1bb273abe2066b59eb725d5ff1abc46f

Sharing

Copy URL Twitter E-mail

General

Target

1bb273abe2066b59eb725d5ff1abc46f
Size

12.8MB
MD5

1bb273abe2066b59eb725d5ff1abc46f
SHA1

a4b69402fe27068bb7c9cda294f236334176023d
SHA256

85aeb394a1e43b6366663c254692157192c73f43dcf0742adf203e2650738b08
SHA512

230cc72ce5f09f51e2571c0f86937429eb548d48e9429a69a133d10a9a14d746e18074109d15f0dcbb297a997a387965f2d385127923058b19850a04fe1f1ae4
SSDEEP

393216:oT0v3S7q0MtCfb8nXRQlTiYod07GuiC4VYxV1FEqNcl+:oG1tCf+BOTId07Gul4VCFEqNI+

Score

3^/10

Malware Config

Signatures

Unsigned PE 23 IoCs

Checks for missing Authenticode signature.

resource
unpack001/VCD媒体相册6.8.exe
unpack001/vcdwj/MSSTDFMT.DLL
unpack001/vcdwj/VCDmtxc6.8.dll
unpack001/vcdwj/wenjian/hhxc/libdsw-1.0.3.dll
unpack001/vcdwj/wenjian/hhxc/libjp2-1.0.0.dll
unpack001/vcdwj/wenjian/hhxc/libjpg-1.0.1.dll
unpack001/vcdwj/wenjian/hhxc/libmcl-4.5.0.dll
unpack001/vcdwj/wenjian/hhxc/libmpg-1.0.2.dll
unpack001/vcdwj/wenjian/hhxc/libogg-1.0.0.dll
unpack001/vcdwj/wenjian/hhxc/libpng-1.0.1.dll
unpack001/vcdwj/wenjian/hhxc/libtif-1.0.0.dll
unpack001/vcdwj/wenjian/hhxc/mp3enc.dll
unpack001/vcdwj/wenjian/hhxc/sndvol32.dll
unpack001/vcdwj/wenjian/hhxc/swf2video.exe
unpack001/vcdwj/wenjian/hhxc/xieswf.exe
unpack001/vcdwj/wenjian/hhxc/xieswf1.exe
unpack001/vcdwj/wenjian/hhxc/xieswf2.exe
unpack001/vcdwj/wenjian/hhxc/xieswf3.exe
unpack001/vcdwj/wenjian/hhxc/xieswf4.exe
unpack001/vcdwj/wenjian/hhxc/xieswf5.exe
unpack001/vcdwj/wenjian/hhxc/xieswf6.exe
unpack001/vcdwj/wenjian/hhxc/xieswf7.exe
unpack001/vcdwj/wenjian/hhxc/xieswf8.exe

Files

1bb273abe2066b59eb725d5ff1abc46f
.rar
VCD媒体相册6.8.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rsrr
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vcdwj/Flash9.ocx
.dll regsvr32 windows:4 windows x86 arch:x86

56f3e1d42b2d8c0bc3bf949df3491fe3

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0a
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2009, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6f:0a:f7:a3:21:3c:ca:db:a8:ad:c1:a7:1b:75:61:a4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

10/12/2005, 00:00

Not After

10/12/2006, 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

42:7f:7e:f0:de:22:b6:23:cb:fb:ff:f7:7a:38:fd:18:55:d9:8e:3e
Signer

Actual PE Digest

42:7f:7e:f0:de:22:b6:23:cb:fb:ff:f7:7a:38:fd:18:55:d9:8e:3e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

winmm

waveOutClose
timeBeginPeriod
waveOutGetDevCapsA
waveOutPrepareHeader
waveOutWrite
waveOutUnprepareHeader
timeGetTime
timeEndPeriod
timeSetEvent
waveOutOpen
waveOutReset
waveInOpen
waveInPrepareHeader
waveInReset
waveInUnprepareHeader
waveInClose
waveInStop
waveInAddBuffer
waveInStart
waveInGetNumDevs
waveOutGetNumDevs
waveInGetDevCapsA
timeKillEvent
timeGetDevCaps

wsock32

select
htons
ioctlsocket
inet_ntoa
ntohl
gethostname
htonl
gethostbyname
setsockopt

wininet

InternetConnectA
InternetReadFile
InternetCloseHandle
InternetOpenA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA

crypt32

CertVerifySubjectCertificateContext
CertFindCertificateInStore
CertCreateCertificateContext
CryptGetMessageCertificates
CryptVerifyMessageSignature
CertCloseStore
CertFreeCertificateContext

rpcrt4

UuidToStringA
RpcStringFreeA

oleaut32

SafeArrayCreateVector
SafeArrayLock
SafeArrayUnlock
VarBstrCat
SysAllocStringByteLen
OleCreatePropertyFrame
SysStringLen
LoadRegTypeLi
VarUI4FromStr
SysFreeString
SysAllocStringLen
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VariantInit
VariantClear
SysStringByteLen
VariantChangeType

kernel32

GlobalFree
GlobalAlloc
lstrlenA
WideCharToMultiByte
lstrlenW
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
lstrcmpiA
CreateMutexA
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
LocalFree
GetLastError
SetFileAttributesA
GetFileAttributesA
GlobalUnlock
GlobalLock
MulDiv
InterlockedIncrement
InterlockedDecrement
lstrcpynA
lstrcpyA
lstrcatA
GetCurrentThreadId
DisableThreadLibraryCalls
LockResource
LoadResource
FindResourceA
SizeofResource
LoadLibraryExA
GetModuleHandleA
SetErrorMode
GetTickCount
LCMapStringA
LCMapStringW
CreateProcessA
GetStartupInfoA
WaitForSingleObject
DeleteFileA
CreateFileA
GetSystemDirectoryA
VirtualQuery
GetSystemInfo
GetSystemDefaultLangID
GetUserDefaultLangID
CreateThread
ExitThread
GetFileAttributesW
FindResourceExA
FindResourceExW
GetTimeZoneInformation
GetSystemTime
SystemTimeToFileTime
ReadFile
WriteFile
SetFilePointer
GetFileSize
GetCurrentDirectoryA
FindClose
GetTempFileNameA
GetTempPathA
GetTempFileNameW
GetTempPathW
SetCurrentDirectoryA
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
DeleteFileW
MoveFileA
MoveFileW
RemoveDirectoryA
RemoveDirectoryW
CreateDirectoryA
CreateDirectoryW
CreateFileW
GetFileAttributesExA
GetFileAttributesExW
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
IsDBCSLeadByteEx
GetProcessTimes
CreateEventA
SetEvent
TlsAlloc
SetThreadPriority
ResetEvent
WaitForMultipleObjects
VirtualFree
VirtualAlloc
GetThreadPriority
GetCurrentThread
IsDBCSLeadByte
GetCPInfo
MultiByteToWideChar
InterlockedCompareExchange
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
QueryPerformanceCounter
QueryPerformanceFrequency
VirtualProtect
ExitProcess
HeapSize
DebugBreak
HeapReAlloc
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalAlloc
RtlUnwind

user32

GetWindowInfo
SetFocus
FillRect
GetKeyState
SetCapture
LoadStringA
CheckMenuItem
EnableMenuItem
MessageBoxA
ScreenToClient
GetCursorPos
WindowFromPoint
SetCursor
DestroyMenu
GetSubMenu
LoadMenuA
GetCapture
ReleaseCapture
GetFocus
MapVirtualKeyA
UpdateWindow
SetTimer
KillTimer
TrackPopupMenu
ClientToScreen
DeleteMenu
GetMenuItemID
SystemParametersInfoA
PtInRect
IsChild
GetParent
InsertMenuItemA
GetSystemMetrics
GetMenuItemInfoA
GetMenuItemCount
SetWindowTextA
SendMessageA
LoadIconA
GetDesktopWindow
GetWindowRect
EndDialog
DialogBoxIndirectParamA
CopyRect
DialogBoxParamA
DialogBoxParamW
WaitForInputIdle
RegisterClipboardFormatA
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
SetClipboardData
EmptyClipboard
PostThreadMessageA
GetQueueStatus
PeekMessageA
MsgWaitForMultipleObjects
RegisterWindowMessageA
DispatchMessageA
GetWindowLongA
DefWindowProcA
BeginPaint
GetClientRect
EndPaint
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
SetWindowPos
UnionRect
SetWindowLongA
CharNextA
GetTopWindow
ReleaseDC
GetDC
GetDoubleClickTime
EnumWindows
PostMessageA
IsWindowEnabled
GetWindow
GetClassNameA
GetWindowTextW
GetWindowTextA
UnregisterClassA
SendInput
GetKeyboardLayout
RegisterClassExA
LoadCursorA
wsprintfA
CreateWindowExA
CreateDialogParamA
SendDlgItemMessageA
SetDlgItemTextW
CheckDlgButton
WinHelpA
GetDialogBaseUnits
GetWindowTextLengthA
IsDlgButtonChecked
GetDlgItem
IsDialogMessageA
MoveWindow
ShowWindow
GetClassInfoExA
InvalidateRect
IsWindow
DestroyWindow
DialogBoxIndirectParamW
CallWindowProcA

gdi32

ExtTextOutA
ExtTextOutW
SetTextColor
GetClipRgn
CreateRectRgn
GetTextAlign
GetBkMode
SaveDC
SelectClipPath
FillPath
ExtCreatePen
StrokePath
EndDoc
StartDocA
CreatePalette
GetTextExtentPoint32A
GetCurrentObject
GetTextExtentPoint32W
DPtoLP
CreatePen
SetTextCharacterExtra
GetBkColor
SetBkColor
PolyBezierTo
LineTo
MoveToEx
SetPolyFillMode
EndPath
BeginPath
EndPage
GetTextColor
SelectClipRgn
IntersectClipRect
SetBkMode
EnumFontFamiliesA
GetObjectType
GetClipBox
GetSystemPaletteEntries
LPtoDP
SetViewportOrgEx
StretchDIBits
GetStockObject
Rectangle
CreateSolidBrush
CreateFontIndirectA
GetTextMetricsA
GetTextExtentPointA
CreateMetaFileA
SetWindowOrgEx
SetWindowExtEx
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
SetTextAlign
RestoreDC
GdiFlush
CreateCompatibleDC
DeleteObject
SelectObject
RealizePalette
SelectPalette
DeleteDC
BitBlt
GetObjectA
CreateDIBSection
GetDIBits
CreateCompatibleBitmap
GetDeviceCaps
TextOutA
StartPage

comdlg32

GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA
PrintDlgA

advapi32

RegOpenKeyExA
RegOpenKeyA
RegEnumKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyA
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyA

shell32

SHAppBarMessage
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

WriteClassStm
OleSaveToStream
CoUninitialize
CoInitialize
CoFreeUnusedLibraries
OleLoadFromStream
OleRegGetUserType
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
CreateDataAdviseHolder
OleRegEnumVerbs
CoTaskMemFree
CoTaskMemAlloc
CreateBindCtx
CreateOleAdviseHolder
OleRegGetMiscStatus

shlwapi

PathFindExtensionA

urlmon

HlinkSimpleNavigateToMoniker
RegisterBindStatusCallback
CreateURLMoniker

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 208KB - Virtual size: 996KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vcdwj/MSSTDFMT.DLL
.dll regsvr32 windows:4 windows x86 arch:x86

76114d56c8c1282d8a004aefa0d9031b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetLocaleInfoW
FreeLibrary
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
GetVersion
GetFileAttributesA
lstrcatA
GetModuleFileNameA
IsDBCSLeadByte
MultiByteToWideChar
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
GetLastError
LockResource
LoadResource
FindResourceA
GetModuleHandleA
CompareStringW
LeaveCriticalSection
EnterCriticalSection
EnumSystemLocalesA
lstrcpynA
EnumDateFormatsA
CompareStringA
lstrcmpA
EnumTimeFormatsA
lstrlenA
InterlockedIncrement
InterlockedDecrement
HeapAlloc
GetLocaleInfoA
GetProcessHeap
GetThreadLocale
HeapFree
HeapReAlloc
lstrcpyA
GetSystemTime
lstrcmpiA
WideCharToMultiByte
lstrlenW

user32

ReleaseCapture
SetCapture
CallWindowProcA
PtInRect
GetFocus
InvalidateRect
MessageBoxA
GetDlgItemTextA
GetCapture
EqualRect
ShowWindow
SetDlgItemTextA
GetWindowRect
SetParent
SetWindowLongA
CharNextA
GetDC
ReleaseDC
UnregisterClassA
DestroyWindow
GetSystemMetrics
SetWindowRgn
IntersectRect
GetActiveWindow
OffsetRect
ClientToScreen
BeginPaint
MoveWindow
SetFocus
SetWindowPos
GetClientRect
EndPaint
CreateWindowExA
GetDlgItemInt
RegisterClassA
GetWindowLongA
CreateDialogIndirectParamA
IsDlgButtonChecked
IsWindowEnabled
GetKeyState
IsChild
IsDialogMessageA
GetNextDlgTabItem
GetWindow
LoadStringA
WinHelpA
SetDlgItemInt
ScrollWindowEx
wsprintfA
SendMessageA
SendDlgItemMessageA
GetDlgItem
EnableWindow
IsWindowVisible
GetParent
DefWindowProcA

ole32

CreateOleAdviseHolder
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemAlloc

advapi32

RegDeleteKeyA
RegQueryValueExA
RegEnumKeyExA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

SetErrorInfo
LoadRegTypeLi
CreateErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
SystemTimeToVariantTime
OleLoadPicture
RegisterTypeLi
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetDim
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreateVector
VariantChangeType
VariantChangeTypeEx
SafeArrayDestroy
SysAllocStringLen
VariantInit
SysReAllocStringLen
SysAllocString
SysStringLen
VariantCopy
SysFreeString
VariantClear
OleCreatePropertyFrame

gdi32

SetMapMode
LPtoDP
DeleteDC
SetWindowOrgEx
SetViewportOrgEx
CreateDCA
SetViewportExtEx
GetDeviceCaps
SetWindowExtEx
GetViewportExtEx
GetWindowExtEx
CreateRectRgnIndirect

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vcdwj/Thumbs.db
vcdwj/VCDmtxc6.8.dll
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 816KB - Virtual size: 815KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rsrr
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vcdwj/_desktop.ini
vcdwj/wenjian/_desktop.ini
vcdwj/wenjian/bjwjk/01一个是阆苑仙葩，一个是美玉无瑕。若说没奇缘，今生偏又遇着他；若说有奇缘，如何心事终虚话？.jpg
.jpg
vcdwj/wenjian/bjwjk/02满纸荒唐言，一把辛酸泪。都云作者痴，谁解其中味！.jpg
.jpg
vcdwj/wenjian/bjwjk/03襁褓中，父母叹双亡。纵居那绮罗丛，谁知娇养？ .jpg
.jpg
vcdwj/wenjian/bjwjk/04乱烘烘你才唱罢我登场，反认他乡是故乡.jpg
.jpg
vcdwj/wenjian/bjwjk/05说到辛酸处,荒唐愈可悲. 由来同一梦,休笑世人痴!.jpg
.jpg
vcdwj/wenjian/bjwjk/06想眼中能有多少泪珠儿，怎禁得秋流到冬春流到夏！.jpg
.jpg
vcdwj/wenjian/bjwjk/07明媚鲜妍能几时，一朝飘泊难寻觅.jpg
.jpg
vcdwj/wenjian/bjwjk/08一个枉自嗟呀，一个空劳牵挂.jpg
.jpg
vcdwj/wenjian/bjwjk/09.jpg
.jpg
vcdwj/wenjian/bjwjk/Thumbs.db
vcdwj/wenjian/bjwjk/_desktop.ini
vcdwj/wenjian/gq1/_desktop.ini
vcdwj/wenjian/gq1/红楼梦-引子.mp3
vcdwj/wenjian/gqwjk/_desktop.ini
vcdwj/wenjian/gqwjk/红楼梦-紫菱洲歌.mp3
vcdwj/wenjian/hhxc/MSSCCPRJ.SCC
vcdwj/wenjian/hhxc/_desktop.ini
vcdwj/wenjian/hhxc/dakeizcj.frm
vcdwj/wenjian/hhxc/fps
vcdwj/wenjian/hhxc/fps1
vcdwj/wenjian/hhxc/libdsw-1.0.3.dll
.dll windows:4 windows x86 arch:x86

95599902eaf375f30a3962fafa357329

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ddraw

DirectDrawCreate

kernel32

AddAtomA
CloseHandle
CreateEventA
FindAtomA
GetAtomNameA
MultiByteToWideChar
WaitForSingleObject

msvcrt

__dllonexit
_errno
abort
fflush
free
malloc
memmove
sprintf

ole32

CoCreateInstance
CoInitialize
CoTaskMemFree
CoUninitialize

Exports

Exports

dsw_audio_info
dsw_audio_open
dsw_audio_read
dsw_close
dsw_video_info
dsw_video_open
dsw_video_read

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 160B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/libjp2-1.0.0.dll
.dll windows:4 windows x86 arch:x86

73856ab4f88b7db35d88b1bfdd740aad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

_close
_lseek
_open
_read
_setmode
_strdup
_unlink
_write
__dllonexit
__mb_cur_max
_assert
_errno
_iob
_isctype
_pctype
abort
atof
atoi
ceil
fclose
fflush
floor
fprintf
fputc
fread
free
frexp
fseek
fwrite
ldexp
malloc
memcpy
memmove
memset
qsort
realloc
sprintf
sqrt
strchr
strcmp
strcpy
strlen
strncpy
strrchr
strtok
tmpnam
vfprintf
vsprintf

Exports

Exports

jp2_info
jp2_read
jp2_write

Sections

.text
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/libjpg-1.0.1.dll
.dll windows:4 windows x86 arch:x86

14ab34c39e5c94e9019af906f39f3df8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

__dllonexit
_errno
_iob
_setjmp
abort
exit
fclose
ferror
fflush
fopen
fprintf
fread
free
fwrite
getenv
longjmp
malloc
memcpy
memmove
memset
sprintf
sscanf

Exports

Exports

info_JPEG_file
read_JPEG_file
write_JPEG_file

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 144B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 269B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/libmcl-4.5.0.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

MclAbort
MclAssignAudioFunc
MclAssignAudioSource
MclAssignError
MclAssignProgress
MclAssignVideoFunc
MclAssignVideoSource
MclAudioGetBitRate
MclAudioGetBytesWritten
MclAudioGetCodec
MclAudioGetCodecName
MclAudioGetFileFormat
MclAudioGetFileName
MclAudioGetFormat
MclAudioGetQuality
MclAudioGetTruncateToVideo
MclAudioHasCodecDlg
MclAudioSetBitRate
MclAudioSetCodec
MclAudioSetFileFormat
MclAudioSetFileName
MclAudioSetFormat
MclAudioSetQuality
MclAudioSetTruncateToVideo
MclAudioShowCodecDlg
MclAviAddCustomInfo
MclAviClearCustomInfo
MclAviGetCustomInfo
MclBayerGetHdr
MclBayerLoad
MclBayerToImg
MclBitsToBytes
MclBytesToBits
MclClearCanvas
MclClearErrors
MclCodecsAudioCreate
MclCodecsFree
MclCodecsGetCount
MclCodecsGetInfo
MclCodecsVideoCreate
MclConvert
MclCreate
MclDIBToImg
MclFourCC
MclFree
MclGetElapsedTime
MclGetError
MclGetErrorStr
MclGetFileFmt
MclGetFileInfo
MclGetRemainingTime
MclGetStatus
MclGetUserData
MclImgAddAlpha
MclImgAverageAdd
MclImgAverageClear
MclImgAverageGet
MclImgBorder
MclImgBrightness
MclImgChaos
MclImgClear
MclImgContrast
MclImgCopy
MclImgCreate
MclImgCrop
MclImgDeinterlace
MclImgEdgeEnhance
MclImgEffectCrossFade
MclImgEffectPixelize
MclImgEffectPush
MclImgEffectSlideCorners
MclImgEffectSlideIn
MclImgEffectSlideOut
MclImgEffectWipe
MclImgEffectWipeLines
MclImgEffectZoom
MclImgFindEdges
MclImgFlipHorizontal
MclImgFlipVertical
MclImgFree
MclImgGamma
MclImgGetInfo
MclImgGetPixelRGB
MclImgGetPixels
MclImgGetPixelsRect
MclImgHue
MclImgInsert
MclImgPixelize
MclImgRedim
MclImgRemap
MclImgRemapToCustomPalette
MclImgResample
MclImgResampleToFit
MclImgResize
MclImgRotate
MclImgSaturation
MclImgSetPixelRGB
MclImgSetPixels
MclImgSetPixelsRect
MclImgSharpen
MclImgShow
MclImgShowInRect
MclImgSkip
MclImgSoften
MclImgSolarize
MclImgText
MclImgToDIB
MclImgToDIBWin3
MclImgTraceContour
MclImgWhiteBalance
MclListAdd
MclListCreate
MclListDelete
MclListFree
MclListGetAudioFormat
MclListGetFileCount
MclListGetFileInfo
MclListGetFrameCount
MclListGetFrameRate
MclListGetName
MclListGetSampleCount
MclListGetVideoFormat
MclListMove
MclListSort
MclLogExtra
MclLogStart
MclLogStop
MclMakeTimeStr
MclMpegGetAspectRatio
MclMpegInternalDecoder
MclMpegMultiplex
MclPixelReorder
MclRGB
MclReadAlpha
MclReadClose
MclReadImage
MclReadInfo
MclReadOpen
MclReadSound
MclRegister
MclReleaseDIB
MclReleaseDIBWin3
MclSetFormatPreset
MclSetUserData
MclSimpleConvert
MclSimpleReadFirstImage
MclSimpleReadImage
MclSimpleWriteImage
MclSndCopy
MclSndCreate
MclSndFree
MclSndGetInfo
MclSndGetSamples
MclSndResample
MclSndSetSamples
MclSourceFinished
MclSourceSetDIB
MclSourceSetDirection
MclSourceSetFile
MclSourceSetFrameRate
MclSourceSetImage
MclSourceSetLen
MclSourceSetLenTime
MclSourceSetPixels
MclSourceSetPixelsRect
MclSourceSetSamples
MclSourceSetSound
MclSourceSetStart
MclSourceSetStartTime
MclSourceSkip
MclSplitColor
MclTextCreate
MclTextFree
MclTextGetExtents
MclTextSetColor
MclTextSetFont
MclTextShadow
MclTiffGetTag
MclTiffSet16to8bitGrayRange
MclTranslate
MclTranslateClear
MclVideoAviCodecConfigDlg
MclVideoGetAspectRatio
MclVideoGetBitRate
MclVideoGetBytesWritten
MclVideoGetCodec
MclVideoGetCodecData
MclVideoGetCodecName
MclVideoGetDithering
MclVideoGetDpi
MclVideoGetFileFormat
MclVideoGetFileName
MclVideoGetFormat
MclVideoGetFrameRate
MclVideoGetKeepDuration
MclVideoGetKeyFrameRate
MclVideoGetQuality
MclVideoHasCodecDlg
MclVideoMpegGetClosedGOP
MclVideoMpegSetClosedGOP
MclVideoSetAspectRatio
MclVideoSetBitRate
MclVideoSetCodec
MclVideoSetCodecData
MclVideoSetDithering
MclVideoSetDpi
MclVideoSetFileFormat
MclVideoSetFileName
MclVideoSetFormat
MclVideoSetFrameRate
MclVideoSetKeepDuration
MclVideoSetKeyFrameRate
MclVideoSetQuality
MclVideoShowCodecDlg
MclWriteClose
MclWriteImage
MclWriteSound

Sections

CODE
Size: 921KB - Virtual size: 921KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 253KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/libmpg-1.0.2.dll
.dll windows:4 windows x86 arch:x86

bb6d4a6d9b5d81ee881ca83c14a1a358

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

_close
_open
_read
_setmode
_stat
_strdup
_unlink
_write
__dllonexit
__mb_cur_max
_assert
_errno
_findclose
_findfirsti64
_iob
_isctype
_lseeki64
_open
_pctype
_snprintf
_stricmp
_telli64
_tempnam
_vsnprintf
abort
atof
atoi
ceil
cos
cosh
exit
exp
fclose
fflush
floor
fopen
fprintf
fputc
fread
free
frexp
fscanf
fseek
fwrite
getc
gmtime
ldexp
localtime
log
malloc
memcpy
memmove
memset
mktime
perror
printf
puts
qsort
realloc
sin
sinh
sprintf
sqrt
sscanf
strcat
strchr
strcmp
strcpy
strlen
strncpy
strrchr
strstr
strtod
strtol
strtoul
tan
tanh
time
tmpnam
tolower
toupper
vfprintf

Exports

Exports

CloseMPEG
GetMPEGFrame
GetMPEGFrameFirst
GetMPEGFrameFirstFree
GetMPEGInfo
MOSLErrorFuncSet
OpenMPEG
SeekMPEG
bbmpeg_close
bbmpeg_create
bbmpeg_set_aspect_ratio
bbmpeg_set_bitrate
bbmpeg_set_closed_gop
bbmpeg_write
ffmpeg_audio_close
ffmpeg_audio_create
ffmpeg_audio_set_bitrate
ffmpeg_audio_write
ffmpeg_video_close
ffmpeg_video_create
ffmpeg_video_set_aspect_ratio
ffmpeg_video_set_bitrate
ffmpeg_video_set_closed_gop
ffmpeg_video_write_bgr24
ffmpeg_video_write_rgb24
ffmpeg_video_write_yuv420
mpg_audio_close
mpg_audio_info
mpg_audio_open
mpg_audio_read
mpg_audio_seek
mpg_get_type
mpg_mplex

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 339KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/libogg-1.0.0.dll
.dll windows:4 windows x86 arch:x86

9c4bec7dde4df37c79a9eaef9774308c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

_close
_open
_read
_write
__dllonexit
_errno
_lseeki64
_telli64
abort
acos
atan
calloc
ceil
cos
exit
exp
fclose
fflush
floor
fopen
fprintf
fread
free
frexp
fseek
ftell
ldexp
log
malloc
memchr
memcpy
memmove
memset
perror
qsort
rand
realloc
sin
sprintf
sqrt
srand
strcat
strcpy
strlen
strncpy
time
toupper

Exports

Exports

ogg_audio_get_info
ogg_audio_read
ogg_audio_seek
ogg_audio_write
ogg_close
ogg_create
ogg_open

Sections

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 936KB - Virtual size: 935KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/libpng-1.0.1.dll
.dll windows:4 windows x86 arch:x86

18e95048a830831b7a4d19541014656a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

__dllonexit
_errno
_iob
_setjmp
abort
calloc
fflush
floor
fprintf
fread
free
frexp
fwrite
gmtime
ldexp
longjmp
malloc
memcpy
memset
sprintf
strcpy
strlen
strtod

Exports

Exports

png_build_grayscale_palette
png_create_info_struct
png_create_read_struct
png_create_write_struct
png_destroy_read_struct
png_destroy_write_struct
png_get_IHDR
png_get_PLTE
png_get_channels
png_get_pHYs
png_get_rowbytes
png_read_end
png_read_image
png_read_info
png_read_update_info
png_set_IHDR
png_set_PLTE
png_set_bgr
png_set_compression_level
png_set_pHYs
png_set_packing
png_set_read_fn
png_set_strip_16
png_set_strip_alpha
png_set_write_fn
png_sig_cmp
png_write_end
png_write_image
png_write_info

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 144B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/libtif-1.0.0.dll
.dll windows:4 windows x86 arch:x86

d9f37376bead17be7937afc725b8fb67

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CloseHandle
CreateFileA
CreateFileMappingA
FindAtomA
GetAtomNameA
GetFileSize
GlobalAlloc
GlobalFree
GlobalReAlloc
GlobalSize
LocalAlloc
LocalFree
MapViewOfFile
ReadFile
SetFilePointer
UnmapViewOfFile
WriteFile
lstrlenA

msvcrt

__dllonexit
_assert
_errno
_iob
_setjmp
abort
calloc
exit
fflush
floor
fprintf
free
frexp
fwrite
getenv
ldexp
longjmp
malloc
memcpy
memset
qsort
sprintf
sscanf
strcpy
strlen

user32

GetFocus
MessageBoxA
wsprintfA
wvsprintfA

Exports

Exports

ExternErrorSet
ExternWarningSet
TIFFClose
TIFFDefaultStripSize
TIFFGetField
TIFFGetFieldDefaulted
TIFFNumberOfStrips
TIFFOpen
TIFFReadEncodedStrip
TIFFReadScanline
TIFFScanlineSize
TIFFSetField
TIFFStripSize
TIFFWriteScanline

Sections

.text
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 224B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/mp3enc.dll
.dll windows:4 windows x86 arch:x86

a5f12ee722d3bff47e96e2a88e2b1d13

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
GetModuleFileNameA
GetPrivateProfileIntA
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
GetProcAddress
GetModuleHandleA
GetLastError
CloseHandle
ExitProcess
TerminateProcess
GetCurrentProcess
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
OutputDebugStringA
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
VirtualAlloc
HeapReAlloc
SetFilePointer
RaiseException
FlushFileBuffers
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetStdHandle
CreateFileA
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
RtlUnwind
SetEndOfFile

Exports

Exports

beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beFlushNoGap
beInitStream
beVersion
beWriteInfoTag
beWriteVBRHeader
lame_close
lame_encode_buffer_interleaved
lame_encode_flush
lame_get_in_samplerate
lame_get_num_channels
lame_get_num_samples
lame_get_out_samplerate
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_init
lame_init_params
lame_mp3_tags_fid
lame_set_in_samplerate
lame_set_num_channels
lame_set_num_samples
lame_set_out_samplerate
lame_set_scale
lame_set_scale_left
lame_set_scale_right

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/sndvol32.dll
.exe windows:5 windows x86 arch:x86

00ba7da047cf6673979e19130b9460d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyExA

kernel32

SizeofResource
LockResource
LoadResource
FindResourceW
LocalAlloc
LocalFree
lstrcpynW
lstrcpyW
lstrcmpW
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
LoadLibraryW
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
RtlUnwind
GetSystemDirectoryW
FreeLibrary
WideCharToMultiByte
GlobalReAlloc
CloseHandle
GlobalAlloc
GlobalHandle
GlobalLock
SetHandleCount
CreateFileW
GlobalFree
GlobalUnlock

gdi32

CreateCompatibleBitmap
SelectObject
CreateSolidBrush
DeleteDC
BitBlt
DeleteObject
CreateCompatibleDC

user32

SendMessageW
GetWindowRect
GetClientRect
SetScrollPos
ScrollWindowEx
SubtractRect
MapWindowPoints
GetWindowTextW
GetFocus
GetDlgCtrlID
KillTimer
EnableWindow
ShowWindow
GetWindow
EndPaint
DrawEdge
BeginPaint
DestroyWindow
SetFocus
SetForegroundWindow
SetWindowPos
OffsetRect
GetMonitorInfoW
MonitorFromPoint
GetCursorPos
GetDesktopWindow
WinHelpW
DestroyIcon
SetPropW
SetWindowLongW
EnableMenuItem
CreateWindowExW
MonitorFromRect
GetSystemMetrics
RegisterDeviceNotificationW
MapDialogRect
LoadIconW
LoadImageW
IsIconic
RemovePropW
RegisterClassW
DefDlgProcW
LoadCursorW
CreateDialogIndirectParamW
PostQuitMessage
DefWindowProcW
UnhookWindowsHook
DispatchMessageW
TranslateMessage
IsDialogMessageW
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
FindWindowW
SetWindowsHookW
LoadStringW
IsWindowEnabled
IsDlgButtonChecked
CheckRadioButton
EndDialog
DialogBoxParamW
FillRect
GetSysColor
GetUpdateRect
InvalidateRect
wsprintfW
SetWindowTextW
MessageBoxW
GetPropW
UnregisterDeviceNotification
IsWindow
CallWindowProcW
GetDlgItem
GetWindowLongW
GetMenu
SetScrollInfo
CheckMenuItem
PostMessageW
MoveWindow
GetForegroundWindow

shell32

ShellAboutW

winmm

waveInGetNumDevs
mixerGetNumDevs
mixerGetControlDetailsW
mixerGetLineControlsW
mixerSetControlDetails
waveOutGetDevCapsW
midiOutGetDevCapsW
midiOutGetNumDevs
auxGetDevCapsW
auxGetNumDevs
waveOutMessage
waveInMessage
mixerOpen
mixerClose
timeKillEvent
timeSetEvent
mixerGetDevCapsW
mixerGetLineInfoW
mixerGetID
mixerMessage
PlaySoundW
waveOutGetNumDevs

comctl32

ord17

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceW
SetupDiCreateDeviceInfoList
SetupDiOpenDevRegKey

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/swf2video.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 1.5MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 899KB - Virtual size: 900KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 196KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vcdwj/wenjian/hhxc/swf2video.ini
vcdwj/wenjian/hhxc/vcdmb.ini
vcdwj/wenjian/hhxc/xieswf.exe
.exe windows:4 windows x86 arch:x86

7bd062a54ce82b8cdea14cc0d49a60cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord520
_CIsin
ord632
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
ord606
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaI2Var
ord537
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaStrToAnsi
__vbaVarCopy
ord616
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/xieswf1.exe
.exe windows:4 windows x86 arch:x86

24a99d0754c0d5fe176dcb3ecd6c14d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord520
_CIsin
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaVarTstEq
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord616
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/xieswf2.exe
.exe windows:4 windows x86 arch:x86

24a99d0754c0d5fe176dcb3ecd6c14d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord520
_CIsin
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaVarTstEq
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord616
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/xieswf3.exe
.exe windows:4 windows x86 arch:x86

24a99d0754c0d5fe176dcb3ecd6c14d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord520
_CIsin
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaVarTstEq
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord616
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/xieswf4.exe
.exe windows:4 windows x86 arch:x86

24a99d0754c0d5fe176dcb3ecd6c14d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord520
_CIsin
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaVarTstEq
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord616
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/xieswf5.exe
.exe windows:4 windows x86 arch:x86

24a99d0754c0d5fe176dcb3ecd6c14d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord520
_CIsin
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaVarTstEq
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord616
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/xieswf6.exe
.exe windows:4 windows x86 arch:x86

24a99d0754c0d5fe176dcb3ecd6c14d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord520
_CIsin
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaVarTstEq
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord616
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/xieswf7.exe
.exe windows:4 windows x86 arch:x86

24a99d0754c0d5fe176dcb3ecd6c14d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord520
_CIsin
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaVarTstEq
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord616
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/xieswf8.exe
.exe windows:4 windows x86 arch:x86

24a99d0754c0d5fe176dcb3ecd6c14d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord520
_CIsin
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaVarTstEq
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord616
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vcdwj/wenjian/hhxc/xlh.ini
vcdwj/wenjian/hhxc/zcjcd.ini
vcdwj/wenjian/hhxc/zjsq.txt
vcdwj/wenjian/tp1/01一个是阆苑仙葩，一个是美玉无瑕。若说没奇缘，今生偏又遇着他；若说有奇缘，如何心事终虚话？.jpg
.jpg
vcdwj/wenjian/tp1/02满纸荒唐言，一把辛酸泪。都云作者痴，谁解其中味！.jpg
.jpg
vcdwj/wenjian/tp1/03襁褓中，父母叹双亡。纵居那绮罗丛，谁知娇养？ .jpg
.jpg
vcdwj/wenjian/tp1/04乱烘烘你才唱罢我登场，反认他乡是故乡.jpg
.jpg
vcdwj/wenjian/tp1/05说到辛酸处,荒唐愈可悲. 由来同一梦,休笑世人痴!.jpg
.jpg
vcdwj/wenjian/tp1/06想眼中能有多少泪珠儿，怎禁得秋流到冬春流到夏！.jpg
.jpg
vcdwj/wenjian/tp1/07明媚鲜妍能几时，一朝飘泊难寻觅.jpg
.jpg
vcdwj/wenjian/tp1/08一个枉自嗟呀，一个空劳牵挂.jpg
.jpg
vcdwj/wenjian/tp1/09.jpg
.jpg
vcdwj/wenjian/tp1/Thumbs.db
vcdwj/wenjian/tp1/_desktop.ini
vcdwj/wenjian/tp2/Thumbs.db
vcdwj/wenjian/tp2/_desktop.ini
vcdwj/wenjian/zcm/ bjzh1a .txt
vcdwj/wenjian/zcm/ gqk .txt
vcdwj/wenjian/zcm/_desktop.ini
vcdwj/wenjian/zcm/bftx.txt
vcdwj/wenjian/zcm/bjzh.txt
vcdwj/wenjian/zcm/bjzh1a.txt
vcdwj/wenjian/zcm/gq01.txt
vcdwj/wenjian/zcm/gqk.txt
vcdwj/wenjian/zcm/qm/qm10.txt
vcdwj/wenjian/zcm/qm/qm11.txt
vcdwj/wenjian/zcm/qm/qm12.txt
vcdwj/wenjian/zcm/qm/qm13.txt
vcdwj/wenjian/zcm/qm/qm14.txt
vcdwj/wenjian/zcm/qm/qm15.txt
vcdwj/wenjian/zcm/qm/qm16.txt
vcdwj/wenjian/zcm/qm/qm17.txt
vcdwj/wenjian/zcm/qm/qm18.txt
vcdwj/wenjian/zcm/qm/qm19.txt
vcdwj/wenjian/zcm/qm/qm20.txt
vcdwj/wenjian/zcm/qm/qm21.txt
vcdwj/wenjian/zcm/qm/qm22.txt
vcdwj/wenjian/zcm/qm/qm23.txt
vcdwj/wenjian/zcm/qm/qm24.txt
vcdwj/wenjian/zcm/qm/qm25.txt
vcdwj/wenjian/zcm/qm/qm26.txt
vcdwj/wenjian/zcm/qm/qm27.txt
vcdwj/wenjian/zcm/qm/qm28.txt
vcdwj/wenjian/zcm/qm/qm29.txt
vcdwj/wenjian/zcm/qm/qm3.txt
vcdwj/wenjian/zcm/qm/qm30.txt
vcdwj/wenjian/zcm/qm/qm31.txt
vcdwj/wenjian/zcm/qm/qm32.txt
vcdwj/wenjian/zcm/qm/qm33.txt
vcdwj/wenjian/zcm/qm/qm34.txt
vcdwj/wenjian/zcm/qm/qm35.txt
vcdwj/wenjian/zcm/qm/qm36.txt
vcdwj/wenjian/zcm/qm/qm37.txt
vcdwj/wenjian/zcm/qm/qm38.txt
vcdwj/wenjian/zcm/qm/qm39.txt
vcdwj/wenjian/zcm/qm/qm4.txt
vcdwj/wenjian/zcm/qm/qm40.txt
vcdwj/wenjian/zcm/qm/qm41.txt
vcdwj/wenjian/zcm/qm/qm42.txt
vcdwj/wenjian/zcm/qm/qm43.txt
vcdwj/wenjian/zcm/qm/qm44.txt
vcdwj/wenjian/zcm/qm/qm5.txt
vcdwj/wenjian/zcm/qm/qm6.txt
vcdwj/wenjian/zcm/qm/qm7.txt
vcdwj/wenjian/zcm/qm/qm8.txt
vcdwj/wenjian/zcm/qm/qm9.txt
vcdwj/wenjian/zcm/sm.txt
vcdwj/wenjian/zcm/tpm1.txt
vcdwj/wenjian/zcm/tpm2.txt
vcdwj/wenjian/zcm/tpml.txt
vcdwj/wenjian/zcm/tpml1.txt
vcdwj/wenjian/zcm/tpml10.txt
vcdwj/wenjian/zcm/tpml11.txt
vcdwj/wenjian/zcm/tpml12.txt
vcdwj/wenjian/zcm/tpml13.txt
vcdwj/wenjian/zcm/tpml14.txt
vcdwj/wenjian/zcm/tpml15.txt
vcdwj/wenjian/zcm/tpml16.txt
vcdwj/wenjian/zcm/tpml17.txt
vcdwj/wenjian/zcm/tpml18.txt
vcdwj/wenjian/zcm/tpml19.txt
vcdwj/wenjian/zcm/tpml2.txt
vcdwj/wenjian/zcm/tpml20.txt
vcdwj/wenjian/zcm/tpml21.txt
vcdwj/wenjian/zcm/tpml22.txt
vcdwj/wenjian/zcm/tpml23.txt
vcdwj/wenjian/zcm/tpml24.txt
vcdwj/wenjian/zcm/tpml25.txt
vcdwj/wenjian/zcm/tpml26.txt
vcdwj/wenjian/zcm/tpml27.txt
vcdwj/wenjian/zcm/tpml28.txt
vcdwj/wenjian/zcm/tpml29.txt
vcdwj/wenjian/zcm/tpml3.txt
vcdwj/wenjian/zcm/tpml30.txt
vcdwj/wenjian/zcm/tpml31.txt
vcdwj/wenjian/zcm/tpml32.txt
vcdwj/wenjian/zcm/tpml33.txt
vcdwj/wenjian/zcm/tpml34.txt
vcdwj/wenjian/zcm/tpml35.txt
vcdwj/wenjian/zcm/tpml36.txt
vcdwj/wenjian/zcm/tpml37.txt
vcdwj/wenjian/zcm/tpml38.txt
vcdwj/wenjian/zcm/tpml39.txt
vcdwj/wenjian/zcm/tpml4.txt
vcdwj/wenjian/zcm/tpml40.txt
vcdwj/wenjian/zcm/tpml41.txt
vcdwj/wenjian/zcm/tpml42.txt
vcdwj/wenjian/zcm/tpml5.txt
vcdwj/wenjian/zcm/tpml6.txt
vcdwj/wenjian/zcm/tpml7.txt
vcdwj/wenjian/zcm/tpml8.txt
vcdwj/wenjian/zcm/tpml9.txt
vcdwj/wenjian/zcm/tpmla.txt
vcdwj/wenjian/zcm/tx.txt
vcdwj/wenjian/zcm/wjj.txt
vcdwj/wenjian/zcm/zch.ini
vcdwj/wenjian/zcm/zch1.ini
vcdwj/wenjian/zcm/zch2.ini
vcdwj/wenjian/zcm/zch3.ini
vcdwj/wenjian/zcm/zch4.ini
vcdwj/wenjian/zcm/歌曲目录.txt
vcdwj/wenjian/zcm/背景目录.txt
安装说明.url
.url

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.text Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 2KB

rsrr Size: 2KB - Virtual size: 8KB

56f3e1d42b2d8c0bc3bf949df3491fe3

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0aCertificate

Extended Key Usages

Key Usages

6f:0a:f7:a3:21:3c:ca:db:a8:ad:c1:a7:1b:75:61:a4Certificate

Extended Key Usages

Key Usages

42:7f:7e:f0:de:22:b6:23:cb:fb:ff:f7:7a:38:fd:18:55:d9:8e:3eSigner

Headers

File Characteristics

Imports

version

winmm

wsock32

wininet

crypt32

rpcrt4

oleaut32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

urlmon

Exports

Exports

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 172KB - Virtual size: 169KB

.data Size: 208KB - Virtual size: 996KB

.rsrc Size: 60KB - Virtual size: 57KB

.reloc Size: 68KB - Virtual size: 65KB

76114d56c8c1282d8a004aefa0d9031b

Headers

File Characteristics

Imports

kernel32

user32

ole32

advapi32

oleaut32

gdi32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 69KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 3KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 16KB - Virtual size: 12KB

.reloc Size: 8KB - Virtual size: 6KB

Headers

File Characteristics

Sections

.text Size: 816KB - Virtual size: 815KB

.data Size: 4KB - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 2KB

rsrr Size: 2KB - Virtual size: 8KB

.text
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB

rsrr
Size: 2KB - Virtual size: 8KB

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0a
Certificate

6f:0a:f7:a3:21:3c:ca:db:a8:ad:c1:a7:1b:75:61:a4
Certificate

42:7f:7e:f0:de:22:b6:23:cb:fb:ff:f7:7a:38:fd:18:55:d9:8e:3e
Signer

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 172KB - Virtual size: 169KB

.data
Size: 208KB - Virtual size: 996KB

.rsrc
Size: 60KB - Virtual size: 57KB

.reloc
Size: 68KB - Virtual size: 65KB

.text
Size: 72KB - Virtual size: 69KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 3KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 16KB - Virtual size: 12KB

.reloc
Size: 8KB - Virtual size: 6KB

.text
Size: 816KB - Virtual size: 815KB

.data
Size: 4KB - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 2KB

rsrr
Size: 2KB - Virtual size: 8KB

.text
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 64B

.rdata
Size: 15KB - Virtual size: 14KB

.bss
Size: - Virtual size: 160B

.edata
Size: 512B - Virtual size: 232B

.idata
Size: 1024B - Virtual size: 760B

.reloc
Size: 512B - Virtual size: 340B

.rsrc
Size: 1024B - Virtual size: 844B

.text
Size: 186KB - Virtual size: 185KB

.data
Size: 7KB - Virtual size: 7KB

.bss
Size: - Virtual size: 25KB

.edata
Size: 512B - Virtual size: 120B

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 844B

.text
Size: 102KB - Virtual size: 101KB

.data
Size: 512B - Virtual size: 48B

.bss
Size: - Virtual size: 144B

.edata
Size: 512B - Virtual size: 269B

.idata
Size: 1024B - Virtual size: 704B

.reloc
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 844B

CODE
Size: 921KB - Virtual size: 921KB

DATA
Size: 68KB - Virtual size: 67KB

BSS
Size: - Virtual size: 253KB

.idata
Size: 10KB - Virtual size: 10KB

.edata
Size: 6KB - Virtual size: 5KB

.reloc
Size: 55KB - Virtual size: 55KB

.rsrc
Size: 69KB - Virtual size: 69KB