Skip to content

Commit a52b2e3

Browse files
cpucpu
committed
pijector: add built artifacts and tdumps
1 parent 4bf1084 commit a52b2e3

File tree

4 files changed

+464
-0
lines changed

4 files changed

+464
-0
lines changed

‎pijector/calc.infected.exe

60 KB
Binary file not shown.

‎pijector/calc.infected.exe.tdump.txt

Lines changed: 365 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,365 @@
1+
Turbo Dump Version 4.2.16.1 Copyright (c) 1988, 1996 Borland International
2+
Display of File CALC.INFECTED.EXE
3+
4+
Old Executable Header
5+
6+
DOS File Size F000h ( 61440. )
7+
Load Image Size 450h ( 1104. )
8+
Relocation Table entry count 0000h ( 0. )
9+
Relocation Table address 0040h ( 64. )
10+
Size of header record (in paragraphs) 0004h ( 4. )
11+
Minimum Memory Requirement (in paragraphs) 0000h ( 0. )
12+
Maximum Memory Requirement (in paragraphs) FFFFh ( 65535. )
13+
File load checksum 0000h ( 0. )
14+
Overlay Number 0000h ( 0. )
15+
16+
Initial Stack Segment (SS:SP) 0000:00B8
17+
Program Entry Point (CS:IP) 0000:0000
18+
19+
20+
Portable Executable (PE) File
21+
22+
Header base: 00000080
23+
24+
CPU type 80386
25+
Flags 10E [ executable backwards 32bit ]
26+
DLL flags 0000 [ ]
27+
Linker Version 2.32
28+
Time stamp 2FF353DB
29+
O/S Version 1.0
30+
User Version 0.0
31+
Subsystem Version 4.0
32+
Subsystem 0002 [ Windows GUI ]
33+
Object count 00000007
34+
Symbols offset 00000000
35+
Symbols count 00000000
36+
Optional header size 00E0
37+
Magic # 10B
38+
Code size 00009800
39+
Init Data size 00004C00
40+
Uninit Data size 00000A00
41+
Entry RVA 00013000
42+
Image base 00400000
43+
Code base 00001000
44+
Data base 0000B000
45+
Object/File align 00001000/00000200
46+
Reserved 00000000
47+
Image size 00013000
48+
Header size 00000400
49+
Checksum 00011EAA
50+
Stack reserve/commit 00100000/00001000
51+
Heap reserve/commit 00100000/00001000
52+
Number interesting RVAs 00000010
53+
Name RVA Size
54+
------------------ -------- --------
55+
Exports 00000000 00000000
56+
Imports 0000E000 00000B64
57+
Resources 0000F000 000015CC
58+
Exceptions 00000000 00000000
59+
Security 00000000 00000000
60+
Fixups 00011000 00000EB4
61+
Debug 00000000 00000000
62+
Description 00000000 00000000
63+
TLS 00000000 00000000
64+
Callbacks 00000000 00000000
65+
reserved 00000000 00000000
66+
reserved 00000000 00000000
67+
reserved 00000000 00000000
68+
reserved 00000000 00000000
69+
reserved 00000000 00000000
70+
71+
Object table:
72+
# Name VirtSize RVA PhysSize Phys off Flags
73+
-- -------- -------- -------- -------- -------- --------
74+
01 .text 000096B0 00001000 00009800 00000400 60000020 [CER]
75+
02 .bss 0000094C 0000B000 00000000 00000000 C0000080 [URW]
76+
03 .data 00001700 0000C000 00001800 00009C00 C0000040 [IRW]
77+
04 .idata 00000B64 0000E000 00000C00 0000B400 40000040 [IR]
78+
05 .rsrc 000015CC 0000F000 00001600 0000C000 40000040 [IR]
79+
06 .reloc 00001040 00011000 00001200 0000D600 42000040 [IDR]
80+
07 .ireloc 00001000 00013000 00000800 0000E800 E0000020 [CERW]
81+
82+
Key to section flags:
83+
C - contains code
84+
D - discardable
85+
E - executable
86+
I - contains initialized data
87+
R - readable
88+
U - contains uninitialized data
89+
W - writeable
90+
91+
Imports from SHELL32.dll
92+
ShellAboutA(hint = 0032)
93+
94+
Imports from KERNEL32.dll
95+
GlobalUnlock(hint = 0171)
96+
GlobalAlloc(hint = 0160)
97+
GlobalReAlloc(hint = 016d)
98+
GlobalSize(hint = 016e)
99+
GlobalCompact(hint = 0161)
100+
GlobalFree(hint = 0167)
101+
GlobalLock(hint = 016b)
102+
lstrlenA(hint = 02c2)
103+
lstrcatA(hint = 02b3)
104+
WriteProfileStringA(hint = 02a4)
105+
GetModuleHandleA(hint = 010e)
106+
GetStartupInfoA(hint = 0137)
107+
GetEnvironmentStrings(hint = 00f0)
108+
GetCommandLineA(hint = 00c0)
109+
Sleep(hint = 025d)
110+
lstrcmpA(hint = 02b6)
111+
GetProfileStringA(hint = 0132)
112+
UnhandledExceptionFilter(hint = 0273)
113+
GetModuleFileNameA(hint = 010c)
114+
GetACP(hint = 00b6)
115+
GetOEMCP(hint = 0118)
116+
GetCPInfo(hint = 00b9)
117+
GetStdHandle(hint = 0139)
118+
GetFileType(hint = 00fd)
119+
VirtualFree(hint = 027f)
120+
VirtualAlloc(hint = 027e)
121+
RaiseException(hint = 01e2)
122+
MultiByteToWideChar(hint = 01c2)
123+
WideCharToMultiByte(hint = 028e)
124+
GetProcAddress(hint = 0125)
125+
GetLastError(hint = 0104)
126+
LocalAlloc(hint = 01a1)
127+
LocalReAlloc(hint = 01a8)
128+
lstrcpyA(hint = 02bc)
129+
GetProfileIntA(hint = 012e)
130+
GetTickCount(hint = 0151)
131+
LocalFree(hint = 01a5)
132+
GetVersion(hint = 0157)
133+
ExitProcess(hint = 0076)
134+
RtlUnwind(hint = 01fa)
135+
136+
Imports from USER32.dll
137+
WinHelpA(hint = 0225)
138+
GetDC(hint = 00d8)
139+
GetWindowRect(hint = 0124)
140+
CreateDialogParamA(hint = 0046)
141+
CheckRadioButton(hint = 0031)
142+
LoadStringA(hint = 0168)
143+
RegisterClassExA(hint = 0196)
144+
GetSysColorBrush(hint = 0114)
145+
LoadCursorA(hint = 015a)
146+
LoadIconA(hint = 015e)
147+
SetDlgItemTextA(hint = 01c6)
148+
GetDlgItem(hint = 00dd)
149+
FillRect(hint = 00b9)
150+
SetRect(hint = 01db)
151+
CheckMenuItem(hint = 002f)
152+
GetSubMenu(hint = 0112)
153+
GetMenu(hint = 00f3)
154+
SetWindowPos(hint = 01ec)
155+
MapDialogRect(hint = 016e)
156+
InvalidateRect(hint = 013b)
157+
SetFocus(hint = 01c9)
158+
IsIconic(hint = 014d)
159+
GetSysColor(hint = 0113)
160+
DestroyMenu(hint = 0080)
161+
TrackPopupMenuEx(hint = 020a)
162+
LoadMenuA(hint = 0164)
163+
ReleaseCapture(hint = 01a2)
164+
SetCapture(hint = 01b8)
165+
GetDlgCtrlID(hint = 00dc)
166+
EnableMenuItem(hint = 00a5)
167+
IsClipboardFormatAvailable(hint = 0147)
168+
ReleaseDC(hint = 01a3)
169+
ScreenToClient(hint = 01a9)
170+
DestroyWindow(hint = 0081)
171+
PostQuitMessage(hint = 0190)
172+
DefWindowProcA(hint = 0078)
173+
MessageBeep(hint = 0175)
174+
GetWindowTextA(hint = 0126)
175+
DrawFrameControl(hint = 0099)
176+
GetClientRect(hint = 00cf)
177+
ShowCursor(hint = 01f6)
178+
SetCursor(hint = 01c0)
179+
EndPaint(hint = 00aa)
180+
DrawEdge(hint = 0096)
181+
BeginPaint(hint = 0009)
182+
CloseClipboard(hint = 0037)
183+
CharUpperA(hint = 002a)
184+
GetClipboardData(hint = 00d1)
185+
OpenClipboard(hint = 0187)
186+
SetWindowTextA(hint = 01ee)
187+
EnableWindow(hint = 00a7)
188+
CheckDlgButton(hint = 002e)
189+
ShowWindow(hint = 01f9)
190+
UpdateWindow(hint = 0219)
191+
CreateWindowExA(hint = 0050)
192+
SendMessageA(hint = 01af)
193+
LoadAcceleratorsA(hint = 0156)
194+
GetMessageA(hint = 00ff)
195+
TranslateAcceleratorA(hint = 020c)
196+
TranslateMessage(hint = 020f)
197+
IsDialogMessageA(hint = 0149)
198+
DispatchMessageA(hint = 0086)
199+
MessageBoxA(hint = 0176)
200+
201+
Imports from GDI32.dll
202+
GetStockObject(hint = 00bc)
203+
GetDeviceCaps(hint = 008e)
204+
GetTextMetricsA(hint = 00cd)
205+
SetTextColor(hint = 012d)
206+
SetBkColor(hint = 010c)
207+
TextOutA(hint = 013d)
208+
GetTextExtentPointA(hint = 00c9)
209+
SetBkMode(hint = 010d)
210+
SelectObject(hint = 0106)
211+
DeleteObject(hint = 0046)
212+
213+
Resources:
214+
Type Name Lang Id
215+
--------------------------------------------
216+
[0 named entries, 7 ID entries]
217+
3 (next directory @00000048)
218+
219+
[0 named entries, 2 ID entries]
220+
1 (next directory @00000128)
221+
222+
[0 named entries, 1 ID entries]
223+
1033 (data @00000278)
224+
Offset: 0000F6B8
225+
Size: 000002E8
226+
Code Page: 00000000
227+
Reserved: 00000000
228+
229+
2 (next directory @00000140)
230+
231+
[0 named entries, 1 ID entries]
232+
1033 (data @00000288)
233+
Offset: 0000F9A0
234+
Size: 00000128
235+
Code Page: 00000000
236+
Reserved: 00000000
237+
238+
4 (next directory @00000068)
239+
240+
[1 named entries, 1 ID entries]
241+
SM (next directory @00000158)
242+
243+
[0 named entries, 1 ID entries]
244+
1033 (data @00000298)
245+
Offset: 0000FE1C
246+
Size: 000000EE
247+
Code Page: 00000000
248+
Reserved: 00000000
249+
250+
4 (next directory @00000170)
251+
252+
[0 named entries, 1 ID entries]
253+
1033 (data @000002A8)
254+
Offset: 0000FF0C
255+
Size: 00000028
256+
Code Page: 00000000
257+
Reserved: 00000000
258+
259+
5 (next directory @00000088)
260+
261+
[2 named entries, 0 ID entries]
262+
SB (next directory @00000188)
263+
264+
[0 named entries, 1 ID entries]
265+
1033 (data @000002B8)
266+
Offset: 0000FCE4
267+
Size: 00000138
268+
Code Page: 00000000
269+
Reserved: 00000000
270+
271+
SC (next directory @000001A0)
272+
273+
[0 named entries, 1 ID entries]
274+
1033 (data @000002C8)
275+
Offset: 0000FAEC
276+
Size: 000001F6
277+
Code Page: 00000000
278+
Reserved: 00000000
279+
280+
6 (next directory @000000A8)
281+
282+
[0 named entries, 5 ID entries]
283+
1 (next directory @000001B8)
284+
285+
[0 named entries, 1 ID entries]
286+
1033 (data @000002D8)
287+
Offset: 00010194
288+
Size: 00000074
289+
Code Page: 00000000
290+
Reserved: 00000000
291+
292+
2 (next directory @000001D0)
293+
294+
[0 named entries, 1 ID entries]
295+
1033 (data @000002E8)
296+
Offset: 00010208
297+
Size: 00000056
298+
Code Page: 00000000
299+
Reserved: 00000000
300+
301+
3 (next directory @000001E8)
302+
303+
[0 named entries, 1 ID entries]
304+
1033 (data @000002F8)
305+
Offset: 00010260
306+
Size: 0000004E
307+
Code Page: 00000000
308+
Reserved: 00000000
309+
310+
4 (next directory @00000200)
311+
312+
[0 named entries, 1 ID entries]
313+
1033 (data @00000308)
314+
Offset: 000102B0
315+
Size: 00000076
316+
Code Page: 00000000
317+
Reserved: 00000000
318+
319+
5 (next directory @00000218)
320+
321+
[0 named entries, 1 ID entries]
322+
1033 (data @00000318)
323+
Offset: 00010328
324+
Size: 000002A2
325+
Code Page: 00000000
326+
Reserved: 00000000
327+
328+
9 (next directory @000000E0)
329+
330+
[1 named entries, 0 ID entries]
331+
SA (next directory @00000230)
332+
333+
[0 named entries, 1 ID entries]
334+
1033 (data @00000328)
335+
Offset: 0000FF34
336+
Size: 00000260
337+
Code Page: 00000000
338+
Reserved: 00000000
339+
340+
14 (next directory @000000F8)
341+
342+
[1 named entries, 0 ID entries]
343+
SC (next directory @00000248)
344+
345+
[0 named entries, 1 ID entries]
346+
1033 (data @00000338)
347+
Offset: 0000FAC8
348+
Size: 00000022
349+
Code Page: 00000000
350+
Reserved: 00000000
351+
352+
16 (next directory @00000110)
353+
354+
[0 named entries, 1 ID entries]
355+
1 (next directory @00000260)
356+
357+
[0 named entries, 1 ID entries]
358+
1033 (data @00000348)
359+
Offset: 0000F370
360+
Size: 00000348
361+
Code Page: 00000000
362+
Reserved: 00000000
363+
364+
365+

‎pijector/pijector.exe

8 KB
Binary file not shown.

0 commit comments

Comments
 (0)