71271e7a3294e9d272a3facf0ec7ecc8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

71271e7a3294e9d272a3facf0ec7ecc8_JaffaCakes118
Size

8.6MB
MD5

71271e7a3294e9d272a3facf0ec7ecc8
SHA1

e766b0f19fee3cec125f1f7e9c1c462758c9efd1
SHA256

cc5e09c739168635cd7a70d6a2302128848549a84ed7649adf48b24393633350
SHA512

25240be5791cc33c1f758a106b1b2cfe9c042ed045ac7ec7cdb9cd9995ac7b6d8added380a5d6c12e6b9114419a87237a4b9079c04d0254e3bc816c182780004
SSDEEP

196608:UCEEaHBavXrHpZGe0h/J0EIrezbpzN9LNvMGrC:U2aavbHpZF0FJ8r0bFzL9MWC

Score

3^/10

Malware Config

Signatures

Unsigned PE 14 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Keygen.exe
unpack001/Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/KeygenDLL.dll
unpack001/Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Plugins/anti.dll
unpack001/Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Plugins/overlay.dll
unpack001/Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/DialogRes/DialogRes_EN.dll
unpack001/Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/DialogRes/DialogRes_zh-CN.dll
unpack001/Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Keygen.exe
unpack001/Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/KeygenDLL.dll
unpack001/Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Skins/white.cjstyles
unpack001/Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/ZP.dll
unpack001/Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/ZProtect.dll
unpack001/Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/ZProtect.exe
unpack001/Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/ZProtectSDK.dll
unpack001/Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/ZProtect_Con.exe

Files

71271e7a3294e9d272a3facf0ec7ecc8_JaffaCakes118
.rar
Zprotect_gpxz/!)支持我们.cmd
Zprotect_gpxz/@必读文件.cmd
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/EULA/license.txt
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Help/Help_cn.chm
.chm
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Help/Help_en.chm
.chm
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Keygen.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/KeygenDLL.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ZP_BuildToFileA
ZP_BuildToFileW
ZP_GenKeyStringA
ZP_GenKeyStringW
ZP_KeygenFree

Sections

.textbss
Size: - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 411KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Languages/ZH-CN.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Languages/for translation.h.txt
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/Potato/DlgAbout.cpp
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/Potato/DlgAbout.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/Potato/DlgSetting.cpp
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/Potato/DlgSetting.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/Potato/Potato.cpp
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/Potato/Potato.def
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/Potato/Potato.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/Potato/Potato.rc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/Potato/Potato.vcproj
.xml
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/Potato/res/Potato.rc2
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/Potato/resource.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/Potato/stdafx.cpp
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/Potato/stdafx.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/PotatoX/PotatoX.cpp
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/PotatoX/PotatoX.def
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/PotatoX/PotatoX.vcproj
.xml
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/PotatoX/stdafx.cpp
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Potato/PotatoX/stdafx.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Saladin/Saladin/Saladin.cpp
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Saladin/Saladin/Saladin.def
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Saladin/Saladin/Saladin.rc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Saladin/Saladin/Saladin.vcproj
.xml
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Saladin/Saladin/resource.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Saladin/Saladin/stdafx.cpp
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Saladin/Saladin/stdafx.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Saladin/SaladinX/SaladinX.cpp
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Saladin/SaladinX/SaladinX.def
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Saladin/SaladinX/SaladinX.vcproj
.xml
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Saladin/SaladinX/stdafx.cpp
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Example/Saladin/SaladinX/stdafx.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Include/XLic32.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Include/XScript32.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Include/XShell32.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/Include/ZProtectPDK.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/lib/XLic32.lib
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/lib/XScript32.lib
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/lib/XShell32.lib
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/PDK/lib/ZProtect.lib
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Plugins/PluginConfigs.xml
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Plugins/anti.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ZPCP_AboutDlg
ZPCP_Exit
ZPCP_GetPluginInfo
ZPCP_Init
ZPCP_OnLangChange
ZPCP_QueryLgeRes
ZPCP_QueryShellInfo32
ZPCP_SettingDlg
ZPCP_WriteBackDatas

Sections

.textbss
Size: - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 353KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Plugins/overlay.dll
.dll windows:5 windows x86 arch:x86

d161d54bea3c6412d8bc269fd9c34cdf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

X:\Work\PeCancer\Versions\pdb\Release\cuckoo.pdb

Imports

kernel32

HeapAlloc
HeapFree
RtlUnwind
Sleep
ExitProcess
RaiseException
HeapSize
HeapReAlloc
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetACP
IsValidCodePage
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetModuleHandleW
GetOEMCP
GetCPInfo
CreateFileA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
InterlockedIncrement
FormatMessageA
GlobalFlags
MulDiv
WritePrivateProfileStringA
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
lstrlenA
GlobalGetAtomNameA
GlobalFindAtomA
MultiByteToWideChar
lstrcmpW
GetVersionExA
GetCurrentProcessId
GetLastError
GlobalAddAtomA
CloseHandle
GlobalUnlock
GlobalFree
InterlockedDecrement
GetModuleFileNameW
SetLastError
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
LoadLibraryA
WideCharToMultiByte
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpA
GlobalAlloc
FreeLibrary
GetModuleHandleA
GetProcAddress
FreeResource
SizeofResource
LockResource
LoadResource
VirtualFree
FindResourceA

user32

DestroyMenu
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnregisterClassA
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
GetPropA
RemovePropA
SetFocus
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
GetClientRect
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxA
SetCursor
SetPropA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
UnhookWindowsHookEx
PostMessageA
PostQuitMessage
SendMessageA
LoadIconA
EnableWindow

gdi32

DeleteDC
GetStockObject
Escape
GetDeviceCaps
ExtTextOutA
TextOutA
RectVisible
PtVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateBitmap
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
SelectObject

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shlwapi

PathFindFileNameA
PathFindExtensionA

oleaut32

VariantClear
VariantChangeType
VariantInit

zprotect

ZPPC_WriteDatas
ZPPC_GetCfgIntValue
ZPPC_GetLgeString
ZPPC_SetGlobalVar
ZPPC_GetVariable
ZPPC_SetCfgIntValue
ZPPC_LoadLangFromRes
ZPPC_ApplyDlgLge

Exports

Exports

ZPCP_APIReDirect
ZPCP_AboutDlg
ZPCP_Exit
ZPCP_GetPluginInfo
ZPCP_Init
ZPCP_OnLangChange
ZPCP_ProtectBegin
ZPCP_QueryLgeRes
ZPCP_QueryShellInfo32
ZPCP_SettingDlg
ZPCP_WriteBackDatas

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/DialogRes/Clear.bat
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/DialogRes/DialogRes.sln
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/DialogRes/DialogRes_EN.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/DialogRes/DialogRes_EN.rc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/DialogRes/DialogRes_EN.vcproj
.xml
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/DialogRes/DialogRes_zh-CN.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/DialogRes/DialogRes_zh-CN.rc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/DialogRes/DialogRes_zh-CN.vcproj
.xml
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/DialogRes/resource.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Code Confusion Marker/Project1.dpr
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Code Confusion Marker/Project1.res
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Code Confusion Marker/Unit1.dfm
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Code Confusion Marker/Unit1.pas
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Keygen/Keygen.dfm
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Keygen/Keygen.pas
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Keygen/KeygenDLL.pas
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Keygen/Keygen_Delphi.dpr
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Registration/CustomRegWnd.dpr
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Registration/CustomRegWnd.res
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Registration/Unit1.dfm
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Registration/Unit1.pas
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Registration/Unit2.dfm
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Registration/Unit2.pas
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Registration/ZprotectSDK.dcu
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Delphi/Registration/ZprotectSDK.pas
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/FASM/FASM_example.asm
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/FASM/ZProtect_SDK.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Lua Script/MsgBox.zps
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/MASM/Example.asm
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/MASM/Make.bat
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/MASM/Zprotect_SDK.INC
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Power Basic/Example.bas
.vbs
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Power Basic/Zprotect_SDK.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Pure Basic/ZProtect_SDK.pbi
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Pure Basic/example.pb
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/VC++/Example/Example.cpp
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/VC++/Example/Example.rc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/VC++/Example/Example.sln
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/VC++/Example/Example.vcproj
.xml
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/VC++/Example/resource.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Visual Basic/Form1.frm
.vbs
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Visual Basic/Form1.log
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Examples/Visual Basic/Project1.vbp
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Assembly/ZProtect_SDK_for_FASM.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Assembly/Zprotect_SDK_for_MASM.INC
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/C/KeygenDLL.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/C/ZProtectSDK.h
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/D programming language/Zprotect_SDK.d
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/Code_Confusion_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/Code_Confusion_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/Code_Elimination_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/Code_Elimination_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/Decode_Section_A_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/Decode_Section_A_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/Decode_Section_B_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/Decode_Section_B_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/Decode_Section_C_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/Decode_Section_C_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/Decode_onExec_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/Decode_onExec_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/Decode_onReg_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/Decode_onReg_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/ZProtect_VM_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/IBasic/ZProtect_VM_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/Code_Confusion_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/Code_Confusion_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/Code_Elimination_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/Code_Elimination_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/Decode_Section_A_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/Decode_Section_A_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/Decode_Section_B_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/Decode_Section_B_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/Decode_Section_C_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/Decode_Section_C_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/Decode_onExec_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/Decode_onExec_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/Decode_onReg_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/Decode_onReg_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/KeygenDLL.pas
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/ZProtect_VM_END.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/ZProtect_VM_START.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pascal/ZprotectSDK.pas
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Power Basic/Zprotect_SDK.inc
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Include/Pure Basic/ZProtect_SDK.pbi
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/Keygen.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/KeygenDLL.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ZP_BuildToFileA
ZP_BuildToFileW
ZP_GenKeyStringA
ZP_GenKeyStringW
ZP_KeygenFree

Sections

.textbss
Size: - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 411KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/lib/KeygenDLL.lib
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/lib/ZProtectSDK.exp
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/lib/ZProtectSDK.lib
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/lib/ZProtectSDK_X.exp
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/SDK/lib/ZProtectSDK_X.lib
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Skins/Office2007.cjstyles
.dll windows:4 windows x86 arch:x86

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

29/01/1996, 00:00

Not After

01/08/2028, 23:59

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0a
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2009, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7c:77:8f:22:eb:93:3a:28:79:c9:0b:a2:ec:17:18:f5
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

30/11/2006, 00:00

Not After

20/10/2008, 23:59

Subject

CN=Codejock Technologies\, LLC,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Codejock Software,O=Codejock Technologies\, LLC,L=Owosso,ST=Michigan,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

16:81:d5:9d:3b:5a:7e:74:dc:07:96:30:af:ec:16:9d:ba:1e:6a:1a
Signer

Actual PE Digest

16:81:d5:9d:3b:5a:7e:74:dc:07:96:30:af:ec:16:9d:ba:1e:6a:1a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 521KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Skins/WinXP.Royale.cjstyles
.dll windows:4 windows x86 arch:x86

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

29/01/1996, 00:00

Not After

01/08/2028, 23:59

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0a
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2009, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7c:77:8f:22:eb:93:3a:28:79:c9:0b:a2:ec:17:18:f5
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

30/11/2006, 00:00

Not After

20/10/2008, 23:59

Subject

CN=Codejock Technologies\, LLC,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Codejock Software,O=Codejock Technologies\, LLC,L=Owosso,ST=Michigan,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

76:e0:e3:e0:55:37:4f:6d:ab:b7:59:2a:fb:b3:0f:54:22:bf:c7:2a
Signer

Actual PE Digest

76:e0:e3:e0:55:37:4f:6d:ab:b7:59:2a:fb:b3:0f:54:22:bf:c7:2a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 502KB - Virtual size: 501KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/Skins/white.cjstyles
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 520KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/ZP.dll
.dll windows:4 windows x86 arch:x86

5ea133fc107c621a2480f7357fc6c216

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
GetModuleHandleA

Exports

Exports

CopyDllMemory

Sections

.text
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 83B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/ZProtect.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

StartWithConsole
StartZProtect
ZPPC_AddAlertMessage
ZPPC_AddResource
ZPPC_ApplyDlgLge
ZPPC_ApplyMFCDlgLge
ZPPC_EnterImageNtHeader
ZPPC_GetCfgIntValue
ZPPC_GetCfgStrValue
ZPPC_GetLgeString
ZPPC_GetVariable
ZPPC_LoadLangFromBuf
ZPPC_LoadLangFromRes
ZPPC_LoadLanguageFile
ZPPC_MFCLgeRelayEvent
ZPPC_QueryAPIEntryAddr
ZPPC_RawToRva_mem
ZPPC_ReListAlertMessage
ZPPC_RegPluginDlg
ZPPC_RvaToRaw_mem
ZPPC_SetCfgIntValue
ZPPC_SetCfgStrValue
ZPPC_SetGlobalVar
ZPPC_UnRegPluginDlg
ZPPC_WriteDatas

Sections

.textbss
Size: - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cektop
Size: 371B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/ZProtect.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 217KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/ZProtect.xml
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/ZProtectSDK.dll
.dll windows:5 windows x86 arch:x86

f53d7e698fa6a68be8565c85f43eb627

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

X:\Work\PeCancer\Versions\pdb\Release\PeCancerSDK.pdb

Imports

kernel32

GetModuleFileNameA
VirtualAlloc
WriteConsoleW
OutputDebugStringA
HeapAlloc
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RtlUnwind
RaiseException
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
MultiByteToWideChar
ReadFile
SetFilePointer
CloseHandle
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
CreateFileA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP

user32

MessageBoxA

Exports

Exports

ZP_CRC32
ZP_CloseFileMapping
ZP_DES128
ZP_GetExclusiveGUID
ZP_GetExecutionTime
ZP_GetGlobalString
ZP_GetHardwareIDStr
ZP_GetHomePageStr
ZP_GetKeyBuffer
ZP_GetKeyCustomInt
ZP_GetKeyCustomStr
ZP_GetRegistrationState
ZP_GetTrialDate
ZP_GetTrialDateLeft
ZP_GetTrialDays
ZP_GetTrialDaysLeft
ZP_GetTrialTimes
ZP_GetTrialTimesLeft
ZP_GetUserName
ZP_MD5
ZP_OpenReadOnlyFileMapping
ZP_RegByKeyFile
ZP_RegByKeyStr
ZP_RegShowRegWndProc
ZP_ScpCall
ZP_ScpExec
ZP_ScpGetGlobal
ZP_ScpRegFunc
ZP_ShowRegWindow

Sections

.text
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Zprotect_gpxz/Zprotect_gpxz/Zprotect/ZProtect+v1.6+Crack/ZProtect_Con.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 186KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Zprotect_gpxz/下载使用说明.url
Zprotect_gpxz/在线游戏.url
.url

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.textbss Size: - Virtual size: 2.6MB

.text Size: 5KB - Virtual size: 8KB

.data Size: 1.9MB - Virtual size: 1.9MB

.idata Size: 1024B - Virtual size: 4KB

.rsrc Size: 77KB - Virtual size: 80KB

Headers

File Characteristics

Exports

Exports

Sections

.textbss Size: - Virtual size: 320KB

.text Size: 5KB - Virtual size: 8KB

.data Size: 411KB - Virtual size: 412KB

.idata Size: 512B - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 5KB - Virtual size: 8KB

.reloc Size: 1024B - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

.textbss Size: - Virtual size: 302KB

.text Size: 5KB - Virtual size: 8KB

.data Size: 353KB - Virtual size: 356KB

.idata Size: 512B - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 18KB - Virtual size: 20KB

.reloc Size: 1024B - Virtual size: 4KB

d161d54bea3c6412d8bc269fd9c34cdf

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

zprotect

Exports

Exports

Sections

.text Size: 129KB - Virtual size: 129KB

.rdata Size: 34KB - Virtual size: 33KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 150KB - Virtual size: 150KB

.reloc Size: 28KB - Virtual size: 27KB

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 3KB - Virtual size: 2KB

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 2KB - Virtual size: 2KB

Headers

DLL Characteristics

File Characteristics

Sections

.textbss Size: - Virtual size: 2.6MB

.text Size: 5KB - Virtual size: 8KB

.data Size: 1.9MB - Virtual size: 1.9MB

.idata Size: 1024B - Virtual size: 4KB

.rsrc Size: 77KB - Virtual size: 80KB

Headers

File Characteristics

.textbss
Size: - Virtual size: 2.6MB

.text
Size: 5KB - Virtual size: 8KB

.data
Size: 1.9MB - Virtual size: 1.9MB

.idata
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 77KB - Virtual size: 80KB

.textbss
Size: - Virtual size: 320KB

.text
Size: 5KB - Virtual size: 8KB

.data
Size: 411KB - Virtual size: 412KB

.idata
Size: 512B - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 5KB - Virtual size: 8KB

.reloc
Size: 1024B - Virtual size: 4KB

.textbss
Size: - Virtual size: 302KB

.text
Size: 5KB - Virtual size: 8KB

.data
Size: 353KB - Virtual size: 356KB

.idata
Size: 512B - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 18KB - Virtual size: 20KB

.reloc
Size: 1024B - Virtual size: 4KB

.text
Size: 129KB - Virtual size: 129KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 150KB - Virtual size: 150KB

.reloc
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 2KB

.textbss
Size: - Virtual size: 2.6MB

.text
Size: 5KB - Virtual size: 8KB

.data
Size: 1.9MB - Virtual size: 1.9MB

.idata
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 77KB - Virtual size: 80KB

.textbss
Size: - Virtual size: 320KB

.text
Size: 5KB - Virtual size: 8KB

.data
Size: 411KB - Virtual size: 412KB

.idata
Size: 512B - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 5KB - Virtual size: 8KB

.reloc
Size: 1024B - Virtual size: 4KB

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0a
Certificate

7c:77:8f:22:eb:93:3a:28:79:c9:0b:a2:ec:17:18:f5
Certificate

16:81:d5:9d:3b:5a:7e:74:dc:07:96:30:af:ec:16:9d:ba:1e:6a:1a
Signer

.rsrc
Size: 521KB - Virtual size: 520KB

.reloc
Size: 512B - Virtual size: 12B

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0a
Certificate

7c:77:8f:22:eb:93:3a:28:79:c9:0b:a2:ec:17:18:f5
Certificate

76:e0:e3:e0:55:37:4f:6d:ab:b7:59:2a:fb:b3:0f:54:22:bf:c7:2a
Signer

.rsrc
Size: 502KB - Virtual size: 501KB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 520KB - Virtual size: 520KB