1ee7b1c1c5ef02f7226f33561bd1b5b81917f442f267361493f41bcb8ee7f70f

Sharing

Copy URL Twitter E-mail

General

Target

1ee7b1c1c5ef02f7226f33561bd1b5b81917f442f267361493f41bcb8ee7f70f
Size

1.0MB
MD5

d8b530edef791e6ea0ecd165ed519de3
SHA1

dab1998d197c137d3e4ca3f7de2349cb7af1fc33
SHA256

1ee7b1c1c5ef02f7226f33561bd1b5b81917f442f267361493f41bcb8ee7f70f
SHA512

f50e5aeed6f14dc7507fb1aae6e2827472f57079f2de039fafd3f9f2ce85ecfcfc523c8d2cb85788896ce7628ce3c6e6d78aed9cf80cb754f8367c85f4f94615
SSDEEP

24576:L+4PngI+L/3T61Mzb+WpkYvuJTVfQ1twqQCR:L+40jaSb5ITBctwq1R

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/通达OA2009(3.5.090910)破解补丁(2009-09-14)/卸載.exe	upx
static1/unpack001/通达OA2009(3.5.090910)破解补丁(2009-09-14)/安裝.exe	upx

Files

1ee7b1c1c5ef02f7226f33561bd1b5b81917f442f267361493f41bcb8ee7f70f
.rar
通达OA2009(3.5.090910)破解补丁(2009-09-14)/IM/TdImServer.exe
.exe windows x86

786d9cfb440a888704f471a9d974b2dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libmysql

mysql_close
mysql_init
mysql_query
mysql_insert_id
mysql_select_db
mysql_error
mysql_store_result
mysql_num_rows
mysql_fetch_row
mysql_real_connect
mysql_options
mysql_ping
mysql_free_result

kernel32

GetOEMCP
HeapFree
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
HeapAlloc
ExitProcess
HeapReAlloc
VirtualAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
GetCPInfo
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
HeapDestroy
HeapCreate
VirtualFree
GetTimeZoneInformation
GetStdHandle
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetErrorMode
GlobalFlags
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
WritePrivateProfileStringA
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
lstrcmpA
CreateEventA
GetCurrentThreadId
SetThreadPriority
CloseHandle
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GetVersion
CompareStringA
MultiByteToWideChar
CompareStringW
GetPrivateProfileStringA
FreeLibrary
LoadLibraryA
GetTickCount
SetLastError
LocalFree
FormatMessageA
lstrcmpiA
SetConsoleCtrlHandler
lstrlenA
GetProcAddress
GetModuleHandleA
GetLastError
Sleep
InterlockedExchange
WaitForSingleObject
SuspendThread
ResumeThread
GetFileAttributesA
InitializeCriticalSection
EnterCriticalSection
GetModuleFileNameA
LeaveCriticalSection
DeleteCriticalSection
GetLocalTime
GetCurrentProcess
SetProcessWorkingSetSize
SetEvent
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
RaiseException

user32

UnregisterClassA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ShowWindow
SetWindowTextA
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessagePos
MapWindowPoints
SetForegroundWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
SetWindowPos
SetCursor
PostQuitMessage
DestroyWindow
IsWindow
GetDlgItem
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
UnhookWindowsHookEx
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterClipboardFormatA
SetWindowsHookExA
CallNextHookEx
GetMessageTime
GetMessageA
TranslateMessage
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
WaitMessage
PostMessageA
PeekMessageA
DispatchMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetSystemMetrics
SendMessageA
IsIconic
LoadIconA
EnableWindow
GetClientRect
CharUpperA
PostThreadMessageA
SetTimer
KillTimer
GetMenu

gdi32

DeleteDC
GetStockObject
RestoreDC
SaveDC
ExtTextOutA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
DeleteObject
SetMapMode

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueA
RegEnumKeyA
RegOpenKeyA
UnlockServiceDatabase
LockServiceDatabase
EnumServicesStatusA
DeleteService
CreateServiceA
QueryServiceConfigA
ControlService
DeregisterEventSource
ReportEventA
RegisterEventSourceA
OpenSCManagerA
StartServiceCtrlDispatcherA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegCloseKey
RegFlushKey
RegDeleteKeyA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
QueryServiceStatus
CloseServiceHandle
OpenServiceA

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

ole32

CoInitialize

oleaut32

VariantInit
VariantChangeType
VariantClear

ws2_32

socket
select
gethostbyname
htonl
htons
inet_addr
bind
WSAGetLastError
accept
WSASetLastError
connect
sendto
recvfrom
WSAAsyncSelect
send
recv
closesocket
WSACleanup
inet_ntoa
ntohs
WSAStartup

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
通达OA2009(3.5.090910)破解补丁(2009-09-14)/IM/TdImServer_Cracked.exe
.exe windows x86

786d9cfb440a888704f471a9d974b2dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libmysql

mysql_close
mysql_init
mysql_query
mysql_insert_id
mysql_select_db
mysql_error
mysql_store_result
mysql_num_rows
mysql_fetch_row
mysql_real_connect
mysql_options
mysql_ping
mysql_free_result

kernel32

GetOEMCP
HeapFree
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
HeapAlloc
ExitProcess
HeapReAlloc
VirtualAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
GetCPInfo
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
HeapDestroy
HeapCreate
VirtualFree
GetTimeZoneInformation
GetStdHandle
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetErrorMode
GlobalFlags
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
WritePrivateProfileStringA
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
lstrcmpA
CreateEventA
GetCurrentThreadId
SetThreadPriority
CloseHandle
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GetVersion
CompareStringA
MultiByteToWideChar
CompareStringW
GetPrivateProfileStringA
FreeLibrary
LoadLibraryA
GetTickCount
SetLastError
LocalFree
FormatMessageA
lstrcmpiA
SetConsoleCtrlHandler
lstrlenA
GetProcAddress
GetModuleHandleA
GetLastError
Sleep
InterlockedExchange
WaitForSingleObject
SuspendThread
ResumeThread
GetFileAttributesA
InitializeCriticalSection
EnterCriticalSection
GetModuleFileNameA
LeaveCriticalSection
DeleteCriticalSection
GetLocalTime
GetCurrentProcess
SetProcessWorkingSetSize
SetEvent
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
RaiseException

user32

UnregisterClassA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ShowWindow
SetWindowTextA
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessagePos
MapWindowPoints
SetForegroundWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
SetWindowPos
SetCursor
PostQuitMessage
DestroyWindow
IsWindow
GetDlgItem
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
UnhookWindowsHookEx
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterClipboardFormatA
SetWindowsHookExA
CallNextHookEx
GetMessageTime
GetMessageA
TranslateMessage
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
WaitMessage
PostMessageA
PeekMessageA
DispatchMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetSystemMetrics
SendMessageA
IsIconic
LoadIconA
EnableWindow
GetClientRect
CharUpperA
PostThreadMessageA
SetTimer
KillTimer
GetMenu

gdi32

DeleteDC
GetStockObject
RestoreDC
SaveDC
ExtTextOutA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
DeleteObject
SetMapMode

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueA
RegEnumKeyA
RegOpenKeyA
UnlockServiceDatabase
LockServiceDatabase
EnumServicesStatusA
DeleteService
CreateServiceA
QueryServiceConfigA
ControlService
DeregisterEventSource
ReportEventA
RegisterEventSourceA
OpenSCManagerA
StartServiceCtrlDispatcherA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegCloseKey
RegFlushKey
RegDeleteKeyA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
QueryServiceStatus
CloseServiceHandle
OpenServiceA

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

ole32

CoInitialize

oleaut32

VariantInit
VariantChangeType
VariantClear

ws2_32

socket
select
gethostbyname
htonl
htons
inet_addr
bind
WSAGetLastError
accept
WSASetLastError
connect
sendto
recvfrom
WSAAsyncSelect
send
recv
closesocket
WSACleanup
inet_ntoa
ntohs
WSAStartup

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
通达OA2009(3.5.090910)破解补丁(2009-09-14)/IM/libdgl.dll
.dll windows x86

321f443756ec29291be064ac34e1baa2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList

kernel32

HeapSize
FlushFileBuffers
GetVersion
GetLastError
DeviceIoControl
ReadFile
WriteFile
SetFilePointer
GetTickCount
CreateFileA
CloseHandle
GlobalFree
GlobalAlloc
GetProcAddress
LoadLibraryA
CreateEventA
ResetEvent
WaitForSingleObject
OutputDebugStringA
CreateMutexA
OpenMutexA
ReleaseMutex
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetModuleHandleA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSection
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

Exports

Exports

DIC_Close
DIC_Command
DIC_Create
DIC_Find
DIC_FindByMgrCode
DIC_Get
DIC_GetVersion
DIC_Open
DIC_Set
TransmitAPDU

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
通达OA2009(3.5.090910)破解补丁(2009-09-14)/IM/libmysql.dll
.dll windows x86

bb0b2eebb476170190e49a1a3b907940

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
UnmapViewOfFile
WaitForSingleObject
SetEvent
MapViewOfFile
OpenFileMappingA
OpenEventA
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
Sleep
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
GetTempFileNameA
GetTempPathA
GetFileAttributesExA
SetEndOfFile
SetFilePointer
CreateFileA
MoveFileA
GetTickCount
GetFileAttributesA
TlsFree
GetSystemTimeAsFileTime
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventA
ResetEvent
WaitForMultipleObjects
TryEnterCriticalSection
SetThreadPriority
ReadFile
WriteFile
FindClose
FindNextFileA
FindFirstFileA
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThreadId
WaitNamedPipeA
SetNamedPipeHandleState
CloseHandle
GetLocaleInfoA
EnterCriticalSection
DeleteFileA
LeaveCriticalSection
PeekNamedPipe
GetFileInformationByHandle
SetCurrentDirectoryA
GetFullPathNameA
GetCurrentDirectoryA
GetDriveTypeA
GetLocaleInfoW
LCMapStringW
LCMapStringA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
SetEnvironmentVariableA
GetOEMCP
SetEnvironmentVariableW
GetACP
CompareStringW
ExitProcess
TerminateProcess
GetCurrentProcess
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
WriteConsoleA
SetConsoleCtrlHandler
SetStdHandle
GetFileType
WideCharToMultiByte
GetTimeZoneInformation
FileTimeToSystemTime
FileTimeToLocalFileTime
HeapAlloc
HeapFree
HeapReAlloc
ExitThread
ResumeThread
CreateThread
RtlUnwind
GetCommandLineA
GetVersionExA
GetCurrentProcessId
FatalAppExitA
SetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetStartupInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
UnhandledExceptionFilter
FlushFileBuffers
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
RaiseException
LoadLibraryA
InterlockedExchange
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
CompareStringA
MultiByteToWideChar
GetCPInfo

advapi32

CryptReleaseContext
CryptAcquireContextA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
CryptGenRandom

wsock32

WSASetLastError
shutdown
closesocket
setsockopt
send
recv
inet_ntoa
select
__WSAFDIsSet
inet_addr
WSAStartup
WSACleanup
gethostbyname
getservbyname
ntohs
socket
WSAGetLastError
ioctlsocket
htons
connect
getpeername

Exports

Exports

_dig_vec_lower
_dig_vec_upper
bmove_upp
client_errors
delete_dynamic
free_defaults
get_defaults_options
getopt_compare_strings
getopt_ull_limit_value
handle_options
init_dynamic_array
insert_dynamic
int2str
is_prefix
list_add
list_delete
load_defaults
modify_defaults_file
my_end
my_getopt_print_errors
my_init
my_malloc
my_memdup
my_no_flags_free
my_path
my_print_help
my_print_variables
my_realloc
my_strdup
myodbc_remove_escape
mysql_affected_rows
mysql_autocommit
mysql_change_user
mysql_character_set_name
mysql_close
mysql_commit
mysql_data_seek
mysql_debug
mysql_disable_reads_from_master
mysql_disable_rpl_parse
mysql_dump_debug_info
mysql_embedded
mysql_enable_reads_from_master
mysql_enable_rpl_parse
mysql_eof
mysql_errno
mysql_error
mysql_escape_string
mysql_fetch_field
mysql_fetch_field_direct
mysql_fetch_fields
mysql_fetch_lengths
mysql_fetch_row
mysql_field_count
mysql_field_seek
mysql_field_tell
mysql_free_result
mysql_get_character_set_info
mysql_get_client_info
mysql_get_client_version
mysql_get_host_info
mysql_get_parameters
mysql_get_proto_info
mysql_get_server_info
mysql_get_server_version
mysql_get_ssl_cipher
mysql_hex_string
mysql_info
mysql_init
mysql_insert_id
mysql_kill
mysql_list_dbs
mysql_list_fields
mysql_list_processes
mysql_list_tables
mysql_master_query
mysql_more_results
mysql_next_result
mysql_num_fields
mysql_num_rows
mysql_options
mysql_ping
mysql_query
mysql_read_query_result
mysql_real_connect
mysql_real_escape_string
mysql_real_query
mysql_refresh
mysql_rollback
mysql_row_seek
mysql_row_tell
mysql_rpl_parse_enabled
mysql_rpl_probe
mysql_rpl_query_type
mysql_select_db
mysql_send_query
mysql_server_end
mysql_server_init
mysql_set_character_set
mysql_set_local_infile_default
mysql_set_local_infile_handler
mysql_set_server_option
mysql_shutdown
mysql_slave_query
mysql_sqlstate
mysql_ssl_set
mysql_stat
mysql_stmt_affected_rows
mysql_stmt_attr_get
mysql_stmt_attr_set
mysql_stmt_bind_param
mysql_stmt_bind_result
mysql_stmt_close
mysql_stmt_data_seek
mysql_stmt_errno
mysql_stmt_error
mysql_stmt_execute
mysql_stmt_fetch
mysql_stmt_fetch_column
mysql_stmt_field_count
mysql_stmt_free_result
mysql_stmt_init
mysql_stmt_insert_id
mysql_stmt_num_rows
mysql_stmt_param_count
mysql_stmt_param_metadata
mysql_stmt_prepare
mysql_stmt_reset
mysql_stmt_result_metadata
mysql_stmt_row_seek
mysql_stmt_row_tell
mysql_stmt_send_long_data
mysql_stmt_sqlstate
mysql_stmt_store_result
mysql_store_result
mysql_thread_end
mysql_thread_id
mysql_thread_init
mysql_thread_safe
mysql_use_result
mysql_warning_count
set_dynamic
strcend
strcont
strdup_root
strfill
strinstr
strmake
strmov
strxmov

Sections

.text
Size: 660KB - Virtual size: 658KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
通达OA2009(3.5.090910)破解补丁(2009-09-14)/bin/OfficeTask.exe
.exe windows x86

656fcbadb3fb8ac49d2168dfd71c1a12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
CreateThread
HeapSize
SetStdHandle
GetFileType
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
RtlUnwind
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
RaiseException
GetStartupInfoA
GetProcessHeap
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapReAlloc
GetSystemTimeAsFileTime
GetDateFormatA
GetTimeFormatA
HeapAlloc
HeapFree
ExitProcess
GetOEMCP
GetCPInfo
SetErrorMode
GlobalFlags
InterlockedIncrement
GetFileTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedDecrement
GetModuleFileNameW
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GlobalAddAtomA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GetCurrentProcessId
CreateEventA
GetCurrentThreadId
SetThreadPriority
CloseHandle
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GetTickCount
SetLastError
LocalFree
SetConsoleCtrlHandler
GetModuleHandleA
FormatMessageA
GetFileAttributesA
lstrlenA
lstrcmpiA
GetVersion
MultiByteToWideChar
GetLastError
CompareStringW
CompareStringA
SetEvent
FreeLibrary
GetProcAddress
LoadLibraryA
WaitForSingleObject
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
InterlockedExchange
ResumeThread
SuspendThread
Sleep
LeaveCriticalSection
FindResourceA
EnterCriticalSection
LoadResource
LockResource
SizeofResource
SetHandleCount
WideCharToMultiByte
CreateFileW

user32

GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
SetCursor
GetWindowTextA
RegisterWindowMessageA
PostQuitMessage
GetSystemMetrics
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
SendMessageA
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
WaitMessage
PostMessageA
PeekMessageA
DispatchMessageA
CharUpperA
KillTimer
SetTimer
EnableWindow
PostThreadMessageA
IsWindow
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
GetCapture
LoadIconA
WinHelpA
SetWindowTextA
ShowWindow
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetDC
ReleaseDC
DestroyMenu
LoadCursorA
GetSysColorBrush
GetWindow
UnregisterClassA

gdi32

OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueA
RegEnumKeyA
RegOpenKeyA
EnumServicesStatusA
OpenSCManagerA
UnlockServiceDatabase
LockServiceDatabase
OpenServiceA
DeleteService
CreateServiceA
QueryServiceConfigA
QueryServiceStatus
StartServiceA
ControlService
CloseServiceHandle
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegCloseKey
RegFlushKey
RegDeleteKeyA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA
RegOpenKeyExA

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
UrlUnescapeA

ws2_32

WSAGetLastError
setsockopt
listen
ntohs
inet_addr
gethostbyname
recv
send
WSAAsyncSelect
recvfrom
sendto
connect
WSASetLastError
getpeername
bind
htons
htonl
select
socket
accept
closesocket
WSACleanup
WSAStartup
inet_ntoa

oleaut32

VariantTimeToSystemTime
VarUdateFromDate
SystemTimeToVariantTime
VarDateFromStr
VariantClear
VariantChangeType
VariantInit

libmysql

mysql_ping
mysql_fetch_row
mysql_num_rows
mysql_store_result
mysql_error
mysql_errno
mysql_query
mysql_real_connect
mysql_options
mysql_init
mysql_close

wininet

InternetOpenUrlA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
HttpQueryInfoA
InternetQueryDataAvailable
InternetSetOptionExA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA

Sections

.text
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
通达OA2009(3.5.090910)破解补丁(2009-09-14)/itask.txt
.ps1
通达OA2009(3.5.090910)破解补丁(2009-09-14)/log.txt
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/favicon.ico
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/general/mytable/intel_view/index.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/general/status_bar/_index.php
.js
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/general/status_bar/index.php
.js
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/general/system/dept/add.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/general/system/dept/update.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/general/system/interface/title/update.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/general/system/reg_view/index.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/general/system/security/submit.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/general/system/user/add.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/general/system/user/update.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/general/system/user/user_edit.php
.js
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/general/tongda.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/images/favicon.ico
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/images/tongda.ico
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/inc/check_ccpv.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/inc/crackpatch_version.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/inc/fycdc_germ.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/inc/get_unit_sn.php.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/inc/itask/itask.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/inc/itask/itask1.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/inc/oa_type.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/inc/reg.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/inc/reg_submit.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/inc/rsa/bcmath.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/inc/rsa/keypair.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/inc/rsa/rsa.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/inc/td_core.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/inc/weather 3.5.090910.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/index.php
.js
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/module/feedback/index.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/module/feedback/oa_submit.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/update/1.php
通达OA2009(3.5.090910)破解补丁(2009-09-14)/webroot/update/germ.sql
通达OA2009(3.5.090910)破解补丁(2009-09-14)/卸載.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
通达OA2009(3.5.090910)破解补丁(2009-09-14)/安裝.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
通达OA2009(3.5.090910)破解补丁(2009-09-14)/富陽疾控論壇.url
.url

Sharing

General

Malware Config

Signatures

Files

786d9cfb440a888704f471a9d974b2dc

Headers

File Characteristics

Imports

libmysql

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shlwapi

ole32

oleaut32

ws2_32

Sections

.text Size: 240KB - Virtual size: 239KB

.rdata Size: 52KB - Virtual size: 50KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 112KB - Virtual size: 112KB

786d9cfb440a888704f471a9d974b2dc

Headers

File Characteristics

Imports

libmysql

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shlwapi

ole32

oleaut32

ws2_32

Sections

.text Size: 240KB - Virtual size: 239KB

.rdata Size: 52KB - Virtual size: 50KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 40KB - Virtual size: 39KB

321f443756ec29291be064ac34e1baa2

Headers

File Characteristics

Imports

setupapi

kernel32

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 65KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 77KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 4KB

bb0b2eebb476170190e49a1a3b907940

Headers

File Characteristics

Imports

kernel32

advapi32

wsock32

Exports

Exports

Sections

.text Size: 660KB - Virtual size: 658KB

.rdata Size: 112KB - Virtual size: 109KB

.data Size: 1.2MB - Virtual size: 1.2MB

.idata Size: 8KB - Virtual size: 4KB

.reloc Size: 28KB - Virtual size: 27KB

656fcbadb3fb8ac49d2168dfd71c1a12

Headers

File Characteristics

Imports

kernel32

user32

.text
Size: 240KB - Virtual size: 239KB

.rdata
Size: 52KB - Virtual size: 50KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 112KB - Virtual size: 112KB

.text
Size: 240KB - Virtual size: 239KB

.rdata
Size: 52KB - Virtual size: 50KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 40KB - Virtual size: 39KB

.text
Size: 68KB - Virtual size: 65KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 77KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 4KB

.text
Size: 660KB - Virtual size: 658KB

.rdata
Size: 112KB - Virtual size: 109KB

.data
Size: 1.2MB - Virtual size: 1.2MB

.idata
Size: 8KB - Virtual size: 4KB

.reloc
Size: 28KB - Virtual size: 27KB

.text
Size: 284KB - Virtual size: 283KB

.rdata
Size: 64KB - Virtual size: 60KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 36KB - Virtual size: 32KB

UPX0
Size: - Virtual size: 232KB

UPX1
Size: 18KB - Virtual size: 20KB

.rsrc
Size: 165KB - Virtual size: 168KB

UPX0
Size: - Virtual size: 232KB

UPX1
Size: 18KB - Virtual size: 20KB

.rsrc
Size: 165KB - Virtual size: 168KB