1592646f5a8a56d0288202a67466e992_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

1592646f5a8a56d0288202a67466e992_JaffaCakes118
Size

7.1MB
MD5

1592646f5a8a56d0288202a67466e992
SHA1

fb9941227f411658231dcc48ce91671285337758
SHA256

f441cdf0efa8cb1ec3a7618c5cf6db6afd74f26dade115b5ac7097e16ad298bc
SHA512

c66c95b22c99941d25c23ae4800667585a464cc2b7de387b768e99b4068cdbfd6108c61a9158ff4202f294b783ef2626ad04fc726262ca2d2e5be19dd1cec0f5
SSDEEP

196608:annHfF2j/H8dfWIbpotZdyolXiXfZ0zQ03kIEko:OHf07H8dT1AyKXQj

Score

3^/10

Malware Config

Signatures

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/JMTJFX简明统计分析/VFP500.DLL
unpack001/JMTJFX简明统计分析/VFP5CHS.DLL
unpack001/JMTJFX简明统计分析/VFPOLE50.DLL
unpack001/JMTJFX简明统计分析/vfpodbc.dll
unpack001/JMTJFX简明统计分析/简明统计.EXE

Files

1592646f5a8a56d0288202a67466e992_JaffaCakes118
.rar
JMTJFX简明统计分析/BuKeShanChu/BianLiangFenBu.DBF
JMTJFX简明统计分析/BuKeShanChu/CURVE1.bmp
JMTJFX简明统计分析/BuKeShanChu/CURVE2.bmp
JMTJFX简明统计分析/BuKeShanChu/DBC.DBC
JMTJFX简明统计分析/BuKeShanChu/DBC.DCT
JMTJFX简明统计分析/BuKeShanChu/DBC.DCX
JMTJFX简明统计分析/BuKeShanChu/FOXUSER.DBF
JMTJFX简明统计分析/BuKeShanChu/FOXUSER.FPT
JMTJFX简明统计分析/BuKeShanChu/HJZB.DBF
JMTJFX简明统计分析/BuKeShanChu/JiaoChaSheji1.DBF
JMTJFX简明统计分析/BuKeShanChu/K_M_Q.DBF
JMTJFX简明统计分析/BuKeShanChu/LIANGZUZHIHE.DBF
JMTJFX简明统计分析/BuKeShanChu/MEDIAN.DBF
JMTJFX简明统计分析/BuKeShanChu/PD_ZL.DBF
JMTJFX简明统计分析/BuKeShanChu/PEIDUIZH.DBF
JMTJFX简明统计分析/BuKeShanChu/PWJZ.DBF
JMTJFX简明统计分析/BuKeShanChu/PeiDui.DBF
JMTJFX简明统计分析/BuKeShanChu/Q_JZHB0.DBF
JMTJFX简明统计分析/BuKeShanChu/QuShiJianYan1.DBF
JMTJFX简明统计分析/BuKeShanChu/Rayleigh_z.DBF
JMTJFX简明统计分析/BuKeShanChu/SUIJI.DBF
JMTJFX简明统计分析/BuKeShanChu/ShuJuZhuanHuan.DBF
JMTJFX简明统计分析/BuKeShanChu/ShuJuZhuanHuan.FPT
JMTJFX简明统计分析/BuKeShanChu/TABBZC.DBF
JMTJFX简明统计分析/BuKeShanChu/TABBZW.DBF
JMTJFX简明统计分析/BuKeShanChu/Thumbs.db
JMTJFX简明统计分析/BuKeShanChu/binglisuifang3.DBF
JMTJFX简明统计分析/BuKeShanChu/binglisuifang4.DBF
JMTJFX简明统计分析/BuKeShanChu/curve3.bmp
JMTJFX简明统计分析/BuKeShanChu/curve4.bmp
JMTJFX简明统计分析/BuKeShanChu/dbc2.DBC
JMTJFX简明统计分析/BuKeShanChu/dbc2.DCT
JMTJFX简明统计分析/BuKeShanChu/dbc2.DCX
JMTJFX简明统计分析/BuKeShanChu/djzl.DBF
JMTJFX简明统计分析/BuKeShanChu/duogelv.DBF
JMTJFX简明统计分析/BuKeShanChu/factor0.DBF
JMTJFX简明统计分析/BuKeShanChu/factor1.DBF
JMTJFX简明统计分析/BuKeShanChu/fdr1.DBF
JMTJFX简明统计分析/BuKeShanChu/huitu.dbf
JMTJFX简明统计分析/BuKeShanChu/jieguo.DBF
JMTJFX简明统计分析/BuKeShanChu/jieguo.FPT
JMTJFX简明统计分析/BuKeShanChu/linshi.DBF
JMTJFX简明统计分析/BuKeShanChu/mnsy1.dbf
JMTJFX简明统计分析/BuKeShanChu/ok.WAV
JMTJFX简明统计分析/BuKeShanChu/peiduipoisson.DBF
JMTJFX简明统计分析/BuKeShanChu/peiduizhihe.DBF
JMTJFX简明统计分析/BuKeShanChu/peiwu.DBF
JMTJFX简明统计分析/BuKeShanChu/peiwu2.DBF
JMTJFX简明统计分析/BuKeShanChu/psbzl.DBF
JMTJFX简明统计分析/BuKeShanChu/round1.DBF
JMTJFX简明统计分析/BuKeShanChu/rsjzb.dbf
JMTJFX简明统计分析/BuKeShanChu/sunchenheyi.DBF
JMTJFX简明统计分析/BuKeShanChu/tabjszl.DBF
JMTJFX简明统计分析/BuKeShanChu/tabzhjy.DBF
JMTJFX简明统计分析/BuKeShanChu/tj2.ico
JMTJFX简明统计分析/BuKeShanChu/wwrk.dbf
JMTJFX简明统计分析/BuKeShanChu/xghg.DBF
JMTJFX简明统计分析/BuKeShanChu/xscj.DBF
JMTJFX简明统计分析/BuKeShanChu/ysjlzl.DBF
JMTJFX简明统计分析/BuKeShanChu/yszl2.DBF
JMTJFX简明统计分析/BuKeShanChu/yszlls.DBF
JMTJFX简明统计分析/BuKeShanChu/zhihe_c.DBF
JMTJFX简明统计分析/BuKeShanChu/zhihe_f.DBF
JMTJFX简明统计分析/VFP500.DLL
.dll windows:4 windows x86 arch:x86

074cd610d700240397922c1cfdeb5a67

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
GetCPInfo
GetComputerNameA
GetOEMCP
GetVersionExA
TerminateThread
GetLocalTime
MulDiv
WinExec
WaitForSingleObject
GetLocaleInfoA
GlobalFlags
GetSystemInfo
GlobalReAlloc
GetSystemDirectoryA
lstrcatA
GlobalFree
GlobalAlloc
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
HeapReAlloc
HeapDestroy
HeapCreate
GlobalMemoryStatus
HeapFree
VirtualAlloc
HeapAlloc
HeapSize
VirtualFree
GetDateFormatA
GetTimeFormatA
GetProfileIntA
GlobalCompact
FindResourceA
LoadResource
LockResource
lstrlenA
lstrcpyA
_lopen
_lread
_lclose
GetSystemDefaultLangID
FormatMessageA
GetCurrentThreadId
WideCharToMultiByte
LCMapStringA
GetSystemDefaultLCID
IsDBCSLeadByte
OpenFile
GetFileSize
MoveFileA
DeleteFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
FindFirstFileA
FindNextFileA
FindClose
SetFileAttributesA
GetLogicalDrives
GetVolumeInformationA
GetDriveTypeA
GetDiskFreeSpaceA
GetSystemTime
SystemTimeToFileTime
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetFileTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
UnlockFile
LockFile
GetCurrentProcess
DuplicateHandle
SetEndOfFile
SetFilePointer
WriteFile
ReadFile
CloseHandle
GetFileAttributesA
CreateFileA
GetLastError
GlobalSize
GlobalLock
GetProfileStringA
GlobalUnlock
GetFullPathNameA
SearchPathA
GetModuleHandleA
SetErrorMode
GetTickCount
Sleep
CreateThread
GetACP
SetEnvironmentVariableA
ExitProcess
RemoveDirectoryA
CreateDirectoryA
RtlUnwind
SetHandleCount
GetModuleFileNameA
GetFileType
SetStdHandle
CompareStringW
FlushFileBuffers
GetCommandLineA
GetVersion
GetStringTypeA
GetStringTypeW
RaiseException
LCMapStringW
GetEnvironmentStrings
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStringsW
TerminateProcess
FreeEnvironmentStringsW
CompareStringA

user32

WindowFromPoint
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
SetClipboardData
IsChild
DestroyAcceleratorTable
CreateAcceleratorTableA
CopyAcceleratorTableA
LoadAcceleratorsA
CharNextA
PostQuitMessage
DrawIcon
DestroyIcon
LoadBitmapA
GetDlgItem
GetWindowTextA
CheckDlgButton
IsDlgButtonChecked
LoadCursorFromFileA
CreateCursor
DestroyCursor
CreateIcon
SetDlgItemTextA
GetKeyboardLayout
GetAsyncKeyState
GetWindowDC
SubtractRect
EqualRect
GetDCEx
ClipCursor
CloseClipboard
EmptyClipboard
GetClassNameA
GetWindow
GetCursorPos
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
DispatchMessageA
GetMessageA
DdeAbandonTransaction
DdeUninitialize
DdeInitializeA
DdePostAdvise
DdeClientTransaction
DdeDisconnect
DdeConnect
DdeAccessData
DdeUnaccessData
DdeFreeDataHandle
GetClipboardFormatNameA
RegisterClipboardFormatA
DdeEnableCallback
DdeGetLastError
DdeNameService
DdeFreeStringHandle
DdeCreateDataHandle
DdeCreateStringHandleA
DdeQueryStringA
ScreenToClient
LoadMenuIndirectA
GetSysColor
GetParent
PostMessageA
GetFocus
GetActiveWindow
UpdateWindow
SetCursorPos
GetWindowThreadProcessId
GetKeyboardType
InSendMessage
keybd_event
MessageBeep
OemToCharBuffA
ValidateRect
InvalidateRect
SetWindowPos
GetMenu
GetClientRect
ShowWindow
FrameRect
FillRect
InflateRect
CopyRect
OffsetRect
DrawTextA
SetWindowLongA
DestroyWindow
GetWindowLongA
LoadCursorA
RegisterClassA
LoadImageA
CreateWindowExA
ChangeClipboardChain
SetClipboardViewer
wsprintfA
DrawFocusRect
IsIconic
IsWindowVisible
KillTimer
SetTimer
GetQueueStatus
TranslateMessage
GetDesktopWindow
GetDC
ReleaseDC
AdjustWindowRectEx
GetMenuStringA
GetMenuItemID
CreateMDIWindowA
LoadIconA
CreateCaret
ShowCaret
DestroyCaret
ScrollDC
InvalidateRgn
RegisterWindowMessageA
DrawFrameControl
EnableMenuItem
InsertMenuA
MessageBoxA
EnableWindow
GetClassLongA
SetClassLongA
SetFocus
BringWindowToTop
ReleaseCapture
SetCapture
ClientToScreen
SendMessageA
GetSystemMetrics
DefWindowProcA
GetUpdateRect
BeginPaint
EndPaint
GetCursor
CharToOemBuffA
PeekMessageA
ShowCursor
MapVirtualKeyA
GetSubMenu
ModifyMenuA
SetMenu
RemoveMenu
DestroyMenu
SystemParametersInfoA
GetSystemMenu
GetMenuItemCount
DeleteMenu
GetKeyState
GetCapture
SetKeyboardState
FindWindowA
GetKeyboardState
SetCursor
CharToOemA
SetRect
SendDlgItemMessageA
GetSysColorBrush
SetWindowTextA
SetActiveWindow
IsZoomed
DrawIconEx
GetMenuItemInfoA
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
WinHelpA
SetParent
UnregisterClassA
CreateMenu
CreatePopupMenu
DrawMenuBar
GrayStringA
GetWindowRect
MoveWindow
SetCaretPos
AppendMenuA

gdi32

GetClipBox
GetDeviceCaps
SetBkColor
SetTextColor
SelectObject
Rectangle
GetBkColor
GetTextColor
GetStockObject
PatBlt
DeleteObject
GetObjectA
RealizePalette
SelectPalette
DeleteDC
CreatePalette
CreateCompatibleDC
SetBkMode
CreateFontIndirectA
BitBlt
RoundRect
Ellipse
FillRgn
CombineRgn
CreateRoundRectRgn
CreateEllipticRgnIndirect
CreateRectRgnIndirect
LineTo
MoveToEx
CreatePen
CreateSolidBrush
SetROP2
GetROP2
SetBrushOrgEx
GetDCOrgEx
LPtoDP
UnrealizeObject
PaintRgn
CreateRectRgn
CreatePatternBrush
CreateBitmap
GetRgnBox
RectInRegion
FrameRgn
Polyline
GetPixel
EnumFontFamiliesExA
AddFontResourceA
GetTextMetricsA
RemoveFontResourceA
CreateHatchBrush
SelectClipRgn
SetRectRgn
ExtTextOutA
GetTextExtentPointA
CreateBrushIndirect
SetTextAlign
GetTextAlign
CreateCompatibleBitmap
StretchBlt
SetStretchBltMode
SetViewportExtEx
SetWindowExtEx
SetMapMode
DeleteMetaFile
CloseMetaFile
SetWindowOrgEx
CreateMetaFileA
CreateDIBitmap
SetDIBits
StretchDIBits
GetBitmapBits
EnumFontFamiliesA
Escape
CreateICA
CreateDCA
StartPage
EndPage
StartDocA
EndDoc
AbortDoc
SetBitmapBits
OffsetRgn
GdiFlush
EnumFontsA

winspool.drv

ClosePrinter
DocumentPropertiesA
WritePrinter
GetPrinterA
StartDocPrinterA
OpenPrinterA
EndDocPrinter

comdlg32

ChooseColorA
ChooseFontA
GetSaveFileNameA
PrintDlgA
GetOpenFileNameA
CommDlgExtendedError

advapi32

RegQueryValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegOpenKeyW
RegSetValueA
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyA
RegEnumValueA

shell32

SHAppBarMessage
ShellExecuteA
SHFileOperationA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

mpr

WNetGetUserA
WNetCancelConnection2A
WNetAddConnection2A
WNetGetConnectionA

oleaut32

OleCreatePictureIndirect
CreateErrorInfo
RegisterActiveObject
LoadRegTypeLi
LoadTypeLi
SetErrorInfo
DispCallFunc
GetActiveObject
GetErrorInfo
SafeArrayPutElement
SysFreeString
SysAllocString
SysAllocStringLen
VariantCopyInd
VariantChangeType
VariantClear
SafeArrayCreate
SysStringLen
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
VariantInit
VariantCopy
RevokeActiveObject

winmm

PlaySoundA
timeGetTime

Exports

Exports

@OCXAPIInit@4
DllCanUnloadNow
DllGetClassObject
DllOleInit
DllWinMain

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JMTJFX简明统计分析/VFP5CHS.DLL
.dll windows:4 windows x86 arch:x86

d84da6d77f4b649e10f0a5f5d0fadf1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

LoadStringA
MessageBoxA

Exports

Exports

DllVersion

Sections

.text
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 887KB - Virtual size: 888KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JMTJFX简明统计分析/VFPOLE50.DLL
.dll windows:4 windows x86 arch:x86

64a2ebf960260d4b8af9ea84220b85fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

CoCreateInstance
StgOpenStorage
OleQueryCreateFromData
OleQueryLinkFromData
MkParseDisplayName
CreateFileMoniker
CoFileTimeNow
GetRunningObjectTable
CreateBindCtx
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
OleSave
StgCreateDocfile
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleDuplicateData
CoDosDateTimeToFileTime
CoFileTimeToDosDateTime
CLSIDFromString
ReadFmtUserTypeStg
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
OleSetContainedObject
CLSIDFromProgID
GetClassFile
OleGetIconOfFile
OleCreate
OleCreateFromFile
OleCreateLinkToFile
OleGetIconOfClass
CoIsOle1Class
ProgIDFromCLSID
CoLoadLibrary
StringFromCLSID
CoTreatAsClass
ReleaseStgMedium
ReadClassStg
OleMetafilePictFromIconAndLabel
CoGetMalloc

kernel32

GlobalFree
GlobalAlloc
IsBadCodePtr
FindResourceA
lstrcatA
lstrlenA
OutputDebugStringA
lstrcpyA
lstrcmpA
lstrcpynA
GetProfileIntA
lstrcmpiA
FreeLibrary
GetFileAttributesA
LoadLibraryA
MulDiv
GetFullPathNameA
LockResource
IsDBCSLeadByte
FindClose
FindFirstFileA
WideCharToMultiByte
MultiByteToWideChar
GlobalSize
GetVersion
SetCurrentDirectoryA
GetProcAddress
OpenFile
LoadLibraryExA
GetCommandLineA
GetCurrentDirectoryA
LoadResource
HeapFree
HeapReAlloc
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
GetDriveTypeA
LCMapStringA
LCMapStringW
GetModuleHandleA
GetStringTypeW
GlobalLock
GlobalUnlock
WinExec
IsBadWritePtr
IsBadReadPtr
FreeResource
HeapAlloc
DebugBreak
GetCurrentThreadId
GetStringTypeA

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegSetValueA

user32

GetDlgItem
LoadIconA
SetDlgItemTextA
wsprintfA
LoadStringA
GetWindowTextA
IsWindowVisible
GetWindowThreadProcessId
GetWindow
SetWindowTextA
IsIconic
SetWindowPos
DialogBoxIndirectParamA
PostMessageA
SetPropA
GetPropA
RemovePropA
GetClipboardFormatNameA
UpdateWindow
InvalidateRect
GetDlgItemTextA
IsDlgButtonChecked
CheckRadioButton
GetDialogBaseUnits
GetClientRect
DestroyIcon
GetWindowRect
CharPrevA
ScreenToClient
wvsprintfA
MessageBoxA
ReleaseDC
GetDC
CreateIcon
GetSystemMetrics
RegisterClassA
LoadCursorA
CreateWindowExA
GetWindowWord
SetRect
SetWindowWord
OffsetRect
MoveWindow
IntersectRect
InflateRect
EnableWindow
SendDlgItemMessageA
BeginPaint
DefWindowProcA
SetFocus
GetFocus
RegisterWindowMessageA
DrawFocusRect
DrawIcon
GetSysColor
SetWindowLongA
GetWindowLongA
FillRect
GetParent
CheckDlgButton
DestroyWindow
LockWindowUpdate
MessageBeep
CharLowerA
OemToCharA
CharToOemA
CharNextA
GetActiveWindow
PeekMessageA
FrameRect
CopyRect
InvertRect
RegisterClipboardFormatA
InsertMenuA
DestroyMenu
CreatePopupMenu
DeleteMenu
DialogBoxParamA
DispatchMessageA
IsDialogMessageA
TranslateMessage
KillTimer
SetTimer
ChangeClipboardChain
SetClipboardViewer
LoadBitmapA
ShowCursor
GetIconInfo
EndDialog
IsWindow
SendMessageA
SetCursor
EndPaint
ShowWindow

gdi32

SetStretchBltMode
CreatePalette
CreateCompatibleDC
GetBkColor
BitBlt
DeleteDC
GetDeviceCaps
CreateICA
CreateDCA
CreateMetaFileA
SetWindowOrgEx
SetWindowExtEx
CloseMetaFile
CreatePen
CreatePatternBrush
PatBlt
Rectangle
StretchBlt
GetSystemPaletteEntries
SetTextColor
GetStockObject
GetTextMetricsA
SetBrushOrgEx
SetBkColor
SelectObject
ExtTextOutA
GetTextExtentPointA
CreateCompatibleBitmap
CreateBitmap
SetDIBits
GetBitmapBits
PlayMetaFileRecord
SaveDC
SetMapMode
SetViewportOrgEx
SetViewportExtEx
DeleteMetaFile
RestoreDC
SetBkMode
CreateSolidBrush
CreateFontIndirectA
PlayMetaFile
EnumMetaFile
GetObjectA
DeleteObject

comdlg32

CommDlgExtendedError
GetOpenFileNameA
GetFileTitleA

shell32

ExtractIconA

Exports

Exports

CreateHatchWindow
FoxOleAddControl
FoxOleToolboxBitmapFromClass
FoxOleUIInsertObject
GetHatchRect
GetHatchWidth
OleDbgGetDbgLevel
OleDbgIndent
OleDbgPrint
OleDbgPrintAlways
OleDbgPrintRect
OleDbgPrintRectAlways
OleDbgPrintRefCnt
OleDbgPrintRefCntAlways
OleDbgPrintScodeAlways
OleDbgSetDbgLevel
OleFoxEnumClasses
OleStdCheckVtbl
OleStdClearSummaryInfo
OleStdCommitStorage
OleStdCopyFormatEtc
OleStdCopyStatData
OleStdCopyString
OleStdCopyTargetDevice
OleStdCreateChildStorage
OleStdCreateDC
OleStdCreateDbAlloc
OleStdCreateIC
OleStdCreateRootStorage
OleStdCreateStandardPalette
OleStdCreateStorageOnHGlobal
OleStdCreateTargetDevice
OleStdCreateTempFileMoniker
OleStdCreateTempStorage
OleStdDeleteTargetDevice
OleStdDestroyAllElements
OleStdDoConvert
OleStdDoTreatAsClass
OleStdEnumFmtEtc_Create
OleStdEnumStatData_Create
OleStdFillObjectDescriptorFromData
OleStdFree
OleStdFreeString
OleStdFreeSummaryInfo
OleStdGetAuxUserType
OleStdGetData
OleStdGetDateProperty
OleStdGetDefaultFileFormatOfClass
OleStdGetDocProperty
OleStdGetFirstMoniker
OleStdGetItemToken
OleStdGetLenFilePrefixOfMoniker
OleStdGetLinkSourceData
OleStdGetMetafilePictFromOleObject
OleStdGetMiscStatusOfClass
OleStdGetObjectDescriptorData
OleStdGetObjectDescriptorDataFromOleObject
OleStdGetOleObjectData
OleStdGetPriorityClipboardFormat
OleStdGetSecurityProperty
OleStdGetSize
OleStdGetStringProperty
OleStdGetStringZProperty
OleStdGetThumbNailProperty
OleStdGetTreatAsFmtUserType
OleStdGetUserTypeOfClass
OleStdIconLabelTextOut
OleStdInitSummaryInfo
OleStdInitVtbl
OleStdIsDuplicateFormat
OleStdIsOleLink
OleStdMalloc
OleStdMarkPasteEntryList
OleStdMkParseDisplayName
OleStdMsgFilter_Create
OleStdMsgFilter_EnableBusyDialog
OleStdMsgFilter_EnableNotRespondingDialog
OleStdMsgFilter_GetInComingCallStatus
OleStdMsgFilter_SetHandleInComingCallbackProc
OleStdMsgFilter_SetInComingCallStatus
OleStdMsgFilter_SetParentWindow
OleStdNoteFileChangeTime
OleStdNoteObjectChangeTime
OleStdOpenChildStorage
OleStdOpenOrCreateRootStorage
OleStdOpenRootStorage
OleStdQueryInterface
OleStdRealloc
OleStdRegisterAsRunning
OleStdRelease
OleStdRevokeAsRunning
OleStdSetDateProperty
OleStdSetDocProperty
OleStdSetIconInCache
OleStdSetSecurityProperty
OleStdSetStringProperty
OleStdSetThumbNailProperty
OleStdSetupAdvises
OleStdSwitchDisplayAspect
OleStdVerifyRelease
OleStdWriteSummaryInfo
OleUIAddVerbMenu
OleUIBusy
OleUICanConvertOrActivateAs
OleUIChangeIcon
OleUIConvert
OleUIDrawHandles
OleUIDrawShading
OleUIEditLinks
OleUIInitialize
OleUILockLibrary
OleUIMetafilePictExtractIcon
OleUIMetafilePictExtractIconSource
OleUIMetafilePictExtractLabel
OleUIMetafilePictIconDraw
OleUIMetafilePictIconFree
OleUIPasteSpecial
OleUIPromptUser
OleUIShowObject
OleUIUnInitialize
OleUIUpdateLinks
ParseCmdLine
RegisterHatchWindowClass
ResetOrigDC
SetDCToAnisotropic
SetDCToDrawInHimetricRect
SetHatchRect
SetHatchWindowSize
WEP
XformHeightInHimetricToPixels
XformHeightInPixelsToHimetric
XformRectInHimetricToPixels
XformRectInPixelsToHimetric
XformSizeInHimetricToPixels
XformSizeInPixelsToHimetric
XformWidthInHimetricToPixels
XformWidthInPixelsToHimetric

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JMTJFX简明统计分析/readme.txt
JMTJFX简明统计分析/vfpodbc.dll
.dll windows:4 windows x86 arch:x86

c6be2ddb3fa0c9c9c989619fe0dfd971

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
Sleep
GetLastError
CreateFileA
SetErrorMode
GetFileAttributesA
CloseHandle
ReadFile
WriteFile
SetFilePointer
SetEndOfFile
DuplicateHandle
GetCurrentProcess
LockFile
UnlockFile
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
GetDriveTypeA
GetVolumeInformationA
SetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
DeleteFileA
MoveFileA
GetFullPathNameA
GetSystemDefaultLangID
IsDBCSLeadByte
GetSystemDefaultLCID
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetLocaleInfoA
HeapSize
VirtualFree
HeapAlloc
VirtualAlloc
HeapFree
GlobalMemoryStatus
HeapCreate
HeapDestroy
HeapReAlloc
GetLocalTime
GetTimeFormatA
GetDateFormatA
LockResource
LoadResource
FindResourceA
GetTickCount
GetOEMCP
GetACP
SizeofResource
GetStringTypeExA
CopyFileA
FileTimeToSystemTime
IsValidLocale
GetSystemInfo
GetVersionExA
GetModuleFileNameA
GetCPInfo
GetProcAddress
LoadLibraryA
FreeLibrary
lstrcatA
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
SetEvent
GetCurrentProcessId
InterlockedExchange
ResetEvent
InitializeCriticalSection
CreateSemaphoreA
CreateThread
CreateEventA
ReleaseSemaphore
ExitThread
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LCMapStringW
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
RaiseException
GetModuleHandleA
RtlUnwind
GetVersion
GetCommandLineA
TerminateProcess
ExitProcess
SetEnvironmentVariableA
GetEnvironmentStrings
GetEnvironmentStringsW
CompareStringA
CompareStringW

user32

WinHelpA
IsDlgButtonChecked
GetDlgItemTextA
GetWindowLongA
EndDialog
GetDlgItem
ScreenToClient
wsprintfA
CallWindowProcA
EnableWindow
SetFocus
CheckDlgButton
SetWindowPos
SetDlgItemTextA
IsWindowEnabled
SetWindowLongA
SendDlgItemMessageA
GetParent
GetWindowRect
GetClientRect
ClientToScreen
GetDesktopWindow
MoveWindow
IsWindow
DialogBoxParamA
LoadStringA
MessageBoxA
SendMessageA
GetKeyboardType
CharNextA
CharPrevA
CharUpperBuffA
CharLowerBuffA
GetSystemMetrics
PostMessageA
DlgDirListA
ShowWindow

mpr

WNetGetConnectionA
WNetAddConnection2A
WNetCancelConnection2A

winmm

timeGetTime

comdlg32

GetOpenFileNameA

Exports

Exports

ConfigDSN
ConfigDlgProc
DllMain
FDriverConnectProc
GetFreeDirHookProc
LoadByOrdinal
SQLAllocConnect
SQLAllocEnv
SQLAllocStmt
SQLBindCol
SQLBindParameter
SQLBrowseConnect
SQLCancel
SQLColAttributes
SQLColumnPrivileges
SQLColumns
SQLConnect
SQLDescribeCol
SQLDescribeParam
SQLDisconnect
SQLDriverConnect
SQLError
SQLExecDirect
SQLExecute
SQLExtendedFetch
SQLFetch
SQLForeignKeys
SQLFreeConnect
SQLFreeEnv
SQLFreeStmt
SQLGetConnectOption
SQLGetCursorName
SQLGetData
SQLGetFunctions
SQLGetInfo
SQLGetStmtOption
SQLGetTypeInfo
SQLMoreResults
SQLNativeSql
SQLNumParams
SQLNumResultCols
SQLParamData
SQLParamOptions
SQLPrepare
SQLPrimaryKeys
SQLProcedureColumns
SQLProcedures
SQLPutData
SQLRowCount
SQLSetConnectOption
SQLSetCursorName
SQLSetPos
SQLSetScrollOptions
SQLSetStmtOption
SQLSpecialColumns
SQLStatistics
SQLTablePrivileges
SQLTables
SQLTransact

Sections

.text
Size: 686KB - Virtual size: 686KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

FOXASM
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JMTJFX简明统计分析/下载说明.htm
.html .js polyglot
JMTJFX简明统计分析/简明统计.EXE
.exe windows:4 windows x86 arch:x86

cc76eaf590dd641bd00f3c0e413348aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaAryMove
__vbaStrVarMove
__vbaLenBstr
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
ord622
_adj_fprem1
__vbaRecAnsiToUni
ord519
__vbaResume
__vbaCopyBytes
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord666
__vbaAryDestruct
ord593
__vbaExitProc
ord594
__vbaObjSet
ord595
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaStrFixstr
__vbaFPFix
_CIsin
__vbaErase
ord632
__vbaChkstk
ord528
__vbaGenerateBoundsError
__vbaStrCmp
__vbaVarTstEq
__vbaI2I4
DllFunctionCall
__vbaLbound
__vbaAryConstruct
__vbaRedimPreserve
_adj_fpatan
__vbaRedim
__vbaRecUniToAnsi
__vbaUI1I2
_CIsqrt
__vbaExceptHandler
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
ord530
__vbaFPException
__vbaUbound
__vbaStrVarVal
__vbaVarCat
ord644
ord537
_CIlog
__vbaErrorOverflow
__vbaInStr
__vbaNew2
__vbaVar2Vec
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord681
__vbaFreeStrList
_adj_fdivr_m32
__vbaPowerR8
_adj_fdiv_r
ord685
ord578
ord100
__vbaI4Var
__vbaAryLock
__vbaVarDup
__vbaStrToAnsi
ord616
__vbaFpI4
ord617
_CIatan
__vbaStrMove
__vbaR8IntI4
ord619
_allmul
_CItan
__vbaFPInt
__vbaAryUnlock
_CIexp
__vbaI4ErrVar
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.foxlock
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JMTJFX简明统计分析/简明统计软件帮助系统.chm
.chm
下载说明.htm
.html .js polyglot

Sharing

General

Malware Config

Signatures

Files

074cd610d700240397922c1cfdeb5a67

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

version

mpr

oleaut32

winmm

Exports

Exports

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.rdata Size: 45KB - Virtual size: 44KB

.data Size: 31KB - Virtual size: 113KB

.idata Size: 11KB - Virtual size: 11KB

.rsrc Size: 14KB - Virtual size: 14KB

.reloc Size: 89KB - Virtual size: 89KB

d84da6d77f4b649e10f0a5f5d0fadf1f

Headers

File Characteristics

Imports

user32

Exports

Exports

Sections

.text Size: 512B - Virtual size: 170B

.rdata Size: 512B - Virtual size: 73B

.data Size: - Virtual size: 4B

.idata Size: 512B - Virtual size: 104B

.rsrc Size: 887KB - Virtual size: 888KB

.reloc Size: 512B - Virtual size: 72B

64a2ebf960260d4b8af9ea84220b85fe

Headers

File Characteristics

Imports

ole32

kernel32

advapi32

user32

gdi32

comdlg32

shell32

Exports

Exports

Sections

.text Size: 90KB - Virtual size: 89KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 8KB

.idata Size: 7KB - Virtual size: 6KB

.rsrc Size: 54KB - Virtual size: 54KB

.reloc Size: 6KB - Virtual size: 5KB

c6be2ddb3fa0c9c9c989619fe0dfd971

Headers

File Characteristics

Imports

kernel32

user32

mpr

winmm

comdlg32

Exports

Exports

Sections

.text Size: 686KB - Virtual size: 686KB

FOXASM Size: 512B - Virtual size: 490B

.rdata Size: 37KB - Virtual size: 36KB

.data Size: 83KB - Virtual size: 84KB

.rsrc Size: 80KB - Virtual size: 80KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.rdata
Size: 45KB - Virtual size: 44KB

.data
Size: 31KB - Virtual size: 113KB

.idata
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 14KB - Virtual size: 14KB

.reloc
Size: 89KB - Virtual size: 89KB

.text
Size: 512B - Virtual size: 170B

.rdata
Size: 512B - Virtual size: 73B

.data
Size: - Virtual size: 4B

.idata
Size: 512B - Virtual size: 104B

.rsrc
Size: 887KB - Virtual size: 888KB

.reloc
Size: 512B - Virtual size: 72B

.text
Size: 90KB - Virtual size: 89KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 8KB

.idata
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 54KB - Virtual size: 54KB

.reloc
Size: 6KB - Virtual size: 5KB

.text
Size: 686KB - Virtual size: 686KB

FOXASM
Size: 512B - Virtual size: 490B

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 83KB - Virtual size: 84KB

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 23KB - Virtual size: 23KB

.text
Size: 30KB - Virtual size: 29KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 3KB - Virtual size: 2KB

.foxlock
Size: 2.2MB - Virtual size: 2.2MB