dd60362cdd8729a36559b5de6c3b3adea381913e48e8995ccc80bf30a4fb5418
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2005-Jun-18 15:42:25 |
| Detected languages |
English - United Kingdom
English - United States |
| Comments | http://www.innovasys.com |
| CompanyName | Innovasys Ltd. |
| FileDescription | Innovasys DockStudioXP Control 2.1 |
| FileVersion | 2.1.0144 |
| InternalName | InnovaDSXP2 |
| LegalCopyright | Copyright © 2001-2005 Innovasys Ltd. All Rights Reserved. |
| OriginalFilename | InnovaDSXP2.OCX |
| ProductName | Innovasys DockStudioXP |
| ProductVersion | 2.1.0144 |
Plugin Output
| Info | Matching compiler(s): |
Microsoft Visual C++ 7.0
Microsoft Visual C++ 7.1 Microsoft Visual C++ 6.0 - 8.0 Microsoft Visual C++ v7.1 EXE Microsoft Visual C++ Microsoft Visual C++ v6.0 Microsoft Visual C++ v7.1 DLL |
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Suspicious | The PE was fixed by ImpREC |
Section .text is both writable and executable.
Unusual section name found: Oreloc Unusual section name found: .neolit Section .neolit is both writable and executable. Unusual section name found: .mackt Section .mackt is both writable and executable. |
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Suspicious | No VirusTotal score. | This file has never been scanned on VirusTotal. |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x108 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 8 |
| TimeDateStamp | 2005-Jun-18 15:42:25 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 7.0 |
| SizeOfCode | 0x7000 |
| SizeOfInitializedData | 0xae000 |
| SizeOfUninitializedData | 0x199000 |
| AddressOfEntryPoint | 0x00169B5C (Section: .text) |
| BaseOfCode | 0x247000 |
| BaseOfData | 0x1000 |
| ImageBase | 0xc190000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x1000 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 4.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x252000 |
| SizeOfHeaders | 0x1000 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
.rdata
.data
.rsrc
Oreloc
.neolit
.reloc
.mackt
Imports
| ntdll.dll |
RtlInitializeCriticalSection
RtlDeleteCriticalSection RtlEnterCriticalSection RtlLeaveCriticalSection NtdllDefWindowProc_A NtdllDefWindowProc_W |
|---|---|
| kernel32.dll |
GetThreadLocale
GetLocaleInfoA GetACP GetVersionExA InterlockedExchange RaiseException GetProcessHeap GetCurrentProcess FlushInstructionCache MultiByteToWideChar GetCurrentThreadId HeapFree GetModuleFileNameA lstrlen lstrlenW GetLastError MulDiv GetCurrentProcessId WideCharToMultiByte GetLocalTime GetTimeFormatA GetDateFormatA GlobalAlloc GlobalLock GlobalUnlock LoadResource LockResource SizeofResource FindResourceA GetModuleHandleA GetProcAddress lstrcpy lstrcmpiA lstrcmp GlobalFree lstrcat FormatMessageA LocalFree FreeLibrary LoadLibraryA GetSystemTime GlobalSize SetErrorMode LoadLibraryExA Sleep GlobalReAlloc InterlockedIncrement InterlockedDecrement lstrcpyn DisableThreadLibraryCalls IsDBCSLeadByte GetFileSize ReadFile CloseHandle VirtualAlloc VirtualFree WriteFile FreeResource VirtualQuery GetSystemInfo VirtualProtect GetSystemTimeAsFileTime GetCommandLineA ExitProcess HeapCreate HeapDestroy TerminateProcess SetUnhandledExceptionFilter TlsAlloc SetLastError TlsGetValue TlsSetValue TlsFree GetStartupInfoA GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetTickCount QueryPerformanceCounter IsBadReadPtr IsBadWritePtr IsBadCodePtr GetCPInfo GetOEMCP GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA SetStdHandle SetFilePointer FlushFileBuffers RtlUnwind |
| shlwapi.dll |
PathFindExtensionA
|
| user32.dll |
UnregisterClassA
GetWindowLongA SetWindowLongA SetWindowPos wsprintfA CallWindowProcA IsWindowEnabled SendMessageA CopyRect OffsetRect GetSysColor InflateRect DrawFocusRect SetWindowTextW InvalidateRect IsWindow DestroyWindow RegisterClassExA GetClassInfoExA LoadCursorA DrawFrameControl SetFocus GetParent SetParent GetScrollInfo SetScrollInfo GetScrollPos SetScrollPos SetRect EnableWindow ShowWindow IsRectEmpty GetWindowRect IsWindowVisible PtInRect GetDC ReleaseDC SetCursor RemovePropA MoveWindow ScreenToClient ValidateRect BeginPaint EndPaint GetClientRect WindowFromPoint ClientToScreen GetCursorPos SetPropA GetWindowThreadProcessId GetPropA SendMessageW SetActiveWindow PostMessageA OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsClipboardFormatAvailable GetClipboardData ReleaseCapture GetKeyState DestroyCursor GetCapture SetCapture GetCursor GetDesktopWindow GetMessageA DispatchMessageA PostQuitMessage GetDCEx DeferWindowPos BeginDeferWindowPos EndDeferWindowPos SystemParametersInfoA IsZoomed FillRect DrawEdge LoadImageA DrawCaption GetDoubleClickTime EqualRect ChildWindowFromPoint MessageBeep UpdateWindow GetAsyncKeyState GetFocus SetRectEmpty GetKeyboardState GetWindow MapWindowPoints SetWindowTextA MessageBoxW IsChild IntersectRect SetWindowRgn CopyImage ScrollDC UnionRect GetClassNameA GetSystemMetrics GetActiveWindow GetForegroundWindow TranslateMessage DrawTextA GetWindowTextA MessageBoxA IsIconic GetUpdateRect SetTimer KillTimer MessageBoxIndirectA GetWindowDC GetSystemMenu SetMenuItemInfoA DrawAnimatedRects ShowScrollBar ArrangeIconicWindows LockWindowUpdate CascadeWindows TileWindows PeekMessageA EnumChildWindows GetNextDlgTabItem DragDetect FindWindowA VkKeyScanA MapVirtualKeyA GetKeyNameTextA LoadStringA DrawTextW DrawStateA GetIconInfo CharNextA IsWindowUnicode CallWindowProcW SetWindowLongW GetClassLongW GetClassLongA SetWindowsHookExA UnhookWindowsHookEx |
| gdi32.dll |
SelectObject
SetBkMode SetTextColor SetBkColor CreatePen DeleteObject SetPixelV CreateCompatibleDC CreateCompatibleBitmap BitBlt DeleteDC GetDeviceCaps CreateBitmap SetROP2 CreateSolidBrush CreatePatternBrush GetPixel GetObjectA CreateFontIndirectA GetTextExtentPoint32W ExtTextOutW CreateHatchBrush CreateRectRgnIndirect CreateMetaFileA SaveDC SetWindowOrgEx SetWindowExtEx RestoreDC CloseMetaFile DeleteMetaFile LPtoDP SetMapMode SetViewportOrgEx CreateDCA CreateFontA CreateRectRgn CombineRgn Polyline SetRectRgn SelectClipRgn GetClipBox PatBlt GetTextExtentPoint32A ExtTextOutA Polygon StretchBlt CreatePalette CreateHalftonePalette StretchDIBits SelectPalette RealizePalette CreateDIBitmap GetStockObject GetDIBits SetStretchBltMode CreateFontIndirectW |
| ole32.dll |
OleLoadFromStream
OleSaveToStream WriteClassStm OleRegEnumVerbs OleRegGetUserType OleRegGetMiscStatus CreateDataAdviseHolder CreateOleAdviseHolder RegisterDragDrop RevokeDragDrop |
| combase.dll |
CoTaskMemFree
CoTaskMemAlloc CreateStreamOnHGlobal GetHGlobalFromStream ProgIDFromCLSID CoTaskMemRealloc StringFromGUID2 CoCreateGuid |
| oleaut32.dll |
SysFreeString
SysAllocString SysStringLen SysAllocStringLen SysStringByteLen SysAllocStringByteLen VariantClear VariantCopy LoadTypeLib LoadRegTypeLib VariantInit VariantChangeType OleTranslateColor OleCreatePictureIndirect SystemTimeToVariantTime VarFormat VarFormatDateTime OleCreateFontIndirect OleCreatePropertyFrame GetErrorInfo SafeArrayCreateVector SafeArrayLock SafeArrayUnlock SafeArrayCopy SafeArrayDestroy CreateErrorInfo SetErrorInfo UnRegisterTypeLib RegisterTypeLib VarUI4FromStr VariantChangeTypeEx VarBstrCmp VarCmp VarBstrCat |
| shell32.dll |
SHGetSpecialFolderLocation
SHGetPathFromIDList SHGetMalloc |
| advapi32.dll |
RegQueryValueExA
RegQueryInfoKeyA RegEnumKeyExA RegDeleteKeyA |
| winmm.dll |
timeGetTime
|
| imm32.dll |
ImmReleaseContext
ImmGetOpenStatus ImmGetContext |
| comctl32.dll |
InitCommonControls
ImageList_Draw ImageList_Destroy ImageList_Create ImageList_AddMasked CreatePropertySheetPageW DestroyPropertySheetPage ImageList_Add ImageList_GetIcon ImageList_GetImageCount InitCommonControlsEx |
| comdlg32.dll |
GetOpenFileNameA
GetSaveFileNameA |
Delayed Imports
DllCanUnloadNow
| Ordinal | 1 |
|---|---|
| Address | 0x13ea70 |
DllGetClassObject
| Ordinal | 2 |
|---|---|
| Address | 0x146420 |
DllRegisterServer
| Ordinal | 3 |
|---|---|
| Address | 0x148050 |
DllUnregisterServer
| Ordinal | 4 |
|---|---|
| Address | 0x148060 |
102
105
106
108
110
111
112
113
114
117
119
121
123
124
125
126
127
128
130
133
134
135
137
138
139
140
141
148
149
150
151
153
155
156
159
160
161
162
163
164
165
167
169
171
172
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
192
193
194
195
196
198
200
202
203
204
205
206
214
215
216
221
259
262
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
1
1 (#2)
2
3
4
5
6
7
8
9
101
147
157
166
168
170
173
207
208
209
217
218
219
220
226
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
254
255
256
257
260
261
271 (#2)
273 (#2)
10
11
7 (#2)
63
64
65
66
126 (#2)
127 (#2)
132
138 (#2)
139 (#2)
188 (#2)
313
314
315
376
382
383
385
388
389
210
211
212
213
223
224
225
270 (#2)
275 (#2)
269
1 (#3)
String Table contents
| InnovaDSXP |
| An object with the specified index does not exist in the collection. |
| An object with the specified key already exists in the collection. |
| Invalid Form object. |
| Form object must belong to the current process. |
| You must specify a relative window for the tabbed DockWindow. |
| Invalid relative window Index. |
| The DockWindow has been closed. |
| The specified value is too small or too large for this Size object. |
| The control has been unloaded. |
| The DocumentWindow has been closed. |
| Document grouping operations are only available in MDI mode. |
| The CommandBar has been closed. |
| Property is not inheritable for this object. |
| The Image has been deleted. |
| The specified data does not appear to contain valid layout information. |
| The specified layout data is in a format than cannot be understood by this version of the DockStudio control. |
| The Command has been deleted. |
| The CommandBarControl has been deleted. |
| Invalid mask picture. |
| Invalid hot key modifier(s). |
| Invalid hot key code. |
| Invalid hot key combination. |
| Invalid image. |
| Invalid category. |
| The control does not have a valid CommandBarControl. |
| The Command for the CommandBarControl does not support images. |
| Unsupported control type for this operation. |
| Property is read-only for this object. |
| The CommandBar could not be reset. |
| The Category has been deleted. |
| The HotKey has been deleted. |
| This command cannot contain instances of itself. |
| Form does not have a valid handle (hWnd). |
| Form is already a child window. |
| Form.StartupPosition property must be Manual. |
| The specified data does not appear to contain valid language information. |
| The specified language data is in a format than cannot be understood by this version of the DockStudio control. |
| The PopupWindow has been closed. |
| XML persistence requires version 4 or later of MSXML |
| The specified data does not appear to contain valid XML. |
| The main control window has not yet been created. |
| &Restore |
| &Move |
| &Size |
| Mi&nimize |
| Ma&ximize |
| &Close |
| New &Horizontal Tab Group |
| New &Vertical Tab Group |
| Move to &Next Tab Group |
| Move to &Previous Tab Group |
| Nex&t |
| &Hide |
| &Floating |
| &Auto Hide |
| &Add or Remove Buttons |
| &Reset Toolbar |
| &Customize... |
| Toolbar Options |
| &Reset |
| &Delete |
| &Name: |
| &Copy Button Image |
| &Paste Button Image |
| Re&set Button Image |
| &Edit Button Image... |
| Change &Button Image |
| Defa&ult Style |
| &Text Only (Always) |
| Text &Only (in Menus) |
| Image &and Text |
| Begin a &Group |
| (None) |
| Random |
| Unfold |
| Slide |
| Fade |
| (System default) |
| Customize |
| Tool&bars |
| &Commands |
| &Options |
| Close |
| &Keyboard... |
| &New... |
| R&ename... |
| &Delete |
| &Reset... |
| Toolb&ars: |
| To add a command to a toolbar: select a category and drag the command out of this dialog box to a toolbar. |
| Comman&ds: |
| Cate&gories: |
| Selected command: |
| Descri&ption |
| &Modify Selection |
| Personalized Menus and Toolbars |
| Me&nus show recently used commands first |
| Show f&ull menus after a short delay |
| &Reset my usage data |
| Other |
| &Large icons |
| List &font names in their font |
| Show Screen&Tips on toolbars |
| Show s&hortcut keys in ScreenTips |
| &Menu animations: |
| New Toolbar |
| Rename Toolbar |
| OK |
| Cancel |
| &Toolbar name: |
| The toolbar name cannot be blank. You must type a name for your new toolbar. |
| A toolbar named '%s' already exists. You must type a unique name for your toolbar. |
| Are you sure that you want to delete the '%s' toolbar? |
| Delete Toolbar |
| Are you sure that you want to reset the changes made to the '%s' toolbar? |
| Reset Toolbar |
| Customize Keyboard |
| Close |
| &Assign |
| &Remove |
| Re&move All |
| &Categories: |
| C&ommands: |
| Press &new shortcut key: |
| C&urrent keys: |
| Specify a command |
| Specify keyboard sequence |
| Description |
| Currently assigned to: |
| The command name can not be blank. Type a name. |
| Button Editor |
| Picture |
| Colors |
| Erase: |
| Move |
| Preview |
| OK |
| Cancel |
| &Clear |
| The current design-time container (Microsoft Visual C++ .Net) does not fully support the DockStudioXP layout design features. In order to visually design a layout, you must select the 'Edit Control' option from the form designer's context menu. |
| The current design-time container (Microsoft Visual C++) does not support the DockStudioXP layout design features. In order to visually design a layout, you must use the external layout designer application and load your layout at run-time. |
| The current design-time container does not appear to fully support the DockStudioXP layout design features. In order to visually design a layout, you may need to use the external layout designer application and load your layout at run-time. |
| The current design-time container (Microsoft Access) does not fully support the DockStudioXP layout design features. In order to visually design a layout, you must activate the DockStudio control by selecting it and then single-clicking it again. |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 2.1.0.144 |
| ProductVersion | 2.1.0.144 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_DLL
|
| Language | English - United States |
| Comments | http://www.innovasys.com |
| CompanyName | Innovasys Ltd. |
| FileDescription | Innovasys DockStudioXP Control 2.1 |
| FileVersion (#2) | 2.1.0144 |
| InternalName | InnovaDSXP2 |
| LegalCopyright | Copyright © 2001-2005 Innovasys Ltd. All Rights Reserved. |
| OriginalFilename | InnovaDSXP2.OCX |
| ProductName | Innovasys DockStudioXP |
| ProductVersion (#2) | 2.1.0144 |
| Resource LangID | English - United States |
|---|
TLS Callbacks
Load Configuration
| Size | 0x48 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0xc33d124 |
| SEHandlerTable | 0xc323d20 |
| SEHandlerCount | 1094 |
RICH Header
| XOR Key | 0x2d87c8f |
|---|---|
| Unmarked objects | 0 |
| 105 (2067) | 4 |
| ASM objects (VS2003 (.NET) build 3077) | 23 |
| C objects (VS2003 (.NET) build 3077) | 118 |
| C objects (2179) | 7 |
| Imports (2067) | 2 |
| Imports (2179) | 16 |
| Imports (9210) | 7 |
| Total imports | 407 |
| C++ objects (VS2003 (.NET) build 3077) | 219 |
| Exports (VS2003 (.NET) build 3077) | 1 |
| 94 (VS2003 (.NET) build 3052) | 1 |
| Linker (VS2003 (.NET) build 3077) | 1 |
Errors
Leave a comment
No comments yet.