abb093395a021f9213e84e8ebbc08b55

resource	yara_rule
static1/unpack001/99CW.exe	aspack_v212_v242

resource
unpack001/99CW.exe

SHA256 e16e07beaa1dd3c9a5ab0adbeecb59b44197b83f6b13ac53c4dc09ef740e1cfb
MD5 abb093395a021f9213e84e8ebbc08b55
SHA1 fd5f69f5383f29ada19285dbc9d0dd53fd7f8055
SHA512 9f6f3d810d421d08cf03a95fb652e4d79bbd4c94106c1d8803981c8d47ab9a4ca592e70642fe1d6906f7df0bab44f1e53ef43f1f3999fd3398ac6ba00e0aed49
SSDEEP 98304:YARVaLaMOFWD5wSuWE6WUmjDe4OBCx0Wkt:YARVo0WD5wRn3P7w
MD5 SHA1 SHA512 SSDEEP

99CW.exe

SHA256 92337bccc8bbc5c13c256a37fc737e76abf150c8a83f4787423b11bc881258b2
MD5 25e96d1af7162ffe6e4b9625a40667fc
SHA1 2d9220538ee46c6badae75ea287bdb15141ec1ac
SHA512 5fd7a257679a14bc055fb3ada8b69f7fe6604dc4eb189c6ea742d3657fcf566f49baa2287f9e691a52edec9b03124e29b2f23118a72e45f49091e94b3ac6f5af
SSDEEP 24576:8z1FHdsPvPPQqSPtqO7lZ94L2vaomD5S7IyJS:A1FHdsvQq8tqO7/9xvmdTyJS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

2621441

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

99cw.bin

SHA256 16caf02b1f9a5ec038744926fe92f61ef19bfe429084e92457620e43c906f03f
MD5 95121e8058febb9e15f0b56fb6cccc7d
SHA1 c30ab53d8b2ecab5d2189c18fc53171677c4db4a
SHA512 708d2e347af938fd66d370c0ee0e7f549d9d3b810faf40b77b294add62294ad1c0e8802c89cd0d28343c2d3f899ac9c312f7d40809efa3f6b030b960072ada45
MD5 SHA1 SHA512

Accdocu.sys

SHA256 9fbfb6a512581b5611d192d56bd8893f8b4be03f0146665eb8aee0ceb1ae32c3
MD5 c66f6fd0bb86a6e2f7cc48066f0262fb
SHA1 7408ee2a36f01663cbaa4bdd1d06da10bdf1c9c0
SHA512 60dd328bdc1faaf919231eed98bd5773c2591c28303c49bbd3679dcc3cfa47e35ddbcb524f57898ba24e87b3fe951a7e99e14c471a89c4f2204b5f89855f6c40
SSDEEP 192:Uf9pTpTpTpTxpMXp+hzGR2CT8hhPPPPPPPPPPnTxG:m9999x4QhzGR2CSw
MD5 SHA1 SHA512 SSDEEP

windows office2003

Base.bin

SHA256 e3ea428cb90b680c42d53da753468bf0663d141fe749db09c2f84d2bb55122ea
MD5 2d7db37af4cd40527a76726c44687dde
SHA1 4cf3a9b4e6af8faae16e40f9b94f8d2878c97b8a
SHA512 6b0f0869f66af5a863e5b9aa4dbac9e746902ba5eb56bb4de8d0463c6f9e3d29bf3b08cc8dc0e2dff788ba33bd17195e238ea2f0a29dde270f216095faab1184
SSDEEP 1536:cvH7y+eej097n1yHgYoa7Y1dqpG9y3IsWRBHs4If91WETguepL3cLa9xgTwiPxyd:cvby+BxyD
MD5 SHA1 SHA512 SSDEEP

COMDLG32.OCX

IMPHASH 988f29c1eb8054253091352741683c76
SHA256 e32d8bbe8e6985726742b496520fa47827f3b428648fa1bc34ecffdd9bdac240
MD5 ab412429f1e5fb9708a8cdea07479099
SHA1 eb49323be4384a0e7e36053f186b305636e82887
SHA512 f3348dbc3b05d14482250d7c399c00533598973f8e9168b4082ee5cbb81089dfaefcfda5a6a3c9f05b4445d655051b7a5170c57ee32d7a783dc35a75fee41aa9
SSDEEP 3072:VCslb9HnH/GrQ/qCFyn7dWXSQeRDBIY/OR5JrNo2CocrJbNN6N2TRqEydc:VCsB9Hu9nweRD4JZoDxtRHj
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

PE Signature issue

Digest

30:04:be:c7:7e:04:0a:8e:9c:44:86:a8:95:a7:50:5e:ca:0f:22:ec

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 23, 2024

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Serial Number

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2008

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

Serial Number

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6

Issuer

Key Usages

KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 10, 2000 - Nov 12, 2005

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:7d:a7:00:00:00:00:00:48

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 25, 2003 - Jan 25, 2005

Minor OS version

0

Major OS version

4

Entry point

5304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

HeapReAlloc GetLastError LockResource GetWindowsDirectoryA InterlockedDecrement InterlockedIncrement IsDBCSLeadByte CompareStringA CompareStringW lstrcmpA GetLocaleInfoA GetVersion GetModuleFileNameA GetFileAttributesA IsBadWritePtr DisableThreadLibraryCalls GlobalAlloc lstrcmpiA LoadLibraryA GetProcAddress lstrcatA lstrlenA lstrcpyA WriteProfileStringA GlobalLock GlobalUnlock LoadResource FindResourceA lstrcpynA LeaveCriticalSection DeleteCriticalSection FreeLibrary HeapFree WideCharToMultiByte lstrlenW HeapAlloc GetProfileStringA EnterCriticalSection GetProcessHeap GetCurrentThreadId MultiByteToWideChar InitializeCriticalSection GlobalFree

user32

SetWindowRgn IntersectRect EqualRect PtInRect IsDialogMessageA IsChild GetKeyState CreateDialogIndirectParamA MessageBeep PostMessageA ClientToScreen wsprintfA SendMessageTimeoutA CharNextA GetActiveWindow GetWindowThreadProcessId LoadCursorA MessageBoxA GetWindowLongA GetWindowRect CreateWindowExA SetWindowLongA ShowWindow DialogBoxParamA EnableWindow GetDesktopWindow GetWindow IsWindowEnabled OffsetRect GetParent GetDlgItem SendMessageA SetFocus SetParent SetDlgItemInt EndPaint SetActiveWindow IsWindowVisible WinHelpA GetDlgItemInt EndDialog GetDlgItemTextA DestroyWindow SetDlgItemTextA GetWindowTextA GetNextDlgTabItem SendDlgItemMessageA RegisterClassA GetDC ReleaseDC LoadIconA DrawIcon DestroyIcon GetSystemMetrics RegisterWindowMessageA LoadStringA DefWindowProcA UnregisterClassA GetClientRect BeginPaint RegisterClipboardFormatA SetWindowPos MoveWindow

ole32

CreateOleAdviseHolder CoCreateInstance CoTaskMemAlloc CoTaskMemFree ReleaseStgMedium

advapi32

RegEnumKeyExA RegQueryValueA RegOpenKeyA RegQueryValueExA RegDeleteValueA RegDeleteKeyA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegCloseKey

oleaut32

LoadRegTypeLi OleCreatePropertyFrame SetErrorInfo UnRegisterTypeLi LoadTypeLi LoadTypeLibEx OleLoadPicture VariantChangeType RegisterTypeLi VariantInit GetErrorInfo VariantClear SysStringLen SysAllocStringLen OleTranslateColor SysFreeString SysAllocString CreateErrorInfo

comdlg32

CommDlgExtendedError PrintDlgA ChooseFontA ChooseColorA GetOpenFileNameA GetSaveFileNameA

gdi32

GetDIBits CreateCompatibleDC CreateBitmap GetSystemPaletteEntries StretchDIBits SetViewportOrgEx SetWindowExtEx SetWindowOrgEx SetMapMode LPtoDP SetViewportExtEx GetViewportExtEx CreateRectRgnIndirect GetWindowExtEx CreateDCA GetObjectA EnumFontFamiliesA DeleteDC DeleteObject GetDeviceCaps SelectObject

Data/Database.dat

SHA256 ab9c97bbb01daddd4560a22ee5f1929a33614a36506f9cb4585b54328677dcfc
MD5 0a2c2ffa12f2801ca765620ec77db573
SHA1 33c25ba7fced3d536bfcd53fa282f79953e015d5
SHA512 153c701b63534da148ee33e0630b81705d79dbf711163d909eeda6ed83b6e78dd9417cf49d85b4208ff3f6e507853ea6d99fa48144b4c7cc247e017fb1787cb2
SSDEEP 1536:hvuuO+Vej097n1yjgYoa7Y1dqpG9y3IsWRBHs4If91WETguepL3cLa9xgTbgXRQN:hvuR+Z6aBliCeIB6x4DK
MD5 SHA1 SHA512 SSDEEP

Data/新云软件.url

SHA256 df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
MD5 4f0017b3b346bd0626f0c3b915e6e734
SHA1 823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
SHA512 0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
MD5 SHA1 SHA512

MSCOMCT2.OCX

IMPHASH 71e4dc10f7cc0c7bb2b43714bb9f46c1
SHA256 160b0cef5e9ed57c024e9b3a278e6456e849daa85d46f2b6d1450bf19fca72dd
MD5 ae47a8a5fe8193bb84ffcd338115d8ef
SHA1 edbe4b85f000880ebd68239eab29fac3d79f3113
SHA512 9dfe5f65825f58e267092fac0c7d359c7bc23ef5ad90f2abb4614e88fdc6adfddfbf7df29aabf519fb8238d5efec27ea1ddc386760d4d841c657226e850d7bc7
SSDEEP 12288:NbfIjagcfVS8jyvXMdXRZjhOgkpWXib26NS/KVL9yAP5eUD52v/pG:NbwjSEudhZkpWXib1NfVL9yUeUD58g
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

PE Signature issue

Digest

f3:8a:eb:ca:d3:84:50:9f:6f:92:6a:b6:cb:f7:e6:bb:9c:34:2a:93

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 23, 2024

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Serial Number

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2008

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

Serial Number

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6

Issuer

Key Usages

KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 10, 2000 - Nov 12, 2005

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:7d:a7:00:00:00:00:00:48

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 25, 2003 - Jan 25, 2005

Minor OS version

0

Major OS version

4

Entry point

5736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW VirtualFree GetCPInfo GetOEMCP VirtualAlloc FlushFileBuffers SetStdHandle SetFilePointer GetFileType GetStdHandle SetHandleCount TlsGetValue SetLastError TlsFree TlsAlloc TlsSetValue GetCurrentProcess TerminateProcess ExitProcess RtlUnwind GetCommandLineA IsBadReadPtr GlobalReAlloc UnmapViewOfFile GetFileSize CreateFileMappingA MapViewOfFile GetSystemDefaultLCID GetCurrentThreadId GetCurrentProcessId HeapCreate HeapDestroy FreeResource LocalSize RtlMoveMemory CreateThread Sleep WaitForSingleObject GetTimeFormatA GlobalHandle lstrcmpA GetThreadLocale MulDiv LocalAlloc GetProfileIntA LocalReAlloc LocalFree GetTickCount GetModuleHandleA GlobalAddAtomA GetACP CompareStringW CompareStringA GlobalSize GetVersionExA IsDBCSLeadByte lstrcpynA GetFileAttributesA GetVersion DisableThreadLibraryCalls FindResourceA LoadResource LockResource GetLastError lstrcmpiA HeapReAlloc InterlockedDecrement InterlockedIncrement GetProcAddress LoadLibraryA GetWindowsDirectoryA lstrcatA GetModuleFileNameA MultiByteToWideChar IsBadWritePtr GetDateFormatA lstrcpyA GetLocaleInfoA GetLocalTime CreateFileA CloseHandle GlobalAlloc WriteFile GlobalLock HeapAlloc DeleteCriticalSection WideCharToMultiByte lstrlenW LeaveCriticalSection EnterCriticalSection InitializeCriticalSection HeapFree FreeLibrary lstrlenA GetProcessHeap GlobalFree GlobalUnlock

user32

GrayStringA HideCaret DestroyCaret CreateCaret GetAsyncKeyState SetCaretPos DrawTextExA SetRectEmpty GetShellWindow SetKeyboardState GetKeyboardState MapVirtualKeyA ShowCaret GetUpdateRgn DestroyCursor GetWindowRgn ValidateRect GetDCEx LockWindowUpdate CharNextExA GetIconInfo GetCursor GetForegroundWindow InvalidateRgn GetKeyboardLayout GetUpdateRect DeferWindowPos BeginDeferWindowPos FindWindowA TrackPopupMenu GetKeyNameTextA RemovePropA SendNotifyMessageA FrameRect ChildWindowFromPoint DrawIcon TranslateMessage DispatchMessageA MessageBeep UnregisterClassA CreateDialogIndirectParamA IsChild GetNextDlgTabItem IsDialogMessageA WinHelpA ScrollWindowEx InvalidateRect SystemParametersInfoA IsIconic GetWindowPlacement GetClipboardFormatNameA RegisterClipboardFormatA RegisterWindowMessageA PeekMessageA ScreenToClient PostMessageW PeekMessageW RedrawWindow InflateRect AdjustWindowRectEx CreatePopupMenu DestroyMenu DrawTextA DrawFocusRect AppendMenuA AdjustWindowRect IsZoomed EnumChildWindows GetDesktopWindow ShowScrollBar SetScrollRange SetScrollPos GetMessageA GetScrollPos IsRectEmpty CallMsgFilterA GetMessagePos GetDoubleClickTime InvertRect GetSysColorBrush SetCursor GetWindowDC UnionRect SetTimer SetScrollInfo EnableScrollBar UpdateWindow KillTimer LoadCursorA GetMessageTime GetDlgCtrlID GetWindowThreadProcessId WindowFromPoint EndDeferWindowPos EndDialog ReleaseCapture PtInRect SetWindowRgn IntersectRect EqualRect OffsetRect GetParent ClientToScreen GetWindowRect GetActiveWindow GetWindow MoveWindow BeginPaint EndPaint SetParent IsWindowVisible CreateWindowExA DestroyWindow CharNextA GetPropA GetCursorPos SetCursorPos MapWindowPoints DefWindowProcA SetPropA IsWindow SetDlgItemTextA CheckDlgButton IsWindowEnabled GetDlgItemTextA GetDC ReleaseDC SetWindowPos SetWindowLongA GetWindowLongA SendDlgItemMessageA IsDlgButtonChecked GetClientRect GetFocus LoadIconA FillRect DrawIconEx ShowWindow DestroyIcon SetDlgItemInt GetDlgItemInt MessageBoxA SetFocus GetWindowTextLengthA SetWindowTextA GetWindowTextA EnableWindow SendMessageA DialogBoxParamA GetKeyState SetCapture GetCapture CallWindowProcA PostMessageA GetSysColor SetRect DrawEdge GetSystemMetrics GetClassInfoA RegisterClassA GetDlgItem LoadStringA wsprintfA GetScrollInfo GetClassNameA DrawFrameControl CopyRect

ole32

OleLoadFromStream ReleaseStgMedium DoDragDrop RegisterDragDrop RevokeDragDrop OleSaveToStream CreateOleAdviseHolder CoCreateInstance CoTaskMemAlloc CoTaskMemFree

advapi32

RegEnumKeyExA RegCreateKeyA RegOpenKeyA RegQueryValueA RegQueryValueExA RegDeleteValueA RegDeleteKeyA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegCloseKey

oleaut32

SafeArrayCopy SafeArrayGetElement SafeArrayCreate SafeArrayPutElement SafeArrayGetUBound SafeArrayAccessData SafeArrayGetLBound VariantCopy SafeArrayUnaccessData OleCreateFontIndirect GetErrorInfo OleCreatePictureIndirect UnRegisterTypeLi RegisterTypeLi LoadTypeLibEx SetErrorInfo LoadTypeLi CreateErrorInfo VariantCopyInd SafeArrayCreateVector OleCreatePropertyFrame SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy OleTranslateColor VariantChangeTypeEx VariantChangeType SysAllocStringLen VariantInit SysStringLen SysAllocString LoadRegTypeLi VariantClear SafeArrayRedim SysFreeString

gdi32

ExcludeClipRect SetBrushOrgEx GetClipRgn OffsetRgn GetDIBColorTable SetDIBColorTable CreateDIBSection OffsetWindowOrgEx ExtTextOutW GetTextExtentPointW CreateHalftonePalette GetTextAlign SetTextAlign DeleteObject GetDeviceCaps SelectObject CreateSolidBrush PatBlt Polyline CreatePen StretchDIBits GetDIBits GetSystemPaletteEntries GetObjectA CreateBitmap DeleteDC CreateCompatibleDC CreateDCA SetBkColor GetStockObject GetTextExtentPoint32A CreateFontIndirectA GetCurrentObject GetTextMetricsA SetViewportOrgEx SetWindowOrgEx CreateRectRgnIndirect GetViewportExtEx GetWindowExtEx LPtoDP SetMapMode SetViewportExtEx SetWindowExtEx SetTextColor SelectClipRgn CreateRectRgn Rectangle StretchBlt CreateICA CopyMetaFileA CopyEnhMetaFileA GetPaletteEntries RealizePalette SelectPalette CreateDIBitmap GetBitmapBits CreatePalette GetNearestColor GetClipBox TextOutA SetBkMode CreateFontA CreatePatternBrush ExtTextOutA RestoreDC IntersectClipRect SaveDC GetBkColor GetCharWidthA GetTextExtentPointA Arc RectVisible Ellipse LineTo MoveToEx GetPixel CreateCompatibleBitmap BitBlt CombineRgn GetTextColor

MSCOMCTL.OCX

IMPHASH ce21923007044b1701a0b2dc4ac9396b
SHA256 bc58d624ceea02ab086f1cce809c992bf5a7105e88931853317a2f5aa5afd6e4
MD5 ecc7d7f0d3446de36045d1d9e964fafe
SHA1 da6b0ec081d628c33b150327f3bd16d3b7fa4729
SHA512 443de697be9886cd97235e6468f3a7f6bf11612711e54dba31431b0d9418672e1434e839ed50cacf28107f692f0c9d9d2f57d90e3a843d81015d459c180db632
SSDEEP 24576:s0LiK1d6dxOehwsj5dC33M/jYVRDSfaF0gg1CVGO7oVtNKG:n6dAehwaY19G1u7+Ln
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

PE Signature issue

Digest

c7:c4:89:65:e3:9c:c5:cd:87:45:a0:f0:e3:45:44:66:2e:8c:1e:27

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 23, 2024

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Serial Number

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2008

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

Serial Number

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6

Issuer

Key Usages

KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 10, 2000 - Nov 12, 2005

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:7d:a7:00:00:00:00:00:48

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 25, 2003 - Jan 25, 2005

Minor OS version

0

Major OS version

4

Entry point

27064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

CreateThread LocalReAlloc GetProfileIntA RtlMoveMemory LocalSize FreeResource GetCurrentProcessId MulDiv GetTickCount MapViewOfFile CreateFileMappingA UnmapViewOfFile GlobalReAlloc IsBadReadPtr Sleep WaitForSingleObject GlobalHandle GetThreadLocale LocalFree LocalAlloc GlobalAddAtomA SetFilePointer SetStdHandle FlushFileBuffers VirtualAlloc WriteFile VirtualFree HeapCreate HeapDestroy GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetOEMCP GetACP GetCPInfo GetStartupInfoA GetFileType GetStdHandle SetHandleCount TlsGetValue SetLastError TlsFree TlsAlloc TlsSetValue GetCurrentProcess TerminateProcess ExitProcess RtlUnwind GetCommandLineA CompareStringW GlobalSize CreateFileA GetFileSize GlobalUnlock GlobalLock ReadFile CloseHandle IsDBCSLeadByte GetModuleHandleA FindResourceA LoadResource LockResource GetLastError GetFileAttributesA GetVersion DisableThreadLibraryCalls GetProcAddress GetLocaleInfoA LoadLibraryA GetWindowsDirectoryA lstrcatA GetModuleFileNameA IsBadWritePtr lstrcmpiA GetLocalTime GetTimeFormatA GetDateFormatA lstrcmpA GlobalAlloc GlobalFree GetVersionExA GetCurrentThreadId MultiByteToWideChar CompareStringA lstrcpyA InterlockedExchange lstrlenA GetSystemDefaultLCID lstrcpynA HeapAlloc DeleteCriticalSection FreeLibrary HeapFree WideCharToMultiByte lstrlenW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetProcessHeap InterlockedIncrement InterlockedDecrement HeapReAlloc

user32

DrawFocusRect AdjustWindowRect DrawFrameControl TrackPopupMenu GetMessageA AdjustWindowRectEx CopyRect GetKeyNameTextA ShowCaret SetCaretPos GrayStringA HideCaret DestroyCaret CreateCaret SetWindowTextA SetScrollInfo DrawTextExA InvertRect SetRectEmpty GetShellWindow SetKeyboardState GetKeyboardState GetScrollInfo GetKeyboardLayout DestroyCursor GetUpdateRgn GetUpdateRect GetWindowRgn ValidateRect CallMsgFilterA LockWindowUpdate IsZoomed GetDesktopWindow GetIconInfo GetCursor GetForegroundWindow InvalidateRgn EndDeferWindowPos EnumChildWindows GetDoubleClickTime FindWindowA GetMessageTime GetWindowThreadProcessId RemovePropA SendNotifyMessageA SetScrollPos SetScrollRange GetWindowTextLengthA EnableScrollBar ChildWindowFromPoint EndDialog GetWindow GetPropA GetCursorPos WindowFromPoint GetClassNameA GetDlgCtrlID IsWindow SetPropA SetTimer KillTimer SendDlgItemMessageA IsWindowVisible UnregisterClassA CharNextA SetActiveWindow CheckRadioButton SetFocus IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt CheckDlgButton GetDlgItem IsWindowEnabled GetDCEx DrawIconEx CreateIconIndirect SystemParametersInfoA IsIconic GetWindowPlacement GetClipboardFormatNameA SetCursorPos RegisterClipboardFormatA MessageBeep RegisterWindowMessageA PeekMessageA PostMessageW PeekMessageW VkKeyScanA SetParent CharUpperA GetDlgItemInt SetCursor CreateDialogIndirectParamA GetNextDlgTabItem IsDialogMessageA ScrollWindowEx GetDlgItemTextA SetWindowRgn IntersectRect EqualRect MoveWindow BeginPaint EndPaint DeferWindowPos BeginDeferWindowPos CharNextExA DrawIcon DestroyIcon MapWindowPoints CreatePopupMenu AppendMenuA TrackPopupMenuEx DestroyMenu GetActiveWindow MessageBoxA WinHelpA PtInRect DefWindowProcA GetWindowDC SetRect LoadCursorA IsRectEmpty ClientToScreen GetWindowRect MapVirtualKeyA DestroyWindow CreateWindowExA GetSysColorBrush GetAsyncKeyState EnableWindow PostMessageA TranslateMessage DispatchMessageA wsprintfA DialogBoxParamA UpdateWindow GetWindowLongA SetWindowLongA GetDC ReleaseDC GetParent OffsetRect UnionRect GetFocus IsChild CallNextHookEx UnhookWindowsHookEx SetWindowsHookExA GetMessagePos ScreenToClient SetWindowPos SetCapture GetWindowTextA WindowFromDC GetClientRect CallWindowProcA DrawEdge GetSysColor FrameRect InflateRect FillRect DrawTextA GetKeyState GetCapture ReleaseCapture GetClassInfoA RegisterClassA InvalidateRect LoadIconA GetSystemMetrics CopyImage SendMessageA LoadStringA RedrawWindow ShowWindow CreateAcceleratorTableA

ole32

ReleaseStgMedium DoDragDrop RegisterDragDrop RevokeDragDrop CreateStreamOnHGlobal OleLoadFromStream OleSaveToStream CreateOleAdviseHolder CoTaskMemAlloc CoTaskMemFree CoCreateInstance

advapi32

RegDeleteKeyA RegOpenKeyA RegQueryValueA RegQueryValueExA RegEnumKeyExA RegCreateKeyA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegCloseKey RegDeleteValueA

oleaut32

SafeArrayRedim SafeArrayPutElement SafeArrayGetElement SafeArrayCreate SafeArrayDestroy SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData GetErrorInfo OleCreateFontIndirect OleCreatePropertyFrame LoadTypeLibEx UnRegisterTypeLi RegisterTypeLi CreateErrorInfo SetErrorInfo LoadRegTypeLi LoadTypeLi VariantChangeTypeEx SysStringByteLen SysAllocStringByteLen OleLoadPicture SysAllocStringLen VariantCopy OleTranslateColor VariantChangeType OleCreatePictureIndirect VariantCopyInd SysStringLen SysFreeString VariantInit VariantClear SysAllocString SafeArrayCopy

comdlg32

GetOpenFileNameA

gdi32

Arc GetTextExtentPointA GetCharWidthA OffsetWindowOrgEx ExtTextOutW GetTextExtentPointW Polyline GetTextAlign SetTextAlign OffsetRgn GetTextColor CombineRgn GetTextMetricsA MoveToEx LineTo Ellipse DeleteObject SelectObject CreateSolidBrush SetViewportOrgEx SetWindowOrgEx SetViewportExtEx SetWindowExtEx SetMapMode GetDeviceCaps CreateFontIndirectA GetObjectA SelectClipRgn ExcludeClipRect RectVisible GetClipBox IntersectClipRect GetClipRgn CreateRectRgnIndirect RealizePalette SelectPalette PatBlt CreateCompatibleBitmap CreateBitmap CreateCompatibleDC GetTextExtentPoint32A TextOutA SetBkColor SetTextColor SetBkMode Rectangle CreatePen GetStockObject GetViewportExtEx GetWindowExtEx LPtoDP DeleteDC CreateDCA CreateRectRgn StretchBlt CreateICA CopyMetaFileA CopyEnhMetaFileA GetPaletteEntries GetDIBits CreateDIBitmap GetBitmapBits CreatePalette GetNearestColor CreatePatternBrush CreateDIBSection CreateHalftonePalette BitBlt SetDIBColorTable GetDIBColorTable GetPixel StretchDIBits SetBrushOrgEx GetBkColor ExtTextOutA RestoreDC SaveDC CreateFontA

OWC10.DLL

IMPHASH bb08fbf9e3d0a26d20492ade90974acf
SHA256 51206a60c764a298ae042a1cfc6fbdfc7d84674805c6bd6f25e8f347963cea03
MD5 3299c3e1b8f103d20895af663a1b4366
SHA1 e9d7b1aafda1d5104a0080fd3ae9ad5c0bd2af36
SHA512 d3e59729f89bd87d4d0be2049253d11383ea698fab131e1c1f8fa562dd36624cccc79392a34474aaadb286169c8f574032cbfcadb2e05ab915315906612d09e5
SSDEEP 196608:LNNvpdAvH8TQJ6wUE5xONY532/IUP94vef7:/pSP8TQJ6wUE5xONY5WIUP94Wf7
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

PE Signature issue

Digest

64:e9:b9:18:bc:cf:22:a7:8a:e7:d3:f0:5e:94:e2:48:c7:2f:cb:c4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

Chains

Feb 23, 2024

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Serial Number

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Timespan

May 12, 1997 - Jan 7, 2004

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Serial Number

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Feb 28, 2001 - Jan 6, 2004

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

Serial Number

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6

Issuer

Key Usages

KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 10, 2000 - Nov 12, 2005

Subject

Serial Number

61:07:11:43:00:00:00:00:00:34

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2002 - Nov 25, 2003

Minor OS version

0

Major OS version

4

Entry point

5745023

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentProcess GetCurrencyFormatW GetNumberFormatW GetTimeFormatW GetLocalTime LCMapStringW FlushInstructionCache GlobalAlloc GlobalLock GlobalUnlock GetDateFormatW GetLocaleInfoW GetSystemDefaultLCID InterlockedIncrement InterlockedDecrement HeapDestroy GetUserDefaultLCID DeleteCriticalSection lstrcmpiW LoadLibraryExW GetLastError FindResourceW LoadResource SizeofResource lstrlenA MultiByteToWideChar GetShortPathNameW LoadLibraryW FreeLibrary GetModuleFileNameW InitializeCriticalSection GetVersionExA GetTickCount EnumCalendarInfoA GetUserDefaultLangID GetSystemDefaultLangID LeaveCriticalSection EnterCriticalSection GlobalSize TlsAlloc CloseHandle SetStdHandle GetCPInfo IsBadCodePtr GetStringTypeW GetStringTypeA GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetStartupInfoA GetFileType GetStdHandle SetHandleCount SetUnhandledExceptionFilter HeapSize TerminateProcess ExitProcess RtlUnwind ConvertDefaultLocale LocalReAlloc IsDBCSLeadByteEx RaiseException SearchPathW GetSystemDirectoryA CreateSemaphoreA ReleaseSemaphore GetProfileSectionA HeapReAlloc FlushFileBuffers GetSystemDirectoryW GetEnvironmentVariableA VirtualQuery GetCommandLineA GetSystemInfo DuplicateHandle HeapCreate GlobalMemoryStatus HeapFree HeapAlloc VirtualAlloc LocalAlloc GetOEMCP GetTempFileNameW ExpandEnvironmentStringsA IsValidLocale GetTempPathW IsValidCodePage ExpandEnvironmentStringsW IsDBCSLeadByte CompareStringW CompareStringA GlobalHandle GetStringTypeExW EnumResourceNamesA GetSystemTime FreeResource SystemTimeToFileTime FileTimeToLocalFileTime OpenEventW SetEvent CompareFileTime FileTimeToSystemTime GetFileTime SetCurrentDirectoryW CopyFileW GetSystemTimeAsFileTime ReadFile GlobalReAlloc WriteFile GetCurrentDirectoryW GetComputerNameW GlobalFree lstrcpyA lstrcpyW lstrcatW Sleep lstrcatA CreateEventW FreeLibraryAndExitThread TerminateThread InterlockedExchange GetFileSize SetFilePointer SetEndOfFile UnmapViewOfFile CreateFileMappingW MapViewOfFile FindClose CreateFileW FindFirstFileW WaitForMultipleObjects PulseEvent CreateThread GetCurrentProcessId WaitForSingleObject CreateMutexA lstrcmpW GetVersionExW lstrlenW GetFileAttributesW GetFullPathNameW QueryDosDeviceW IsBadReadPtr SetFileAttributesW DeleteFileW IsBadWritePtr LocalFree FormatMessageA FormatMessageW GetCurrentThreadId GetProcAddress WideCharToMultiByte SetCurrentDirectoryA SetFileAttributesA lstrcmpA SearchPathA LCMapStringA lstrcmpiA LoadLibraryA GetWindowsDirectoryA GetTempFileNameA GetTempPathA GetShortPathNameA GetTimeFormatA GetStringTypeExA GetProfileStringA GetProfileIntA GetModuleHandleA GetPrivateProfileIntA GetNumberFormatA GetComputerNameA GetModuleFileNameA GetFullPathNameA OpenEventA GetFileAttributesA GetCurrencyFormatA GetDateFormatA GetCurrentDirectoryA FindFirstFileA FindResourceA CopyFileA DeleteFileA CreateFileMappingA CreateEventA SetLastError CreateFileA GetLocaleInfoA TlsGetValue GetACP GetVersion TlsFree TlsSetValue VirtualFree MulDiv ReleaseMutex LockResource GetModuleHandleW

user32

SetParent SetActiveWindow GetWindowPlacement UnhookWindowsHookEx GetIconInfo GetWindowDC GetAsyncKeyState IsWindowVisible WindowFromPoint GetDlgItemTextW SetDlgItemTextW FindWindowW CopyRect DrawFocusRect DialogBoxParamW EndDialog GetCursor SetRect UpdateWindow IsWindowEnabled KillTimer SetTimer GetCapture GetCursorPos ScreenToClient GetClassInfoW RegisterClassW GetClassInfoA RegisterClassA GetWindowTextLengthA GetWindowTextLengthW GetWindowTextW SetWindowTextW RegisterWindowMessageW GetDlgItem InvalidateRgn SetCapture ReleaseCapture GetClassNameW RedrawWindow GetWindow SetWindowsHookExA SetWindowsHookExW GetScrollInfo SetScrollInfo GetDesktopWindow PostMessageA PostMessageW MessageBoxW GetActiveWindow GetForegroundWindow DispatchMessageA DispatchMessageW PeekMessageW IsWindowUnicode PeekMessageA WinHelpA UnregisterClassA SystemParametersInfoA SetWindowTextA SetWindowLongA SetDlgItemTextA SendMessageA RemovePropA RegisterWindowMessageA RegisterClipboardFormatA MessageBoxA LoadMenuA LoadIconA LoadBitmapA IsCharUpperA IsCharAlphaA InsertMenuItemA GetWindowTextA GetWindowLongA GetMenuStringA GetDlgItemTextA LoadImageA GetClassNameA FindWindowA EnableWindow CallNextHookEx DialogBoxParamA CreateWindowExA CreateDialogParamA AppendMenuA InflateRect GetClipboardData IsClipboardFormatAvailable CloseClipboard GetClipboardOwner EmptyClipboard OpenClipboard RegisterClipboardFormatW SetClipboardData SetCursor EnableMenuItem CheckMenuItem FillRect GetMenuItemInfoW GetMenuStringW CreatePopupMenu GetMenuItemCount GetMenuItemInfoA AppendMenuW SetMenuItemInfoA LoadBitmapW GetSysColor GetSysColorBrush DestroyMenu TrackPopupMenuEx IsCharUpperW IsCharAlphaW GetWindowThreadProcessId AttachThreadInput CreateWindowExW CallWindowProcW CallWindowProcA SetWindowLongW DefWindowProcW DefWindowProcA GetClassInfoExW LoadCursorW wsprintfW RegisterClassExW GetClassInfoExA LoadCursorA wsprintfA RegisterClassExA GetFocus IsChild LoadMenuW GetSubMenu EqualRect OffsetRect SetWindowRgn SetWindowPos UnionRect PtInRect GetKeyState InvalidateRect BeginPaint GetClientRect EndPaint CreateDialogParamW GetWindowLongW GetParent SetFocus SendMessageW IsDialogMessageA IsDialogMessageW WinHelpW MoveWindow ShowWindow GetDC ReleaseDC GetDialogBaseUnits IsWindow DestroyWindow GetClassLongA PostThreadMessageW CharNextW WindowFromDC MapWindowPoints IntersectRect SystemParametersInfoW GetWindowRect GetSystemMetrics PostThreadMessageA GetMessageW GetMessageA GetDlgCtrlID SetCaretPos HideCaret CreateCaret DestroyCaret GetNextDlgTabItem TranslateMessage FrameRect DrawEdge CharToOemBuffA FindWindowExA LoadIconW PostQuitMessage GetWindowRgn IsRectEmpty EndDeferWindowPos DeferWindowPos BeginDeferWindowPos ScrollWindowEx EnumChildWindows ClientToScreen SetKeyboardState GetKeyboardState IsMenu RemoveMenu GetSystemMenu CreateDialogIndirectParamA CreateDialogIndirectParamW SetWindowPlacement AdjustWindowRectEx MsgWaitForMultipleObjects IsDlgButtonChecked CheckDlgButton CheckRadioButton SetScrollPos SetScrollRange GetCaretPos TrackMouseEvent InvertRect GetPropA GetPropW RemovePropW SetPropA SetPropW ShowCaret GetKeyboardLayout InsertMenuItemW CharPrevA GetQueueStatus GetDCEx wvsprintfA GetMessagePos AdjustWindowRect

gdi32

LineTo ExtCreatePen CreatePenIndirect SetRectRgn CreateSolidBrush SetBkColor CreateBrushIndirect CreateCompatibleDC BitBlt SetTextColor EnumFontFamiliesExW EnumFontFamiliesExA SetBkMode SetWindowExtEx CloseMetaFile CreateMetaFileW CreateRectRgnIndirect CreateDCW DeleteMetaFile LPtoDP SaveDC GetObjectType SetWindowOrgEx SetViewportOrgEx SetMapMode RestoreDC GetDeviceCaps DeleteDC SelectObject GetTextMetricsW CreateFontIndirectW DeleteObject GetClipBox GetTextExtentPoint32W MoveToEx Rectangle PolylineTo Polygon CreateCompatibleBitmap Ellipse PlayMetaFile SetMetaFileBitsEx DeleteEnhMetaFile CloseEnhMetaFile StretchDIBits GetWinMetaFileBits RealizePalette SelectPalette StretchBlt CreateEnhMetaFileW GdiFlush DPtoLP SetTextAlign SetViewportExtEx CreateDIBSection GdiComment IntersectClipRect Arc GetObjectW PatBlt GetNearestPaletteIndex GetNearestColor GetPaletteEntries GetOutlineTextMetricsA GetOutlineTextMetricsW GetTextFaceW GetViewportExtEx GetWindowExtEx Escape SelectClipRgn RectVisible GetMapMode CopyEnhMetaFileA CopyMetaFileA CreateEnhMetaFileA CreateFontIndirectA CreateDCA CreateMetaFileA CreateFontA GetObjectA GetTextExtentPoint32A GetTextFaceA SetROP2 GetTextMetricsA GetCharWidthW GetCharWidthA GetTextExtentExPointA SetDIBColorTable GetDIBColorTable ExtTextOutA CreateEllipticRgn CreateHalftonePalette SetPixel ExcludeClipRect GetClipRgn GetBitmapBits GetTextColor GetBkColor CreateRectRgn GetRgnBox CreateDIBitmap ExtTextOutW CreateBitmap SetDIBits GetDIBits GetTextAlign GetTextExtentPointA CreateFontW GetCurrentObject GetTextCharset GetTextCharsetInfo GetTextExtentExPointW CopyMetaFileW TranslateCharsetInfo CopyEnhMetaFileW GetFontData CreateDIBPatternBrushPt CreatePalette CombineRgn GetSystemPaletteEntries StrokePath ExtEscape BeginPath PolyBezierTo EndPath SetDIBitsToDevice CloseFigure GetRegionData GetRandomRgn SetStretchBltMode SetICMMode GetDCOrgEx GetViewportOrgEx EnumMetaFile GetMetaFileBitsEx EnumEnhMetaFile SetEnhMetaFileBits GetEnhMetaFileHeader SetMetaRgn SetWorldTransform SetGraphicsMode GetEnhMetaFileBits SetBitmapBits ExtCreateRegion GetPixel ModifyWorldTransform GetBkMode GetROP2 FillRgn SetMiterLimit ExtSelectClipRgn PlayEnhMetaFileRecord GetWorldTransform SetBrushOrgEx ScaleViewportExtEx GetWindowOrgEx OffsetViewportOrgEx Polyline CreatePen PlayMetaFileRecord PolyPolygon SetTextJustification GetGraphicsMode SelectClipPath PolyBezier SetPolyFillMode FillPath StrokeAndFillPath PolyPolyline PlayEnhMetaFile CreatePatternBrush SetMapperFlags CombineTransform ScaleWindowExtEx AngleArc RoundRect PlgBlt ResizePalette SetPaletteEntries OffsetClipRgn Chord Pie PolyDraw GetCurrentPositionEx WidenPath FlattenPath GetStockObject AbortPath GetPath SetArcDirection ArcTo

advapi32

RegEnumKeyW RegEnumValueA RegDeleteKeyW RegDeleteValueW RegCloseKey RegCreateKeyExW RegOpenKeyExW RegEnumKeyExW RegSetValueExW RegEnumValueW RegQueryValueExW RegOpenKeyW GetUserNameA RegCreateKeyExA RegDeleteValueA RegDeleteKeyA RegEnumKeyExA RegEnumKeyA RegOpenKeyExA RegOpenKeyA RegQueryInfoKeyA RegQueryValueExA RegQueryValueA RegSetValueExA GetUserNameW RegNotifyChangeKeyValue RegQueryValueW CloseServiceHandle QueryServiceStatus StartServiceW OpenServiceW OpenSCManagerW ControlService RegQueryInfoKeyW

ole32

StringFromGUID2 RevokeDragDrop CreateILockBytesOnHGlobal StgCreateDocfile StgCreateDocfileOnILockBytes ReleaseStgMedium CoCreateGuid CoInitialize DoDragDrop StgOpenStorage RegisterDragDrop CoMarshalInterThreadInterfaceInStream CoGetInterfaceAndReleaseStream CoInitializeEx CoUninitialize CreateBindCtx OleUninitialize OleLockRunning StringFromCLSID CLSIDFromString CLSIDFromProgID CoGetClassObject OleInitialize GetHGlobalFromStream CreateStreamOnHGlobal ProgIDFromCLSID OleSaveToStream WriteClassStm OleLoadFromStream CreateDataAdviseHolder OleRegGetMiscStatus CreateOleAdviseHolder OleRegGetUserType OleRegEnumVerbs CoTaskMemRealloc CoTaskMemAlloc CoTaskMemFree CoCreateInstance CoGetMalloc

oleaut32

VarCyFromStr VarUI4FromUI2 VarR8FromStr VarR4FromStr VarBoolFromStr VarI4FromStr VarDecFromStr SystemTimeToVariantTime VarBstrFromCy VarBstrFromR8 VarBstrFromR4 VarBstrFromI4 VarBstrFromI2 VarBstrFromUI4 VarBstrFromUI2 VarBstrFromDate OleTranslateColor SafeArrayPtrOfIndex VariantTimeToSystemTime LHashValOfNameSys OleCreateFontIndirect OleCreatePictureIndirect SafeArrayGetElement SafeArrayGetDim SafeArrayGetLBound SafeArrayGetUBound SafeArrayLock SafeArrayUnlock SafeArrayCreate SafeArrayPutElement SysReAllocStringLen SafeArrayDestroy CreateErrorInfo SafeArrayCreateVector SafeArrayAccessData SafeArrayUnaccessData VariantCopyInd VariantCopy VarDateFromStr GetAltMonthNames VariantInit VariantChangeTypeEx VarDateFromUdate VarUdateFromDate DispCallFunc SysStringByteLen SysAllocStringByteLen VariantChangeType OleCreatePropertyFrame VariantClear GetErrorInfo SetErrorInfo LoadRegTypeLi SysStringLen SysAllocStringLen VarUI4FromStr LoadTypeLi SysAllocString RegisterTypeLi SysFreeString VarUI4FromUI1 VarI4FromI2 VarI4FromI1 VarBstrFromDec SafeArrayRedim SafeArrayGetElemsize

imm32

ImmGetDefaultIMEWnd ImmNotifyIME ImmGetContext ImmReleaseContext

wininet

InternetQueryOptionW FindFirstUrlCacheEntryExW CreateUrlCacheEntryW CommitUrlCacheEntryW InternetQueryOptionA FindNextUrlCacheEntryExW GetUrlCacheEntryInfoW

msi

ord37

shfolder

SHGetFolderPathA

Name

.text

Size

5.6MB

Virtual Size

5.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

132KB

Virtual Size

206KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rtext

Size

4KB

Virtual Size

76B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bootdat

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

msoconst

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Shared

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1004KB

Virtual Size

1003KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

276KB

Virtual Size

273KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

使用说明.txt

SHA256 c32f7e59e8e2fd55f29a9984ea127a9ef9ef4924a36229c6f30df6b6773f8597
MD5 0338eef1f99f45ec1e648e829a573c19
SHA1 5aa62a51badf257e6bbb7e82d057be9a0ee3858e
SHA512 fb8a7305c07f8961071b000db02b3abf8ac4b3503048e256351f65a0049d5ebc6c6c90bd9a58876bcf10eca3d939039168de98a267cf4fb9a790d2fea6ec038c
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer