3dc4830f48921ffe2d2f07b140fb06ec_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3dc4830f48921ffe2d2f07b140fb06ec_JaffaCakes118
Size

1.7MB
MD5

3dc4830f48921ffe2d2f07b140fb06ec
SHA1

f336809720d4993380538889746ed468e8ee830e
SHA256

1b6aeb46e9a58c56982c4d00051748544ed01ac55ba0eda0a17433f69988a1bd
SHA512

04a42f67cf87bf4e3869a813117c6e927949baf1ef6fba6798bb209aa3b3dbe9678264322dc1b0c3e0113affe13c4d6ff4bcac49b58cb6f754cd48fbdbfe7519
SSDEEP

49152:rWw4yQFdaZJwW65ZIak8qbVMax26NX80vOU+GoObH7RZ:6wVoeJwK8aMax26RoG9/RZ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/ichat33/wwwroot/ichatx.dll	aspack_v212_v242

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ichat33/GetScript.exe
unpack001/ichat33/SyncTool.exe
unpack001/ichat33/TestDrv.exe
unpack001/ichat33/et2ichat.exe
unpack001/ichat33/iChat33.exe
unpack001/ichat33/iChatMSG.dll
unpack001/ichat33/usermgr/ichat_files.dll
unpack001/ichat33/usermgr/ichat_odbc.dll
unpack001/ichat33/usermgr/ichat_sql.dll
unpack001/ichat33/voice.dll

Files

3dc4830f48921ffe2d2f07b140fb06ec_JaffaCakes118
.rar
ichat33/GetScript.exe
.exe windows:4 windows x86 arch:x86

0e6d7e7e6926cfc42efd3626e744bfd1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
GetProcessVersion
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCPInfo
GetOEMCP
GetFileTime
HeapFree
RaiseException
HeapReAlloc
HeapSize
HeapAlloc
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
RtlUnwind
ExitProcess
GetFileSize
TerminateProcess
GetFileAttributesA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
Sleep
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
FreeLibrary
LoadLibraryA
GetProcAddress
GetCommandLineA
SetLastError
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SetHandleCount
GetStdHandle
GetModuleHandleA
FindFirstFileA
FindClose
lstrcatA
SetErrorMode
LocalFree
GetModuleFileNameA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
lstrcpyA
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalAlloc
GlobalDeleteAtom
GetFileType
GetStartupInfoA
GetEnvironmentStrings
GetEnvironmentStringsW
FindNextFileA
InterlockedExchange

user32

GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
ShowWindow
LoadCursorA
GetSysColorBrush
DestroyMenu
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetDlgItem
SetWindowPos
RegisterWindowMessageA
DestroyWindow
SystemParametersInfoA
IsIconic
GetWindowPlacement
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
UnhookWindowsHookEx
GetLastActivePopup
IsWindowEnabled
MessageBoxA
EnableWindow
GetWindowTextA
ClientToScreen
GetWindow
PtInRect
GetWindowLongA
GetClassNameA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
SetCursor
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
SendMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
DefWindowProcA
SetWindowsHookExA
GetSystemMetrics
SetWindowLongA
SetForegroundWindow
CharUpperA
wsprintfA
PostMessageA
PostQuitMessage
GetDlgCtrlID
GetWindowRect
SetWindowTextA

gdi32

DeleteObject
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkColor
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
CreateBitmap
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
DeleteDC

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

comctl32

ord17

Sections

.text
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ichat33/SQL执行表.sql
ichat33/SyncTool.exe
.exe windows:4 windows x86 arch:x86

df4951430bf294cbb8b5e899612aeb52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
HeapReAlloc
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
GetLocaleInfoW
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetOEMCP
GetCPInfo
GlobalFlags
WritePrivateProfileStringA
CloseHandle
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcmpW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetCurrentThread
FreeLibrary
GlobalDeleteAtom
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
LoadLibraryA
SetErrorMode
GetProcAddress
lstrcpyA
lstrcatA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpynA
GetCommandLineA
GetModuleHandleA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrcmpiA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetCurrentThreadId
GetLastError
FormatMessageA
lstrlenA
LocalFree
Sleep
SetHandleCount
GetModuleFileNameA

user32

ShowWindow
SetWindowTextA
wsprintfA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetCursor
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
GetForegroundWindow
DispatchMessageA
GetDlgItem
DestroyWindow
GetMessagePos
LoadIconA
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetSubMenu
GetMenuItemCount
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
DestroyMenu
ClientToScreen
GetMessageTime
GetMenuItemID
GetMenuState
PostQuitMessage
PostMessageA
UnregisterClassA
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
LoadCursorA
UnhookWindowsHookEx
EnableWindow
IsWindowEnabled
GetLastActivePopup
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowTextA
SendMessageA
MessageBoxA
GetParent
GetWindowLongA
GetTopWindow

gdi32

Escape
GetStockObject
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
SelectObject

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
CloseServiceHandle
OpenServiceA
ControlService
QueryServiceStatus
DeleteService
OpenSCManagerA
CreateServiceA

comctl32

ord17

shlwapi

PathFindFileNameA
PathFindExtensionA

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ichat33/TestDrv.exe
.exe windows:4 windows x86 arch:x86

75b3cb24c6a06a1adfc4ba53771b2689

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
GetProcessVersion
GetCPInfo
GetOEMCP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
ExitProcess
TerminateProcess
HeapFree
GetACP
RaiseException
HeapReAlloc
HeapSize
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetFileTime
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileSize
GetFileAttributesA
SetLastError
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
InterlockedExchange
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcpynA
GetModuleFileNameA
lstrcpyA
lstrcatA
SetErrorMode
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
LocalFree
lstrlenA
WideCharToMultiByte
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
FreeLibrary
LoadLibraryA
GetProcAddress
GetCommandLineA
GetModuleHandleA
GetEnvironmentStringsW
GetTickCount

user32

GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
ShowWindow
LoadCursorA
GetSysColorBrush
DestroyMenu
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetDlgItem
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
UnhookWindowsHookEx
GetLastActivePopup
IsWindowEnabled
MessageBoxA
EnableWindow
GetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetWindowLongA
GetClassNameA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
SetCursor
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
SendMessageA
GetKeyState
CallNextHookEx
ValidateRect
PostQuitMessage
PostMessageA
GetForegroundWindow
DefWindowProcA
wsprintfA
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetSystemMetrics
CharUpperA
SetWindowTextA

gdi32

SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
DeleteObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

comctl32

ord17

Exports

Exports

Test

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ichat33/demo/AdminOnline.htm
.html .js polyglot
ichat33/demo/HiddenLogin.htm
.html .js polyglot
ichat33/demo/RoomList.htm
.html .js polyglot
ichat33/demo/login.htm
.html .js polyglot
ichat33/demo/usercount.htm
.html
ichat33/et2ichat.exe
.exe windows:4 windows x86 arch:x86

f859e04c5cbe42af9aeacfd135ef34b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
FileTimeToSystemTime
FileTimeToLocalFileTime
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
FreeLibrary
GetProcessVersion
GetCPInfo
WritePrivateProfileStringA
TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetOEMCP
RtlUnwind
GlobalFlags
ExitProcess
GetFileTime
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetCommandLineA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetEnvironmentStringsW
SetHandleCount
GetModuleHandleA
Sleep
GetFileSize
GetFileAttributesA
FindNextFileA
GetFullPathNameA
GetVolumeInformationA
FindClose
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcpynA
GetModuleFileNameA
lstrcpyA
lstrcatA
SetErrorMode
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetStdHandle
GetFileType
FreeEnvironmentStringsW
GetEnvironmentStrings
FindFirstFileA
InterlockedExchange

user32

GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
ShowWindow
LoadCursorA
GetSysColorBrush
DestroyMenu
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetDlgItem
SetWindowPos
RegisterWindowMessageA
DestroyWindow
SystemParametersInfoA
IsIconic
GetWindowPlacement
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
UnhookWindowsHookEx
GetLastActivePopup
IsWindowEnabled
MessageBoxA
EnableWindow
GetWindowTextA
ClientToScreen
GetWindow
PtInRect
GetWindowLongA
GetClassNameA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
SetCursor
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
SendMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
DefWindowProcA
SetWindowsHookExA
GetSystemMetrics
SetWindowLongA
SetForegroundWindow
CharUpperA
wsprintfA
PostMessageA
PostQuitMessage
GetDlgCtrlID
GetWindowRect
SetWindowTextA

gdi32

DeleteObject
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkColor
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
CreateBitmap
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
DeleteDC

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

comctl32

ord17

Exports

Exports

ReadUserInfo
WriteUserInfo

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ichat33/iChat.ini
ichat33/iChat33.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

MEW
Size: - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�uۊ��
Size: 176KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ichat33/iChatMSG.dll
.dll windows:4 windows x86 arch:x86

041fdfa2c6283113deab08e109b81796

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetOEMCP
GetCPInfo
GetCommandLineA
RtlUnwind
ExitProcess
HeapAlloc
RaiseException
HeapSize
HeapReAlloc
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
TerminateProcess
HeapFree
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
WriteFile
GetCurrentProcess
GetProcessVersion
LoadLibraryA
FreeLibrary
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetLastError
SetLastError
GetProcAddress
GetCurrentThread
lstrcmpA
GetEnvironmentStringsW
InterlockedIncrement
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
WritePrivateProfileStringA
GlobalFlags
lstrcpynA
GetVersion
lstrlenA
SetErrorMode
lstrcpyA
lstrcatA
LocalReAlloc
InterlockedDecrement
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
DeleteCriticalSection
GlobalUnlock
GlobalFree
LocalFree
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetEnvironmentVariableA
GetVersionExA
FreeEnvironmentStringsW
GetEnvironmentStrings
lstrcmpiA

user32

SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
RegisterWindowMessageA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
GetSysColor
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
LoadStringA
DestroyMenu
IsIconic
GetWindowPlacement
GetSystemMetrics
SetFocus
ShowWindow
SetWindowPos
SetWindowLongA
SystemParametersInfoA
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
wsprintfA
GetWindowTextA
ClientToScreen
GetWindow
PtInRect
GetClassNameA
UnregisterClassA
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
EnableWindow
SetCursor
SendMessageA
PostMessageA
PostQuitMessage
GetWindowRect
GetDlgCtrlID
SetWindowTextA

gdi32

DeleteObject
SaveDC
RestoreDC
GetStockObject
SelectObject
SetBkColor
SetTextColor
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
CreateBitmap
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
DeleteDC

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA

comctl32

ord17

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ichat33/iChat_Admin/admin/Acmanagment/User_info.asp
.vbs
ichat33/iChat_Admin/admin/Acmanagment/User_mod.asp
.vbs
ichat33/iChat_Admin/admin/Lift.asp
.html
ichat33/iChat_Admin/admin/Login.asp
.vbs
ichat33/iChat_Admin/admin/Out.asp
ichat33/iChat_Admin/admin/Top.asp
.html .js polyglot
ichat33/iChat_Admin/admin/count.asp
ichat33/iChat_Admin/admin/getpassword.htm
.html
ichat33/iChat_Admin/admin/iChatmanagment/ChatInfo/Info.asp
.vbs
ichat33/iChat_Admin/admin/iChatmanagment/iChatfile/Restore.asp
.vbs
ichat33/iChat_Admin/admin/iChatmanagment/iChatfile/admin.asp
.html .vbs polyglot
ichat33/iChat_Admin/admin/iChatmanagment/iChatfile/admin.txt
ichat33/iChat_Admin/admin/iChatmanagment/iChatfile/badip.asp
.vbs
ichat33/iChat_Admin/admin/iChatmanagment/iChatfile/baduser.asp
.vbs
ichat33/iChat_Admin/admin/iChatmanagment/iChatfile/badword.asp
.vbs
ichat33/iChat_Admin/admin/iChatmanagment/iChatfile/chinese.txt
ichat33/iChat_Admin/admin/iChatmanagment/iChatfile/count.asp
.vbs
ichat33/iChat_Admin/admin/iChatmanagment/iChatfile/inster.asp
ichat33/iChat_Admin/admin/iChatmanagment/iChatfile/news_data.asp
.vbs
ichat33/iChat_Admin/admin/iChatmanagment/iChatfile/room.asp
.vbs
ichat33/iChat_Admin/admin/iChatmanagment/iChatfile/room.txt
ichat33/iChat_Admin/admin/iChatmanagment/iChatfile/template.txt
ichat33/iChat_Admin/admin/iChatmanagment/iChatfile/top.asp
ichat33/iChat_Admin/admin/iChatmanagment/logs/log.asp
.vbs
ichat33/iChat_Admin/admin/iChatmanagment/usermanager/admin_Edit.asp
.vbs
ichat33/iChat_Admin/admin/iChatmanagment/usermanager/admin_index.asp
ichat33/iChat_Admin/admin/iChatmanagment/usermanager/admin_user.asp
.vbs
ichat33/iChat_Admin/admin/ichatadmin.asp
ichat33/iChat_Admin/admin/images/Restore.gif
.gif
ichat33/iChat_Admin/admin/images/Restore_bak.gif
.gif
ichat33/iChat_Admin/admin/images/boutt.gif
.gif
ichat33/iChat_Admin/admin/images/css.css
ichat33/iChat_Admin/admin/images/enter1.gif
.gif
ichat33/iChat_Admin/admin/images/eoechina.css
ichat33/iChat_Admin/admin/images/login.gif
.gif
ichat33/iChat_Admin/admin/images/login_01.gif
.gif
ichat33/iChat_Admin/admin/images/login_02.gif
.gif
ichat33/iChat_Admin/admin/images/login_03.gif
.gif
ichat33/iChat_Admin/admin/images/login_04.gif
.gif
ichat33/iChat_Admin/admin/images/login_05.gif
.gif
ichat33/iChat_Admin/admin/images/login_06.gif
.gif
ichat33/iChat_Admin/admin/images/login_07.gif
.gif
ichat33/iChat_Admin/admin/images/login_08.gif
.gif
ichat33/iChat_Admin/admin/images/login_09.gif
.gif
ichat33/iChat_Admin/admin/images/map.gif
.gif
ichat33/iChat_Admin/admin/images/outspread_01.gif
.gif
ichat33/iChat_Admin/admin/images/outspread_02.gif
.gif
ichat33/iChat_Admin/admin/images/outspread_03.gif
.gif
ichat33/iChat_Admin/admin/images/outspread_04.gif
.gif
ichat33/iChat_Admin/admin/images/outspread_05.gif
.gif
ichat33/iChat_Admin/admin/images/outspread_06.gif
.gif
ichat33/iChat_Admin/admin/images/reload.gif
.gif
ichat33/iChat_Admin/admin/images/save.gif
.gif
ichat33/iChat_Admin/admin/images/symbol.gif
.gif
ichat33/iChat_Admin/admin/images/table_down.gif
.gif
ichat33/iChat_Admin/admin/images/table_middle0.gif
.gif
ichat33/iChat_Admin/admin/images/table_top.gif
.gif
ichat33/iChat_Admin/admin/images/top1_1.gif
.gif
ichat33/iChat_Admin/admin/images/top1_2.gif
.gif
ichat33/iChat_Admin/admin/images/top1_4.gif
.gif
ichat33/iChat_Admin/admin/images/top1_5.gif
.gif
ichat33/iChat_Admin/admin/images/top1_6.gif
.gif
ichat33/iChat_Admin/admin/images/xp_bg3.gif
.gif
ichat33/iChat_Admin/admin/images/xp_bg4.gif
.gif
ichat33/iChat_Admin/admin/images/xp_dot1.gif
.gif
ichat33/iChat_Admin/admin/images/xp_dot3.gif
.gif
ichat33/iChat_Admin/admin/images/xp_t2_1.gif
.gif
ichat33/iChat_Admin/admin/images/xp_t2_2.gif
.gif
ichat33/iChat_Admin/admin/images/xp_t2_3.gif
.gif
ichat33/iChat_Admin/admin/images/xp_t2_4.gif
.gif
ichat33/iChat_Admin/admin/images/zbdl.gif
.gif
ichat33/iChat_Admin/admin/img/bg.gif
.gif
ichat33/iChat_Admin/admin/img/clear.gif
.gif
ichat33/iChat_Admin/admin/img/index_01.gif
.gif
ichat33/iChat_Admin/admin/img/index_02.gif
.gif
ichat33/iChat_Admin/admin/img/index_03.gif
.gif
ichat33/iChat_Admin/admin/img/index_04.gif
.gif
ichat33/iChat_Admin/admin/img/index_05.gif
.gif
ichat33/iChat_Admin/admin/img/index_06.gif
.gif
ichat33/iChat_Admin/admin/img/index_07.gif
.gif
ichat33/iChat_Admin/admin/img/index_08.gif
.gif
ichat33/iChat_Admin/admin/img/index_09.gif
.gif
ichat33/iChat_Admin/admin/img/index_10.gif
.gif
ichat33/iChat_Admin/admin/img/index_11.gif
.gif
ichat33/iChat_Admin/admin/img/index_12.gif
.gif
ichat33/iChat_Admin/admin/img/index_13.gif
.gif
ichat33/iChat_Admin/admin/img/index_15.gif
.gif
ichat33/iChat_Admin/admin/img/index_16.gif
.gif
ichat33/iChat_Admin/admin/img/index_18.gif
.gif
ichat33/iChat_Admin/admin/img/index_19.gif
.gif
ichat33/iChat_Admin/admin/img/index_20.gif
.gif
ichat33/iChat_Admin/admin/img/index_21.gif
.gif
ichat33/iChat_Admin/admin/img/index_22.gif
.gif
ichat33/iChat_Admin/admin/img/index_23.gif
.gif
ichat33/iChat_Admin/admin/img/index_24.gif
.gif
ichat33/iChat_Admin/admin/img/index_25.gif
.gif
ichat33/iChat_Admin/admin/img/index_26.gif
.gif
ichat33/iChat_Admin/admin/img/login.gif
.gif
ichat33/iChat_Admin/admin/inc/conn.asp
.vbs
ichat33/iChat_Admin/admin/index.htm
.html
ichat33/iChat_Admin/admin/main.asp
.js
ichat33/iChat_Admin/admin/password.asp
.html .vbs polyglot
ichat33/iChat_Admin/admin/password1.asp
.html .vbs polyglot
ichat33/iChat_Admin/admin/reload.htm
.html
ichat33/iChat_Admin/user/Connections/coon.asp
.vbs
ichat33/iChat_Admin/user/admin.asp
.vbs
ichat33/iChat_Admin/user/admincp.asp
.asp .vbs polyglot
ichat33/iChat_Admin/user/admincplogout.asp
ichat33/iChat_Admin/user/adminlogin.htm
ichat33/iChat_Admin/user/dele.asp
.vbs
ichat33/iChat_Admin/user/edit.asp
.vbs
ichat33/iChat_Admin/user/emote.asp
.vbs
ichat33/iChat_Admin/user/footer.asp
ichat33/iChat_Admin/user/iconshop.asp
.vbs
ichat33/iChat_Admin/user/imges/13.gif
.gif
ichat33/iChat_Admin/user/imges/14.gif
.gif
ichat33/iChat_Admin/user/imges/4.gif
.gif
ichat33/iChat_Admin/user/imges/4.png
.png
ichat33/iChat_Admin/user/imges/bg.gif
.gif
ichat33/iChat_Admin/user/imges/bg2.gif
.gif
ichat33/iChat_Admin/user/imges/cal1.gif
.gif
ichat33/iChat_Admin/user/imges/calendar_top1.gif
.gif
ichat33/iChat_Admin/user/imges/calendar_top1.png
.png
ichat33/iChat_Admin/user/imges/css.css
ichat33/iChat_Admin/user/imges/diandian.gif
.gif
ichat33/iChat_Admin/user/imges/icon002.gif
.gif
ichat33/iChat_Admin/user/imges/icon004.gif
.gif
ichat33/iChat_Admin/user/imges/icon008.gif
.gif
ichat33/iChat_Admin/user/imges/icon009.gif
.gif
ichat33/iChat_Admin/user/imges/icon010.gif
.gif
ichat33/iChat_Admin/user/imges/icon012.gif
.gif
ichat33/iChat_Admin/user/imges/icon013.gif
.gif
ichat33/iChat_Admin/user/imges/icon016.gif
.gif
ichat33/iChat_Admin/user/imges/icon018.gif
.gif
ichat33/iChat_Admin/user/imges/icon020.gif
.gif
ichat33/iChat_Admin/user/imges/left_title.gif
.gif
ichat33/iChat_Admin/user/imges/title_r1_c1.gif
.gif
ichat33/iChat_Admin/user/imges/title_r1_c2.gif
.gif
ichat33/iChat_Admin/user/imges/title_r1_c3.gif
.gif
ichat33/iChat_Admin/user/imges/top_nav_menu.gif
.gif
ichat33/iChat_Admin/user/imges/top_r1_c1.gif
.gif
ichat33/iChat_Admin/user/imges/top_r1_c2.gif
.gif
ichat33/iChat_Admin/user/imges/top_r1_c3.gif
.gif
ichat33/iChat_Admin/user/imges/top_r1_c4.gif
.gif
ichat33/iChat_Admin/user/imges/top_r1_c5.gif
.gif
ichat33/iChat_Admin/user/imges/top_r1_c6.gif
.gif
ichat33/iChat_Admin/user/imges/top_r1_c7.gif
.gif
ichat33/iChat_Admin/user/imges/top_r1_c8.gif
.gif
ichat33/iChat_Admin/user/imges/topbg.gif
.gif
ichat33/iChat_Admin/user/index.asp
ichat33/iChat_Admin/user/login.asp
.vbs
ichat33/iChat_Admin/user/logout.asp
ichat33/iChat_Admin/user/louser.asp
ichat33/iChat_Admin/user/px.asp
.vbs
ichat33/iChat_Admin/user/update.asp
ichat33/iChat_Admin/user/upx.asp
.vbs
ichat33/iChat_Admin/user/user.asp
.asp .vbs polyglot
ichat33/iChat_Admin/user/useriis.asp
.vbs
ichat33/iChat_Admin/user/userinfo.asp
.vbs
ichat33/iChat_Admin/user/userpass.asp
ichat33/iChat_Admin/user/userpass1.asp
.vbs
ichat33/iChat_Admin/user/userpass2.asp
.vbs
ichat33/iChat_Admin/user/userxx.asp
.html .vbs polyglot
ichat33/iChat_Admin/user/wwwadmin.asp
.vbs
ichat33/iChat_Admin/usergl/chgadminpass.asp
.html .vbs polyglot
ichat33/iChat_Admin/usergl/conn.asp
.vbs
ichat33/iChat_Admin/usergl/dele.asp
ichat33/iChat_Admin/usergl/deleuser.asp
.html .vbs polyglot
ichat33/iChat_Admin/usergl/deleuser.htm
.html
ichat33/iChat_Admin/usergl/edit.asp
.vbs
ichat33/iChat_Admin/usergl/index.asp
.html .vbs polyglot
ichat33/iChat_Admin/usergl/login.asp
.vbs
ichat33/iChat_Admin/usergl/login.htm
ichat33/iChat_Admin/usergl/logout.asp
ichat33/iChat_Admin/usergl/password.asp
.html .vbs polyglot
ichat33/iChat_Admin/usergl/password.htm
.html
ichat33/iChat_Admin/usergl/password1.asp
.html .vbs polyglot
ichat33/iChat_Admin/usergl/px.asp
.vbs
ichat33/iChat_Admin/usergl/reload.htm
.html
ichat33/iChat_Admin/usergl/top.asp
.html .vbs polyglot
ichat33/iChat_Admin/usergl/update.asp
.html
ichat33/iChat_Admin/usergl/updatepwd.asp
.html .vbs polyglot
ichat33/iChat_Admin/usergl/userxx.asp
.html .vbs polyglot
ichat33/iChat_User/8888/config/act.ini
ichat33/iChat_User/8888/config/admin.ini
ichat33/iChat_User/8888/config/badip.ini
ichat33/iChat_User/8888/config/baduser.ini
ichat33/iChat_User/8888/config/badword.ini
ichat33/iChat_User/8888/config/chinese.ini
.js
ichat33/iChat_User/8888/config/effect.ini
ichat33/iChat_User/8888/config/emote1.ini
ichat33/iChat_User/8888/config/emote2.ini
ichat33/iChat_User/8888/config/face.ini
ichat33/iChat_User/8888/config/goodip.ini
ichat33/iChat_User/8888/config/monitor.ini
ichat33/iChat_User/8888/config/monitor_list.ini
ichat33/iChat_User/8888/config/music.ini
ichat33/iChat_User/8888/config/netbar.ini
ichat33/iChat_User/8888/config/news_data.ini
ichat33/iChat_User/8888/config/room.ini
ichat33/iChat_User/8888/template/body.htm
.html .js polyglot
ichat33/iChat_User/8888/template/body2.htm
.html .js polyglot
ichat33/iChat_User/8888/template/chatform.htm
.html .js polyglot
ichat33/iChat_User/8888/template/error.htm
.html
ichat33/iChat_User/8888/template/index.htm
.html .js polyglot
ichat33/iChat_User/8888/template/login.htm
.html .js polyglot
ichat33/iChat_User/8888/template/lookuser.htm
.html .js polyglot
ichat33/iChat_User/8888/template/message.htm
.html
ichat33/iChat_User/8888/template/modify.htm
.html
ichat33/iChat_User/8888/template/modify2.htm
.html
ichat33/iChat_User/8888/template/music.htm
.html .js polyglot
ichat33/iChat_User/8888/template/register.htm
.html .js polyglot
ichat33/iChat_User/8888/template/registerok.htm
.html
ichat33/iChat_User/8888/template/roomlist.htm
.html .js polyglot
ichat33/iChat_User/8888/template/template.ini
ichat33/iChat_User/8888/template/userguide.htm
.html .js polyglot
ichat33/iChat_User/8888/template/userlist.htm
.html .js polyglot
ichat33/iChat_User/8889/config/act.ini
ichat33/iChat_User/8889/config/admin.ini
ichat33/iChat_User/8889/config/badip.ini
ichat33/iChat_User/8889/config/baduser.ini
ichat33/iChat_User/8889/config/badword.ini
ichat33/iChat_User/8889/config/chinese.ini
.js
ichat33/iChat_User/8889/config/effect.ini
ichat33/iChat_User/8889/config/emote1.ini
ichat33/iChat_User/8889/config/emote2.ini
ichat33/iChat_User/8889/config/face.ini
ichat33/iChat_User/8889/config/goodip.ini
ichat33/iChat_User/8889/config/monitor.ini
ichat33/iChat_User/8889/config/monitor_list.ini
ichat33/iChat_User/8889/config/music.ini
ichat33/iChat_User/8889/config/netbar.ini
ichat33/iChat_User/8889/config/news_data.ini
ichat33/iChat_User/8889/config/room.ini
ichat33/iChat_User/8889/template/body.htm
.html .js polyglot
ichat33/iChat_User/8889/template/body2.htm
.html .js polyglot
ichat33/iChat_User/8889/template/chatform.htm
.html .js polyglot
ichat33/iChat_User/8889/template/error.htm
.html
ichat33/iChat_User/8889/template/index.htm
.html .js polyglot
ichat33/iChat_User/8889/template/login.htm
.html .js polyglot
ichat33/iChat_User/8889/template/lookuser.htm
.html .js polyglot
ichat33/iChat_User/8889/template/message.htm
.html
ichat33/iChat_User/8889/template/modify.htm
.html
ichat33/iChat_User/8889/template/modify2.htm
.html
ichat33/iChat_User/8889/template/music.htm
.html .js polyglot
ichat33/iChat_User/8889/template/register.htm
.html .js polyglot
ichat33/iChat_User/8889/template/registerok.htm
.html
ichat33/iChat_User/8889/template/roomlist.htm
.html .js polyglot
ichat33/iChat_User/8889/template/template.ini
ichat33/iChat_User/8889/template/userguide.htm
.html .js polyglot
ichat33/iChat_User/8889/template/userlist.htm
.html .js polyglot
ichat33/iChat_User/8890/config/act.ini
ichat33/iChat_User/8890/config/admin.ini
ichat33/iChat_User/8890/config/badip.ini
ichat33/iChat_User/8890/config/baduser.ini
ichat33/iChat_User/8890/config/badword.ini
ichat33/iChat_User/8890/config/chinese.ini
.js
ichat33/iChat_User/8890/config/effect.ini
ichat33/iChat_User/8890/config/emote1.ini
ichat33/iChat_User/8890/config/emote2.ini
ichat33/iChat_User/8890/config/face.ini
ichat33/iChat_User/8890/config/goodip.ini
ichat33/iChat_User/8890/config/monitor.ini
ichat33/iChat_User/8890/config/monitor_list.ini
ichat33/iChat_User/8890/config/music.ini
ichat33/iChat_User/8890/config/netbar.ini
ichat33/iChat_User/8890/config/news_data.ini
ichat33/iChat_User/8890/config/room.ini
ichat33/iChat_User/8890/template/body.htm
.html .js polyglot
ichat33/iChat_User/8890/template/body2.htm
.html .js polyglot
ichat33/iChat_User/8890/template/chatform.htm
.html .js polyglot
ichat33/iChat_User/8890/template/error.htm
.html
ichat33/iChat_User/8890/template/index.htm
.html .js polyglot
ichat33/iChat_User/8890/template/login.htm
.html .js polyglot
ichat33/iChat_User/8890/template/lookuser.htm
.html .js polyglot
ichat33/iChat_User/8890/template/message.htm
.html
ichat33/iChat_User/8890/template/modify.htm
.html
ichat33/iChat_User/8890/template/modify2.htm
.html
ichat33/iChat_User/8890/template/music.htm
.html .js polyglot
ichat33/iChat_User/8890/template/register.htm
.html .js polyglot
ichat33/iChat_User/8890/template/registerok.htm
.html
ichat33/iChat_User/8890/template/roomlist.htm
.html .js polyglot
ichat33/iChat_User/8890/template/template.ini
ichat33/iChat_User/8890/template/userguide.htm
.html .js polyglot
ichat33/iChat_User/8890/template/userlist.htm
.html .js polyglot
ichat33/iChat_User/8891/config/act.ini
ichat33/iChat_User/8891/config/admin.ini
ichat33/iChat_User/8891/config/badip.ini
ichat33/iChat_User/8891/config/baduser.ini
ichat33/iChat_User/8891/config/badword.ini
ichat33/iChat_User/8891/config/chinese.ini
.js
ichat33/iChat_User/8891/config/effect.ini
ichat33/iChat_User/8891/config/emote1.ini
ichat33/iChat_User/8891/config/emote2.ini
ichat33/iChat_User/8891/config/face.ini
ichat33/iChat_User/8891/config/goodip.ini
ichat33/iChat_User/8891/config/monitor.ini
ichat33/iChat_User/8891/config/monitor_list.ini
ichat33/iChat_User/8891/config/music.ini
ichat33/iChat_User/8891/config/netbar.ini
ichat33/iChat_User/8891/config/news_data.ini
ichat33/iChat_User/8891/config/room.ini
ichat33/iChat_User/8891/template/body.htm
.html .js polyglot
ichat33/iChat_User/8891/template/body2.htm
.html .js polyglot
ichat33/iChat_User/8891/template/chatform.htm
.html .js polyglot
ichat33/iChat_User/8891/template/error.htm
.html
ichat33/iChat_User/8891/template/index.htm
.html .js polyglot
ichat33/iChat_User/8891/template/login.htm
.html .js polyglot
ichat33/iChat_User/8891/template/lookuser.htm
.html .js polyglot
ichat33/iChat_User/8891/template/message.htm
.html
ichat33/iChat_User/8891/template/modify.htm
.html
ichat33/iChat_User/8891/template/modify2.htm
.html
ichat33/iChat_User/8891/template/music.htm
.html .js polyglot
ichat33/iChat_User/8891/template/register.htm
.html .js polyglot
ichat33/iChat_User/8891/template/registerok.htm
.html
ichat33/iChat_User/8891/template/roomlist.htm
.html .js polyglot
ichat33/iChat_User/8891/template/template.ini
ichat33/iChat_User/8891/template/userguide.htm
.html .js polyglot
ichat33/iChat_User/8891/template/userlist.htm
.html .js polyglot
ichat33/iChat_User/8892/config/act.ini
ichat33/iChat_User/8892/config/admin.ini
ichat33/iChat_User/8892/config/badip.ini
ichat33/iChat_User/8892/config/baduser.ini
ichat33/iChat_User/8892/config/badword.ini
ichat33/iChat_User/8892/config/chinese.ini
.js
ichat33/iChat_User/8892/config/effect.ini
ichat33/iChat_User/8892/config/emote1.ini
ichat33/iChat_User/8892/config/emote2.ini
ichat33/iChat_User/8892/config/face.ini
ichat33/iChat_User/8892/config/goodip.ini
ichat33/iChat_User/8892/config/monitor.ini
ichat33/iChat_User/8892/config/monitor_list.ini
ichat33/iChat_User/8892/config/music.ini
ichat33/iChat_User/8892/config/netbar.ini
ichat33/iChat_User/8892/config/news_data.ini
ichat33/iChat_User/8892/config/room.ini
ichat33/iChat_User/8892/template/body.htm
.html .js polyglot
ichat33/iChat_User/8892/template/body2.htm
.html .js polyglot
ichat33/iChat_User/8892/template/chatform.htm
.html .js polyglot
ichat33/iChat_User/8892/template/error.htm
.html
ichat33/iChat_User/8892/template/index.htm
.html .js polyglot
ichat33/iChat_User/8892/template/login.htm
.html .js polyglot
ichat33/iChat_User/8892/template/lookuser.htm
.html .js polyglot
ichat33/iChat_User/8892/template/message.htm
.html
ichat33/iChat_User/8892/template/modify.htm
.html
ichat33/iChat_User/8892/template/modify2.htm
.html
ichat33/iChat_User/8892/template/music.htm
.html .js polyglot
ichat33/iChat_User/8892/template/register.htm
.html .js polyglot
ichat33/iChat_User/8892/template/registerok.htm
.html
ichat33/iChat_User/8892/template/roomlist.htm
.html .js polyglot
ichat33/iChat_User/8892/template/template.ini
ichat33/iChat_User/8892/template/userguide.htm
.html .js polyglot
ichat33/iChat_User/8892/template/userlist.htm
.html .js polyglot
ichat33/iChat_User/8893/config/act.ini
ichat33/iChat_User/8893/config/admin.ini
ichat33/iChat_User/8893/config/badip.ini
ichat33/iChat_User/8893/config/baduser.ini
ichat33/iChat_User/8893/config/badword.ini
ichat33/iChat_User/8893/config/chinese.ini
.js
ichat33/iChat_User/8893/config/effect.ini
ichat33/iChat_User/8893/config/emote1.ini
ichat33/iChat_User/8893/config/emote2.ini
ichat33/iChat_User/8893/config/face.ini
ichat33/iChat_User/8893/config/goodip.ini
ichat33/iChat_User/8893/config/monitor.ini
ichat33/iChat_User/8893/config/monitor_list.ini
ichat33/iChat_User/8893/config/music.ini
ichat33/iChat_User/8893/config/netbar.ini
ichat33/iChat_User/8893/config/news_data.ini
ichat33/iChat_User/8893/config/room.ini
ichat33/iChat_User/8893/template/body.htm
.html .js polyglot
ichat33/iChat_User/8893/template/body2.htm
.html .js polyglot
ichat33/iChat_User/8893/template/chatform.htm
.html .js polyglot
ichat33/iChat_User/8893/template/error.htm
.html
ichat33/iChat_User/8893/template/index.htm
.html .js polyglot
ichat33/iChat_User/8893/template/login.htm
.html .js polyglot
ichat33/iChat_User/8893/template/lookuser.htm
.html .js polyglot
ichat33/iChat_User/8893/template/message.htm
.html
ichat33/iChat_User/8893/template/modify.htm
.html
ichat33/iChat_User/8893/template/modify2.htm
.html
ichat33/iChat_User/8893/template/music.htm
.html .js polyglot
ichat33/iChat_User/8893/template/register.htm
.html .js polyglot
ichat33/iChat_User/8893/template/registerok.htm
.html
ichat33/iChat_User/8893/template/roomlist.htm
.html .js polyglot
ichat33/iChat_User/8893/template/template.ini
ichat33/iChat_User/8893/template/userguide.htm
.html .js polyglot
ichat33/iChat_User/8893/template/userlist.htm
.html .js polyglot
ichat33/iChat_User/bak/config/act.ini
ichat33/iChat_User/bak/config/admin.ini
ichat33/iChat_User/bak/config/badip.ini
ichat33/iChat_User/bak/config/baduser.ini
ichat33/iChat_User/bak/config/badword.ini
ichat33/iChat_User/bak/config/chinese.ini
.js
ichat33/iChat_User/bak/config/effect.ini
ichat33/iChat_User/bak/config/emote1.ini
ichat33/iChat_User/bak/config/emote2.ini
ichat33/iChat_User/bak/config/face.ini
ichat33/iChat_User/bak/config/goodip.ini
ichat33/iChat_User/bak/config/monitor.ini
ichat33/iChat_User/bak/config/monitor_list.ini
ichat33/iChat_User/bak/config/music.ini
ichat33/iChat_User/bak/config/netbar.ini
ichat33/iChat_User/bak/config/news_data.ini
ichat33/iChat_User/bak/template/body.htm
.html .js polyglot
ichat33/iChat_User/bak/template/body2.htm
.html .js polyglot
ichat33/iChat_User/bak/template/chatform.htm
.html .js polyglot
ichat33/iChat_User/bak/template/error.htm
.html
ichat33/iChat_User/bak/template/index.htm
.html .js polyglot
ichat33/iChat_User/bak/template/login.htm
.html .js polyglot
ichat33/iChat_User/bak/template/lookuser.htm
.html .js polyglot
ichat33/iChat_User/bak/template/message.htm
.html
ichat33/iChat_User/bak/template/modify.htm
.html
ichat33/iChat_User/bak/template/modify2.htm
.html
ichat33/iChat_User/bak/template/music.htm
.html .js polyglot
ichat33/iChat_User/bak/template/register.htm
.html .js polyglot
ichat33/iChat_User/bak/template/registerok.htm
.html
ichat33/iChat_User/bak/template/roomlist.htm
.html .js polyglot
ichat33/iChat_User/bak/template/template.ini
ichat33/iChat_User/bak/template/userguide.htm
.html .js polyglot
ichat33/iChat_User/bak/template/userlist.htm
.html .js polyglot
ichat33/rooms.ini
ichat33/template/allusers.htm
.html .js polyglot
ichat33/template/finduser.htm
.html .js polyglot
ichat33/template/main.htm
.html .js polyglot
ichat33/usermgr/ichat_files.dll
.dll windows:4 windows x86 arch:x86

c9ecf4b9156fcf3f6b56d5d21a6741c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeLibrary
GetProcessVersion
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCPInfo
GetOEMCP
RtlUnwind
GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapSize
HeapReAlloc
GetACP
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
SetLastError
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
WritePrivateProfileStringA
GlobalFlags
GetVersion
lstrcatA
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetFullPathNameA
GetVolumeInformationA
lstrcpyA
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
FindClose
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
CreateFileA
GetLastError
lstrcpynA
GetFileTime
GetFileSize
GetFileAttributesA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
FindNextFileA
FindFirstFileA
GetStartupInfoA

user32

RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
GetSysColor
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
LoadStringA
DestroyMenu
GetWindowPlacement
SetFocus
ShowWindow
SetWindowPos
SetWindowLongA
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
UnregisterClassA
UnhookWindowsHookEx
GetSystemMetrics
CharUpperA
wsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
PostQuitMessage
SystemParametersInfoA
IsIconic
PostMessageA
SendMessageA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
EnableWindow
SetCursor
GetClassNameA

gdi32

SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

comctl32

ord17

Exports

Exports

FreeUserDrv
GetDrvErrorMsg
GetUserCount
InitUserDrv
IsExist
ReadUserInfo
ReadUserInfo2
UpdateUserCredit
UpdateUserInfo
WriteUserInfo

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ichat33/usermgr/ichat_odbc.dll
.dll windows:4 windows x86 arch:x86

400666e05ffba7a08b6c6465fd9ef1c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCPInfo
GetOEMCP
RtlUnwind
GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
RaiseException
HeapSize
HeapReAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
GetProcessVersion
LoadLibraryA
FreeLibrary
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetLastError
GetModuleHandleA
GetProcAddress
SetLastError
WritePrivateProfileStringA
GlobalFlags
GetVersion
lstrcpynA
lstrcpyA
lstrcatA
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetStdHandle
GetCurrentThreadId

user32

GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
GetSysColor
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
LoadStringA
DestroyMenu
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
SetFocus
ShowWindow
SetWindowPos
SetWindowLongA
DefWindowProcA
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameA
UnregisterClassA
UnhookWindowsHookEx
wsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
PostQuitMessage
PostMessageA
SendMessageA
SetCursor
EnableWindow
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
DestroyWindow
CreateWindowExA
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
GetMenuItemCount

gdi32

GetClipBox
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
CreateBitmap
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
SetTextColor

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA

comctl32

ord17

odbc32

ord41
ord1
ord2
ord15
ord14
ord9
ord16
ord43
ord13
ord11
ord3
ord36

Exports

Exports

FreeUserDrv
GetDrvErrorMsg
GetUserCount
InitUserDrv
IsExist
ReadUserInfo
ReadUserInfo2
UpdateUserCredit
UpdateUserInfo
WriteUserInfo

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ichat33/usermgr/ichat_sql.dll
.dll windows:4 windows x86 arch:x86

e8a88ebef13fbb09283ce3e1e8cc813e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntwdblib

ord66
ord76
ord17
ord137
ord53
ord30
ord129
ord124
ord93
ord58
ord28
ord131
ord132
ord11
ord133
ord77
ord9
ord32
ord43
ord31
ord51
ord48
ord71

kernel32

LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedDecrement
lstrcatA
SetErrorMode
WritePrivateProfileStringA
InterlockedIncrement
GlobalFlags
RaiseException
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GetCPInfo
GetOEMCP
GetSystemTimeAsFileTime
RtlUnwind
GetTimeFormatA
GetDateFormatA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
GetTimeZoneInformation
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
SetLastError
GlobalFree
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
CloseHandle
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
CreateThread
ResumeThread
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange

user32

GetForegroundWindow
RemovePropA
GetPropA
SetPropA
GetClassInfoExA
GetClassLongA
CreateWindowExA
GetCapture
WinHelpA
RegisterWindowMessageA
DestroyMenu
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
SetWindowPos
ShowWindow
SetWindowLongA
GetTopWindow
LoadCursorA
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetWindowTextA
SetWindowTextA
GetClassNameA
UnregisterClassA
UnhookWindowsHookEx
wsprintfA
GetSystemMetrics
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetMenuItemBitmaps
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
MessageBoxA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
DestroyWindow
GetMessageTime
GetMessagePos
SendMessageA
SetCursor
LoadIconA
MapWindowPoints
GetDlgItem
PostMessageA
PostQuitMessage

gdi32

Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetClipBox
TextOutA
RectVisible
PtVisible
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
GetDeviceCaps
GetStockObject
CreateBitmap
ExtTextOutA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA

comctl32

ord17

shlwapi

PathFindExtensionA
PathFindFileNameA

oleaut32

VariantInit
VariantChangeType
VariantClear

Exports

Exports

FreeUserDrv
GetDrvErrorMsg
GetUserCount
InitUserDrv
IsExist
M_InitProcessUser
M_ReadUserInfo
M_ResetProcessID
M_UpdateUserCredit
ReadUserInfo
ReadUserInfo2
UpdateUserCredit
UpdateUserInfo
WriteUserInfo

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ichat33/voice.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

� �VX|N{
Size: 1336.6MB - Virtual size: 2001.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

[ɱ�/�
Size: 2690.7MB - Virtual size: 3595.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��i�>
Size: 702.8MB - Virtual size: 2040.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

��<��v�5
Size: 218.0MB - Virtual size: 1711.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��Μ�|K
Size: 78.3MB - Virtual size: 3394.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
ichat33/wwwroot/LOGO.jpg
.jpg
ichat33/wwwroot/ads.htm
.html
ichat33/wwwroot/default.htm
.html .js polyglot
ichat33/wwwroot/guanli.htm
.html
ichat33/wwwroot/hezuo.htm
.html
ichat33/wwwroot/ichat.swf
ichat33/wwwroot/ichatx.dll
.dll regsvr32 windows:4 windows x86 arch:x86

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

29/01/1996, 00:00

Not After

01/08/2028, 23:59

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0a
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2009, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:72:6d:c1:66:45:49:32:ca:3c:c6:3e:7a:b8:ac:d8
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

07/10/2004, 00:00

Not After

18/10/2005, 23:59

Subject

CN=Boyaa Information Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Boyaa Information Technology Co.\, Ltd.,L=ShenZhen,ST=Guang Dong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e6:c5:dc:4e:5f:cc:36:f9:04:48:55:11:fb:97:26:e6:02:ae:fe:e3
Signer

Actual PE Digest

e6:c5:dc:4e:5f:cc:36:f9:04:48:55:11:fb:97:26:e6:02:ae:fe:e3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxMemFile@@QAE@ABV0@@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxMemFile@@6B@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXABV0@@Z
?Close@CxIOFile@@UAE_NXZ
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Flush@CxIOFile@@UAE_NXZ
?GetC@CxIOFile@@UAEJXZ
?Open@CxIOFile@@QAE_NPBD0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Size@CxIOFile@@UAEJXZ
?Tell@CxIOFile@@UAEJXZ
?Write@CxIOFile@@UAEIPBXII@Z
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 321KB - Virtual size: 816KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 728KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 23KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ichat33/wwwroot/logo.swf
ichat33/wwwroot/top.swf
ichat33/下载说明.htm
.html .js polyglot
ichat33/停止.bat
ichat33/卸载.bat
ichat33/启动.bat
ichat33/安装.bat
ichat33/所有文件树型列表说明.txt
ichat33/重启.bat
ichat33/非常世纪资源网.url
.url

Sharing

General

Malware Config

Signatures

Files

0e6d7e7e6926cfc42efd3626e744bfd1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

Sections

.text Size: 100KB - Virtual size: 98KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 16KB - Virtual size: 30KB

.rsrc Size: 4KB - Virtual size: 160B

df4951430bf294cbb8b5e899612aeb52

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

shlwapi

oleaut32

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 4KB - Virtual size: 160B

75b3cb24c6a06a1adfc4ba53771b2689

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 100KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 4KB - Virtual size: 160B

f859e04c5cbe42af9aeacfd135ef34b4

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 96KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 16KB - Virtual size: 30KB

.rsrc Size: 4KB - Virtual size: 160B

Headers

File Characteristics

Sections

MEW Size: - Virtual size: 472KB

�uۊ�� Size: 176KB - Virtual size: 236KB

041fdfa2c6283113deab08e109b81796

.text
Size: 100KB - Virtual size: 98KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 16KB - Virtual size: 30KB

.rsrc
Size: 4KB - Virtual size: 160B

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 4KB - Virtual size: 160B

.text
Size: 104KB - Virtual size: 100KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 4KB - Virtual size: 160B

.text
Size: 100KB - Virtual size: 96KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 16KB - Virtual size: 30KB

.rsrc
Size: 4KB - Virtual size: 160B

MEW
Size: - Virtual size: 472KB

�uۊ��
Size: 176KB - Virtual size: 236KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 12KB - Virtual size: 21KB

.rsrc
Size: 4KB - Virtual size: 128B

.reloc
Size: 12KB - Virtual size: 9KB

.text
Size: 84KB - Virtual size: 81KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 12KB - Virtual size: 10KB

.text
Size: 80KB - Virtual size: 77KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 16KB - Virtual size: 35KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 12KB - Virtual size: 10KB