植物大战僵尸逊版V1[.]9[.]3[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

植物大战僵尸逊版V1.9.3.rar
Size

79.3MB
MD5

22719c584f0217a3d3d5d62fb7bde9a6
SHA1

db76b3c5646fc53b4d0cdd92a1359b92f49be7ab
SHA256

f93263b51e64616e7f14cd99c0fa140f8097f54cfd057c1d1bc2ca891dcda1fc
SHA512

f1e1baa37c42713b4c16353f87ba416fc6a56ed90165afb12c92dd1975351265793781d67f55672c926eab07970c7bfa8d6ff0b2fafc333fddf2f4c3e0d6aa87
SSDEEP

1572864:1bdPKA+jXFdJYtBc+6gQg1lqJDv45Al8SU7HfotD6TvtyosqL745Xea:CpXF3YtB812lqJDYAl8f7HoqvtyuL85r

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/植物大战僵尸逊版V1.9.3/过不去打开这个，这是修改器.exe	upx

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/植物大战僵尸逊版V1.9.3/PlantsVsZombies.exe
unpack001/植物大战僵尸逊版V1.9.3/bass.dll
unpack001/植物大战僵尸逊版V1.9.3/bass_b_2.dll
unpack001/植物大战僵尸逊版V1.9.3/gdi42.dll

Files

植物大战僵尸逊版V1.9.3.rar
.rar
植物大战僵尸逊版V1.9.3/PlantsVsZombies.exe
.exe windows:4 windows x86 arch:x86

33aada12073d335900f2dd1f5ac08eed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Popcap\Lawn\releasefinal\PlantsVsZombies.pdb

Imports

kernel32

OutputDebugStringA
GetModuleFileNameA
GetModuleHandleA
WinExec
MapViewOfFile
CreateFileMappingA
GetCurrentProcessId
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
SetEndOfFile
SetEnvironmentVariableA
CreateFileW
GetLocaleInfoW
WriteConsoleW
LoadLibraryA
FreeLibrary
GetProcAddress
InterlockedDecrement
GetLastError
CloseHandle
FindNextFileA
Sleep
SetThreadPriority
GlobalFree
GetCurrentThread
GlobalLock
WaitForSingleObject
FindClose
GlobalUnlock
CreateMutexA
GlobalAlloc
GetCurrentThreadId
LeaveCriticalSection
GetVersionExA
FindFirstFileA
EnterCriticalSection
GetCommandLineA
MultiByteToWideChar
DeleteFileA
FileTimeToSystemTime
GetFileTime
GetSystemDirectoryA
CreateFileA
MulDiv
SetUnhandledExceptionFilter
GetCurrentProcess
OpenFileMappingA
IsBadWritePtr
UnmapViewOfFile
DeleteCriticalSection
CreateThread
GetThreadPriority
VirtualQuery
SetErrorMode
InitializeCriticalSection
InterlockedIncrement
GetCurrentDirectoryW
LoadLibraryW
GetWindowsDirectoryA
SetEvent
CreateEventA
LockResource
SizeofResource
LoadResource
GetFileSize
FindResourceA
WideCharToMultiByte
InterlockedExchange
InterlockedCompareExchange
GetLocaleInfoA
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
ExitProcess
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLocalTime
ExitThread
ResumeThread
GetDriveTypeA
GetFullPathNameA
CreateDirectoryA
HeapReAlloc
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
GetCPInfo
GetTimeFormatA
GetDateFormatA
CompareStringA
CompareStringW
GetStringTypeA
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetACP
GetOEMCP
IsValidCodePage
ReadFile
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
HeapSize
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
FlushFileBuffers
GetCurrentDirectoryA
SetCurrentDirectoryA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
RemoveDirectoryA

user32

ShowCaret
CloseClipboard
TranslateMessage
DialogBoxIndirectParamA
RegisterWindowMessageA
DefWindowProcA
AdjustWindowRect
ShowWindow
EndDialog
GetDC
IsWindowEnabled
GetClipboardData
SetClipboardData
DispatchMessageA
EnumDisplaySettingsA
SetForegroundWindow
GetWindowTextA
IsIconic
GetWindowLongA
GetDlgItem
SetFocus
ChangeDisplaySettingsA
GetClientRect
GetWindowPlacement
SetWindowTextA
GetWindowRect
ScreenToClient
GetCursorPos
PostMessageA
EmptyClipboard
SetTimer
DestroyWindow
SetCaretPos
ReleaseDC
GetSystemMetrics
PeekMessageA
InvalidateRect
DefWindowProcW
CreateWindowExA
LoadIconA
CreateCursor
ReleaseCapture
WindowFromPoint
ClientToScreen
MoveWindow
EnumWindows
SystemParametersInfoA
MessageBoxW
SetWindowLongA
BeginPaint
EndPaint
OpenClipboard
RegisterClassA
DestroyCursor
SetCapture
SetActiveWindow
AdjustWindowRectEx
OffsetRect
GetWindowInfo
FillRect
DrawTextExA
GetSysColorBrush
DrawTextA
GetMessageA
IsDialogMessageA
GetFocus
GetSysColor
CreateWindowExW
GetDesktopWindow
IsWindow
PostThreadMessageA
HideCaret
CreateCaret
DestroyCaret
IsWindowVisible
SetCursor
MessageBoxA
SendMessageA
LoadCursorA
GetActiveWindow

wininet

InternetCloseHandle
InternetConnectA
HttpOpenRequestA
HttpQueryInfoA
InternetReadFile
HttpSendRequestA
InternetOpenA

winmm

timeGetTime
timeBeginPeriod
mixerGetLineControlsA
mixerOpen
mixerGetControlDetailsA
mixerSetControlDetails
timeEndPeriod
PlaySoundA
mixerGetDevCapsA
mixerGetLineInfoA
mixerClose

wsock32

inet_ntoa
recv
WSACleanup
select
htons
WSAGetLastError
socket
gethostbyname
ioctlsocket
closesocket
send
WSAStartup
__WSAFDIsSet
connect

gdi42

CreateCompatibleDC
GetObjectA
GetStockObject
GetTextExtentPoint32A
GetTextMetricsA
SelectObject
DeleteObject
IntersectClipRect
CreateSolidBrush
TextOutA
SetBkMode
SetTextColor
DeleteDC
CreateDIBSection
CreateFontA
GetDeviceCaps
CreateFontIndirectA

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteA

ole32

CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VariantClear

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 787KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

az
Size: 1024KB - Virtual size: 1024KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
植物大战僵尸逊版V1.9.3/bass.dll
.dll windows:5 windows x86 arch:x86

a8b23ba887812b3701d474d6482c4da6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegFlushKey
RegCloseKey

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongW
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharToOemW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrlenA
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileW
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
lstrcpyW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualAlloc
SwitchToThread
SizeofResource
SignalObjectAndWait
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GlobalFindAtomW
GlobalDeleteAtom
GlobalAddAtomW
GetVersionExW
GetVersion
GetTickCount
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileAttributesW
GetExitCodeThread
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
FindFirstFileW
FindClose
EnumCalendarInfoA
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
Rectangle
RectVisible
RealizePalette
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
FrameRgn
ExcludeClipRect
EnumFontFamiliesExW
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
BitBlt

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

ole32

OleUninitialize
OleInitialize

bass_b_2

BASS_FXGetParameters
BASS_FXSetParameters
BASS_ChannelRemoveFX
BASS_ChannelSetFX
BASS_ChannelRemoveLink
BASS_ChannelSetLink
BASS_ChannelGetEAXMix
BASS_ChannelSetEAXMix
BASS_ChannelRemoveDSP
BASS_ChannelSetDSP
BASS_ChannelRemoveSync
BASS_ChannelSetSync
BASS_ChannelGetData
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelSetPosition
BASS_ChannelGetLength
BASS_ChannelGet3DPosition
BASS_ChannelSet3DPosition
BASS_ChannelGet3DAttributes
BASS_ChannelSet3DAttributes
BASS_ChannelIsSliding
BASS_ChannelSlideAttributes
BASS_ChannelGetAttributes
BASS_ChannelSetAttributes
BASS_ChannelPause
BASS_ChannelStop
BASS_ChannelPlay
BASS_ChannelPreBuf
BASS_ChannelSetFlags
BASS_ChannelGetInfo
BASS_ChannelIsActive
BASS_ChannelGetDevice
BASS_ChannelSeconds2Bytes
BASS_ChannelBytes2Seconds
BASS_RecordStart
BASS_RecordGetInput
BASS_RecordSetInput
BASS_RecordGetInputName
BASS_RecordGetInfo
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordSetDevice
BASS_RecordInit
BASS_RecordGetDeviceDescription
BASS_StreamGetFilePosition
BASS_StreamGetTags
BASS_StreamFree
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamCreateFile
BASS_StreamCreate
BASS_SampleStop
BASS_SampleGetChannel
BASS_SampleSetInfo
BASS_SampleGetInfo
BASS_SampleFree
BASS_SampleCreateDone
BASS_SampleCreate
BASS_SampleLoad
BASS_MusicGetOrderPosition
BASS_MusicGetOrders
BASS_MusicGetName
BASS_MusicGetAttribute
BASS_MusicSetAttribute
BASS_MusicFree
BASS_MusicLoad
BASS_GetEAXParameters
BASS_SetEAXParameters
BASS_Apply3D
BASS_Get3DPosition
BASS_Set3DPosition
BASS_Get3DFactors
BASS_Set3DFactors
BASS_PluginFree
BASS_PluginLoad
BASS_GetVolume
BASS_SetVolume
BASS_Pause
BASS_Stop
BASS_Start
BASS_GetCPU
BASS_Update
BASS_GetInfo
BASS_GetDSoundObject
BASS_Free
BASS_GetDevice
BASS_SetDevice
BASS_Init
BASS_ErrorGetCode
BASS_GetDeviceDescription
BASS_GetVersion
BASS_GetConfig
BASS_SetConfig

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetEAXMix
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelPreBuf
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetFlags
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetAttribute
BASS_MusicGetName
BASS_MusicGetOrderPosition
BASS_MusicGetOrders
BASS_MusicLoad
BASS_MusicSetAttribute
BASS_Pause
BASS_PluginFree
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SPEAKER_N
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetEAXPreset
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamGetTags
BASS_Update
MAKEMUSICPOS

Sections

.text
Size: 422KB - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 958KB - Virtual size: 958KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
植物大战僵尸逊版V1.9.3/bass_b_2.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetEAXMix
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelPreBuf
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetFlags
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetAttribute
BASS_MusicGetName
BASS_MusicGetOrderPosition
BASS_MusicGetOrders
BASS_MusicLoad
BASS_MusicSetAttribute
BASS_Pause
BASS_PluginFree
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamGetTags
BASS_Update
_

Sections

Size: 85KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
植物大战僵尸逊版V1.9.3/crash.txt
植物大战僵尸逊版V1.9.3/data/BrianneTod12.txt
植物大战僵尸逊版V1.9.3/data/BrianneTod16.txt
植物大战僵尸逊版V1.9.3/data/BrianneTod32.txt
植物大战僵尸逊版V1.9.3/data/BrianneTod32Black.txt
植物大战僵尸逊版V1.9.3/data/ContinuumBold14.txt
植物大战僵尸逊版V1.9.3/data/ContinuumBold14outback.txt
植物大战僵尸逊版V1.9.3/data/DwarvenTodcraft12.txt
植物大战僵尸逊版V1.9.3/data/DwarvenTodcraft15.txt
植物大战僵尸逊版V1.9.3/data/DwarvenTodcraft18.txt
植物大战僵尸逊版V1.9.3/data/DwarvenTodcraft18BrightGreenInset.txt
植物大战僵尸逊版V1.9.3/data/DwarvenTodcraft18GreenInset.txt
植物大战僵尸逊版V1.9.3/data/DwarvenTodcraft18Yellow.txt
植物大战僵尸逊版V1.9.3/data/DwarvenTodcraft24.txt
植物大战僵尸逊版V1.9.3/data/DwarvenTodcraft36BrightGreenInset.txt
植物大战僵尸逊版V1.9.3/data/DwarvenTodcraft36GreenInset.txt
植物大战僵尸逊版V1.9.3/data/HouseofTerror16.txt
植物大战僵尸逊版V1.9.3/data/HouseofTerror20.txt
植物大战僵尸逊版V1.9.3/data/HouseofTerror28.png
.png
植物大战僵尸逊版V1.9.3/data/HouseofTerror28.txt
植物大战僵尸逊版V1.9.3/data/Pico129.txt
植物大战僵尸逊版V1.9.3/data/Pix118Bold.txt
植物大战僵尸逊版V1.9.3/data/_HouseofTerror16.png
.png
植物大战僵尸逊版V1.9.3/debugs.txt
植物大战僵尸逊版V1.9.3/font/font1.bin
植物大战僵尸逊版V1.9.3/font/font1.dds
植物大战僵尸逊版V1.9.3/font/font2.bin
植物大战僵尸逊版V1.9.3/font/font2.dds
植物大战僵尸逊版V1.9.3/font/font3.bin
植物大战僵尸逊版V1.9.3/font/font3.dds
植物大战僵尸逊版V1.9.3/font/font4.bin
植物大战僵尸逊版V1.9.3/font/font4.dds
植物大战僵尸逊版V1.9.3/font/font5.bin
植物大战僵尸逊版V1.9.3/font/font5.dds
植物大战僵尸逊版V1.9.3/font/font6.bin
植物大战僵尸逊版V1.9.3/font/font6.dds
植物大战僵尸逊版V1.9.3/gdi42.dll
.dll windows:5 windows x86 arch:x86

b1ff75e2aa73308a56a49674396d01d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\URF Li\Documents\Visual Studio 2008\Projects\外挂汉化\Release\gdi42.pdb

Imports

kernel32

RtlUnwind
RaiseException
HeapReAlloc
SetStdHandle
GetFileType
Sleep
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
HeapFree
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
SetEnvironmentVariableA
HeapAlloc
GetCommandLineA
GlobalFindAtomW
GetVersionExA
WritePrivateProfileStringW
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFlags
FileTimeToSystemTime
lstrlenA
CompareStringW
InterlockedIncrement
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedDecrement
GlobalAddAtomW
CloseHandle
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
CompareStringA
InterlockedExchange
lstrcmpW
FreeLibrary
GetModuleHandleW
GetModuleHandleA
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
GetCurrentProcessId
GetModuleFileNameW
GetLastError
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcAddress
GetSystemTimeAsFileTime
LoadLibraryA

user32

DestroyMenu
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DefWindowProcW
CallWindowProcW
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
CharUpperW
CopyRect
GetWindowRect
GetClassNameW
PtInRect
SetWindowPos
ShowWindow
SetWindowLongW
GetDlgCtrlID
IsWindow
SetWindowTextW
GetDlgItem
GetWindow
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetSysColorBrush
MessageBoxW
EnableWindow
IsWindowEnabled
GetLastActivePopup
UnregisterClassW
UnhookWindowsHookEx
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetWindowLongW
GetParent
SendMessageW
GetWindowThreadProcessId
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
ClientToScreen
GetDC
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
PostMessageW
PostQuitMessage
GetSysColor
ReleaseDC

gdi32

DeleteDC
CreateBitmap
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
RectVisible
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
CreateFontIndirectW
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
TextOutA
SetTextColor
TextOutW

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

CreateCompatibleDC
CreateDIBSection
CreateFontA
CreateFontIndirectA
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectA
GetStockObject
GetTextExtentPoint32A
GetTextMetricsA
IntersectClipRect
SelectObject
SetBkMode
SetTextColor
TextOutA

Sections

.text
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
植物大战僵尸逊版V1.9.3/images/Almanac.png
.png
植物大战僵尸逊版V1.9.3/images/Almanac_IndexBack.jpg
.jpg
植物大战僵尸逊版V1.9.3/images/Credits_ZombieNote.png
.png
植物大战僵尸逊版V1.9.3/images/FlagMeterLevelProgress.png
.png
植物大战僵尸逊版V1.9.3/images/PvZ_Logo.jpg
.jpg
植物大战僵尸逊版V1.9.3/images/PvZ_Logo_.png
.png
植物大战僵尸逊版V1.9.3/images/SelectorScreen_Almanac.png
.png
植物大战僵尸逊版V1.9.3/images/SelectorScreen_AlmanacHighlight.png
.png
植物大战僵尸逊版V1.9.3/images/SelectorScreen_Help1.png
.png
植物大战僵尸逊版V1.9.3/images/SelectorScreen_Help2.png
.png
植物大战僵尸逊版V1.9.3/images/SelectorScreen_Options1.png
.png
植物大战僵尸逊版V1.9.3/images/SelectorScreen_Options2.png
.png
植物大战僵尸逊版V1.9.3/images/SelectorScreen_Quit1.png
.png
植物大战僵尸逊版V1.9.3/images/SelectorScreen_Quit2.png
.png
植物大战僵尸逊版V1.9.3/images/SelectorScreen_Store.png
.png
植物大战僵尸逊版V1.9.3/images/SelectorScreen_StoreHighlight.png
.png
植物大战僵尸逊版V1.9.3/images/SelectorScreen_ZenGarden.png
.png
植物大战僵尸逊版V1.9.3/images/SelectorScreen_ZenGardenHighlight.png
.png
植物大战僵尸逊版V1.9.3/images/Store_NextButton.png
.png
植物大战僵尸逊版V1.9.3/images/Store_NextButtonHighlight.png
.png
植物大战僵尸逊版V1.9.3/images/Store_PrevButton.png
.png
植物大战僵尸逊版V1.9.3/images/Store_PrevButtonHighlight.png
.png
植物大战僵尸逊版V1.9.3/images/Store_Sign.png
.png
植物大战僵尸逊版V1.9.3/images/Thumbs.db
植物大战僵尸逊版V1.9.3/images/Tombstones.jpg
.jpg
植物大战僵尸逊版V1.9.3/images/ZombieNote1.png
.png
植物大战僵尸逊版V1.9.3/images/ZombieNote2.png
.png
植物大战僵尸逊版V1.9.3/images/ZombieNote3.png
.png
植物大战僵尸逊版V1.9.3/images/ZombieNote4.png
.png
植物大战僵尸逊版V1.9.3/images/ZombieNoteHelp.png
.png
植物大战僵尸逊版V1.9.3/images/Zombie_bobsled1.png
.png
植物大战僵尸逊版V1.9.3/images/Zombie_bobsled2.png
.png
植物大战僵尸逊版V1.9.3/images/Zombie_bobsled3.png
.png
植物大战僵尸逊版V1.9.3/images/Zombie_bobsled4.png
.png
植物大战僵尸逊版V1.9.3/images/Zombiefinalnote.png
.png
植物大战僵尸逊版V1.9.3/images/options_menuback.jpg
.jpg
植物大战僵尸逊版V1.9.3/images/zenshopbutton.png
.png
植物大战僵尸逊版V1.9.3/images/zenshopbutton_highlight.png
.png
植物大战僵尸逊版V1.9.3/lawnbgm(1).mp3
植物大战僵尸逊版V1.9.3/lawnbgm(10).mp3
植物大战僵尸逊版V1.9.3/lawnbgm(11).mp3
植物大战僵尸逊版V1.9.3/lawnbgm(12).mp3
植物大战僵尸逊版V1.9.3/lawnbgm(13).mp3
植物大战僵尸逊版V1.9.3/lawnbgm(14).mp3
植物大战僵尸逊版V1.9.3/lawnbgm(15).mp3
植物大战僵尸逊版V1.9.3/lawnbgm(4).mp3
植物大战僵尸逊版V1.9.3/lawnbgm(5).mp3
植物大战僵尸逊版V1.9.3/lawnbgm(6).mp3
植物大战僵尸逊版V1.9.3/lawnbgm(7).mp3
植物大战僵尸逊版V1.9.3/lawnbgm(8).mp3
植物大战僵尸逊版V1.9.3/lawnbgm(9).mp3
植物大战僵尸逊版V1.9.3/main.pak
植物大战僵尸逊版V1.9.3/particles/Doom.png
.png
植物大战僵尸逊版V1.9.3/particles/ExplosionPowie.png
.png
植物大战僵尸逊版V1.9.3/particles/ExplosionSpudow.png
.png
植物大战僵尸逊版V1.9.3/particles/Pow.png
.png
植物大战僵尸逊版V1.9.3/particles/Sproing.png
.png
植物大战僵尸逊版V1.9.3/properties/LawnStrings.txt
植物大战僵尸逊版V1.9.3/properties/partner.xml
植物大战僵尸逊版V1.9.3/properties/partner.xml.sig
植物大战僵尸逊版V1.9.3/properties/partner_logo.jpg
.jpg
植物大战僵尸逊版V1.9.3/properties/resources.xml
.xml
植物大战僵尸逊版V1.9.3/reanim/Credits_MTV.png
.png
植物大战僵尸逊版V1.9.3/reanim/Credits_wearetheundead.jpg
.jpg
植物大战僵尸逊版V1.9.3/reanim/Credits_wearetheundead_.png
.png
植物大战僵尸逊版V1.9.3/reanim/FinalWave.png
.png
植物大战僵尸逊版V1.9.3/reanim/SelectorScreen_Adventure_button.png
.png
植物大战僵尸逊版V1.9.3/reanim/SelectorScreen_Adventure_highlight.png
.png
植物大战僵尸逊版V1.9.3/reanim/SelectorScreen_BG_Right.png
.png
植物大战僵尸逊版V1.9.3/reanim/SelectorScreen_Challenges_button.png
.png
植物大战僵尸逊版V1.9.3/reanim/SelectorScreen_Challenges_highlight.png
.png
植物大战僵尸逊版V1.9.3/reanim/SelectorScreen_StartAdventure_Button1.png
.png
植物大战僵尸逊版V1.9.3/reanim/SelectorScreen_StartAdventure_Highlight.png
.png
植物大战僵尸逊版V1.9.3/reanim/SelectorScreen_Survival_button.png
.png
植物大战僵尸逊版V1.9.3/reanim/SelectorScreen_Survival_highlight.png
.png
植物大战僵尸逊版V1.9.3/reanim/SelectorScreen_Vasebreaker_button.png
.png
植物大战僵尸逊版V1.9.3/reanim/SelectorScreen_WoodSign1.png
.png
植物大战僵尸逊版V1.9.3/reanim/SelectorScreen_WoodSign2.png
.png
植物大战僵尸逊版V1.9.3/reanim/SelectorScreen_WoodSign2_press.png
.png
植物大战僵尸逊版V1.9.3/reanim/SelectorScreen_vasebreaker_highlight.png
.png
植物大战僵尸逊版V1.9.3/reanim/StartPlant.png
.png
植物大战僵尸逊版V1.9.3/reanim/StartReady.png
.png
植物大战僵尸逊版V1.9.3/reanim/StartSet.png
.png
植物大战僵尸逊版V1.9.3/reanim/ZombiesWon.jpg
.jpg
植物大战僵尸逊版V1.9.3/reanim/ZombiesWon_.png
.png
植物大战僵尸逊版V1.9.3/reanim/desktop.ini
植物大战僵尸逊版V1.9.3/无良作者你想要的OD地址/od全地址.png
.png
植物大战僵尸逊版V1.9.3/无良作者你想要的OD地址/梅开二度.jpg
.jpg
植物大战僵尸逊版V1.9.3/特别感谢对本改版所贡献人员.txt
植物大战僵尸逊版V1.9.3/特性表(一定要看！).txt
植物大战僵尸逊版V1.9.3/玩前必读！！！！！！！！.txt
植物大战僵尸逊版V1.9.3/请玩前先打开这个安装字体！！！！！！！！！！！！.ttf
植物大战僵尸逊版V1.9.3/过不去打开这个，这是修改器.exe
.exe windows:6 windows x86 arch:x86

Code Sign

f7:f6:e6:cd:36:28:fa:98:bf:ce:b4:68:ae:e9:39:83
Certificate

Issuer

CN=GoGetSSL RSA Codesigning CA,O=GoGetSSL,L=Riga,C=LV

Not Before

19/08/2019, 00:00

Not After

18/08/2021, 23:59

Subject

CN=Shenzhen Bitmoe Information Technology Co.\, Ltd.,O=Shenzhen Bitmoe Information Technology Co.\, Ltd.,POSTALCODE=518054,STREET=Rm A603\, Building G\, Nanshan E Commerce Innovation Service Ba,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1a:6e:54:ff:9f:9c:e0:f8:ea:cb:e7:a0:ab:56:9d:32
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

06/09/2018, 00:00

Not After

05/09/2028, 23:59

Subject

CN=GoGetSSL RSA Codesigning CA,O=GoGetSSL,L=Riga,C=LV

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

a5:2b:83:84:8c:2e:d6:e5:81:af:6b:db:69:f2:23:b9:ed:f1:4f:59:0d:df:5d:f5:94:1d:27:ed:e0:ee:73:10
Signer

Actual PE Digest

a5:2b:83:84:8c:2e:d6:e5:81:af:6b:db:69:f2:23:b9:ed:f1:4f:59:0d:df:5d:f5:94:1d:27:ed:e0:ee:73:10

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 7.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 111KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

33aada12073d335900f2dd1f5ac08eed

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

wininet

winmm

wsock32

gdi42

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 284KB - Virtual size: 283KB

.data Size: 56KB - Virtual size: 787KB

.rsrc Size: 220KB - Virtual size: 219KB

az Size: 1024KB - Virtual size: 1024KB

a8b23ba887812b3701d474d6482c4da6

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

msimg32

gdi32

version

ole32

bass_b_2

comctl32

Exports

Exports

Sections

.text Size: 422KB - Virtual size: 421KB

.itext Size: 3KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 8KB

.bss Size: - Virtual size: 21KB

.idata Size: 13KB - Virtual size: 13KB

.edata Size: 3KB - Virtual size: 2KB

.reloc Size: 29KB - Virtual size: 28KB

.rsrc Size: 958KB - Virtual size: 958KB

Headers

File Characteristics

Exports

Exports

Sections

Size: 85KB - Virtual size: 244KB

.rsrc Size: 568B - Virtual size: 4KB

Size: - Virtual size: 4KB

Size: 4KB - Virtual size: 3KB

b1ff75e2aa73308a56a49674396d01d3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 145KB - Virtual size: 144KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 8KB - Virtual size: 23KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 284KB - Virtual size: 283KB

.data
Size: 56KB - Virtual size: 787KB

.rsrc
Size: 220KB - Virtual size: 219KB

az
Size: 1024KB - Virtual size: 1024KB

.text
Size: 422KB - Virtual size: 421KB

.itext
Size: 3KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 8KB

.bss
Size: - Virtual size: 21KB

.idata
Size: 13KB - Virtual size: 13KB

.edata
Size: 3KB - Virtual size: 2KB

.reloc
Size: 29KB - Virtual size: 28KB

.rsrc
Size: 958KB - Virtual size: 958KB

.rsrc
Size: 568B - Virtual size: 4KB

.text
Size: 145KB - Virtual size: 144KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 8KB - Virtual size: 23KB

.shared
Size: 512B - Virtual size: 2B

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 28KB - Virtual size: 27KB

f7:f6:e6:cd:36:28:fa:98:bf:ce:b4:68:ae:e9:39:83
Certificate

1a:6e:54:ff:9f:9c:e0:f8:ea:cb:e7:a0:ab:56:9d:32
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

a5:2b:83:84:8c:2e:d6:e5:81:af:6b:db:69:f2:23:b9:ed:f1:4f:59:0d:df:5d:f5:94:1d:27:ed:e0:ee:73:10
Signer

UPX0
Size: - Virtual size: 7.1MB

UPX1
Size: 4.4MB - Virtual size: 4.4MB

.rsrc
Size: 111KB - Virtual size: 112KB