84ee084954b45a8486268d78f78d831b
- SHA256 b52da1ee04e42c4cdf4709ebf085ecdcfba723575b712a8671764fda01329289
Overview
overview
7Static
static
7鼠标连�...t.html
windows7-x64
1鼠标连�...t.html
windows10-2004-x64
1鼠标连�...ut.dll
windows7-x64
1鼠标连�...ut.dll
windows10-2004-x64
3鼠标连�...an.exe
windows7-x64
7鼠标连�...an.exe
windows10-2004-x64
7鼠标连�...ts.dll
windows7-x64
7鼠标连�...ts.dll
windows10-2004-x64
7鼠标连�...ut.dll
windows7-x64
3鼠标连�...ut.dll
windows10-2004-x64
3鼠标连�...ao.exe
windows7-x64
7鼠标连�...ao.exe
windows10-2004-x64
7鼠标连�...ts.dll
windows7-x64
7鼠标连�...ts.dll
windows10-2004-x64
1鼠标连�...��.url
windows7-x64
1鼠标连�...��.url
windows10-2004-x64
1鼠标连�...��.exe
windows7-x64
7鼠标连�...��.exe
windows10-2004-x64
7Behavioral task
behavioral1
Sample
鼠标连点器/BBXTools/GameSelect.html
Resource
win7-20231129-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
鼠标连点器/BBXTools/GameSelect.html
Resource
win10v2004-20231222-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
鼠标连点器/BBXTools/jianpan/bbxinput.dll
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
鼠标连点器/BBXTools/jianpan/bbxinput.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
鼠标连点器/BBXTools/jianpan/jianpan.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
鼠标连点器/BBXTools/jianpan/jianpan.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
鼠标连点器/BBXTools/jianpan/tckpts.dll
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
鼠标连点器/BBXTools/jianpan/tckpts.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
鼠标连点器/BBXTools/shubiao/bbxinput.dll
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
鼠标连点器/BBXTools/shubiao/bbxinput.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
鼠标连点器/BBXTools/shubiao/shubiao.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
鼠标连点器/BBXTools/shubiao/shubiao.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
鼠标连点器/BBXTools/shubiao/tckpts.dll
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral14
Sample
鼠标连点器/BBXTools/shubiao/tckpts.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
鼠标连点器/新云软件.url
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
鼠标连点器/新云软件.url
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
鼠标连点器/鼠标连点器.exe
Resource
win7-20231129-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral18
Sample
鼠标连点器/鼠标连点器.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
9 signatures
150 seconds
General
- Target 84ee084954b45a8486268d78f78d831b
- Size 672KB
- Sample240131-val93aghh4
- SHA256 b52da1ee04e42c4cdf4709ebf085ecdcfba723575b712a8671764fda01329289
- MD5 84ee084954b45a8486268d78f78d831b
- SHA1 e8b443f6e255f622fb4f8cb00bdb403a26db2e7c
- SHA512 0b113f21dfcd1f5766bf704a439ef3bf63e29721ba933c0b69315c1db829ce549fa60259e1d8929981dd4410785d96b73cd47ec1ae0206dfb6572fe73ff1e9c9
- SSDEEP 12288:FDaJu0B4DQv7uVG5okUckgE635xHei/oV/VtEQK2A4t+mh4H4ayl2YZLCur:FDaJgDQv748LE63HHD/oVgQK9jmhUjY9
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule static1/unpack001/鼠标连点器/BBXTools/jianpan/jianpan.dat upx static1/unpack001/鼠标连点器/BBXTools/shubiao/shubiao.dat upx static1/unpack001/鼠标连点器/鼠标连点器.exe upx -
resource yara_rule static1/unpack001/鼠标连点器/BBXTools/jianpan/tckpts.sys vmprotect static1/unpack001/鼠标连点器/BBXTools/shubiao/tckpts.sys vmprotect - Unsigned PE 10 IoCs
Checks for missing Authenticode signature.
resource unpack001/鼠标连点器/BBXTools/jianpan/bbxinput.dll unpack001/鼠标连点器/BBXTools/jianpan/jianpan.dat unpack002/out.upx unpack001/鼠标连点器/BBXTools/jianpan/tckpts.sys unpack001/鼠标连点器/BBXTools/shubiao/bbxinput.dll unpack001/鼠标连点器/BBXTools/shubiao/shubiao.dat unpack003/out.upx unpack001/鼠标连点器/BBXTools/shubiao/tckpts.sys unpack001/鼠标连点器/鼠标连点器.exe unpack004/out.upx
File Explorer
-
84ee084954b45a8486268d78f78d831b.rar 672KB
-
鼠标连点器/BBXTools/GameSelect.html.html .js 38KB
-
鼠标连点器/BBXTools/baobeiskin/1/ToolInfo.ini463B
-
鼠标连点器/BBXTools/baobeiskin/1/shubiao.bmp28KB
-
鼠标连点器/BBXTools/baobeiskin/2/ToolInfo.ini455B
-
鼠标连点器/BBXTools/baobeiskin/2/jianpan.bmp28KB
-
鼠标连点器/BBXTools/jianpan/KeyboardPress.ini569B
-
鼠标连点器/BBXTools/jianpan/bbxinput.dll.dll 48KB
-
鼠标连点器/BBXTools/jianpan/jianpan.dat.exe 214KB
-
out.upx.exe 808KB
-
鼠标连点器/BBXTools/jianpan/tckpts.sys.dll 133KB
-
鼠标连点器/BBXTools/jianpan/ver.ini13B
-
鼠标连点器/BBXTools/shubiao/bbxinput.dll.dll 52KB
-
鼠标连点器/BBXTools/shubiao/shubiao.dat.exe 208KB
-
out.upx.exe 664KB
-
鼠标连点器/BBXTools/shubiao/tckpts.sys.dll 133KB
-
鼠标连点器/BBXTools/shubiao/ver.ini13B
-
鼠标连点器/BBXTools/skin/bbxskin/anjianjl.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/biansujl.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/booktool.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/gifpingmlx.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/guanji.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/huoxingwensrf.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/jdyou.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/jianpan.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/jinchenggl.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/naozhong.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/neicunyh.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/rubbishclear.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/shubiao.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/skin3.ini9KB
-
鼠标连点器/BBXTools/skin/bbxskin/theworld.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/tools_default_click.bmp4KB
-
鼠标连点器/BBXTools/skin/bbxskin/tools_default_hover.bmp4KB
-
鼠标连点器/BBXTools/skin/bbxskin/tools_default_normal.bmp4KB
-
鼠标连点器/BBXTools/skin/bbxskin/weather.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/weishi.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/xiaorili.bmp28KB
-
鼠标连点器/BBXTools/skin/bbxskin/zhuomian.bmp28KB
-
鼠标连点器/BBXTools/skin/skin3.ini25B
-
鼠标连点器/bbx.ini121B
-
鼠标连点器/使用说明.txt367B
-
鼠标连点器/新云软件.url.url 133B
-
鼠标连点器/鼠标连点器.exe.exe 310KB
-
out.upx.exe 1.1MB
鼠标连点器/BBXTools/GameSelect.html
- SHA256 a7b32f544fac9d4881d69847685bb79963e4578ab56ea60d0e0bc446bb601c74
- MD5 236324680209ad985f959635b37c586d
- SHA1 e4165fa499b6b1b8af772a230db0d3073ec319b1
- SHA512 0175927d83be2379b6f5e9cd75b7f3b7ded67cb2d30a98a258cce830a36ade0c8fd64d1dfb37fb4093be2c94fdd9ccd1a3a879933a48e597f9b789fe83025d71
- SSDEEP 768:BNh9hWhQAdbvXoIjp0dEs+5AEYwfQNBOnrEfxbun71BnQ:BNzhMQAdbvXoIjp0dEs+5AEYEQNsnrEh
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/baobeiskin/1/ToolInfo.ini
- SHA256 46c1953ea801d95170e6cc9d57ffbf9182718c9f9d462a4840f433c54aa4eb1b
- MD5 23be707d4f94a4d37a834ad6e115b700
- SHA1 6324437e3d97b5c4a93c0f314e541a4f9ffcd870
- SHA512 7a4ba4069819eb50fcefec5c170495d238a2221b98fc1e2abe398d554aa9e9bbc5b1e9ecbebe357f6e07647483499aa84597122c069245ee338bc1390baf5ee3
- MD5 SHA1 SHA512
鼠标连点器/BBXTools/baobeiskin/1/shubiao.bmp
- SHA256 4fc38c5ff0d1d6f0c73973dc1d8db8d35a028877608ea85bbe9c62f417815247
- MD5 2b55854352998ed3049ee2695a4c3caf
- SHA1 302f435878ab69189d531b85a8571cae05d74d23
- SHA512 4be02c0e3d6bf2ca346139abd7efc9dc6f6b869b123460850814ced1ea288bcdd7ea8295c29173d88c3f2fe1be81133a3e00707e9fe711af44851eb5d6ee06fa
- SSDEEP 96:VCHokzZqI3nIbZwcT+vh+MRIH+AD1MqRt3uLJGtau4YG20aCg93bYYGybm:VuoWQheGyqRtIJ6u20a1brzy
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/baobeiskin/2/ToolInfo.ini
- SHA256 66e7de80d5c74b4665259d65671cb132b080d7d393f02d4fc1f8e9c4e4899461
- MD5 2fd1879d23b0bbac11342402a53a0883
- SHA1 dcbce32e17883869c44a9750fb83415b6f1932f5
- SHA512 e6763e8088597742e06311c46072461f8e23f7f85bcee65f34986240f0d7a57b70dfb0a3ac33c16afe11b29cbfd4161196467793ef3f0214f3f9ffa105710f93
- MD5 SHA1 SHA512
鼠标连点器/BBXTools/baobeiskin/2/jianpan.bmp
- SHA256 729464e1bfb642d400f20b51de6a53f1ba8bd6a73648386fa5f1fee6d865ad00
- MD5 c7502511474841f75cb0f76babb4e0e1
- SHA1 d2e308df4064f5984c0ecd075121dbd6ed42ff61
- SHA512 1cd642b18cb608ee2691751993232994126bd6a06dc3619c24a2e5b7972d6cfb56b6e3e121af8fbc6cf13405053fbbc604f0280e9251c2a7e010121924bb4668
- SSDEEP 192:VESc3BPG1qZ52tN2V8kY+Ox2aZXn540half5THEVh7X0bnhilL:VES0PG1uY2V8kBUV9DhalVHe7XQIF
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/jianpan/KeyboardPress.ini
- SHA256 621c67065caa339730c80d8c6eae003f8049c71be5032a44ee0124b2e38b8799
- MD5 5e49aab85c1a51dc8a3c7fb62b589c22
- SHA1 e1c69c9b5c540014177f848d3f878c998f889848
- SHA512 2ca7e1aa4493169c286431b0697b54d98b16e9539e4ffcbcb07a8fbc07a3adc99353cd55b80df6f7551bc2ced55e987892a406127ce60823f43ec3c63fc769c1
- MD5 SHA1 SHA512
鼠标连点器/BBXTools/jianpan/bbxinput.dll
- IMPHASH 97a73544ea0446cdb0035137af6f0d1a
- SHA256 2c59c5d1e4ecaa3e2ba9e4143a3e0406ee84dccecbc5a4d3fad6792b0730c3e8
- MD5 332915c6b4d3ec19f8436eeffa15f008
- SHA1 4164f6a86fe2b7c1d61624db048e2fc6a011e49b
- SHA512 b838e4ed8e2e79d284253a96fa3f89c86aef67849391bd413c3d81bb62d1205a10d3618995964191c3f238d66dd091cffaf34d8588b4a01aafcb0ec33458042c
- SSDEEP 768:3vvT3XcjgW+buSTMMAF7USQATTgnDGeWOjFW1J5LvdPogZT:3vvT3XccuSDk7TTjeWOwhLpoU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15400
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
SetLastError
HeapFree
ReadFile
HeapAlloc
GetProcessHeap
GetFileInformationByHandle
GetSystemDirectoryA
UnmapViewOfFile
MapViewOfFile
GetModuleHandleA
Sleep
OutputDebugStringA
GetVersion
VirtualAlloc
CreateFileA
GetLastError
GetCurrentProcessId
DeviceIoControl
FreeLibrary
LoadLibraryA
CreateFileMappingA
GetProcAddress
RtlUnwind
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
user32
MapVirtualKeyA
SystemParametersInfoA
GetSystemMetrics
SendInput
keybd_event
gdi32
GetPixel
advapi32
DeleteService
OpenServiceA
StartServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
ControlService
Name
.text
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=77, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=20, id=14, version=7299,
count=9, id=19, version=8034,
count=99, id=1, productName=Unmarked objects,
count=18, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
鼠标连点器/BBXTools/jianpan/jianpan.dat
- SHA256 f1cc9a86283b230ffe8999e81b3225ea3249d4507dab53458cd47f346c8b733c
- MD5 169a252696ab96a054499ba07cd30fb6
- SHA1 9966bc71c6e50c2271e3c65b292fb6d7863dcbdd
- SHA512 a7f0b27a7135cc82081bb6a538090ddde6ece9b131e9832e6f94bc94c992ab337ff4044e70e725c0ea9b3fcf1aed25de93dfd83e21a2be6eb8946ecea9abd41e
- SSDEEP 6144:nRJ8PMWjXEqLToPXK9K1KjQFKBHKKKKm7qHxgE8:L0DdSXK9KIjWKVKKKKmY
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
835280
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
700KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
112KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
101KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=12, version=7291,
count=12, id=19, version=8034,
count=2, id=14, version=7299,
count=11, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=488, id=1, productName=Unmarked objects,
count=13, productName=Unmarked objects (old),
count=11, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
out.upx
- SHA256 e691cec317eff6c8dfef8e3f2989d00ca1b419e98fd259d15e4c03aa8b4fc015
- MD5 4067c00e4dc2322510bd9b9fb82fc368
- SHA1 6561d11e8db0e973cf87d45b2ea3f3b4a962d221
- SHA512 acf692db37a565ed25c672dbf559ae4df3f91178586638de16118c4927a10fe373aff85388771aca53946eba8bb2e2cfe180dab690e8ea849d3b6754daa31591
- SSDEEP 6144:PDEliTBZ86bo7lRlxGLNNv1YkZhxP0Z6+P74K9K1KjQFKBHKKKKm7qHxgE8FvOMX:PDb3K9KIjWKVKKKKmYwOwv
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
64102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
68KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
712KB
Virtual Size
710KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=12, id=19, version=8034,
count=2, id=14, version=7299,
count=11, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=488, id=1, productName=Unmarked objects,
count=13, productName=Unmarked objects (old),
count=11, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
鼠标连点器/BBXTools/jianpan/tckpts.sys
- IMPHASH 387f999872a562b115e05bff360201eb
- SHA256 934766b218623fee06bdca31f6c7397c7fe40547d555f35f18c07850641cadb5
- MD5 20460b534e8baa7eaffcf7d020993cfd
- SHA1 c238f4d0cb1a126b774b186659da643560b5a9d9
- SHA512 9d73c795df99f19680d2e810163afa16f0d25e983c6d07b55373ca3e56f55022cb92d5628a5fc67abe52eddb85be74782db8aa7f8cf5dae1e355eb77bac3a66b
- SSDEEP 3072:/lWPT7WsSHFttCrUp5XgPddLy4IiRKdODMzWPVM8Vx:/IPePFmq5XgPddL9IihMqttx
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10144
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ntoskrnl.exe
PsGetCurrentProcessId
KeAttachProcess
KeServiceDescriptorTable
MmIsAddressValid
KeAddSystemServiceTable
_except_handler3
PsGetVersion
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
IofCompleteRequest
ExFreePool
ZwDeviceIoControlFile
NtDeviceIoControlFile
ExAllocatePoolWithTag
NtOpenProcess
MmFreeNonCachedMemory
Ke386SetIoAccessMap
Ke386IoSetAccessProcess
IoGetCurrentProcess
MmAllocateNonCachedMemory
IoDeleteSymbolicLink
ZwClose
ZwMapViewOfSection
ZwOpenSection
ZwUnmapViewOfSection
ZwQuerySystemInformation
ObfDereferenceObject
ObReferenceObjectByName
IoDriverObjectType
PsLookupThreadByThreadId
MmGetPhysicalAddress
ObReferenceObjectByHandle
hal
HalTranslateBusAddress
_NtGdiGetPixel_Vir@12
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
464B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
82B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.vmp0
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.vmp1
Size
109KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, productName=Unmarked objects (old),
count=35, id=1, productName=Unmarked objects,
count=5, id=19, version=9049,
count=6, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=2, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
鼠标连点器/BBXTools/jianpan/ver.ini
- SHA256 f053bd50f4da85a256f03be4db2d4d36e34161176dc97b96e97c4c40d313ac89
- MD5 0cd59044da3bf0e6879d3cd3b2d8d67d
- SHA1 3f0527e704ebd288e756c4a2aa24d6c430d630b2
- SHA512 1897b7a7eb000f64d694a235b75280d1b37ac7540237b55bf53c8b1eaeaf86eff2f2f907f507c06bf6283afd79eb6a5d1ed4cb78fffd6eb0901be1c175532d0d
- MD5 SHA1 SHA512
鼠标连点器/BBXTools/shubiao/bbxinput.dll
- IMPHASH 17c261cd8aa1ce8aeff0f9d5c09e429e
- SHA256 abfee9ae1137f04e82d336732c92045d35308e12427a92f81fe99c8ff71e1364
- MD5 4b0e1c6744c4ddf1e4dd59dc395e4a4c
- SHA1 71193a9b6fc643fe01db19ff5e408c8be094f927
- SHA512 60cf680e2882ff5ea0a11ae36a1943597715aeb791758ca1ae97f89d4cc0f0ef63e9cb0826966133eb684c9775fd7870fe330d8303299d8f809870390689cf5c
- SSDEEP 1536:QnY7rw2y/o2TFSvPQM/9iSEV+wBoq5Joyqp:QYfw3kHQ+H+Wsoyqp
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15747
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
SetLastError
HeapFree
ReadFile
HeapAlloc
GetProcessHeap
GetFileInformationByHandle
GetSystemDirectoryA
UnmapViewOfFile
MapViewOfFile
GetModuleHandleA
Sleep
OutputDebugStringA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetVersion
VirtualAlloc
CreateFileA
GetLastError
GetCurrentProcessId
DeviceIoControl
FreeLibrary
LoadLibraryA
CreateFileMappingA
GetProcAddress
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
user32
MapVirtualKeyA
SystemParametersInfoA
GetSystemMetrics
SendInput
keybd_event
gdi32
GetPixel
advapi32
DeleteService
OpenServiceA
StartServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
ControlService
Name
.text
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=80, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=20, id=14, version=7299,
count=9, id=19, version=8034,
count=101, id=1, productName=Unmarked objects,
count=18, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
鼠标连点器/BBXTools/shubiao/shubiao.dat
- SHA256 0c240b9afec2f8f452014fc42ac1855121faf81bfcde6e0187918a724224b60a
- MD5 1d924799da9eda1b5716d52aea79cefc
- SHA1 646dab439cf6ba807cadf7420cf13b36a7fbbae0
- SHA512 18dcc8308791767e308a85e9a94d9c4ea57003ba8e251ca40eba49ab0da521e3e59201a111586145277eb7c27d8d70ac646e07a37461ce1349a247880a6c442f
- SSDEEP 6144:3lcPLP/FciD9HPh43USudK9K1KjQFKBHKKKKm7qHxtE8:3oLNc8Fp5SAK9KIjWKVKKKKmY
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
686608
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
560KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
107KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
100KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=12, version=7291,
count=12, id=19, version=8034,
count=2, id=14, version=7299,
count=11, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=481, id=1, productName=Unmarked objects,
count=13, productName=Unmarked objects (old),
count=9, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
out.upx
- SHA256 dcdb4717308689a3c3dbd6ff0aa32d14cc96b640ad1346bbf9dbd2da6d1ced8c
- MD5 7d411db81a3bed88e9396b564dccd225
- SHA1 ae42cccf049e4a00a1ffdce7b1f06a8110d6c44f
- SHA512 30e9c4d38dbe10ca6fef7a0883c4258b8147322e94559d56a330a4b50f3ca495cafb2b5917bd29210a9328433043d96d11865a8d9bec0ce75a9f78544b3d3c4e
- SSDEEP 6144:KGtyciARcMA1LYK9K1KjQFKBHKKKKm7qHxtE84OM+mVOvt:KGtSbYK9KIjWKVKKKKmYEOyOv
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
55862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
584KB
Virtual Size
581KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=12, id=19, version=8034,
count=2, id=14, version=7299,
count=11, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=481, id=1, productName=Unmarked objects,
count=13, productName=Unmarked objects (old),
count=9, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
鼠标连点器/BBXTools/shubiao/tckpts.sys
- IMPHASH 387f999872a562b115e05bff360201eb
- SHA256 934766b218623fee06bdca31f6c7397c7fe40547d555f35f18c07850641cadb5
- MD5 20460b534e8baa7eaffcf7d020993cfd
- SHA1 c238f4d0cb1a126b774b186659da643560b5a9d9
- SHA512 9d73c795df99f19680d2e810163afa16f0d25e983c6d07b55373ca3e56f55022cb92d5628a5fc67abe52eddb85be74782db8aa7f8cf5dae1e355eb77bac3a66b
- SSDEEP 3072:/lWPT7WsSHFttCrUp5XgPddLy4IiRKdODMzWPVM8Vx:/IPePFmq5XgPddL9IihMqttx
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10144
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ntoskrnl.exe
PsGetCurrentProcessId
KeAttachProcess
KeServiceDescriptorTable
MmIsAddressValid
KeAddSystemServiceTable
_except_handler3
PsGetVersion
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
IofCompleteRequest
ExFreePool
ZwDeviceIoControlFile
NtDeviceIoControlFile
ExAllocatePoolWithTag
NtOpenProcess
MmFreeNonCachedMemory
Ke386SetIoAccessMap
Ke386IoSetAccessProcess
IoGetCurrentProcess
MmAllocateNonCachedMemory
IoDeleteSymbolicLink
ZwClose
ZwMapViewOfSection
ZwOpenSection
ZwUnmapViewOfSection
ZwQuerySystemInformation
ObfDereferenceObject
ObReferenceObjectByName
IoDriverObjectType
PsLookupThreadByThreadId
MmGetPhysicalAddress
ObReferenceObjectByHandle
hal
HalTranslateBusAddress
_NtGdiGetPixel_Vir@12
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
464B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
82B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.vmp0
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.vmp1
Size
109KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, productName=Unmarked objects (old),
count=35, id=1, productName=Unmarked objects,
count=5, id=19, version=9049,
count=6, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=2, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
鼠标连点器/BBXTools/shubiao/ver.ini
- SHA256 5689576822e33de778383b31260417f23307dbebf7b46ca7d888666bd6b0c2db
- MD5 d52c17b3e2d78b4a99f7947fb21e052f
- SHA1 a5a058993c53093a74f633dbb63e3ab70a8acbad
- SHA512 be7e582552f55723038a9c01155395b5b91e379f8f8d2367f6862f6c15b2cc64cbf6323983f38afaff6fab731eca7fbc13071d553ab7200667b2e31ffa35fbc3
- MD5 SHA1 SHA512
鼠标连点器/BBXTools/skin/bbxskin/anjianjl.bmp
- SHA256 721ea50be9f94b73a37ab30ac54bd00c56207659ae063a0f50437f373c241ec4
- MD5 9bbc1bbfb5add4db95b64960117db9da
- SHA1 7114192934f4e24a140d95d57dae5110eecdd4f7
- SHA512 3badc813815f932f7fd5940fbb55c1db3df4cda4a0febf20b88990c6b6d538664ea25a907beca4588bdf0e824703bede346513060ac86a68746954cc133e48aa
- SSDEEP 48:VyNG35RgzNHJH4nC0Wg7PXfapeiB9+++++++++pkB+VCZ9yoRpv:VF54HCC0J7Xa5SkIVCZ9yAv
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/biansujl.bmp
- SHA256 1b0bc1a634a85beb99a0032bdcd0761daa97fa9d486986a2ca7aa19126cbd213
- MD5 b9c7e88cac3c52da2c8d62005915828e
- SHA1 83005a287749359dba8a50c6bbf98f84954fa8d3
- SHA512 bc1adb8fd10a78055d84b041c8f1a0a70d75147c4cf7d0d01e2754d49a3e6e1bf54a497ea116627f3a75ddfe16138648d0fd1b4a9d60b5ce8719ab94d7e8f5ce
- SSDEEP 96:VdYZLC/C+O8ZDJz19hc/bquwxRKs/jQxr13UaucWSwJiI/5vdF13RJK1wXkI9fK:VdeiJzrhc1wxz/srTFIBvh3RJegU
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/booktool.bmp
- SHA256 1b66152f693971b1e14f8bb5c0abf0cafe4dd53dbdf9a1c05550a5a19ad247ec
- MD5 512aeaa53550d185d4bd6d555a448f56
- SHA1 0527f1706b8dbabd7bf51fb655472f304dfb48d8
- SHA512 2fb80e600b38eb2a14a62f37848b387a3abd809d402dea4074f115b3748c11c3ad2e748e58897ef2725e28f4cc76d318dfa81db230b0ca3456383eccb63522fe
- SSDEEP 192:VEX7O8IbXNe84T1l4mQdmFtLZFmO56fkk0hFHtKFx8eiOM3RN:VEX7Wb9ixJwaf5m0hdtKFx/iOM3r
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/gifpingmlx.bmp
- SHA256 e32c1bff8c3bf0db13517efcb9d411e68a4e177b39ce0265a68598e126d73b44
- MD5 8e17fdfc565cab2bb00e8d1acbd4c36b
- SHA1 2c97278d3b0a9663cb4a3462fb18cb262f9d46d3
- SHA512 248c278d7faa913aa3dbab934e1ce7ed30c73a9461d4fb74c8dbe7b9ebca1fd36b9969fa314177ed14a012c2d18f1d5e5d5a2755aa43145c0def1e7b102b8c6a
- SSDEEP 192:VAqjJtbrGakmRJaxzWRWwpyiFm/QDd6D5y:VP3AQUKuiFQW6y
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/guanji.bmp
- SHA256 88029a6996b625c359cf6efc79c9b4e7df1cc4c9a7c50b5e0591bb9a69ebadb1
- MD5 a764f71c2c3c60dcc7c5d6d034b83673
- SHA1 fa31951739e7c495e308375c35c48a824c5b7885
- SHA512 73ab15b9a66c154f6d1e8451f59695abfe3763cf370f5f4336f706706877a83059bb16640a7475d4c63ab44385eef075afec0719f47eb39acbbe9efcc61d4dd9
- SSDEEP 96:VsWHAiecRVhjtwEibhYlFzP6yQSRk5s+rOlql4UsUPRIL3qQ/M4Fac7fi5GjkYw:VsWHAujzjPTCsltfS63KqZNw
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/huoxingwensrf.bmp
- SHA256 907328d34c3253b10c4887a3f1db6bb649d25ceee7aa4c36e2d4c4a2f6c00c4d
- MD5 e353c0959c9e8db4504f378851ed1740
- SHA1 86722f6187b96158502ff2aa271415d33e543a92
- SHA512 7518e9333c3291696e39b0be492b82ea2eb7682a97a9dfefe2ffa7995805d733ef8269888bf6684ae20a5173fba6fb3e2d7ec40866b79298bd9057de573759bd
- SSDEEP 96:Vskl1XdCN+SVooovGr70H2gFNvGIAmV5h4gaid:VsiCNzooovu7KrFNv3AmV5hFVd
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/jdyou.bmp
- SHA256 fef74d015cb7934b1a8e433cd9ec9355dc3c6634bedd6189e877a8f23ec18b92
- MD5 a390c17618476c4c2114748f83904381
- SHA1 4b9afbdedd97a1d0c281306c7398c2bf020c8156
- SHA512 3858b73f6089a1ccceca9b05bb0c184ec962b7e5038c11b557933f993f998d2520703c5363f2d023a7a78d0af3c4a3e8d355242520309ed6da810d79f58fa335
- SSDEEP 96:VRqsEEebE0E0LKLoqz0mPsiDw+w/dFuIEn:VBEE4C0L8oW0kwJ/dFC
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/jianpan.bmp
- SHA256 729464e1bfb642d400f20b51de6a53f1ba8bd6a73648386fa5f1fee6d865ad00
- MD5 c7502511474841f75cb0f76babb4e0e1
- SHA1 d2e308df4064f5984c0ecd075121dbd6ed42ff61
- SHA512 1cd642b18cb608ee2691751993232994126bd6a06dc3619c24a2e5b7972d6cfb56b6e3e121af8fbc6cf13405053fbbc604f0280e9251c2a7e010121924bb4668
- SSDEEP 192:VESc3BPG1qZ52tN2V8kY+Ox2aZXn540half5THEVh7X0bnhilL:VES0PG1uY2V8kBUV9DhalVHe7XQIF
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/jinchenggl.bmp
- SHA256 ec84742c2e00996518fa76f0260860f8dfcfa8e3d7cf12a7f35ae98fd7e3b78e
- MD5 9c40ac4faf52a15bf0e44011ba0b2fd3
- SHA1 214c205ba7f15d35865b28e86a83be940f6a274d
- SHA512 263d8c28be351c9b8d3e1c56d005cf6e3a7f8ab35ac5144798bf811dd21227fa4af8cb43025b7a71cb8db46bdba5b09ee20692b1852ee840200f991c0c301bf7
- SSDEEP 192:VLLtnPm81nl3WoJTPyp2B3TS3FXJX8jas:VLLQ2BWodi2dT4FX983
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/naozhong.bmp
- SHA256 8241359975048169d49173b49e56c729e6527a69248ba43fd2340759253fa528
- MD5 6d77eed827ff78d4e747b85e1e161af2
- SHA1 6c2e777cbed0894b971727faf1bae73b59f36eba
- SHA512 581084163c7f89330ab36e8167a30b5704a9331d6a447f3c2c37a3144cff3aebdc01eb2149ba93c94403c377cf9a482cccd3ae1045c9196fcc6e6c560f1626b2
- SSDEEP 96:VwXGozengUdNnp3k+Ti8V11STA/0CPXvXYnpsqzJ9HCUubpy6+XgvCWgwQ2zNAx:VQGj9dNVDv6TA/0WKrHCU2dLvCWGLx
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/neicunyh.bmp
- SHA256 7598552e6af9d67ccdf37e090c4497513c5a06b71bf38e462d502a4acb88c73a
- MD5 fc2bcd896d3871f8bd3436e65f0e29d9
- SHA1 41c67a21a2ac04fbbbbb2782c866c0fcad7600fa
- SHA512 3f46429797bc481db31f313be28d536cbc1788e4a17f6d29b43e8f153e73b046181a4863d9923461cbabb676354989190b7502687f64bc53d77f66f57eb1bee7
- SSDEEP 24:VZDDDDDDA3nfhHlqFrv3zfFUSFbbvNRfFzNJFbbvXrrFzNLH3JNfFNzzH3NJfFzT:VIIOwUu9I5gAtxKOSEPyM6
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/rubbishclear.bmp
- SHA256 3e7f6e870980a1f0054c25ccfa3991143a370a76c60b317fa820e45b473d5618
- MD5 74640994dd0c08c5522a0817bc8e8d75
- SHA1 3a7334f0b165dfbfdde4fedc968354b62cef6e75
- SHA512 2306906063f55c28c3b456d3420d7270071525e92e11023f70f73f0d29e34eb14c6c189a56288ae0e1ab6769d704dcf64904c7b9bdc8448e303927006d846e17
- SSDEEP 192:VOk+gRF5QFj/XPy4iafxQi8z5I7gzK0dzFea:VNtQFj3y7eW5zFea
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/shubiao.bmp
- SHA256 4fc38c5ff0d1d6f0c73973dc1d8db8d35a028877608ea85bbe9c62f417815247
- MD5 2b55854352998ed3049ee2695a4c3caf
- SHA1 302f435878ab69189d531b85a8571cae05d74d23
- SHA512 4be02c0e3d6bf2ca346139abd7efc9dc6f6b869b123460850814ced1ea288bcdd7ea8295c29173d88c3f2fe1be81133a3e00707e9fe711af44851eb5d6ee06fa
- SSDEEP 96:VCHokzZqI3nIbZwcT+vh+MRIH+AD1MqRt3uLJGtau4YG20aCg93bYYGybm:VuoWQheGyqRtIJ6u20a1brzy
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/skin3.ini
- SHA256 6aadc08469fd2cc08806ff7b0ef5e1d53ff61080670ecf88c878c7b0ae1ae96a
- MD5 b6b9b24a55cf357f850223a43020036b
- SHA1 c2aa3cab331a196664b212dc808a96ef411a9047
- SHA512 7bb1b578b6490efc2e08fe6c3685051f813d17c6ee36fee4e7c2e74eacaac9b509784c269e871e3591a00d08fd577f32c873f17c30c6f2b8743f33d674f60275
- SSDEEP 96:mbVfs1aUzARHxhnVw26gfZEvEq0AZP8ru+ZwrbbLA1AbAjj9hSdGQr0DmjtzXQQH:i5uU6jkpHjpxdTUN
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/theworld.bmp
- SHA256 03f11993f0efe0a2a04feee06a399ea9f9a84ab49832d3b532f1d2dca9aba78b
- MD5 6a8604cc0487479e574f610aec0a4fbf
- SHA1 311e62d9f6f0f66aee7dd01bc89cc86f510d0ef8
- SHA512 6fa2db1a8f0bd78972caccd4d786ff25e67896cc362616feef610bc1aa2735f11484b0b736d5905a25ba366e23959234c052474f54901dd227e2f4dc391ae357
- SSDEEP 96:VQe/eE66FEcuRkWB7bjp0UPBx333CEdHiYWOeQ0BdpzI/N/fyfpGLUlUOIqeL+6n:VQe/zytjyitiYAFdgWpG4yVBL+6DT
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/tools_default_click.bmp
- SHA256 cac5b86f6995ffbee48de9ec331cdcb279360d6994bb9d78fee933bce298c665
- MD5 895ea1d406f27d15cf2127deec19778e
- SHA1 7b5459c9ee847d087af8050bf8cf133b4c5245dc
- SHA512 388bff5278e326a12f3e40b45239b73d027a8e7be5d549f9947f4bc32d6f4dd251a730bd3ec3181d4b32bb802f3e7cea9206ae1d036dcad2992accee21a5f306
- SSDEEP 12:Ph9iaUO4YNNXo2gER+M21d756QojwuAowEahn:ziaGYNPR+M21h5bz3h
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/tools_default_hover.bmp
- SHA256 efd758fbe928d695d1bd99901e12160e821ec961da5a3a7b10bfc15877e6ef1e
- MD5 9717ee03f94b5f3f829ab8aa8f03ad73
- SHA1 a7d78c0ca11e865adfc85c082e1ff081c6f8c586
- SHA512 fe91f8b99d9411877327a22b19e72b221fa706d27ae747aed35d1af3f63e76bdfa6ae4bb899e4123606a2fb28b3f107f2f84683ca3a3b8f9aa4468c7ed4a1878
- SSDEEP 96:zMMF6PzfFFXkrWRkCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCY:zM5XUCCCCCCCCCCCCCCCCCCCCCCCCCCt
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/tools_default_normal.bmp
- SHA256 bd13da54a4b83efa7824a393531ded33d08e3301ed655f562b75b35c7cedbb08
- MD5 ae17965705faccfa8f0b7a504cfad59c
- SHA1 f43bdd41528f09b87b3c19f80a9ba159deee0805
- SHA512 bc72f6f5440f3bcf2f1d32846b7bfc6489e89052cb49faad47af2b3b41bf849a923316c359eaac11e25e229697073c24c9a49543fd3f236035012ffa5e004f74
- SSDEEP 96:zLyIO4hVVVVVVVVVVVVVVVVVVVVVVoFFBEi2wfIqi1:zLRVVVVVVVVVVVVVVVVVVVVVVoFoyfm1
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/weather.bmp
- SHA256 94bf7e16e9287499859df6c00606f3d9f864c6af045e5e5ce051b35742aa1c68
- MD5 13904cb0eb98a03171524cff5fc79073
- SHA1 29af149a12a5f19b495c5446c9ce589f40850fc7
- SHA512 b258a4c421a104059a39c6e0ff0842c08c18cd903a44a79d0e28138e144a7e12ff8f41499c1f2e364222bdae8cd26acb095cf5c2c2bcc83034779fdd702914ad
- SSDEEP 192:Vl1YBJQyZ+tYRQeIU/0pP7rRN2ECq2gNr:V0jZ+a7Idxtugd
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/weishi.bmp
- SHA256 d0c991a280aa47c726e30a6e746855b710c98ee5b6e8123eaf3dc3adf07c424f
- MD5 1eb59cf3691d21ecdc9e07999cfbc6a0
- SHA1 57385b75211ee2169f25826f8c04ed2172abf9bc
- SHA512 1f70aadaa811b244d0738684683c68698ce3c829c6a37ba78dcbdbec311566a9d7924b694854f1eef9b336b87a9038652e274f3ad78d7f69263cda7132ce483c
- SSDEEP 96:VmpinnMcjZClaAN1PVgCYDQxOXFVz/7tkNczZCcWt62ERj8HPi7UTjDezsn:VkiMqUZN1PkD/XFVz/OuB46ReagDey
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/xiaorili.bmp
- SHA256 aa9bc693b276f352a6c7dc5eb16c50cbf999d0ddf97b70e9d56760d3b3834997
- MD5 a1b58574eb207bfade4f9760d0af77d7
- SHA1 d55201168e53c3416a96c84e7135fe155dd2363e
- SHA512 61fe5f9cbf72f4d1a71bb05cdfc0a0b5cce985cef25463732aa70dce1bbe6d385ddb058b438fad22087faeb14e4ec64f8928a3297428f5689585b90cb30ce68f
- SSDEEP 192:Vc0hlHWqWTezZtmOtPa/E2YE6PXQbu9Jmg7EXY+C:Vc0hlHCTTOty/E25SRUC
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/bbxskin/zhuomian.bmp
- SHA256 9d9703ae8a023ff1ac5d617fe3000fc235dbd4fcf54b21d3fd769977c43c0004
- MD5 bfbf87b8dceaff12c7d6c37cf9138506
- SHA1 9d27d213363792315dd7480fa21dfbb18e45e4f6
- SHA512 15116993763785903aa508738a9a0fbe31587cd91d81392907c043aa7a6580199a8846dc99460054dd969fe260cada5386ddaa23516cd630963f93182396a1fb
- SSDEEP 192:VSn5J1z4UG8vRLVKVxwgVxVra1VeDECxEfwN/qQ0m91axE:V6vG+RLoR/pa1oDECxEf0l0mGxE
- MD5 SHA1 SHA512 SSDEEP
鼠标连点器/BBXTools/skin/skin3.ini
- SHA256 9d9e42cc1a9c861735263683152d2645784958f80b1109253c49036710dc5c4b
- MD5 aa93e871665a3379cbbec9679f1eedf4
- SHA1 e28911943ace7670752158537a4c567c8bb87343
- SHA512 77e5249e40999b001a661a715d41a3e8bbbc345b1bf8b149069d3baaee26f25318bb1f4ee20e57d58e0beb09c24f2f86265d12680fd6b6af943c6a1d16022a16
- MD5 SHA1 SHA512
鼠标连点器/bbx.ini
- SHA256 7a51f539b7dc873e8dcb6991307f2739c664870fb5274b7083d8dfc0a68d7ce7
- MD5 83491a63da6b63673c82183e5016d325
- SHA1 3e60490a68f3cb9fa3ff2d42213af5eaf88547a6
- SHA512 4845e095216725db60d8a50eb6604524e6358df445831d825b2eeac988b5119f7ba61e3c6e72da1d1cb5e86401abbc9b9401492668fac1ba5f343d88191fb06c
- MD5 SHA1 SHA512
鼠标连点器/使用说明.txt
- SHA256 d7e68a214310dc8d1cf68016d0cf3809790656e54fe7739daf6c4f5b02e92fd9
- MD5 6afc1b872565a0197e8bf7bd613e95e3
- SHA1 ec880ab7083dd9ec14b1f91b6eafd33a65fa1bee
- SHA512 ab14c9b4de439b6055246a2d0478e484441e161f01f777a5e539807899429b1ef9ebbd5893dd4330760ccfa8de720dc8bebf824d86a62bbfc3d08cd997a056c6
- MD5 SHA1 SHA512
鼠标连点器/新云软件.url
- SHA256 df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
- MD5 4f0017b3b346bd0626f0c3b915e6e734
- SHA1 823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
- SHA512 0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
- MD5 SHA1 SHA512
鼠标连点器/鼠标连点器.exe
- SHA256 1d730980bd5497709019cf61f651ec3f25dac0f6fb2a375201c6e231d721df2a
- MD5 c8f65ecf5df609bb2d61aeabbf52875c
- SHA1 b4b2e5351ed8254c961ca1308a886b4008f29d76
- SHA512 d91ba1b8fb7f487c50026a127c295fa2be667a5431090fea7b10ab81be3a3e81a2dac8efdd6107e83494cfa7d61e14e5996a9c4ba61f1c6e246dc645c305067b
- SSDEEP 6144:E9ZGabtf/jPNftL0L5A6850RKT55xqsPezvFBK9K1KjQFKBHKKKKm7qHxtEb:EWahfrPNft4LKPyRK7QsqBK9KIjWKVKU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1125728
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
892KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
204KB
Virtual Size
204KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
105KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=12, version=7291,
count=2, id=123, version=21213,
count=18, id=19, version=8034,
count=2, id=14, version=7299,
count=3, id=11, version=8047,
count=11, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=745, id=1, productName=Unmarked objects,
count=13, productName=Unmarked objects (old),
count=59, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
out.upx
- SHA256 bc4403e8d47c590cb5cad7f6cef35812c640a6df49fec2a777682991ac7eb126
- MD5 4cd20a2f1f1ba8ec5741e6a3d6c39ca5
- SHA1 38d58b4d23f7579cda4586769d749021fc706163
- SHA512 58df0f39003bca2a47c1e304dddbf234b16eb42056aa07712285c4144ed8af5e9144b2073966e62c83d5646df45d1ff483701ce640147e15fb5072ac386487a0
- SSDEEP 12288:TY1Plzkb4io9QKgkM5SXGmaCK9KIjWKVKKKKmY8suhag:TYplwZWgklWNR
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
227848
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
280KB
Virtual Size
278KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
60KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
732KB
Virtual Size
731KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=2, id=123, version=21213,
count=18, id=19, version=8034,
count=2, id=14, version=7299,
count=3, id=11, version=8047,
count=11, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=745, id=1, productName=Unmarked objects,
count=13, productName=Unmarked objects (old),
count=59, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,