType
- SetFilePointerEx
- SetLastError
- TlsSetValue
- EnterCriticalSection
- UnhandledExceptionFilter
- RaiseException
- HeapDestroy
- GetModuleFileNameA
- GetLocalTime
- GetModuleFileNameW
- GetEnvironmentStringsW
- DeleteCriticalSection
- TlsGetValue
- HeapAlloc
- InterlockedIncrement
- IsValidCodePage
- GetStringTypeW
- GetCurrentProcess
- GetFileAttributesA
- LoadLibraryW
- GetCommandLineW
- InterlockedDecrement
- ExitProcess
-
USER32.dll
- wsprintfW
- wvsprintfW
- SendMessageA
- CharLowerA
-
GDI32.dll
- AddFontMemResourceEx
- CancelDC
- AnimatePalette
- BeginPath
-
ole32.dll
- CoCreateInstance
- CoSetProxyBlanket
- CoInitializeSecurity
- CoUninitialize
- CoInitialize
-
msvcrt.dll
- __set_app_type
- exit
-
msi.dll
- None
- None
_RegisterService@0
_WinMain2@16
RT_BITMAP
RT_VERSION