放牛娃seo一条龙工具[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

放牛娃seo一条龙工具.zip
Size

11.9MB
MD5

a756237c07acaffa4ccafb516ad41ef7
SHA1

5a3360cea8f51f1be007c7e196c8b8b709ff057c
SHA256

65fa50872ae8e3c00c9d601af220c8ab93acc0681caee2d9853d88e98851320b
SHA512

7705c67b13fbfc8c4d176f154ae3e0c08717adac4b2ff63b606e69e4760a4551d506b61cfe72767a0d2f35773cbf59caa652de590bb7113fc0b6b46c6c17d475
SSDEEP

196608:lxvvVFUkic5eGz+CUGti+VFbBWyWHKAWIPfZ+2+bQG2uEEeG5mBFOV9YnxRE+t0s:lxvvUcgGz+CUGtTFbep3PHalreG5pV9A

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/放牛娃seo一条龙工具/放牛娃seo一条龙工具/SkinH_EL.dll	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/放牛娃seo一条龙工具/放牛娃seo一条龙工具/SkinH_EL.dll	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/放牛娃seo一条龙工具/放牛娃seo一条龙工具/SkinH_EL.dll
unpack001/放牛娃seo一条龙工具/放牛娃seo一条龙工具/运行我——seo一条龙工具-试用版.exe

Files

放牛娃seo一条龙工具.zip
.zip
放牛娃seo一条龙工具/放牛娃seo一条龙工具/SkinH_EL.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

SkinH_AdjustAero
SkinH_AdjustHSV
SkinH_Attach
SkinH_AttachEx
SkinH_AttachExt
SkinH_AttachRes
SkinH_AttachResEx
SkinH_Detach
SkinH_DetachEx
SkinH_GetColor
SkinH_LockUpdate
SkinH_Map
SkinH_NineBlt
SkinH_SetAero
SkinH_SetBackColor
SkinH_SetFont
SkinH_SetFontEx
SkinH_SetForeColor
SkinH_SetMenuAlpha
SkinH_SetTitleMenuBar
SkinH_SetWindowAlpha
SkinH_SetWindowMovable
SkinH_VerifySign

Sections

UPX0
Size: - Virtual size: 152KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
放牛娃seo一条龙工具/放牛娃seo一条龙工具/img/cookie获取教程图.png
.png
放牛娃seo一条龙工具/放牛娃seo一条龙工具/libxl.dll
.dll windows x86

1ea361a937faf6783910318bace39bd8

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

30/05/2020, 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b2:66:17:bd:87:9e:a7:bc:19:59:c9:43:8b:30:93:72
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/12/2018, 00:00

Not After

16/12/2021, 23:59

Subject

CN=XLware s.r.o.,OU=IT,O=XLware s.r.o.,POSTALCODE=831 52,STREET=Pekná cesta 19,L=Bratislava,ST=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:e8:b6:e8:2d:73:5f:b4:ce:c5:d5:dc:88:2c:75:19:c6:5a:4c:e7
Signer

Actual PE Digest

79:e8:b6:e8:2d:73:5f:b4:ce:c5:d5:dc:88:2c:75:19:c6:5a:4c:e7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
FormatMessageW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
GetDiskFreeSpaceExW
GetLastError
GetFileAttributesW
GetFileTime
GetShortPathNameW
SetFileAttributesW
SetFileTime
GetTempPathW
MoveFileW
SetVolumeLabelW
MultiByteToWideChar
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CloseHandle
QueryPerformanceFrequency
QueryPerformanceCounter
WideCharToMultiByte
GetDriveTypeW
MulDiv
WriteConsoleW
GetProcessHeap
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
FindFirstFileExW
FindNextFileW
ReadFile
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleCP
SetFilePointerEx
SetEnvironmentVariableW
GetFileType
SetEndOfFile
FlushFileBuffers
SetStdHandle
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
HeapReAlloc
GetTimeZoneInformation
GetFileAttributesExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize

gdi32

GetTextExtentPoint32W
GetDeviceCaps
GetCharABCWidthsW
DeleteObject
DeleteDC
CreateFontW
CreateDCW
SelectObject

shell32

SHFileOperationW

Exports

Exports

xlAutoFilterColumnA
xlAutoFilterColumnByIndexA
xlAutoFilterColumnByIndexW
xlAutoFilterColumnSizeA
xlAutoFilterColumnSizeW
xlAutoFilterColumnW
xlAutoFilterGetRefA
xlAutoFilterGetRefW
xlAutoFilterGetSortA
xlAutoFilterGetSortRangeA
xlAutoFilterGetSortRangeW
xlAutoFilterGetSortW
xlAutoFilterSetRefA
xlAutoFilterSetRefW
xlAutoFilterSetSortA
xlAutoFilterSetSortW
xlBookActiveSheetA
xlBookActiveSheetW
xlBookAddCustomNumFormatA
xlBookAddCustomNumFormatW
xlBookAddFontA
xlBookAddFontW
xlBookAddFormatA
xlBookAddFormatW
xlBookAddPicture2A
xlBookAddPicture2W
xlBookAddPictureA
xlBookAddPictureAsLinkA
xlBookAddPictureAsLinkW
xlBookAddPictureW
xlBookAddSheetA
xlBookAddSheetW
xlBookBiffVersionA
xlBookBiffVersionW
xlBookColorPackA
xlBookColorPackW
xlBookColorUnpackA
xlBookColorUnpackW
xlBookCustomNumFormatA
xlBookCustomNumFormatW
xlBookDatePackA
xlBookDatePackW
xlBookDateUnpackA
xlBookDateUnpackW
xlBookDefaultFontA
xlBookDefaultFontW
xlBookDelSheetA
xlBookDelSheetW
xlBookErrorMessageA
xlBookErrorMessageW
xlBookFontA
xlBookFontSizeA
xlBookFontSizeW
xlBookFontW
xlBookFormatA
xlBookFormatSizeA
xlBookFormatSizeW
xlBookFormatW
xlBookGetPictureA
xlBookGetPictureW
xlBookGetSheetA
xlBookGetSheetNameA
xlBookGetSheetNameW
xlBookGetSheetW
xlBookInsertSheetA
xlBookInsertSheetW
xlBookIsDate1904A
xlBookIsDate1904W
xlBookIsTemplateA
xlBookIsTemplateW
xlBookLoadA
xlBookLoadInfoA
xlBookLoadInfoW
xlBookLoadPartiallyA
xlBookLoadPartiallyUsingTempFileA
xlBookLoadPartiallyUsingTempFileW
xlBookLoadPartiallyW
xlBookLoadRawA
xlBookLoadRawPartiallyA
xlBookLoadRawPartiallyW
xlBookLoadRawW
xlBookLoadUsingTempFileA
xlBookLoadUsingTempFileW
xlBookLoadW
xlBookMoveSheetA
xlBookMoveSheetW
xlBookPictureSizeA
xlBookPictureSizeW
xlBookRefR1C1A
xlBookRefR1C1W
xlBookReleaseA
xlBookReleaseW
xlBookRgbModeA
xlBookRgbModeW
xlBookSaveA
xlBookSaveRawA
xlBookSaveRawW
xlBookSaveUsingTempFileA
xlBookSaveUsingTempFileW
xlBookSaveW
xlBookSetActiveSheetA
xlBookSetActiveSheetW
xlBookSetDate1904A
xlBookSetDate1904W
xlBookSetDefaultFontA
xlBookSetDefaultFontW
xlBookSetKeyA
xlBookSetKeyW
xlBookSetLocaleA
xlBookSetLocaleW
xlBookSetRefR1C1A
xlBookSetRefR1C1W
xlBookSetRgbModeA
xlBookSetRgbModeW
xlBookSetTemplateA
xlBookSetTemplateW
xlBookSheetCountA
xlBookSheetCountW
xlBookSheetTypeA
xlBookSheetTypeW
xlBookVersionA
xlBookVersionW
xlCreateBookA
xlCreateBookCA
xlCreateBookCW
xlCreateBookW
xlCreateXMLBookA
xlCreateXMLBookCA
xlCreateXMLBookCW
xlCreateXMLBookW
xlFilterColumnAddFilterA
xlFilterColumnAddFilterW
xlFilterColumnClearA
xlFilterColumnClearW
xlFilterColumnFilterA
xlFilterColumnFilterSizeA
xlFilterColumnFilterSizeW
xlFilterColumnFilterTypeA
xlFilterColumnFilterTypeW
xlFilterColumnFilterW
xlFilterColumnGetCustomFilterA
xlFilterColumnGetCustomFilterW
xlFilterColumnGetTop10A
xlFilterColumnGetTop10W
xlFilterColumnIndexA
xlFilterColumnIndexW
xlFilterColumnSetCustomFilterA
xlFilterColumnSetCustomFilterExA
xlFilterColumnSetCustomFilterExW
xlFilterColumnSetCustomFilterW
xlFilterColumnSetTop10A
xlFilterColumnSetTop10W
xlFontBoldA
xlFontBoldW
xlFontColorA
xlFontColorW
xlFontItalicA
xlFontItalicW
xlFontNameA
xlFontNameW
xlFontScriptA
xlFontScriptW
xlFontSetBoldA
xlFontSetBoldW
xlFontSetColorA
xlFontSetColorW
xlFontSetItalicA
xlFontSetItalicW
xlFontSetNameA
xlFontSetNameW
xlFontSetScriptA
xlFontSetScriptW
xlFontSetSizeA
xlFontSetSizeW
xlFontSetStrikeOutA
xlFontSetStrikeOutW
xlFontSetUnderlineA
xlFontSetUnderlineW
xlFontSizeA
xlFontSizeW
xlFontStrikeOutA
xlFontStrikeOutW
xlFontUnderlineA
xlFontUnderlineW
xlFormatAlignHA
xlFormatAlignHW
xlFormatAlignVA
xlFormatAlignVW
xlFormatBorderBottomA
xlFormatBorderBottomColorA
xlFormatBorderBottomColorW
xlFormatBorderBottomW
xlFormatBorderDiagonalA
xlFormatBorderDiagonalColorA
xlFormatBorderDiagonalColorW
xlFormatBorderDiagonalStyleA
xlFormatBorderDiagonalStyleW
xlFormatBorderDiagonalW
xlFormatBorderLeftA
xlFormatBorderLeftColorA
xlFormatBorderLeftColorW
xlFormatBorderLeftW
xlFormatBorderRightA
xlFormatBorderRightColorA
xlFormatBorderRightColorW
xlFormatBorderRightW
xlFormatBorderTopA
xlFormatBorderTopColorA
xlFormatBorderTopColorW
xlFormatBorderTopW
xlFormatFillPatternA
xlFormatFillPatternW
xlFormatFontA
xlFormatFontW
xlFormatHiddenA
xlFormatHiddenW
xlFormatIndentA
xlFormatIndentW
xlFormatLockedA
xlFormatLockedW
xlFormatNumFormatA
xlFormatNumFormatW
xlFormatPatternBackgroundColorA
xlFormatPatternBackgroundColorW
xlFormatPatternForegroundColorA
xlFormatPatternForegroundColorW
xlFormatRotationA
xlFormatRotationW
xlFormatSetAlignHA
xlFormatSetAlignHW
xlFormatSetAlignVA
xlFormatSetAlignVW
xlFormatSetBorderA
xlFormatSetBorderBottomA
xlFormatSetBorderBottomColorA
xlFormatSetBorderBottomColorW
xlFormatSetBorderBottomW
xlFormatSetBorderColorA
xlFormatSetBorderColorW
xlFormatSetBorderDiagonalA
xlFormatSetBorderDiagonalColorA
xlFormatSetBorderDiagonalColorW
xlFormatSetBorderDiagonalStyleA
xlFormatSetBorderDiagonalStyleW
xlFormatSetBorderDiagonalW
xlFormatSetBorderLeftA
xlFormatSetBorderLeftColorA
xlFormatSetBorderLeftColorW
xlFormatSetBorderLeftW
xlFormatSetBorderRightA
xlFormatSetBorderRightColorA
xlFormatSetBorderRightColorW
xlFormatSetBorderRightW
xlFormatSetBorderTopA
xlFormatSetBorderTopColorA
xlFormatSetBorderTopColorW
xlFormatSetBorderTopW
xlFormatSetBorderW
xlFormatSetFillPatternA
xlFormatSetFillPatternW
xlFormatSetFontA
xlFormatSetFontW
xlFormatSetHiddenA
xlFormatSetHiddenW
xlFormatSetIndentA
xlFormatSetIndentW
xlFormatSetLockedA
xlFormatSetLockedW
xlFormatSetNumFormatA
xlFormatSetNumFormatW
xlFormatSetPatternBackgroundColorA
xlFormatSetPatternBackgroundColorW
xlFormatSetPatternForegroundColorA
xlFormatSetPatternForegroundColorW
xlFormatSetRotationA
xlFormatSetRotationW
xlFormatSetShrinkToFitA
xlFormatSetShrinkToFitW
xlFormatSetWrapA
xlFormatSetWrapW
xlFormatShrinkToFitA
xlFormatShrinkToFitW
xlFormatWrapA
xlFormatWrapW
xlSheetAddDataValidationA
xlSheetAddDataValidationDoubleA
xlSheetAddDataValidationDoubleExA
xlSheetAddDataValidationDoubleExW
xlSheetAddDataValidationDoubleW
xlSheetAddDataValidationExA
xlSheetAddDataValidationExW
xlSheetAddDataValidationW
xlSheetAddHyperlinkA
xlSheetAddHyperlinkW
xlSheetAddIgnoredErrorA
xlSheetAddIgnoredErrorW
xlSheetAddrToRowColA
xlSheetAddrToRowColW
xlSheetApplyFilterA
xlSheetApplyFilterW
xlSheetAutoFilterA
xlSheetAutoFilterW
xlSheetCellFormatA
xlSheetCellFormatW
xlSheetCellTypeA
xlSheetCellTypeW
xlSheetClearA
xlSheetClearPrintAreaA
xlSheetClearPrintAreaW
xlSheetClearPrintRepeatsA
xlSheetClearPrintRepeatsW
xlSheetClearW
xlSheetColHiddenA
xlSheetColHiddenW
xlSheetColWidthA
xlSheetColWidthPxA
xlSheetColWidthPxW
xlSheetColWidthW
xlSheetCopyCellA
xlSheetCopyCellW
xlSheetDelHyperlinkA
xlSheetDelHyperlinkW
xlSheetDelMergeA
xlSheetDelMergeByIndexA
xlSheetDelMergeByIndexW
xlSheetDelMergeW
xlSheetDelNamedRangeA
xlSheetDelNamedRangeW
xlSheetDisplayGridlinesA
xlSheetDisplayGridlinesW
xlSheetFirstColA
xlSheetFirstColW
xlSheetFirstRowA
xlSheetFirstRowW
xlSheetFooterA
xlSheetFooterMarginA
xlSheetFooterMarginW
xlSheetFooterW
xlSheetGetHorPageBreakA
xlSheetGetHorPageBreakSizeA
xlSheetGetHorPageBreakSizeW
xlSheetGetHorPageBreakW
xlSheetGetMergeA
xlSheetGetMergeW
xlSheetGetNamedRangeA
xlSheetGetNamedRangeW
xlSheetGetPictureA
xlSheetGetPictureW
xlSheetGetPrintFitA
xlSheetGetPrintFitW
xlSheetGetTopLeftViewA
xlSheetGetTopLeftViewW
xlSheetGetVerPageBreakA
xlSheetGetVerPageBreakSizeA
xlSheetGetVerPageBreakSizeW
xlSheetGetVerPageBreakW
xlSheetGroupColsA
xlSheetGroupColsW
xlSheetGroupRowsA
xlSheetGroupRowsW
xlSheetGroupSummaryBelowA
xlSheetGroupSummaryBelowW
xlSheetGroupSummaryRightA
xlSheetGroupSummaryRightW
xlSheetHCenterA
xlSheetHCenterW
xlSheetHeaderA
xlSheetHeaderMarginA
xlSheetHeaderMarginW
xlSheetHeaderW
xlSheetHiddenA
xlSheetHiddenW
xlSheetHyperlinkA
xlSheetHyperlinkSizeA
xlSheetHyperlinkSizeW
xlSheetHyperlinkW
xlSheetInsertColA
xlSheetInsertColAndKeepRangesA
xlSheetInsertColAndKeepRangesW
xlSheetInsertColW
xlSheetInsertRowA
xlSheetInsertRowAndKeepRangesA
xlSheetInsertRowAndKeepRangesW
xlSheetInsertRowW
xlSheetIsDateA
xlSheetIsDateW
xlSheetIsFormulaA
xlSheetIsFormulaW
xlSheetLandscapeA
xlSheetLandscapeW
xlSheetLastColA
xlSheetLastColW
xlSheetLastRowA
xlSheetLastRowW
xlSheetMarginBottomA
xlSheetMarginBottomW
xlSheetMarginLeftA
xlSheetMarginLeftW
xlSheetMarginRightA
xlSheetMarginRightW
xlSheetMarginTopA
xlSheetMarginTopW
xlSheetMergeA
xlSheetMergeSizeA
xlSheetMergeSizeW
xlSheetMergeW
xlSheetNameA
xlSheetNameW
xlSheetNamedRangeA
xlSheetNamedRangeSizeA
xlSheetNamedRangeSizeW
xlSheetNamedRangeW
xlSheetPaperA
xlSheetPaperW
xlSheetPictureSizeA
xlSheetPictureSizeW
xlSheetPrintAreaA
xlSheetPrintAreaW
xlSheetPrintGridlinesA
xlSheetPrintGridlinesW
xlSheetPrintRepeatColsA
xlSheetPrintRepeatColsW
xlSheetPrintRepeatRowsA
xlSheetPrintRepeatRowsW
xlSheetPrintRowColA
xlSheetPrintRowColW
xlSheetPrintZoomA
xlSheetPrintZoomW
xlSheetProtectA
xlSheetProtectW
xlSheetReadBlankA
xlSheetReadBlankW
xlSheetReadBoolA
xlSheetReadBoolW
xlSheetReadCommentA
xlSheetReadCommentW
xlSheetReadErrorA
xlSheetReadErrorW
xlSheetReadFormulaA
xlSheetReadFormulaW
xlSheetReadNumA
xlSheetReadNumW
xlSheetReadStrA
xlSheetReadStrW
xlSheetRemoveColA
xlSheetRemoveColAndKeepRangesA
xlSheetRemoveColAndKeepRangesW
xlSheetRemoveColW
xlSheetRemoveCommentA
xlSheetRemoveCommentW
xlSheetRemoveDataValidationsA
xlSheetRemoveDataValidationsW
xlSheetRemoveFilterA
xlSheetRemoveFilterW
xlSheetRemoveRowA
xlSheetRemoveRowAndKeepRangesA
xlSheetRemoveRowAndKeepRangesW
xlSheetRemoveRowW
xlSheetRightToLeftA
xlSheetRightToLeftW
xlSheetRowColToAddrA
xlSheetRowColToAddrW
xlSheetRowHeightA
xlSheetRowHeightPxA
xlSheetRowHeightPxW
xlSheetRowHeightW
xlSheetRowHiddenA
xlSheetRowHiddenW
xlSheetSetAutoFitAreaA
xlSheetSetAutoFitAreaW
xlSheetSetCellFormatA
xlSheetSetCellFormatW
xlSheetSetColA
xlSheetSetColHiddenA
xlSheetSetColHiddenW
xlSheetSetColW
xlSheetSetDisplayGridlinesA
xlSheetSetDisplayGridlinesW
xlSheetSetFooterA
xlSheetSetFooterW
xlSheetSetGroupSummaryBelowA
xlSheetSetGroupSummaryBelowW
xlSheetSetGroupSummaryRightA
xlSheetSetGroupSummaryRightW
xlSheetSetHCenterA
xlSheetSetHCenterW
xlSheetSetHeaderA
xlSheetSetHeaderW
xlSheetSetHiddenA
xlSheetSetHiddenW
xlSheetSetHorPageBreakA
xlSheetSetHorPageBreakW
xlSheetSetLandscapeA
xlSheetSetLandscapeW
xlSheetSetMarginBottomA
xlSheetSetMarginBottomW
xlSheetSetMarginLeftA
xlSheetSetMarginLeftW
xlSheetSetMarginRightA
xlSheetSetMarginRightW

Sections

.text
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 889KB - Virtual size: 889KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 218KB - Virtual size: 441KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
放牛娃seo一条龙工具/放牛娃seo一条龙工具/导入乱码看此图.png
.png
放牛娃seo一条龙工具/放牛娃seo一条龙工具/试用.key
放牛娃seo一条龙工具/放牛娃seo一条龙工具/运行我——seo一条龙工具-试用版.exe
.exe windows x86

bdd5503fb84a9da783ea9c44a7c64c14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

rasapi32

RasHangUpA

kernel32

GetWindowsDirectoryA

user32

LoadImageA

gdi32

MoveToEx

msimg32

GradientFill

winspool.drv

DocumentPropertiesA

advapi32

RegCreateKeyExA

shell32

SHGetSpecialFolderPathA

ole32

OleRun

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Draw

wininet

InternetCanonicalizeUrlA

comdlg32

GetOpenFileNameA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

CODE
Size: 11.8MB - Virtual size: 11.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 784KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 152KB

UPX1 Size: 83KB - Virtual size: 84KB

.rsrc Size: 2KB - Virtual size: 4KB

1ea361a937faf6783910318bace39bd8

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19Certificate

Extended Key Usages

Key Usages

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49Certificate

Extended Key Usages

Key Usages

b2:66:17:bd:87:9e:a7:bc:19:59:c9:43:8b:30:93:72Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

79:e8:b6:e8:2d:73:5f:b4:ce:c5:d5:dc:88:2c:75:19:c6:5a:4c:e7Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

shell32

Exports

Exports

Sections

.text Size: 4.8MB - Virtual size: 4.8MB

.rdata Size: 889KB - Virtual size: 889KB

.data Size: 218KB - Virtual size: 441KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 394KB - Virtual size: 393KB

bdd5503fb84a9da783ea9c44a7c64c14

Headers

File Characteristics

Imports

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

msvcrt

iphlpapi

psapi

Exports

Exports

Sections

CODE Size: 11.8MB - Virtual size: 11.8MB

.sedata Size: 784KB - Virtual size: 784KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.sedata Size: 4KB - Virtual size: 4KB

UPX0
Size: - Virtual size: 152KB

UPX1
Size: 83KB - Virtual size: 84KB

.rsrc
Size: 2KB - Virtual size: 4KB

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

b2:66:17:bd:87:9e:a7:bc:19:59:c9:43:8b:30:93:72
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

79:e8:b6:e8:2d:73:5f:b4:ce:c5:d5:dc:88:2c:75:19:c6:5a:4c:e7
Signer

.text
Size: 4.8MB - Virtual size: 4.8MB

.rdata
Size: 889KB - Virtual size: 889KB

.data
Size: 218KB - Virtual size: 441KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 394KB - Virtual size: 393KB

CODE
Size: 11.8MB - Virtual size: 11.8MB

.sedata
Size: 784KB - Virtual size: 784KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB

.sedata
Size: 4KB - Virtual size: 4KB