ad31ec95bfa96dd4736d3175051609fc_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ad31ec95bfa96dd4736d3175051609fc_JaffaCakes118
Size

897KB
MD5

ad31ec95bfa96dd4736d3175051609fc
SHA1

e6165b47ae99186ba99b19a08e91ca3d49b59292
SHA256

e60765f9fb069eca88ffa5562778a402126efea9cc917d796414f7f23d3581bc
SHA512

a3ebbff3925e05c44a2b246e5cd2284755d492afe00a070dcd7f161ea597be366bbcb2301eaddec6a312843d4c71baa158249268ae29a63eb8b1720a53874188
SSDEEP

24576:yfUChLrIXDe66WHIWIpApPrES4st/+5FhBfkSBy:kUCh3OdIparEPst/qf/Q

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/BatchRenShell.dll	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/BatchRenShell.dll	upx

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/BatchRen.exe
unpack001/ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/BatchRenShell.dll
unpack002/out.upx
unpack001/ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/BatchRenShell64.dll

Files

ad31ec95bfa96dd4736d3175051609fc_JaffaCakes118
.rar
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/BatchRen.exe
.exe windows:5 windows x86 arch:x86

1bba3ae0e3df8eb0660a7fbeb73b4d47

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipImageRotateFlip
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteGraphics
GdipCloneImage
GdipLoadImageFromFile
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetPropertyIdList
GdipGetPropertyCount
GdipGetImageRawFormat
GdipSaveImageToFile
GdipDisposeImage
GdipAlloc
GdipFree
GdiplusShutdown

kernel32

FlushFileBuffers
LockFile
UnlockFile
DuplicateHandle
GetFullPathNameW
GetCurrentProcessId
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
WritePrivateProfileStringW
GlobalFlags
SetErrorMode
GetFileAttributesW
GetFileSizeEx
RtlUnwind
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapSize
VirtualProtect
VirtualAlloc
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
LCMapStringA
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetCurrentDirectoryA
GetDriveTypeA
GetProcessHeap
SetEnvironmentVariableA
GetThreadLocale
GetModuleHandleA
InterlockedDecrement
FreeResource
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GlobalAddAtomW
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
CreateFileA
SetEndOfFile
GetVolumeInformationW
GetSystemInfo
GetFileTime
GetTempFileNameW
FileTimeToLocalFileTime
FileTimeToSystemTime
SetThreadPriority
Sleep
ExitProcess
CreateThread
TerminateThread
GlobalFree
GetCurrentProcess
SetFilePointer
GetSystemDirectoryW
GetModuleFileNameW
GetTempPathW
GetLocalTime
lstrcatW
CreateDirectoryW
FormatMessageW
LocalFree
GetFileSize
DeleteFileW
WriteFile
lstrlenA
GetVersionExW
lstrcpyW
GetWindowsDirectoryW
Beep
SetLastError
GetModuleHandleW
FindFirstFileW
FindNextFileW
FindClose
lstrlenW
WideCharToMultiByte
GetTickCount
CreateFileW
ReadFile
CloseHandle
LoadLibraryW
GetProcAddress
FreeLibrary
MoveFileW
CopyFileW
GetLastError
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetStartupInfoW

user32

IsDialogMessageW
MoveWindow
ShowWindow
DestroyMenu
CharUpperW
WindowFromPoint
GetWindowThreadProcessId
GetSysColorBrush
CharNextW
CopyAcceleratorTableW
IsRectEmpty
InvalidateRgn
MessageBeep
UnregisterClassW
RegisterClipboardFormatW
PostThreadMessageW
IsChild
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetMenu
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
DefWindowProcW
CallWindowProcW
GetMenu
GetWindowLongW
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
PostQuitMessage
GetMenuItemID
GetSubMenu
GetActiveWindow
EnableMenuItem
CheckMenuItem
SetCursor
IsCharAlphaW
LoadCursorW
ScreenToClient
ClientToScreen
DestroyCursor
wvsprintfW
GetWindowTextLengthW
GetWindowTextW
SetWindowPos
UpdateWindow
GetDesktopWindow
GetMenuState
GetMenuItemCount
AppendMenuW
DrawEdge
FillRect
DrawTextW
GetDC
GetWindow
GetClassNameW
SetWindowTextW
KillTimer
SetTimer
GetNextDlgGroupItem
PostMessageW
DrawIconEx
ReleaseCapture
GetForegroundWindow
GetParent
SetCapture
GetCapture
IsWindowVisible
PtInRect
CopyRect
ReleaseDC
GetWindowDC
FrameRect
InflateRect
DrawStateW
SetForegroundWindow
SetRect
EndPaint
BeginPaint
GrayStringW
DrawTextExW
TabbedTextOutW
SetWindowContextHelpId
MapDialogRect
GetKeyState
LoadImageW
CreateDialogIndirectParamW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
GetDlgCtrlID
WinHelpW
GetSystemMetrics
EnableWindow
DestroyIcon
GetFocus
InvalidateRect
GetClientRect
GetWindowRect
IsZoomed
IsIconic
SendMessageW
CreatePopupMenu
DrawIcon
ModifyMenuW

gdi32

CreateFontIndirectW
GetStockObject
GetDeviceCaps
CreateBitmap
GetClipBox
SetTextColor
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
GetTextExtentPointW
GetBkColor
ScaleWindowExtEx
ExtSelectClipRgn
CreateRectRgnIndirect
GetMapMode
GetTextColor
GetRgnBox
CreateFontW
MoveToEx
LineTo
CreatePen
SelectObject
CreateSolidBrush
DeleteObject
SetBkColor
SetBkMode
DeleteDC
SetPixel
BitBlt
RoundRect
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
SetWindowExtEx
GetTextExtentPoint32W
SetMapMode
RestoreDC
SaveDC
GetObjectW

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegDeleteKeyW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW

shell32

ShellExecuteW
DragFinish
DragQueryFileW
SHGetDesktopFolder
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFolderPathW
DragAcceptFiles

comctl32

ord17

shlwapi

StrToIntExW
StrRetToStrW
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CoCreateInstance
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleInitialize
OleUninitialize

oleaut32

SafeArrayDestroy
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
SysStringLen
VariantInit
SysFreeString
SysAllocString
OleLoadPicture
SysAllocStringLen
VariantClear
VariantChangeType

urlmon

URLDownloadToFileW

Sections

.text
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/BatchRenShell.dll
.dll regsvr32 windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/BatchRenShell64.dll
.dll regsvr32 windows:5 windows x64 arch:x64

083bfa0d44d122765bec9a8e78dbf64b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\output\BatchRename\BatchRenShell\x64\ReleasePro64\BatchRenShell64.pdb

Imports

kernel32

lstrcmpiW
lstrlenA
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
GetModuleFileNameW
GlobalUnlock
GlobalLock
EnterCriticalSection
LeaveCriticalSection
SetThreadLocale
GetThreadLocale
FindClose
FindNextFileW
FindFirstFileW
GetVersionExW
WideCharToMultiByte
CloseHandle
WriteFile
CreateFileW
GetModuleHandleW
lstrcatW
SetFilePointer
GetCurrentProcess
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetLastError
GetProcAddress
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringA
LCMapStringW
IsValidCodePage
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlPcToFileHeader
RtlUnwindEx
RtlLookupFunctionEntry
GetSystemTimeAsFileTime
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
GetCPInfo
GetACP
GetOEMCP

user32

DestroyMenu
CreatePopupMenu
LoadBitmapW
CharNextW
InsertMenuW
InsertMenuItemW

gdi32

DeleteObject

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW

shell32

DragQueryFileW
ShellExecuteW
SHGetFolderPathW

ole32

CoCreateInstance
StringFromGUID2
ReleaseStgMedium
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree

oleaut32

SysFreeString
SysStringLen
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
SysAllocString
LoadTypeLi
VarUI4FromStr

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/BatchRename.chm
.chm
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/PropertyTag.txt
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/使用EXIF数据在后缀添加“_EXIF版本_设备制造商”.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/使用EXIF数据在后缀添加“_照片拍摄的时间_ISO感光度”.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/删除文件中所有的“_”.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/删除文件名中“()”内的所有内容.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/删除文件名中“-”号及其前面所有内容.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/删除文件名中“-”号及其后面所有内容.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/删除文件名中所有空格.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/删除文件名左数第二个字.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/图像格式转换到 BMP.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/图像格式转换到 GIF.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/图像格式转换到 JPG 质量 75.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/图像格式转换到 PNG.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/图像格式转换到 TIF.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/在文件名前缀添加“尺寸_色彩_格式_”.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/在文件名前缀添加从 100 开始以1递增的 3 位数字.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/在文件名前缀添加从 300 开始以2递减的 3 位数字.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/在文件名前缀添加创建“月-日-时间”.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/在文件名前缀添加当前“年.月.日_时.分.秒_”.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/在文件名右数的第 2 个位置插入 4 个随机字符.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/在文件名右数的第 3 个位置插入“-示例-”.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/在文件名后缀添加以 10 递增的 5 位数字.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/在文件名后缀添加文件的 MD5 哈希值.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/在文件名后缀添加随机的 5 位数.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/在文件名的第 2 个位置插入“-示例-”.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/在文件名的第 27 个位置插入“_”加 3 位数字.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/截断文件名只保留从左边开始的 8 个字符.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/把文件名中每个单词的首字母小写化.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/把文件名中的空格替换为“_”.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/把文件名全部小写化.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/把文件名的前三个字母大写化.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/把文件名的第三个字母小写化.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/把文件扩展名“jpg”替换为“jpeg”.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/用 8 位数字替换文件名.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/用 Base64 编码加密整个文件名.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/用 Base64 编码解密整个文件名.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/用 RC4 编码加密文件名密码1234.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/用 RC4 编码解密文件名密码1234.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/用文件的修改日期重命名.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/用文件的创建日期重命名.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/调整图像垂直翻转.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/调整图像垂直镜像.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/调整图像旋转 270 度.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/调整图像旋转 90 度.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/调整图像水平翻转.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/调整图像水平镜像.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/调整图像尺寸到 320x240.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/favorite/调整图像面积缩小到原来的 60%.brr
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/汉化说明.txt
ha_BatchRenameProvCNGR/ha-batchrename pro.v3.57-rex/河源下载站-cngr.cn.url
.url

Sharing

General

Malware Config

Signatures

Files

1bba3ae0e3df8eb0660a7fbeb73b4d47

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

Sections

.text Size: 532KB - Virtual size: 531KB

.rdata Size: 133KB - Virtual size: 133KB

.data Size: 40KB - Virtual size: 56KB

.rsrc Size: 268KB - Virtual size: 267KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 84KB

UPX1 Size: 66KB - Virtual size: 68KB

.rsrc Size: 6KB - Virtual size: 8KB

Headers

File Characteristics

Sections

.text Size: 82KB - Virtual size: 81KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 9KB - Virtual size: 9KB

083bfa0d44d122765bec9a8e78dbf64b

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 91KB - Virtual size: 90KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 7KB - Virtual size: 16KB

.pdata Size: 6KB - Virtual size: 5KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 532KB - Virtual size: 531KB

.rdata
Size: 133KB - Virtual size: 133KB

.data
Size: 40KB - Virtual size: 56KB

.rsrc
Size: 268KB - Virtual size: 267KB

UPX0
Size: - Virtual size: 84KB

UPX1
Size: 66KB - Virtual size: 68KB

.rsrc
Size: 6KB - Virtual size: 8KB

.text
Size: 82KB - Virtual size: 81KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 9KB - Virtual size: 9KB

.text
Size: 91KB - Virtual size: 90KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 7KB - Virtual size: 16KB

.pdata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 1KB