Analysis Date2013-11-09 08:51:58
MD5899ae574023b4eb95234c2715e8b0955
SHA1f0db2201814778fa21c61efc6855dbc4afb4daa0

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 8f7872caf72971bcd874818de83c3702 sha1: 584643e7cf9866af5ee1d2435072b550f601ed8b size: 1024
Section.rdata md5: a03226ca4b8010c621544a4d13404227 sha1: 42564e54605d85d74428f33197253563e6c3e3fb size: 512
Section.data md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.rsrc md5: bc3af3df5d7ef6efa414121939eb9fda sha1: ef132da694709e024cf091a355d3dc8604545c17 size: 38400
Timestamp2008-05-10 16:51:05
PEhash0bf67f7ad464d74fa1a518c2c775122509bd50c4
AVavgBackDoor.Generic17.AIVF
AVaviraTR/Dropper.Gen

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\wudreludomki ➝
C:\Documents and Settings\Administrator\wudreludomki.exe
RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\AppManagement ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\wudreludomki.exe
Creates FileC:\Documents and Settings\Administrator\Application Data\Microsoft\Crypto\RSA\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-500\a18ca4003deb042bbee7a40f15e1970b_666939c9-243b-475e-9504-51724db22670
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Creates Mutexwudreludomki

Network Details:

DNStalktalk.net
Type: A
193.118.251.141
DNSintelnet.net.gt
Type: A
200.6.192.206
DNSit.dk
Type: A
212.242.42.44
DNSmarkbrent.com
Type: A
50.63.127.1
DNSmail.earthlink.net
Type: A
209.86.93.202
DNSmail.earthlink.net
Type: A
209.86.93.203
DNSmail.earthlink.net
Type: A
209.86.93.204
DNSmail.earthlink.net
Type: A
209.86.93.205
DNSmail.earthlink.net
Type: A
209.86.93.206
DNSmail.earthlink.net
Type: A
209.86.93.207
DNSmail.earthlink.net
Type: A
209.86.93.208
DNSmail.earthlink.net
Type: A
209.86.93.209
DNSmail.earthlink.net
Type: A
209.86.93.210
DNSmail.earthlink.net
Type: A
209.86.93.211
DNSmail.earthlink.net
Type: A
209.86.93.201
DNSactuslendlease.com
Type: A
8.22.192.153
DNSsprintmail.com
Type: A
209.86.93.136
DNSsprintmail.com
Type: A
209.86.93.126
DNSsprintmail.com
Type: A
209.86.93.127
DNSsprintmail.com
Type: A
209.86.93.128
DNSsprintmail.com
Type: A
209.86.93.129
DNSsprintmail.com
Type: A
209.86.93.130
DNSsprintmail.com
Type: A
209.86.93.131
DNSsprintmail.com
Type: A
209.86.93.132
DNSsprintmail.com
Type: A
209.86.93.133
DNSsprintmail.com
Type: A
209.86.93.134
DNSsprintmail.com
Type: A
209.86.93.135
DNScocmast.net
Type: A
108.175.168.94
DNSexpn.com
Type: A
199.181.132.250
DNSwildmail.com
Type: A
217.70.184.38
DNShoymail.com
Type: A
65.55.39.12
DNShoymail.com
Type: A
207.46.31.61
DNSbluewin.ch
Type: A
195.186.196.90
DNSbluewin.ch
Type: A
195.186.145.90
DNSwilbursmith.com
Type: A
63.76.160.236
DNSdeloitte.com
Type: A
170.194.156.208
DNSdeloitte.com
Type: A
170.194.156.208
DNShappyhippo.com
Type: A
208.73.210.88
Flows TCP192.168.1.1:1038 ➝ 193.118.251.141:25
Flows TCP192.168.1.1:1039 ➝ 108.175.168.94:25
Flows TCP192.168.1.1:1040 ➝ 8.22.192.153:25
Flows TCP192.168.1.1:1041 ➝ 200.6.192.206:25
Flows TCP192.168.1.1:1042 ➝ 209.86.93.136:25
Flows TCP192.168.1.1:1043 ➝ 209.86.93.202:25
Flows TCP192.168.1.1:1044 ➝ 50.63.127.1:25
Flows TCP192.168.1.1:1045 ➝ 212.242.42.44:25
Flows TCP192.168.1.1:1046 ➝ 199.181.132.250:25
Flows TCP192.168.1.1:1047 ➝ 217.70.184.38:25
Flows TCP192.168.1.1:1048 ➝ 65.55.39.12:25
Flows TCP192.168.1.1:1049 ➝ 195.186.196.90:25
Flows TCP192.168.1.1:1050 ➝ 208.73.210.88:25
Flows TCP192.168.1.1:1051 ➝ 63.76.160.236:25
Flows TCP192.168.1.1:1052 ➝ 170.194.156.208:25
Flows TCP192.168.1.1:1053 ➝ 170.194.156.208:25

Raw Pcap
0x00000000 (00000)   aa294260 96504f52 6d151355 3a0b7857   .)B`.PORm..U:.xW
0x00000010 (00016)   541e245a dec5a05c 70297c5f 8280c961   T.$Z...\p)|_...a
0x00000020 (00032)   4cdf7364 19d5d866 6b326d69 b029e86b   L.sd...fk2mi.).k
0x00000030 (00048)   a5a01f6f bf7f3e71 8c757273 ded20676   ...o..>q.urs...v
0x00000040 (00064)   23ca8178 7527167b ba1e917d ff150c80   #..xu'.{...}....
0x00000050 (00080)   5173a082 de6d1b85 e8c7af87 25f9718a   Qs...m......%.q.
0x00000060 (00096)   7f1cbf8c c4133a8f 090bb591 5b684994   ......:.....[hI.
0x00000070 (00112)   1861da96 f2bc5899 df33909c 9111689e   .a....X..3....h.
0x00000080 (00128)   ce08e3a0 13                           .....

0x00000000 (00000)   f8e2a865 7ed8a268 48374d6b 2293cb6d   ...e~..hH7Mk"..m
0x00000010 (00016)   9f405e70 b9e7da72 4b4bb675 5da20378   .@^p...rKK.u]..x
0x00000020 (00032)   2701ae7a 015d2c7d 53bac07f 98b13b82   '..z.],}S.....;.
0x00000030 (00048)   ea0ed084 b46dab87 8163df89 d3c0738c   .....m...c....s.
0x00000040 (00064)   18b8ee8e 6a158391 bc721794 016a9296   ....j....r...j..
0x00000050 (00080)   10c05d9c 3eeb689e 5645fda0 b377bfa3   ..].>.h.VE...w..
0x00000060 (00096)   ed990ca6 3ff7a0a8 84ee1bab d64bb0ad   ....?........K..
0x00000070 (00112)   a0aa5ab0 6da0bfb2 877e10b6 0cf5ceb7   ..Z.m....~......
0x00000080 (00128)   565263ba a8aff7bc eda672bf b7054ec2   VRc.......r...N.
0x00000090 (00144)   91619bc4 d60e2ec7 30b6aac9 81133fcc   .a......0.....?.
0x000000a0 (00160)   bf0abace 11684ed1 dbc629d4 a8bc5dd6   .....hN...)...].
0x000000b0 (00176)   1a5539d9 4c8d9852 892419de 4bcdabe0   .U9.L..R.$..K...
0x000000c0 (00192)   35292ae3 7a20a5e5 c43351e8 56dbcdea   5)*.z ...3Q.V...
0x000000d0 (00208)   638860ed b52fef66 72286ef2 8484ecf4   c.`../.fr(n.....
0x000000e0 (00224)   9ee180f7 e3d811fa 112f9afd 879324ff   ........./....$.
0x000000f0 (00240)   6087a902 1ed1c480 23e13f83 e1f25a09   `.......#.?...Z.
0x00000100 (00256)   4395e10c 6c8c5c0f 1d08058f fd4b7b13   C...l.\......K{.
0x00000110 (00272)   35f90d16 87a08a18 15f9281c 500eb89b   5.........(.P...
0x00000120 (00288)   13d52e20 f6aacc23 babf5ba3 5a04d227   ... ...#..[.Z..'
0x00000130 (00304)   9ffb4c2a f158e12c 060c1234 18506cb4   ..L*.X.,...4.Pl.
0x00000140 (00320)   154bfa38 67f2763b ace9f13d fe468640   .K.8g.v;...=.F.@
0x00000150 (00336)   453e0143 03b4b3c3 da921048 94f1eb4a   E>.C.......H...J
0x00000160 (00352)   7e4d394d d0aacd4f aa42a952 11cc0f55   ~M9M...O.B.R...U
0x00000170 (00368)   56fdd157 50a0db5a e27efa5c 3f752e5f   V..WP..Z.~.\?u._
0x00000180 (00384)   01d2c261 46c98464 1420dc67 2a04236a   ...aF..d. .g*.#j
0x00000190 (00400)   fb76eb6c 81c106eb 86d181ed 172d8573   .v.l.........-.s
0x000001a0 (00416)   258caaf2 c29bb2f6 01df6f7b 4ed6a37d   %.........o{N..}
0x000001b0 (00432)   bc4d56fe ea90cc82 31884785 81e5f905   .MV.....1.G.....
0x000001c0 (00448)   4edd568a 183aeb8c 0d2d7090 eb8efa91   N.V..:...-p.....
0x000001d0 (00464)   c1cf0411 b2c6df91 6d565416 4fee2f19   ........mVT.O./.
0x000001e0 (00480)   010d871c f6381e1e f87caa9e 51da3ea1   .....8...|..Q.>.
0x000001f0 (00496)   efa2b525 a1133a29 b28ce2a8 286c5dab   ...%..:)....(l].
0x00000200 (00512)   7cc9d32f cc266832 111ee334 87778138   |../.&h2...4.w.8
0x00000210 (00528)   b5a809ba 2acc903d d63eabbb 9124b4bf   ....*..=.>...$..
0x00000220 (00544)   e4812a44 35dfbe46 7aa637c9 cc33ce4b   ..*D5..Fz.7..3.K
0x00000230 (00560)   b15b6f4e 0785e751 b5656fd3 9ed9f656   .[oN...Q.eo....V
0x00000240 (00576)   f0ea12d5 e52d065c 7a4022da 356c22e0   .....-.\z@".5l".
0x00000250 (00592)   7ab39de2 cc403465 2538af67 6495436a   z....@4e%8.gd.Cj
0x00000260 (00608)   b5f2d76c fae9526f 5c47e771 9ea47b74   ...l..Ro\G.q..{t
0x00000270 (00624)   e39bf676 35f98a79 7af0057c cc4d9a7e   ...v5..yz..|.M.~
0x00000280 (00640)   1eab2e81 6372a703 3c175c04 ab7bf888   ....cr..<.\..{..
0x00000290 (00656)   9450578c 9eb1e18d efa56691 35ef810f   .PW.......f.5...
0x000002a0 (00672)   67141712 cb5a                         g....Z

0x00000000 (00000)   d036bff6 49c69ff9 13254afc e01aaffe   .6..I....%J.....
0x00000010 (00016)   8a485b01 88ced305 4eca1409 53bb480b   .H[.....N...S.H.
0x00000020 (00032)   1d1af30d ea0f5810 2f07d312 81646715   ......X./....dg.
0x00000030 (00048)   c65be217 8354a41a 5db0f11c a2a76c1f   .[...T..].....l.
0x00000040 (00064)   f4040122 39fc7b24 7ef3f626 d0508b29   ..."9.{$~..&.P.)
0x00000050 (00080)   8d49c22c 5041812e ac9c1531 c9d5d733   .I.,PA.....1...3
0x00000060 (00096)   43f12436 88e89f38 cddf1a3b 1f3daf3d   C.$6...8...;.=.=
0x00000070 (00112)   dc354040 a92ba542 9311f645 4880b447   .5@@.+.B...EH..G
0x00000080 (00128)   85772f4a d7d4c34c 1ccc3e4f e62a1a52   .w/J...L..>O.*.R
0x00000090 (00144)   b3204e54 254efa56 52755d59 966cd85b   . NT%N.VRu]Y.l.[
0x000000a0 (00160)   e1c96c5e 33270161 fd85dc63 d7e12966   ..l^3'.a...c..)f
0x000000b0 (00176)   09810569 6e4c4be2 d863e56d 6d8c5e70   ...inLK..c.mm.^p
0x000000c0 (00192)   57e8dc72 9cdf5775 060d0478 6b34677a   W..r..Wu...xk4gz
0x000000d0 (00208)   a561137d ca8888f6 87810782 99dd8584   .a.}............
0x000000e0 (00224)   a6d4                                  ..

0x00000000 (00000)   befbbd9b 44f1b79e 0e5062a1 db45c7a3   ....D....Pb..E..
0x00000010 (00016)   9d5a73a6 b2d61da9 f79798ab fc88ccad   .Zs.............
0x00000020 (00032)   c6e776b0 93dddbb2 d8d456b5 1dccd1b7   ..v.......V.....
0x00000030 (00048)   6f2966ba 2c2228bd f9175cbf 3e0fd7c1   o)f.,"(...\.>...
0x00000040 (00064)   830652c4 d563e6c6 1a5b61c9 5f52dccb   ..R..c...[a._R..
0x00000050 (00080)   1c4b13cf fc43d2d0 3b9e66d3 b8d128d6   .K...C..;.f...(.
0x00000060 (00096)   c58c5cd8 0a84d7da 4f7b52dd a1d8e6df   ..\.....O{R.....
0x00000070 (00112)   5ed177e2 2bc7dce4 e04014e8 ca1bece9   ^.w.+....@......
0x00000080 (00128)   071367ec 4c0ae2ee 9e6776f1 5b6038f4   ..g.L....gv.[`8.
0x00000090 (00144)   28566cf6 a504fff8 ba4462fb 0ba2f6fd   (Vl......Db.....
0x000000a0 (00160)   499971                                I.q

0x00000000 (00000)   48fe9df2 cef397f5 985242f8 72aec0fa   H........RB.r...
0x00000010 (00016)   877053fd 0903d0ff 9b66ab02 ba231205   .pS......f...#..
0x00000020 (00032)   771ca307 8aabda52 48f530d5 db5044d8   w......RH.0..PD.
0x00000030 (00048)   2048bfda eaa69add b79ccedf 09fa62e2    H............b.
0x00000040 (00064)   4ef1dde4 a04e72e7 e545ede9 37a381ec   N....Nr..E..7...
0x00000050 (00080)   0102d2ef 8fc4c3f1 2dbb3ef4 37591af7   ........-.>.7Y..
0x00000060 (00096)   c40f4ef9 166de2fb 5b645dfe adc1f1     ..N..m..[d]....

0x00000000 (00000)   743ed16e 14                           t>.n.

0x00000000 (00000)   f1bcb8ca 8418cccd 41115dd0 1b6ddbd2   ........A.]..m..
0x00000010 (00016)   f8276ed5 520132d8 4425c6da 4916fadc   .'n.R.2.D%..I...
0x00000020 (00032)   1375a4df e06a09e2 32c89de4 77bf18e7   .u...j..2...w...
0x00000030 (00048)   c91cade9 a07778ef bf346af1 042ce5f3   .....wx..4j..,..
0x00000040 (00064)   492360f6 9b80f4f8 e0776ffb 256feafd   I#`......wo.%o..
0x00000050 (00080)   efcd3a01 4ac5f902 0e218e05 eb575008   ..:.J....!...WP.
0x00000060 (00096)   a5759d0a ea6c180d 2f64930f 81c12712   .u...l../d....'.
0x00000070 (00112)   3ebab814 18163717 b5936e1a b76a461c   >.....7...n..jF.
0x00000080 (00128)   f461c11e 39593c21 8bb6d023 d0ad4b26   .a..9Y<!...#..K&
0x00000090 (00144)   220be028 c7c5722b b4f9d52d 05576a30   "..(..r+...-.Wj0
0x000000a0 (00160)   434ee532 95ab7935 52a4b038 9c02d03a   CN.2..y5R..8...:
0x000000b0 (00176)   61f3ad3e c36aaab6 600f2b42 c2aabd44   a..>.j..`.+B...D
0x000000c0 (00192)   9fa02247 e4979d49 8eb8494c c052c64e   .."G...I..IL.R.N
0x000000d0 (00208)   3a737251 2c0d01cb f66b9956 fb61fe58   :srQ,....k.V.a.X
0x000000e0 (00224)   35bf925b 671c3d5e 880c4c62 f10a1d63   5..[g.=^..Lb...c
0x000000f0 (00240)   d7645b67 8848bde4 9abe51e7 ab77536d   .d[g.H....Q..wSm
0x00000100 (00256)   ad0c7a71 d603f573 877ffdf2 5a5d5a77   ..zq...s....Z]Zw
0x00000110 (00272)   ff7d067a e4b1697c 65a48e80 ad1f97ff   .}.z..i|e.......
0x00000120 (00288)   6380f483 46563288 0a6b2107 aaaf978b   c...FV2..k!.....
0x00000130 (00304)   efa6128e 349e8d90 75f7cb94 1f0bbb13   ....4...u.......
0x00000140 (00320)   7c134998 6147ac9a b3a4409d f89bbb9f   |.I.aG....@.....
0x00000150 (00336)   3f9336a2 fd08e922 d4e745a7 824621aa   ?.6...."..E..F!.
0x00000160 (00352)   6b3c55ac bd99e9ae 0ad0abb1 d788dfb3   k<U.............
0x00000170 (00368)   a924bbb6 a662abb9 a03ccabb 0532febd   .$...b...<...2..
0x00000180 (00384)   c78e92c0 0c8654c3 dadc4bc7 7360d9c8   ......T...K.s`..
0x00000190 (00400)   c1335bcc 3a18bd49 3f28384c d0833bd2   .3[.:..I?(8L..;.
0x000001a0 (00416)   d17c4751 7bf26855 adcf0cda 072d5adc   .|GQ{.hU.....-Z.
0x000001b0 (00432)   683ef35c 968169e1 dd78e4e3 9aeb1d58   h>.\..i..x.....X
0x000001c0 (00448)   72cdf3e8 b9c46eeb 0922a85f 8a197ef0   r.....n.."._..~.
0x000001d0 (00464)   3473bcf4 7c3bad73 37cb21f8 452460fc   4s..|;.s7.!.E$`.
0x000001e0 (00480)   d8e70dff 6d1405                       ....m..

0x00000000 (00000)   bfcc468c 385c278f 8ab9bb91 cfb03694   ..F.8\'.......6.
0x00000010 (00016)   14a8b196 e6438d99 eb02089c fd59559e   .....C.......YU.
0x00000020 (00032)   4251d0a0 94ae64a3 d9a5dfa5 1e9d5aa8   BQ....d.......Z.
0x00000030 (00048)   70faeeaa f5f725ae 074ffeaf 4c4679b2   p.....%..O..LFy.
0x00000040 (00064)   9ea30db5 e39a88b7 289203ba 7aef97bc   ........(...z...
0x00000050 (00080)   37e8cebf 0ade8dc1 563b22c4 1371e4c6   7.......V;"..q..
0x00000060 (00096)   ed8f31c9 3287accb 84e440ce c9dbbbd0   ..1.2.....@.....
0x00000070 (00112)   0ed336d3 6030cbd5 ddac02d9 ff84dada   ..6.`0..........
0x00000080 (00128)   564888dd 9b3f03e0 18c8dfe4 b8890ce8   VH...?..........
0x00000090 (00144)   fd8087ea 4fde1bed 9cd596ef ed322bf2   ....O........2+.
0x000000a0 (00160)   2b2aa6f4 85873af7 3a8071fa a4df90fc   +*....:.:.q.....
0x000000b0 (00176)   49cf46                                I.F

0x00000000 (00000)   ae84cc26 e1a10c2d fd5d4b32 1cb14437   ...&...-.]K2..D7
0x00000010 (00016)   3023853c 8a96aa41 21b5b946 6b9d684b   0#.<...A!..Fk.hK
0x00000020 (00032)   8759a750 99468755 309b965a c7efa55f   .Y.P.F.U0..Z..._
0x00000030 (00048)   5e44b564 7a                           ^D.dz

0x00000000 (00000)   6baee12c c5fd6d33 e5b2a83a 45042140   k..,..m3...:E.!@
0x00000010 (00016)   c6ef7a45 a745a54a b2386150 3d1f8f55   ..zE.E.J.8aP=..U
0x00000020 (00032)   59dbcd5a bec799a8 dbd49d2d e7bf9133   Y..Z.......-...3
0x00000030 (00048)   98e0d338 b49c433e e0552543 84104e48   ...8..C>.U%C..NH
0x00000040 (00064)   1b655d4d f3b7eb52 a4d82d58 4893565d   .e]M...R..-XH.V]
0x00000050 (00080)   644f3b63 51d5da67 685b366d de22d972   dO;cQ..gh[6m.".r
0x00000060 (00096)   bd36a177 6e57e37c 05acf281 d0986787   .6.wnW.|......g.
0x00000070 (00112)   f9babf8c 32daeb91 41b6b797 75e9239c   ....2...A...u.#.
0x00000080 (00128)   11a44ca1 cf2aa8a6 8db103ac a96d73b1   ..L..*.......ms.
0x00000090 (00144)   d52655b6 04467cbb 259ca6c0 bbf0b5c5   .&U..F|.%.......
0x000000a0 (00160)   8c4344cb 3d6486d0 5920f6d5 85d9d7da   .CD.=d..Y ......
0x000000b0 (00176)   e9d447e0 cd643b5c f46d50ea 705f77ef   ..G..d;\.mP.p_w.
0x000000c0 (00192)   d34ad6f4 91d131fa b8f058ff f77a5004   .J....1...X..zP.
0x000000d0 (00208)   ee997709 cee32c89 c7660919 1eba021e   ..w...,..f......
0x000000e0 (00224)   db569a2b e741a431 2af0053a 6552f649   .V.+.A.1*..:eR.I
0x000000f0 (00240)   053abc51 087b8ad1 40a845da 61bbd565   .:.Q.{..@.E.a..e
0x00000100 (00256)   cb0a516d 53c57972 569eeef3 7bd9df7a   ..QmS.yrV...{..z
0x00000110 (00272)   aa5e2080 a9e81785 899e128c 16116e0d   .^ ...........n.
0x00000120 (00288)   5267c594 94                           Rg...

0x00000000 (00000)   e0412e8b 135f6e91 c9ed92a3 a608e62c   .A..._n........,
0x00000010 (00016)   0db26e34 c64ee039 0ad0083f 611ed143   ..n4.N.9...?a..C
0x00000020 (00032)   7dda0f49 b57e1654 669f5859 fdf3675e   }..I.~.Tf.XY..g^
0x00000030 (00048)   a1ae9063 bd                           ...c.

0x00000000 (00000)   431540b8 353401be d9ee29c3 63dd1fc8   C.@.54....).c...
0x00000010 (00016)   fa312fcd 1e2b9fd2 68e194d7 cc9576dc   .1/..+..h.....v.
0x00000020 (00032)   63ea85e1 fa3e95e6 9193a4eb 28e8b3f0   c....>......(...
0x00000030 (00048)   bf3cc3f5 0b2e73fc 7c48f9              .<....s.|H.

0x00000000 (00000)   bb7d276e 3a                           .}'n:

0x00000000 (00000)   6ffcab33 611b6d39 7dd7ab3e 97b68347   o..3a.m9}..>...G
0x00000010 (00016)   fb718f4d 4b559c54 b50b065d 6135396c   .q.MKU.T...]a59l
0x00000020 (00032)   a423c471 c376bd76 5acbcc7b fe85f580   .#.q.v.vZ..{....
0x00000030 (00048)   95da0486 a4305b8b d0e93c90 673e4c95   .....0[...<.g>L.
0x00000040 (00064)   0bf9749a a24d849f 39a293a4 dd5cbca9   ..t..M..9....\..
0x00000050 (00080)   ecb287af 0108dbb3 afc003b9 1e575abe   .............WZ.
0x00000060 (00096)   f73555c3 81244bc8 18795acd c9999cd2   .5U..$K..yZ.....
0x00000070 (00112)   d8efc1d7 f742bbdc 3386a0e2 3a52f3e6   .....B..3...:R..
0x00000080 (00128)   c9a602ec 60fb11f1 04b63af6 2072aafb   ....`.....:. r..
0x00000090 (00144)   3fc572                                ?.r

0x00000000 (00000)   f9e6a83c d0be1148 fa755b7a 74930680   ...<...H.u[zt...
0x00000010 (00016)   9adc7985 29acb88a 527295a8 70cea2e3   ..y.)...Rr..p...
0x00000020 (00032)   b3bc2de9 df7540ee 9dfc9bf3 d019dcf9   ..-..u@.........
0x00000030 (00048)   813a1eff 5895e904 0aaeee09 a102fe0e   .:..X...........
0x00000040 (00064)   5f895914 10aa9b19 db96101f 7f513924   _.Y..........Q9$
0x00000050 (00080)   9b0d1e2a 3ec30730 21161735 1d0e873a   ...*>..0!..5...:
0x00000060 (00096)   39ecfe40 d0400e46 74fb364b 3fe8ab50   9..@.@.Ft.6K?..P
0x00000070 (00112)   4e3ed155 ae8f495b 5d681561 e4386865   N>.U..I[]h.a.8he
0x00000080 (00128)   80f3906a 3099ad75 a8ad687e d6568788   ...j0..u..h~.V..
0x00000090 (00144)   d5db618e 9cf28893 18eb9998 64d40c9f   ..a.........d...
0x000000a0 (00160)   018f35a4 cc7baaa9 dbd175af aa2910b4   ..5..{....u..)..
0x000000b0 (00176)   b50d98ba 5c7c5f35 d111d8c4 b50bffc9   ....\|_5........
0x000000c0 (00192)   e45ef8ce 4b149ed5 0a2bc5da d8ef08e0   .^..K....+......
0x000000d0 (00208)   746c49e5 61f44c64 7db079f2 e1698cf7   tlI.a.Ld}.y..i..
0x000000e0 (00224)   1a4cfbff ab6c5305 ee1a3d0d a976f210   .L...lS...=..v..
0x000000f0 (00240)   0860c117 0ba10798 8940639d d6212c26   .`.......@c..!,&
0x00000100 (00256)   4049642c bb9d7331 be7660b3 0ae49d3a   @Id,..s1.v`....:
0x00000110 (00272)   d160de3f 38f3d544 fedc254b e99781d5   .`.?8..D..%K....
0x00000120 (00288)   3fba0b5d 74ed8d63 97c57ae5 7c016c6c   ?..]t..c..z.|.ll
0x00000130 (00304)   13567b71 bc24879f 90d988a6 99b07528   .V{q.$........u(
0x00000140 (00320)   181598af 9973c2b4 3d2eebb9 e1e813bf   .....s..=.......
0x00000150 (00336)   646aecc5 81a34c49 aadf3dd0 b69badd5   dj....LI..=.....
0x00000160 (00352)   bec98ff3 1e2f953c a4f23742 10711947   ...../.<..7B.q.G
0x00000170 (00368)   e701704c 369df451 f5728e56 6cc3565b   ..pL6..Q.r.Vl.V[
0x00000180 (00384)   db473161 729c8766 9250c36c 3d2f3571   .G1ar..f.P.l=/5q
0x00000190 (00400)   0396c876 db3d28f7 32ab37fc fb979c84   ...v.=(.2.7.....
0x000001a0 (00416)   5b545606 57270c0d e8c75d94 94823f99   [TV.W'....]...?.
0x000001b0 (00432)   4879f82f f74aadd4 6d666cdb 7c363a52   Hy./.J..mfl.|6:R
0x000001c0 (00448)   a675a4e5 4c30cdea 151de761 610132f8   .u..L0.....aa.2.
0x000001d0 (00464)   f013c801 f2696884 f2f0570b 5f0df411   .....ih...W._...
0x000001e0 (00480)   5efa6817 791caa1b cd175492 d7a94797   ^.h.y.....T...G.
0x000001f0 (00496)   0a4fcb2a 1ba473a7 812acfac 10d0f7b1   .O.*..s..*......
0x00000200 (00512)   9cbe4845 65abbd4a 0966e64f c4b64f56   ..HEe..J.f.O..OV
0x00000210 (00528)   2a79e9d9 fe5f6e60 efc9b3e0 fc0cd8da   *y..._n`........
0x00000220 (00544)   9461426e 2ab65173 ce4078f8 722ba37d   .aBn*.Qs.@x.r+.}
0x00000230 (00560)   5617f282 5e9d4e89 5135010d 8c466d93   V...^.N.Q5...Fm.
0x00000240 (00576)   3d1be713 84bbbe9d 673f8935 aa3d       =.......g?.5.=

0x00000000 (00000)   cb5e01d0 e4af0ed6                     .^......


Strings
~$-	
{)"	
1998, All Rights Reserved
{827E9F50-96A4-11CF-823E-000021570103}
~9-	
{A8C3B720-0B5A-101B-B22E-00AA0037B2FC}
abRate
agMultRate
Antibody
Antigen
bareMHC
B-Cell
bystander
~c-	
display
Display
Distribution
divideB
divideT
Division
~F-	
gcSim 1.00 by Steven Kleinstein
General
Germinal Center Simulator
&Go!
Half-Life
iAPC
iBCell
indexMethod
Index Method:
injection
iTCell
lymphNode
MS Sans Serif
~o-	
Optio&ns...
pAPC_Ag
pAPC_IC
P-Cell
PMRatio
pMutate
pRemoveAg
sample
seed
See license.txt for license information
self
specificity
Static
Ste&p:
stevenk@cs.princeton.edu
~T-	
tauAb
tauAg
tauAPC
tauBCell (DZ)
tauBCell (LZ)
tauIC
tauMBCell
tauMTCell
tauPCell
tauTCell
T-Cell
TEXTINCLUDE(
Time:
Top-10
Totals
View
1gl.YG+:
\2wwn-c
)2y4SX
-37EP=
5c~yyc
6N3DA>
~BN,hY
#^BPaJ
ckS0j&{
*C)ye+
<d%>[6
#define _AFX_NO_OLE_RESOURCES
#define _AFX_NO_PROPERTY_RESOURCES
#define _AFX_NO_SPLITTER_RESOURCES
#define _AFX_NO_TRACKER_RESOURCES
.DXb'5]0
[E3vQ2
#endif
ExitProcess
gdi32.dll
GetModuleHandleA
GetObjectW
GetProcAddress
H66Ikq{
hA9.|}
i8-L&uM
#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_ENU)
#ifdef _WIN32
Ihr7I66
#include "afxres.h"
#include "afxres.rc"         // Standard components
j>CTc,
jew`Jo
@J.MOa\
kernel32.dll
khn_xx
LANGUAGE 9, 1
LoadImageA
lxq#m4o^
MessageBoxW
M<t[7]
*ngIsy
]NZuqt
~:O@G,G
]o$wt&9(K.
PQJGnl
#pragma code_page(1252)
q,^9PW
r"/AXF{
.rdata
ROw/V8o
rQ\$"!
shared.h
!This program cannot be run in DOS mode.
?TY,EV
UjCW	y
#uOI'>{{
user32.dll
+'&~v+
VH mnw
VJ't Q
V*r}{B
@wl)9{yqO
	WX%oTH@>
@w-y]O
"X+FIr
XX*;"W
yRjC{X
`yV|qLi
Z=beWD
zf}!+JTv
`z#n89;