Overview
overview
10Static
static
10必读文件.url
windows7-x64
1必读文件.url
windows10-2004-x64
1最牛的�...��.url
windows7-x64
1最牛的�...��.url
windows10-2004-x64
1高清晰�....2.dll
windows7-x64
1高清晰�....2.dll
windows10-2004-x64
1高清晰�....2.dll
windows7-x64
1高清晰�....2.dll
windows10-2004-x64
1高清晰�....0.dll
windows7-x64
1高清晰�....0.dll
windows10-2004-x64
1高清晰�....1.dll
windows7-x64
1高清晰�....1.dll
windows10-2004-x64
1高清晰�....0.dll
windows7-x64
1高清晰�....0.dll
windows10-2004-x64
1高清晰�....2.dll
windows7-x64
1高清晰�....2.dll
windows10-2004-x64
1高清晰�....2.dll
windows7-x64
1高清晰�....2.dll
windows10-2004-x64
1高清晰�....2.dll
windows7-x64
1高清晰�....2.dll
windows10-2004-x64
1高清晰�...ll.exe
windows7-x64
1高清晰�...ll.exe
windows10-2004-x64
1高清晰�....0.dll
windows7-x64
1高清晰�....0.dll
windows10-2004-x64
1高清晰�....2.dll
windows7-x64
1高清晰�....2.dll
windows10-2004-x64
1高清晰�..._1.dll
windows7-x64
1高清晰�..._1.dll
windows10-2004-x64
1高清晰�...��.exe
windows7-x64
8高清晰�...��.exe
windows10-2004-x64
8Behavioral task
behavioral1
Sample
必读文件.url
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
必读文件.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
最牛的单机游戏下载网站.url
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
最牛的单机游戏下载网站.url
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
高清晰影楼相册制作系统2012专业绿色版/dvd1.0.2.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
高清晰影楼相册制作系统2012专业绿色版/dvd1.0.2.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
高清晰影楼相册制作系统2012专业绿色版/dvd1.1.2.dll
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
高清晰影楼相册制作系统2012专业绿色版/dvd1.1.2.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
高清晰影楼相册制作系统2012专业绿色版/ntsl1.0.0.dll
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
高清晰影楼相册制作系统2012专业绿色版/ntsl1.0.0.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
高清晰影楼相册制作系统2012专业绿色版/ntsl1.0.1.dll
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
高清晰影楼相册制作系统2012专业绿色版/ntsl1.0.1.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
高清晰影楼相册制作系统2012专业绿色版/pal1.0.0.dll
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
高清晰影楼相册制作系统2012专业绿色版/pal1.0.0.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
高清晰影楼相册制作系统2012专业绿色版/pal1.0.2.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
高清晰影楼相册制作系统2012专业绿色版/pal1.0.2.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
高清晰影楼相册制作系统2012专业绿色版/svcd1.0.2.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
高清晰影楼相册制作系统2012专业绿色版/svcd1.0.2.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral19
Sample
高清晰影楼相册制作系统2012专业绿色版/svcd1.1.2.dll
Resource
win7-20220901-en
Behavioral task
behavioral20
Sample
高清晰影楼相册制作系统2012专业绿色版/svcd1.1.2.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
高清晰影楼相册制作系统2012专业绿色版/svcdll.exe
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
高清晰影楼相册制作系统2012专业绿色版/svcdll.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral23
Sample
高清晰影楼相册制作系统2012专业绿色版/vcd1.0.0.dll
Resource
win7-20220901-en
Behavioral task
behavioral24
Sample
高清晰影楼相册制作系统2012专业绿色版/vcd1.0.0.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral25
Sample
高清晰影楼相册制作系统2012专业绿色版/vcd1.0.2.dll
Resource
win7-20220901-en
Behavioral task
behavioral26
Sample
高清晰影楼相册制作系统2012专业绿色版/vcd1.0.2.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral27
Sample
高清晰影楼相册制作系统2012专业绿色版/w_theme_1.dll
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
高清晰影楼相册制作系统2012专业绿色版/w_theme_1.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral29
Sample
高清晰影楼相册制作系统2012专业绿色版/高清晰影楼相册制作系统.exe
Resource
win7-20220901-en
Behavioral task
behavioral30
Sample
高清晰影楼相册制作系统2012专业绿色版/高清晰影楼相册制作系统.exe
Resource
win10v2004-20220812-en
General
-
Target
83033c74e64d75e7ad77625f9794fc7a220348a1a551547e1526c7fe5bec3f03
-
Size
10.0MB
-
MD5
5d8afe16e34ba5c12b74b811e53a1263
-
SHA1
5686facba692cc3fcd321143b1d19e9e876a0ed6
-
SHA256
83033c74e64d75e7ad77625f9794fc7a220348a1a551547e1526c7fe5bec3f03
-
SHA512
c55f31c0853e9ff45b9927528eb066f43dca19f9cabc03de5dd8106ea3f77e8d3e9772e60a420998c45e449e4851a233b66dc2588971f0a1217409c85df01276
-
SSDEEP
196608:qgxXhDfQ8lkXYuGkJfeUxh58JMlyG2Puti2sgQb4R1d6NRK+e2EHWtX3RPsAO:qoRDFFkJmUxzYMlyLPuW4jdG1FEEhP8
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule static1/unpack001/高清晰影楼相册制作系统2012专业绿色版/高清晰影楼相册制作系统.exe family_blackmoon
Files
-
83033c74e64d75e7ad77625f9794fc7a220348a1a551547e1526c7fe5bec3f03.7z
-
必读文件.url.url
-
最牛的单机游戏下载网站.url.url
-
高清晰影楼相册制作系统2012专业绿色版/2.ssk
-
高清晰影楼相册制作系统2012专业绿色版/2008_1.jpg.jpg
-
高清晰影楼相册制作系统2012专业绿色版/2008_l.jpg.jpg
-
高清晰影楼相册制作系统2012专业绿色版/2008_ll.jpg.jpg
-
高清晰影楼相册制作系统2012专业绿色版/3.ssk
-
高清晰影楼相册制作系统2012专业绿色版/dvd1.0.2.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
高清晰影楼相册制作系统2012专业绿色版/dvd1.1.2.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
高清晰影楼相册制作系统2012专业绿色版/ntsl1.0.0.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
高清晰影楼相册制作系统2012专业绿色版/ntsl1.0.1.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
高清晰影楼相册制作系统2012专业绿色版/pal1.0.0.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
高清晰影楼相册制作系统2012专业绿色版/pal1.0.2.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
高清晰影楼相册制作系统2012专业绿色版/svcd1.0.2.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
高清晰影楼相册制作系统2012专业绿色版/svcd1.1.2.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
高清晰影楼相册制作系统2012专业绿色版/svcdll.dll.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 970KB - Virtual size: 970KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9.5MB - Virtual size: 9.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
高清晰影楼相册制作系统2012专业绿色版/vcd1.0.0.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
高清晰影楼相册制作系统2012专业绿色版/vcd1.0.2.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
高清晰影楼相册制作系统2012专业绿色版/w_theme_1.dll
-
高清晰影楼相册制作系统2012专业绿色版/使用协议.txt
-
高清晰影楼相册制作系统2012专业绿色版/帮助2.mht.eml
-
高清晰影楼相册制作系统2012专业绿色版/高清晰影楼相册制作系统.exe.exe windows x86
d269fc5ffda5468986bcd9b52bbf0027
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
atl
ord42
kernel32
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
WaitForSingleObject
CreateProcessA
GetStartupInfoA
Sleep
FindNextFileA
FindFirstFileA
FindClose
CreateDirectoryA
DeleteFileA
RemoveDirectoryA
WriteFile
CreateFileA
GetTickCount
SetFileAttributesA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
SetFilePointer
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
ExitProcess
GetModuleHandleA
GetProcessHeap
RtlMoveMemory
SetWaitableTimer
CreateWaitableTimerA
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateThread
GetCommandLineA
GetVersion
InterlockedDecrement
InterlockedIncrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
LCMapStringW
VirtualAlloc
shlwapi
PathFileExistsA
user32
TranslateMessage
wsprintfA
GetMessageA
GetMenuInfo
SetMenuInfo
TrackMouseEvent
MsgWaitForMultipleObjects
MessageBoxA
PeekMessageA
DispatchMessageA
shell32
DragAcceptFiles
Shell_NotifyIconA
DragFinish
DragQueryFileA
advapi32
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegEnumKeyA
RegSetValueExA
RegFlushKey
RegQueryValueExA
RegEnumValueA
RegCloseKey
RegCreateKeyA
Sections
.text Size: 128KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59.8MB - Virtual size: 59.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ