afe219a0f4170949cda00b98150601734cd3b6e73a3198fc539caac90bdd7dfd

Sharing

Copy URL

Twitter E-mail

General

Target

afe219a0f4170949cda00b98150601734cd3b6e73a3198fc539caac90bdd7dfd
Size

4.7MB
MD5

73285f104e84e7ba09a924dd83191787
SHA1

9a3e4c9b0f599a7c3eed904b01d07d933a6076b2
SHA256

afe219a0f4170949cda00b98150601734cd3b6e73a3198fc539caac90bdd7dfd
SHA512

7f7eb3c3a1a550b4256642e9a131a8a8ae3636b77d3f9df54047dd98c5314a9bde128697a6cf3bc371408adbb8a32fa79c89dfc1951e4aeb129a4fda57448bad
SSDEEP

98304:5qqFdNWKt6pYmsEerh9aaNdH2LZmyJWL+iLR/9yStdZXAGqwiKhoFCXW:omdNWKEpxYEuWLTML+A/xZAdwSFj

Score

N/A

Malware Config

Signatures

Files

afe219a0f4170949cda00b98150601734cd3b6e73a3198fc539caac90bdd7dfd
.7z
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/M2免费注册说明.txt
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/Readme.txt
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/dlq.txt
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/万能登陆器.txt
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/传奇私服架设指南最权威的教材.chm
.chm
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/安全策略.ipsec
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/实用私服工具下载.txt
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/无忧暴率调整.exe
.exe windows x86

9165ea3e914e03bda3346f13edbd6ccd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
CreateDirectoryA
GetTempPathA
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW

user32

MessageBoxA
wsprintfA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ecode
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/无忧私服技术共享区.url
.url
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/无忧网络文本替换专家2.5.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

nsp0
Size: - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nsp1
Size: 215KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/杀毒请看.txt
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/清空所有玩家资料.bat
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/登陆器载图.bmp
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/登陆器配置器.exe
.exe windows x86

820ab24e53af2dbafc74d24f87e40262

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

comctl32

InitCommonControls

kernel32

LoadLibraryA
GetProcAddress

Sections

Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2.5MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/私服免费宣传5u37.net.url
.url
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/私服技术教程文档大全.txt
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/私服视频教程大全.txt
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/私服软件工具下载地址大全(上百种工具).txt
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/绿化注册.reg
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/被攻击后的网关设置.jpg
.jpg
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/说明必看.txt
2008传奇通用登陆器配置工具-(奥运版)√/2008传奇通用登陆器配置工具-(奥运版)√/软件介绍.txt

Sharing

General

Malware Config

Signatures

Files

9165ea3e914e03bda3346f13edbd6ccd

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 7KB

.ecode Size: 12KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 3KB

Headers

File Characteristics

Sections

nsp0 Size: - Virtual size: 640KB

nsp1 Size: 215KB - Virtual size: 222KB

820ab24e53af2dbafc74d24f87e40262

Headers

File Characteristics

Imports

user32

comctl32

kernel32

Sections

Size: 12KB - Virtual size: 20KB

Size: 1KB - Virtual size: 4KB

Size: 2KB - Virtual size: 8KB

Size: 2.5MB - Virtual size: 3.1MB

.rsrc Size: 512B - Virtual size: 4KB

Size: 20KB - Virtual size: 20KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 7KB

.ecode
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 3KB

nsp0
Size: - Virtual size: 640KB

nsp1
Size: 215KB - Virtual size: 222KB

.rsrc
Size: 512B - Virtual size: 4KB