d510a4db9290dfe61cd6c79382b26dd4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d510a4db9290dfe61cd6c79382b26dd4_JaffaCakes118
Size

16.4MB
MD5

d510a4db9290dfe61cd6c79382b26dd4
SHA1

f9d97c32dee4e127a2fef579a01b4259b4d585f5
SHA256

d925257bf33f5f3e2fd25d6931f6c59bb204d4f853c62e7cbf9de31800ab323a
SHA512

bd21cdc774d1d29cdcc63c15143280335f50c2d23f6c6b270141a2cc3f60d05e9b3b18c14f5307a423eb8321e778486721546300465fbbd3e5eea293fd0d53ad
SSDEEP

393216:hwfqpQcPaUkHt7BLv7PzM2fMDs6aQqbS58GUWkcazrpNub:hwfqCcipzbtfMaxXvjVNN2

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/iPai5.8/SkinH_VB6.dll	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/iPai5.8/SkinH_VB6.dll	upx

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/iPai5.8/PDF.dll
unpack001/iPai5.8/SkinH_VB6.dll
unpack001/iPai5.8/iPai.exe
unpack001/iPai5.8/unrar.dll
unpack001/iPai5.8/将iPai放到桌面.exe

Files

d510a4db9290dfe61cd6c79382b26dd4_JaffaCakes118
.rar
iPai5.8/PDF.dll
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Abort
AddPoint
Annotation
AppendLinkPara
AppendPara
AppendTabPara
Arc
BeginDoc
BeginPara
CellTextHeight
CellX
CellY
Chord
CopyRect
CreateBox
CreatePdf
DeclareSymbolicFont
DefineCol
DefineField
DefineGrid
DefineName
DefineStyle
Draw
DrawFromFile
DrawGrid
DrawPageCounter
DrawRichTextFromFile
DrawRow
DrawText
Ellipse
EmailDoc
EndDoc
EndPara
FillRect
FrameRect
FreeBox
FreePdf
GetErrorMsg
GetNumProp
GetStrProp
LineTo
LoadStyleSheet
MoveTo
NameNextPara
NewPage
NewSection
ParaHeight
Pie
PolyBezier
PolyBezierTo
Polygon
Polyline
Print
PrintBookMark
PrintDoc
PutField
Rectangle
RoundRect
RubberStamp
SetAction
SetBookmark
SetColorEx
SetLink
SetNumFieldProp
SetNumProp
SetOwnerPassword
SetPageNumberFormat
SetStrFieldProp
SetStrProp
SetUserPassword
Show
ShowDoc
StretchDraw
StretchDrawFromFile
StyleParameter
TextHeight
TextOut
TextToCell
TextWidth
TrapEvent
WriteBookmark
WriteLink
WritePara
WriteRichText

Sections

CODE
Size: 692KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
iPai5.8/PICCLP32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

6e0787634aa4bc2239034c39a0e3a00d

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

16/11/1999, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

04/04/2000, 00:00

Not After

17/04/2001, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
LoadResource
lstrcmpA
CompareStringW
FindResourceA
lstrcmpiA
LockResource
GetLastError
InterlockedIncrement
HeapReAlloc
InterlockedDecrement
LoadLibraryA
GetProcAddress
GetLocaleInfoA
MultiByteToWideChar
GetWindowsDirectoryA
lstrcpyA
lstrlenA
GetModuleFileNameA
lstrcatA
GetVersion
lstrcpynA
GetFileAttributesA
GlobalAlloc
HeapAlloc
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
InitializeCriticalSection
EnterCriticalSection
GetProcessHeap
GlobalUnlock
GlobalLock
DisableThreadLibraryCalls
GlobalFree

user32

SetWindowLongA
CharNextA
UnregisterClassA
EndPaint
OffsetRect
CreateWindowExA
IsWindowVisible
GetWindowRect
BeginPaint
GetWindow
MoveWindow
GetDlgItem
SetFocus
GetWindowLongA
InvalidateRect
CreateDialogIndirectParamA
GetKeyState
IsChild
IsWindowEnabled
GetNextDlgTabItem
IsDialogMessageA
SetParent
SetWindowRgn
ShowWindow
GetParent
ClientToScreen
SetWindowPos
GetClientRect
DestroyWindow
GetSystemMetrics
wsprintfA
RegisterClipboardFormatA
GetDlgItemInt
SetDlgItemInt
GetDesktopWindow
GetDC
ReleaseDC
GetActiveWindow
SendMessageA
EndDialog
DialogBoxParamA
DefWindowProcA
LoadCursorA
RegisterClassA
LoadStringA
PtInRect
WinHelpA
EqualRect
IntersectRect

ole32

CreateOleAdviseHolder
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
ReleaseStgMedium

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

SetErrorInfo
LoadRegTypeLi
OleCreatePropertyFrame
SysAllocStringLen
LoadTypeLibEx
UnRegisterTypeLi
LoadTypeLi
RegisterTypeLi
VariantInit
VariantChangeType
VariantClear
OleTranslateColor
OleCreatePictureIndirect
SysStringLen
SysFreeString
OleLoadPicture
CreateErrorInfo
SysAllocString

gdi32

SetMapMode
GetWindowExtEx
GetViewportExtEx
LPtoDP
SetViewportExtEx
CreateRectRgnIndirect
CreateICA
CreateDCA
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
CreateSolidBrush
SelectObject
Rectangle
RealizePalette
SelectPalette
CreatePen
DeleteDC
StretchBlt
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetPaletteEntries
GetObjectA
GetDeviceCaps
CreatePalette

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
iPai5.8/Readme.txt
iPai5.8/SkinH_VB6.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

SkinH_AdjustAero
SkinH_AdjustHSV
SkinH_Attach
SkinH_AttachEx
SkinH_AttachExt
SkinH_AttachRes
SkinH_AttachResEx
SkinH_Detach
SkinH_DetachEx
SkinH_GetColor
SkinH_LockUpdate
SkinH_Map
SkinH_NineBlt
SkinH_SetAero
SkinH_SetBackColor
SkinH_SetFont
SkinH_SetFontEx
SkinH_SetForeColor
SkinH_SetMenuAlpha
SkinH_SetTitleMenuBar
SkinH_SetWindowAlpha
SkinH_SetWindowMovable
SkinH_VerifySign

Sections

UPX0
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iPai5.8/bk/310X310细黑线.png
.png
iPai5.8/bk/500X400韩风简约2.png
.png
iPai5.8/bk/500X410红心1.png
.png
iPai5.8/bk/500X410红心2.png
.png
iPai5.8/bk/500X500线框.png
.png
iPai5.8/bk/500X700韩风简约.png
.png
iPai5.8/bk/600X780黑边.png
.png
iPai5.8/bk/620X460韩风3.png
.png
iPai5.8/bk/620X740韩风1.png
.png
iPai5.8/bk/620X740韩风2.png
.png
iPai5.8/bk/660X550别针.png
.png
iPai5.8/bk/660X550回形针.png
.png
iPai5.8/bk/660X550裁角.png
.png
iPai5.8/bk/680X570白边.png
.png
iPai5.8/bk/780X640白边.png
.png
iPai5.8/bk/便签.png
.png
iPai5.8/bk/别针边框fs.png
.png
iPai5.8/bk/别针边框hh.png
.png
iPai5.8/bk/别针边框lh.png
.png
iPai5.8/bk/别针边框ls.png
.png
iPai5.8/bk/半透明边-绿.png
.png
iPai5.8/bk/半透明边.png
.png
iPai5.8/bk/单线框.png
.png
iPai5.8/bk/卡通/卡通-BlueBear.png
.png
iPai5.8/bk/卡通/卡通-IOU.png
.png
iPai5.8/bk/卡通/卡通-圆.png
.png
iPai5.8/bk/卡通/卡通-圆蝴蝶.png
.png
iPai5.8/bk/卡通/卡通-帷幔.png
.png
iPai5.8/bk/卡通/卡通-欢乐时光.png
.png
iPai5.8/bk/卡通/卡通-画布.png
.png
iPai5.8/bk/卡通/卡通-画框.png
.png
iPai5.8/bk/卡通/卡通-白云.png
.png
iPai5.8/bk/卡通/卡通-粉红.png
.png
iPai5.8/bk/卡通/卡通-红心.png
.png
iPai5.8/bk/卡通/卡通-蝴蝶结.png
.png
iPai5.8/bk/卡通/卡通1.png
.png
iPai5.8/bk/卡通/卡通2.png
.png
iPai5.8/bk/卡通/卡通3.png
.png
iPai5.8/bk/卡通/卡通4.png
.png
iPai5.8/bk/卡通/卡通展板.png
.png
iPai5.8/bk/卡通/卷轴.png
.png
iPai5.8/bk/卡通/大树.png
.png
iPai5.8/bk/卡通/小夹子.png
.png
iPai5.8/bk/卡通/心情记事本.png
.png
iPai5.8/bk/卡通/粉红蝴蝶结1.png
.png
iPai5.8/bk/卡通/粉红蝴蝶结2.png
.png
iPai5.8/bk/卡通/紫色诱惑.png
.png
iPai5.8/bk/卡通/纸张.png
.png
iPai5.8/bk/卡通/纸张夹子.png
.gif
iPai5.8/bk/卡通/绿色心情.png
.png
iPai5.8/bk/卡通/葵花心.png
.png
iPai5.8/bk/卡通/蝴蝶结3.png
.png
iPai5.8/bk/场景/CCTV新闻.png
.png
iPai5.8/bk/场景/层叠.png
.png
iPai5.8/bk/场景/展板.png
.png
iPai5.8/bk/场景/广告牌1.png
.png
iPai5.8/bk/场景/广告牌2.png
.png
iPai5.8/bk/场景/广告牌3.png
.png
iPai5.8/bk/场景/总统会议.png
.png
iPai5.8/bk/场景/播放器.png
.png
iPai5.8/bk/场景/灯箱广告.png
.png
iPai5.8/bk/场景/电视机-CRT.png
.png
iPai5.8/bk/场景/电视机-TCL.png
.png
iPai5.8/bk/场景/电视机-iPai.png
.png
iPai5.8/bk/场景/电视机-小.png
.png
iPai5.8/bk/场景/画布.png
.png
iPai5.8/bk/场景/看电视.png
.png
iPai5.8/bk/场景/礼物包装.png
.png
iPai5.8/bk/场景/胶片-宽银幕.png
.png
iPai5.8/bk/场景/胶片-怀旧.png
.png
iPai5.8/bk/场景/茶杯.png
.png
iPai5.8/bk/场景/邮票.png
.png
iPai5.8/bk/特效框/木刻.png
.png
iPai5.8/bk/特效框/木刻2.png
.png
iPai5.8/bk/特效框/水波纹.png
.png
iPai5.8/bk/特效框/璀璨星空.png
.png
iPai5.8/bk/精致彩框/彩色边框1.png
.png
iPai5.8/bk/精致彩框/彩色边框2.png
.png
iPai5.8/bk/精致彩框/彩色边框3.png
.png
iPai5.8/bk/精致彩框/彩色边框4.png
.png
iPai5.8/bk/精致彩框/彩色边框5.png
.png
iPai5.8/bk/精致彩框/水滴1.png
.png
iPai5.8/bk/精致彩框/水滴2.png
.png
iPai5.8/bk/精致彩框/水滴3.png
.png
iPai5.8/bk/精致彩框/水滴4.png
.png
iPai5.8/bk/精致彩框/烛光s.png
.png
iPai5.8/bk/精致彩框/窗口边框.png
.png
iPai5.8/bk/精致彩框/简单1.png
.png
iPai5.8/bk/精致彩框/简单2.png
.png
iPai5.8/bk/红心2.png
.png
iPai5.8/iPai.exe
.exe windows:4 windows x86 arch:x86

debfe3e738382b826217309e9aacfafe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
__vbaVarTstGt
__vbaStrI2
ord690
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaFreeVar
ord588
__vbaStrVarMove
__vbaLateIdCall
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
__vbaVarIdiv
_adj_fdiv_m64
__vbaNextEachVar
__vbaFreeObjList
__vbaLineInputVar
_adj_fprem1
__vbaRecAnsiToUni
ord518
__vbaResume
__vbaStrCat
__vbaVarCmpNe
__vbaLsetFixstr
ord660
__vbaRecDestruct
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenBstrB
ord558
__vbaLenVar
_adj_fdiv_m32
__vbaAryDestruct
__vbaVarCmpGe
__vbaLateMemSt
__vbaVarIndexLoadRefLock
__vbaVarPow
__vbaExitProc
__vbaVarForInit
__vbaBoolStr
__vbaStrBool
__vbaI4Abs
__vbaObjSet
ord595
__vbaOnError
ord596
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaVarIndexLoad
ord599
__vbaFpR4
__vbaStrFixstr
ord520
__vbaFpR8
__vbaBoolVarNull
__vbaRefVarAry
__vbaVarTstLt
_CIsin
__vbaErase
ord709
__vbaVarZero
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
ord528
__vbaGenerateBoundsError
__vbaStrCmp
ord529
__vbaVarTstEq
__vbaR4Str
__vbaPrintObj
__vbaObjVar
__vbaI2I4
DllFunctionCall
ord670
__vbaVarOr
__vbaVarLateMemSt
__vbaFpUI1
__vbaCastObjVar
__vbaRedimPreserve
__vbaStrR4
_adj_fpatan
__vbaR4Var
__vbaFixstrConstruct
__vbaLateIdCallLd
__vbaRedim
__vbaStrR8
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaNew
ord600
ord601
__vbaUI1I2
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaStrUI1
__vbaVarMul
__vbaExceptHandler
ord711
__vbaPrintFile
ord712
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
__vbaI2Str
__vbaVarDiv
ord607
ord608
ord716
ord531
__vbaFPException
__vbaInStrVar
__vbaGetOwner3
__vbaStrVarVal
__vbaUbound
__vbaVarCat
ord534
__vbaLsetFixstrFree
__vbaI2Var
__vbaStopExe
ord537
ord644
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaInStr
ord648
ord570
__vbaVarLateMemCallLdRf
__vbaNew2
__vbaR8Str
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
ord573
__vbaStrCopy
ord681
__vbaI4Str
__vbaVarNot
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord578
ord685
ord100
__vbaVarTstNe
ord579
__vbaVarSetVar
__vbaI4Var
__vbaVarCmpEq
ord689
ord610
__vbaAryLock
__vbaLateMemCall
__vbaVarAdd
__vbaVarDup
ord612
__vbaStrToAnsi
__vbaFpI2
__vbaVarCopy
__vbaVarTstGe
__vbaFpI4
__vbaVarLateMemCallLd
__vbaRecDestructAnsi
__vbaLateMemCallLd
ord617
_CIatan
__vbaAryCopy
__vbaStrMove
__vbaUI1Str
__vbaCastObj
__vbaForEachVar
ord619
__vbaStrVarCopy
__vbaVarNeg
_allmul
__vbaLateIdSt
_CItan
ord546
__vbaAryUnlock
__vbaFPInt
__vbaVarForNext
_CIexp
__vbaI4ErrVar
__vbaFreeStr
__vbaFreeObj
ord581

Sections

.text
Size: 888KB - Virtual size: 887KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
iPai5.8/size.ini
iPai5.8/skin/Aero皮肤.she
iPai5.8/skin/QQ2008皮肤.she
iPai5.8/skin/浅蓝(默认).she
iPai5.8/skin/经典黑皮肤.she
iPai5.8/sy/iPai.png
.png
iPai5.8/sy/保障/mtsc53325.png
.png
iPai5.8/sy/保障/mtsc53326.png
.png
iPai5.8/sy/保障/mtsc53327.png
.png
iPai5.8/sy/保障/mtsc53328.png
.png
iPai5.8/sy/保障/mtsc53329.png
.png
iPai5.8/sy/保障/mtsc53330.png
.png
iPai5.8/sy/保障/mtsc53331.png
.png
iPai5.8/sy/保障/mtsc53332.png
.png
iPai5.8/sy/保障/mtsc53333.png
.png
iPai5.8/sy/保障/mtsc53334.png
.png
iPai5.8/sy/保障/mtsc53335.png
.png
iPai5.8/sy/保障/mtsc53337.png
.png
iPai5.8/sy/保障/mtsc53338.png
.png
iPai5.8/sy/保障/mtsc53339.png
.png
iPai5.8/sy/保障/mtsc53340.png
.png
iPai5.8/sy/保障/mtsc53341.png
.png
iPai5.8/sy/保障/mtsc53342.png
.png
iPai5.8/sy/保障/mtsc53343.png
.png
iPai5.8/sy/保障/mtsc53344.png
.png
iPai5.8/sy/保障/mtsc53447.png
.png
iPai5.8/sy/保障/保证.gif
.gif
iPai5.8/sy/保障/商城标志.png
.png
iPai5.8/sy/保障/安心.gif
.gif
iPai5.8/sy/保障/退款保证.png
.png
iPai5.8/sy/信誉/mtsc53055.png
.png
iPai5.8/sy/信誉/mtsc53237.png
.png
iPai5.8/sy/信誉/mtsc53238.png
.png
iPai5.8/sy/信誉/mtsc53239.png
.png
iPai5.8/sy/信誉/mtsc53240.png
.png
iPai5.8/sy/信誉/mtsc53241.png
.png
iPai5.8/sy/信誉/mtsc53242.png
.png
iPai5.8/sy/信誉/mtsc53243.png
.png
iPai5.8/sy/信誉/mtsc53244.png
.png
iPai5.8/sy/信誉/mtsc53245.png
.png
iPai5.8/sy/信誉/mtsc53246.png
.png
iPai5.8/sy/信誉/mtsc53247.png
.png
iPai5.8/sy/卡通/Kitty.gif
.gif
iPai5.8/sy/卡通/Kitty2.gif
.gif
iPai5.8/sy/卡通/QQ.png
.png
iPai5.8/sy/卡通/joker.jpg
.jpg
iPai5.8/sy/卡通/圣诞帽.png
.png
iPai5.8/sy/卡通/地球.png
.png
iPai5.8/sy/卡通/太阳.png
.png
iPai5.8/sy/卡通/宠物熊.png
.png
iPai5.8/sy/卡通/小熊.png
.png
iPai5.8/sy/卡通/星星.png
.png
iPai5.8/sy/卡通/机器猫.png
.png
iPai5.8/sy/卡通/椰树.png
.png
iPai5.8/sy/卡通/熊猫.png
.png
iPai5.8/sy/卡通/礼物.png
.png
iPai5.8/sy/卡通/礼物2.png
.png
iPai5.8/sy/卡通/财神.png
.png
iPai5.8/sy/卡通/驴子.PNG
.png
iPai5.8/sy/对话框/对话框1.gif
.gif
iPai5.8/sy/对话框/对话框2.png
.png
iPai5.8/sy/对话框/对话框3.png
.png
iPai5.8/sy/对话框/对话框4.png
.png
iPai5.8/sy/对话框/对话框5.png
.png
iPai5.8/sy/对话框/对话框6.png
.png
iPai5.8/sy/对话框/对话框7.png
.png
iPai5.8/sy/对话框/对话框8.png
.png
iPai5.8/sy/对话框/对话框9.png
.png
iPai5.8/sy/折扣/mtsc53061.png
.png
iPai5.8/sy/折扣/mtsc53062.png
.png
iPai5.8/sy/折扣/mtsc53063.png
.png
iPai5.8/sy/折扣/mtsc53064.png
.png
iPai5.8/sy/折扣/mtsc53065.png
.png
iPai5.8/sy/折扣/mtsc53066.png
.png
iPai5.8/sy/折扣/mtsc53067.png
.png
iPai5.8/sy/折扣/mtsc53068.png
.png
iPai5.8/sy/折扣/mtsc53069.png
.png
iPai5.8/sy/折扣/mtsc53209.png
.png
iPai5.8/sy/折扣/mtsc53210.png
.png
iPai5.8/sy/折扣/mtsc53211.png
.png
iPai5.8/sy/折扣/mtsc53212.png
.png
iPai5.8/sy/折扣/mtsc53213.png
.png
iPai5.8/sy/折扣/mtsc53214.png
.png
iPai5.8/sy/折扣/mtsc53248.png
.png
iPai5.8/sy/折扣/mtsc53249.png
.png
iPai5.8/sy/折扣/mtsc53250.png
.png
iPai5.8/sy/折扣/mtsc53251.png
.png
iPai5.8/sy/折扣/mtsc53253.png
.png
iPai5.8/sy/折扣/mtsc53254.png
.png
iPai5.8/sy/折扣/mtsc53255.png
.png
iPai5.8/sy/折扣/mtsc53256.png
.png
iPai5.8/sy/折扣/mtsc53257.png
.png
iPai5.8/sy/折扣/mtsc53258.png
.png
iPai5.8/sy/折扣/mtsc53259.png
.png
iPai5.8/sy/折扣/mtsc53260.png
.png
iPai5.8/sy/折扣/mtsc53261.png
.png
iPai5.8/sy/折扣/mtsc53262.png
.png
iPai5.8/sy/折扣/mtsc53263.png
.png
iPai5.8/sy/折扣/mtsc53264.png
.png
iPai5.8/sy/折扣/mtsc53265.png
.png
iPai5.8/sy/折扣/mtsc53266.png
.png
iPai5.8/sy/折扣/mtsc53267.png
.png
iPai5.8/sy/折扣/mtsc53268.png
.png
iPai5.8/sy/折扣/mtsc53269.png
.png
iPai5.8/sy/折扣/mtsc53270.png
.png
iPai5.8/sy/折扣/mtsc53271.png
.png
iPai5.8/sy/折扣/mtsc53272.png
.png
iPai5.8/sy/折扣/mtsc53273.png
.png
iPai5.8/sy/折扣/mtsc53274.png
.png
iPai5.8/sy/折扣/mtsc53275.png
.png
iPai5.8/sy/折扣/mtsc53276.png
.png
iPai5.8/sy/折扣/mtsc53277.png
.png
iPai5.8/sy/折扣/mtsc53278.png
.png
iPai5.8/sy/折扣/mtsc53279.png
.png
iPai5.8/sy/折扣/mtsc53280.png
.png
iPai5.8/sy/折扣/mtsc53281.png
.png
iPai5.8/sy/折扣/mtsc53282.png
.png
iPai5.8/sy/折扣/mtsc53283.png
.png
iPai5.8/sy/折扣/mtsc53284.png
.png
iPai5.8/sy/折扣/mtsc53285.png
.png
iPai5.8/sy/折扣/mtsc53286.png
.png
iPai5.8/sy/折扣/mtsc53287.png
.png
iPai5.8/sy/折扣/打折.png
.png
iPai5.8/sy/折扣/折扣.png
.png
iPai5.8/sy/折扣/标签30%.png
.png
iPai5.8/sy/折扣/标签50%.png
.png
iPai5.8/sy/折扣/标签50%R.png
.png
iPai5.8/sy/折扣/标签60%.png
.png
iPai5.8/sy/折扣/标签70%.png
.png
iPai5.8/sy/折扣/标签70%R.png
.png
iPai5.8/sy/抽象/五角星.png
.png
iPai5.8/sy/抽象/八边形.png
.png
iPai5.8/sy/抽象/方片.png
.png
iPai5.8/sy/抽象/红叉.png
.png
iPai5.8/sy/抽象/红圈1.png
.png
iPai5.8/sy/抽象/红圈2.png
.png
iPai5.8/sy/抽象/红圈3.png
.png
iPai5.8/sy/抽象/红心1.gif
.gif
iPai5.8/sy/抽象/红心2.png
.png
iPai5.8/sy/抽象/红桃.png
.png
iPai5.8/sy/抽象/脚印.png
.png
iPai5.8/sy/抽象/茶花.png
.png
iPai5.8/sy/抽象/蓝珠.png
.png
iPai5.8/sy/抽象/黑桃.png
.png
iPai5.8/sy/文字/Girl.png
.png
iPai5.8/sy/文字/偶然.png
.png
iPai5.8/sy/文字/再见时光.png
.png
iPai5.8/sy/文字/冬天来了.png
.png
iPai5.8/sy/文字/另一半心在你那里.png
.png
iPai5.8/sy/文字/喜欢.png
.png
iPai5.8/sy/文字/思念你.png
.png
iPai5.8/sy/文字/感触心情.png
.png
iPai5.8/sy/文字/我行我素.png
.png
iPai5.8/sy/文字/春天心情.png
.png
iPai5.8/sy/文字/最甜的幸福.png
.png
iPai5.8/sy/文字/死亡.png
.png
iPai5.8/sy/文字/永远幸福.png
.png
iPai5.8/sy/文字/爱的最后.png
.png
iPai5.8/sy/文字/疲乏.png
.png
iPai5.8/sy/文字/相信.png
.png
iPai5.8/sy/文字/窗外的阳光.png
.png
iPai5.8/sy/文字/简简单单.png
.png
iPai5.8/sy/文字/结束旅程.png
.png
iPai5.8/sy/文字/自由.png
.png
iPai5.8/sy/文字/记得忘记.png
.png
iPai5.8/sy/文字/逃离.png
.png
iPai5.8/sy/文字/遗失.png
.png
iPai5.8/sy/文字/邂逅.png
.png
iPai5.8/sy/新品/mtsc53045.png
.png
iPai5.8/sy/新品/mtsc53046.png
.png
iPai5.8/sy/新品/mtsc53047.png
.png
iPai5.8/sy/新品/mtsc53048.png
.png
iPai5.8/sy/新品/mtsc53049.png
.png
iPai5.8/sy/新品/mtsc53051.png
.png
iPai5.8/sy/新品/mtsc53052.png
.png
iPai5.8/sy/新品/mtsc53053.png
.png
iPai5.8/sy/新品/mtsc53054.png
.png
iPai5.8/sy/新品/mtsc53158.png
.png
iPai5.8/sy/新品/mtsc53159.png
.png
iPai5.8/sy/新品/mtsc53160.png
.png
iPai5.8/sy/新品/mtsc53161.png
.png
iPai5.8/sy/新品/mtsc53202.png
.png
iPai5.8/sy/新品/mtsc53220.png
.png
iPai5.8/sy/新品/mtsc53221.png
.png
iPai5.8/sy/新品/mtsc53222.png
.png
iPai5.8/sy/新品/mtsc53223.png
.png
iPai5.8/sy/新品/mtsc53225.png
.png
iPai5.8/sy/新品/mtsc53228.png
.png
iPai5.8/sy/新品/mtsc53229.png
.png
iPai5.8/sy/新品/mtsc53230.png
.png
iPai5.8/sy/新品/mtsc53231.png
.png
iPai5.8/sy/新品/mtsc53232.png
.png
iPai5.8/sy/新品/mtsc53233.png
.png
iPai5.8/sy/新品/mtsc53234.png
.png
iPai5.8/sy/新品/mtsc53235.png
.png
iPai5.8/sy/新品/mtsc53236.png
.png
iPai5.8/sy/新品/mtsc53486.png
.png
iPai5.8/sy/新品/mtsc53487.png
.png
iPai5.8/sy/新品/mtsc53488.png
.png
iPai5.8/sy/新品/mtsc53489.png
.png
iPai5.8/sy/新品/mtsc53490.png
.png
iPai5.8/sy/新品/mtsc53491.png
.png
iPai5.8/sy/标志/RSS.png
.png
iPai5.8/sy/标志/安全.png
.png
iPai5.8/sy/标志/工商标志.gif
.gif
iPai5.8/sy/标志/平安网站.gif
.gif
iPai5.8/sy/标志/支付宝特约商家.jpg
.jpg
iPai5.8/sy/标志/淘宝合作伙伴.png
.png
iPai5.8/sy/标志/淘宝网.gif
.gif
iPai5.8/sy/标志/诚信单位.gif
.gif
iPai5.8/sy/标签/Tag01.png
.png
iPai5.8/sy/标签/Tag02.png
.png
iPai5.8/sy/标签/Tag03.png
.png
iPai5.8/sy/标签/Tag04.png
.png
iPai5.8/sy/标签/Tag05.png
.png
iPai5.8/sy/标签/Tag06.png
.png
iPai5.8/sy/标签/Tag07.png
.png
iPai5.8/sy/标签/Tag08.png
.png
iPai5.8/sy/标签/木标签.png
.png
iPai5.8/sy/热销/mtsc53042.png
.png
iPai5.8/sy/热销/mtsc53043.png
.png
iPai5.8/sy/热销/mtsc53044.png
.png
iPai5.8/sy/热销/mtsc53050.png
.png
iPai5.8/sy/热销/mtsc53155.png
.png
iPai5.8/sy/热销/mtsc53217.png
.png
iPai5.8/sy/热销/mtsc53218.png
.png
iPai5.8/sy/热销/mtsc53219.png
.png
iPai5.8/sy/热销/mtsc53224.png
.png
iPai5.8/sy/热销/mtsc53226.png
.png
iPai5.8/sy/热销/mtsc53227.png
.png
iPai5.8/sy/热销/mtsc53359.png
.png
iPai5.8/sy/热销/mtsc53360.png
.png
iPai5.8/sy/热销/mtsc53361.png
.png
iPai5.8/sy/热销/mtsc53362.png
.png
iPai5.8/sy/热销/mtsc53363.png
.png
iPai5.8/sy/热销/mtsc53364.png
.png
iPai5.8/sy/热销/热卖.png
.png
iPai5.8/sy/物件/剪刀1.png
.png
iPai5.8/sy/物件/剪刀2.png
.png
iPai5.8/sy/物件/回形针1.png
.png
iPai5.8/sy/物件/回形针2.png
.png
iPai5.8/sy/物件/图钉-小.png
.png
iPai5.8/sy/物件/图钉-绘画.png
.png
iPai5.8/sy/物件/图钉-绿.png
.png
iPai5.8/sy/物件/图钉-蓝.png
.png
iPai5.8/sy/物件/图钉-黄.png
.png
iPai5.8/sy/物件/摄像机.png
.png
iPai5.8/sy/物件/放大镜1.png
.png
iPai5.8/sy/物件/放大镜2.png
.png
iPai5.8/sy/物件/时钟.png
.png
iPai5.8/sy/物件/条形码1.gif
.gif
iPai5.8/sy/物件/条形码2.gif
.gif
iPai5.8/sy/物件/胶布1.png
.png
iPai5.8/sy/物件/胶布2.png
.png
iPai5.8/sy/物件/购物篮.png
.png
iPai5.8/sy/物件/邮戳.png
.png
iPai5.8/sy/物件/邮票.png
.png
iPai5.8/sy/物件/邮票邮戳.png
.png
iPai5.8/sy/物件/钱包.png
.png
iPai5.8/sy/物件/铅笔1.png
.png
iPai5.8/sy/物件/铅笔2.png
.png
iPai5.8/sy/物件/铅笔3.png
.png
iPai5.8/sy/花朵/Flower01.gif
.gif
iPai5.8/sy/花朵/PhotoCapFlower.png
.png
iPai5.8/sy/花朵/flower01.png
.png
iPai5.8/sy/花朵/flower03.png
.png
iPai5.8/sy/花朵/flower05.png
.png
iPai5.8/sy/花朵/flower06.png
.png
iPai5.8/sy/花朵/flower07.png
.png
iPai5.8/sy/花朵/花瓣.png
.png
iPai5.8/sy/货源/mtsc53008.png
.png
iPai5.8/sy/货源/mtsc53009.png
.png
iPai5.8/sy/货源/mtsc53011.png
.png
iPai5.8/sy/货源/mtsc53013.png
.png
iPai5.8/sy/货源/mtsc53016.png
.png
iPai5.8/sy/货源/mtsc53097.png
.png
iPai5.8/sy/货源/mtsc53101.png
.png
iPai5.8/sy/货源/mtsc53102.png
.png
iPai5.8/sy/货源/mtsc53103.png
.png
iPai5.8/sy/货源/mtsc53199.png
.png
iPai5.8/sy/货源/mtsc53345.png
.png
iPai5.8/sy/货源/mtsc53346.png
.png
iPai5.8/sy/货源/mtsc53350.png
.png
iPai5.8/sy/货源/mtsc53355.png
.png
iPai5.8/sy/货源/mtsc53511.png
.png
iPai5.8/sy/货源/mtsc53512.png
.png
iPai5.8/sy/赠品/mtsc53163.png
.png
iPai5.8/sy/赠品/mtsc53205.png
.png
iPai5.8/sy/赠品/mtsc53206.png
.png
iPai5.8/sy/赠品/mtsc53207.png
.png
iPai5.8/sy/赠品/mtsc53304.png
.png
iPai5.8/sy/赠品/mtsc53306.png
.png
iPai5.8/sy/赠品/mtsc53307.png
.png
iPai5.8/sy/赠品/mtsc53309.png
.png
iPai5.8/sy/赠品/mtsc53310.png
.png
iPai5.8/sy/赠品/mtsc53311.png
.png
iPai5.8/sy/赠品/mtsc53316.png
.png
iPai5.8/sy/赠品/mtsc53317.png
.png
iPai5.8/sy/赠品/mtsc53318.png
.png
iPai5.8/sy/赠品/mtsc53319.png
.png
iPai5.8/sy/赠品/mtsc53320.png
.png
iPai5.8/sy/赠品/mtsc53321.png
.png
iPai5.8/sy/赠品/mtsc53322.png
.png
iPai5.8/sy/赠品/mtsc53323.png
.png
iPai5.8/sy/运费/mtsc53057.png
.png
iPai5.8/sy/运费/mtsc53058.png
.png
iPai5.8/sy/运费/mtsc53059.png
.png
iPai5.8/sy/运费/mtsc53162.png
.png
iPai5.8/sy/运费/mtsc53288.png
.png
iPai5.8/sy/运费/mtsc53289.png
.png
iPai5.8/sy/运费/mtsc53290.png
.png
iPai5.8/sy/运费/mtsc53291.png
.png
iPai5.8/sy/运费/mtsc53292.png
.png
iPai5.8/sy/运费/mtsc53293.png
.png
iPai5.8/sy/运费/mtsc53294.png
.png
iPai5.8/sy/运费/mtsc53295.png
.png
iPai5.8/sy/运费/mtsc53296.png
.png
iPai5.8/sy/运费/mtsc53297.png
.png
iPai5.8/sy/运费/mtsc53298.png
.png
iPai5.8/sy/运费/mtsc53299.png
.png
iPai5.8/sy/运费/mtsc53300.png
.png
iPai5.8/sy/运费/mtsc53301.png
.png
iPai5.8/sy/运费/mtsc53302.png
.png
iPai5.8/sy/运费/mtsc53303.png
.png
iPai5.8/sy/销售/出售1.gif
.gif
iPai5.8/sy/销售/出售2.gif
.gif
iPai5.8/sy/销售/出售3.png
.png
iPai5.8/sy/销售/出售4.png
.png
iPai5.8/sy/销售/商品促销.png
.png
iPai5.8/sy/销售/商品热卖.png
.png
iPai5.8/sy/销售/商品特价.png
.png
iPai5.8/sy/销售/广告牌1.gif
.gif
iPai5.8/sy/销售/广告牌2.gif
.gif
iPai5.8/sy/销售/秒杀.png
.png
iPai5.8/unrar.dll
.dll windows:4 windows x86 arch:x86

244d2f9772f4886a651db44514a2a29b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
SetFileSecurityA
SetFileSecurityW

kernel32

CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW
DeviceIoControl
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCPInfo
GetCurrentProcess
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileAttributesW
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
IsDBCSLeadByte
LCMapStringA
LoadLibraryA
LocalFileTimeToFileTime
MoveFileA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleCount
Sleep
SystemTimeToFileTime
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile

user32

CharLowerA
CharLowerW
CharToOemA
CharToOemBuffA
CharUpperA
CharUpperW
EnumThreadWindows
MessageBoxA
OemToCharA
OemToCharBuffA
wsprintfA

Exports

Exports

RARCloseArchive
RARGetDllVersion
RAROpenArchive
RAROpenArchiveEx
RARProcessFile
RARProcessFileW
RARReadHeader
RARReadHeaderEx
RARSetCallback
RARSetChangeVolProc
RARSetPassword
RARSetProcessDataProc
___CPPdebugHook

Sections

.text
Size: 130KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
iPai5.8/user/ad.dat
iPai5.8/将iPai放到桌面.exe
.exe windows:4 windows x86 arch:x86

409e3c31c94cd813ea95853d7a39fbbd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
_adj_fpatan
__vbaNew
_CIsqrt
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
__vbaStrMove
__vbaCastObj
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
iPai5.8/注册组件.bat

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 692KB - Virtual size: 692KB

DATA Size: 12KB - Virtual size: 12KB

BSS Size: - Virtual size: 9KB

.idata Size: 9KB - Virtual size: 8KB

.edata Size: 2KB - Virtual size: 1KB

.reloc Size: 34KB - Virtual size: 34KB

.rsrc Size: 24KB - Virtual size: 24KB

6e0787634aa4bc2239034c39a0e3a00d

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10Certificate

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1dCertificate

Extended Key Usages

Key Usages

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5cCertificate

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

user32

ole32

advapi32

oleaut32

gdi32

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 50KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 17KB - Virtual size: 16KB

.reloc Size: 4KB - Virtual size: 3KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 156KB

UPX1 Size: 81KB - Virtual size: 84KB

.rsrc Size: 2KB - Virtual size: 4KB

debfe3e738382b826217309e9aacfafe

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 888KB - Virtual size: 887KB

.data Size: 4KB - Virtual size: 24KB

.rsrc Size: 8KB - Virtual size: 4KB

244d2f9772f4886a651db44514a2a29b

Headers

File Characteristics

Imports

advapi32

kernel32

user32

Exports

Exports

Sections

.text Size: 130KB - Virtual size: 132KB

.data Size: 15KB - Virtual size: 44KB

.tls Size: 512B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

409e3c31c94cd813ea95853d7a39fbbd

Headers

File Characteristics

Imports

CODE
Size: 692KB - Virtual size: 692KB

DATA
Size: 12KB - Virtual size: 12KB

BSS
Size: - Virtual size: 9KB

.idata
Size: 9KB - Virtual size: 8KB

.edata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 34KB - Virtual size: 34KB

.rsrc
Size: 24KB - Virtual size: 24KB

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

.text
Size: 51KB - Virtual size: 50KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 4KB - Virtual size: 3KB

UPX0
Size: - Virtual size: 156KB

UPX1
Size: 81KB - Virtual size: 84KB

.rsrc
Size: 2KB - Virtual size: 4KB

.text
Size: 888KB - Virtual size: 887KB

.data
Size: 4KB - Virtual size: 24KB

.rsrc
Size: 8KB - Virtual size: 4KB

.text
Size: 130KB - Virtual size: 132KB

.data
Size: 15KB - Virtual size: 44KB

.tls
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 720B

.rsrc
Size: 4KB - Virtual size: 2KB