905623f894cce9a5a4bf87bf4736d6f26de3676c2ab8272837bd525f2f47b361

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2011-Aug-04 19:06:04
Detected languages German - Germany
Debug artifacts d:\Soldner\SecretOps\Portal_Client_Source\Bin\dev\Release\pdb\jwdcom.pdb
Comments 08.04.2004-1
FileDescription jwdcom Module
FileVersion 0, 0, 9, 92
InternalName RC1
LegalCopyright Copyright 2004
OriginalFilename jwdcom.exe
ProductName jwdcom Module
ProductVersion 0, 0, 9, 92

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Microsoft Visual C++ v7.1 EXE
MASM/TASM - sig2(h)
Microsoft Visual Basic v5.0 - v6.0
MASM/TASM - sig1(h)
Microsoft Visual C++
Microsoft Visual C++ v6.0
Info Libraries used to perform cryptographic operations: Microsoft's Cryptography API
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • LoadLibraryExA
  • GetProcAddress
  • LoadLibraryA
 Can access the registry:
  • RegEnumKeyExA
  • RegQueryInfoKeyA
  • RegSetValueExA
  • RegCreateKeyExA
  • RegDeleteValueA
  • RegDeleteKeyA
  • RegQueryValueExA
  • RegOpenKeyExA
  • RegCloseKey
 Uses Microsoft's cryptographic API:
  • CryptCreateHash
  • CryptHashData
  • CryptReleaseContext
  • CryptDestroyHash
  • CryptGetHashParam
  • CryptAcquireContextA
 Can create temporary files:
  • CreateFileA
  • GetTempPathA
 Leverages the raw socket API to access the Internet:
  • #16
  • #3
  • #111
  • #19
  • #9
  • #4
  • #52
  • #116
  • #115
  • #23
  • #11
  • #12
  • #57
 Manipulates other processes:
  • OpenProcess
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 029284d88f7b8586059ddcc71031c1f1 🔍
SHA1 89966e9fa53dea85c7afb6b33294c7aced4de2b1 🔍
SHA256 905623f894cce9a5a4bf87bf4736d6f26de3676c2ab8272837bd525f2f47b361 🔍
SHA3 053466fba25c304f5e8c5746f91b9cfb88a38b05caf09fa990968a317eed38af 🔍
SSDeep 12288:ahNpUCYhGG3cQmP1qqxtIPeFdNDOsnRVwZM8:GpUCYkqm0tW5FHf8 🔍
Imports Hash b517f44a8cfaa17987b629370f56a216 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x108

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 4
TimeDateStamp 2011-Aug-04 19:06:04
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 7.0
SizeOfCode 0x7a000
SizeOfInitializedData 0x30000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000714C8 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x7b000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x1000
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0xab000
SizeOfHeaders 0x1000
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 d5be2f47ff014136bdf43a12f14f55a5 🔍
SHA1 78104508dd0436b0e23f78469b8d1c0beabecf3b 🔍
SHA256 c74db61c83367238d157f59cf8c3a385e2d6ab1732205bbe20d09bbf2f8b1023 🔍
SHA3 435b521acbdab8279bc3a9bcc9f009b9ad9aeeccf7d4e4657cef09788acbd63b 🔍
VirtualSize 0x79dc6
VirtualAddress 0x1000
SizeOfRawData 0x7a000
PointerToRawData 0x1000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.2086

.rdata

MD5 77a2cf074d00f9a8350b31a6ce8236c6 🔍
SHA1 41eacb1af390cb8d7ae1a3ee3368be600680cf07 🔍
SHA256 caca2d7f4d56bda49fea07adc97ad3bcdfa45e341398e5c7bee019d323affe4d 🔍
SHA3 0efdf2559a0ad25e8fca4cc31962c48ac986b9ab0e31f5ebddb3ab5fb3fd725e 🔍
VirtualSize 0x1c76c
VirtualAddress 0x7b000
SizeOfRawData 0x1d000
PointerToRawData 0x7b000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.25365

.data

MD5 9b4fc31db84cadce496aa58d5db521e6 🔍
SHA1 1f135f1d72bfab145b6080ff221b5fd9539bde1d 🔍
SHA256 33b4cd88da67ef2bb32be2800d8341819640eceeee7dc47aded7ab1f5cbcec45 🔍
SHA3 c66eac22f70213fe0fca36f3b8618ddfc52f8d3e7d20ff66cad8563203872ad4 🔍
VirtualSize 0x45b0
VirtualAddress 0x98000
SizeOfRawData 0x1000
PointerToRawData 0x98000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.14652

.rsrc

MD5 45d3fa5c3f97d368e8e09f9ebe8f2d89 🔍
SHA1 641811ecaa8a37b29ad3ba1f921df94327482fb0 🔍
SHA256 026e0d0c65fc513156a5ced334566ea21f18e8f608e6ad3d8620fd2fa6d26cf6 🔍
SHA3 d80b49179a2dfb186239a4fd2b9da8c35869cd41d7f9bdfe9f794bdd0ea02a73 🔍
VirtualSize 0xda50
VirtualAddress 0x9d000
SizeOfRawData 0xe000
PointerToRawData 0x99000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.32105

Imports

WS2_32.dll #16
#3
#111
#19
#9
#4
#52
#116
#115
#23
#11
#12
#57
KERNEL32.dll lstrlenW
DebugBreak
HeapFree
GetProcessHeap
lstrlenA
lstrcmpiA
SetEvent
CloseHandle
WaitForSingleObject
CreateThread
CreateEventA
lstrcpynA
lstrcpyA
GetModuleFileNameA
lstrcatA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
Sleep
GetCurrentThreadId
GetCommandLineA
WaitForMultipleObjects
MultiByteToWideChar
SetThreadPriority
GetProcAddress
LoadLibraryA
ExitProcess
FlushInstructionCache
GetCurrentProcess
HeapAlloc
GetLastError
OutputDebugStringA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
LocalFree
GetCurrentThread
DuplicateHandle
GetThreadContext
GetCurrentProcessId
OpenProcess
ResumeThread
SuspendThread
TerminateThread
AllocConsole
GetStdHandle
SetConsoleTextAttribute
WriteFile
GetLocalTime
SetUnhandledExceptionFilter
SetErrorMode
LeaveCriticalSection
EnterCriticalSection
RaiseException
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
ResetEvent
ReleaseMutex
CreateMutexA
GetUserDefaultLangID
SetFileTime
CreateFileA
CreateDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
MoveFileA
DeleteFileA
GetTempPathA
GetTempFileNameA
USER32.dll CallWindowProcA
wsprintfA
CharNextA
PostThreadMessageA
DestroyMenu
DestroyIcon
MsgWaitForMultipleObjects
DestroyWindow
LoadMenuA
SetTimer
GetWindowLongA
CreateWindowExA
RegisterClassExA
LoadCursorA
GetClassInfoExA
PeekMessageA
UnregisterClassA
SetWindowLongA
KillTimer
DefWindowProcA
MessageBoxA
PostQuitMessage
DispatchMessageA
GetMessageA
LoadStringA
RegisterWindowMessageA
ADVAPI32.dll CryptCreateHash
CryptHashData
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptAcquireContextA
SHELL32.dll Shell_NotifyIconA
ole32.dll CoResumeClassObjects
CoUninitialize
CoCreateInstance
CoSuspendClassObjects
CoTaskMemRealloc
CoTaskMemAlloc
CoRegisterClassObject
CoRevokeClassObject
StringFromCLSID
CoInitializeEx
CoTaskMemFree
StringFromGUID2
OLEAUT32.dll #149
#16
#6
#2
#202
#201
#8
#12
#9
#200
#150
#162
#277
#163
#186
#161
#411
#26
#7
expat.dll XML_GetErrorCode
XML_ParserCreate
XML_SetUserData
XML_SetElementHandler
XML_SetCharacterDataHandler
XML_ParserFree
XML_ErrorString
XML_Parse
SHLWAPI.dll PathFindExtensionA
COMCTL32.dll ImageList_LoadImageA
ImageList_GetIcon
MSVCP71.dll ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?rdstate@ios_base@std@@QBEHXZ
?bad@ios_base@std@@QBE_NXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Nomemory@std@@YAXXZ
?width@ios_base@std@@QAEHH@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Register@facet@locale@std@@QAEXXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Id_cnt@id@locale@std@@0HA
??1_Lockit@std@@QAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
?id@?$ctype@G@std@@2V0locale@2@A
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?clear@ios_base@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?is@?$ctype@G@std@@QBE_NFG@Z
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?to_char_type@?$char_traits@D@std@@SADABH@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
?width@ios_base@std@@QBEHXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?to_int_type@?$char_traits@D@std@@SAHABD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
?to_char_type@?$char_traits@G@std@@SAGABG@Z
?eq_int_type@?$char_traits@G@std@@SA_NABG0@Z
?eof@?$char_traits@G@std@@SAGXZ
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?to_int_type@?$char_traits@G@std@@SAGABG@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEABGI@Z
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??Bios_base@std@@QBEPAXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?fail@ios_base@std@@QBE_NXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
MSVCR71.dll _tzset
strncmp
gmtime
tolower
wcslen
_callnewh
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__security_error_handler
_controlfp
_stricmp
_strlwr
_getcwd
memcmp
malloc
free
_resetstkoflw
_except_handler3
_CxxThrowException
memset
??_V@YAXPAX@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
__CxxFrameHandler
??3@YAXPAX@Z
strlen
_purecall
strncpy
memmove
??0exception@@QAE@ABV0@@Z
??0bad_cast@@QAE@ABV0@@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@PBD@Z
realloc
_mbsrchr
_mbsstr
memcpy
wcsncpy
strcpy
atoi
strncat
strchr
_snprintf
strrchr
sprintf
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
fclose
strspn
_strnicmp
ctime
time
_vsnprintf
fflush
fputs
fopen
_beginthreadex
_endthreadex
iphlpapi.dll GetRTTAndHopCount
VERSION.dll VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

Delayed Imports

100

Type REGISTRY
Language German - Germany
Codepage UNKNOWN
Size 0xaf
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.0959
MD5 12ce1b2f80681298d19bdc9bdc22d05b 🔍
SHA1 ef02b4da23f39da622ead3524ff01b9c37acc175 🔍
SHA256 b3336d19523a260fe61f0f35c76c2c805ab4157394fa7fa6bf68b61394257db0 🔍
SHA3 2a972e50c850525c71844d72e33a347b55b56baef6c5f50dc9200c223869d61a 🔍

101

Type REGISTRY
Language German - Germany
Codepage UNKNOWN
Size 0x2b4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.39131
MD5 f9c8d20c5b0fc30288b3b18883fd929c 🔍
SHA1 bf2592c5d95a75468849222cc071aa80518c0ed0 🔍
SHA256 a63c908ea305d1ef5abadc8fd546b878183887c415d53b621eae7f0ddbf029a3 🔍
SHA3 2ce2531631b680e74d516004b2b836c6012c9b0f14b1d2cbcec713a066afc094 🔍

103

Type REGISTRY
Language German - Germany
Codepage UNKNOWN
Size 0x202
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.43676
MD5 00b158256ed6ce936fe724793c6f6cc7 🔍
SHA1 8d79db0e41ac01739a2d49d9a35dafb4eec62324 🔍
SHA256 f13abb52a31754046003b5fb740fff4fbc0d8463f8fd8017172e494f6815d596 🔍
SHA3 c83deebb7877b942a2e9e3a63e005ac66712789b8c734faf680fd738321682d3 🔍

104

Type REGISTRY
Language German - Germany
Codepage UNKNOWN
Size 0x29c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.36997
MD5 00e80b2103b73f0090eff1e711553e64 🔍
SHA1 cb30553082fc4f4d725f4be26a05168b75e41cd2 🔍
SHA256 0832a4ae75dfca9ae80f69bbce754c2cab82cbd390a79e396eeeb41027e754a3 🔍
SHA3 de37399d27b5c29fb9903e0125908db42835d2ee6e404f84d3fd072ad8ebac8a 🔍

106

Type REGISTRY
Language German - Germany
Codepage UNKNOWN
Size 0x26c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.33682
MD5 8e7a35dc8239fbf808b408fbff26e693 🔍
SHA1 3373f8ae137baf4394d8ff0820b101ef747c649b 🔍
SHA256 cfe692f84692459c00df268c59e68b9a6e63f117da4b43da4fa6d5aa78329a5e 🔍
SHA3 4ed4ff6ea2555a2dbf20aa9b48a4247d8bbaccacd195a1382c8c735220385a7d 🔍

1

Type TYPELIB
Language German - Germany
Codepage UNKNOWN
Size 0x8898
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.66166
MD5 21137943c1c6b92ab8bcccec80a6095f 🔍
SHA1 2a6c21c49380b5e261d57113e31817f10169faa9 🔍
SHA256 c6f8309e2512e4a885bee444a6d834a19022fde8d84f51aaf3ef7f3610da73fc 🔍
SHA3 6e455b2dc3ec9bdb6f72764e8b2bc3445f9161d96ea4c307d072f5e614c03f55 🔍

201

Type RT_BITMAP
Language German - Germany
Codepage UNKNOWN
Size 0x268
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.58074
MD5 7b915534edfd4eeebc0c8044d50a8426 🔍
SHA1 9ea4c35e876c8b5dcbae5e86eeba07e016a44b37 🔍
SHA256 8e1c3a4a85aa4034d2d927745250d61a3c801e06b15485ba63b14713117ccfeb 🔍
SHA3 d81b5dd560b0c2a78ebad07a37686ccefd9955d21e617d111de23de5fb0c03f3 🔍
Preview

203

Type RT_BITMAP
Language German - Germany
Codepage UNKNOWN
Size 0x2068
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.30861
MD5 b83cbccb39058f168255e026099af328 🔍
SHA1 4e461119056db3318a5b82d34f62fbd01d86a22d 🔍
SHA256 c17f57d1c20540d7a64728acf5419bf1d0f0801f46447d9815804e1afa4028eb 🔍
SHA3 1189444fd45c146152b448a05437d42bd01e00d13054374945c4e898fecba7b5 🔍
Preview

1 (#2)

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.7115
MD5 292ba5989d1610d883a639cb9123272c 🔍
SHA1 f265c140b677d5e549d1e307efeddda7b5925458 🔍
SHA256 0435a9db32c19202ba74f607678d9a485290e1d93c786c60c87ab6ada4fca223 🔍
SHA3 2b444dfbce812fb7bae05b6a47484cd656889494ee81387e43536d88aac92374 🔍

2

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.44654
MD5 44d8049c32935bc42a1a07f061532bfe 🔍
SHA1 c60214cec141ad86c39eb9c1a677f478eb0b4ad3 🔍
SHA256 fa463c8bfebf8c55b6fad93a5b75716517f7b077fa78ea6dc28d780e79845d1b 🔍
SHA3 aa0192f94d18db6613608364f453a72d173683d32895d1daeef5476c56331b0e 🔍

3

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.68676
MD5 63d2f803f535f464a9d993e0a69eed82 🔍
SHA1 a61ff8420983386ae2c307f3e5a585b717fbffbe 🔍
SHA256 3a29b19d3c70f7c5cc3ed5a27b0cad872a18c4ed7dbb8bc010db0c045bdb0950 🔍
SHA3 5d626669f676d1d7eed85c100ddccef5713a44a439ffb9215d2669d1c394fc29 🔍

202

Type RT_MENU
Language German - Germany
Codepage UNKNOWN
Size 0x8e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04142
MD5 68a4020252eeac4216e6edfa512326f2 🔍
SHA1 16e0f98679724f5aaa56b8b4b9cf14a635ccd317 🔍
SHA256 28d324501af81798677443f3765fd89ebf46255d006103fd8edc7660fdb19e84 🔍
SHA3 703c9a50734ad9cf1e5327a35d052e56d8930cbf64af3bbc41a68820f4199e84 🔍

7

Type RT_STRING
Language German - Germany
Codepage UNKNOWN
Size 0x70
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.60357
MD5 face56103e4a75b665afce9384364217 🔍
SHA1 0c2384aca5d75040429407d14a8433beff2bb7ca 🔍
SHA256 97ed2d2586b47ea05139b00023cade592344d413e9a6e974576bd4a97d564757 🔍
SHA3 e350f57a85e89e34cc4bb5f2a617f5bd1a9cb644cec777aaa039e6a734be6ec3 🔍

204

Type RT_GROUP_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x30
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.54942
Detected Filetype Icon file
MD5 a28271b6de1d12ef3cc68b1ba41a8716 🔍
SHA1 5e90a4c66d75799a352eb262932792ef8d89baf8 🔍
SHA256 5a043206c1b17f15c4c2aa62a4322c0559d7d91e6f55b7b8e2eccc269ce89805 🔍
SHA3 9a3be0815398bc79643b08f7b5ba565ece77ec9f232617955aafb9b99965feba 🔍

1 (#3)

Type RT_VERSION
Language German - Germany
Codepage UNKNOWN
Size 0x2b0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.38655
MD5 181218f6ff20f030b79977e307a441b0 🔍
SHA1 48a5135b11eebb8e3850c3da165d1d4d9cdc4673 🔍
SHA256 78aff84df4f26cb0906117713b293fb27ca72df6eb83d98636cfaa0f4092583f 🔍
SHA3 79c027a7c9e9b0a1d2441d7f2d5634eb265ad9779985ab63ee961718046f3dc3 🔍

String Table contents

JoWooD Portal Connection
BuddyList-Klasse

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 0.0.9.92
ProductVersion 0.0.9.92
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments 08.04.2004-1
FileDescription jwdcom Module
FileVersion (#2) 0, 0, 9, 92
InternalName RC1
LegalCopyright Copyright 2004
OriginalFilename jwdcom.exe
ProductName jwdcom Module
ProductVersion (#2) 0, 0, 9, 92
Resource LangID German - Germany

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2011-Aug-04 19:06:04
Version 0.0
SizeofData 97
AddressOfRawData 0x864b8
PointerToRawData 0x864b8
Referenced File d:\Soldner\SecretOps\Portal_Client_Source\Bin\dev\Release\pdb\jwdcom.pdb

TLS Callbacks

Load Configuration

Size 0x48
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x498928
SEHandlerTable 0x4865b0
SEHandlerCount 668

RICH Header

XOR Key 0x59320acb
Unmarked objects 0
105 (2067) 3
ASM objects (VS2003 (.NET) build 3077) 5
Imports (VS2003 (.NET) build 3077) 6
C objects (VS2003 (.NET) build 3077) 17
C objects (2179) 3
Imports (9210) 6
Imports (2067) 2
Imports (2179) 15
Total imports 405
C++ objects (VS2003 (.NET) build 3077) 48
94 (VS2003 (.NET) build 3052) 1
Linker (VS2003 (.NET) build 3077) 1

Errors

Leave a comment

No comments yet.