General

Malware Config

Signatures

Files

• 29a24fd385b6551f3ca34c0f2ccd9ffdba4ece1db468ee10aa4c85a36b1c98c1

  .rar
• Installer_迅捷PDF转换器_r1.7.4.exe

  .exe windows:5 windows x86 arch:x86

  7af232dfffea387be149fda5c1eeae02

  
  

  Code Sign

  0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2031 00:00

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:42:dd:8a:7b:76:20:cd:41:1c:df:3d:73:91:a5:e9

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  12-03-2019 00:00

  Not After

  15-03-2021 12:00

  Subject

  CN=Shanghai Hudun Information Technology Co.\, Ltd.,O=Shanghai Hudun Information Technology Co.\, Ltd.,L=Shanghai,C=CN

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2031 00:00

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:42:dd:8a:7b:76:20:cd:41:1c:df:3d:73:91:a5:e9

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  12-03-2019 00:00

  Not After

  15-03-2021 12:00

  Subject

  CN=Shanghai Hudun Information Technology Co.\, Ltd.,O=Shanghai Hudun Information Technology Co.\, Ltd.,L=Shanghai,C=CN

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  c8:20:57:53:3c:8b:7b:a8:aa:9b:0d:5c:b5:4b:f6:b3:e9:09:73:12:e2:f7:20:e6:66:09:b8:70:5d:64:ae:0f

  Signer

  Actual PE Digest

  c8:20:57:53:3c:8b:7b:a8:aa:9b:0d:5c:b5:4b:f6:b3:e9:09:73:12:e2:f7:20:e6:66:09:b8:70:5d:64:ae:0f

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  45:14:46:8b:a5:e1:0d:8e:1e:30:1f:7c:09:27:e5:a9:cd:00:32:5b

  Signer

  Actual PE Digest

  45:14:46:8b:a5:e1:0d:8e:1e:30:1f:7c:09:27:e5:a9:cd:00:32:5b

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetCommandLineA

  FindNextFileW

  FindFirstFileExW

  FindClose

  FlushFileBuffers

  GetTimeZoneInformation

  GetOEMCP

  IsValidCodePage

  GetFileAttributesExW

  MoveFileExW

  SetStdHandle

  GetFullPathNameW

  EnumSystemLocalesW

  GetUserDefaultLCID

  IsValidLocale

  GetConsoleCP

  ReadConsoleW

  GetConsoleMode

  SetFilePointerEx

  GetModuleHandleExW

  ExitThread

  FileTimeToSystemTime

  SystemTimeToTzSpecificLocalTime

  GetDriveTypeW

  UnregisterWaitEx

  QueryDepthSList

  InterlockedPopEntrySList

  ReleaseSemaphore

  VirtualProtect

  VirtualFree

  VirtualAlloc

  FreeLibraryAndExitThread

  GetThreadTimes

  UnregisterWait

  RegisterWaitForSingleObject

  SetThreadAffinityMask

  GetProcessAffinityMask

  GetNumaHighestNodeNumber

  DeleteTimerQueueTimer

  ChangeTimerQueueTimer

  CreateTimerQueueTimer

  GetLogicalProcessorInformation

  GetThreadPriority

  SetThreadPriority

  CreateThread

  SwitchToThread

  SignalObjectAndWait

  CreateTimerQueue

  InitializeSListHead

  GetStartupInfoW

  IsDebuggerPresent

  IsProcessorFeaturePresent

  LoadLibraryW

  UnhandledExceptionFilter

  WriteConsoleW

  SetEndOfFile

  CopyFileW

  SetUnhandledExceptionFilter

  GetTickCount

  GetEnvironmentVariableW

  WritePrivateProfileStringW

  GetCommandLineW

  GetACP

  MultiByteToWideChar

  GetCurrentDirectoryW

  FreeResource

  FindResourceW

  LockResource

  LoadResource

  SizeofResource

  GetFileSize

  ReadFile

  CloseHandle

  GetVersionExW

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  InitializeCriticalSectionAndSpinCount

  InterlockedDecrement

  InterlockedIncrement

  CreateFileA

  GetThreadLocale

  lstrcmpiW

  WideCharToMultiByte

  CreateDirectoryW

  DosDateTimeToFileTime

  GetEnvironmentStringsW

  DuplicateHandle

  SetFileTime

  SetFilePointer

  WriteFile

  GetFileType

  GetCurrentProcess

  MulDiv

  ExitProcess

  ResetEvent

  SetEvent

  GetCPInfo

  GetLocaleInfoW

  LCMapStringW

  CompareStringW

  CreateEventW

  GetStringTypeW

  TryEnterCriticalSection

  GetCurrentThread

  WaitForSingleObjectEx

  QueryPerformanceCounter

  SetHandleInformation

  CreatePipe

  GetDiskFreeSpaceExW

  ReleaseMutex

  CreateMutexW

  GetExitCodeProcess

  CreateProcessW

  WTSGetActiveConsoleSessionId

  OutputDebugStringW

  ResumeThread

  GetTempPathW

  GetProcessHeap

  HeapSize

  HeapReAlloc

  HeapFree

  HeapAlloc

  DecodePointer

  LocalFree

  ExpandEnvironmentStringsA

  SetDllDirectoryW

  GetProcAddress

  GetModuleHandleW

  GetLastError

  GetSystemDirectoryW

  DeleteFileA

  Sleep

  GetCurrentProcessId

  WaitForMultipleObjects

  PeekNamedPipe

  GetStdHandle

  WaitForSingleObject

  VerifyVersionInfoA

  GetSystemDirectoryA

  VerSetConditionMask

  SleepEx

  FormatMessageA

  LoadLibraryExW

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  SetLastError

  InterlockedFlushSList

  InterlockedPushEntrySList

  RaiseException

  RtlUnwind

  EncodePointer

  GetSystemTimeAsFileTime

  GetPrivateProfileStringA

  GetCurrentThreadId

  GetModuleFileNameW

  GetLocalTime

  DeleteFileW

  CreateFileW

  GetPrivateProfileIntA

  FreeLibrary

  DeleteCriticalSection

  WritePrivateProfileStringA

  GetNativeSystemInfo

  LoadLibraryA

  GetLocaleInfoA

  GetModuleHandleA

  InitializeCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  GetModuleFileNameA

  GetShortPathNameA

  FreeEnvironmentStringsW

  SetEnvironmentVariableA

  SystemTimeToFileTime

  GetPrivateProfileIntW

  GetPrivateProfileStringW

  TerminateProcess

  user32

  SendMessageW

  CreateWindowExW

  DestroyWindow

  SetWindowPos

  IsWindowVisible

  DispatchMessageW

  TranslateMessage

  GetMessageW

  IsWindow

  PtInRect

  PostQuitMessage

  CallWindowProcW

  RegisterClassW

  GetClassInfoExW

  EnableWindow

  IsIconic

  SetFocus

  GetSystemMetrics

  GetActiveWindow

  GetFocus

  GetKeyState

  SetCapture

  ReleaseCapture

  SetTimer

  KillTimer

  ReleaseDC

  BeginPaint

  EndPaint

  SetForegroundWindow

  SetWindowLongW

  GetWindowLongW

  CharNextW

  GetClientRect

  GetWindowRect

  GetCursorPos

  ScreenToClient

  MapWindowPoints

  IntersectRect

  IsRectEmpty

  GetParent

  GetWindow

  CharPrevW

  SetPropW

  GetPropW

  LoadImageW

  MonitorFromWindow

  GetMonitorInfoW

  IsZoomed

  SetWindowRgn

  MessageBoxW

  CreateCaret

  GetCaretBlinkTime

  HideCaret

  ShowCaret

  SetCaretPos

  GetCaretPos

  ClientToScreen

  GetSysColor

  SetWindowTextW

  GetWindowTextW

  GetWindowTextLengthW

  CreateAcceleratorTableW

  InvalidateRgn

  GetGUIThreadInfo

  LoadCursorW

  OffsetRect

  UnionRect

  SetCursor

  GetWindowRgn

  MoveWindow

  ShowWindow

  RegisterClassExW

  DefWindowProcW

  SetRect

  FillRect

  DrawTextW

  PostMessageW

  wvsprintfW

  InvalidateRect

  GetDC

  GetUpdateRect

  gdi32

  GetTextMetricsW

  CreatePatternBrush

  GetDeviceCaps

  PtInRegion

  CreateRectRgn

  GdiFlush

  ExtTextOutW

  TextOutW

  MoveToEx

  CreateDIBSection

  SetTextColor

  SetStretchBltMode

  StretchBlt

  SetBkMode

  SetBkColor

  ExtSelectClipRgn

  SelectClipRgn

  RoundRect

  LineTo

  GetTextExtentPoint32W

  GetClipBox

  GetCharABCWidthsW

  CreateSolidBrush

  CreateRoundRectRgn

  CreateRectRgnIndirect

  CreatePenIndirect

  CombineRgn

  SetWindowOrgEx

  GetObjectW

  SelectObject

  SaveDC

  RestoreDC

  Rectangle

  GetStockObject

  DeleteObject

  DeleteDC

  CreatePen

  CreateFontIndirectW

  CreateCompatibleDC

  CreateCompatibleBitmap

  BitBlt

  GetObjectA

  shell32

  CommandLineToArgvW

  SHGetSpecialFolderLocation

  ShellExecuteW

  SHGetSpecialFolderPathW

  SHGetPathFromIDListW

  SHBrowseForFolderW

  SHGetPathFromIDListA

  ole32

  CLSIDFromString

  CoFreeUnusedLibraries

  CreateStreamOnHGlobal

  OleLockRunning

  CLSIDFromProgID

  CoInitialize

  CoCreateInstance

  CoUninitialize

  CoCreateGuid

  oleaut32

  SysAllocString

  SysFreeString

  VariantInit

  VariantClear

  ws2_32

  recvfrom

  sendto

  listen

  accept

  freeaddrinfo

  getaddrinfo

  WSAIoctl

  socket

  setsockopt

  ntohs

  htons

  getsockopt

  getsockname

  getpeername

  connect

  closesocket

  ioctlsocket

  gethostname

  htonl

  ntohl

  bind

  send

  recv

  WSASetLastError

  select

  WSAStartup

  WSACleanup

  WSAGetLastError

  __WSAFDIsSet

  advapi32

  CryptImportKey

  CryptEncrypt

  CryptDestroyKey

  CryptDestroyHash

  CryptHashData

  CryptCreateHash

  CryptGetHashParam

  CryptGenRandom

  CryptReleaseContext

  CryptAcquireContextA

  RegQueryValueExW

  AllocateAndInitializeSid

  CheckTokenMembership

  FreeSid

  RegCreateKeyExW

  RegSetValueExW

  RegCloseKey

  RegOpenKeyExW

  crypt32

  CertFreeCertificateContext

  wldap32

  ord46

  ord301

  ord200

  ord30

  ord79

  ord35

  ord33

  ord32

  ord27

  ord22

  ord41

  ord50

  ord60

  ord211

  ord26

  ord143

  gdiplus

  GdipDeleteBrush

  GdipCreateLineBrushI

  GdipSetCompositingQuality

  GdipSetSmoothingMode

  GdipSetPixelOffsetMode

  GdipDisposeImage

  GdipFree

  GdipCloneBrush

  GdipCloneImage

  GdipGetImageHeight

  GdipGetImageWidth

  GdipCreateFromHDC

  GdipDeleteGraphics

  GdipDrawImageRectI

  GdiplusShutdown

  GdipAlloc

  GdipGetPropertyItem

  GdipBitmapLockBits

  GdipBitmapUnlockBits

  GdipCreateBitmapFromScan0

  GdipGetImageGraphicsContext

  GdipSetTextRenderingHint

  GdipSetInterpolationMode

  GdiplusStartup

  GdipGetPropertyItemSize

  GdipImageSelectActiveFrame

  GdipImageGetFrameCount

  GdipImageGetFrameDimensionsList

  GdipImageGetFrameDimensionsCount

  GdipLoadImageFromStream

  GdipSetStringFormatLineAlign

  GdipSetStringFormatAlign

  GdipDeleteStringFormat

  GdipCreateStringFormat

  GdipDrawString

  GdipGetFamily

  GdipDeleteFont

  GdipCreateFontFromLogfontA

  GdipCreateFontFromDC

  GdipDeleteFontFamily

  GdipDrawImage

  GdipGraphicsClear

  shlwapi

  StrCmpW

  PathFileExistsA

  PathFileExistsW

  PathRemoveFileSpecW

  PathStripPathW

  PathRelativePathToW

  urlmon

  URLDownloadToFileW

  winmm

  timeGetTime

  comctl32

  _TrackMouseEvent

  ord17

  imm32

  ImmGetContext

  ImmSetCompositionFontW

  ImmSetCompositionWindow

  ImmReleaseContext

  wtsapi32

  WTSQuerySessionInformationW

  WTSFreeMemory

  netapi32

  NetApiBufferFree

  NetUserGetInfo

  Sections

  .text

  Size: 1.3MB - Virtual size: 1.3MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 276KB - Virtual size: 276KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 16KB - Virtual size: 44KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .gfids

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .tls

  Size: 512B - Virtual size: 9B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  _RDATA

  Size: 512B - Virtual size: 32B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1.7MB - Virtual size: 1.7MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 72KB - Virtual size: 72KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 使用说明.txt
• 当下软件园.URL