html.pdb
Overview
overview
6Static
static
3帮达进�...in.exe
windows7-x64
6帮达进�...in.exe
windows10-2004-x64
6帮达进�...up.msi
windows7-x64
6帮达进�...up.msi
windows10-2004-x64
6Data.url
windows7-x64
6Data.url
windows10-2004-x64
3DateSelect.js
windows7-x64
1DateSelect.js
windows10-2004-x64
1DaySelect.js
windows7-x64
1DaySelect.js
windows10-2004-x64
1Editor.js
windows7-x64
1Editor.js
windows10-2004-x64
1QueryDateSelect.js
windows7-x64
1QueryDateSelect.js
windows10-2004-x64
1Trade.doc
windows7-x64
4Trade.doc
windows10-2004-x64
1TradeManage.exe
windows7-x64
6TradeManage.exe
windows10-2004-x64
6Tradelogin.exe
windows7-x64
6Tradelogin.exe
windows10-2004-x64
6about.htm
windows7-x64
1about.htm
windows10-2004-x64
1checkfunction.js
windows7-x64
1checkfunction.js
windows10-2004-x64
1compare.vbs
windows7-x64
1compare.vbs
windows10-2004-x64
1dialog.js
windows7-x64
1dialog.js
windows10-2004-x64
1help.htm
windows7-x64
1help.htm
windows10-2004-x64
1html.dll
windows7-x64
1html.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
帮达进销存-局域网/客户端/CustomLogin.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
帮达进销存-局域网/客户端/CustomLogin.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
帮达进销存-局域网/服务器端/Setup.msi
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
帮达进销存-局域网/服务器端/Setup.msi
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
Data.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Data.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
DateSelect.js
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
DateSelect.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
DaySelect.js
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
DaySelect.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
Editor.js
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
Editor.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
QueryDateSelect.js
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
QueryDateSelect.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
Trade.doc
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
Trade.doc
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
TradeManage.exe
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
TradeManage.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
Tradelogin.exe
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
Tradelogin.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
about.htm
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
about.htm
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
checkfunction.js
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
checkfunction.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
compare.vbs
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
compare.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
dialog.js
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
dialog.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
help.htm
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
help.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
html.dll
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
html.dll
Resource
win10v2004-20231215-en
General
-
Target
9b2722ee53ad15a908eb12c4a469fce3
-
Size
5.7MB
-
MD5
9b2722ee53ad15a908eb12c4a469fce3
-
SHA1
97d03713da35d9f5f2ada7aecc480f414c879183
-
SHA256
2a73933c1a5b1786c8e8fa1d8917641dc10fc5b06d27903805f4c1cb1f576c6d
-
SHA512
5e49d3f5071b435600c482fb0eb21ec7437a79bd0933841d76b7386284196618ab2bf62e81e644adc070a7ef766df389f844c69a9fc0c0448c01aed0ecf2076f
-
SSDEEP
98304:Tctwr6Ahp8ORmOYErzDjnXlbLgh5FO82kSVSkUoBxAk16x78rut2ucCeT5H5Vv:TvrXTHjnjBzLQkUozHAx7Tqf5ZV
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/帮达进销存-局域网/客户端/CustomLogin.exe unpack002/TradeManage.exe unpack002/Tradelogin.exe unpack002/html.iec
Files
-
9b2722ee53ad15a908eb12c4a469fce3.rar
-
帮达进销存-局域网/客户端/CustomLogin.exe.exe windows:5 windows x86 arch:x86
99628f94fa0e7e99a269dd799d26d75b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
GetWindowsDirectoryW
GetTempPathW
GetEnvironmentVariableW
GetLogicalDriveStringsW
GetDriveTypeW
GetTempFileNameW
FindNextFileW
CreateProcessW
GetExitCodeProcess
GetVersion
GetVersionExW
WideCharToMultiByte
CreateFileA
GetDiskFreeSpaceExW
GetCurrentProcess
FlushInstructionCache
SetLastError
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
MulDiv
OutputDebugStringW
LoadLibraryExW
InterlockedExchange
GetSystemDefaultLangID
GetUserDefaultLangID
EnumResourceLanguagesW
GlobalMemoryStatus
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrlenW
lstrcmpiW
GetModuleHandleW
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
CreateMutexW
GetFileAttributesW
SetFileAttributesW
CopyFileW
GetLocaleInfoA
GetSystemDirectoryW
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
LoadLibraryA
LocalAlloc
ReadFile
GetLocaleInfoW
FormatMessageW
RemoveDirectoryW
GetConsoleCP
CreateDirectoryW
FindFirstFileW
FindClose
MultiByteToWideChar
GetModuleFileNameW
GetProcAddress
ResetEvent
LoadLibraryW
FlushFileBuffers
Sleep
WriteFile
MoveFileW
DeleteFileW
GetFileSize
SetFilePointer
CreateFileW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
CreateEventW
SetEvent
GetLastError
CreateThread
CloseHandle
TerminateThread
GetExitCodeThread
WaitForSingleObject
RaiseException
FreeLibrary
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
user32
GetPropW
PostQuitMessage
LoadImageW
CharNextW
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetSubMenu
LoadMenuW
TrackPopupMenu
ScreenToClient
ExitWindowsEx
GetDC
GetSystemMetrics
SetFocus
CallWindowProcW
DestroyMenu
ModifyMenuW
DefWindowProcW
GetSystemMenu
DialogBoxParamW
LoadIconW
InvalidateRect
RedrawWindow
ShowWindow
RemovePropW
SetPropW
GetDlgCtrlID
MessageBoxW
KillTimer
EnableWindow
SetTimer
PostMessageW
IsWindow
CreateWindowExW
DestroyWindow
CreateDialogParamW
GetActiveWindow
LoadStringW
EndDialog
GetWindow
SystemParametersInfoW
GetWindowRect
GetClientRect
MapWindowPoints
GetDlgItem
SetWindowTextW
GetParent
SendMessageW
GetWindowLongW
SetWindowLongW
SetWindowPos
GetDesktopWindow
IsWindowVisible
UnregisterClassA
EnableMenuItem
gdi32
CreateCompatibleDC
GetWindowExtEx
GetViewportExtEx
SetMapMode
CreateCompatibleBitmap
GetDeviceCaps
DeleteObject
GetStockObject
SetBkMode
DeleteDC
SelectObject
CreateFontIndirectW
GetMapMode
GetObjectW
advapi32
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerW
RegEnumKeyExW
RegOpenKeyW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
RegQueryInfoKeyW
shell32
ShellExecuteExW
SHGetSpecialFolderLocation
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ole32
CoTaskMemRealloc
CoInitialize
CreateStreamOnHGlobal
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoTaskMemFree
oleaut32
OleLoadPicture
VarUI4FromStr
comctl32
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
帮达进销存-局域网/客户端/客户端说明.txt
-
帮达进销存-局域网/服务器端/Setup.msi.msi
-
帮达进销存-局域网/服务器端/Setup1.cab.cab
-
A.gif.gif
-
A.png.png
-
B.gif.gif
-
BackColor.gif.gif
-
Begin.gif.gif
-
Birthday.gif.gif
-
Citrus.gif.gif
-
Clear.jpg.jpg
-
Data.url.url
-
DateSelect.js.js
-
DaySelect.js.js
-
Editor.css_1
-
Editor.css_2
-
Editor.css_3
-
Editor.css_4
-
Editor.css_5
-
Editor.css_6
-
Editor.css_7
-
Editor.css_8
-
Editor.css_9
-
Editor.js.js
-
EditorArea.css
-
EditorArea.css_1
-
EditorArea.css_2
-
EditorArea.css_3
-
EditorArea.css_4
-
EditorArea.css_5
-
EditorArea.css_6
-
EditorArea.css_7
-
EditorArea.css_8
-
Fiesta.jpg.jpg
-
Flower.gif.gif
-
Gathering.jpg.jpg
-
Glacier.jpg.jpg
-
Hearts.gif.gif
-
Ivy.gif.gif
-
Maize.jpg.jpg
-
MenuArea.css
-
MenuArea.css_1
-
MenuArea.css_2
-
MenuArea.css_3
-
MenuArea.css_4
-
MenuArea.css_5
-
MenuArea.css_6
-
MenuArea.css_7
-
MenuArea.css_8
-
Nature.jpg.jpg
-
Print_1.css
-
QueryDateSelect.js.js
-
Rect.gif.gif
-
RectImg.gif.gif
-
SouthidcEditor.mdb
-
Stop.gif.gif
-
TBHandle.gif.gif
-
Thumbs.db
-
Thumbs.db_2
-
Thumbs.db_3
-
Thumbs.db_4
-
Thumbs.db_5
-
Thumbs.db_6
-
ToolbarBg.gif.gif
-
ToolbarLeft.gif.gif
-
ToolbarRight.gif.gif
-
Trade.doc.doc windows office2003
-
TradeManage.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
test Size: - Virtual size: 988KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 625KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Tradelogin.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
test Size: - Virtual size: 988KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 625KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
about.gif.gif
-
about.htm.html
-
abspos.gif.gif
-
add.css
-
admin_home.gif.gif
-
aleft.gif.gif
-
anchor.gif.gif
-
anchor.htm.html .js polyglot
-
aright.gif.gif
-
arrow_2.gif.gif
-
arw_down.gif.gif
-
arw_drapdown.gif.gif
-
arw_left.gif.gif
-
arw_left_1.gif.gif
-
arw_right.gif.gif
-
arw_right_2.gif.gif
-
arw_selectdown.gif.gif
-
arw_tree.gif.gif
-
arw_up.gif.gif
-
attion.gif.gif
-
audio.gif.gif
-
avi.gif.gif
-
b.ico
-
backcolor.gif_1.gif
-
backimage.htm.html .js polyglot
-
backward.gif.gif
-
bg_footer1.gif.gif
-
bg_form1.gif.gif
-
bg_head_user.gif.gif
-
bg_head_user_sep.gif.gif
-
bg_lefttitle.gif.gif
-
bg_mail.gif.gif
-
bg_mail_color.gif.gif
-
bg_menu.gif.gif
-
bg_menu_common.gif.gif
-
bg_menu_home_top.gif.gif
-
bg_stick.gif.gif
-
bg_title.gif.gif
-
bgcolor.gif.gif
-
bgpic.gif.gif
-
blink.gif.gif
-
bmp.gif.gif
-
bmp.gif_1.gif
-
bold.gif.gif
-
bold.gif_1.gif
-
bold.gif_2.gif
-
bookmark.gif.gif
-
bottombg.gif.gif
-
br.gif.gif
-
btn_furbish.gif.gif
-
btn_go.gif.gif
-
btn_ok.gif.gif
-
btn_quash.gif.gif
-
btn_select.gif.gif
-
bullist.gif.gif
-
c.ico
-
c.ico_1
-
c_dian1.gif.gif
-
c_dian2.gif.gif
-
c_dian3.gif.gif
-
c_dian4.gif.gif
-
center.gif.gif
-
checked.gif.gif
-
checkfunction.js.js
-
christmas.gif.gif
-
class2.gif.gif
-
class3.gif.gif
-
code.gif.gif
-
code.gif_1.gif
-
compare.vbs.vbs
-
componentmenu.gif.gif
-
contextmenu.gif.gif
-
copy.gif.gif
-
copy.gif_1.gif
-
copy.gif_2.gif
-
createlink.gif.gif
-
createlink.gif_1.gif
-
cut.gif.gif
-
cut.gif_1.gif
-
cut.gif_2.gif
-
d.gif.gif
-
date.gif.gif
-
db.db
-
delete.gif.gif
-
delete.gif_1.gif
-
delete.gif_2.gif
-
dialog.js.js
-
do_ok.gif.gif
-
doc.gif.gif
-
doc.gif_1.gif
-
dot.gif.gif
-
dot_diamond.gif.gif
-
edit.css
-
editmenu.gif.gif
-
editor.css
-
email.gif.gif
-
email1.gif
-
emot.gif.gif
-
emot.htm.html .js polyglot
-
ewebeditor.gif.gif
-
excel.gif.gif
-
exe.gif.gif
-
fgcolor.gif.gif
-
fieldset.gif.gif
-
fieldset.htm.html .js polyglot
-
file.gif.gif
-
file.htm.html .js polyglot
-
filemenu.gif.gif
-
findreplace.gif.gif
-
findreplace.htm.html .js polyglot
-
flash.gif.gif
-
flash.htm.html .js polyglot
-
folder.gif.gif
-
folderback.gif.gif
-
fontmenu.gif.gif
-
forecolor.gif.gif
-
forecolor.gif_1.gif
-
formbutton.gif.gif
-
formcheckbox.gif.gif
-
formdropdown.gif.gif
-
formmenu.gif.gif
-
formradio.gif.gif
-
formtext.gif.gif
-
formtextarea.gif.gif
-
forward.gif.gif
-
fullscreen.htm.html .js polyglot
-
gantanhao.jpg.jpg
-
gif.gif
-
gif.gif.gif
-
gif_1.gif
-
gif_10.gif
-
gif_11.gif
-
gif_12.gif
-
gif_13.gif
-
gif_14.gif
-
gif_15.gif
-
gif_16.gif
-
gif_17.gif
-
gif_18.gif
-
gif_19.gif
-
gif_2.gif
-
gif_20.gif
-
gif_21.gif
-
gif_22.gif
-
gif_23.gif
-
gif_24.gif
-
gif_25.gif
-
gif_26.gif
-
gif_27.gif
-
gif_28.gif
-
gif_29.gif
-
gif_3.gif
-
gif_30.gif
-
gif_31.gif
-
gif_32.gif
-
gif_33.gif
-
gif_34.gif
-
gif_35.gif
-
gif_36.gif
-
gif_37.gif
-
gif_38.gif
-
gif_39.gif
-
gif_4.gif
-
gif_40.gif
-
gif_41.gif
-
gif_42.gif
-
gif_43.gif
-
gif_44.gif
-
gif_45.gif
-
gif_46.gif
-
gif_47.gif
-
gif_48.gif
-
gif_49.gif
-
gif_5.gif
-
gif_50
-
gif_51.gif
-
gif_52.gif
-
gif_53.gif
-
gif_54.gif
-
gif_55.gif
-
gif_56.gif
-
gif_57.gif
-
gif_58.gif
-
gif_59.gif
-
gif_6.gif
-
gif_60.gif
-
gif_61
-
gif_62
-
gif_63
-
gif_64
-
gif_65
-
gif_66
-
gif_67
-
gif_68
-
gif_69
-
gif_7.gif
-
gif_8.gif
-
gif_9.gif
-
green_bg.gif.gif
-
grid.gif.gif
-
havepic.gif.gif
-
help.gif.gif
-
help.gif_1.gif
-
help.htm.html
-
hlp.gif.gif
-
home.gif.gif
-
hot.gif.gif
-
hr.gif.gif
-
htm.gif.gif
-
html.iec.dll windows:5 windows x86 arch:x86
c103470d9f58a8cd17dadad7ffd41fa0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_adjust_fdiv
malloc
_initterm
free
getenv
printf
_ftol
_setjmp3
longjmp
sprintf
memmove
kernel32
FlushFileBuffers
MultiByteToWideChar
WideCharToMultiByte
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
GlobalUnlock
GlobalLock
IsDBCSLeadByte
LocalAlloc
LocalFree
GlobalFree
GlobalHandle
LocalLock
LocalUnlock
LocalReAlloc
CloseHandle
GetFileAttributesA
lstrcpynA
GetModuleFileNameA
GetSystemDefaultLangID
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
GetLocalTime
CreateFileA
ReadFile
WriteFile
GetWindowsDirectoryA
GetTempFileNameA
GetTempPathA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetOEMCP
GetLastError
IsValidCodePage
LoadLibraryExA
GetLocaleInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
MoveFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteFileA
GetFileSize
SetFilePointer
GlobalSize
GlobalReAlloc
GlobalAlloc
lstrlenA
GetACP
lstrlenW
LocalSize
TerminateProcess
user32
SetFocus
DialogBoxParamA
GetFocus
wvsprintfA
ReleaseDC
GetDC
CharPrevA
SendDlgItemMessageA
SendMessageA
MoveWindow
GetWindowRect
EndDialog
GetDlgItemTextA
RegisterClipboardFormatA
IsCharUpperA
EnumThreadWindows
IsWindowEnabled
EnableWindow
GetLastActivePopup
MessageBoxA
OemToCharA
IsCharAlphaA
LoadStringA
CharUpperA
wsprintfA
CharLowerA
gdi32
DeleteMetaFile
SelectObject
GetStockObject
SetMapMode
GetTextExtentPoint32A
CreateMetaFileA
GetObjectType
SetMetaFileBitsEx
SetEnhMetaFileBits
DeleteEnhMetaFile
GetEnhMetaFileBits
GetDeviceCaps
EnumFontsA
CloseMetaFile
TextOutA
SetWindowExtEx
GetMetaFileBitsEx
advapi32
RegSetValueExA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
ole32
OleConvertIStorageToOLESTREAM
OleConvertOLESTREAMToIStorage
OleInitialize
OleBuildVersion
OleUninitialize
StgCreateDocfile
StgOpenStorage
WriteClassStm
WriteFmtUserTypeStg
ProgIDFromCLSID
WriteClassStg
ReadClassStm
Exports
Exports
AbortForeignToRtf
AbortRtfToForeign
CchFetchLpszError
CchFetchMainStream
ConvertForeignToRtf
ConvertRtfToForeign
DllMain
FFetchSzzClasses
FFileRecognized32
FPrivateRetryMemError
FRegisterConverter
ForeignToRtf32
GetReadNames
GetWriteNames
InitConverter32
IsFormatCorrect32
RegisterApp
RtfToForeign32
UninitConverter
_AbortProcessing
Sections
.text Size: 354KB - Virtual size: 353KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
RTFOUT_P Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
hyperlink.htm.html .js polyglot
-
i.p.cal.gif.gif
-
i.p.cal.meet.req.gif.gif
-
i.p.cal.note.gif.gif
-
i.p.cal.task.gif.gif
-
i.p.cont.group.gif.gif
-
i.p.cont.group.gif_1.gif
-
i.p.cont.individual.gif.gif
-
i.p.delete.gif.gif
-
i.p.folder.drafts.gif.gif
-
i.p.folder.gif.gif
-
i.p.folder.inbox.gif.gif
-
i.p.folder.sent.gif.gif
-
i.p.fwd.gif.gif
-
i.p.im_on.gif.gif
-
i.p.junkmail.gif.gif
-
i.p.next.gif.gif
-
i.p.previous.gif.gif
-
i.p.printv.gif.gif
-
i.p.putinfolder.gif.gif
-
i.p.reply.gif.gif
-
i.p.search.gif.gif
-
i.p.trash.gif.gif
-
i.p.trashempty.gif.gif
-
i.p.writenew.gif.gif
-
icon_affair.gif.gif
-
icon_basic.gif.gif
-
icon_ck.gif.gif
-
icon_close.gif.gif
-
icon_delete.gif.gif
-
icon_edit.gif.gif
-
icon_find.gif.gif
-
icon_finished.gif.gif
-
icon_floder_close.gif.gif
-
icon_floder_open.gif.gif
-
icon_forward.gif.gif
-
icon_head_ck.gif.gif
-
icon_head_down.gif.gif
-
icon_head_help.gif.gif
-
icon_head_up.gif.gif
-
icon_head_user.gif.gif
-
icon_info.gif.gif
-
icon_insert.gif.gif
-
icon_knowledge.gif.gif
-
icon_lock.gif.gif
-
icon_navdot.gif.gif
-
icon_new.gif.gif
-
icon_reply.gif.gif
-
icon_richeng.gif.gif
-
icon_setup.gif.gif
-
icon_star.gif.gif
-
icon_stock.gif.gif
-
icon_time.gif.gif
-
icon_who.gif.gif
-
icq.gif.gif
-
iedit.gif.gif
-
iframe.gif.gif
-
iframe.htm.html .js polyglot
-
img.gif.gif
-
img.gif_1.gif
-
img.gif_2.gif
-
img.htm.html .js polyglot
-
indent.gif.gif
-
indent.gif_1.gif
-
indent.gif_2.gif
-
inserthorizontalrule.gif.gif
-
inserthr.gif.gif
-
insertimg.gif.gif
-
insertollist.gif.gif
-
insertorderedlist.gif.gif
-
insertparagraph.gif.gif
-
insertswf.gif.gif
-
inserttable.gif.gif
-
insertullist.gif.gif
-
insertunorderedlist.gif.gif
-
italic.gif.gif
-
italic.gif_1.gif
-
italic.gif_2.gif
-
item_amount_10.gif.gif
-
item_amount_100.gif.gif
-
item_amount_100_on.gif.gif
-
item_amount_10_act.gif.gif
-
item_amount_20.gif.gif
-
item_amount_20_on.gif.gif
-
item_amount_30.gif.gif
-
item_amount_30_on.gif.gif
-
item_amount_40.gif.gif
-
item_amount_40_on.gif.gif
-
item_amount_60.gif.gif
-
item_amount_60_on.gif.gif
-
item_amount_80.gif.gif
-
item_amount_80_on.gif.gif
-
item_amount_90.gif.gif
-
item_amount_90_on.gif.gif
-
jing.gif.gif
-
join_top.gif.gif
-
join_user.gif.gif
-
jpg.gif.gif
-
justifycenter.gif.gif
-
justifycenter.gif_1.gif
-
justifyfull.gif.gif
-
justifyleft.gif.gif
-
justifyleft.gif_1.gif
-
justifyright.gif.gif
-
justifyright.gif_1.gif
-
length.gif.gif
-
license.rtf.rtf
-
lin_bbg.gif.gif
-
lin_bl.gif.gif
-
lin_br.gif.gif
-
lin_lbg.gif.gif
-
lin_rbg.gif.gif
-
lin_tbg.gif.gif
-
lin_tl.gif.gif
-
lin_tr.gif.gif
-
loading.gif.gif
-
login.gif.gif
-
logo.gif.gif
-
logon_b_bg.gif.gif
-
logon_b_l.gif.gif
-
logon_b_r.gif.gif
-
logon_bg.gif.gif
-
logon_hor_bg.gif.gif
-
logon_in_b_l.gif.gif
-
logon_in_b_r.gif.gif
-
logon_in_t_l.gif.gif
-
logon_in_t_r.gif.gif
-
logon_lock.gif.gif
-
logon_t_bg.gif.gif
-
logon_t_l.gif.gif
-
logon_t_r.gif.gif
-
mail_fwd.gif.gif
-
mail_re.gif.gif
-
mail_read.gif.gif
-
mail_unread.gif.gif
-
main.htm.html
-
map.gif.gif
-
map.htm.html .js polyglot
-
marquee.gif.gif
-
marquee.htm.html .js polyglot
-
maximize.gif.gif
-
mdb.gif.gif
-
media.gif.gif
-
media.htm.html .js polyglot
-
menu.css
-
menu.js.js
-
menu_0.gif.gif
-
menu_02.gif.gif
-
menu_03.gif.gif
-
menu_04.gif.gif
-
menu_05.gif.gif
-
menu_06.gif.gif
-
menu_07.gif.gif
-
menu_08.gif.gif
-
menu_bottom.gif.gif
-
menu_home.gif.gif
-
mid.gif.gif
-
minimize.gif.gif
-
modecode.gif.gif
-
modecodebtn.gif.gif
-
modeedit.gif.gif
-
modeeditbtn.gif.gif
-
modepreview.gif.gif
-
modetext.gif.gif
-
modetextbtn.gif.gif
-
modeviewbtn.gif.gif
-
mp.gif.gif
-
mp3.gif.gif
-
msn.gif.gif
-
nodo.gif.gif
-
numlist.gif.gif
-
objectmenu.gif.gif
-
onmouse.js.js
-
ordertable.js.js
-
outdent.gif.gif
-
outdent.gif_1.gif
-
outdent.gif_2.gif
-
page.css
-
paragraphmenu.gif.gif
-
paste.gif.gif
-
paste.gif_1.gif
-
paste.gif_2.gif
-
pastetext.gif.gif
-
pasteword.gif.gif
-
pause.gif.gif
-
pdf.gif.gif
-
pic.gif.gif
-
pic1.gif.gif
-
pic10.gif.gif
-
pic11.gif.gif
-
pic12.gif.gif
-
pic2.gif.gif
-
pic3.gif.gif
-
pic4.gif.gif
-
pic5.gif.gif
-
pic6.gif.gif
-
pic7.gif.gif
-
pic8.gif.gif
-
pic9.gif.gif
-
position.gif.gif
-
ppt.gif.gif
-
print.css
-
print.gif.gif
-
print.js.js
-
printhid.js.js
-
private.js
-
qq.gif.gif
-
qq_offline.gif.gif
-
qq_online.gif.gif
-
quote.gif.gif
-
rar.gif.gif
-
redo.gif.gif
-
redo.gif_1.gif
-
redo.gif_2.gif
-
refresh.gif.gif
-
remoteupload.gif.gif
-
removeformat.gif.gif
-
reset.gif.gif
-
rm.gif.gif
-
row.gif.gif
-
save.gif.gif
-
save.gif_1.gif
-
selcolor.htm.html .js polyglot
-
select.css
-
select.js.js
-
selectall.gif.gif
-
show.ax.mani.xml
-
showborders.gif.gif
-
showdetails.gif.gif
-
site.gif.gif
-
sizeminus.gif.gif
-
sizeplus.gif.gif
-
snow.gif.gif
-
space.gif.gif
-
space.gif_1.gif
-
spellcheck.gif.gif
-
strikethrough.gif.gif
-
strikethrough.gif_1.gif
-
style.css
-
style.css_1
-
sub.gif.gif
-
submit.gif.gif
-
subscript.gif.gif
-
sup.gif.gif
-
superscript.gif.gif
-
swf.gif.gif
-
swf.gif_1.gif
-
symbol.gif.gif
-
symbol.htm.html .js polyglot
-
sysparm.gif.gif
-
t_bg.jpg.jpg
-
t_login.jpg.jpg
-
t_logo.jpg.jpg
-
tab_bg.gif.gif
-
tab_left.gif.gif
-
tab_right.gif.gif
-
table.gif
-
table.htm.html .js polyglot
-
table.js.js
-
tablecell.htm.html .js polyglot
-
tablecellprop.gif.gif
-
tablecellsplit.gif.gif
-
tablecellsplit.htm.html .js polyglot
-
tablecoldelete.gif.gif
-
tablecolinsertleft.gif.gif
-
tablecolinsertright.gif.gif
-
tablecolmerge.gif.gif
-
tablecolsplit.gif.gif
-
tableinsert.gif.gif
-
tablemenu.gif.gif
-
tableprop.gif.gif
-
tablerowdelete.gif.gif
-
tablerowinsertabove.gif.gif
-
tablerowinsertbelow.gif.gif
-
tablerowmerge.gif.gif
-
tablerowprop.gif.gif
-
tablerowsplit.gif.gif
-
tech.gif.gif
-
thumbs.db_1
-
time.gif.gif
-
tobig.gif.gif
-
toolmenu.gif.gif
-
top.htm.html
-
top_bg.gif.gif
-
top_head_0.gif.gif
-
top_head_11.gif.gif
-
top_head_14.gif.gif
-
top_head_2.gif.gif
-
top_head_3.gif.gif
-
top_head_4.gif.gif
-
top_head_5.gif.gif
-
top_head_6.gif.gif
-
top_head_7.gif.gif
-
top_head_8.gif.gif
-
top_head_9.gif.gif
-
top_home.gif.gif
-
top_logo.gif.gif
-
topbar_bg.gif.gif
-
topbg.gif.gif
-
tosmall.gif.gif
-
tree_folder3.gif.gif
-
tree_folder4.gif.gif
-
tree_line1.gif.gif
-
tree_line2.gif.gif
-
tree_line3.gif.gif
-
txt.gif.gif
-
underline.gif.gif
-
underline.gif_1.gif
-
underline.gif_2.gif
-
undo.gif.gif
-
undo.gif_1.gif
-
undo.gif_2.gif
-
unknow.gif.gif
-
unlink.gif.gif
-
unlink.gif_1.gif
-
unselect.gif.gif
-
url.gif
-
useedit.gif.gif
-
view.gif.gif
-
votesubmit.gif.gif
-
voteview.gif.gif
-
weather_cloudy.gif.gif
-
weather_rain.gif.gif
-
weather_sun.gif.gif
-
web.dll
-
wlink.gif.gif
-
xls.gif.gif
-
xls.gif_1.gif
-
zip.gif.gif
-
zip.gif_1.gif
-
zoommenu.gif.gif
-
帮达进销存-局域网/服务器端/产品视频使用说明.txt
-
帮达进销存-局域网/服务器端/系统简要说明.txt