db9a6c0dfd618e0b029e8f39cc10537f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

db9a6c0dfd618e0b029e8f39cc10537f_JaffaCakes118
Size

7.8MB
MD5

db9a6c0dfd618e0b029e8f39cc10537f
SHA1

5316f93e829326c1c9040190fa7c2b0bd4d27f99
SHA256

882c7653dcd983fa9610db8ecaded9a92881d50ac1d99938439e569a4ec7c54f
SHA512

21bbd617ade2eb27be79a986df86962ca99afad9815568b7c06cff152b1c479208f93ab64e9987ea48b86d645fb7d2abff0eff23355caa52789d2db615b5885f
SSDEEP

196608:J8YH/bhxbBnt+iwpxsJfD6fxPj4ZS7+89u2KZ5I:K4htBnt+xpxsJfKxPjJ7+89Sg

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/打字高手--文录教学鉴定系统 V8.3/wbxsee.exe	upx
static1/unpack001/打字高手--文录教学鉴定系统 V8.3/wwtgame3.exe	upx
static1/unpack001/打字高手--文录教学鉴定系统 V8.3/wwtwin.exe	upx

Unsigned PE 14 IoCs

Checks for missing Authenticode signature.

resource
unpack001/打字高手--文录教学鉴定系统 V8.3/BANTAM.DLL
unpack001/打字高手--文录教学鉴定系统 V8.3/IDAPI32.DLL
unpack001/打字高手--文录教学鉴定系统 V8.3/IDDBAS32.DLL
unpack001/打字高手--文录教学鉴定系统 V8.3/IDR20009.DLL
unpack001/打字高手--文录教学鉴定系统 V8.3/uninst.exe
unpack001/打字高手--文录教学鉴定系统 V8.3/wbxsee.exe
unpack002/out.upx
unpack001/打字高手--文录教学鉴定系统 V8.3/wwt.exe
unpack001/打字高手--文录教学鉴定系统 V8.3/wwtgame1.exe
unpack001/打字高手--文录教学鉴定系统 V8.3/wwtgame2.exe
unpack001/打字高手--文录教学鉴定系统 V8.3/wwtgame3.exe
unpack003/out.upx
unpack001/打字高手--文录教学鉴定系统 V8.3/wwtwin.exe
unpack004/out.upx

Files

db9a6c0dfd618e0b029e8f39cc10537f_JaffaCakes118
.rar
打字高手--文录教学鉴定系统 V8.3/BANTAM.DLL
.dll windows:1 windows x86 arch:x86

302e92a8b022643b516e70240a11b811

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CreateFileA
GetCurrentThreadId
EnterCriticalSection
ExitProcess
CloseHandle
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
CreateMutexA
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetVersion
FileTimeToDosDateTime
GetVolumeInformationA
GlobalMemoryStatus
InitializeCriticalSection
IsDBCSLeadByte
LeaveCriticalSection
MultiByteToWideChar
RaiseException
ReadFile
ReleaseMutex
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
GetVersionExA

user32

MessageBoxA
EnumThreadWindows

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
BT_BufferCollate
BT_BufferMatch
BT_ByteCount
BT_CharacterCount
BT_ClientToNative
BT_CloseLocale
BT_Ctype
BT_Exit
BT_FuzzyBufferComp
BT_FuzzyStrComp
BT_GetFoxSortKey
BT_GetIndexKey
BT_GetLastError
BT_GetLocaleInfo
BT_GetLocaleList
BT_GetMinMaxCollChar
BT_GetOwner
BT_Init
BT_IsLeadByte
BT_IsTrailByte
BT_NativeToClient
BT_OpenLocale
BT_SetLocaleToClient
BT_SetLocaleToNative
BT_SetLocaleToUnicode
BT_StrCollate
BT_StrLower
BT_StrMatch
BT_StrTransform
BT_StrUpper
BT_ToLower
BT_ToSoundex
BT_ToUpper
_OSLD_GetLdInfoFromBTID
_OSLD_GetLdInfoFromCodeSet
_OSLD_GetLdInfoFromID
_OSLD_GetLdInfoFromINDEX
_OSLD_GetLdInfoFromLCID
_OSLD_GetLdInfoFromName
_OSLD_IsLdAvailable
__DebuggerHookData

Sections

CODE
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 37KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
打字高手--文录教学鉴定系统 V8.3/Backdrop.jpg
.jpg
打字高手--文录教学鉴定系统 V8.3/CHARSET.CVB
打字高手--文录教学鉴定系统 V8.3/FAREAST.BTL
打字高手--文录教学鉴定系统 V8.3/IDAPI32.DLL
.dll regsvr32 windows:1 windows x86 arch:x86

ac24d2585411ea8a1d33653136dd11ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

UnmapViewOfFile
TlsFree
VirtualQuery
VirtualAlloc
UnlockFile
TlsGetValue
WriteFile
WaitForSingleObject
lstrcatA
VirtualFree
FindClose
WritePrivateProfileStringA
GetTimeZoneInformation
TlsSetValue
lstrcpyA
WriteProfileStringA
WideCharToMultiByte
CloseHandle
CreateFileA
CreateFileMappingA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DeleteFileA
DuplicateHandle
EnterCriticalSection
ExitProcess
FatalAppExitA
FileTimeToDosDateTime
UnhandledExceptionFilter
lstrlenA
GetSystemDirectoryA
GetStartupInfoA
FindNextFileA
FindResourceA
FlushFileBuffers
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringA
GetProcAddress
GetProfileStringA
FileTimeToLocalFileTime
FindFirstFileA
GetShortPathNameA
GetTickCount
GetTempPathA
FileTimeToSystemTime
GetStdHandle
GetVersion
GetVersionExA
GetVolumeInformationA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFree
GlobalHandle
GlobalLock
GlobalMemoryStatus
GlobalUnlock
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsDBCSLeadByte
LeaveCriticalSection
LoadLibraryA
LoadResource
LockFile
LockResource
MapViewOfFileEx
MoveFileA
MultiByteToWideChar
RaiseException
ReadFile
ReleaseMutex
ReleaseSemaphore
RtlUnwind
SearchPathA
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEndOfFile
SetErrorMode
SetFilePointer
SetHandleCount
Sleep
TlsAlloc

advapi32

RegOpenKeyExA
InitializeSecurityDescriptor
RegOpenKeyA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
SetSecurityDescriptorDacl
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegQueryValueExA

ole32

StringFromGUID2
CoCreateInstance
OleInitialize

user32

OemToCharA
MessageBoxA
LoadStringA
CharUpperA
CharToOemBuffA
CharToOemA
OemToCharBuffA
EnumThreadWindows

mpr

WNetCloseEnum
WNetOpenEnumA
WNetGetUserA
WNetGetConnectionA
WNetEnumResourceA

oleaut32

SysFreeString
SysAllocStringLen
SysAllocStringByteLen

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
ADDELT
CfgComposeRec
CfgGetField
CfgGetOLEDBParseDN
CliGetDriver
CloseCallBack
CreateDbObj
CreateDrvObj
CreateUniqFldNames
CreateVtObj
CreateXltRecCurs
DLLEXITFUNCTION2
DLLINITFUNCTION
DbiAcqPersistTableLock
DbiAcqTableLock
DbiActivateFilter
DbiAddAlias
DbiAddDriver
DbiAddFamilyMember
DbiAddFilter
DbiAddIndex
DbiAddPassword
DbiAddRepository
DbiAnsiToNative
DbiAppendRecord
DbiApplyDelayedUpdates
DbiBatchMove
DbiBatchMoveQuery
DbiBcdFromFloat
DbiBcdToFloat
DbiBeginBatch
DbiBeginConstraintLayer
DbiBeginDelayedUpdates
DbiBeginLinkMode
DbiBeginLrNavMode
DbiBeginTran
DbiBeginXlateMode
DbiCfgAddRecord
DbiCfgBuildPath
DbiCfgDropRecord
DbiCfgGetHelp
DbiCfgGetNextNode
DbiCfgGetRecord
DbiCfgImportToRegistry
DbiCfgInstallMerge
DbiCfgMerge
DbiCfgModifyRecord
DbiCfgPosition
DbiCfgSave
DbiCfgTranslate
DbiChangeDefXltFn
DbiCheckRefresh
DbiCheckSQLExpression
DbiClearStats
DbiCloneCursor
DbiCloseConfigFile
DbiCloseCursor
DbiCloseDatabase
DbiCloseFieldXlt
DbiCloseFileHandle
DbiCloseIndex
DbiCloseSession
DbiCompareBookMarks
DbiCompareKeys
DbiComposeCursor
DbiCopyTable
DbiCreateInMemTable
DbiCreateTable
DbiCreateTempTable
DbiDRAdd
DbiDRAddAttr
DbiDRClose
DbiDRCreate
DbiDRCreateEnumAttrDomain
DbiDRCreateObjectType
DbiDRCreateRelationType
DbiDRDelete
DbiDRDeleteEnumAttrDomain
DbiDRDeleteObjectType
DbiDRDeleteRelationType
DbiDRDrop
DbiDRDropAttr
DbiDRExportToFile
DbiDRGetAttrDescs
DbiDRGetDesc
DbiDRGetEnumAttrDomain
DbiDRGetObjID
DbiDRGetObjTypeInfo
DbiDRGetRelTypeInfo
DbiDRGetRelatedObject
DbiDRImportFromFile
DbiDRLoadDBObject
DbiDRModifyEnumAttrDomain
DbiDROpen
DbiDROpenAttrTypeList
DbiDROpenObjSet
DbiDROpenObjectTypeList
DbiDROpenRelSet
DbiDROpenRelTypeList
DbiDRSetToObjID
DbiDRSetToObjName
DbiDatabaseFlush
DbiDateDecode
DbiDateEncode
DbiDeComposeCursor
DbiDeactivateFilter
DbiDebugLayerOptions
DbiDeleteAlias
DbiDeleteDriver
DbiDeleteIndex
DbiDeleteRecord
DbiDeleteRepository
DbiDeleteTable
DbiDeregisterCursor
DbiDoRestructure
DbiDoSoftRestr
DbiDropFamilyMember
DbiDropFilter
DbiDropPassword
DbiDrvXlateFld
DbiEmptyTable
DbiEndBatch
DbiEndConstraintLayer
DbiEndDelayedUpdates
DbiEndLinkMode
DbiEndLrNavMode
DbiEndTran
DbiEndXlateMode
DbiEnlistMtsTransaction
DbiEnterRefresh
DbiExit
DbiExitRefresh
DbiExtractKey
DbiFlushFileHandleCache
DbiForceRecordReread
DbiForceReread
DbiFormFullName
DbiFreeBlob
DbiFreeSQLRequest
DbiGenSQLStatement
DbiGetBestRowIdentifier
DbiGetBlob
DbiGetBlobHeading
DbiGetBlobSize
DbiGetBookMark
DbiGetCallBack
DbiGetClientInfo
DbiGetCurrSession
DbiGetCurrXltFn
DbiGetCursorForTable
DbiGetCursorProps
DbiGetDatabaseDesc
DbiGetDatabaseParams
DbiGetDateFormat
DbiGetDefaultRepository
DbiGetDirectory
DbiGetDriverDesc
DbiGetDriverParams
DbiGetErrorContext
DbiGetErrorEntry
DbiGetErrorInfo
DbiGetErrorString
DbiGetExactRecordCount
DbiGetExtFldDesc
DbiGetField
DbiGetFieldDescs
DbiGetFieldTypeDesc
DbiGetFilterInfo
DbiGetIndexDesc
DbiGetIndexDescs
DbiGetIndexForField
DbiGetIndexSeqNo
DbiGetIndexTypeDesc
DbiGetLdName
DbiGetLdNameFromDb
DbiGetLdObj
DbiGetLinkStatus
DbiGetNetUserName
DbiGetNextRecord
DbiGetNumberFormat
DbiGetObjFromName
DbiGetObjFromObj
DbiGetObjectHandles
DbiGetPriorRecord
DbiGetProp
DbiGetRecord
DbiGetRecordCount
DbiGetRecordForKey
DbiGetRefreshDistance
DbiGetRelativeRecord
DbiGetRelativeRecordCnt
DbiGetRepositoryInfo
DbiGetRintDesc
DbiGetSQLRequest
DbiGetSeqNo
DbiGetSesInfo
DbiGetSysConfig
DbiGetSysInfo
DbiGetSysStats
DbiGetSysVersion
DbiGetTableClass
DbiGetTableOpenCount
DbiGetTableTypeDesc
DbiGetTimeFormat
DbiGetTranInfo
DbiGetVchkDesc
DbiHardInsertRecord
DbiImportODBC
DbiInitFn
DbiInitRecord
DbiInsertRecord
DbiIsLDID19As13
DbiIsLDID19As19
DbiIsLDIDUSAsLocal
DbiIsRecordLocked
DbiIsTableLocked
DbiIsTableShared
DbiJoinTables
DbiLinkDetail
DbiLinkDetailToExp
DbiLoadDriver
DbiMakePermanent
DbiMapRecStruct
DbiModifyRecord
DbiNativeToAnsi
DbiOpenBlob
DbiOpenCfgInfoList
DbiOpenConfigFile
DbiOpenDatabase
DbiOpenDatabaseList
DbiOpenDriverList
DbiOpenFamilyList
DbiOpenFieldList
DbiOpenFieldTypesList
DbiOpenFieldXlt
DbiOpenFileList
DbiOpenFunctionArgList
DbiOpenFunctionList
DbiOpenIndex
DbiOpenIndexList
DbiOpenIndexTypesList
DbiOpenLdList
DbiOpenLockList
DbiOpenNestedTable
DbiOpenRef
DbiOpenRepositoryList
DbiOpenRintList
DbiOpenSPList
DbiOpenSPParamList
DbiOpenSecurityList
DbiOpenSessionRepository
DbiOpenTable
DbiOpenTableList
DbiOpenTableTypesList
DbiOpenUserList
DbiOpenVchkList
DbiPackTable
DbiPrepareDelayedUpdates
DbiProcessSql
DbiPutBlob
DbiPutField
DbiQAlloc
DbiQExec
DbiQExecDirect
DbiQExecProcDirect
DbiQFree
DbiQGetBaseDescs
DbiQInstantiateAnswer
DbiQLowBuild
DbiQLowFieldExp
DbiQLowFieldName
DbiQLowGetName
DbiQLowGetPAL
DbiQLowGetPALLen
DbiQLowGetProps
DbiQLowIsExample
DbiQLowParse
DbiQLowPrepare
DbiQLowQA
DbiQLowSetName
DbiQLowSetProps
DbiQLowStart
DbiQLowTableInfo
DbiQLowTablesCount
DbiQPrepare
DbiQPrepareExt
DbiQPrepareProc
DbiQSetParams
DbiQSetProcParams
DbiQryExec
DbiQryExecDirect
DbiQryFormatAnswer
DbiQryFree
DbiQryGetAnsFormat
DbiQryGetCursorProps
DbiQryGetFieldDescs
DbiQryGetLogType
DbiQryInstantiateAnswer
DbiQryOpen
DbiQryPrepareCmd
DbiQryRegisterCallBack
DbiQrySqlGetStrLen
DbiQrySqlGetString
DbiReadBlock
DbiRecordFlushRef
DbiRegenIndex
DbiRegenIndexes
DbiRegister
DbiRegisterCallBack
DbiRegisterCursor
DbiRelPersistTableLock
DbiRelRecordLock
DbiRelTableLock
DbiReleaseMem
DbiRenameTable
DbiResetDetailLinks
DbiResetRange
DbiSQLTextToCanEx
DbiSaveChanges
DbiSchemaCacheFlush
DbiSetCurrSession
DbiSetDateFormat
DbiSetDefaultRepository
DbiSetDirectory
DbiSetFieldMap
DbiSetFieldMap2
DbiSetFilterProps
DbiSetLDID19As13
DbiSetLDID19As19
DbiSetLDIDUSAsLocal
DbiSetLockRetry
DbiSetNumberFormat
DbiSetPrivateDir
DbiSetProp
DbiSetRange
DbiSetRefreshRange
DbiSetStats
DbiSetTimeFormat
DbiSetToBegin
DbiSetToBookMark
DbiSetToCursor
DbiSetToEnd
DbiSetToKey
DbiSetToRecordNo
DbiSetToSeqNo
DbiSetupExprObj
DbiSortTable
DbiSortTable2
DbiStartSession
DbiSwitchToIndex
DbiTimeDecode
DbiTimeEncode
DbiTimeStampDecode
DbiTimeStampEncode
DbiTranslateField
DbiTranslateRecordStructure
DbiTruncateBlob
DbiUCloseSecurityFile
DbiUCreateSecurityFile
DbiUDeleteSecurityUser
DbiUGetLoginSecurity
DbiUGetSecurityUserInfo
DbiUGetTablePrivileges
DbiUJoinIndexes
DbiUOpenSecurityFile
DbiUReadTableHdr
DbiURegenBlobFile
DbiUSetLoginSecurity
DbiUSetSecurityUserInfo
DbiUSetTablePrivileges
DbiUValidateSecurityUser
DbiUWriteTableHdr
DbiUndeleteRecord
DbiUnlinkDetail
DbiUseIdleTime
DbiValidateName
DbiValidateProp
DbiValidateRecordStructure
DbiVerifyField
DbiWriteBlock
DllEntryPoint
DllRegisterServer
DllUnregisterServer
DsProviderGetDataPacket
DsResolver
ExecCallBack
ExpGeneratePostFix
ExprGenPostFix
FAMILY
FreeVtObj
GetCallBack
GetExtFromTblType
GetLocalCp
GetSpc1
GetSpc2
GetTblTypeFromExt
GetTblTypeFromTblName
GetWorldFlags
GetszLDdb
GetszLDpx
ImltCreateTable
ImltCreateTable2
ImltExitSubSys
ImltInitSubSys
JapanStrCmp
JapanStrnCmp
JapanStrnCmpi
LBlobOpen
LISTLENGTH
LrNavCompSetup
LsDateDecode
LsDateEncode
LsGetDate
LsGetTime
LsGetTimeStampEncode
LsTimeDecode
LsTimeEncode
LsTimeStampDecode
LsTimeStampEncode
LsValidDate
MEMB
NCONC
NCONS
NULLP
OCCloseObjs
OCFindObj
OCRegisterObj
OCUnRegisterObj
OpenCallBack
OsAssert
OsChSize
OsClearError
OsClose
OsCloseForInstance
OsControlError
OsCopy
OsCopyShare
OsCreate
OsCreate2
OsCreateRWObj
OsCtxBegin
OsCtxClrStk
OsCtxCount
OsCtxEnd
OsCtxExit
OsCtxGetCur
OsCtxGetElem
OsCtxGetError
OsCtxGetSymStr
OsCtxInit
OsCtxPop
OsCtxPush
OsCtxSetFatal
OsCurrFile
OsDBGSaveError
OsDeleteRWObj
OsDirExists
OsDirFirst
OsDirNext
OsFileExists
OsFileExistsSearch
OsFileLength
OsFlushFileSize
OsFlushLocalBuf
OsFreeDll
OsFreeSharedSz
OsFreeSz
OsGetCodePage
OsGetCurDirEx
OsGetCurDrive
OsGetDate
OsGetDllFileName
OsGetFileTime
OsGetM
OsGetNetInMemFlag
OsGetOSType
OsGetPrivateProfileString
OsGetProcAddressByName
OsGetProcAddressByNum
OsGetProcessId
OsGetProfileString
OsGetSharedPtr
OsGetSystemTicks
OsGetTempDir
OsGetTempName
OsGetTime
OsIs386
OsIs386Enh
OsIsAlpha
OsIsDigit
OsIsFileLocal
OsIsFileOnCdRom
OsIsFileReadOnly
OsIsLocalDrive
OsIsLocalDrive_0
OsJLdCBtoM
OsJLdCMtoB
OsJLdCStrLen

Sections

CODE
Size: 429KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

TLSCBA
Size: 512B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
打字高手--文录教学鉴定系统 V8.3/IDDBAS32.DLL
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

@IntlAsianSort1$qqspvt1t1i
@IntlAsianSort2$qqspvt1t1i
@IntlAsianSort3$qqspvt1t1i
@IntlAsianSort4$qqspvt1t1i
@IntlAsianSort5$qqspvt1t1i
@IntlGetTrueStrLen$qqspci
@OdapiIndexObjectExprEqualCB$qqsp6ExpObjpc
@OdapiIndexObjectGetExactCB$qqsp6ExpObjulps
@OdapiIndexObjectKeyEndCB$qqsp6ExpObj
@OdapiIndexObjectKeyGenCB$qqsp6ExpObjpucult2
@OdapiIndexObjectKeyInfoCB$qqsp6ExpObjpust2pit4
@OdapiIndexObjectRecFilterCB$qqsp6ExpObjpuculpi
@OdapiIndexObjectSetExactCB$qqsp6ExpObjuls
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
BLM_BufferCollate
BLM_StrDbaseCompare
BLM_StrTranslation
BLM_ToSoundex
BLN_GetSysLocale
BLN_IsClass
BLN_QStrMatchi
BLN_QStrnMatchi
BLN_StrCollate
BLN_StrDbaseCompare
BLN_StrLower
BLN_StrTranslation
BLN_StrUpper
BLN_StrnLower
BLN_StrnUpper
BLN_ToLower
BLN_ToSoundex
BLN_ToUpper
BLW_GetSysLocale
BLW_StrTranslation
BL_BufferConvert
BL_CloseConversion
BL_CloseLocale
BL_CollationInfo
BL_Exit
BL_GetHlocaleCharacterSetName
BL_GetHlocaleInfo
BL_GetLDDescFromLDID
BL_GetLDIDFromHlocale
BL_GetTranslationCount
BL_GetTranslationInfo
BL_IsFirstByte
BL_OpenConversion
BL_OpenLocale
BL_OpenLocaleWithLDID
BL_OpenLocaleWithLDName
FiltFloatCompare
FloatCompare
OsLdMBRisCJKBlank
OsLdMBRisCJKKana
OsLdMBRisKana
OsLdMBRisLead
OsLdMBRisTrail
WEP
XBFINDOBJ
XBREGISTEROBJ
XBUNREGISTEROBJ
XDrvInit
_BL_InitClient
__DebuggerHookData
dbe_IsExprEqual
dbe_callback

Sections

CODE
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 27KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
打字高手--文录教学鉴定系统 V8.3/IDR20009.DLL
.dll windows:1 windows x86 arch:x86

ca7840dd8b852014c2f3a1872f9911d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetVersionExA
EnterCriticalSection
CloseHandle
FreeEnvironmentStringsA
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
CreateFileA
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetFileAttributesA
ExitProcess
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WriteFile
GetVersion

user32

MessageBoxA
EnumThreadWindows

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
WEP
__DebuggerHookData

Sections

CODE
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
打字高手--文录教学鉴定系统 V8.3/MANGER.DBF
打字高手--文录教学鉴定系统 V8.3/README.TXT
打字高手--文录教学鉴定系统 V8.3/Sound1.mid
打字高手--文录教学鉴定系统 V8.3/Sound12.mid
打字高手--文录教学鉴定系统 V8.3/Start.jpg
.jpg
打字高手--文录教学鉴定系统 V8.3/USA.BTL
打字高手--文录教学鉴定系统 V8.3/WBX.DBF
打字高手--文录教学鉴定系统 V8.3/WBX.MDX
打字高手--文录教学鉴定系统 V8.3/WWE-TEST.TXT
打字高手--文录教学鉴定系统 V8.3/WWT-TEST.TXT
打字高手--文录教学鉴定系统 V8.3/Wbcz.DBF
打字高手--文录教学鉴定系统 V8.3/Wbcz.MDX
打字高手--文录教学鉴定系统 V8.3/card1.dbf
打字高手--文录教学鉴定系统 V8.3/card2.dbf
打字高手--文录教学鉴定系统 V8.3/cool.avi
打字高手--文录教学鉴定系统 V8.3/cool1.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool10.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool11.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool12.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool13.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool14.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool15.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool16.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool17.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool18.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool19.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool2.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool20.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool3.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool4.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool5.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool6.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool7.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool8.gif
.gif
打字高手--文录教学鉴定系统 V8.3/cool9.gif
.gif
打字高手--文录教学鉴定系统 V8.3/module.ini
打字高手--文录教学鉴定系统 V8.3/netview/wwtgrade.MDX
打字高手--文录教学鉴定系统 V8.3/netview/wwtgrade.dbf
打字高手--文录教学鉴定系统 V8.3/netview/wwtuser.dbf
打字高手--文录教学鉴定系统 V8.3/netview/wwtview.MDX
打字高手--文录教学鉴定系统 V8.3/netview/wwtview.dbf
打字高手--文录教学鉴定系统 V8.3/sound10.mid
打字高手--文录教学鉴定系统 V8.3/sound11.mid
打字高手--文录教学鉴定系统 V8.3/sound2.mid
打字高手--文录教学鉴定系统 V8.3/sound3.mid
打字高手--文录教学鉴定系统 V8.3/sound4.mid
打字高手--文录教学鉴定系统 V8.3/sound5.mid
打字高手--文录教学鉴定系统 V8.3/sound6.mid
打字高手--文录教学鉴定系统 V8.3/sound7.mid
打字高手--文录教学鉴定系统 V8.3/sound8.mid
打字高手--文录教学鉴定系统 V8.3/sound9.mid
打字高手--文录教学鉴定系统 V8.3/uninst.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 287KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
打字高手--文录教学鉴定系统 V8.3/user1.dbf
打字高手--文录教学鉴定系统 V8.3/wbxsee.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 508KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 235KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 521KB - Virtual size: 521KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
打字高手--文录教学鉴定系统 V8.3/winpy.CDX
打字高手--文录教学鉴定系统 V8.3/winpy.dbf
打字高手--文录教学鉴定系统 V8.3/wsmanger.dbf
打字高手--文录教学鉴定系统 V8.3/wwt.exe
.exe windows:1 windows x86 arch:x86

e304217fc16c011615a0ec22783cbfae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

user32

DefWindowProcA
AdjustWindowRectEx

Sections

0
Size: - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 44KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
打字高手--文录教学鉴定系统 V8.3/wwt1.txt
打字高手--文录教学鉴定系统 V8.3/wwt2.txt
打字高手--文录教学鉴定系统 V8.3/wwt3.TXT
打字高手--文录教学鉴定系统 V8.3/wwt4.TXT
打字高手--文录教学鉴定系统 V8.3/wwt5.txt
打字高手--文录教学鉴定系统 V8.3/wwt6.txt
打字高手--文录教学鉴定系统 V8.3/wwt7.txt
打字高手--文录教学鉴定系统 V8.3/wwt8.txt
打字高手--文录教学鉴定系统 V8.3/wwt9.txt
打字高手--文录教学鉴定系统 V8.3/wwte1.txt
打字高手--文录教学鉴定系统 V8.3/wwte2.txt
打字高手--文录教学鉴定系统 V8.3/wwte3.txt
打字高手--文录教学鉴定系统 V8.3/wwte4.txt
打字高手--文录教学鉴定系统 V8.3/wwte5.txt
打字高手--文录教学鉴定系统 V8.3/wwte6.txt
打字高手--文录教学鉴定系统 V8.3/wwte7.txt
打字高手--文录教学鉴定系统 V8.3/wwte8.txt
打字高手--文录教学鉴定系统 V8.3/wwte9.txt
打字高手--文录教学鉴定系统 V8.3/wwtgame1.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 431KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
打字高手--文录教学鉴定系统 V8.3/wwtgame2.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 385KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 361KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
打字高手--文录教学鉴定系统 V8.3/wwtgame3.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 940KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 411KB - Virtual size: 410KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 914KB - Virtual size: 914KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
打字高手--文录教学鉴定系统 V8.3/wwtgrade.dbf
打字高手--文录教学鉴定系统 V8.3/wwtgroup.dbf
打字高手--文录教学鉴定系统 V8.3/wwthelp1.chm
.chm
打字高手--文录教学鉴定系统 V8.3/wwthelp2.chm
.chm
打字高手--文录教学鉴定系统 V8.3/wwttonji.dbf
打字高手--文录教学鉴定系统 V8.3/wwtuser.dbf
打字高手--文录教学鉴定系统 V8.3/wwtuser1.dbf
打字高手--文录教学鉴定系统 V8.3/wwtwin.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 396KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 216KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 488KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/《灯》.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/丑小鸭.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/中国共产党第十四届中央委员会第六次全体会议.TXT
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/中国童话一.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/中国童话二.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/中国笑林汇篇.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/为了忘却的记念.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/人是什么.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/人生瞬间.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/假如给我三天光明.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/儿童睡前故事.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/儿童笑话.TXT
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/儿童诗歌·动物.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/儿童诗歌·植物.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/儿童诗歌·自然.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/六个仆人.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/兰亭集序.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/再别康桥.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/十二个懒汉.TXT
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/千家诗.TXT
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/大拇指.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/大拇指汤姆.TXT
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/小小竹排画中游.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/小石潭记,师说....TXT
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/小精灵和鞋匠.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/小红帽.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/成语故事.TXT
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/我爱这土地.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/拇指姑娘.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/拿来主义.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/政协九届全国委员会常委会工作报告.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/故都的秋.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/新世纪三字经.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/春雨的颜色.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/棒棒的来历.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/汤姆叔叔的小屋.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/灰姑娘.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/物种起源.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/狮子王.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/狼和七只小山羊.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/玻璃瓶中的妖怪.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/白雪公主.TXT
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/皇帝的新装.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/睡美人.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/祝福·鲁迅.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/罗密欧与朱丽叶.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/美人鱼的故事.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/荷塘月色.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/荷花淀.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/被同伴驱逐的蝙蝠.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/记忆.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/词七首.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/谁是最可爱的人.TXT
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/赤壁赋.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/门槛.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/阿房宫赋.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/雪地里的小画家.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/青蛙王子.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/领袖,请下命令吧!.txt
打字高手--文录教学鉴定系统 V8.3/中文录入对照文本/鸿门宴.txt
打字高手--文录教学鉴定系统 V8.3/数字录入练习文本/readme.txt
打字高手--文录教学鉴定系统 V8.3/数字录入练习文本/商品编码.txt
打字高手--文录教学鉴定系统 V8.3/数字录入练习文本/身份证号.txt
打字高手--文录教学鉴定系统 V8.3/考生须知.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/上尉的女儿.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/什么是计算机.TXT
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/什么是高级语言.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/伦敦的新生活.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/傲慢与偏见.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/八十天环游地球.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/别了，武器.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/双城记.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/嘉莉妹妹.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/女王、国王和王子.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/娜娜.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/小妇人.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/悲惨世界.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/愤怒的葡萄.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/战争与和平.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/文字处理.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/漂亮的朋友.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/现代喜剧.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/简爱.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/结构化程序设计.TXT
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/罪与罚.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/美人鱼酒店.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/老人与海.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/茶花女.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/蝴蝶夫人.txt
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/计算机的部件.TXT
打字高手--文录教学鉴定系统 V8.3/英文录入对照文本/重要的PC机键.txt

Sharing

General

Malware Config

Signatures

Files

302e92a8b022643b516e70240a11b811

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

CODE Size: 54KB - Virtual size: 56KB

DATA Size: 37KB - Virtual size: 52KB

.idata Size: 1KB - Virtual size: 4KB

.edata Size: 1KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 4KB

ac24d2585411ea8a1d33653136dd11ed

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

user32

mpr

oleaut32

Exports

Exports

Sections

CODE Size: 429KB - Virtual size: 432KB

DATA Size: 72KB - Virtual size: 76KB

DATA Size: 512B - Virtual size: 4KB

TLSCBA Size: 512B - Virtual size: 24KB

.idata Size: 4KB - Virtual size: 4KB

.edata Size: 51KB - Virtual size: 52KB

.reloc Size: 15KB - Virtual size: 16KB

.rsrc Size: 1024B - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 392KB - Virtual size: 392KB

DATA Size: 27KB - Virtual size: 44KB

.INIT Size: 3KB - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.edata Size: 2KB - Virtual size: 4KB

.reloc Size: 13KB - Virtual size: 16KB

.rsrc Size: 1024B - Virtual size: 4KB

ca7840dd8b852014c2f3a1872f9911d7

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

CODE Size: 23KB - Virtual size: 24KB

DATA Size: 5KB - Virtual size: 20KB

.idata Size: 1KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 4KB

.rsrc Size: 81KB - Virtual size: 84KB

Headers

File Characteristics

Sections

CODE Size: 287KB - Virtual size: 286KB

DATA Size: 3KB - Virtual size: 3KB

BSS Size: - Virtual size: 2KB

.idata Size: 8KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 20KB - Virtual size: 19KB

.rsrc Size: 28KB - Virtual size: 28KB

Headers

CODE
Size: 54KB - Virtual size: 56KB

DATA
Size: 37KB - Virtual size: 52KB

.idata
Size: 1KB - Virtual size: 4KB

.edata
Size: 1KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB

CODE
Size: 429KB - Virtual size: 432KB

DATA
Size: 72KB - Virtual size: 76KB

DATA
Size: 512B - Virtual size: 4KB

TLSCBA
Size: 512B - Virtual size: 24KB

.idata
Size: 4KB - Virtual size: 4KB

.edata
Size: 51KB - Virtual size: 52KB

.reloc
Size: 15KB - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 4KB

CODE
Size: 392KB - Virtual size: 392KB

DATA
Size: 27KB - Virtual size: 44KB

.INIT
Size: 3KB - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 2KB - Virtual size: 4KB

.reloc
Size: 13KB - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 4KB

CODE
Size: 23KB - Virtual size: 24KB

DATA
Size: 5KB - Virtual size: 20KB

.idata
Size: 1KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 81KB - Virtual size: 84KB

CODE
Size: 287KB - Virtual size: 286KB

DATA
Size: 3KB - Virtual size: 3KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 28KB - Virtual size: 28KB

UPX0
Size: - Virtual size: 508KB

UPX1
Size: 235KB - Virtual size: 236KB

.rsrc
Size: 4KB - Virtual size: 8KB

CODE
Size: 521KB - Virtual size: 521KB

DATA
Size: 8KB - Virtual size: 8KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 9KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 41KB - Virtual size: 41KB

.rsrc
Size: 125KB - Virtual size: 125KB

0
Size: - Virtual size: 4.6MB

1
Size: 1.3MB - Virtual size: 1.3MB

2
Size: - Virtual size: 4KB

3
Size: 44KB - Virtual size: 68KB

4
Size: 3KB - Virtual size: 3KB

5
Size: 7KB - Virtual size: 28KB

CODE
Size: 431KB - Virtual size: 430KB

DATA
Size: 6KB - Virtual size: 5KB

BSS
Size: - Virtual size: 8KB

.idata
Size: 8KB - Virtual size: 7KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 30KB - Virtual size: 30KB

.rsrc
Size: 240KB - Virtual size: 240KB

CODE
Size: 385KB - Virtual size: 384KB

DATA
Size: 6KB - Virtual size: 5KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 7KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 21KB - Virtual size: 21KB

.rsrc
Size: 361KB - Virtual size: 361KB

UPX0
Size: - Virtual size: 940KB

UPX1
Size: 460KB - Virtual size: 460KB

.rsrc
Size: 4KB - Virtual size: 4KB

CODE
Size: 411KB - Virtual size: 410KB

DATA
Size: 6KB - Virtual size: 6KB