4e82f38ae4799b9ebedc6826cfd10048_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4e82f38ae4799b9ebedc6826cfd10048_JaffaCakes118
Size

3.1MB
MD5

4e82f38ae4799b9ebedc6826cfd10048
SHA1

7d2d2acccd0a928d38a866bd11b795804f6e7a89
SHA256

794daef6ff347009df38a8fd469a6bccb5dff000080291d9dc94c07e115aeaef
SHA512

aec81304e065c0e6d76fc7f8d23feb1db256eb5e0bb2c59865ea44953a506882fe860302ae1fe638bd6c880ce834d355220a765d97a5a4591d8c7b4a84d60baa
SSDEEP

49152:TqG0lftkQMizcV7nRegNu1TcXTRXyCPMLhyCgg++dIT6IiiO/zDDq68bJgxBt0m:TniSlEUtTULhrvrdImisKSxBt3

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack001/晨风QQ机器人通杀注入补丁/晨风QQ机器人通杀注入补丁.exe

NSIS installer 2 IoCs

installer

resource	yara_rule
static1/unpack001/qqrobot_setup.rar.exe	nsis_installer_1
static1/unpack001/qqrobot_setup.rar.exe	nsis_installer_2

Files

4e82f38ae4799b9ebedc6826cfd10048_JaffaCakes118
.rar
qqrobot_setup.rar.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Code Sign

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

79:50:af:93:51:75:33:14:c8:d1:88:67:46:ca:99:6d
Certificate

Issuer

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Not Before

06/04/2017, 00:00

Not After

08/05/2020, 23:59

Subject

CN=南昌晨云网络工程有限公司,O=南昌晨云网络工程有限公司,L=南昌市,ST=江西省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

79:50:af:93:51:75:33:14:c8:d1:88:67:46:ca:99:6d
Certificate

Issuer

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Not Before

06/04/2017, 00:00

Not After

08/05/2020, 23:59

Subject

CN=南昌晨云网络工程有限公司,O=南昌晨云网络工程有限公司,L=南昌市,ST=江西省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

9f:69:13:b4:c4:cc:e9:82:6a:b3:e2:da:19:9c:8c:cd:32:60:c6:59:e7:40:8d:c7:a8:e1:7a:28:16:0f:98:74
Signer

Actual PE Digest

9f:69:13:b4:c4:cc:e9:82:6a:b3:e2:da:19:9c:8c:cd:32:60:c6:59:e7:40:8d:c7:a8:e1:7a:28:16:0f:98:74

Digest Algorithm

sha256

PE Digest Matches

true

f2:b7:a3:cd:ed:68:3d:f3:22:87:df:03:e5:70:6b:ad:d1:78:69:7a
Signer

Actual PE Digest

f2:b7:a3:cd:ed:68:3d:f3:22:87:df:03:e5:70:6b:ad:d1:78:69:7a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-wizard.bmp
uninst.exe.nsis
QQ.exe
.exe windows:5 windows x86 arch:x86

de8cdf465949c6ce74d0b743eddad212

Code Sign

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

79:50:af:93:51:75:33:14:c8:d1:88:67:46:ca:99:6d
Certificate

Issuer

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Not Before

06/04/2017, 00:00

Not After

08/05/2020, 23:59

Subject

CN=南昌晨云网络工程有限公司,O=南昌晨云网络工程有限公司,L=南昌市,ST=江西省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

79:50:af:93:51:75:33:14:c8:d1:88:67:46:ca:99:6d
Certificate

Issuer

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Not Before

06/04/2017, 00:00

Not After

08/05/2020, 23:59

Subject

CN=南昌晨云网络工程有限公司,O=南昌晨云网络工程有限公司,L=南昌市,ST=江西省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

d1:42:9c:27:9c:da:82:d4:8e:6d:7d:2f:d6:48:4a:58:dd:f6:2d:36:6e:bc:9b:94:0c:78:04:3f:90:d7:53:c2
Signer

Actual PE Digest

d1:42:9c:27:9c:da:82:d4:8e:6d:7d:2f:d6:48:4a:58:dd:f6:2d:36:6e:bc:9b:94:0c:78:04:3f:90:d7:53:c2

Digest Algorithm

sha256

PE Digest Matches

true

f9:ed:46:4b:33:24:4f:2b:4b:27:b5:67:36:1d:f5:b5:21:05:fe:f5
Signer

Actual PE Digest

f9:ed:46:4b:33:24:4f:2b:4b:27:b5:67:36:1d:f5:b5:21:05:fe:f5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\项目代码\晨风QQ机器人\Release\qq机器人.pdb

Imports

kernel32

GetTimeZoneInformation
LCMapStringW
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
QueryPerformanceCounter
HeapDestroy
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeW
lstrcpynA
lstrcpyA
IsBadReadPtr
IsBadWritePtr
lstrcpynW
DeviceIoControl
SystemTimeToTzSpecificLocalTime
GetSystemDefaultLangID
InterlockedCompareExchange
LoadLibraryA
GetStringTypeExA
GetOEMCP
IsValidCodePage
GetACP
TerminateProcess
UnhandledExceptionFilter
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
HeapReAlloc
GetDateFormatW
GetTimeFormatW
CreateThread
ExitThread
VirtualQuery
GetSystemInfo
VirtualAlloc
ExitProcess
HeapAlloc
HeapFree
RaiseException
EncodePointer
DecodePointer
RtlUnwind
GetStartupInfoW
HeapSetInformation
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetProfileIntW
GetTempPathW
GetTempFileNameW
GetNumberFormatW
GetCurrentDirectoryW
FindNextFileW
SetErrorMode
GlobalGetAtomNameW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
GetFileTime
GetFileSizeEx
GetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
SetFileAttributesW
GetFileAttributesExW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
LocalAlloc
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
WaitForMultipleObjects
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetThreadLocale
GetStringTypeExW
SuspendThread
SetThreadPriority
lstrcmpA
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
CopyFileW
FormatMessageW
LocalFree
MulDiv
IsDebuggerPresent
GlobalSize
InitializeCriticalSection
CreateFileMappingW
MapViewOfFile
FlushViewOfFile
FreeLibrary
GetStdHandle
CreateProcessW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
SystemTimeToFileTime
FileTimeToSystemTime
TerminateThread
GetWindowsDirectoryW
GetCommandLineW
GetSystemDirectoryW
GetCurrentProcessId
OpenProcess
LCMapStringA
GlobalFree
CreateEventW
ResumeThread
InterlockedExchange
ResetEvent
GetFileSize
lstrcatW
DeleteFileW
lstrcmpW
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleFileNameW
CreateFileW
WriteFile
CloseHandle
ActivateActCtx
SizeofResource
DeactivateActCtx
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
FreeResource
GetCPInfo
lstrlenA
lstrcmpiW
GetVersion
GetVersionExW
CreateDirectoryW
GetTickCount
lstrcpyW
GetSystemTimeAsFileTime
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
SetEvent
GetLocalTime
Sleep
lstrlenW
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
IsProcessorFeaturePresent

user32

SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
RedrawWindow
IsWindowVisible
ValidateRect
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
GetWindow
IsDialogMessageW
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
IsWindowEnabled
EndDialog
GetMenu
DrawMenuBar
MessageBoxA
SetWindowTextW
GetCursorPos
SetForegroundWindow
MapVirtualKeyW
GetMessageW
ShowWindow
SetWindowPos
IsWindow
EmptyClipboard
IntersectRect
ShowOwnedPopups
RegisterClipboardFormatW
SetClipboardData
CloseClipboard
MapDialogRect
SetWindowContextHelpId
RealChildWindowFromPoint
LoadCursorW
OpenClipboard
GetKeyState
GetFocus
MessageBoxW
LoadIconW
IsIconic
DestroyCursor
LoadImageW
PostMessageW
SetCursor
GetWindowLongW
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
CopyImage
EnumDisplayMonitors
SetLayeredWindowAttributes
TranslateAcceleratorW
BringWindowToTop
InsertMenuItemW
LoadAcceleratorsW
ReleaseCapture
ReuseDDElParam
UnpackDDElParam
SetWindowRgn
IsRectEmpty
GetSystemMenu
SetParent
InvalidateRect
ClientToScreen
GetWindowRect
DrawFocusRect
FrameRect
OffsetRect
InflateRect
GetIconInfo
CreateIconIndirect
DrawStateW
IsMenu
GetMenuItemInfoW
MoveWindow
LoadMenuW
GetWindowThreadProcessId
GetWindowDC
BeginPaint
EndPaint
TranslateMessage
CharUpperW
DestroyMenu
SetRectEmpty
GetMenuStringW
GetKeyNameTextW
UnregisterClassW
SetCapture
WaitMessage
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostQuitMessage
SetTimer
KillTimer
EnableWindow
SendMessageW
SendMessageA
PtInRect
GetClientRect
wsprintfA
PrintWindow
FindWindowW
FindWindowExW
LoadStringW
LoadStringA
GetMenuDefaultItem
SetRect
CopyRect
LoadBitmapW
FillRect
DrawEdge
CreateMenu
CreatePopupMenu
DeleteMenu
AppendMenuW
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSubMenu
InsertMenuW
ModifyMenuW
RemoveMenu
GetDC
ReleaseDC
GetDesktopWindow
GetSysColor
GetSysColorBrush
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetAsyncKeyState
InvertRect
HideCaret
EnableScrollBar
NotifyWinEvent
IsZoomed
DestroyIcon
DrawIconEx
SystemParametersInfoW
GetSystemMetrics
GetWindowRgn
SubtractRect
GetDoubleClickTime
CharUpperBuffW
CopyIcon
GetUpdateRect
IsClipboardFormatAvailable
SetMenuDefaultItem
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
MonitorFromPoint
UpdateLayeredWindow
MapVirtualKeyExW
IsCharLowerW
UnionRect
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFrameControl
SetClassLongW
DestroyAcceleratorTable
DrawIcon

gdi32

SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
GetCharWidthW
CreateFontW
SetBkMode
TextOutW
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetTextMetricsW
SaveDC
EnumFontFamiliesW
GetTextCharsetInfo
GetTextColor
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Polygon
OffsetRgn
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceW
StretchDIBits
RestoreDC
RectVisible
PtVisible
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
GetTextExtentPoint32W
SetPixel
GetPixel
BitBlt
PatBlt
Rectangle
Ellipse
GetBkMode
GetDeviceCaps
CreateDCW
CopyMetaFileW
SetStretchBltMode
GetDIBColorTable
SetDIBColorTable
CreateBitmap
SetBkColor
SetTextColor
GetStockObject
Escape
CreateDIBitmap
ExtTextOutW
CreateCompatibleDC
GetObjectW
CreateCompatibleBitmap
CreateFontIndirectW
StretchBlt
CreateHatchBrush
CreateSolidBrush
GetBkColor
CreatePen

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptReleaseContext
OpenProcessToken
GetTokenInformation
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
CryptAcquireContextW

shell32

SHGetFileInfoW
Shell_NotifyIconW
SHGetDesktopFolder
DragQueryFileW
DragFinish
ShellExecuteExW
SHAppBarMessage
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
SHGetSpecialFolderPathW
SHBrowseForFolderW
SHGetMalloc

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindExtensionW
PathRemoveFileSpecW
UrlUnescapeW
PathIsUNCW
PathStripToRootW
StrCmpNIW
StrChrW
StrStrIA
PathFileExistsW
StrStrW
StrStrIW
PathFindFileNameW

ole32

RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CreateStreamOnHGlobal
GetHGlobalFromStream
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
CoInitialize
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree

oleaut32

SysAllocString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString
OleLoadPicture
VarDateFromStr
VariantTimeToSystemTime
SafeArrayGetLBound
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
SafeArrayCreateVector
VarBstrFromDate
OleCreateFontIndirect
SysStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound

oledlg

OleUIBusyW

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipSaveImageToStream
GdipCreateBitmapFromFile
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusStartup
GdipBitmapUnlockBits
GdipDrawImageRectI
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusShutdown
GdipBitmapLockBits

wsock32

recv
select
htons
ntohs
ntohl
ioctlsocket
setsockopt
WSACleanup
socket
WSAStartup
closesocket
gethostbyname
inet_addr
send
htonl
bind
WSAGetLastError
accept
WSAAsyncSelect
WSASetLastError
connect

psapi

EnumProcessModules
GetModuleFileNameExW

ws2_32

recvfrom
sendto
GetAddrInfoW

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

wininet

InternetOpenUrlW
HttpOpenRequestW
InternetQueryDataAvailable
InternetSetCookieA
HttpSendRequestW
InternetReadFile
InternetConnectW
InternetWriteFile
InternetGetCookieA
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryOptionW
InternetSetOptionExW
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

winmm

PlaySoundW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

iphlpapi

GetAdaptersInfo

dbghelp

MiniDumpWriteDump

urlmon

FindMimeFromData

Exports

Exports

_uu_AsyncRecognizeByCodeTypeAndPathA@12
_uu_CheckApiSignA@24
_uu_CheckApiSignW@24
_uu_CloseAsyncRecognizeHandle@4
_uu_GetAsyncRecognizeResultA@8
_uu_SysCallOneParam@8
_uu_UploadFileA@8
_uu_UploadFileW@8
_uu_UploadScreen@20
_uu_easyRecognizeBytesA@32
_uu_easyRecognizeBytesW@32
_uu_easyRecognizeFileA@28
_uu_easyRecognizeFileW@28
_uu_easyRecognizeScreenA@40
_uu_easyRecognizeScreenW@40
_uu_easyRecognizeUrlA@36
_uu_easyRecognizeUrlW@36
_uu_easyRecognizeWndByHWndAndPosA@44
_uu_easyRecognizeWndByHWndAndPosW@44
_uu_easyRecognizeWndByTitleAndPosA@44
_uu_easyRecognizeWndByTitleAndPosW@44
_uu_getResultA@8
_uu_getResultW@8
_uu_getScoreA@8
_uu_getScoreW@8
_uu_loginA@8
_uu_loginW@8
_uu_payA@16
_uu_payW@16
_uu_recognizeByCodeTypeAndBytesA@16
_uu_recognizeByCodeTypeAndBytesW@16
_uu_recognizeByCodeTypeAndPathA@12
_uu_recognizeByCodeTypeAndPathW@12
_uu_recognizeByCodeTypeAndUrlA@20
_uu_recognizeByCodeTypeAndUrlW@20
_uu_recognizeScreenByCodeTypeA@24
_uu_recognizeScreenByCodeTypeW@24
_uu_recognizeWndByHWndAndPosA@28
_uu_recognizeWndByHWndAndPosW@28
_uu_recognizeWndByTitleAndPosA@28
_uu_recognizeWndByTitleAndPosW@28
_uu_reguserA@16
_uu_reguserW@16
_uu_reportError@4
_uu_setSoftInfoA@8
_uu_setSoftInfoW@8
_uu_setTimeOut@4

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 881KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QQSKINT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 398KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
下载地址和使用说明.txt
晨风QQ机器人通杀注入补丁/使用说明.txt
晨风QQ机器人通杀注入补丁/晨风QQ机器人通杀注入补丁.exe
.exe windows:5 windows x86 arch:x86

2f029b9e811bb8d179127f4b3cec71b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
ResumeThread
QueueUserAPC
LoadLibraryW
WriteProcessMemory
VirtualAllocEx
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
Sleep
CreateThread
GetModuleFileNameW
GetCurrentThreadId
DeleteCriticalSection
SetLastError
FlushInstructionCache
GetCurrentProcess
lstrcmpiW
CompareStringW
FreeLibrary
LoadLibraryExW
IsProcessorFeaturePresent
InterlockedCompareExchange
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
LoadLibraryA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
DeleteFileW
InitializeCriticalSectionAndSpinCount
CreateFileA
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ReadFile
GetStartupInfoW
HeapAlloc
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
GetVersionExW
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetModuleHandleW
FindResourceW
SizeofResource
LoadResource
LockResource
InitializeCriticalSection
OutputDebugStringW
DebugBreak
InterlockedIncrement
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
CreateFileW
GetFileSize
CloseHandle
RtlUnwind
InterlockedDecrement
lstrlenW
LCMapStringA

user32

PostMessageW
MessageBoxW
CharNextW
DispatchMessageW
TranslateMessage
LoadStringW
GetMessageW
PeekMessageW
ShowWindow
RegisterClassW
SetCapture
CallWindowProcW
DrawFocusRect
FillRect
IsWindowEnabled
GetSysColor
GetFocus
GetDlgCtrlID
CreateWindowExW
DrawTextW
ReleaseDC
GetDC
OffsetRect
SetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SystemParametersInfoW
GetClassNameW
LoadCursorW
ScreenToClient
GetCursorPos
GetCapture
ReleaseCapture
SetFocus
UnregisterClassA
UpdateWindow
PtInRect
SetCursor
InvalidateRect
EndPaint
BeginPaint
CreateDialogParamW
EndDialog
DialogBoxParamW
IsWindow
SetRectEmpty
DestroyWindow
DefWindowProcW
GetDlgItem
PostQuitMessage
GetActiveWindow
SetDlgItemTextW
SetWindowTextW
GetParent
GetWindow
GetWindowRect
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
SendMessageW
GetSystemMetrics
LoadImageW
RegisterWindowMessageW
IsDialogMessageW
GetClassInfoW

gdi32

SetTextColor
SetBkMode
GetObjectW
GetStockObject
SelectObject
CreateFontIndirectW
DeleteDC
DeleteObject

comdlg32

GetOpenFileNameW

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey

shell32

ShellExecuteW

ole32

CoUninitialize
CoInitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

oleaut32

VarUI4FromStr

shlwapi

SHSetValueW
PathRemoveFileSpecW
PathFileExistsW

comctl32

_TrackMouseEvent
InitCommonControlsEx

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
最新版免费下载-百度搜【闪电软件园】.url
软件官网--闪电下载吧.url
.url

Sharing

General

Malware Config

Signatures

Files

7fa974366048f9c551ef45714595665e

Code Sign

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cbCertificate

Extended Key Usages

Key Usages

79:50:af:93:51:75:33:14:c8:d1:88:67:46:ca:99:6dCertificate

Extended Key Usages

Key Usages

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cbCertificate

Extended Key Usages

Key Usages

79:50:af:93:51:75:33:14:c8:d1:88:67:46:ca:99:6dCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

9f:69:13:b4:c4:cc:e9:82:6a:b3:e2:da:19:9c:8c:cd:32:60:c6:59:e7:40:8d:c7:a8:e1:7a:28:16:0f:98:74Signer

f2:b7:a3:cd:ed:68:3d:f3:22:87:df:03:e5:70:6b:ad:d1:78:69:7aSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 36KB

.rsrc Size: 162KB - Virtual size: 161KB

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

de8cdf465949c6ce74d0b743eddad212

Code Sign

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cbCertificate

Extended Key Usages

Key Usages

79:50:af:93:51:75:33:14:c8:d1:88:67:46:ca:99:6dCertificate

Extended Key Usages

Key Usages

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cbCertificate

Extended Key Usages

Key Usages

79:50:af:93:51:75:33:14:c8:d1:88:67:46:ca:99:6dCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

79:50:af:93:51:75:33:14:c8:d1:88:67:46:ca:99:6d
Certificate

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

79:50:af:93:51:75:33:14:c8:d1:88:67:46:ca:99:6d
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

9f:69:13:b4:c4:cc:e9:82:6a:b3:e2:da:19:9c:8c:cd:32:60:c6:59:e7:40:8d:c7:a8:e1:7a:28:16:0f:98:74
Signer

f2:b7:a3:cd:ed:68:3d:f3:22:87:df:03:e5:70:6b:ad:d1:78:69:7a
Signer

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 36KB

.rsrc
Size: 162KB - Virtual size: 161KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

79:50:af:93:51:75:33:14:c8:d1:88:67:46:ca:99:6d
Certificate

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

79:50:af:93:51:75:33:14:c8:d1:88:67:46:ca:99:6d
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

d1:42:9c:27:9c:da:82:d4:8e:6d:7d:2f:d6:48:4a:58:dd:f6:2d:36:6e:bc:9b:94:0c:78:04:3f:90:d7:53:c2
Signer

f9:ed:46:4b:33:24:4f:2b:4b:27:b5:67:36:1d:f5:b5:21:05:fe:f5
Signer

.text
Size: 4.2MB - Virtual size: 4.2MB

.rdata
Size: 881KB - Virtual size: 880KB

.data
Size: 61KB - Virtual size: 160KB

.QQSKINT
Size: 512B - Virtual size: 4B

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 398KB - Virtual size: 397KB

.text
Size: 132KB - Virtual size: 132KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.reloc
Size: 11KB - Virtual size: 11KB