abfa6b8133d991cc58277e27e15b7354
- SHA256 35bcbe83559ef07628aeb933f9c556b3a091ac996fb35508a482e3cd367d6a18
Overview
overview
7Static
static
7cool-3gp-c...gb.exe
windows7-x64
7cool-3gp-c...gb.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3Cool3GPConverter.exe
windows7-x64
3Cool3GPConverter.exe
windows10-2004-x64
3Cool3GPCon...gb.chm
windows7-x64
1Cool3GPCon...gb.chm
windows10-2004-x64
1libm9s.exe
windows7-x64
1libm9s.exe
windows10-2004-x64
1shellMenu_gb.dll
windows7-x64
1shellMenu_gb.dll
windows10-2004-x64
1update.exe
windows7-x64
1update.exe
windows10-2004-x64
1xvidcore.dll
windows7-x64
1xvidcore.dll
windows10-2004-x64
1新云软件.url
windows7-x64
1新云软件.url
windows10-2004-x64
1Behavioral task
behavioral1
Sample
cool-3gp-converter-gb.exe
Resource
win7-20240221-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
cool-3gp-converter-gb.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
Cool3GPConverter.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
Cool3GPConverter.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
Cool3GPConverter_gb.chm
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
Cool3GPConverter_gb.chm
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
libm9s.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
libm9s.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
shellMenu_gb.dll
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
shellMenu_gb.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
update.exe
Resource
win7-20240221-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral14
Sample
update.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
xvidcore.dll
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
xvidcore.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
新云软件.url
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
新云软件.url
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target abfa6b8133d991cc58277e27e15b7354
- Size 5.4MB
- Sample240228-qlrayace5w
- SHA256 35bcbe83559ef07628aeb933f9c556b3a091ac996fb35508a482e3cd367d6a18
- MD5 abfa6b8133d991cc58277e27e15b7354
- SHA1 8fd015c434ade859acd9df5f568c947dedf033b9
- SHA512 161397c4c79ec823ad7249f86008af37d88d6d095ea6990313c4dcf1024c50df6c9d4b17a8112b5bc93ec2dd4c6fd7cae8805be204d6c870b59cc65c8c68d543
- SSDEEP 98304:PNA28cVDYOMMQ1nEvGcWSumelkVwSS7RXxReYozFjGSyLOjcEHeO0DmE+PPd:FA2ZVDRiEvAlkVwSS7RnetFjGKeFDqd
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack002/update.EXE aspack_v212_v242 - Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack002/$PLUGINSDIR/InstallOptions.dll unpack002/libm9s.exe unpack002/shellMenu_gb.dll unpack002/update.EXE unpack002/xvidcore.dll - NSIS installer 2 IoCs
resource yara_rule static1/unpack001/cool-3gp-converter-gb.exe nsis_installer_1 static1/unpack001/cool-3gp-converter-gb.exe nsis_installer_2
File Explorer
-
abfa6b8133d991cc58277e27e15b7354.rar 5.4MB
-
cool-3gp-converter-gb.exe.exe 5.4MB
-
$PLUGINSDIR/InstallOptions.dll.dll 14KB
-
$PLUGINSDIR/ioSpecial.ini211B
-
$PLUGINSDIR/modern-wizard.bmp144KB
-
Cool3GPConverter.exe.exe 1.5MB
-
Cool3GPConverter_gb.chm.chm 79KB
-
Skins/Calmness.ssk19KB
-
Skins/DiamondBlue.ssk15KB
-
Skins/DiamondGreen.ssk16KB
-
Skins/Emerald.ssk12KB
-
Skins/GlassGreen.ssk15KB
-
Skins/Longhorn.ssk18KB
-
Skins/MP10.ssk15KB
-
Skins/MSN.ssk15KB
-
Skins/MacOS.ssk14KB
-
Skins/Midsummer.ssk12KB
-
Skins/OneBlue.ssk15KB
-
Skins/Silver.ssk14KB
-
Skins/SportsBlack.ssk11KB
-
Skins/SportsBlue.ssk12KB
-
Skins/Warm.ssk12KB
-
Skins/XPBlue.ssk12KB
-
Skins/XPGreen.ssk15KB
-
Skins/XPSilver.ssk12KB
-
UpdateLang.ini2KB
-
config.ini204B
-
language/gb.ini3KB
-
libm9s.exe.exe 7.9MB
-
license_gb.txt2KB
-
registration.ini35B
-
shellMenu_gb.dll.dll 395KB
-
splash-gb.bmp369KB
-
uninst.exe.nsis1KB
-
update.EXE.exe 643KB
-
update.URS28KB
-
xvidcore.dll.dll 744KB
-
新云软件.url.url 133B
cool-3gp-converter-gb.exe
- IMPHASH 7fa974366048f9c551ef45714595665e
- SHA256 2dd8ab6eeb9b1da1ffe24d763f3283a69915d99b9e99d63f4214bcab2694aaa0
- MD5 e73abbe223d122136c1042818ea3e7da
- SHA1 de162d707530813007667fc432a55760bf8cac9b
- SHA512 1113d9bd6685aaa59fc879cc63b3cb828516c7b9275082e37b6534a4bc39fd78f7c9d3e072a358d299436e100ace73cf49c5bb34ea4a51c9704169599f4222a2
- SSDEEP 98304:/LckRG2E5JsqnEyWAN5wiloBNhgI4qco5OhFEKgjHnk3iBITDyTVqxEksUahGQIa:/LckRNQJVbYv4qN5OvEnjHOiCH65UsGg
- MD5 SHA1 SHA512 SSDEEP
-
NSIS installer
PE Signature issue
Digest
bd:5e:86:d4:62:97:d2:3e:f3:44:f9:e8:93:55:78:ba:3d:f1:16:40
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Glorious Time Inc,O=Glorious Time Inc,POSTALCODE=100080,STREET=Room 2108H8\, NO .9\, N. 4th West Ring Road,L=Beijing,ST=Beijing,C=CN
Chains
Aug 12, 2009
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Glorious Time Inc,O=Glorious Time Inc,POSTALCODE=100080,STREET=Room 2108H8\, NO .9\, N. 4th West Ring Road,L=Beijing,ST=Beijing,C=CN
Serial Number
0d:31:67:ea:e4:01:81:67:07:35:3d:4b:95:43:3b:24
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 25, 2008 - Jul 25, 2011
Minor OS version
0
Major OS version
4
Entry point
12529
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, version=2190,
count=155, id=1, productName=Unmarked objects,
count=17, id=93, version=2179,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/InstallOptions.dll
- IMPHASH b1cd0d78f652ce5fc63f0879371af012
- SHA256 44c822afaa4cc7cb95390eaa0ada076d280d3455870569f0cde03637257d9899
- MD5 0285eac59530ff5cc91fe2634b4ed78e
- SHA1 241c12aefca0740e776362f30aa1edffd66d6bdc
- SHA512 1007fbfb82d4e6c04bd5fefb32cd81f4406022ceef4d409eda0f0ddeb8b1f124a2baec86498bc119778e0c241fc41b0c2440d8a8f6731a63ede936be94f81297
- SSDEEP 192:8nK6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTgK72dwF7dBEnbok:8K6UdHXcIiY535zBtMTg+BEnbo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10696
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
user32
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
gdi32
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
dialog
initDialog
show
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=72, id=1, productName=Unmarked objects,
count=13, id=93, version=2179,
count=1, id=48, version=9044,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/ioSpecial.ini
- SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
- MD5 e2d5070bc28db1ac745613689ff86067
- SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
- SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
- MD5 SHA1 SHA512
$PLUGINSDIR/modern-wizard.bmp
- SHA256 4ba8f853b599ef4ebfc468402178c5a92fbfb0857b83525c702904bd4c538c92
- MD5 19a1ec71c510ff3c93bc822d05746e7e
- SHA1 9e6d1378e26e3e07f68441d1d61072f16dc70f60
- SHA512 4fbccd33c560b0056e78ebefe0d6c6dec27294fe4f22a0283e840ff1224bca9b0ee9bfe93870adcc61d32ba76bc8eb2999921578d2cac8d664f12e203f4526a8
- SSDEEP 3072:3xxxxxxxxxxxxxxxxxxxxxxxxxxxxxhxSxxxxxxxxxxxxxxxxxxxxxxxxxxxxxps:3xxxxxxxxxxxxxxxxxxxxxxxxxxxxxhz
- MD5 SHA1 SHA512 SSDEEP
Cool3GPConverter.exe
- SHA256 4e2b2f27f90e8569dfa10e9ad380bb91b919ae8b816c09a48fddbf47698a2073
- MD5 967d14b55f84949de947b23438be121a
- SHA1 8b886a7adb0af326706d86dc4e5bb8c70c0635a2
- SHA512 89b500c74821488c202ba8554f506aa47b5212b2f2bd92abdc7c68dbf0028eb78edda6ec78304ba67376aacf29389e3a4c65d5c7802512b25a11a2454d9ed0a3
- SSDEEP 24576:finGAr5ReYcl1oPxKrfUtPqeCTpUiFTYg35VHg+N:anQYhkwtPBm+SHHgA
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
16:ca:bd:58:43:ad:8e:60:b1:22:62:78:b9:4f:26:e0:cd:85:ed:0c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Glorious Time Inc,O=Glorious Time Inc,POSTALCODE=100080,STREET=Room 2108H8\, NO .9\, N. 4th West Ring Road,L=Beijing,ST=Beijing,C=CN
Chains
Aug 12, 2009
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Glorious Time Inc,O=Glorious Time Inc,POSTALCODE=100080,STREET=Room 2108H8\, NO .9\, N. 4th West Ring Road,L=Beijing,ST=Beijing,C=CN
Serial Number
0d:31:67:ea:e4:01:81:67:07:35:3d:4b:95:43:3b:24
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 25, 2008 - Jul 25, 2011
Minor OS version
0
Major OS version
4
Entry point
996136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
969KB
Virtual Size
969KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
65KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
453KB
Virtual Size
453KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Cool3GPConverter_gb.chm
- SHA256 5e6761ca49827582371f699493fd69ad261d43f362ac189f7fc5b1e21248018f
- MD5 50e11fd99171ece52b38c0956ff3f7fb
- SHA1 bfed3d49a5b356d0ba685364c2153c26615f50d5
- SHA512 29d1a20a4c32404bf967ff7b71797df76192b524a63b996ac8d94f8b1a259107d42096d56a99892973208f82512caa7ba387f206e5792707b4a2dca919227580
- SSDEEP 1536:WFKErImZOptmmtlBNCB0DpmZO2MSnyVMzIEXhDglbs1oaxchiCTtGr9Q:2KErImZOpEC9k0DpmZDMSnquIElglI1g
- MD5 SHA1 SHA512 SSDEEP
Skins/Calmness.ssk
- SHA256 12554677bac512ca92b25c661c8d218c3ecf8f80a1c1b8a6693b90a651369360
- MD5 400b35bb2c1143b322f0b006a03c4e57
- SHA1 7ab0bbaa027f793eff921a44b1ae7519c9a65125
- SHA512 1bf8c2a8a84d3a1703c0b3966aa01d8b8b8d9aadd8deb2c5366b49c1c7c4eee696ca49b351f389e5e972065d1563842da00344bc74d5e9a8b41e7c36ad60f321
- SSDEEP 384:k466eYk2Mg+PQENStpmfKMRYu9JQ+YWk2nPFBFQHLoQmf:kTg+PZxYSQ+Yt2n9BFQHsQG
- MD5 SHA1 SHA512 SSDEEP
Skins/DiamondBlue.ssk
- SHA256 0f8415be4538b2ac7bf64a35b50e4680f7cf3cf06014ad204353ae819543bf51
- MD5 8971dd69709f63133dee772d98b2da51
- SHA1 f0242781c1b28c2620dc0dad47532e54556d227a
- SHA512 55e976c4d5c16ff7651ffe2f104d44b4e5a47c19d8b35f8c7dc2ec8b42abba092068408444f8010e2b9a515012874354f036526e07f7c820e8c35f0b797bd7ef
- SSDEEP 384:aVW7LUGzsonHcGDfDgRMP97B2IeFjAPC768UYhlq:v3aonHcofDr2naPC76ohE
- MD5 SHA1 SHA512 SSDEEP
Skins/DiamondGreen.ssk
- SHA256 21b12a26bcf6d65360baded6117142e654594c3e710ace1397e6d6aa608c265d
- MD5 9775abe1345cd088ab7eb2985b6b555b
- SHA1 28e1b53ad94449d58a109db12c67d54d616d2273
- SHA512 a898c72f081a5fce211638f4e7535e0d3adcdf618339371d805f0f8d6419ac6f3591e544d7a00227b4f7ded3eb3be37df40dba2928a31d8dc129e0abe5323465
- SSDEEP 384:lOXDbfI5UlwnWZ9EgOoNN/FiQbySzOb9UuTjpfRYAWQHkNYc:SIGlwnzMJyJb1fWAWQHkH
- MD5 SHA1 SHA512 SSDEEP
Skins/Emerald.ssk
- SHA256 12fcdd78705d304a57ce63641ebe51a1e4041cbb34cac68b8faec6474bd868b4
- MD5 3e01b93f1f6dac92500979cb62b95ca4
- SHA1 e760c399f8559b9149c3ffae3bfab76c58bd40c3
- SHA512 24662c79d874dbc12715326bb616cfbd4b903424d8640cad148afef1c814b5fccec358fa4ffd8d7a246fd648aeb8a732c00e6cf36c9da0d509a31bf4003ae977
- SSDEEP 192:k3B4hcmf+P9XROixPGnn+1Zd6cwVMIC3FejT8TK97l7sQb1bXOznOQSL109X7rkb:8Ghpm/MnnIkVwejYTSgCpOLCWKS0
- MD5 SHA1 SHA512 SSDEEP
Skins/GlassGreen.ssk
- SHA256 73728e2ff9f985c77ef701e7ed12496e54ce799ff76d1428ca8d5a83e40198d9
- MD5 5f4495b9b56e7d8d35440ff3e9a69b17
- SHA1 6580b17178fe87f4eb3d35313d02b4bf094a2945
- SHA512 4d32a62f0b881282667537c8483af46ba6a00f73182989041b470d7aebdcb9768ebca8bb83b247489b41edc2fa0124e0dd205768f8867b9a77d1a996384701a0
- SSDEEP 384:zKn5USYqS/1HyJtvaTrwdwEdyJ0Gc8c0t:zKn5U116laTrwdwEdyJ28c0t
- MD5 SHA1 SHA512 SSDEEP
Skins/Longhorn.ssk
- SHA256 372999a6ed96f5ae92fa983f329723a9da55be145640f67a7f3d8b090d99a1be
- MD5 ac238f870a5b7ecdee24068cb4c1b623
- SHA1 ae0af05f3905fa35f77484059c7b3b4a3896641a
- SHA512 12d449643ece826c1e6b10c871baf72429cb4c34c807d2f50acdfc7e414f592adf76226518263d8efb412ae74dbe7f45e8e934602bb885c2c1fc797bf87762e7
- SSDEEP 384:BY4bXKywo+lJw8t3M6frzIUoXwgUSAMiRX5MAByLzBpWJFsVudHHkpg:BJbOA8t3bvIU8N3xZABAzBYJSVeHHkK
- MD5 SHA1 SHA512 SSDEEP
Skins/MP10.ssk
- SHA256 0f8cd642341b05bab9b0f2b86fbfe61166bae5621978681f7e3788abea92494a
- MD5 f3600abb184baade41df7b9eafee0d56
- SHA1 e8df7f6bf9795f89b90117b2c08930979fa4cc3c
- SHA512 de7742073cd2241d9d6920957aff8429282748596c07733688f281df6f1930d20eb711c068b0501c3ee5c2c5c12ecf888a75244019da65427fdcb474f6000b14
- SSDEEP 384:XVQMlPZlgurq7kC3sVRFNLnOk9PYtCO4mhC2XUH+1X+vF:lQMvlhWkC3pBts3+N+vF
- MD5 SHA1 SHA512 SSDEEP
Skins/MSN.ssk
- SHA256 58bb5156afb036d1b02a7c98d53d0f314332c43a345fdb9e2093bb895d6700c1
- MD5 866372977ca6aaea50b87a8711e9cd22
- SHA1 9e8909e1ccff07ddb63c911fae7a42363a73d74f
- SHA512 7761aa6d123cd44afc0b214b90493c4789996e708f4202c07c1e1af7d2169cd1860cb0c7d81a8c22610b08b439f050b9f1818a19e61ea4c183a914ee1379c89a
- SSDEEP 384:GFVwsEicZBss50m8Mg32DrdRpd7w8fDeN/8kd3j9DTPgHCBF:UWTB+sd8M02Pp1w/3j9Dc+
- MD5 SHA1 SHA512 SSDEEP
Skins/MacOS.ssk
- SHA256 48e85808e5b11cdb47385cc306eea325539bb97c2ab736c8af0247ee26523add
- MD5 09b7f137dd07fe269b27f9be1f47a599
- SHA1 86df3ee96f1d6b5fd85cdd06a43ac6f50b6bb7b7
- SHA512 a471da8ac8247776ba9a36fee67522ed77036a2741a763f9a96b8ffff1e5b83a3d4fcf85890e6595f10ba5ee46da4556f0b5c478857c023e97defc524b3ee398
- SSDEEP 384:fY6ohn8Arv6KdhvkeOhBS0rGx1xIm20pnrCKn2Oe:fLK8ADxdtLOfGxH1rCK2/
- MD5 SHA1 SHA512 SSDEEP
Skins/Midsummer.ssk
- SHA256 557c8f986e306f623556c4e91c17d806639e68fef7bdc6512fc2631974d8e055
- MD5 b6d64e97a1a4aa553ea8c0e7a247e97f
- SHA1 c1880baa09e343d3724f38a0341d288661845886
- SHA512 1221aea4b3f03e9744989f596dd73ed590c1600fefd45124859d1e371252505b396140f8ede480848b14f2ddf3e9a57681993ac70c49ac122a3dde0d3015b64e
- SSDEEP 384:17IxPSlCemMCyZe6j5raoiEwTICfSSnF3CCIM5Y7wSr:UPSlHmMCyNaoixMCVyWMr
- MD5 SHA1 SHA512 SSDEEP
Skins/OneBlue.ssk
- SHA256 7a2b759d57e70cdacb6dd6a7e457d57e194a12ca81a74f1d5f6b9334c19abf7f
- MD5 3732766adbe462926df8995ef6c96043
- SHA1 47aae5c954830aadcc26ef0a9b5095e34d1e6fe9
- SHA512 a67f1ca43c7a70d8770e30fc9d677164ae14749b1ac592b94fd75663d6fe23c189a108330c0ee83cb9302013ee04ff96a43fa7e369ad1fd9f22cc199fd3f2de6
- SSDEEP 384:xXjb3WDwfZOv8kFTIxFVkqcN8Qgdu3DkgwovC7+1YT/B4CAY2K:x3m84v8kKQgd6Dx67bri50
- MD5 SHA1 SHA512 SSDEEP
Skins/Silver.ssk
- SHA256 8466dfa60e6d54a3cca11ca241312afabace2dc2745b39c6e0133d4fc12035d4
- MD5 634e264d0040f83837e029022cfd0e1d
- SHA1 3632a6a1c9ba7fd5c274ba5f4c5d3cb3083acca7
- SHA512 00afbf9bb4687dc90b35f290f6e809c84664cf404f2642fa9bdb14b6b8d31b3e3e3065f99880398895d7e67b6c03850004b64939fcc0cd363757d7c701a2c97c
- SSDEEP 384:6MkEClupmZPN3wzQpUiw4ZfyLHpWQ32Xh1N7rCQ:fkP7PYQrzkoQmR1Nr
- MD5 SHA1 SHA512 SSDEEP
Skins/SportsBlack.ssk
- SHA256 32c4b60e9201d4675e1b53c7825fd1f0c27f7c48f19a2174de3d3078c8940398
- MD5 6a9098bcdd24227034d31cf1bfbbace1
- SHA1 d77d7f48d1d836bb1c04c20ed53b469e7a35a659
- SHA512 072e34a651bef16c1b570543f9dd23a0145f0a7d31879a2ad693211fe9dc86854c77d3388062d188bb5883bbec8784f35f71f8d3aec616d8d3ca545287daf76d
- SSDEEP 192:x8LBGEEX5JKxlg0wJ0zFfIK0NUlnT1SS/PmqVSyj0Xoxq8xIAg19uIs7NsYu1/Rg:x8LwEAKxm0zFwK+Eh/OCjgXovuAVI6s8
- MD5 SHA1 SHA512 SSDEEP
Skins/SportsBlue.ssk
- SHA256 e103ba0ea996e89bd37352f26694332e62755f043a1aaf07de0cc9d726e8354e
- MD5 afcaa708ae79d0a7af8d2a3558fff5fe
- SHA1 c82c0de5babd41eb4becffb39846e30f5f57247a
- SHA512 7a08b856148a0c9c686e78d9f22784054771302f015fff6ec29cf333683ed7d97195d02c582994b9a403b299ae66bea801935bc93292cd5e0d7f3d7f2c0fe626
- SSDEEP 384:jYfvrky4DmTuBONGh1ZKBM2YwaKkCWCjy9r4J:EnMkuYGwm2xRLdjy9g
- MD5 SHA1 SHA512 SSDEEP
Skins/Warm.ssk
- SHA256 e207408eb6c79848775b2d6ed8db3fd00b7520f3eb38780f193b0301ad22a64b
- MD5 5817f18ac3f536193f1506511a44d733
- SHA1 b8484ee3379b6b6fae6ab2e0c59a527beff8daa8
- SHA512 90c9ee0c8f6177c41e0fc12fcf621f37ba20184694a37eaf657e268abef1e8287f10b36e77aaa3df32304e6d95f1f884d848c2336a27205bcc85415b0282a0b5
- SSDEEP 384:dPNjVa79EYK0X9QwX2XYRjXyx5L6uVSQ4Tcz:dFj4E4X9QXYJCGugx6
- MD5 SHA1 SHA512 SSDEEP
Skins/XPBlue.ssk
- SHA256 62b15307f7a81f8e2d267490d89a9a3ee88a63e711ea5a5337fcef311ca32306
- MD5 eb85837e1f4920c67a89cd899fbeeddb
- SHA1 298af9638a8b9fa6b6521b2fa149a34d2e73e114
- SHA512 b4a65eda35e4b027bb7876fcf961b14aae8b9569a7f1be422463c949b04cbdd9bd861eb414a28efab014c428d871ac2ff87fc99c6c06cb9ad53616864b99e18c
- SSDEEP 384:Kppe9rHVoHj7WLz3Sfe5N5TvvK8CTxVIjl:K8DyPeLS25PT3kVIjl
- MD5 SHA1 SHA512 SSDEEP
Skins/XPGreen.ssk
- SHA256 d45b8e6b7ff0743e3a32672a74701da4220163fc1142252e2c6d66add9c1ecd5
- MD5 08140bb89a9bca27b9ff6091dca01a88
- SHA1 213cc1cb37679789c6ddc40d065d2272844002e4
- SHA512 cbdb13a61d97188b32d7f0ef4a88bd30587bc4fafaccabb767bc7afb5d04fda88b2776b77618bd187595fdf4238ccb81cde4fdd987fc828e037c451baf44c405
- SSDEEP 384:8eLj6f/G4F2M6dTmXZLayi0Ipcgmdbp8P8NPMC64yO8pD4:8AQ/GOV6dCXLiyscPs4yOU4
- MD5 SHA1 SHA512 SSDEEP
Skins/XPSilver.ssk
- SHA256 e581fa6377b3e39bac6ea71a60ccc393d48345283377ab04809c83a0f6d9a530
- MD5 aec749a51f4429e62481cfecfb4095da
- SHA1 0132b6279294cbbadaf99cf0cb259620824ba46a
- SHA512 dc1c999ed8e8baa9dc6ebd6fa0fe9e2b36f3cee4722ac65acd24d1b3c8dfb27754ecbf96cb212d00bcf16b96099367822e17786097f9a5015fcd04bc2705af5d
- SSDEEP 384:+jujZiRoZ0epNjU5rNAZSIsmwGw62+7L5Mz:PiOZ0epR8rWZ+09n7mz
- MD5 SHA1 SHA512 SSDEEP
UpdateLang.ini
- SHA256 971ef16b86704cdf5482bd7f3ae986dfdc2f8a1636ae8848b50ef4fe096ea5a4
- MD5 34efb15c4399a57e44f5d6eee29ad27a
- SHA1 da501dc0dbfd3d80777867db552f2cd6ace76d97
- SHA512 fd9109c12efefd60fd5e43385f8b3a8aa53c0254b2e2073fa146a28fd3d7b6b257e876d64feef787f551468a738e11e4e6babcf6ee2195046a4c95aac2b1b7e6
- MD5 SHA1 SHA512
config.ini
- SHA256 c5f847c8fc77e9850654ac5cbf4c4b12b88b5d05e61dcc8f69de06903ac3a2ca
- MD5 9f78ff8dc30d8ff6f661103763319e69
- SHA1 cfa4498b36bcb41bffbc397afa7397f4080b93d0
- SHA512 c040e662df618392d67894283b801900c0635763d4a09310218d113dc7920af9e74d851b17d7200637f241a10666b8621137239b8e9b2d6edfafd041e689bbb3
- MD5 SHA1 SHA512
language/gb.ini
- SHA256 e2788216863af29fa350e36df0227ba0a9d7dd76b5ef5d2317f41c1465da8c93
- MD5 676f123bcfa925c79648771bf7cc5bff
- SHA1 4cab16c36d93939641f979de0ace4780647bbb9d
- SHA512 9906aaced8e9ba8ca2a252d05a26ce52696d253e9b18712e4e2cc011a45cd8391229bcc28e8492e03d7a65f08f888d907386be5240741e3d9bbf74c7bcaebd7d
- MD5 SHA1 SHA512
libm9s.exe
- IMPHASH 2da946bd24beb7b435d12cdb830d024f
- SHA256 af6831b07b2b6a8f567159350950be687a3e04723dc9ddb2f62a58b0a3970a39
- MD5 f0d5ac74e8bbcff9ace4353eb2eaaed5
- SHA1 eba74a38760ca12c7e61519a650ce2dc6ddae693
- SHA512 d603bbab8d38eb4544b3f9e55f66ac763c9703b2a63459096a5fe1c4e0f4a56dfb9381f58a656120ddde5623291cceb26a675e3088a08cfe444cfd616e275023
- SSDEEP 196608:mE1U01LWWkzF3CdhiuqpxJMQGwPST4HDKaqwLlMLY194W7ngnzE:mE1kPST4H7yW7B
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4400
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
xvidcore
xvid_encore
xvid_global
xvid_plugin_2pass2
xvid_plugin_lumimasking
xvid_plugin_single
kernel32
CloseHandle
CreateEventA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCurrentProcess
GetModuleHandleA
GetProcAddress
GetProcessTimes
GetSystemTimeAsFileTime
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReleaseMutex
ReleaseSemaphore
ResetEvent
SetEvent
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject
WideCharToMultiByte
msvcrt
_close
_getch
_isatty
_kbhit
_open
_read
_setmode
_strdup
_tempnam
_unlink
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_atoi64
_beginthreadex
_cexit
_errno
_filbuf
_iob
_lseeki64
_onexit
_setmode
_stricmp
_strnicmp
abort
acos
asin
atan
atexit
atof
atoi
calloc
ceil
cos
cosh
exit
exp
fclose
fflush
floor
fopen
fprintf
fputc
fread
free
frexp
fscanf
fseek
ftell
fwrite
getenv
gmtime
isalpha
isprint
isspace
ldexp
localeconv
localtime
log
log10
malloc
memchr
memcpy
memmove
memset
mktime
perror
pow
printf
putchar
qsort
realloc
rename
signal
sin
sinh
sprintf
sqrt
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtok
strtol
tan
tanh
time
tolower
toupper
vfprintf
wcslen
user32
DestroyWindow
GetWindowLongA
SendMessageA
SetWindowLongA
avicap32
capCreateCaptureWindowA
avifil32
AVIFileExit
AVIFileGetStream
AVIFileInfoA
AVIFileInit
AVIFileOpenA
AVIFileRelease
AVIStreamInfoA
AVIStreamRead
AVIStreamReadFormat
AVIStreamRelease
ws2_32
WSACleanup
WSAGetLastError
WSAStartup
__WSAFDIsSet
bind
closesocket
connect
gethostbyname
gethostname
getsockname
getsockopt
htonl
htons
inet_ntoa
ioctlsocket
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
socket
Name
.text
Size
5.8MB
Virtual Size
5.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
969KB
Virtual Size
968KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/4
Size
81KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rodata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
license_gb.txt
- SHA256 d08acda7af8be73bd2aa1aa19ef1f97af859456a6353724c46e7ae27acde0a00
- MD5 7faf22a422627de35c85703370948a5f
- SHA1 3603f1dcfaef88b8fb03ae6fcef5bfea3ee3d9c4
- SHA512 503f48bd1e7a205c4f943d615164cdc031dfe9bf99545fa44c3addc2029e7a89824fb974cd6d88687008b814afda7426973ffa9562ecac675305891365cd6aac
- MD5 SHA1 SHA512
registration.ini
- SHA256 79fd23e1d484a5dd5b8fb4b1f4dc46217b6a4e03d831ce978fb2fcfb4f85bc11
- MD5 9761c67a4697f73c3b3c75d05e79f49e
- SHA1 e7cd29e1b936e4bf61c52168720c28dbd803c5c9
- SHA512 55444c788f58744437b6ba34d3db2e89477021fe90070110af8e25ad12bb6f58e610a66a908f5424262c6a96b9587ce6a4b23b0b7c53723821e93c18a08d52bd
- MD5 SHA1 SHA512
shellMenu_gb.dll
- SHA256 14891303849d6eba437499540c2f1cb500702503d424fe534e07801ec71201df
- MD5 fcc140a2ab2ba9d11191f4b512afbe2b
- SHA1 e773565cc906bc7fc0f622dab4b7305260025582
- SHA512 b2a6bdd71e3e2535fc6b73610d5623d3e60ca73a63aca44db4125369e0dee0421c1d3c3db65bed3d3491adf3fe64f31fd41566219a14823def5ad849d75e627c
- SSDEEP 6144:WtP4Cmle6CnHM7OlrSWvdlfMooStLyrIesnYxVTuEhuleN7z7El:Y4Cml0nHWUffdHtLvY7TT3fW
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
346680
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
CODE
Size
335KB
Virtual Size
334KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
166B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
splash-gb.bmp
- SHA256 2ae8458fb7e97abfa7ba1053236db046f01977bdd3220ccd09db7d3a3add6ee4
- MD5 de5b4fe2cd69b7ab833d6be5171e781f
- SHA1 7295a23dc10690ffc0515bceb53aae3a9cfac799
- SHA512 6892cab545d5c28ba30d1efe28b67e8cc376a18e5873eac756165f952d105be865613b2467d6936063a112fa69cc0fccdd0c86db7d01ad24fa681bf059a01689
- SSDEEP 6144:U8y+Mcjq2KQUy8P+XPH1eRoL5APRYJbuiyuLZzlXjEwQAuLIHQt:zlq2ky8m/VeRk5JJyiTTEwQAuLIu
- MD5 SHA1 SHA512 SSDEEP
uninst.exe.nsis
- SHA256 a31456dc77c2f3d3651c8ae1f6f6391ca4a2fcefa005797e2cbd33c27f1bbbdf
- MD5 e846514f1bb943ae388f369b84bd2a3c
- SHA1 4a0e93589221a146f3b448140b1b4bc713e58199
- SHA512 04a8b6c42f18578df272a98c68d6a02354a08a3420957284be85c46bdb5baa2824eee1f9656e57085a0318f639d0cc9b4a311b8c374b39fc678ab122900df3be
- MD5 SHA1 SHA512
update.EXE
- SHA256 8bdc29730d79e5a781ba553997a4ead791d44b63ed2632667a2976e50ed02d33
- MD5 5e7d561a38e02a93cb6b6896f0fbf821
- SHA1 478dc732666d0e1a732104b616c23ab2bf37fc03
- SHA512 e005675f5cb11ad1aaf23b171669427989ddcd310ca28d5d8067e0d2569e114fb9ae5a10822b6e9ee964900c2bd54eefc008c9115c92aee52945a78e36b314df
- SSDEEP 12288:EQ/b1QYb9Ify+sRp66qHbJrEeQW2T/PKzNNLQy92eMlTsWZK:p/Fb9MME6q7i+22HPMlTD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1875969
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
494KB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
DATA
Size
32KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
82KB
Virtual Size
308KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.sbl
Size
29KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
update.URS
- SHA256 80e4b5d7846363e88235c08a7fbbe1316460b78527160e44fcbe399db1ff5dc3
- MD5 155e49e35c6a3d7e2297a77e6f52b035
- SHA1 14b50dad44dc87350454e878a0201bea56515585
- SHA512 318a2fc433bebff4cd74f49a88d23b90595285a424fc198f39d8a849b4fc60475816185ae29034ec8c1090ba5ee2617c991057a9e939ed80f633f62abe6c423a
- SSDEEP 768:aHUPgyIB5MqyQ9yzw2RGBqfkI1iKdSmpp:uUo/B5MqRUXRYqsIPd5pp
- MD5 SHA1 SHA512 SSDEEP
xvidcore.dll
- IMPHASH 675a1be91a1f8305759342896f181983
- SHA256 83cb7c62f4c43ac8cb6bad480a1745e19e3a6ed85d7d385b4b9f11168f538142
- MD5 81cca8c60dd2edaf394b6e75ff8e325f
- SHA1 75c8bde8324f2ab3edf7e959cc7bd8a86636112a
- SHA512 3f97db5dbb71c21cea08593d6e26350642f6c4ce8c24e11568dabd4db4213e8bfe3b6adf08089cfd928da05e6344b92d83b9f61eec8286c3130944442d53e254
- SSDEEP 12288:Qp6K/8uZ0fQYbA/HqSqJztRj1hLGha8DMCdlpdAKSWAKSwapL+mrlVr+Tfu5O7YU:U6K0uZ0fp0/HqSOtRTLGha8DMCdlpfac
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
612984
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
WriteFile
GetProcAddress
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetFilePointer
InterlockedDecrement
InterlockedIncrement
SetStdHandle
FlushFileBuffers
CreateFileA
ReadFile
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
xvid_decore
xvid_encore
xvid_global
xvid_plugin_2pass1
xvid_plugin_2pass2
xvid_plugin_dump
xvid_plugin_lumimasking
xvid_plugin_psnr
xvid_plugin_single
Name
.text
Size
628KB
Virtual Size
627KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rodata
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
56KB
Virtual Size
520KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data1
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=11, version=8047,
count=23, id=14, version=7299,
count=114, id=10, version=8047,
count=73, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=50, productName=Unmarked objects (old),
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
新云软件.url
- SHA256 df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
- MD5 4f0017b3b346bd0626f0c3b915e6e734
- SHA1 823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
- SHA512 0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
- MD5 SHA1 SHA512