General

  • Target

    3610510c5c81ed65985de667258c2fe852560161352eddf6becd85b8cd3e2f98

  • Size

    6.6MB

  • MD5

    7682a54f6b4fc38c43e39e9c3ddae1dd

  • SHA1

    be681133830050e17375bb890b34d9af728d05d2

  • SHA256

    3610510c5c81ed65985de667258c2fe852560161352eddf6becd85b8cd3e2f98

  • SHA512

    e934a996ce341bb549f296b6385fdae07e41c640f5aa4b45ff3d76e4f9b5b059646740481100d96644745480d5141fc62341a828f786aa6265e4d06c027fc4db

  • SSDEEP

    196608:D5X5LhULK1XghXn1qj9DuJQue205SShBQlDd:pUHhsjBVue204mB2d

Score
9/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 3610510c5c81ed65985de667258c2fe852560161352eddf6becd85b8cd3e2f98
    .rar
  • Config.ini
  • Dump/外挂飯館 外挂技术外挂制作外挂学习易语言外挂源码外挂教学 - Powered by Discuz!.URL
    .url
  • Dump/示例程序.ecf
  • E-Code Explorer.exe
    .exe windows x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • EThread.fne
    .dll windows x86

    361f7eaba33f73d14391191507c2ce2a


    Headers

    Imports

    Exports

    Sections

  • Example/ASProtect加壳后的示例程序.exe
    .exe windows x86


    Headers

    Sections

  • Example/外挂飯館 外挂技术外挂制作外挂学习易语言外挂源码外挂教学 - Powered by Discuz!.URL
    .url
  • Example/注意.txt
  • Example/示例程序.e
  • Example/示例程序_带花指令.exe
    .exe windows x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • ExtMenu.fne
    .dll windows x86

    85e55ca982fd8dda15c0ccd8ff47baae


    Headers

    Imports

    Exports

    Sections

  • LoadDLL.exe
    .exe windows x86

    3f83e7870d3d06e163a46ce2aafda844


    Headers

    Imports

    Sections

  • PlugIns/反调试器检测.dll
    .dll windows x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • PlugIns/外挂飯館 外挂技术外挂制作外挂学习易语言外挂源码外挂教学 - Powered by Discuz!.URL
    .url
  • PlugIns/花指令去除工具.dll
    .dll windows x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • PlugIns/花指令描述文件.ini
  • Procs32.dll
    .dll windows x86

    1e8665c92ab206ad146e7dc71835be7f


    Headers

    Imports

    Exports

    Sections

  • Symbol.dll
    .dll windows x86

    761bf5068cdd8138c4795d2cf556bc62


    Headers

    Imports

    Exports

    Sections

  • Symbol/BmpOperate.fne
    .dll windows x86

    62d43d2bf3a2bac75c825cf93452aae1


    Headers

    Imports

    Exports

    Sections

  • Symbol/CnCalendar.fne
    .dll windows x86

    106972dc337c9d90430041c768f0a72c


    Headers

    Imports

    Exports

    Sections

  • Symbol/CodeStyleEdit.fne
    .dll windows x86

    f465501239e543ee739e2bb842b3c6d0


    Headers

    Imports

    Exports

    Sections

  • Symbol/EChartBar.fne
    .dll windows x86

    3e8b1a8680dfc64cfc35293817a7254c


    Headers

    Imports

    Exports

    Sections

  • Symbol/EDataStructure.fne
    .dll windows x86

    ca0a459fe9b532016b8fba37230a56e9


    Headers

    Imports

    Exports

    Sections

  • Symbol/EInterProcess.fne
    .dll windows x86

    8f00a8af3cba33b5562e4e4c6f4aad99


    Headers

    Imports

    Exports

    Sections

  • Symbol/ELIB.fne
    .dll windows x86

    425459588967fe63b1c328c1ad3b526f


    Headers

    Imports

    Exports

    Sections

  • Symbol/ELogoPanel.fne
    .dll windows x86

    4a8641d5ce119c75d4606efb7927b817


    Headers

    Imports

    Exports

    Sections

  • Symbol/ERawSock.fne
    .dll windows x86

    7ad2e351f65f5bb76fc59e4932e889df


    Headers

    Imports

    Exports

    Sections

  • Symbol/ESSLayer.fne
    .dll windows x86

    8fe2267806627010fdb495e4d5c7c773


    Headers

    Imports

    Exports

    Sections

  • Symbol/ESpeechEngine.fne
    .dll windows x86

    d0cc5667bad973ad4638c77396918763


    Headers

    Imports

    Exports

    Sections

  • Symbol/EThread.fne
    .dll windows x86

    361f7eaba33f73d14391191507c2ce2a


    Headers

    Imports

    Exports

    Sections

  • Symbol/EXMLParser.fne
    .dll windows x86

    e0efd53a0e5feb424e0358dc92d9ba75


    Headers

    Imports

    Exports

    Sections

  • Symbol/EdirectX.fne
    .dll windows x86

    b063495e1c3c60de4975e2ce982a654f


    Headers

    Imports

    Exports

    Sections

  • Symbol/Exmlrpc.fne
    .dll windows x86

    2e036db4bbcac4f0a566d49b4190ead3


    Headers

    Imports

    Exports

    Sections

  • Symbol/ExtMenu.fne
    .dll windows x86

    85e55ca982fd8dda15c0ccd8ff47baae


    Headers

    Imports

    Exports

    Sections

  • Symbol/HYExtLib.fne
    .dll windows x86

    7b8862ce7fbd2430bc5ec2845350dd28


    Headers

    Imports

    Exports

    Sections

  • Symbol/HtmlView.fne
    .dll windows x86

    7a1f3f7ebb7f027393fa36fd3eaa9c10


    Headers

    Imports

    Exports

    Sections

  • Symbol/Javalib.fne
    .dll windows x86

    16d704f2004c747030c73689ce16623a


    Headers

    Imports

    Exports

    Sections

  • Symbol/NewLib.fne
    .dll windows x86

    701fad3d7cb774fa8c640a6dfee398f9


    Headers

    Imports

    Exports

    Sections

  • Symbol/OPenGL.fne
    .dll windows x86

    e46a314c3668d836182954686db28f89


    Headers

    Imports

    Exports

    Sections

  • Symbol/PhoneCortrol.fne
    .dll windows x86

    9e3830d7d73967773e3c3b2e0f30d991


    Headers

    Imports

    Exports

    Sections

  • Symbol/Q_tip.fne
    .dll windows x86

    b70403153fe446fdad7de5cbcd89e28a


    Headers

    Imports

    Exports

    Sections

  • Symbol/RegEx.fne
    .dll windows x86

    f41f5f0cdf77fafcb62fe9609833b07b


    Headers

    Imports

    Exports

    Sections

  • Symbol/SqliteDB.fne
    .dll windows x86

    77905b4429a99b8cc4fc9eb5ef01f882


    Headers

    Imports

    Exports

    Sections

  • Symbol/Taolibv1.fne
    .dll windows x86


    Headers

    Exports

    Sections

  • Symbol/WNet.fne
    .dll windows x86

    d7aacd84ce90170170d0d575b43c738c


    Headers

    Imports

    Exports

    Sections

  • Symbol/btdownload.fne
    .dll windows x86

    4de06f8bf956724ea613c7358add8e68


    Headers

    Imports

    Exports

    Sections

  • Symbol/cncnv.fne
    .dll windows x86

    5c54715227e960c5019e7a45d4b9d02a


    Headers

    Imports

    Exports

    Sections

  • Symbol/commobj.fne
    .dll windows x86

    ba9de53cee53a7db1860c38ed83fbd4e


    Headers

    Imports

    Exports

    Sections

  • Symbol/console.fne
    .dll windows x86

    dbc8cfa8fee8e293fd72be746920ca4b


    Headers

    Imports

    Exports

    Sections

  • Symbol/downlib.fne
    .dll windows x86

    12dde7696e64c5ce1b3185f302d5aba4


    Headers

    Imports

    Exports

    Sections

  • Symbol/dp1.fne
    .dll windows x86

    a198616942b79e67d7da4241ca14ebce


    Headers

    Imports

    Exports

    Sections

  • Symbol/eAPI.fne
    .dll windows x86

    b9358c6ad36ae5bd46ef6f5e74e7c26d


    Headers

    Imports

    Exports

    Sections

  • Symbol/eCalc.fne
    .dll windows x86

    e041c3b75a923eebb0b25a61e0664486


    Headers

    Imports

    Exports

    Sections

  • Symbol/eCompress.fne
    .dll windows x86

    d98e1e0b67bc202d9973340479b36651


    Headers

    Imports

    Exports

    Sections

  • Symbol/eDB.fne
    .dll windows x86

    f8142494d249fe7954952fc9e389bad6


    Headers

    Imports

    Exports

    Sections

  • Symbol/eDirTree.fne
    .dll windows x86

    8a843eab120437b2d8608829766564f1


    Headers

    Imports

    Exports

    Sections

  • Symbol/eExcel2000.fne
    .dll regsvr32 windows x86

    56e4373e008b20e9a23f375f2ec421f2


    Headers

    Imports

    Exports

    Sections

  • Symbol/eGrid.fne
    .dll windows x86

    0a83880c32a4d2a7dee7c93cbca08c30


    Headers

    Imports

    Exports

    Sections

  • Symbol/eHook.fne
    .dll windows x86

    f9172b6beeaf5f25adcd536ae3582773


    Headers

    Imports

    Exports

    Sections

  • Symbol/eImgConverter.fne
    .dll windows x86

    e05af6064c9418e8b297c4fe2dec69e8


    Headers

    Imports

    Exports

    Sections

  • Symbol/eLIBpp.fne
    .dll windows x86


    Headers

    Exports

    Sections

  • Symbol/eMMedia.fne
    .dll regsvr32 windows x86

    213df7f2cb71a3ab004de868df9fd83c


    Headers

    Imports

    Exports

    Sections

  • Symbol/eNetIntercept.fne
    .dll windows x86

    8aa2a1ab3f49b4d07a5e774336677ec9


    Headers

    Imports

    Exports

    Sections

  • Symbol/eOALib.fne
    .dll windows x86

    db0acb9db8e46ecb52a3874fe40418a0


    Headers

    Imports

    Exports

    Sections

  • Symbol/ePPT2000.fne
    .dll regsvr32 windows x86

    fd7d6fd71078abf9947866cab4dd49c6


    Headers

    Imports

    Exports

    Sections

  • Symbol/ePY.fne
    .dll windows x86

    26771d98a47afb2f3d7b7e6e892fadef


    Headers

    Imports

    Exports

    Sections

  • Symbol/eWord2000.fne
    .dll regsvr32 windows x86

    56e4373e008b20e9a23f375f2ec421f2


    Headers

    Imports

    Exports

    Sections

  • Symbol/edroptarget.fne
    .dll windows x86

    0bc90dc84bffc24d28c27c4d6cd7972b


    Headers

    Imports

    Exports

    Sections

  • Symbol/ewizard.fne
    .dll windows x86

    1ced820901f5377a8909f01672494b65


    Headers

    Imports

    Exports

    Sections

  • Symbol/iext.fne
    .dll windows x86

    db0eb3308075cb0cbe09b59156a60f56


    Headers

    Imports

    Exports

    Sections

  • Symbol/iext2.fne
    .dll windows x86

    81dd4db2e5035e56760e427892909d35


    Headers

    Imports

    Exports

    Sections

  • Symbol/iext3.fne
    .dll windows x86

    e16cd9ed3233064536d99cf6794183fb


    Headers

    Imports

    Exports

    Sections

  • Symbol/iext5.fne
    .dll windows x86

    2cc11dbc00e8912d9e9e4d405d729709


    Headers

    Imports

    Exports

    Sections

  • Symbol/iext6.fne
    .dll windows x86

    c5686fc51963c20b905863834edcd7e5


    Headers

    Imports

    Exports

    Sections

  • Symbol/internet.fne
    .dll windows x86

    bb1de696285da31ebe47c3114fbd7f81


    Headers

    Imports

    Exports

    Sections

  • Symbol/isapi.fne
    .dll windows x86

    52af58b74071df2d7f8d9fcf636f9a71


    Headers

    Imports

    Exports

    Sections

  • Symbol/krnln.fne
    .dll windows x86

    91c214e4288f933b2d7bc82851b3d34b


    Headers

    Imports

    Exports

    Sections

  • Symbol/mylib.fne
    .dll windows x86


    Headers

    Exports

    Sections

  • Symbol/mysql.fne
    .dll windows x86

    a575aae619aad683aec6ddb9367f41ee


    Headers

    Imports

    Exports

    Sections

  • Symbol/ogrelib.fne
    .dll windows x86

    9e963cf53e9070f15d48bf87674a0b90


    Headers

    Imports

    Exports

    Sections

  • Symbol/pop3.fne
    .dll windows x86

    eb00e9659e69f6ff0cec1c176966dc41


    Headers

    Imports

    Exports

    Sections

  • Symbol/portio.fne
    .dll windows x86

    b988b97533ad7606904b545737624775


    Headers

    Imports

    Exports

    Sections

  • Symbol/script.fne
    .dll windows x86

    eac9e917f2a96eec5e8873abca414dd5


    Headers

    Imports

    Exports

    Sections

  • Symbol/shell.fne
    .dll windows x86

    5c5d113b6e7adb5168ea190de24145c0


    Headers

    Imports

    Exports

    Sections

  • Symbol/shellEx.fne
    .dll windows x86

    c06e5cd3bd5e15e58ea852b0fd4e9ddd


    Headers

    Imports

    Exports

    Sections

  • Symbol/sock.fne
    .dll windows x86

    3f0418c00887d4c688c23dc62f122071


    Headers

    Imports

    Exports

    Sections

  • Symbol/spec.fne
    .dll windows x86

    e8f0f9711aea5ab77d2e45faf8f46dd7


    Headers

    Imports

    Exports

    Sections

  • Symbol/twain.fne
    .dll windows x86

    2b796914b983bbe4991c8b053cc1c290


    Headers

    Imports

    Exports

    Sections

  • Symbol/xWindow.fne
    .dll windows x86

    7ae1c89f492b064a8db306e783ec2a2e


    Headers

    Imports

    Exports

    Sections

  • Symbol/xplib.fne
    .dll windows x86

    841978641e663bac1de7bcb70c413300


    Headers

    Imports

    Exports

    Sections

  • Symbol/外挂飯館 外挂技术外挂制作外挂学习易语言外挂源码外挂教学 - Powered by Discuz!.URL
    .url
  • Tools/DumpECode.oms
  • Tools/JmpECode.oms
  • Tools/LoadMapEx.dll
    .dll windows x86

    9c986d0bd6cb06efc9fcc332a0776184


    Headers

    Imports

    Exports

    Sections

  • Tools/OllyMachine.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • Tools/说明.txt
  • XMP.dll
    .dll windows x86

    5f10bc2334694a8549979efc6134e655


    Headers

    Imports

    Exports

    Sections

  • debug.log
  • disasm.dll
    .dll windows x86

    cdd839c01fdab174d8a9d7cc41b7a2ef


    Headers

    Imports

    Exports

    Sections

  • edroptarget.fne
    .dll windows x86

    0bc90dc84bffc24d28c27c4d6cd7972b


    Headers

    Imports

    Exports

    Sections

  • iext.fnr
    .dll windows x86

    f86e54dbf86fab2a0484cdc838c093a0


    Headers

    Imports

    Exports

    Sections

  • iext2.fne
    .dll windows x86

    81dd4db2e5035e56760e427892909d35


    Headers

    Imports

    Exports

    Sections

  • iext5.fne
    .dll windows x86

    2cc11dbc00e8912d9e9e4d405d729709


    Headers

    Imports

    Exports

    Sections

  • krnln.fnr
    .dll windows x86

    1b0da3e29e53b02ba3878395bf7338f6


    Headers

    Imports

    Exports

    Sections

  • shell.fne
    .dll windows x86

    5c5d113b6e7adb5168ea190de24145c0


    Headers

    Imports

    Exports

    Sections

  • shellEx.fne
    .dll windows x86

    c06e5cd3bd5e15e58ea852b0fd4e9ddd


    Headers

    Imports

    Exports

    Sections

  • spec.fne
    .dll windows x86

    e8f0f9711aea5ab77d2e45faf8f46dd7


    Headers

    Imports

    Exports

    Sections

  • 历史.txt
  • 去脚本之家看看.url
    .url
  • 帮助.txt
  • 服务器软件.url
    .url
  • 版权声明.txt
  • 自述文件.txt