32787ee8b73518d7daa831c99d54ee28_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

32787ee8b73518d7daa831c99d54ee28_JaffaCakes118
Size

9.1MB
MD5

32787ee8b73518d7daa831c99d54ee28
SHA1

f2ed1601b726f1b28686b2bcf16efe743587a2f9
SHA256

39462160610f2b8dae65d0a4760f42bdd41d4162cbe324a0b99767c6df04becc
SHA512

5de0c646cb44b5d04e47a847b5a18268a6b51b78c4d0712ec055b975c81bdd556291eba4e50ffe1ad6fc1892681bfb1f50215bdf4430e014332213e21b80c1c6
SSDEEP

196608:J0LIeUs0gBBzEJPfipaseYWbA7R8jzGFVZ0hn4wFCb70k:J2Us9BB2P+aseDlv1Ab71

Score

3^/10

Malware Config

Signatures

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
unpack001/361614923/DmInit/DmInit.exe
unpack001/361614923/LfEmptyDbf.exe
unpack001/361614923/LfHotel.exe
unpack001/361614923/LfHotel.exe.bak
unpack001/361614923/LfHotelCt.exe
unpack001/361614923/LfHotelCt.exe.bak
unpack001/361614923/LfHotelIc.exe
unpack001/361614923/LfHotelJf.exe
unpack001/361614923/LfHotelJf.exe.bak
unpack001/361614923/Program/dcic32.dll
unpack001/361614923/Programct/dcic32.dll
unpack001/361614923/dcic32.dll

Files

32787ee8b73518d7daa831c99d54ee28_JaffaCakes118
.rar
361614923/C_EmptyDbf.dcu
361614923/C_EmptyDbf.dfm
361614923/C_EmptyDbf.pas
361614923/C_YskPrint.dfm
361614923/C_YskPrint.pas
361614923/DQDM.txt
361614923/DataBase/DHFDATA.IDX
361614923/DataBase/Dhfdata.dbf
361614923/DataBase/Init/HOTELDATA.GDB
361614923/DataBase/UserData/HOTELDATA.GDB
361614923/DataBase/hotel
361614923/DataBase/hotel.sql
361614923/Del15.DB
361614923/Del15.MB
361614923/DmInit/C_Main.dcu
361614923/DmInit/C_Main.ddp
361614923/DmInit/C_Main.dfm
361614923/DmInit/C_Main.pas
361614923/DmInit/DmInit.cfg
361614923/DmInit/DmInit.dof
361614923/DmInit/DmInit.dpr
361614923/DmInit/DmInit.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 696KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
361614923/DmInit/DmInit.res
361614923/Doc/IcCard.doc
.doc windows office2003
361614923/Doc/LFHOTEL.GID
361614923/Doc/LFHOTEL.HLP
361614923/Doc/LfHotel.hpj
361614923/Doc/LfHotel.rtf
.rtf
361614923/Doc/delphi编码规范文档.txt
.vbs
361614923/Doc/~WRL0001.tmp
.doc windows office2003
361614923/Doc/~WRL0002.tmp
.doc windows office2003
361614923/Doc/技术文档.doc
.doc windows office2003
361614923/Doc/新增功能.doc
.doc windows office2003
361614923/Doc/新增功能.rtf
.rtf
361614923/Doc/电话计费.doc
.doc windows office2003
361614923/Doc/立方酒店、餐饮、洗浴、休闲管理系统注意事项.doc
.doc windows office2003
361614923/Doc/立方酒店管理系统bug修复.doc
.doc windows office2003
361614923/GBDM.txt
361614923/HOTELDATA.GDB
361614923/LFHOTEL.HLP
361614923/LfEmptyDbf.cfg
361614923/LfEmptyDbf.dof
361614923/LfEmptyDbf.dpr
361614923/LfEmptyDbf.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 685KB - Virtual size: 685KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
361614923/LfEmptyDbf.res
361614923/LfHotel.cfg
361614923/LfHotel.dof
361614923/LfHotel.dpr
361614923/LfHotel.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
361614923/LfHotel.exe.bak
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 745KB - Virtual size: 745KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
361614923/LfHotel.ini
361614923/LfHotel.res
361614923/LfHotel.~dpr
361614923/LfHotelCt.cfg
361614923/LfHotelCt.dof
361614923/LfHotelCt.dpr
361614923/LfHotelCt.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
361614923/LfHotelCt.exe.bak
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
361614923/LfHotelCt.res
361614923/LfHotelCt.~dpr
361614923/LfHotelIc.cfg
361614923/LfHotelIc.dof
361614923/LfHotelIc.dpr
361614923/LfHotelIc.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 951KB - Virtual size: 951KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
361614923/LfHotelIc.res
361614923/LfHotelJf.cfg
361614923/LfHotelJf.dof
361614923/LfHotelJf.dpr
361614923/LfHotelJf.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 852KB - Virtual size: 852KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
361614923/LfHotelJf.exe.bak
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 844KB - Virtual size: 843KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
361614923/LfHotelJf.res
361614923/LfHotelJf.~dpr
361614923/Lfhotel.GID
361614923/PDOXUSRS.NET
361614923/Picture/1.ico
361614923/Picture/10.ico
361614923/Picture/11.ico
361614923/Picture/12.ico
361614923/Picture/13.ico
361614923/Picture/14.ico
361614923/Picture/15.ico
361614923/Picture/16.ico
361614923/Picture/17.ico
361614923/Picture/18.ico
361614923/Picture/19.ico
361614923/Picture/2.ico
361614923/Picture/20.ico
361614923/Picture/21.ico
361614923/Picture/22.ico
361614923/Picture/23.ico
361614923/Picture/24.ico
361614923/Picture/25.ico
361614923/Picture/26.ico
361614923/Picture/27.ico
361614923/Picture/28.ico
361614923/Picture/29.ico
361614923/Picture/3.ico
361614923/Picture/30.ico
361614923/Picture/31.ico
361614923/Picture/32.ico
361614923/Picture/33.ico
361614923/Picture/34.ico
361614923/Picture/35.ico
361614923/Picture/36.ico
361614923/Picture/37.ico
361614923/Picture/38.ico
361614923/Picture/39.ico
361614923/Picture/4.ico
361614923/Picture/40.ico
361614923/Picture/41.ico
361614923/Picture/42.ico
361614923/Picture/43.ico
361614923/Picture/44.ico
361614923/Picture/45.ico
361614923/Picture/46.ico
361614923/Picture/47.ico
361614923/Picture/48.ico
361614923/Picture/49.ico
361614923/Picture/5.ico
361614923/Picture/50.ico
361614923/Picture/52.ico
361614923/Picture/53.ico
361614923/Picture/54.ico
361614923/Picture/55.ico
361614923/Picture/56.ico
361614923/Picture/6.ico
361614923/Picture/7.ico
361614923/Picture/8.ico
361614923/Picture/9.ico
361614923/Picture/ActiveX Cache.ico
361614923/Picture/Administrative Tools.ico
361614923/Picture/Audio CD.ico
361614923/Picture/Bitmap Image.ico
361614923/Picture/CALCULAT.BMP
361614923/Picture/CD-ROM Drive.ico
361614923/Picture/CRDFILE1.BMP
361614923/Picture/CRDFILE3.BMP
361614923/Picture/Closed Folder.ico
361614923/Picture/Computer.ico
361614923/Picture/Configuration Settings.ico
361614923/Picture/Control Panel.ico
361614923/Picture/Control Panel2.ico
361614923/Picture/DIRECTRY.BMP
361614923/Picture/Default Document.ico
361614923/Picture/Default Icon.ico
361614923/Picture/Dial-Up Networking.ico
361614923/Picture/Documents.ico
361614923/Picture/EDIT.BMP
361614923/Picture/EXPORT.BMP
361614923/Picture/Entire Network.ico
361614923/Picture/FAVORITES.ico
361614923/Picture/FIRSTAID.BMP
361614923/Picture/FLOPPY.BMP
361614923/Picture/Find.ico
361614923/Picture/Floppy Drive.ico
361614923/Picture/Floppy Drive2.ico
361614923/Picture/Fonts.ico
361614923/Picture/GIF Image.ico
361614923/Picture/GRPHBAR.BMP
361614923/Picture/GRPHLINE.BMP
361614923/Picture/GRPHPIE.BMP
361614923/Picture/HELP.BMP
361614923/Picture/Hard Drive.ico
361614923/Picture/Help.ico
361614923/Picture/IMPORT.BMP
361614923/Picture/In Box.ico
361614923/Picture/Internet Document.ico
361614923/Picture/Jpeg.ico
361614923/Picture/LfHotel.ico
361614923/Picture/Log Off.ico
361614923/Picture/MIDI Sequence.ico
361614923/Picture/MS-DOS Application.ico
361614923/Picture/MS-DOS Batch File.ico
361614923/Picture/Media Clip.ico
361614923/Picture/Movie Clip.ico
361614923/Picture/My Briefcase.ico
361614923/Picture/My Computer.ico
361614923/Picture/My Documents.ico
361614923/Picture/Network Drive Connected.ico
361614923/Picture/Network Drive Offline.ico
361614923/Picture/Network Neighborhood.ico
361614923/Picture/Open Folder.ico
361614923/Picture/PRINT.BMP
361614923/Picture/Printers.ico
361614923/Picture/Printers2.ico
361614923/Picture/Program Group.ico
361614923/Picture/Programs.ico
361614923/Picture/QUERY.BMP
361614923/Picture/RAM Drive.ico
361614923/Picture/Recycle Bin Full.ico
361614923/Picture/Recycle Bin empty.ico
361614923/Picture/Removable Drive.ico
361614923/Picture/Rich Text Format.ico
361614923/Picture/Run.ico
361614923/Picture/SPELLING.BMP
361614923/Picture/SUM.BMP
361614923/Picture/Scheduled Tasks.ico
361614923/Picture/Settings.ico
361614923/Picture/Sharing Overlay.ico
361614923/Picture/Shortcut Overlay.ico
361614923/Picture/Shut Down.ico
361614923/Picture/Subscriptions.ico
361614923/Picture/TRASH.BMP
361614923/Picture/Text Document.ico
361614923/Picture/The Internet.ico
361614923/Picture/Url History.ico
361614923/Picture/Video Clip.ico
361614923/Picture/Wave Sound.ico
361614923/Picture/Workgroup.ico
361614923/Picture/Write Document.ico
361614923/Picture/XP Set.iptheme
361614923/Picture/Zip File.ico
361614923/Picture/cancel.bmp
361614923/Picture/close.bmp
361614923/Picture/ok.bmp
361614923/Picture/password.bmp
361614923/Picture/printer.bmp
361614923/Picture/sk.bmp
361614923/Picture/sk.ico
361614923/Program/C_About.dfm
361614923/Program/C_About.pas
361614923/Program/C_BakData.dfm
361614923/Program/C_BakData.pas
361614923/Program/C_Bgrbb.dfm
361614923/Program/C_Bgrbb.pas
361614923/Program/C_BgrbbPrn.dfm
361614923/Program/C_BgrbbPrn.pas
361614923/Program/C_Bjyj.dfm
361614923/Program/C_Bjyj.pas
361614923/Program/C_Bqjtj.dfm
361614923/Program/C_Bqjtj.pas
361614923/Program/C_Browse.dfm
361614923/Program/C_Browse.pas
361614923/Program/C_CardXf.dfm
361614923/Program/C_CardXf.pas
361614923/Program/C_ChartPrint.dfm
361614923/Program/C_ChartPrint.pas
361614923/Program/C_Cwjs.dfm
361614923/Program/C_Cwjs.pas
361614923/Program/C_CwjsBrow.dfm
361614923/Program/C_CwjsBrow.pas
361614923/Program/C_Define.pas
361614923/Program/C_DhfBrow.dfm
361614923/Program/C_DhfBrow.pas
361614923/Program/C_Dhfcx.dfm
361614923/Program/C_Dhfcx.pas
361614923/Program/C_Dhhm.dfm
361614923/Program/C_Dhhm.pas
361614923/Program/C_Dqsh.dfm
361614923/Program/C_Dqsh.pas
361614923/Program/C_Dqshmx.dfm
361614923/Program/C_Dqshmx.pas
361614923/Program/C_Dtbcx.dfm
361614923/Program/C_Dtbcx.pas
361614923/Program/C_Dtbqj.dfm
361614923/Program/C_Dtbqj.pas
361614923/Program/C_EwfBrow.dfm
361614923/Program/C_EwfBrow.pas
361614923/Program/C_Fjbg.dfm
361614923/Program/C_Fjbg.pas
361614923/Program/C_FjhbPrint.dfm
361614923/Program/C_FjhbPrint.pas
361614923/Program/C_Fjmx.dfm
361614923/Program/C_Fjmx.pas
361614923/Program/C_Ftdh.dfm
361614923/Program/C_Ftdh.pas
361614923/Program/C_Ftsm.dfm
361614923/Program/C_Ftsm.pas
361614923/Program/C_FykJz.dfm
361614923/Program/C_FykJz.pas
361614923/Program/C_Fykcx.dfm
361614923/Program/C_Fykcx.pas
361614923/Program/C_Fykjzcx.dfm
361614923/Program/C_Fykjzcx.pas
361614923/Program/C_Hbsk.dfm
361614923/Program/C_Hbsk.pas
361614923/Program/C_Hcjs.dfm
361614923/Program/C_Hcjs.pas
361614923/Program/C_Hcjscx.dfm
361614923/Program/C_Hcjscx.pas
361614923/Program/C_Hmd.dfm
361614923/Program/C_Hmd.pas
361614923/Program/C_HotelData.dfm
361614923/Program/C_HotelData.pas
361614923/Program/C_Jd.dfm
361614923/Program/C_Jd.pas
361614923/Program/C_Jzfltj.dfm
361614923/Program/C_Jzfltj.pas
361614923/Program/C_Kfdy.dfm
361614923/Program/C_Kfdy.pas
361614923/Program/C_Kfrbb.dfm
361614923/Program/C_Kfrbb.pas
361614923/Program/C_KfrbbPrn.dfm
361614923/Program/C_KfrbbPrn.pas
361614923/Program/C_Kfzt.dfm
361614923/Program/C_Kfzt.pas
361614923/Program/C_Khda.dfm
361614923/Program/C_Khda.pas
361614923/Program/C_KhdaSel.dfm
361614923/Program/C_KhdaSel.pas
361614923/Program/C_Khjzmx.dfm
361614923/Program/C_Khjzmx.pas
361614923/Program/C_Khxfmx.dfm
361614923/Program/C_Khxfmx.pas
361614923/Program/C_Khyszz.dfm
361614923/Program/C_Khyszz.pas
361614923/Program/C_Klsz.dfm
361614923/Program/C_Klsz.pas
361614923/Program/C_Krcx.dfm
361614923/Program/C_Krcx.pas
361614923/Program/C_Krly.dfm
361614923/Program/C_Krly.pas
361614923/Program/C_Krxx.dfm
361614923/Program/C_Krxx.pas
361614923/Program/C_Lcsk.dfm
361614923/Program/C_Lcsk.pas
361614923/Program/C_Lctj.dfm
361614923/Program/C_Lctj.pas
361614923/Program/C_Ldkr.dfm
361614923/Program/C_Ldkr.pas
361614923/Program/C_Ldkrcx.dfm
361614923/Program/C_Ldkrcx.pas
361614923/Program/C_Lkysk.dfm
361614923/Program/C_Lkysk.pas
361614923/Program/C_LybBrow.dfm
361614923/Program/C_LybBrow.pas
361614923/Program/C_LybEdit.dfm
361614923/Program/C_LybEdit.pas
361614923/Program/C_Main.dfm
361614923/Program/C_Main.pas
361614923/Program/C_Mff.dfm
361614923/Program/C_Mff.pas
361614923/Program/C_Mfjd.dfm
361614923/Program/C_Mfjd.pas
361614923/Program/C_Nbjd.dfm
361614923/Program/C_Nbjd.pas
361614923/Program/C_Password.dfm
361614923/Program/C_Password.pas
361614923/Program/C_PickDate.dfm
361614923/Program/C_PickDate.pas
361614923/Program/C_Preview.dfm
361614923/Program/C_Preview.pas
361614923/Program/C_PrintDlg.dfm
361614923/Program/C_PrintDlg.pas
361614923/Program/C_RestoreData.dfm
361614923/Program/C_RestoreData.pas
361614923/Program/C_Rsmx.dfm
361614923/Program/C_Rsmx.pas
361614923/Program/C_Select.dfm
361614923/Program/C_Select.pas
361614923/Program/C_SelectDir.dfm
361614923/Program/C_SelectDir.pas
361614923/Program/C_Sjz.dfm
361614923/Program/C_Sjz.pas
361614923/Program/C_Skjz.dfm
361614923/Program/C_Skjz.pas
361614923/Program/C_Skqx.dfm
361614923/Program/C_Skqx.pas
361614923/Program/C_Sktf.dfm
361614923/Program/C_Sktf.pas
361614923/Program/C_Skyjbg.dfm
361614923/Program/C_Skyjbg.pas
361614923/Program/C_Splash.dfm
361614923/Program/C_Splash.pas
361614923/Program/C_Stand.dfm
361614923/Program/C_Stand.pas
361614923/Program/C_StandDb.dfm
361614923/Program/C_StandDb.pas
361614923/Program/C_StdBrow.dfm
361614923/Program/C_StdBrow.pas
361614923/Program/C_StdJd.dfm
361614923/Program/C_StdJd.pas
361614923/Program/C_Sysprint.dfm
361614923/Program/C_Sysprint.pas
361614923/Program/C_Tdbd.dfm
361614923/Program/C_Tdbd.pas
361614923/Program/C_Tdjd.dfm
361614923/Program/C_Tdjd.pas
361614923/Program/C_Tdjz.dfm
361614923/Program/C_Tdjz.pas
361614923/Program/C_Tdsel.dfm
361614923/Program/C_Tdsel.pas
361614923/Program/C_Tdtf.dfm
361614923/Program/C_Tdtf.pas
361614923/Program/C_Tdyfcx.dfm
361614923/Program/C_Tdyfcx.pas
361614923/Program/C_Tdzd.dfm
361614923/Program/C_Tdzd.pas
361614923/Program/C_Wait.dfm
361614923/Program/C_Wait.pas
361614923/Program/C_Wbjd.dfm
361614923/Program/C_Wbjd.pas
361614923/Program/C_Wjzjz.dfm
361614923/Program/C_Wjzjz.pas
361614923/Program/C_Xfdy.dfm
361614923/Program/C_Xfdy.pas
361614923/Program/C_XfxmBrow.dfm
361614923/Program/C_XfxmBrow.pas
361614923/Program/C_XfxmSel.dfm
361614923/Program/C_XfxmSel.pas
361614923/Program/C_Xmdy.dfm
361614923/Program/C_Xmdy.pas
361614923/Program/C_Xtdy.dfm
361614923/Program/C_Xtdy.pas
361614923/Program/C_Xtsz.dfm
361614923/Program/C_Xtsz.pas
361614923/Program/C_Xxxg.dfm
361614923/Program/C_Xxxg.pas
361614923/Program/C_Ydb.dfm
361614923/Program/C_Ydb.pas
361614923/Program/C_Ydcycx.dfm
361614923/Program/C_Ydcycx.pas
361614923/Program/C_Ydcysk.dfm
361614923/Program/C_Ydcysk.pas
361614923/Program/C_YdcyskPrint.dfm
361614923/Program/C_YdcyskPrint.pas
361614923/Program/C_Ydcytd.dfm
361614923/Program/C_Ydcytd.pas
361614923/Program/C_YdcytdPrint.dfm
361614923/Program/C_YdcytdPrint.pas
361614923/Program/C_Ydd.dfm
361614923/Program/C_Ydd.pas
361614923/Program/C_YddBrow.dfm
361614923/Program/C_YddBrow.pas
361614923/Program/C_YddRz.dfm
361614923/Program/C_YddRz.pas
361614923/Program/C_Ydhc.dfm
361614923/Program/C_Ydhc.pas
361614923/Program/C_YdhcPrint.dfm
361614923/Program/C_YdhcPrint.pas
361614923/Program/C_Ydhccx.dfm
361614923/Program/C_Ydhccx.pas
361614923/Program/C_Ydkfcx.dfm
361614923/Program/C_Ydkfcx.pas
361614923/Program/C_Ydkfsk.dfm
361614923/Program/C_Ydkfsk.pas
361614923/Program/C_Ydkftd.dfm
361614923/Program/C_Ydkftd.pas
361614923/Program/C_Ydql.dfm
361614923/Program/C_Ydql.pas
361614923/Program/C_Ydsm.dfm
361614923/Program/C_Ydsm.pas
361614923/Program/C_Ydxx.dfm
361614923/Program/C_Ydxx.pas
361614923/Program/C_YdxxSel.dfm
361614923/Program/C_YdxxSel.pas
361614923/Program/C_Ygda.dfm
361614923/Program/C_Ygda.pas
361614923/Program/C_Ygjz.dfm
361614923/Program/C_Ygjz.pas
361614923/Program/C_Ygkf.dfm
361614923/Program/C_Ygkf.pas
361614923/Program/C_Ygqx.dfm
361614923/Program/C_Ygqx.pas
361614923/Program/C_Yjcj.dfm
361614923/Program/C_Yjcj.pas
361614923/Program/C_Yjcx.dfm
361614923/Program/C_Yjcx.pas
361614923/Program/C_Yjsh.dfm
361614923/Program/C_Yjsh.pas
361614923/Program/C_Yjxf.dfm
361614923/Program/C_Yjxf.pas
361614923/Program/C_Yksy.dfm
361614923/Program/C_Yksy.pas
361614923/Program/C_YskPrint.dfm
361614923/Program/C_YskPrint.pas
361614923/Program/C_YskYj.dfm
361614923/Program/C_YskYj.pas
361614923/Program/C_Yskcx.dfm
361614923/Program/C_Yskcx.pas
361614923/Program/C_Yskjz.dfm
361614923/Program/C_Yskjz.pas
361614923/Program/C_Ysklr.dfm
361614923/Program/C_Ysklr.pas
361614923/Program/C_Yskzd.dfm
361614923/Program/C_Yskzd.pas
361614923/Program/C_Yszz.dfm
361614923/Program/C_Yszz.pas
361614923/Program/C_Yxjz.dfm
361614923/Program/C_Yxjz.pas
361614923/Program/C_YxjzTd.dfm
361614923/Program/C_YxjzTd.pas
361614923/Program/C_Zd.dfm
361614923/Program/C_Zd.pas
361614923/Program/C_ZdYsk.dfm
361614923/Program/C_ZdYsk.pas
361614923/Program/C_Zdcx.dfm
361614923/Program/C_Zdcx.pas
361614923/Program/C_Zdcxtd.dfm
361614923/Program/C_Zdcxtd.pas
361614923/Program/C_Zdlrcx.dfm
361614923/Program/C_Zdlrcx.pas
361614923/Program/C_Zdmx.dfm
361614923/Program/C_Zdmx.pas
361614923/Program/IcCardDefine.pas
361614923/Program/dcic32.dll
.dll windows:4 windows x86 arch:x86

614a0f1118ffe2cc90886fcea231ab1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
WriteFile
SetCommTimeouts
ReadFile
PurgeComm
SetCommState
CloseHandle
GetCommState
SetupComm
GetLastError
CreateFileA
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetTickCount
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
RtlUnwind
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA

Exports

Exports

IC_ChangeAZPass_102
IC_ChangeAZPass_102hex
IC_ChangeAZPass_4404
IC_ChangeAZPass_4404hex
IC_ChangePass_102
IC_ChangePass_102hex
IC_ChangePass_1604
IC_ChangePass_1604B
IC_ChangePass_1604Bhex
IC_ChangePass_1604hex
IC_ChangePass_4404
IC_ChangePass_4404hex
IC_ChangePass_4428hex
IC_ChangePass_4442hex
IC_ChangePass_SLE4428
IC_ChangePass_SLE4442
IC_CheckAZPass_102
IC_CheckAZPass_102hex
IC_CheckAZPass_4404
IC_CheckAZPass_4404hex
IC_CheckPass_102
IC_CheckPass_102hex
IC_CheckPass_1604
IC_CheckPass_1604B
IC_CheckPass_1604Bhex
IC_CheckPass_1604hex
IC_CheckPass_4404
IC_CheckPass_4404hex
IC_CheckPass_4406
IC_CheckPass_4428hex
IC_CheckPass_4442hex
IC_CheckPass_SLE4428
IC_CheckPass_SLE4442
IC_DEValue
IC_Decrypt
IC_DirectRead
IC_DirectRead_Hex
IC_DirectWrite
IC_DirectWrite_Hex
IC_Down
IC_Encrypt
IC_Erase
IC_Erase_102
IC_ExitComm
IC_Fuse_102
IC_Fuse_1604
IC_Fuse_1604B
IC_Fuse_4404
IC_Fuse_4406
IC_InitComm
IC_InitType
IC_Pushout
IC_RValue
IC_Read
IC_ReadCount_102
IC_ReadCount_1604
IC_ReadCount_1604B
IC_ReadCount_4404
IC_ReadCount_4406
IC_ReadCount_SLE4428
IC_ReadCount_SLE4442
IC_ReadProtection
IC_ReadWithProtection
IC_Read_1101
IC_Read_1101hex
IC_Read_Float
IC_Read_Hex
IC_Read_Int
IC_Status
IC_Write
IC_Write24
IC_Write24_Hex
IC_Write64
IC_Write64_Hex
IC_WriteByBuffer
IC_WriteByBuffer_Hex
IC_WriteProtection
IC_WriteWithProtection
IC_Write_1101
IC_Write_1101hex
IC_Write_Float
IC_Write_Hex
IC_Write_Int
dcdeshex

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
361614923/Program/drv_unit.pas
361614923/ProgramIc/C_About.dcu
361614923/ProgramIc/C_About.ddp
361614923/ProgramIc/C_About.dfm
361614923/ProgramIc/C_About.pas
361614923/ProgramIc/C_CardData.dcu
361614923/ProgramIc/C_CardData.ddp
361614923/ProgramIc/C_CardData.dfm
361614923/ProgramIc/C_CardData.pas
361614923/ProgramIc/C_Klsz.dcu
361614923/ProgramIc/C_Klsz.ddp
361614923/ProgramIc/C_Klsz.dfm
361614923/ProgramIc/C_Klsz.pas
361614923/ProgramIc/C_Password.dcu
361614923/ProgramIc/C_Password.ddp
361614923/ProgramIc/C_Password.dfm
361614923/ProgramIc/C_Password.pas
361614923/ProgramIc/C_Sysprint.dcu
361614923/ProgramIc/C_Sysprint.ddp
361614923/ProgramIc/C_Sysprint.dfm
361614923/ProgramIc/C_Sysprint.pas
361614923/ProgramIc/C_Xtsz.dcu
361614923/ProgramIc/C_Xtsz.ddp
361614923/ProgramIc/C_Xtsz.dfm
361614923/ProgramIc/C_Xtsz.pas
361614923/ProgramIc/CardData.dfm
361614923/ProgramIc/IcCardDefine.dcu
361614923/ProgramIc/IcCardDefine.pas
361614923/ProgramIc/IcCardMain.dcu
361614923/ProgramIc/IcCardMain.ddp
361614923/ProgramIc/IcCardMain.dfm
361614923/ProgramIc/IcCardMain.pas
361614923/ProgramIc/drv_unit.dcu
361614923/ProgramIc/drv_unit.pas
361614923/ProgramJf/C_About.dcu
361614923/ProgramJf/C_About.ddp
361614923/ProgramJf/C_About.dfm
361614923/ProgramJf/C_About.pas
361614923/ProgramJf/C_About.~dfm
361614923/ProgramJf/C_About.~pas
361614923/ProgramJf/C_Bjsz.dcu
361614923/ProgramJf/C_Bjsz.ddp
361614923/ProgramJf/C_Bjsz.dfm
361614923/ProgramJf/C_Bjsz.pas
361614923/ProgramJf/C_Bjsz.~ddp
361614923/ProgramJf/C_Bjsz.~dfm
361614923/ProgramJf/C_Bjsz.~pas
361614923/ProgramJf/C_ComBuf.dcu
361614923/ProgramJf/C_ComBuf.pas
361614923/ProgramJf/C_ComBuf.~pas
361614923/ProgramJf/C_Condition.dcu
361614923/ProgramJf/C_Condition.ddp
361614923/ProgramJf/C_Condition.dfm
361614923/ProgramJf/C_Condition.pas
361614923/ProgramJf/C_Condition.~ddp
361614923/ProgramJf/C_Condition.~dfm
361614923/ProgramJf/C_Condition.~pas
361614923/ProgramJf/C_Cswh.dcu
361614923/ProgramJf/C_Cswh.ddp
361614923/ProgramJf/C_Cswh.dfm
361614923/ProgramJf/C_Cswh.pas
361614923/ProgramJf/C_Cswh.~ddp
361614923/ProgramJf/C_Cswh.~dfm
361614923/ProgramJf/C_Cswh.~pas
361614923/ProgramJf/C_Flwh.dcu
361614923/ProgramJf/C_Flwh.ddp
361614923/ProgramJf/C_Flwh.dfm
361614923/ProgramJf/C_Flwh.pas
361614923/ProgramJf/C_Flwh.~ddp
361614923/ProgramJf/C_Flwh.~dfm
361614923/ProgramJf/C_Flwh.~pas
361614923/ProgramJf/C_JfData.dcu
361614923/ProgramJf/C_JfData.ddp
361614923/ProgramJf/C_JfData.dfm
361614923/ProgramJf/C_JfData.pas
361614923/ProgramJf/C_JfData.~ddp
361614923/ProgramJf/C_JfData.~dfm
361614923/ProgramJf/C_JfData.~pas
361614923/ProgramJf/C_JfDefine.dcu
361614923/ProgramJf/C_JfDefine.pas
361614923/ProgramJf/C_JfDefine.~pas
361614923/ProgramJf/C_JfDel.dcu
361614923/ProgramJf/C_JfDel.dfm
361614923/ProgramJf/C_JfDel.pas
361614923/ProgramJf/C_JfDel.~dfm
361614923/ProgramJf/C_JfDel.~pas
361614923/ProgramJf/C_JfMain.dcu
361614923/ProgramJf/C_JfMain.ddp
361614923/ProgramJf/C_JfMain.dfm
361614923/ProgramJf/C_JfMain.pas
361614923/ProgramJf/C_JfMain.~ddp
361614923/ProgramJf/C_JfMain.~dfm
361614923/ProgramJf/C_JfMain.~pas
361614923/ProgramJf/C_PassWord.dcu
361614923/ProgramJf/C_PassWord.ddp
361614923/ProgramJf/C_PassWord.dfm
361614923/ProgramJf/C_PassWord.pas
361614923/ProgramJf/C_PassWord.~ddp
361614923/ProgramJf/C_PassWord.~dfm
361614923/ProgramJf/C_PassWord.~pas
361614923/ProgramJf/C_Tj.dcu
361614923/ProgramJf/C_Tj.dfm
361614923/ProgramJf/C_Tj.pas
361614923/ProgramJf/C_Tj.~dfm
361614923/ProgramJf/C_Tj.~pas
361614923/ProgramJf/C_Xtsz.dcu
361614923/ProgramJf/C_Xtsz.ddp
361614923/ProgramJf/C_Xtsz.dfm
361614923/ProgramJf/C_Xtsz.pas
361614923/Programct/C_About.dfm
361614923/Programct/C_About.pas
361614923/Programct/C_CardXf.dfm
361614923/Programct/C_CardXf.pas
361614923/Programct/C_CtData.dfm
361614923/Programct/C_CtData.pas
361614923/Programct/C_CtDefine.pas
361614923/Programct/C_Ctjt.dfm
361614923/Programct/C_Ctjt.pas
361614923/Programct/C_Ctkt.dfm
361614923/Programct/C_Ctkt.pas
361614923/Programct/C_Ctxt.dfm
361614923/Programct/C_Ctxt.pas
361614923/Programct/C_Ctxtm.dfm
361614923/Programct/C_Ctxtm.pas
361614923/Programct/C_Ctyd.dfm
361614923/Programct/C_Ctyd.pas
361614923/Programct/C_Dcbd.dfm
361614923/Programct/C_Dcbd.pas
361614923/Programct/C_Fcfjz.dfm
361614923/Programct/C_Fcfjz.pas
361614923/Programct/C_KhdaSel.dfm
361614923/Programct/C_KhdaSel.pas
361614923/Programct/C_Klsz.dfm
361614923/Programct/C_Klsz.pas
361614923/Programct/C_Password.dfm
361614923/Programct/C_Password.pas
361614923/Programct/C_Sysprint.dfm
361614923/Programct/C_Sysprint.pas
361614923/Programct/C_Wjzcx.dfm
361614923/Programct/C_Wjzcx.pas
361614923/Programct/C_Xhtj.dfm
361614923/Programct/C_Xhtj.pas
361614923/Programct/C_Xtsz.dfm
361614923/Programct/C_Xtsz.pas
361614923/Programct/C_Yycx.dfm
361614923/Programct/C_Yycx.pas
361614923/Programct/C_Yytj.dfm
361614923/Programct/C_Yytj.pas
361614923/Programct/C_cddm.dfm
361614923/Programct/C_cddm.pas
361614923/Programct/C_ctdc.dfm
361614923/Programct/C_ctdc.pas
361614923/Programct/C_ctjz.dfm
361614923/Programct/C_ctjz.pas
361614923/Programct/C_ctmain.dfm
361614923/Programct/C_ctmain.pas
361614923/Programct/C_cttc.dfm
361614923/Programct/C_cttc.pas
361614923/Programct/C_ctth.dfm
361614923/Programct/C_ctth.pas
361614923/Programct/C_ctxfxm.dfm
361614923/Programct/C_ctxfxm.pas
361614923/Programct/C_dcmx.dfm
361614923/Programct/C_dcmx.pas
361614923/Programct/IcCardDefine.pas
361614923/Programct/dcic32.dll
.dll windows:4 windows x86 arch:x86

614a0f1118ffe2cc90886fcea231ab1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
WriteFile
SetCommTimeouts
ReadFile
PurgeComm
SetCommState
CloseHandle
GetCommState
SetupComm
GetLastError
CreateFileA
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetTickCount
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
RtlUnwind
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA

Exports

Exports

IC_ChangeAZPass_102
IC_ChangeAZPass_102hex
IC_ChangeAZPass_4404
IC_ChangeAZPass_4404hex
IC_ChangePass_102
IC_ChangePass_102hex
IC_ChangePass_1604
IC_ChangePass_1604B
IC_ChangePass_1604Bhex
IC_ChangePass_1604hex
IC_ChangePass_4404
IC_ChangePass_4404hex
IC_ChangePass_4428hex
IC_ChangePass_4442hex
IC_ChangePass_SLE4428
IC_ChangePass_SLE4442
IC_CheckAZPass_102
IC_CheckAZPass_102hex
IC_CheckAZPass_4404
IC_CheckAZPass_4404hex
IC_CheckPass_102
IC_CheckPass_102hex
IC_CheckPass_1604
IC_CheckPass_1604B
IC_CheckPass_1604Bhex
IC_CheckPass_1604hex
IC_CheckPass_4404
IC_CheckPass_4404hex
IC_CheckPass_4406
IC_CheckPass_4428hex
IC_CheckPass_4442hex
IC_CheckPass_SLE4428
IC_CheckPass_SLE4442
IC_DEValue
IC_Decrypt
IC_DirectRead
IC_DirectRead_Hex
IC_DirectWrite
IC_DirectWrite_Hex
IC_Down
IC_Encrypt
IC_Erase
IC_Erase_102
IC_ExitComm
IC_Fuse_102
IC_Fuse_1604
IC_Fuse_1604B
IC_Fuse_4404
IC_Fuse_4406
IC_InitComm
IC_InitType
IC_Pushout
IC_RValue
IC_Read
IC_ReadCount_102
IC_ReadCount_1604
IC_ReadCount_1604B
IC_ReadCount_4404
IC_ReadCount_4406
IC_ReadCount_SLE4428
IC_ReadCount_SLE4442
IC_ReadProtection
IC_ReadWithProtection
IC_Read_1101
IC_Read_1101hex
IC_Read_Float
IC_Read_Hex
IC_Read_Int
IC_Status
IC_Write
IC_Write24
IC_Write24_Hex
IC_Write64
IC_Write64_Hex
IC_WriteByBuffer
IC_WriteByBuffer_Hex
IC_WriteProtection
IC_WriteWithProtection
IC_Write_1101
IC_Write_1101hex
IC_Write_Float
IC_Write_Hex
IC_Write_Int
dcdeshex

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
361614923/Programct/drv_unit.pas
361614923/Programct/hzpy.pas
361614923/Sql/HotelData.sql
361614923/dcic32.dll
.dll windows:4 windows x86 arch:x86

614a0f1118ffe2cc90886fcea231ab1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
WriteFile
SetCommTimeouts
ReadFile
PurgeComm
SetCommState
CloseHandle
GetCommState
SetupComm
GetLastError
CreateFileA
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetTickCount
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
RtlUnwind
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA

Exports

Exports

IC_ChangeAZPass_102
IC_ChangeAZPass_102hex
IC_ChangeAZPass_4404
IC_ChangeAZPass_4404hex
IC_ChangePass_102
IC_ChangePass_102hex
IC_ChangePass_1604
IC_ChangePass_1604B
IC_ChangePass_1604Bhex
IC_ChangePass_1604hex
IC_ChangePass_4404
IC_ChangePass_4404hex
IC_ChangePass_4428hex
IC_ChangePass_4442hex
IC_ChangePass_SLE4428
IC_ChangePass_SLE4442
IC_CheckAZPass_102
IC_CheckAZPass_102hex
IC_CheckAZPass_4404
IC_CheckAZPass_4404hex
IC_CheckPass_102
IC_CheckPass_102hex
IC_CheckPass_1604
IC_CheckPass_1604B
IC_CheckPass_1604Bhex
IC_CheckPass_1604hex
IC_CheckPass_4404
IC_CheckPass_4404hex
IC_CheckPass_4406
IC_CheckPass_4428hex
IC_CheckPass_4442hex
IC_CheckPass_SLE4428
IC_CheckPass_SLE4442
IC_DEValue
IC_Decrypt
IC_DirectRead
IC_DirectRead_Hex
IC_DirectWrite
IC_DirectWrite_Hex
IC_Down
IC_Encrypt
IC_Erase
IC_Erase_102
IC_ExitComm
IC_Fuse_102
IC_Fuse_1604
IC_Fuse_1604B
IC_Fuse_4404
IC_Fuse_4406
IC_InitComm
IC_InitType
IC_Pushout
IC_RValue
IC_Read
IC_ReadCount_102
IC_ReadCount_1604
IC_ReadCount_1604B
IC_ReadCount_4404
IC_ReadCount_4406
IC_ReadCount_SLE4428
IC_ReadCount_SLE4442
IC_ReadProtection
IC_ReadWithProtection
IC_Read_1101
IC_Read_1101hex
IC_Read_Float
IC_Read_Hex
IC_Read_Int
IC_Status
IC_Write
IC_Write24
IC_Write24_Hex
IC_Write64
IC_Write64_Hex
IC_WriteByBuffer
IC_WriteByBuffer_Hex
IC_WriteProtection
IC_WriteWithProtection
IC_Write_1101
IC_Write_1101hex
IC_Write_Float
IC_Write_Hex
IC_Write_Int
dcdeshex

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
361614923/report/default.frf
361614923/report/团队帐单.frf
361614923/report/应收款总帐.frf
361614923/report/零客应收款.frf
361614923/xx.txt
361614923/下载说明.htm
.html .js polyglot

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 696KB - Virtual size: 696KB

DATA Size: 9KB - Virtual size: 9KB

BSS Size: - Virtual size: 3KB

.idata Size: 9KB - Virtual size: 9KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 53KB - Virtual size: 52KB

.rsrc Size: 37KB - Virtual size: 37KB

Headers

File Characteristics

Sections

CODE Size: 685KB - Virtual size: 685KB

DATA Size: 9KB - Virtual size: 9KB

BSS Size: - Virtual size: 3KB

.idata Size: 9KB - Virtual size: 9KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 52KB - Virtual size: 51KB

.rsrc Size: 37KB - Virtual size: 37KB

Headers

File Characteristics

Sections

CODE Size: 2.6MB - Virtual size: 2.6MB

DATA Size: 22KB - Virtual size: 21KB

BSS Size: - Virtual size: 9KB

.idata Size: 13KB - Virtual size: 12KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 189KB - Virtual size: 189KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

Headers

File Characteristics

Sections

CODE Size: 1.5MB - Virtual size: 1.5MB

DATA Size: 13KB - Virtual size: 13KB

BSS Size: - Virtual size: 4KB

.idata Size: 11KB - Virtual size: 10KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 123KB - Virtual size: 123KB

.rsrc Size: 745KB - Virtual size: 745KB

Headers

File Characteristics

Sections

CODE Size: 1.3MB - Virtual size: 1.3MB

DATA Size: 13KB - Virtual size: 12KB

BSS Size: - Virtual size: 3KB

.idata Size: 11KB - Virtual size: 10KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 98KB - Virtual size: 98KB

.rsrc Size: 319KB - Virtual size: 319KB

Headers

File Characteristics

Sections

CODE Size: 1.2MB - Virtual size: 1.2MB

DATA Size: 12KB - Virtual size: 12KB

BSS Size: - Virtual size: 3KB

.idata Size: 11KB - Virtual size: 10KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 92KB - Virtual size: 91KB

.rsrc Size: 265KB - Virtual size: 265KB

Headers

File Characteristics

Sections

CODE Size: 951KB - Virtual size: 951KB

DATA Size: 12KB - Virtual size: 11KB

BSS Size: - Virtual size: 3KB

.idata Size: 11KB - Virtual size: 10KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

CODE
Size: 696KB - Virtual size: 696KB

DATA
Size: 9KB - Virtual size: 9KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 9KB - Virtual size: 9KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 53KB - Virtual size: 52KB

.rsrc
Size: 37KB - Virtual size: 37KB

CODE
Size: 685KB - Virtual size: 685KB

DATA
Size: 9KB - Virtual size: 9KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 9KB - Virtual size: 9KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 52KB - Virtual size: 51KB

.rsrc
Size: 37KB - Virtual size: 37KB

CODE
Size: 2.6MB - Virtual size: 2.6MB

DATA
Size: 22KB - Virtual size: 21KB

BSS
Size: - Virtual size: 9KB

.idata
Size: 13KB - Virtual size: 12KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 189KB - Virtual size: 189KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

CODE
Size: 1.5MB - Virtual size: 1.5MB

DATA
Size: 13KB - Virtual size: 13KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 11KB - Virtual size: 10KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 123KB - Virtual size: 123KB

.rsrc
Size: 745KB - Virtual size: 745KB

CODE
Size: 1.3MB - Virtual size: 1.3MB

DATA
Size: 13KB - Virtual size: 12KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 11KB - Virtual size: 10KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 98KB - Virtual size: 98KB

.rsrc
Size: 319KB - Virtual size: 319KB

CODE
Size: 1.2MB - Virtual size: 1.2MB

DATA
Size: 12KB - Virtual size: 12KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 11KB - Virtual size: 10KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 92KB - Virtual size: 91KB

.rsrc
Size: 265KB - Virtual size: 265KB

CODE
Size: 951KB - Virtual size: 951KB

DATA
Size: 12KB - Virtual size: 11KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 11KB - Virtual size: 10KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 74KB - Virtual size: 73KB

.rsrc
Size: 167KB - Virtual size: 167KB

CODE
Size: 852KB - Virtual size: 852KB

DATA
Size: 10KB - Virtual size: 10KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 10KB - Virtual size: 10KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 65KB - Virtual size: 65KB

.rsrc
Size: 126KB - Virtual size: 126KB

CODE
Size: 844KB - Virtual size: 843KB

DATA
Size: 10KB - Virtual size: 10KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 10KB - Virtual size: 10KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 64KB - Virtual size: 64KB

.rsrc
Size: 125KB - Virtual size: 125KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 3KB