500e13cb0d12de9147c57a4e1097ef12ce816fcb5713f6229ce3db184c37ca5d[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

500e13cb0d12de9147c57a4e1097ef12ce816fcb5713f6229ce3db184c37ca5d.exe
Size

272KB
MD5

3d5e4fcf35f537873ee321416e3dc9cb
SHA1

f24b485b88baa2aab0f372eaff94e3fdf38aba71
SHA256

500e13cb0d12de9147c57a4e1097ef12ce816fcb5713f6229ce3db184c37ca5d
SHA512

454c217496cdb497f7dbc9df9d0b8557f7185750d03b72621a95d62f7a28a393088724bb483e6096910cd26c4f9d4071c9adfdb81f1ceca4c1ee16ff89ac3a24
SSDEEP

6144:tkHzzxL75N1lUU1PI1Rlnvzjcph3bypqhOa0LBLdUD5:tkHz1P5N1lUU1PI1Rlnvzwph3bdhCBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
500e13cb0d12de9147c57a4e1097ef12ce816fcb5713f6229ce3db184c37ca5d.exe

Files

500e13cb0d12de9147c57a4e1097ef12ce816fcb5713f6229ce3db184c37ca5d.exe
.dll windows:4 windows x86 arch:x86

33cf8265cf095523961822ffa78e3b2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFileExistsA

mfc42

ord537
ord6141
ord858
ord860
ord540
ord535
ord4277
ord4129
ord2763
ord939
ord940
ord6283
ord6282
ord924
ord1988
ord539
ord5355
ord5807
ord1074
ord690
ord5204
ord3229
ord389
ord1228
ord4278
ord922
ord2393
ord6869
ord2818
ord5808
ord6059
ord665
ord6657
ord1979
ord5442
ord6881
ord3318
ord5186
ord354
ord941
ord798
ord1997
ord5465
ord5194
ord533
ord6877
ord5572
ord6385
ord5773
ord5583
ord3811
ord3880
ord3425
ord3054
ord3227
ord3408
ord3758
ord800
ord926
ord2915
ord823
ord5859
ord713
ord414
ord3662
ord5821
ord3663
ord825
ord5356

msvcrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
strpbrk
_ftol
free
memmove
_CxxThrowException
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
sprintf
sscanf
malloc
realloc
_mbscmp
atoi
atof
__CxxFrameHandler
_purecall
??0exception@@QAE@ABQBD@Z

kernel32

DisableThreadLibraryCalls
WritePrivateProfileStringA
Sleep
GetLastError
CloseHandle
WriteFile
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringA

user32

SendMessageA

msvcp60

?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??_7runtime_error@std@@6B@
??1runtime_error@std@@UAE@XZ
??0Init@ios_base@std@@QAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??_7?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0ios_base@std@@IAE@XZ
??_8?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IID@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?_Xlen@std@@YAXXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PAD0PBD1@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??0runtime_error@std@@QAE@ABV01@@Z

Exports

Exports

??0CApiSafe@@QAE@ABV0@@Z
??0CApiSafe@@QAE@XZ
??0CCloud@@QAE@XZ
??0CCloudMenu@@QAE@XZ
??0CCloudShop@@QAE@XZ
??0CConfigModel@@QAE@XZ
??0CDataSet@@QAE@ABV0@@Z
??0CDataSet@@QAE@XZ
??0CDtoCardCost@@QAE@XZ
??0CDtoEvent@@QAE@XZ
??0CDtoOrderConfirm@@QAE@ABV0@@Z
??0CDtoOrderConfirm@@QAE@XZ
??0CDtoPdaScanCodePayResult@@QAE@XZ
??0CDtoRoomDish@@QAE@PAUDATA_ROOM_DISH_SUBMIT@@@Z
??0CDtoRoomDish@@QAE@XZ
??0CDtoWebMsg@@QAE@XZ
??0CDxdConfig@@QAE@XZ
??0CEventBase@@QAE@ABV0@@Z
??0CEventBase@@QAE@XZ
??0CEventPda@@QAE@ABV0@@Z
??0CEventPda@@QAE@XZ
??0CEventWeb@@QAE@ABV0@@Z
??0CEventWeb@@QAE@XZ
??0CHttpProxy@@QAE@PAVCDxdConfig@@@Z
??0CJsonField@@QAE@ABVCString@@H@Z
??0CJsonField@@QAE@ABVCString@@M@Z
??0CJsonField@@QAE@ABVCString@@V1@@Z
??0CJsonField@@QAE@XZ
??0CJsonResult@@QAE@ABVCString@@@Z
??0CJsonResult@@QAE@XZ
??0CJsonRow@@QAE@XZ
??0CJsonUtil@@QAE@ABVCString@@@Z
??0CMD5Util@@QAE@XZ
??0CModelJson@@QAE@XZ
??0CPayGuopan@@QAE@XZ
??0CPayGuopanBill@@QAE@XZ
??0CPayGuopanHead@@QAE@ABV0@@Z
??0CPayGuopanHead@@QAE@XZ
??0CPayway@@QAE@HPBD0@Z
??0CPaywayManage@@QAE@XZ
??0CPdaIndex@@QAE@ABV0@@Z
??0CPdaIndex@@QAE@XZ
??0CSqlCyCard@@QAE@XZ
??0CSqlCyCartOrder@@QAE@AAV0@@Z
??0CSqlCyCartOrder@@QAE@XZ
??0CSqlCyCartOrderDish@@QAE@XZ
??0CSqlCyCheck@@QAE@XZ
??0CSqlCyCheckDish@@QAE@XZ
??0CSqlCyDish@@QAE@XZ
??0CSqlCyDishType@@QAE@XZ
??0CSqlCyRoom@@QAE@PAUPDA_ROOM_STATUS@@@Z
??0CSqlCyRoom@@QAE@XZ
??0CSqlCyRoomType@@QAE@XZ
??0CSqlCyShop@@QAE@XZ
??0CSqlPayment@@QAE@XZ
??0CSqlUserCheck@@QAE@XZ
??0CSqlVipCard@@QAE@XZ
??0CUtilCharset@@QAE@XZ
??1CApiSafe@@UAE@XZ
??1CCloud@@UAE@XZ
??1CCloudMenu@@UAE@XZ
??1CCloudShop@@UAE@XZ
??1CConfigModel@@UAE@XZ
??1CDataSet@@UAE@XZ
??1CDtoCardCost@@UAE@XZ
??1CDtoEvent@@UAE@XZ
??1CDtoOrderConfirm@@UAE@XZ
??1CDtoPdaScanCodePayResult@@UAE@XZ
??1CDtoRoomDish@@UAE@XZ
??1CDtoWebMsg@@UAE@XZ
??1CDxdConfig@@UAE@XZ
??1CEventBase@@UAE@XZ
??1CEventPda@@UAE@XZ
??1CEventWeb@@UAE@XZ
??1CHttpProxy@@UAE@XZ
??1CJsonField@@UAE@XZ
??1CJsonResult@@UAE@XZ
??1CJsonRow@@UAE@XZ
??1CJsonUtil@@UAE@XZ
??1CMD5Util@@UAE@XZ
??1CModelJson@@UAE@XZ
??1CPayGuopan@@UAE@XZ
??1CPayGuopanBill@@UAE@XZ
??1CPayGuopanHead@@QAE@XZ
??1CPayway@@UAE@XZ
??1CPaywayManage@@UAE@XZ
??1CPdaIndex@@UAE@XZ
??1CSqlCyCard@@UAE@XZ
??1CSqlCyCartOrder@@UAE@XZ
??1CSqlCyCartOrderDish@@UAE@XZ
??1CSqlCyCheck@@UAE@XZ
??1CSqlCyCheckDish@@UAE@XZ
??1CSqlCyDish@@UAE@XZ
??1CSqlCyDishType@@UAE@XZ
??1CSqlCyRoom@@UAE@XZ
??1CSqlCyRoomType@@UAE@XZ
??1CSqlCyShop@@UAE@XZ
??1CSqlPayment@@UAE@XZ
??1CSqlUserCheck@@UAE@XZ
??1CSqlVipCard@@UAE@XZ
??1CUtilCharset@@UAE@XZ
??4CApiSafe@@QAEAAV0@ABV0@@Z
??4CDataSet@@QAEAAV0@ABV0@@Z
??4CDtoOrderConfirm@@QAEAAV0@ABV0@@Z
??4CEventBase@@QAEAAV0@ABV0@@Z
??4CEventPda@@QAEAAV0@ABV0@@Z
??4CEventWeb@@QAEAAV0@ABV0@@Z
??4CPayGuopanHead@@QAEAAV0@ABV0@@Z
??4CPdaIndex@@QAEAAV0@ABV0@@Z
??_7CApiSafe@@6B@
??_7CCloud@@6B@
??_7CCloudMenu@@6B@
??_7CCloudShop@@6B@
??_7CConfigModel@@6B@
??_7CDataSet@@6B@
??_7CDtoCardCost@@6B@
??_7CDtoEvent@@6B@
??_7CDtoOrderConfirm@@6B@
??_7CDtoPdaScanCodePayResult@@6B@
??_7CDtoRoomDish@@6B@
??_7CDtoWebMsg@@6B@
??_7CDxdConfig@@6B@
??_7CEventBase@@6B@
??_7CEventPda@@6B@
??_7CEventWeb@@6B@
??_7CHttpProxy@@6B@
??_7CJsonField@@6B@
??_7CJsonResult@@6B@
??_7CJsonRow@@6B@
??_7CJsonUtil@@6B@
??_7CMD5Util@@6B@
??_7CModelJson@@6B@
??_7CPayGuopan@@6B@
??_7CPayGuopanBill@@6B@
??_7CPayway@@6B@
??_7CPaywayManage@@6B@
??_7CPdaIndex@@6B@
??_7CSqlCyCard@@6B@
??_7CSqlCyCartOrder@@6B@
??_7CSqlCyCartOrderDish@@6B@
??_7CSqlCyCheck@@6B@
??_7CSqlCyCheckDish@@6B@
??_7CSqlCyDish@@6B@
??_7CSqlCyDishType@@6B@
??_7CSqlCyRoom@@6B@
??_7CSqlCyRoomType@@6B@
??_7CSqlCyShop@@6B@
??_7CSqlPayment@@6B@
??_7CSqlUserCheck@@6B@
??_7CSqlVipCard@@6B@
??_7CUtilCharset@@6B@
?ApiCall@CPayGuopan@@AAEHH@Z
?Convert@CUtilCharset@@QAEPAGVCString@@H@Z
?ConvertGBKToUtf8@CUtilCharset@@QAEXAAVCString@@@Z
?ConvertUtf8ToGBK@CUtilCharset@@QAEXAAVCString@@@Z
?DownLoadFile@CHttpProxy@@QAEHPBD0@Z
?DownloadBasicData@CCloudMenu@@QAEXXZ
?ExecuteEvent@CEventWeb@@AAEXPAVCDtoEvent@@@Z
?FillToCombox@CPaywayManage@@QAEXPAVCComboBox@@@Z
?GetSetting@CConfigModel@@UAEXXZ
?GetSetting@CDxdConfig@@UAEXXZ
?GetStrFromMyIni@CConfigModel@@MAE?AVCString@@PBD00@Z
?GetStrFromMyIni@CDxdConfig@@IAE?AVCString@@PBD00@Z
?HttpPostFile@CHttpProxy@@QAE?AVCString@@ABV2@000@Z
?InitInstance@CCloud@@QAEXPAVCDxdConfig@@@Z
?InitInstance@CConfigModel@@UAEXAAVCString@@@Z
?InitInstance@CDxdConfig@@UAEXAAVCString@@@Z
?InitInstance@CDxdConfig@@UAEXAAVCString@@P6GXPBD@Z@Z
?InitInstance@CDxdConfig@@UAEXP6GXPBD@Z@Z
?InitInstance@CEventWeb@@QAEXPAVCDxdConfig@@P6GXPBD@ZPAVCEventPda@@PAVCDataSet@@@Z
?InitInstance@CPayGuopan@@QAEXPBD@Z
?InitInstance@CPayway@@UAEXAAVCString@@@Z
?InitInstance@CPaywayManage@@UAEXAAVCString@@@Z
?OnDownloadDishTypes@CCloudMenu@@UAEXXZ
?OnDownloadDishs@CCloudMenu@@UAEXXZ
?OnDownloadRooms@CCloudMenu@@UAEXXZ
?OnEventLog@CEventBase@@MAEXPBD@Z
?OnLogEvent@CCloud@@QAEXPBD@Z
?OnLogEvent@CDxdConfig@@QAEXPBD@Z
?OrderDeliver@CEventWeb@@QAEHVCSqlCyCartOrder@@HVCString@@AAV3@@Z
?OrderFinish@CEventWeb@@QAEHVCSqlCyCartOrder@@AAVCString@@@Z
?PostForm@CHttpProxy@@QAE?AVCString@@ABV2@0@Z
?PostJson@CHttpProxy@@QAE?AVCString@@ABV2@0@Z
?ReadData@CHttpProxy@@AAEPADPAVCHttpFile@@@Z
?ReadStrFromProFile@CDxdConfig@@IAE?AVCString@@PBD000@Z
?ReleaseAll@CCloudMenu@@QAEXXZ
?ReleaseDishs@CSqlCyCheck@@QAEXXZ
?SaveSetting@CConfigModel@@UAEXXZ
?SaveSetting@CDxdConfig@@UAEXXZ
?SaveSetting@CPayway@@UAEXXZ
?SaveSetting@CPaywayManage@@UAEXXZ
?SaveStrToMyIni@CConfigModel@@MAEXPBD00@Z
?SaveStrToMyIni@CDxdConfig@@IAEXPBD00@Z
?TakeEvent@CEventWeb@@QAEXXZ
?TakeEventBatch@CEventWeb@@QAEXXZ
?TestApi@CEventWeb@@QAEXXZ
?UnicodeToUtf8@CUtilCharset@@QAEPADPBG@Z
?_ReadStrFromProFile@CConfigModel@@IAE?AVCString@@PBD000@Z
?clear@CJsonRow@@QAEXXZ
?clear@CPaywayManage@@QAEXXZ
?closeIndex@CPdaIndex@@QAEXH@Z
?downDishTypes@CCloudMenu@@IAEXXZ
?downDishTypes@CEventWeb@@AAEXXZ
?downDishs@CCloudMenu@@IAEXXZ
?downDishs@CEventWeb@@AAEXXZ
?downRooms@CCloudMenu@@IAEXXZ
?downRooms@CEventWeb@@AAEXXZ
?download@CEventWeb@@QAEXXZ
?encode@CMD5Util@@QAE?AVCString@@PBD@Z
?eventResult@CEventWeb@@QAEXHH@Z
?eventResult@CEventWeb@@QAEXHHPAVCDtoOrderConfirm@@@Z
?findById@CPaywayManage@@QAEPAVCPayway@@H@Z
?fromJsonString@CDtoCardCost@@UAEXABVCString@@@Z
?fromJsonString@CDtoEvent@@UAEXABVCString@@@Z
?fromJsonString@CDtoPdaScanCodePayResult@@UAEXABVCString@@@Z
?fromJsonString@CDtoWebMsg@@UAEXABVCString@@@Z
?fromJsonString@CModelJson@@UAEXABVCString@@@Z
?fromJsonString@CSqlCyCard@@UAEXABVCString@@@Z
?fromJsonString@CSqlCyCartOrder@@UAEXABVCString@@@Z
?fromJsonString@CSqlCyCartOrderDish@@UAEXABVCString@@@Z
?fromJsonString@CSqlCyDish@@UAEXABVCString@@@Z
?fromJsonString@CSqlCyDishType@@UAEXABVCString@@@Z
?fromJsonString@CSqlCyRoom@@UAEXABVCString@@@Z
?fromJsonString@CSqlCyRoomType@@UAEXABVCString@@@Z
?fromJsonString@CSqlCyShop@@UAEXABVCString@@@Z
?fromJsonString@CSqlPayment@@UAEXABVCString@@@Z
?fromJsonString@CSqlUserCheck@@UAEXABVCString@@@Z
?fromJsonString@CSqlVipCard@@UAEXABVCString@@@Z
?get@CHttpProxy@@QAE?AVCString@@ABV2@0@Z
?getEventId@CPdaIndex@@QAEHH@Z
?getStatusName@CSqlCyCartOrder@@QAE?AVCString@@XZ
?getTableCode@CPdaIndex@@QAE?AVCString@@H@Z
?handle@CJsonResult@@AAEXAAVCString@@@Z
?login@CCloudShop@@QAEHXZ
?login@CEventWeb@@QAEHXZ
?newId@CPayGuopan@@AAEHXZ
?parse@CJsonRow@@QAEHABVCString@@@Z
?parse@CJsonUtil@@QAEPAVCJsonRow@@XZ
?paymentLaunch@CPayGuopan@@QAEHPAVCPayGuopanHead@@PAV?$CTypedPtrArray@VCObArray@@PAVCPayGuopanBill@@@@@Z
?post@CHttpProxy@@AAEHPAVCString@@ABV2@11H@Z
?postSmjz@CEventWeb@@QAEHPBD00@Z
?postZZSX@CEventWeb@@QAEXHPAV?$CTypedPtrArray@VCObArray@@PAVCSqlCyRoom@@@@@Z
?postZdcx@CEventWeb@@QAEXHPAV?$CTypedPtrArray@VCObArray@@PAVCDtoRoomDish@@@@@Z
?pushField@CJsonRow@@QAEXPAVCJsonField@@@Z
?readDC@CEventWeb@@AAEXHH@Z
?readDcjz@CEventWeb@@AAEXHPBD@Z
?readJsonDishs@CSqlCyCheck@@AAE?AVCString@@XZ
?readUserCheckInfor@CEventWeb@@AAE?AVCSqlCyCartOrder@@H@Z
?readVipCard@CEventWeb@@QAEHPAVCSqlVipCard@@ABVCString@@@Z
?readVipCardTrans@CEventWeb@@QAEHPAVCDtoCardCost@@ABVCString@@M1@Z
?readVipVCode@CEventWeb@@QAEHPAVCDtoWebMsg@@ABVCString@@M@Z
?readZZSX@CEventWeb@@AAEXH@Z
?readZdcx@CEventWeb@@AAEXHPBD@Z
?releaseDishTypes@CCloudMenu@@IAEXXZ
?releaseDishs@CCloudMenu@@IAEXXZ
?releaseRooms@CCloudMenu@@IAEXXZ
?saveFile@CPayGuopan@@AAEXHAAVCString@@@Z
?scanCodePay@CEventWeb@@QAEHPAVCDtoPdaScanCodePayResult@@PAVCSqlCyCheck@@@Z
?takeIndex@CPdaIndex@@QAEHHPBD0@Z
?toJsonString@CDtoRoomDish@@UAE?AVCString@@H@Z
?toJsonString@CJsonRow@@QAE?AVCString@@XZ
?toJsonString@CModelJson@@UAE?AVCString@@XZ
?toJsonString@CPayGuopanBill@@QAE?AVCString@@XZ
?toJsonString@CSqlCyCard@@UAE?AVCString@@XZ
?toJsonString@CSqlCyCheck@@UAE?AVCString@@XZ
?toJsonString@CSqlCyCheckDish@@UAE?AVCString@@XZ
?toJsonString@CSqlCyDish@@UAE?AVCString@@XZ
?toJsonString@CSqlCyDishType@@UAE?AVCString@@XZ
?toJsonString@CSqlCyRoom@@UAE?AVCString@@XZ
?toJsonString@CSqlCyRoomType@@UAE?AVCString@@XZ
?toJsonString@CSqlVipCard@@UAE?AVCString@@XZ
?transGuopanMsg@CEventWeb@@QAEXABVCString@@@Z
?upDcjz@CEventWeb@@QAEXH@Z
?valOfString@CJsonRow@@QAE?AVCString@@PBD@Z

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

33cf8265cf095523961822ffa78e3b2c

Headers

File Characteristics

Imports

shlwapi

mfc42

msvcrt

kernel32

user32

msvcp60

Exports

Exports

Sections

.text Size: 144KB - Virtual size: 141KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 8KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 848B

.reloc Size: 16KB - Virtual size: 12KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 144KB - Virtual size: 141KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 848B

.reloc
Size: 16KB - Virtual size: 12KB

.rmnet
Size: 60KB - Virtual size: 60KB