b5077e5fefa6f76d93ef8c9f9be3642d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b5077e5fefa6f76d93ef8c9f9be3642d_JaffaCakes118
Size

4.7MB
MD5

b5077e5fefa6f76d93ef8c9f9be3642d
SHA1

787d6941ea12d1088eb050dc378581bee3c66f3a
SHA256

7aada01c0d4f065919df7c223e7d019f24233fcc0ecd6f570e3b56f15d592cca
SHA512

55e6b465b88b9ed763ded54813ebef2ed7f607f475b7d912119a2394a3831d987cdfa3e130c55a602ccf9d7b38e59f867bd5832b702a2a6f741b384096c34374
SSDEEP

98304:aa6Gkob7VkVC+tPWAnzeNsLDdEzvrmf7sjCYB6Y9iqRH0E9GIyrUpEfszYB:0eb7VkbXSqXdEzJs6iqRHj7yw6sYB

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 2 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/守护神/同花顺通用下单/SQLITE30.dll	acprotect
static1/unpack001/守护神/同花顺通用下单/VirusScan.dll	acprotect

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/守护神/同花顺通用下单/SQLITE30.dll	upx
static1/unpack001/守护神/同花顺通用下单/VirusScan.dll	upx

Unsigned PE 11 IoCs

Checks for missing Authenticode signature.

resource
unpack001/守护神/DelayTools.exe
unpack001/守护神/Functions.dll
unpack001/守护神/SkinPPWTL.dll
unpack001/守护神/同花顺通用下单/CntSSL.dll
unpack001/守护神/同花顺通用下单/SQLITE30.dll
unpack004/out.upx
unpack001/守护神/同花顺通用下单/hcrypt.dll
unpack001/守护神/同花顺通用下单/hssl.dll
unpack001/守护神/同花顺通用下单/nomh.dll
unpack001/守护神/同花顺通用下单/xiadan.exe
unpack001/守护神/股票自动交易守护神.exe

Files

b5077e5fefa6f76d93ef8c9f9be3642d_JaffaCakes118
.rar
守护神/DelayTools.exe
.exe windows:4 windows x86 arch:x86

4fc194db286a6c68c8db8cc61ec07d8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\智慧树\autoDeal\DelayTools\Release\DelayTools.pdb

Imports

kernel32

Sleep
GetModuleHandleA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
GetLocaleInfoA
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
守护神/Functions.dll
.dll windows:4 windows x86 arch:x86

6513a39fa6fc097dd83f53d50c52167f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\智慧树\autoDeal\Functions\Release\Functions.pdb

Imports

kernel32

GetCPInfo
GetOEMCP
RtlUnwind
ExitProcess
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
TerminateProcess
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
RaiseException
GlobalFlags
InterlockedIncrement
WritePrivateProfileStringA
SetErrorMode
lstrcatA
InterlockedDecrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
SetLastError
GlobalFree
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
CloseHandle
GlobalAddAtomA
FindResourceA
LoadResource
LockResource
SizeofResource
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemTimeAsFileTime
InterlockedExchange

user32

RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
SetWindowPos
ShowWindow
SetWindowLongA
GetDlgItem
LoadCursorA
GetSystemMetrics
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
PostMessageA
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetWindowTextA
SetWindowTextA
GetClassNameA
wsprintfA
UnregisterClassA
GetMenuItemID
DestroyMenu
PostQuitMessage
SetCursor
SendMessageA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
MessageBoxA
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMenuItemCount
GetSubMenu
SetMenuItemBitmaps
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMessageA

gdi32

DeleteDC
ExtTextOutA
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
CreateBitmap
TextOutA
RectVisible
PtVisible
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
GetDeviceCaps
Escape

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA

comctl32

ord17

shlwapi

PathFindExtensionA
PathFindFileNameA

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

LockKeyboard
LockMouse
RegMouseMessage
UnLockKeyboard
UnLockMouse
UnRegMouseMessage

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
守护神/OptionInfoList.xml
.xml
守护神/SkinPPWTL.dll
.dll windows:4 windows x86 arch:x86

8415b02065effcf3e8ba3b1c65054435

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FileTimeToDosDateTime
DeleteFileA
SetFileTime
CreateDirectoryA
SystemTimeToFileTime
ResumeThread
GetModuleHandleA
GetCurrentDirectoryA
DosDateTimeToFileTime
VirtualProtectEx
WriteProcessMemory
CreateRemoteThread
WaitForSingleObject
CloseHandle
OutputDebugStringA
DebugBreak
InterlockedDecrement
InterlockedIncrement
lstrlenA
GetTempPathA
GetFileType
GetWindowsDirectoryA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProcessHeap
HeapAlloc
HeapFree
GlobalFree
lstrcmpA
Sleep
lstrlenW
GetVersion
GetVersionExA
FindResourceExW
FindResourceExA
GetCurrentThreadId
WideCharToMultiByte
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FindNextFileA
GetLastError
GetModuleFileNameA
GetShortPathNameA
lstrcmpiA
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
lstrcpyA
FindFirstFileA
FindClose
lstrcpynA
GetFileTime
GetFileSize
GetFileAttributesA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
MulDiv
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
GlobalAlloc
GlobalLock
GlobalUnlock
VirtualProtect
VirtualQuery
GetCurrentProcess
LoadLibraryA
FreeLibrary
SetLastError
CreateProcessW
SuspendThread
GetThreadContext
FlushInstructionCache
SetThreadContext
CreateProcessA
GetProcAddress
VirtualAllocEx
GetFileInformationByHandle
GetLocalTime

user32

GetCursorPos
KillTimer
RemoveMenu
UpdateWindow
InsertMenuA
GetDlgItem
GetWindowTextA
CheckMenuItem
GetForegroundWindow
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
IntersectRect
IsRectEmpty
EqualRect
GetClientRect
GetSysColor
FindWindowExA
SetPropA
GetMenu
CreateWindowExA
DestroyMenu
EnableScrollBar
GetScrollInfo
EndPaint
IsWindow
SetScrollPos
SetScrollInfo
GetWindowRect
TrackPopupMenuEx
OffsetRect
InflateRect
CopyRect
GetScrollPos
GetScrollRange
GetDlgCtrlID
MoveWindow
GetWindowDC
GetMenuItemInfoA
GetSubMenu
GetMenuItemID
SetRectEmpty
PtInRect
SetTimer
SetCursor
IsWindowEnabled
LoadCursorA
GetMenuItemCount
SetScrollRange
CharLowerA
GetSystemMetrics
DrawIconEx
CharUpperA
GetDesktopWindow
GetDC
ReleaseDC
LoadCursorFromFileA
LoadImageA
LoadStringA
CharNextA
wvsprintfA
ShowScrollBar
GetSysColorBrush
DrawFrameControl
SetWindowRgn
SetMenu
DeleteMenu
InsertMenuItemA
InsertMenuItemW
InsertMenuW
SetWindowPos
LoadStringW
DrawIcon
LoadIconA
LoadIconW
LoadImageW
LoadBitmapA
LoadBitmapW
TrackPopupMenu
DrawTextA
DrawTextW
DrawTextExA
DrawTextExW
MessageBoxIndirectA
WindowFromDC
MessageBoxA
SetMenuItemInfoA
AppendMenuA
GetMenuStringA
CreatePopupMenu
IsMenu
SendMessageTimeoutA
GetIconInfo
wsprintfA
ClientToScreen
CallWindowProcA
GetFocus
RedrawWindow
GetWindowTextLengthA
DestroyWindow
SetWindowTextA
DestroyIcon
GetMessagePos
ReleaseCapture
SetCapture
RemovePropA
FillRect
SetMenuInfo
GetMenuState
UnionRect
GetMenuItemRect
GetMenuDefaultItem
SetRect
GetCapture
WindowFromPoint
ScreenToClient
DrawFocusRect
IsWindowVisible
GetAsyncKeyState
MapWindowPoints
MonitorFromPoint
GetMonitorInfoA
EnableMenuItem
GetPropA
SetWindowLongA
GetWindow
GetClassLongA
SendMessageA
BeginPaint
GetParent
InvalidateRect
GetClassNameA
GetWindowLongA
DrawStateA
CreateIconIndirect
ModifyMenuA
PostMessageA
GetSystemMenu
SystemParametersInfoA
ShowWindow
GetMenuCheckMarkDimensions

gdi32

SetBkColor
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
SetPixel
GetPixel
SetWindowOrgEx
SetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
SetMapMode
GetObjectA
ExtCreateRegion
GetDIBits
CreateICA
GetClipBox
GetCurrentObject
BitBlt
SetBoundsRect
SetTextColor
SetBkMode
GetTextColor
GetBkMode
GetBkColor
PlgBlt
CreateSolidBrush
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextExtentPointW
StretchBlt
SetStretchBltMode
CreateBitmap
SetPixelV
CreateDIBSection
PatBlt
SetBrushOrgEx
CreatePatternBrush
CreateBitmapIndirect
GetNearestColor
RoundRect
CreatePen
CreateFontIndirectA
RestoreDC
ExcludeClipRect
SaveDC
CombineRgn
CreateRectRgnIndirect
Rectangle
OffsetRgn
CreateRectRgn
LineTo
MoveToEx
DPtoLP
TextOutA
SelectClipRgn
GetViewportOrgEx
GetWindowOrgEx
SetTextAlign
GetCharWidthA
CreateFontA
RealizePalette
SelectPalette
CreateDIBitmap
SetDIBitsToDevice
RectVisible
StretchDIBits
GetStockObject
DeleteObject
ExtTextOutA
SelectObject
DeleteDC

comdlg32

ChooseColorA
ChooseColorW
GetFileTitleA

advapi32

RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA

shell32

ShellExecuteA

ole32

CreateStreamOnHGlobal
CoCreateGuid

oleaut32

OleLoadPicture

comctl32

ImageList_Destroy
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_Copy
ImageList_Duplicate
ImageList_DrawIndirect
_TrackMouseEvent
ImageList_GetIcon
ImageList_Draw

msimg32

AlphaBlend

msvcrt

_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_CxxThrowException
strncpy
getc
fputc
fflush
ftell
fseek
fwrite
fread
realloc
fopen
fclose
div
sqrt
calloc
_mbsnbcpy
ceil
floor
malloc
free
strchr
strftime
_ismbblead
localtime
gmtime
time
mktime
sprintf
sin
cos
fabs
abs
_ftol
__RTDynamicCast
wcsncpy
toupper
_purecall
_mbschr
_mbsicmp
atof
_splitpath
_fullpath
_mbsrchr
_mbsinc
_mbsstr
memcmp
strcmp
_except_handler3
strcpy
strcat
memset
strlen
memmove
_ismbcspace
_ismbcdigit
wcslen
memcpy
atoi
_mbscmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_EH_prolog
__CxxFrameHandler
_stricmp
_tzset
_adjust_fdiv

msvcp60

??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z

Exports

Exports

??0CSkinIniFile@@QAE@ABV0@@Z
??0CSkinIniFile@@QAE@VCString@WTL@@@Z
??0CSkinIniFile@@QAE@XZ
??1CSkinIniFile@@UAE@XZ
??4CSkinIniFile@@QAEAAV0@ABV0@@Z
??_7CSkinIniFile@@6B@
?DeleteKey@CSkinIniFile@@QAE_NABVCString@WTL@@@Z
?DeleteValue@CSkinIniFile@@QAE_NABVCString@WTL@@0@Z
?FindKey@CSkinIniFile@@QAEHABVCString@WTL@@@Z
?FindValue@CSkinIniFile@@QAEHHABVCString@WTL@@@Z
?GetNumKeys@CSkinIniFile@@QAEHXZ
?GetNumValues@CSkinIniFile@@QAEHVCString@WTL@@@Z
?GetValue@CSkinIniFile@@QAE?AVCString@WTL@@ABV23@00@Z
?GetValue@CSkinIniFile@@QAE?AVCString@WTL@@ABV23@HAAV23@@Z
?GetValueF@CSkinIniFile@@QAENABVCString@WTL@@0@Z
?GetValueI@CSkinIniFile@@QAEHABVCString@WTL@@0H@Z
?ReadFile@CSkinIniFile@@QAE_NABVCString@WTL@@@Z
?ReadFile@CSkinIniFile@@QAE_NPAEH@Z
?ReadProfile@CSkinIniFile@@QAEXABVCString@WTL@@@Z
?Reset@CSkinIniFile@@QAEXXZ
?SetPath@CSkinIniFile@@QAEXABVCString@WTL@@@Z
?SetValue@CSkinIniFile@@QAE_NABVCString@WTL@@000_N@Z
?SetValueF@CSkinIniFile@@QAE_NABVCString@WTL@@0N_N@Z
?SetValueI@CSkinIniFile@@QAE_NABVCString@WTL@@0HH_N@Z
?WriteFile@CSkinIniFile@@QAEXXZ
?getline2@CSkinIniFile@@QAEHVCString@WTL@@AAV23@@Z
?getline@CSkinIniFile@@QAEAAV?$basic_istream@DU?$char_traits@D@std@@@std@@AAV23@AAVCString@WTL@@@Z
?skinppDrawSkinObject@@YAXPAUHDC__@@UtagRECT@@W4DRAWTYPE@@H@Z
?skinppGetBitmapRes@@YAPAUHBITMAP__@@PBD@Z
?skinppGetBitmapResRect@@YAHPBDAAH111@Z
?skinppGetBitmapSize@@YAXPAUHBITMAP__@@AAH1@Z
?skinppGetImageListFromID@@YAPAU_IMAGELIST@@H@Z
?skinppGetMainFrameMenu@@YAPAUHMENU__@@XZ
?skinppGetMultiLangMenu@@YAPAUHMENU__@@XZ
?skinppGetResFromID@@YAPAUHBITMAP__@@W4SKINOBJTYPE@@HH@Z
?skinppGetResFromID@@YAPAXPAU_ResourceInfo@@@Z
?skinppGetSkinResource@@YAPAEPBDAAH@Z
?skinppLoadLanguageStr@@YAHPBDPADH@Z
?skinppLoadSkinFromRes@@YAHPAUHINSTANCE__@@PBD1PAD@Z
?skinppLoadString@@YAHHPADH@Z
?skinppSetBackgroundDC@@YAXPAUHWND__@@PAUHDC__@@@Z
?skinppSetButtonSounds@@YAXPAUHWND__@@PBD1@Z
?skinppSetButtonTooltip@@YAXPAUHWND__@@PBD@Z
?skinppSetCustomDraw@@YAXPAUHWND__@@H@Z
?skinppSetDialogBkClipRgn@@YAXPAUHWND__@@HH@Z
?skinppSetDialogEraseBkgnd@@YAXPAUHWND__@@H@Z
?skinppSetDrawMenu@@YAXPAUHMENU__@@H@Z
?skinppSetMenuItemImage@@YAHIPAU_IMAGELIST@@H@Z
?skinppSetMenuSkinObjectID@@YAXPAUHWND__@@H@Z
?skinppSetNoDrawText@@YAXPAUHWND__@@H@Z
?skinppSetSkinOwnerMenu@@YAXH@Z
?skinppSetStaticFont@@YAHHPBDH@Z
?skinppSetStaticTextAlign@@YAHHH@Z
?skinppSetStaticTextColor@@YAHHK@Z
?skinppSetStatusBarTransparent@@YAXPAUHWND__@@H@Z
?skinppSetTabItemImageID@@YAXPAUHWND__@@HH@Z
skinppExitSkin
skinppGetDefaultSysColor
skinppGetIconFromRes
skinppGetSkinSysColor
skinppInitializeSkin
skinppLoadSkin
skinppRemoveSkin
skinppRemoveSkinHwnd
skinppSetFreeDlgID
skinppSetListBoxItemDrawInfo
skinppSetListHeaderCtrlItemID
skinppSetListHeaderSortInfo
skinppSetNoSkinHwnd
skinppSetSkinHwnd
skinppSetSkinResID
skinppSetTrackPopupMenuID
skinppSetWindowResID

Sections

.text
Size: 348KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HookSec
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
守护神/StockInfoList.xml
.xml
守护神/StockNumenConfig.xml
.xml
守护神/skin/AlphaOS.ssk
守护神/skin/MAC.ssk
.zip
Aqua_104.bmp
Aqua_68.bmp
Aqua_72.bmp
MAC.uis
Thumbs.db
aqua_1.bmp
aqua_10.bmp
aqua_106.tga
aqua_108.tga
aqua_11.bmp
aqua_12.bmp
aqua_13.bmp
aqua_14.bmp
aqua_15.bmp
aqua_16.bmp
aqua_17.bmp
aqua_18.bmp
aqua_19.bmp
aqua_2.bmp
aqua_20.bmp
aqua_21.tga
aqua_23.bmp
aqua_24.bmp
aqua_25.bmp
aqua_25.tga
aqua_26.tga
aqua_27.bmp
aqua_29.bmp
aqua_3.bmp
aqua_30.bmp
aqua_31.tga
aqua_32.tga
aqua_33.tga
aqua_34.tga
aqua_35.tga
aqua_36.tga
aqua_37.tga
aqua_38.tga
aqua_40.tga
aqua_41.tga
aqua_5.bmp
aqua_6.bmp
aqua_62.bmp
aqua_63.bmp
aqua_64.bmp
aqua_65.bmp
aqua_69.bmp
aqua_70.bmp
aqua_71.bmp
aqua_75.bmp
aqua_76.bmp
aqua_77.bmp
aqua_8.tga
VC.bmp
Ŀ¼.bmp
ͼ.bmp
̬л(1).bmp
.bmp
.bmp
.bmp
.bmp
ҳ.bmp
守护神/skin/SlickOS2.ssk
守护神/skin/Steel.ssk
守护神/skin/XP-Luna.ssk
守护神/skin/avfone.ssk
守护神/skin/blue.ssk
.zip
blank.bmp
blue.uis
border.bmp
borderhedder.bmp
checkbox.tga
checkboxnew.bmp
classicclosebutton.tga
classicclosebuttonglyph.tga
classicmaxbuttonglyph.tga
classicrestorebuttonglyph.tga
close.bmp
closebutton.bmp
closetoolbutton.tga
closetoolbuttonglyph.tga
comboboxborder.bmp
comboboxbuttons.tga
comboboxdropdownback.bmp
comboboxdropdownbutton.bmp
comboboxdropdownglyph.bmp
extraimages.bmp
framebottom.bmp
frameleft.bmp
frameright.bmp
frametop.bmp
groupboxedge.bmp
handelold.bmp
help.bmp
helpcenter.bmp
helpleft.bmp
listview.bmp
listviewheader.bmp
main button.tga
max.bmp
maxamize.bmp
mdibuttons.bmp
menubackground.bmp
menubar.bmp
menubarback.bmp
menubaritem.bmp
menubaritem.tga
menuitem.tga
menuitembackgorund.tga
midibuttons.bmp
min.bmp
mincenter.bmp
minleft.bmp
personalitymenuborders.bmp
progressbar.bmp
pushbutton.tga
radiel.tga
radiobuttonnew.tga
rebar.bmp
rebargripper.bmp
restor.bmp
roleup.bmp
roll.bmp
scrollbararrows.bmp
scrollbararrowsglyph.bmp
scrollbarshafthorz.bmp
scrollbarshaftvert.bmp
scrollbarthumbbtnhorz.bmp
scrollbarthumbbtnvert.bmp
scroolbuttons.bmp
scroolhorbars.bmp
scroolhorgrippers.bmp
scroolvertbars.bmp
scroolvertgrippers.bmp
spinleftright.bmp
spinupdown.bmp
spinupdownhorizontal.bmp
spinupdownhorizontalglyph.bmp
spinupdownvertical.bmp
spinupdownverticalglyph.bmp
statusbar.bmp
statuspane.bmp
sunkedge.bmp
system.bmp
tabborder.bmp
tabitem.bmp
tabpane.bmp
tabs.tga
toolbarbitmap.bmp
toolbarbutton.bmp
toolbarbuttons.tga
trackbardoup.tga
trackbardown.tga
trackbarleft.tga
trackbarright.tga
trackbarthumbdown.tga
trackbarthumbvert.tga
trackbartrack.bmp
trackbartrackvert.bmp
trackbartrckhor.bmp
trackslidersidetoside.tga
tracksliderupdown.tga
trackupdown.bmp
windowframebottomuis2.bmp
windowframeleftuis2.bmp
windowframerightuis2.bmp
windowframetoolcaption.bmp
windowframetoolhorizontal.bmp
windowframetoolvertical.bmp
windowframetopuis2.bmp
windowmincaption.bmp
.bmp
ϵͳ.bmp
.bmp
.bmp
Ŀ¼.bmp
.bmp
̬л.bmp
ر.bmp
.bmp
ϵ.bmp
.bmp
.bmp
ҳ.bmp
С.bmp
守护神/skin/spring.ssk
守护神/skin/vladstudio.ssk
守护神/同花顺通用下单/CA/CFCA.cer
守护神/同花顺通用下单/CA/CFCA_RCA1.cer
守护神/同花顺通用下单/CA/CFCA_RCA2.cer
守护神/同花顺通用下单/CA/OwnCA.cer
守护神/同花顺通用下单/CA/TestCA.cer
守护神/同花顺通用下单/CA/cfca rca.cer
守护神/同花顺通用下单/CA/cfca root ca.cer
守护神/同花顺通用下单/CA/chinastock.cer
守护神/同花顺通用下单/CA/dongfang.cer
守护神/同花顺通用下单/CA/dyzq.cer
守护神/同花顺通用下单/CA/ebsca.cer
守护神/同花顺通用下单/CA/hexin.cer
守护神/同花顺通用下单/CA/test.cer
守护神/同花顺通用下单/CA/testht.cer
守护神/同花顺通用下单/CA/wlzq.cer
守护神/同花顺通用下单/CntSSL.dll
.dll regsvr32 windows:4 windows x86 arch:x86

193689a7f9d0c2557e52b512cd6986bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

hssl

hsslEnd
hsslInit

hcrypt

rtCheckPrintableString
hcryptEnd
hcryptInit
pkcs12ExportKey
osWCSToMBS
pemEncodeCertRequest
pkcs10Create
pkcCtrl
pkcCreate
osMBSToWCS
pkcDestroy
certDestroy
certGetCertDER
certGetPKCContext
certDecode
certCreate
pemDecodeCert

mfc42u

ord5193
ord2388
ord1089
ord5727
ord3917
ord2546
ord2504
ord4692
ord5296
ord3341
ord4074
ord2977
ord3142
ord3254
ord4459
ord5298
ord5303
ord2980
ord3076
ord2971
ord3825
ord5285
ord3820
ord3074
ord5710
ord3826
ord4418
ord3733
ord561
ord825
ord3948
ord2717
ord1128
ord6466
ord823
ord540
ord800
ord6155
ord537
ord3122
ord3611
ord3658
ord665
ord5647
ord1971
ord6381
ord5180
ord925
ord815
ord350
ord354
ord860
ord535
ord4480
ord6371
ord4075
ord4269
ord4616
ord3131
ord3257
ord861
ord1115
ord1173
ord1250
ord1571
ord600
ord826
ord1563
ord1194
ord1248
ord342
ord1179
ord1240
ord1165
ord1568
ord1570
ord269

msvcrt

wcslen
memcmp
??1type_info@@UAE@XZ
strcpy
__dllonexit
strlen
_adjust_fdiv
wcschr
free
malloc
_initterm
__CxxFrameHandler
?terminate@@YAXXZ
_except_handler3
wcstok
_onexit
memcpy
_purecall
wcscat

kernel32

DeleteCriticalSection
LocalAlloc
LocalFree
FindFirstFileW
GetLastError
CreateDirectoryW
FindClose
CreateFileW
CloseHandle
GetPrivateProfileStringW
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
LeaveCriticalSection
lstrlenW
WritePrivateProfileStringW
GetSystemDirectoryW

user32

MessageBoxW

oleaut32

SysStringLen
LoadRegTypeLi
SysFreeString

atl

ord57
ord30
ord58
ord32
ord23
ord18
ord15
ord21
ord16

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
守护神/同花顺通用下单/SQLITE30.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_apis
sqlite3_auto_extension
sqlite3_bind_blob
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_complete
sqlite3_complete16
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_data_count
sqlite3_db_handle
sqlite3_declare_vtab
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_exec
sqlite3_expired
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_finalize
sqlite3_free
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_interrupt
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_load_extension
sqlite3_malloc
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_held
sqlite3_mutex_leave
sqlite3_mutex_notheld
sqlite3_mutex_try
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare_v2
sqlite3_profile
sqlite3_progress_handler
sqlite3_realloc
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_rollback_hook
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_sleep
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_step
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_trace
sqlite3_transfer_bindings
sqlite3_update_hook
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_numeric_type
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 159KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 260KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
守护神/同花顺通用下单/VirusScan.dat
守护神/同花顺通用下单/VirusScan.dll
.dll windows:4 windows x86 arch:x86

Code Sign

05:5b:a2:81
Certificate

Issuer

CN=产品根证书,OU=产品证书,O=核新软件技术有限公司,C=CN

Not Before

30/10/2001, 10:33

Not After

30/10/2036, 10:33

Subject

CN=产品根证书,OU=产品证书,O=核新软件技术有限公司,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

05:63:63:99
Certificate

Issuer

CN=产品根证书,OU=产品证书,O=核新软件技术有限公司,C=CN

Not Before

05/11/2001, 07:45

Not After

05/11/2031, 07:45

Subject

CN=CodeSignCert2,OU=产品证书,O=核新软件技术有限公司,C=CN

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

a9:8e:42:17:cd:0a:16:a5:64:d5:20:d0:7c:78:3b:35:5e:1d:da:d6
Signer

Actual PE Digest

a9:8e:42:17:cd:0a:16:a5:64:d5:20:d0:7c:78:3b:35:5e:1d:da:d6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DoVirusScan
DoVirusScanNew

Sections

UPX0
Size: - Virtual size: 256KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 160KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
守护神/同花顺通用下单/hcrypt.dll
.dll windows:4 windows x86 arch:x86

6af241710c687bf424c4ecc69f6ebada

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetCurrentProcessId
GlobalMemoryStatus
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
GetTickCount
QueryPerformanceCounter
GetSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
CreateMutexA
WaitForSingleObject
ReleaseMutex
CreateEventA
SetEvent
ResetEvent
GetLastError
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
GetTimeZoneInformation
GetLocalTime
RtlUnwind
GetCommandLineA
GetVersion
HeapReAlloc
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetStringTypeA
GetStringTypeW
SetFilePointer
InterlockedDecrement
InterlockedIncrement
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
Sleep
SetConsoleCtrlHandler
LCMapStringA
LCMapStringW
FlushFileBuffers
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW

Exports

Exports

asn1D_PKIAccessDescription
asn1D_PKIAdministrationDomainName
asn1D_PKIAlgorithmIdentifier
asn1D_PKIAttribute
asn1D_PKIAttributeTypeAndValue
asn1D_PKIAttribute_values
asn1D_PKIAttributes
asn1D_PKIAttributesSyntax
asn1D_PKIAuthenticatedSafe
asn1D_PKIAuthorityInfoAccessSyntax
asn1D_PKIAuthorityKeyIdentifier
asn1D_PKIBIGINT
asn1D_PKIBaseCRLNumber
asn1D_PKIBaseDistance
asn1D_PKIBasicConstraintsSyntax
asn1D_PKIBuiltInDomainDefinedAttribute
asn1D_PKIBuiltInDomainDefinedAttributes
asn1D_PKIBuiltInStandardAttributes
asn1D_PKICPSuri
asn1D_PKICRLBag
asn1D_PKICRLDistPointsSyntax
asn1D_PKICRLExtension
asn1D_PKICRLExtensions
asn1D_PKICRLNumber
asn1D_PKICRLReason
asn1D_PKICRLSequence
asn1D_PKICertBag
asn1D_PKICertPolicyId
asn1D_PKICertificate
asn1D_PKICertificateList
asn1D_PKICertificateList_toBeSigned
asn1D_PKICertificateList_toBeSigned1
asn1D_PKICertificateList_toBeSigned_revokedCertificates_element
asn1D_PKICertificatePoliciesSyntax
asn1D_PKICertificateRevocationLists
asn1D_PKICertificateSerialNumber
asn1D_PKICertificate_toBeSigned
asn1D_PKICertificate_toBeSigned1
asn1D_PKICertificates
asn1D_PKICertificationRequest
asn1D_PKICertificationRequestInfo
asn1D_PKICertificationRequestInfo_version
asn1D_PKICommonName
asn1D_PKIContentEncryptionAlgorithmIdentifier
asn1D_PKIContentInfo
asn1D_PKIContentType
asn1D_PKICountryName
asn1D_PKIDHParameter
asn1D_PKIData
asn1D_PKIDigest
asn1D_PKIDigestAlgorithmIdentifier
asn1D_PKIDigestAlgorithmIdentifiers
asn1D_PKIDigestEncryptionAlgorithmIdentifier
asn1D_PKIDigestInfo
asn1D_PKIDigestedData
asn1D_PKIDigestedData_version
asn1D_PKIDisplayText
asn1D_PKIDistributionPoint
asn1D_PKIDistributionPointName
asn1D_PKIDomainParameters
asn1D_PKIDss_Parms
asn1D_PKIDss_Sig_Value
asn1D_PKIEDIPartyName
asn1D_PKIEDIPartyName_nameAssigner
asn1D_PKIEDIPartyName_partyName
asn1D_PKIEncryptedContent
asn1D_PKIEncryptedContentInfo
asn1D_PKIEncryptedData
asn1D_PKIEncryptedData_version
asn1D_PKIEncryptedDigest
asn1D_PKIEncryptedKey
asn1D_PKIEncryptedPrivateKeyInfo
asn1D_PKIEntryExtension
asn1D_PKIEntryExtensions
asn1D_PKIEnvelopedData
asn1D_PKIEnvelopedData_version
asn1D_PKIExtendedCertificate
asn1D_PKIExtendedCertificateOrCertificate
asn1D_PKIExtendedCertificatesAndCertificates
asn1D_PKIExtendedNetworkAddress
asn1D_PKIExtendedNetworkAddress_e163_4_address
asn1D_PKIExtension
asn1D_PKIExtensionAttribute
asn1D_PKIExtensionAttributes
asn1D_PKIExtensionORAddressComponents
asn1D_PKIExtensionPhysicalDeliveryAddressComponents
asn1D_PKIExtensions
asn1D_PKIGeneralName
asn1D_PKIGeneralName_otherName
asn1D_PKIGeneralNames
asn1D_PKIGeneralSubtree
asn1D_PKIGeneralSubtrees
asn1D_PKIHoldInstruction
asn1D_PKIID
asn1D_PKIIssuerAndSerialNumber
asn1D_PKIIssuingDistPointSyntax
asn1D_PKIKeyBag
asn1D_PKIKeyEncryptionAlgorithmIdentifier
asn1D_PKIKeyIdentifier
asn1D_PKIKeyPurposeId
asn1D_PKIKeyUsage
asn1D_PKILocalPostalAttributes
asn1D_PKIMacData
asn1D_PKIMessageDigest
asn1D_PKIName
asn1D_PKINameConstraintsSyntax
asn1D_PKINetworkAddress
asn1D_PKINoticeReference
asn1D_PKINoticeReference_noticeNumbers
asn1D_PKINumericUserIdentifier
asn1D_PKIORAddress
asn1D_PKIOrganizationName
asn1D_PKIOrganizationalUnitName
asn1D_PKIOrganizationalUnitNames
asn1D_PKIPBEParameter
asn1D_PKIPBEParameter_salt
asn1D_PKIPDSName
asn1D_PKIPDSParameter
asn1D_PKIPFX
asn1D_PKIPFX_version
asn1D_PKIPHGString
asn1D_PKIPKCS12Attribute
asn1D_PKIPKCS12Attribute_attrValues
asn1D_PKIPKCS8ShroudedKeyBag
asn1D_PKIPersonalName
asn1D_PKIPhysicalDeliveryCountryName
asn1D_PKIPhysicalDeliveryOfficeName
asn1D_PKIPhysicalDeliveryOfficeNumber
asn1D_PKIPhysicalDeliveryOrganizationName
asn1D_PKIPhysicalDeliveryPersonalName
asn1D_PKIPolicyConstraintsSyntax
asn1D_PKIPolicyInformation
asn1D_PKIPolicyInformation_policyQualifiers
asn1D_PKIPolicyMappingsSyntax
asn1D_PKIPolicyMappingsSyntax_element
asn1D_PKIPolicyQualifierInfo
asn1D_PKIPostOfficeBoxAddress
asn1D_PKIPostalCode
asn1D_PKIPosteRestanteAddress
asn1D_PKIPresentationAddress
asn1D_PKIPresentationAddress_nAddresses
asn1D_PKIPrivateDomainName
asn1D_PKIPrivateKey
asn1D_PKIPrivateKeyInfo
asn1D_PKIPrivateKeyInfo_version
asn1D_PKIPrivateKeyUsagePeriod
asn1D_PKIRDNSequence
asn1D_PKIRSAPrivateKey
asn1D_PKIRSAPrivateKey_version
asn1D_PKIRSAPublicKey
asn1D_PKIReasonFlags
asn1D_PKIRecipientInfo
asn1D_PKIRecipientInfo_version
asn1D_PKIRecipientInfos
asn1D_PKIRelativeDistinguishedName
asn1D_PKISafeBag
asn1D_PKISafeContents
asn1D_PKISecretBag
asn1D_PKISignedAndEnvelopedData
asn1D_PKISignedAndEnvelopedData_certificates
asn1D_PKISignedAndEnvelopedData_crls
asn1D_PKISignedAndEnvelopedData_version
asn1D_PKISignedData
asn1D_PKISignedData_certificates
asn1D_PKISignedData_crls
asn1D_PKISignedData_version
asn1D_PKISignerInfo
asn1D_PKISignerInfo_authenticatedAttributes
asn1D_PKISignerInfo_unauthenticatedAttributes
asn1D_PKISignerInfo_version
asn1D_PKISignerInfos
asn1D_PKISigningTime
asn1D_PKISkipCerts
asn1D_PKIStreetAddress
asn1D_PKISubjectKeyIdentifier
asn1D_PKISubjectPublicKeyInfo
asn1D_PKITeletexCommonName
asn1D_PKITeletexDomainDefinedAttribute
asn1D_PKITeletexDomainDefinedAttributes
asn1D_PKITeletexOrganizationName
asn1D_PKITeletexOrganizationalUnitName
asn1D_PKITeletexOrganizationalUnitNames
asn1D_PKITeletexPersonalName
asn1D_PKITerminalIdentifier
asn1D_PKITerminalType
asn1D_PKITime
asn1D_PKIToBeSigned
asn1D_PKIUnformattedPostalAddress
asn1D_PKIUnformattedPostalAddress_printable_address
asn1D_PKIUniqueIdentifier
asn1D_PKIUniquePostalName
asn1D_PKIUserNotice
asn1D_PKIValidationParms
asn1D_PKIValidity
asn1D_PKIVersion
asn1D_PKIX121Address
asn1D_PKI_EXTENSION_ATTRIBUTE_id
asn1D_PKI_SeqOfOBJID
asn1D_PKI_SeqOfPKIAttribute
asn1D_PKI_SeqOfPKICertificateList_toBeSigned_revokedCertificates_element
asn1D_PKI_SeqOfPKIDigestAlgorithmIdentifier
asn1D_PKI_SeqOfPKIRecipientInfo
asn1D_PKI_SeqOfPKISignerInfo
asn1D_PKI_SetOfPKIAttribute
asn1D_PKI_SetOfPKIDigestAlgorithmIdentifier
asn1D_PKI_SetOfPKIPKCS12Attribute
asn1D_PKI_SetOfPKIRecipientInfo
asn1D_PKI_SetOfPKISignerInfo
asn1E_PKIAccessDescription
asn1E_PKIAdministrationDomainName
asn1E_PKIAlgorithmIdentifier
asn1E_PKIAttribute
asn1E_PKIAttributeTypeAndValue
asn1E_PKIAttribute_values
asn1E_PKIAttributes
asn1E_PKIAttributesSyntax
asn1E_PKIAuthenticatedSafe
asn1E_PKIAuthorityInfoAccessSyntax
asn1E_PKIAuthorityKeyIdentifier
asn1E_PKIBIGINT
asn1E_PKIBaseCRLNumber
asn1E_PKIBaseDistance
asn1E_PKIBasicConstraintsSyntax
asn1E_PKIBuiltInDomainDefinedAttribute
asn1E_PKIBuiltInDomainDefinedAttributes
asn1E_PKIBuiltInStandardAttributes
asn1E_PKICPSuri
asn1E_PKICRLBag
asn1E_PKICRLDistPointsSyntax
asn1E_PKICRLExtension
asn1E_PKICRLExtensions
asn1E_PKICRLNumber
asn1E_PKICRLReason
asn1E_PKICRLSequence
asn1E_PKICertBag
asn1E_PKICertPolicyId
asn1E_PKICertificate
asn1E_PKICertificateList
asn1E_PKICertificateList_toBeSigned
asn1E_PKICertificateList_toBeSigned1
asn1E_PKICertificateList_toBeSigned_revokedCertificates_element
asn1E_PKICertificatePoliciesSyntax
asn1E_PKICertificateRevocationLists
asn1E_PKICertificateSerialNumber
asn1E_PKICertificate_toBeSigned
asn1E_PKICertificate_toBeSigned1
asn1E_PKICertificates
asn1E_PKICertificationRequest
asn1E_PKICertificationRequestInfo
asn1E_PKICertificationRequestInfo_version
asn1E_PKICommonName
asn1E_PKIContentEncryptionAlgorithmIdentifier
asn1E_PKIContentInfo
asn1E_PKIContentType
asn1E_PKICountryName
asn1E_PKIDHParameter
asn1E_PKIData
asn1E_PKIDigest
asn1E_PKIDigestAlgorithmIdentifier
asn1E_PKIDigestAlgorithmIdentifiers
asn1E_PKIDigestEncryptionAlgorithmIdentifier
asn1E_PKIDigestInfo
asn1E_PKIDigestedData
asn1E_PKIDigestedData_version
asn1E_PKIDisplayText
asn1E_PKIDistributionPoint
asn1E_PKIDistributionPointName
asn1E_PKIDomainParameters
asn1E_PKIDss_Parms
asn1E_PKIDss_Sig_Value
asn1E_PKIEDIPartyName
asn1E_PKIEDIPartyName_nameAssigner
asn1E_PKIEDIPartyName_partyName
asn1E_PKIEncryptedContent
asn1E_PKIEncryptedContentInfo
asn1E_PKIEncryptedData
asn1E_PKIEncryptedData_version
asn1E_PKIEncryptedDigest
asn1E_PKIEncryptedKey
asn1E_PKIEncryptedPrivateKeyInfo
asn1E_PKIEntryExtension
asn1E_PKIEntryExtensions
asn1E_PKIEnvelopedData
asn1E_PKIEnvelopedData_version
asn1E_PKIExtendedCertificate
asn1E_PKIExtendedCertificateOrCertificate
asn1E_PKIExtendedCertificatesAndCertificates
asn1E_PKIExtendedNetworkAddress
asn1E_PKIExtendedNetworkAddress_e163_4_address
asn1E_PKIExtension
asn1E_PKIExtensionAttribute
asn1E_PKIExtensionAttributes
asn1E_PKIExtensionORAddressComponents
asn1E_PKIExtensionPhysicalDeliveryAddressComponents
asn1E_PKIExtensions
asn1E_PKIGeneralName
asn1E_PKIGeneralName_otherName
asn1E_PKIGeneralNames
asn1E_PKIGeneralSubtree
asn1E_PKIGeneralSubtrees
asn1E_PKIHoldInstruction
asn1E_PKIID
asn1E_PKIIssuerAndSerialNumber
asn1E_PKIIssuingDistPointSyntax
asn1E_PKIKeyBag
asn1E_PKIKeyEncryptionAlgorithmIdentifier
asn1E_PKIKeyIdentifier
asn1E_PKIKeyPurposeId
asn1E_PKIKeyUsage
asn1E_PKILocalPostalAttributes
asn1E_PKIMacData
asn1E_PKIMessageDigest
asn1E_PKIName
asn1E_PKINameConstraintsSyntax
asn1E_PKINetworkAddress
asn1E_PKINoticeReference
asn1E_PKINoticeReference_noticeNumbers
asn1E_PKINumericUserIdentifier
asn1E_PKIORAddress
asn1E_PKIOrganizationName
asn1E_PKIOrganizationalUnitName
asn1E_PKIOrganizationalUnitNames
asn1E_PKIPBEParameter
asn1E_PKIPBEParameter_salt
asn1E_PKIPDSName
asn1E_PKIPDSParameter
asn1E_PKIPFX
asn1E_PKIPFX_version
asn1E_PKIPHGString
asn1E_PKIPKCS12Attribute
asn1E_PKIPKCS12Attribute_attrValues
asn1E_PKIPKCS8ShroudedKeyBag
asn1E_PKIPersonalName
asn1E_PKIPhysicalDeliveryCountryName
asn1E_PKIPhysicalDeliveryOfficeName
asn1E_PKIPhysicalDeliveryOfficeNumber
asn1E_PKIPhysicalDeliveryOrganizationName
asn1E_PKIPhysicalDeliveryPersonalName
asn1E_PKIPolicyConstraintsSyntax
asn1E_PKIPolicyInformation
asn1E_PKIPolicyInformation_policyQualifiers
asn1E_PKIPolicyMappingsSyntax
asn1E_PKIPolicyMappingsSyntax_element
asn1E_PKIPolicyQualifierInfo
asn1E_PKIPostOfficeBoxAddress
asn1E_PKIPostalCode
asn1E_PKIPosteRestanteAddress
asn1E_PKIPresentationAddress
asn1E_PKIPresentationAddress_nAddresses
asn1E_PKIPrivateDomainName
asn1E_PKIPrivateKey
asn1E_PKIPrivateKeyInfo
asn1E_PKIPrivateKeyInfo_version
asn1E_PKIPrivateKeyUsagePeriod
asn1E_PKIRDNSequence
asn1E_PKIRSAPrivateKey
asn1E_PKIRSAPrivateKey_version
asn1E_PKIRSAPublicKey
asn1E_PKIReasonFlags
asn1E_PKIRecipientInfo
asn1E_PKIRecipientInfo_version
asn1E_PKIRecipientInfos
asn1E_PKIRelativeDistinguishedName
asn1E_PKISafeBag
asn1E_PKISafeContents
asn1E_PKISecretBag
asn1E_PKISignedAndEnvelopedData
asn1E_PKISignedAndEnvelopedData_certificates
asn1E_PKISignedAndEnvelopedData_crls
asn1E_PKISignedAndEnvelopedData_version
asn1E_PKISignedData
asn1E_PKISignedData_certificates
asn1E_PKISignedData_crls
asn1E_PKISignedData_version
asn1E_PKISignerInfo
asn1E_PKISignerInfo_authenticatedAttributes
asn1E_PKISignerInfo_unauthenticatedAttributes
asn1E_PKISignerInfo_version
asn1E_PKISignerInfos
asn1E_PKISigningTime
asn1E_PKISkipCerts
asn1E_PKIStreetAddress
asn1E_PKISubjectKeyIdentifier
asn1E_PKISubjectPublicKeyInfo
asn1E_PKITeletexCommonName
asn1E_PKITeletexDomainDefinedAttribute
asn1E_PKITeletexDomainDefinedAttributes
asn1E_PKITeletexOrganizationName
asn1E_PKITeletexOrganizationalUnitName
asn1E_PKITeletexOrganizationalUnitNames
asn1E_PKITeletexPersonalName
asn1E_PKITerminalIdentifier
asn1E_PKITerminalType
asn1E_PKITime
asn1E_PKIToBeSigned
asn1E_PKIUnformattedPostalAddress
asn1E_PKIUnformattedPostalAddress_printable_address
asn1E_PKIUniqueIdentifier
asn1E_PKIUniquePostalName
asn1E_PKIUserNotice
asn1E_PKIValidationParms
asn1E_PKIValidity
asn1E_PKIVersion
asn1E_PKIX121Address
asn1E_PKI_EXTENSION_ATTRIBUTE_id
asn1E_PKI_SeqOfOBJID
asn1E_PKI_SeqOfPKIAttribute
asn1E_PKI_SeqOfPKICertificateList_toBeSigned_revokedCertificates_element
asn1E_PKI_SeqOfPKIDigestAlgorithmIdentifier
asn1E_PKI_SeqOfPKIRecipientInfo
asn1E_PKI_SeqOfPKISignerInfo
asn1E_PKI_SetOfPKIAttribute
asn1E_PKI_SetOfPKIDigestAlgorithmIdentifier
asn1E_PKI_SetOfPKIPKCS12Attribute
asn1E_PKI_SetOfPKIRecipientInfo
asn1E_PKI_SetOfPKISignerInfo
certCERTNameToDN
certCERTNameToPKIName
certCheckCERTName
certCreate
certDecode
certDecodeCharData
certDecodeExtAuthorityInfoAccess
certDecodeExtAuthorityKeyIdentifier
certDecodeExtBasicConstraints
certDecodeExtCRLDistPoints
certDecodeExtExtKeyUsage
certDecodeExtKeyUsage
certDecodeExtSubjectKeyIdentifier
certDecodeGeneralNames
certDestroy
certEncodeCharData
certEncodeExtAuthorityInfoAccess
certEncodeExtAuthorityKeyIdentifier
certEncodeExtBasicConstraints
certEncodeExtCRLDistPoints
certEncodeExtExtKeyUsage
certEncodeExtKeyUsage
certEncodeExtSubjectKeyIdentifier
certEncodeGeneralNames
certGetCertDER
certGetExtesions
certGetIssuer
certGetIssuerDER
certGetIssuerDN
certGetIssuerPKIName
certGetPKCContext
certGetPublicKeyDER
certGetSerialNumber
certGetSubject
certGetSubjectDER
certGetSubjectDN
certGetSubjectPKIName
certGetSubjectPublicKeyInfoDER
certGetThumbPrintMD5
certGetThumbPrintSHA1
certGetValidDuration
certGetVersion
certIsIssuedBy
certPKCCtxToPKISubjectPublicKeyInfo
certPKINameToCERTName
convAlgCtrl
convBytesToKey
convCreate
convCtrl
convData
convDestroy
convFinal
convInit
convUpdate
crlCheckCertStatus
crlCreate
crlDecode
crlDestroy
crlGetIssuer
crlGetIssuerDER
crlGetNextUpdate
crlGetRevokeCerts
crlGetThisUpdate
crlIsIssuedBy
devClose
devCommand
devCreatePKCContext
devOpen
hashAlgCtrl
hashAlgData
hashCopy
hashCreate
hashCtrl
hashData
hashDestroy
hashFinal
hashInit
hashUpdate
hcryptEnd
hcryptFree
hcryptInit
hmacAlgData
hmacCreate
hmacData

Sections

.text
Size: 324KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
守护神/同花顺通用下单/hssl.dll
.dll windows:4 windows x86 arch:x86

9bb102afeb519f547a7b0eefb4b6fe05

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

hcrypt

certGetValidDuration
osNow
pkcDestroy
osCmpTime
certIsIssuedBy
osUnlock
hashCtrl
osLock
pkcCreate
osDestroyLock
osCreateLock
hashUpdate
hashAlgCtrl
randBytes
pkcDecrypt
hashFinal
hashInit
pkcCtrl
hashCreate
hashCopy
certCreate
pkcEncrypt
hashDestroy
certGetPKCContext
certDecode
certDestroy
convCreate
certGetCertDER
convUpdate
convDestroy
convCtrl
convInit

kernel32

InitializeCriticalSection
DeleteCriticalSection
SetEnvironmentVariableA
CompareStringA
CompareStringW
GetStringTypeW
GetStringTypeA
LCMapStringA
MultiByteToWideChar
LCMapStringW
SetFilePointer
SetStdHandle
LoadLibraryA
GetProcAddress
CloseHandle
GetACP
GetCPInfo
GetOEMCP
InterlockedIncrement
InterlockedDecrement
WriteFile
GetEnvironmentStringsW
FlushFileBuffers
WideCharToMultiByte
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
HeapFree
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsW
GetEnvironmentStrings
ExitProcess
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
FreeEnvironmentStringsA

Exports

Exports

hsslEnd
hsslInit
sslAddCertificate
sslAddDistinguishedName
sslClose
sslCopy
sslCreate
sslDeleteSessionID
sslDestroy
sslForceHandshake
sslGetNegotiatedCipher
sslGetPeerCertificate
sslGetPeerCertificateChainLength
sslGetProtocolVersion
sslGetReadPendingSize
sslGetWritePendingSize
sslHandshake
sslRead
sslServiceWriteQueue
sslSetCertificateRef
sslSetCheckCertificateFunc
sslSetDHAnonParams
sslSetExportPrivateKey
sslSetIOFunc
sslSetIORef
sslSetOnHandshakeCompleteFunc
sslSetPeerID
sslSetPrepareClientCertFunc
sslSetPrivateKey
sslSetProtocolSide
sslSetProtocolVersion
sslSetRequestClientCert
sslSetSessionFunc
sslSetSessionRef
sslWrite

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
守护神/同花顺通用下单/nomh.dll
.dll windows:4 windows x86 arch:x86

95945db154bb88963aaa5f36e343c8ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
HeapFree
WriteFile
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
GetCurrentProcessId
RtlUnwind
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

user32

CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA

Exports

Exports

Rehook
StartHook
StopHook
SysMsgProc

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mydata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
守护神/同花顺通用下单/system.dat
守护神/同花顺通用下单/user.dat
守护神/同花顺通用下单/xiadan.exe
.exe windows:4 windows x86 arch:x86

fc38d72042fca6cb9e3710670a5d98b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

user32

GetDCEx
LockWindowUpdate
PostThreadMessageA
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
GetMessagePos
DrawStateA
TranslateMessage
DispatchMessageA
wsprintfA
CheckMenuItem
DrawIcon
AppendMenuA
IntersectRect
GetSysColorBrush
EnableScrollBar
SetWindowTextA
GetCaretPos
TrackPopupMenu
SetMenuDefaultItem
GetMenuState
GetWindowTextA
ChildWindowFromPoint
IsWindowEnabled
WindowFromPoint
EqualRect
GetClassInfoA
LoadStringA
DestroyCursor
CreateIconIndirect
GetIconInfo
SetRect
MessageBoxA
ShowWindow
SystemParametersInfoA
MapWindowPoints
PeekMessageA
BroadcastSystemMessage
GetDesktopWindow
GetSystemMenu
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
GetWindowPlacement
UnregisterHotKey
RegisterHotKey
GetKeyNameTextA
GetKeyState
SetPropA
GetPropA
MessageBeep
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
DeleteMenu
RegisterWindowMessageA
LoadMenuA
GetMenuItemCount
GetMenuStringA
GetMenuItemID
GetSubMenu
AdjustWindowRectEx
RedrawWindow
SetWindowRgn
InflateRect
BringWindowToTop
SetParent
GetWindow
SetFocus
GetClassNameA
GetNextDlgTabItem
GetActiveWindow
IsWindowVisible
ShowScrollBar
GetFocus
DrawFrameControl
UnregisterClassA
RegisterClassA
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetClassLongA
CopyAcceleratorTableA
GetMessageTime
GetLastActivePopup
FindWindowA
GetDlgCtrlID
IsChild
GetDoubleClickTime
DrawTextA
DrawFocusRect
GetCursorPos
GetParent
GetWindowLongA
LoadBitmapA
DefWindowProcA
SetRectEmpty
CopyRect
PtInRect
LoadCursorA
SetCursor
UpdateWindow
PostMessageA
IsRectEmpty
GetSysColor
LoadIconA
OffsetRect
GetTabbedTextExtentA
RegisterClipboardFormatA
ShowOwnedPopups
PostQuitMessage
GetAsyncKeyState
CopyIcon
SetCursorPos
IsIconic
FillRect
DrawIconEx
DestroyIcon
ReleaseCapture
SetCapture
GetMenu
ScreenToClient
ClientToScreen
CallWindowProcA
GetSystemMetrics
GetWindowDC
SetWindowLongA
SetWindowPos
SendMessageA
GetWindowRect
KillTimer
SetTimer
CreateWindowExA
GetDC
ReleaseDC
DestroyWindow
LoadImageA
InvalidateRect
GetClientRect
MoveWindow
EnableWindow
IsWindow
UnionRect
DrawTextExA
keybd_event
GrayStringA
TabbedTextOutA
CreateMenu
CreatePopupMenu
ModifyMenuA
InsertMenuA
GetMenuItemInfoA
SetScrollPos
IsZoomed
BeginDeferWindowPos
EndDeferWindowPos
GetScrollInfo
ClipCursor
GetMessageA
GetCursor
FrameRect
IsMenu
GetNextDlgGroupItem
DrawEdge
GetCapture
CharNextA
UnpackDDElParam
ReuseDDElParam
SetMenu
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
CharUpperA
wvsprintfA
ValidateRect
EndDialog
MapDialogRect
RemovePropA
SetWindowContextHelpId
CreateDialogIndirectParamA
EndPaint
BeginPaint
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
SetActiveWindow
DeferWindowPos
ScrollWindow
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
WinHelpA
GetTopWindow

sqlite30

sqlite3_step
sqlite3_column_text
sqlite3_vmprintf
sqlite3_free
sqlite3_open
sqlite3_column_name
sqlite3_errmsg
sqlite3_prepare
sqlite3_reset
sqlite3_exec
sqlite3_finalize
sqlite3_close
sqlite3_column_count

hssl

hsslInit
sslSetPrivateKey
sslAddCertificate
sslRead
sslWrite
sslSetIOFunc
sslHandshake
sslCreate
sslSetProtocolSide
sslSetProtocolVersion
hsslEnd
sslDestroy
sslSetCertificateRef
sslSetPrepareClientCertFunc
sslSetCheckCertificateFunc
sslSetIORef

hcrypt

certGetSubjectDER
hcryptInit
devClose
hcryptFree
devCommand
devOpen
pkcDestroy
certDestroy
certGetCertDER
pkcCtrl
pkcs12ImportKey
certIsIssuedBy
certDecode
tokenCreatePKCContext
pkcCreate
certGetSubjectPublicKeyInfoDER
convBytesToKey
convData
convDestroy
certGetSubject
certGetIssuer
certGetThumbPrintMD5
certGetValidDuration
pkcs12ExportKey
convCreate
certCreate

kernel32

GetProfileStringA
InterlockedExchange
DeleteFileA
GetTickCount
GlobalFree
GlobalSize
GlobalReAlloc
GlobalAlloc
CloseHandle
WriteFile
CreateFileA
GetLocaleInfoA
GetModuleFileNameA
MoveFileA
GetSystemDefaultLangID
CreateDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetWindowsDirectoryA
InterlockedIncrement
GetVersionExA
GetVolumeInformationA
GetDriveTypeA
GetSystemInfo
GetProcAddress
LoadLibraryA
FreeLibrary
DeviceIoControl
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryExW
Process32Next
Process32First
Thread32Next
Thread32First
CreateToolhelp32Snapshot
GetCurrentThreadId
lstrcpyA
WinExec
lstrlenA
lstrcatA
LockResource
SizeofResource
LoadResource
FindResourceA
ExitProcess
Sleep
GetPrivateProfileStringA
GetLocalTime
GetLastError
RemoveDirectoryA
GetCurrentProcess
CreateEventA
MulDiv
GlobalUnlock
GlobalLock
ResumeThread
WaitForSingleObject
ResetEvent
SetEvent
LoadLibraryExA
lstrcmpiA
GetCurrentProcessId
IsBadReadPtr
SuspendThread
GetModuleHandleA
SetThreadContext
GetThreadContext
lstrcpynA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
OutputDebugStringA
GetVersion
FindClose
FindNextFileA
FindFirstFileA
WritePrivateProfileStringA
LocalFree
FormatMessageA
CreateProcessA
GetStartupInfoA
TerminateProcess
SetProcessAffinityMask
OpenProcess
CopyFileA
GetTempFileNameA
GetTempPathA
CreateMutexA
ReleaseMutex
CreateThread
TerminateThread
GetSystemDirectoryA
GetExitCodeThread
HeapAlloc
HeapFree
HeapSize
HeapReAlloc
LCMapStringA
ReadFile
GetFileSize
LocalAlloc
VirtualProtect
FlushInstructionCache
SetLastError
lstrlenW
GetCPInfo
InterlockedDecrement
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpA
FileTimeToSystemTime
FileTimeToLocalFileTime
DuplicateHandle
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GetPrivateProfileIntA
GetFileAttributesA
SetFileTime
GetFileTime
GetDiskFreeSpaceA
GetCurrentThread
LocalFileTimeToFileTime
SystemTimeToFileTime
GetProcessVersion
GlobalFlags
GetOEMCP
SetErrorMode
FindResourceExA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
RaiseException
ExitThread
GetCommandLineA
SetEnvironmentVariableA
GetACP
SetStdHandle
GetFileType
LCMapStringW
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
CompareStringA
CompareStringW
UnhandledExceptionFilter
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadCodePtr

gdi32

GetTextExtentPointA
CreateDIBitmap
CreatePatternBrush
GetObjectA
GetWindowOrgEx
GetTextFaceA
GetROP2
GetTextAlign
GetPolyFillMode
GetStretchBltMode
GetNearestColor
EnumFontFamiliesExA
CopyMetaFileA
GetViewportOrgEx
GetCharWidthA
StretchDIBits
SetRectRgn
GetCurrentPositionEx
SetTextAlign
IntersectClipRect
ExcludeClipRect
ScaleWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetStretchBltMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
LPtoDP
SetBitmapBits
PolyPolyline
GetCurrentObject
GetBkColor
GetTextColor
SetAbortProc
StartDocA
StartPage
EndPage
EndDoc
AbortDoc
CreateFontA
CreateEllipticRgnIndirect
Escape
RectVisible
PtVisible
Ellipse
GetTextExtentPoint32W
GetBkMode
PlgBlt
RoundRect
SetPixel
GetPixel
CreateDCA
GetStockObject
OffsetRgn
SelectClipRgn
FrameRgn
SetTextJustification
SetBkMode
MoveToEx
LineTo
CreateRectRgn
DPtoLP
SetMapMode
GetViewportExtEx
SetViewportExtEx
GetWindowExtEx
SetWindowExtEx
CreatePolygonRgn
GetTextExtentPoint32A
CreateRoundRectRgn
StretchBlt
GetTextMetricsA
ExtTextOutA
CreateDIBSection
CombineRgn
FillRgn
Polygon
GetMapMode
CreatePen
SetBkColor
SetTextColor
CreateBitmap
CreateSolidBrush
PtInRegion
CreateRectRgnIndirect
Rectangle
SelectPalette
RealizePalette
GetDIBits
GetClipBox
PatBlt
CreateCompatibleBitmap
TextOutA
GetDeviceCaps
GetSystemPaletteEntries
CreatePalette
DeleteObject
DeleteDC
CreateCompatibleDC
SelectObject
BitBlt
CreateFontIndirectA

comdlg32

PrintDlgA
ChooseColorA
PageSetupDlgA
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
CommDlgExtendedError

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegSetValueA
RegCreateKeyA
RegCreateKeyExA

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
ShellExecuteExA
Shell_NotifyIconA
ShellExecuteA
ExtractIconA

comctl32

ImageList_EndDrag
ImageList_BeginDrag
ImageList_DragEnter
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_DragLeave
ImageList_GetIconSize
ImageList_Create
ImageList_GetIcon
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_SetImageCount
ImageList_Draw
ImageList_GetImageCount
ord17
ImageList_DragShowNolock
ImageList_DragMove
ImageList_Destroy
ImageList_LoadImageA
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_DrawEx

oledlg

ord8

ole32

CreateStreamOnHGlobal
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoDisconnectObject
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
OleRun
ReleaseStgMedium
OleSetClipboard
OleIsCurrentClipboard
OleDuplicateData
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard

olepro32

ord251
ord253

oleaut32

VariantChangeType
SysAllocStringByteLen
SysAllocString
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringLen
SysAllocStringLen
VariantClear
VariantCopy
SysFreeString
VariantTimeToSystemTime
LoadTypeLi

wsock32

socket
inet_ntoa
WSAAsyncSelect
send
recv
closesocket
bind
accept
WSASetLastError
recvfrom
ioctlsocket
WSAGetLastError
ntohl
ntohs
htons
htonl
WSAStartup
gethostname
gethostbyname
inet_addr
WSACleanup
sendto
connect
listen

wininet

InternetGetLastResponseInfoA
InternetErrorDlg
InternetQueryDataAvailable
InternetSetFilePointer
InternetSetStatusCallback
InternetSetOptionExA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
HttpQueryInfoA
InternetReadFile
HttpAddRequestHeadersA
HttpSendRequestExA
InternetWriteFile
HttpEndRequestA
InternetAttemptConnect
InternetConnectA
InternetOpenA
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 443KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
守护神/同花顺通用下单/xiadan.ini
守护神/帮助内容.chm
.chm
守护神/新云软件.url
.url
守护神/股票自动交易守护神.exe
.exe windows:4 windows x86 arch:x86

7de5341fa131f016db1466e8afd20bc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\智慧树\autoDeal\StockNumen\Release\StockNumen.pdb

Imports

winmm

sndPlaySoundA

skinppwtl

ord3
ord2

kernel32

FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
SetErrorMode
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
SetFilePointer
HeapReAlloc
SetStdHandle
GetFileType
TerminateProcess
ExitThread
CreateThread
HeapSize
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetTimeZoneInformation
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
SetEnvironmentVariableA
WriteFile
ReadFile
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
InterlockedIncrement
GlobalFlags
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
GetFileTime
GetFileSize
GetFileAttributesA
CreateFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
WritePrivateProfileStringA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
FileTimeToSystemTime
lstrcmpA
CreateEventA
ReleaseMutex
InterlockedDecrement
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcatA
lstrcmpW
SetLastError
MulDiv
FormatMessageA
lstrcpynA
LocalFree
GlobalFree
FreeResource
GetCurrentProcess
SetLocalTime
Beep
GlobalDeleteAtom
TerminateThread
CreateMutexA
CloseHandle
MoveFileExA
CompareStringW
CompareStringA
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
GetModuleHandleA
GetModuleFileNameA
HeapAlloc
GetCurrentProcessId
LoadLibraryA
GetProcAddress
FreeLibrary
lstrlenA
GlobalAlloc
GlobalLock
GlobalUnlock
MultiByteToWideChar
GetTickCount
Sleep
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetCommandLineA

user32

ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
wsprintfA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
GetMenuCheckMarkDimensions
ShowWindow
SetWindowTextA
IsDialogMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetWindowTextLengthA
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TrackPopupMenu
GetKeyState
IsWindowVisible
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowPos
SystemParametersInfoA
GetWindowRect
PtInRect
GetMenuState
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindowPlacement
SetWindowPlacement
MessageBoxA
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
LoadAcceleratorsA
GetMenu
GetCursorPos
GetSystemMetrics
LoadIconA
IsIconic
LoadMenuA
GetSubMenu
GetMenuItemID
GetMenuItemCount
DrawIcon
TranslateAcceleratorA
LoadBitmapA
UnregisterClassA
CharUpperA
ReleaseDC
GetDC
PostMessageA
keybd_event
SetCursorPos
mouse_event
SetCursor
KillTimer
SetTimer
RedrawWindow
InvalidateRect
UpdateWindow
OffsetRect
DrawTextA
GetSysColor
GetFocus
GetClientRect
DrawFocusRect
FillRect
CopyRect
IsClipboardFormatAvailable
GetSysColorBrush
WaitMessage
DestroyMenu
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SendMessageA
FindWindowA
GetWindow
GetWindowTextA
GetParent
LoadCursorA
EnableWindow
GetMessageA
ValidateRect
TranslateMessage
PostQuitMessage
EndPaint
BeginPaint
SetWindowLongA
CheckMenuItem

gdi32

ScaleWindowExtEx
DeleteDC
DPtoLP
SetWindowExtEx
SetTextAlign
SetMapMode
SetBkMode
RestoreDC
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SelectClipRgn
SetViewportOrgEx
DeleteObject
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
CreateFontIndirectA
GetStockObject
GetTextExtentPoint32A
SelectObject
CreateRectRgnIndirect
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
GetTextMetricsA
GetViewportOrgEx

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

LookupPrivilegeValueA
OpenProcessToken
InitiateSystemShutdownA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
AdjustTokenPrivileges
RegSetValueExA
RegCreateKeyExA

shell32

ShellExecuteA
SHCreateDirectoryExA

comctl32

ImageList_Draw
ord17
ImageList_AddMasked
ImageList_Destroy
ImageList_Create

shlwapi

PathFindExtensionA
PathFileExistsA
UrlUnescapeA
PathStripToRootA
PathIsUNCA
PathFindFileNameA

oleaut32

VariantClear
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
VarUdateFromDate
VariantChangeType

ws2_32

htons
htonl
select
socket
accept
closesocket
recv
bind
gethostbyname
inet_addr
sendto
recvfrom
WSAGetLastError
WSACleanup
WSASetLastError
connect
send
WSAAsyncSelect
WSAStartup

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

wininet

HttpQueryInfoA
InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetOpenUrlA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetCheckConnectionA
InternetQueryDataAvailable

Sections

.text
Size: 388KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
守护神/通知.wav

Sharing

General

Malware Config

Signatures

Files

4fc194db286a6c68c8db8cc61ec07d8e

Headers

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 2KB

6513a39fa6fc097dd83f53d50c52167f

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 85KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 8KB - Virtual size: 20KB

.rsrc Size: 16KB - Virtual size: 14KB

.reloc Size: 16KB - Virtual size: 15KB

8415b02065effcf3e8ba3b1c65054435

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

msvcrt

msvcp60

Exports

Exports

Sections

.text Size: 348KB - Virtual size: 345KB

.rdata Size: 88KB - Virtual size: 85KB

.data Size: 20KB - Virtual size: 18KB

.HookSec Size: 4KB - Virtual size: 4B

.rsrc Size: 36KB - Virtual size: 33KB

.reloc Size: 36KB - Virtual size: 34KB

193689a7f9d0c2557e52b512cd6986bc

Headers

File Characteristics

Imports

hssl

hcrypt

mfc42u

msvcrt

kernel32

user32

oleaut32

atl

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 9KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 2KB

.text
Size: 88KB - Virtual size: 85KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 8KB - Virtual size: 20KB

.rsrc
Size: 16KB - Virtual size: 14KB

.reloc
Size: 16KB - Virtual size: 15KB

.text
Size: 348KB - Virtual size: 345KB

.rdata
Size: 88KB - Virtual size: 85KB

.data
Size: 20KB - Virtual size: 18KB

.HookSec
Size: 4KB - Virtual size: 4B

.rsrc
Size: 36KB - Virtual size: 33KB

.reloc
Size: 36KB - Virtual size: 34KB

.text
Size: 12KB - Virtual size: 9KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 1KB

UPX0
Size: - Virtual size: 180KB

UPX1
Size: 159KB - Virtual size: 160KB

.rsrc
Size: 6KB - Virtual size: 8KB

.text
Size: 260KB - Virtual size: 258KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 976B

.reloc
Size: 12KB - Virtual size: 8KB

05:5b:a2:81
Certificate

05:63:63:99
Certificate

a9:8e:42:17:cd:0a:16:a5:64:d5:20:d0:7c:78:3b:35:5e:1d:da:d6
Signer

UPX0
Size: - Virtual size: 256KB

UPX1
Size: 160KB - Virtual size: 164KB

.rsrc
Size: 8KB - Virtual size: 12KB

.text
Size: 324KB - Virtual size: 320KB

.rdata
Size: 68KB - Virtual size: 65KB

.data
Size: 24KB - Virtual size: 28KB

.rsrc
Size: 4KB - Virtual size: 948B

.reloc
Size: 12KB - Virtual size: 8KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB