e1174d7a16cdd950157973ffa848449a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e1174d7a16cdd950157973ffa848449a_JaffaCakes118
Size

9.3MB
MD5

e1174d7a16cdd950157973ffa848449a
SHA1

2bdb777f3801f5e27dee2346fa9f82dda2a3202b
SHA256

0b923f939293b4fe4cf60819b9917739dc90aa7a57e1585628724059c219ed23
SHA512

092383a2095c6d956f4a52b4d5a2084d8296e5a93c313627927363b880ff12416600ee1f0751fe4902463e20b333295c40d7af691ddd4b48d336b849bfe19054
SSDEEP

196608:xiQ7n1iZyWsDBPJEW/iqSjbD0JuuBYhGtGb2raU4b0oDFvWUukuKkPRG:AQ7WyW0BhEYVSjbD6hBmGtGb25ODFOU/

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack002/bin/Mir2EI.exe
unpack003/AdminCmd/Release/AdminCmd.dll
unpack003/GameSvr/Release/GameSvr.exe
unpack003/_bin/debug/GameSvr.exe

Files

e1174d7a16cdd950157973ffa848449a_JaffaCakes118
.rar
2006391435648/下载说明.htm
.html .js polyglot
2006391435648/新云软件.url
.url
2006391435648/韩国传奇正式版本-客户源码.rar
.rar
AVI/Avi.cpp
AVI/Avi.h
CharSelectProcess/BackGround/BackGround.cpp
CharSelectProcess/BackGround/BackGround.h
CharSelectProcess/CharacterProcess.cpp
CharSelectProcess/CharacterProcess.h
CharSelectProcess/Common/define.h
CharSelectProcess/CreateChr/CreateChr.cpp
CharSelectProcess/CreateChr/CreateChr.h
CharSelectProcess/SelectChr/SelectChr.cpp
CharSelectProcess/SelectChr/SelectChr.h
Common/Button.H
Common/Button.cpp
Common/ChatEditBox.cpp
Common/ChatEditBox.h
Common/ClientSocket.cpp
Common/ClientSocket.h
Common/DLinkedList.cpp
Common/DLinkedList.h
Common/DblList.cpp
Common/DblList.h
Common/EnDecode.cpp
Common/EnDecode.h
Common/ImageHandler.cpp
Common/ImageHandler.h
Common/MirButton.cpp
Common/MirButton.h
Common/MirMsgBox.cpp
Common/MirMsgBox.h
Common/MirMsgBox3D.cpp
Common/MirMsgBox3D.h
Common/MsgBox.cpp
Common/MsgBox.h
Common/NPCTxtAnalysis.cpp
Common/NPCTxtAnalysis.h
Common/NoticeBox.cpp
Common/NoticeBox.h
Common/Protocol.h
Common/Queue.cpp
Common/Queue.h
Common/Typedeftxt.h
Define.h
Extern.h
GFun.cpp
GFun.h
GameProcess/Actor.cpp
GameProcess/Actor.h
GameProcess/ChatPopWnd.cpp
GameProcess/ChatPopWnd.h
GameProcess/ClientSysMsg.cpp
GameProcess/ClientSysMsg.h
GameProcess/ExchangeWnd.cpp
GameProcess/ExchangeWnd.h
GameProcess/GameBtn.cpp
GameProcess/GameBtn.h
GameProcess/GameProc.cpp
GameProcess/GameProc.h
GameProcess/GameWnd.cpp
GameProcess/GameWnd.h
GameProcess/GroupPopWnd.cpp
GameProcess/GroupPopWnd.h
GameProcess/GroupWnd.cpp
GameProcess/GroupWnd.h
GameProcess/GuildMasterWnd.cpp
GameProcess/GuildMasterWnd.h
GameProcess/GuildWnd.cpp
GameProcess/GuildWnd.h
GameProcess/HorseWnd.cpp
GameProcess/HorseWnd.h
GameProcess/Interface.cpp
GameProcess/Interface.h
GameProcess/InventoryWnd.cpp
GameProcess/InventoryWnd.h
GameProcess/Item.cpp
GameProcess/Item.h
GameProcess/LightFog.cpp
GameProcess/LightFog.h
GameProcess/Magic.cpp
GameProcess/Magic.h
GameProcess/MapHandler.cpp
GameProcess/MapHandler.h
GameProcess/NPCWnd.cpp
GameProcess/NPCWnd.h
GameProcess/OptionWnd.cpp
GameProcess/OptionWnd.h
GameProcess/Particle.cpp
GameProcess/Particle.h
GameProcess/PlayerChar.cpp
GameProcess/PlayerChar.h
GameProcess/QuestWnd.cpp
GameProcess/QuestWnd.h
GameProcess/SprDfn.cpp
GameProcess/SprDfn.h
GameProcess/SpriteInfo.cpp
GameProcess/SpriteInfo.h
GameProcess/StatusWnd.cpp
GameProcess/StatusWnd.h
GameProcess/StoreWnd.cpp
GameProcess/StoreWnd.h
GameProcess/Water.cpp
GameProcess/Water.h
GameProcess/WeatherEffect.cpp
.js
GameProcess/WeatherEffect.h
LoginProcess/Change Pwd/ChgPwd.cpp
LoginProcess/Change Pwd/ChgPwd.h
LoginProcess/Common/BMWnd.cpp
LoginProcess/Common/BMWnd.h
LoginProcess/Common/define.h
LoginProcess/Common/typedef.h
LoginProcess/Intro/LoginAvi.cpp
LoginProcess/Intro/LoginAvi.h
LoginProcess/Login/Login.cpp
LoginProcess/Login/Login.h
LoginProcess/LoginProcess.cpp
LoginProcess/LoginProcess.h
LoginProcess/New Account/NewAccount.cpp
LoginProcess/New Account/NewAccount.h
LoginProcess/Patch.cpp
LoginProcess/Patch.h
LoginProcess/Select Srv/SelectSrv.cpp
LoginProcess/Select Srv/SelectSrv.h
Mir2Ei.ini
Mir2Ex.ICO
Mir2Ex.cpp
Mir2Ex.dsp
Mir2Ex.dsw
Mir2Ex.ncb
Mir2Ex.opt
Mir2Ex.plg
.html
Mir2Ex.positions
Mir2Ex.sln
Mir2Ex.suo
Mir2Ex.vcproj
.xml
ReadMe.txt
Resource.aps
Resource.rc
ServerSelectProcess/SvrSelProc.cpp
ServerSelectProcess/SvrSelProc.h
Sound/BMMP3.cpp
Sound/BMMP3.h
Sound/MirSound.cpp
Sound/MirSound.h
Sound/SBuffer.cpp
Sound/SBuffer.h
Sound/Sound.cpp
Sound/Sound.h
Sound/TypeDef.h
StdAfx.cpp
StdAfx.h
WindHorn/D3DCommon/d3dmath.cpp
WindHorn/D3DCommon/d3dmath.h
WindHorn/D3DCommon/d3dtextr.cpp
WindHorn/D3DCommon/d3dtextr.h
WindHorn/D3DCommon/d3dutil.cpp
WindHorn/D3DCommon/d3dutil.h
WindHorn/D3DCommon/ddutil.cpp
WindHorn/D3DCommon/ddutil.h
WindHorn/Debug/BuildLog.htm
.html
WindHorn/Debug/RegHandler.obj
WindHorn/Debug/RegHandler.sbr
WindHorn/Debug/StdAfx.obj
WindHorn/Debug/StdAfx.sbr
WindHorn/Debug/WHDXGraphic.obj
WindHorn/Debug/WHDXGraphic.sbr
WindHorn/Debug/WHDefProcess.obj
WindHorn/Debug/WHDefProcess.sbr
WindHorn/Debug/WHImage.obj
WindHorn/Debug/WHImage.sbr
WindHorn/Debug/WHSurface.obj
WindHorn/Debug/WHSurface.sbr
WindHorn/Debug/WHWilImage.obj
WindHorn/Debug/WHWilImage.sbr
WindHorn/Debug/WHWilTexture.obj
WindHorn/Debug/WHWilTexture.sbr
WindHorn/Debug/WHWindow.obj
WindHorn/Debug/WHWindow.sbr
WindHorn/Debug/WindHorn.lib
WindHorn/Debug/WindHorn.pch
WindHorn/Debug/d3dmath.obj
WindHorn/Debug/d3dmath.sbr
WindHorn/Debug/d3dtextr.obj
WindHorn/Debug/d3dtextr.sbr
WindHorn/Debug/d3dutil.obj
WindHorn/Debug/d3dutil.sbr
WindHorn/Debug/ddutil.obj
WindHorn/Debug/ddutil.sbr
WindHorn/Debug/vc70.idb
WindHorn/Debug/vc70.pdb
WindHorn/Readme.txt
WindHorn/RegHandler.cpp
WindHorn/RegHandler.h
WindHorn/Release/BuildLog.htm
.html
WindHorn/Release/RegHandler.obj
WindHorn/Release/StdAfx.obj
WindHorn/Release/WHDXGraphic.obj
WindHorn/Release/WHDefProcess.obj
WindHorn/Release/WHImage.obj
WindHorn/Release/WHSurface.obj
WindHorn/Release/WHWilImage.obj
WindHorn/Release/WHWilTexture.obj
WindHorn/Release/WHWindow.obj
WindHorn/Release/WindHorn.lib
WindHorn/Release/d3dmath.obj
WindHorn/Release/d3dtextr.obj
WindHorn/Release/d3dutil.obj
WindHorn/Release/ddutil.obj
WindHorn/Release/vc70.idb
WindHorn/Resource.aps
WindHorn/StdAfx.cpp
WindHorn/StdAfx.h
WindHorn/WH3DInit.cpp
WindHorn/WH3DInit.h
WindHorn/WHDXGraphic.cpp
WindHorn/WHDXGraphic.h
WindHorn/WHDefProcess.cpp
WindHorn/WHDefProcess.h
WindHorn/WHEngine.h
WindHorn/WHImage.cpp
WindHorn/WHImage.h
WindHorn/WHSurface.cpp
WindHorn/WHSurface.h
WindHorn/WHWilImage.cpp
WindHorn/WHWilImage.h
WindHorn/WHWilTexture.cpp
WindHorn/WHWilTexture.h
WindHorn/WHWindow.cpp
WindHorn/WHWindow.h
WindHorn/WindHorn.dsp
WindHorn/WindHorn.dsw
WindHorn/WindHorn.ncb
WindHorn/WindHorn.opt
WindHorn/WindHorn.plg
.html
WindHorn/WindHorn.positions
WindHorn/WindHorn.vcproj
.xml
bin/Mir2EI.exe
.exe windows:4 windows x86 arch:x86

e6053207bc47a85a4d5ad6895fb29fb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Mir2Ex.WithC++\Debug\Mir2EI.pdb

Imports

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
LCMapStringA
GetSystemInfo
VirtualProtect
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
LCMapStringW
GetLocaleInfoA
SetEndOfFile
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
LockResource
LoadResource
Sleep
QueryPerformanceCounter
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapReAlloc
GetFileType
SetHandleCount
InterlockedExchange
VirtualQuery
SetConsoleCtrlHandler
SetUnhandledExceptionFilter
GetProcessHeap
HeapAlloc
HeapFree
ExitProcess
GetCurrentProcess
OutputDebugStringA
ReadFile
CreateDirectoryA
TerminateProcess
GetCommandLineA
GetStartupInfoA
GetFileSize
CreateFileA
DeleteFileA
WriteFile
CloseHandle
GetLastError
HeapValidate
LoadLibraryA
FreeLibrary
IsBadReadPtr
GetCurrentDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
IsBadWritePtr
GetModuleFileNameA
lstrlenA
InterlockedIncrement
InterlockedDecrement
GetStdHandle
GetProcAddress
GetVersionExA
RaiseException
DebugBreak
RtlUnwind
GetSystemTimeAsFileTime
SetFilePointer
_lopen
_lread
_lclose
GetModuleHandleA
lstrcmpiA
lstrcpyA
FindResourceA
MulDiv
lstrcpynA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcatA

user32

DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
ShowWindow
SetRect
SetFocus
SendMessageA
MoveWindow
GetWindowTextA
LoadBitmapA
BeginPaint
GetClientRect
GetWindowLongA
GetMenu
SetWindowTextA
UpdateWindow
MessageBoxA
LoadStringA
InvalidateRect
EndPaint
GetDC
LoadIconA
RegisterClassExA
DefWindowProcA
LoadImageA
IntersectRect
FrameRect
FillRect
DrawTextA
ClientToScreen
GetWindowRect
GetSystemMetrics
SetWindowLongA
LoadCursorA
SetCursor
DestroyCursor
wsprintfA
CreateWindowExA
SetWindowPos
CallWindowProcA
DestroyWindow
KillTimer
PostQuitMessage
SetTimer
PtInRect
GetCursorPos
ScreenToClient
GetKeyState
SystemParametersInfoA
AdjustWindowRectEx

gdi32

UnrealizeObject
CreateFontA
CreateCompatibleDC
SelectObject
GetObjectA
BitBlt
DeleteDC
SetBkColor
SetTextColor
GetPixel
SetPixel
StretchBlt
GetDIBColorTable
CreatePen
MoveToEx
LineTo
GetTextExtentPoint32A
SetBkMode
TextOutA
GetDeviceCaps
SetBrushOrgEx
DeleteObject
CreateSolidBrush

shell32

ShellExecuteA

ole32

CoUninitialize
CoInitialize

ws2_32

socket
WSAGetLastError
recv
ioctlsocket
WSACleanup
htons
WSAAsyncSelect
connect
inet_addr
gethostbyname
send
WSAStartup
closesocket

avifil32

AVIFileInit
AVIFileOpenA
AVIFileGetStream
AVIStreamReadFormat
AVIStreamRead
AVIStreamInfoA
AVIFileExit
AVIStreamRelease
AVIFileRelease
AVIStreamLength

msvfw32

ICClose
ICDecompress
ICLocate
ICSendMessage

ddraw

DirectDrawCreateEx
DirectDrawEnumerateExA

winmm

midiOutGetDevCapsA
auxGetVolume
midiOutGetVolume
auxGetDevCapsA
auxSetVolume
waveOutGetDevCapsA
waveOutSetVolume
midiOutSetVolume
timeGetTime
waveOutGetVolume

wininet

InternetOpenA
InternetGetLastResponseInfoA
InternetConnectA
InternetReadFile
FtpOpenFileA
InternetCloseHandle

dsound

ord1

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegEnumKeyExA

Sections

.text
Size: 688KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
harrow.cur
resource.h
vssver.scc
警告.txt
2006391435648/韩国传奇正式版本-服务器源码.rar
.rar
AdminCmd/AdminCmd.aps
AdminCmd/AdminCmd.cpp
AdminCmd/AdminCmd.dsp
AdminCmd/AdminCmd.plg
.html
AdminCmd/AdminCmd.rc
AdminCmd/AdminCmd.vcproj
.xml
AdminCmd/AdminCmd.vcproj.old
.xml
AdminCmd/ReadMe.txt
AdminCmd/Release/AdminCmd.dll
.dll windows:4 windows x86 arch:x86

b15f50e3f2711e0feb9b6d0b6f0258b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AdminCmd/Release/AdminCmd.obj
AdminCmd/Release/AdminCmd.pch
AdminCmd/Release/AdminCmd.res
AdminCmd/Release/BuildLog.htm
.html
AdminCmd/Release/StdAfx.obj
AdminCmd/Release/vc70.idb
AdminCmd/StdAfx.cpp
AdminCmd/StdAfx.h
AdminCmd/resource.h
AdminCmd/resource.h.bak
Def/DynamicArray.cpp
Def/DynamicArray.h
Def/EnDecode.cpp
Def/EnDecode.h
Def/List.cpp
Def/List.h
Def/Misc.cpp
Def/Misc.h
Def/Protocol.h
Def/Queue.cpp
Def/Queue.h
Def/RegstryHandler.cpp
Def/ServerSockHandler.cpp
Def/ServerSockHandler.h
Def/StaticArray.h
Def/TableColumn.h
Def/_OrzEx/bstree.h
Def/_OrzEx/database.cpp
Def/_OrzEx/database.h
Def/_OrzEx/datatype.h
Def/_OrzEx/error.cpp
Def/_OrzEx/error.h
Def/_OrzEx/fsa.h
Def/_OrzEx/indexmap.h
Def/_OrzEx/list.h
Def/_OrzEx/map.h
Def/_OrzEx/pqueue.h
Def/_OrzEx/prime.cpp
Def/_OrzEx/prime.h
Def/_OrzEx/queue.h
Def/_OrzEx/stack.h
Def/_OrzEx/streambf.h
Def/_OrzEx/stringex.cpp
Def/_OrzEx/stringex.h
Def/_OrzEx/syncobj.cpp
Def/_OrzEx/syncobj.h
Def/_OrzEx/util.cpp
Def/_OrzEx/util.h
Def/dbmgr.cpp
Def/dbmgr.h
GameSvr/ConfigDlgFunc.cpp
GameSvr/DataHandler.h
GameSvr/FrontEngine.h
GameSvr/GameSvr.aps
GameSvr/GameSvr.cpp
GameSvr/GameSvr.dsp
GameSvr/GameSvr.dsw
GameSvr/GameSvr.h
GameSvr/GameSvr.plg
.html
GameSvr/GameSvr.positions
GameSvr/GameSvr.rc
GameSvr/GameSvr.vcproj
.xml
GameSvr/GameSvr.vcproj.old
.xml
GameSvr/GateInfo.cpp
GameSvr/Global.cpp
GameSvr/Global.h
GameSvr/Handler_CommonDB.cpp
GameSvr/Handler_Item.cpp
GameSvr/Handler_Magic.cpp
GameSvr/Handler_Map.cpp
GameSvr/ItemHandler.h
GameSvr/MagicHandler.h
GameSvr/MainWndProc.cpp
GameSvr/ObjectEngine.cpp
GameSvr/ObjectEngine.h
GameSvr/ObjectEvent.cpp
GameSvr/ObjectEvent.h
GameSvr/ObjectMerchant.cpp
GameSvr/ObjectMonster.cpp
GameSvr/ObjectMonster.h
GameSvr/ObjectNPC.cpp
GameSvr/ObjectNPC.h
GameSvr/ObjectPlayer.cpp
GameSvr/ObjectPlayer.h
GameSvr/ObjectPlayerAdmin.cpp
GameSvr/ObjectPlayerAdminSaid.cpp
GameSvr/ObjectPlayerClone.cpp
GameSvr/ObjectPlayerClone.h
GameSvr/ObjectPlayerSaid.cpp
GameSvr/ObjectScripter.cpp
GameSvr/ObjectScripter.h
GameSvr/ProcessEvents.cpp
GameSvr/ProcessLogin.cpp
GameSvr/ProcessMerchants.cpp
GameSvr/ProcessMonster.cpp
GameSvr/ProcessNPC.cpp
GameSvr/ProcessUserHuman.cpp
GameSvr/ProcessUserMsg.cpp
GameSvr/ReadMe.txt
GameSvr/Release/BuildLog.htm
.html
GameSvr/Release/ConfigDlgFunc.obj
GameSvr/Release/EnDecode.obj
GameSvr/Release/GameSvr.exe
.exe windows:4 windows x86 arch:x86

4fa9be90754f98cb470b0c69b309b303

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
LoadLibraryW
SleepEx
GetThreadTimes
GetCurrentThread
InterlockedDecrement
InterlockedIncrement
CreateIoCompletionPort
GetQueuedCompletionStatus
GetSystemInfo
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CompareStringW
CompareStringA
SetEndOfFile
LCMapStringW
LCMapStringA
VirtualProtect
lstrcpyW
CreateFileA
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
GetCPInfo
GetOEMCP
GetACP
IsBadCodePtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
CreateFileW
GetStringTypeA
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
LoadLibraryA
lstrcatW
ReadFile
SetFilePointer
CloseHandle
GetTickCount
GlobalFree
GlobalAlloc
WideCharToMultiByte
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
RaiseException
GetTimeZoneInformation
UnhandledExceptionFilter
VirtualQuery
InterlockedExchange
HeapSize
GetCurrentProcess
TerminateProcess
HeapReAlloc
GetProcAddress
TlsGetValue
TlsSetValue
SetEnvironmentVariableA
TlsFree
SetLastError
TlsAlloc
HeapAlloc
HeapFree
ExitProcess
GetVersionExA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
IsBadReadPtr
CreateThread
GetLastError
MultiByteToWideChar
GetStringTypeW
lstrlenW
RtlUnwind
GetLocalTime
GetSystemTimeAsFileTime
ExitThread
GetCurrentThreadId

user32

UpdateWindow
ShowWindow
DialogBoxParamW
CreateWindowExW
TranslateMessage
wsprintfW
LoadStringW
LoadIconW
LoadCursorW
RegisterClassW
GetClientRect
FillRect
CallWindowProcW
GetDlgItem
GetWindowTextW
SendMessageW
EndDialog
SetWindowLongW
SetWindowTextW
GetWindowRect
DispatchMessageW
MoveWindow
KillTimer
SetTimer
MessageBoxW
PostQuitMessage
DefWindowProcW
GetMenu
GetSubMenu
EnableMenuItem
GetMessageW

gdi32

CreateSolidBrush

advapi32

RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW

ole32

CoUninitialize
OleInitialize

odbc32

ord75
ord31
ord236
ord207
ord13
ord4
ord208
ord20
ord18
ord211
ord24

ws2_32

closesocket
WSAStartup
WSARecv
WSASend
WSACleanup
send
recv
setsockopt
WSAAccept
WSAGetLastError
connect
WSAAsyncSelect
inet_addr
htons
socket
listen
bind
htonl
WSASocketA

comctl32

CreateToolbarEx
InitCommonControlsEx

Sections

.text
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GameSvr/Release/GameSvr.obj
GameSvr/Release/GameSvr.pch
GameSvr/Release/GameSvr.res
GameSvr/Release/GateInfo.obj
GameSvr/Release/Global.obj
GameSvr/Release/Handler_CommonDB.obj
GameSvr/Release/Handler_Item.obj
GameSvr/Release/Handler_Magic.obj
GameSvr/Release/Handler_Map.obj
GameSvr/Release/MainWndProc.obj
GameSvr/Release/Misc.obj
GameSvr/Release/ObjectEngine.obj
GameSvr/Release/ObjectEvent.obj
GameSvr/Release/ObjectMerchant.obj
GameSvr/Release/ObjectMonster.obj
GameSvr/Release/ObjectNPC.obj
GameSvr/Release/ObjectPlayer.obj
GameSvr/Release/ObjectPlayerAdmin.obj
GameSvr/Release/ObjectPlayerAdminSaid.obj
GameSvr/Release/ObjectPlayerClone.obj
GameSvr/Release/ObjectPlayerSaid.obj
GameSvr/Release/ObjectScripter.obj
GameSvr/Release/ProcessEvents.obj
GameSvr/Release/ProcessLogin.obj
GameSvr/Release/ProcessMerchants.obj
GameSvr/Release/ProcessMonster.obj
GameSvr/Release/ProcessNPC.obj
GameSvr/Release/ProcessUserHuman.obj
GameSvr/Release/ProcessUserMsg.obj
GameSvr/Release/RegstryHandler.obj
GameSvr/Release/ServerSockHandler.obj
GameSvr/Release/SockMsg_DBSrv.obj
GameSvr/Release/SockMsg_GateComm.obj
GameSvr/Release/SockMsg_LogSvr.obj
GameSvr/Release/StdAfx.obj
GameSvr/Release/ThreadFuncForComm.obj
GameSvr/Release/UserInfo.obj
GameSvr/Release/database.obj
GameSvr/Release/syncobj.obj
GameSvr/Release/vc70.idb
GameSvr/Res/MIR2.ICO
GameSvr/Res/toolbar.bmp
GameSvr/SockMsg_DBSrv.cpp
GameSvr/SockMsg_GateComm.cpp
GameSvr/SockMsg_LogSvr.cpp
GameSvr/StdAfx.cpp
GameSvr/StdAfx.h
GameSvr/Tables.h
GameSvr/ThreadFuncForComm.cpp
GameSvr/UserInfo.cpp
GameSvr/capture.txt
GameSvr/resource.h
LEGENDOFMIR.mdb
LegendOfMir2_Server.dsw
LegendOfMir2_Server.ncb
LegendOfMir2_Server.opt
LegendOfMir2_Server.positions
LegendOfMir2_Server.sln
LegendOfMir2_Server.sln.old
LegendOfMir2_Server.suo
_Obj_Debug/GameSvr/BuildLog.htm
.html
_Obj_Debug/GameSvr/ConfigDlgFunc.obj
_Obj_Debug/GameSvr/ConfigDlgFunc.sbr
_Obj_Debug/GameSvr/EnDecode.obj
_Obj_Debug/GameSvr/EnDecode.sbr
_Obj_Debug/GameSvr/GameSvr.obj
_Obj_Debug/GameSvr/GameSvr.res
_Obj_Debug/GameSvr/GameSvr.sbr
_Obj_Debug/GameSvr/GateInfo.obj
_Obj_Debug/GameSvr/GateInfo.sbr
_Obj_Debug/GameSvr/Global.obj
_Obj_Debug/GameSvr/Global.sbr
_Obj_Debug/GameSvr/Handler_CommonDB.obj
_Obj_Debug/GameSvr/Handler_CommonDB.sbr
_Obj_Debug/GameSvr/Handler_Item.obj
_Obj_Debug/GameSvr/Handler_Item.sbr
_Obj_Debug/GameSvr/Handler_Magic.obj
_Obj_Debug/GameSvr/Handler_Magic.sbr
_Obj_Debug/GameSvr/Handler_Map.obj
_Obj_Debug/GameSvr/Handler_Map.sbr
_Obj_Debug/GameSvr/MainWndProc.obj
_Obj_Debug/GameSvr/MainWndProc.sbr
_Obj_Debug/GameSvr/Misc.obj
_Obj_Debug/GameSvr/Misc.sbr
_Obj_Debug/GameSvr/ObjectEngine.obj
_Obj_Debug/GameSvr/ObjectEngine.sbr
_Obj_Debug/GameSvr/ObjectEvent.obj
_Obj_Debug/GameSvr/ObjectEvent.sbr
_Obj_Debug/GameSvr/ObjectMerchant.obj
_Obj_Debug/GameSvr/ObjectMerchant.sbr
_Obj_Debug/GameSvr/ObjectMonster.obj
_Obj_Debug/GameSvr/ObjectMonster.sbr
_Obj_Debug/GameSvr/ObjectNPC.obj
_Obj_Debug/GameSvr/ObjectNPC.sbr
_Obj_Debug/GameSvr/ObjectPlayer.obj
_Obj_Debug/GameSvr/ObjectPlayer.sbr
_Obj_Debug/GameSvr/ObjectPlayerAdmin.obj
_Obj_Debug/GameSvr/ObjectPlayerAdmin.sbr
_Obj_Debug/GameSvr/ObjectPlayerAdminSaid.obj
_Obj_Debug/GameSvr/ObjectPlayerAdminSaid.sbr
_Obj_Debug/GameSvr/ObjectPlayerClone.obj
_Obj_Debug/GameSvr/ObjectPlayerClone.sbr
_Obj_Debug/GameSvr/ObjectPlayerSaid.obj
_Obj_Debug/GameSvr/ObjectPlayerSaid.sbr
_Obj_Debug/GameSvr/ObjectScripter.obj
_Obj_Debug/GameSvr/ObjectScripter.sbr
_Obj_Debug/GameSvr/ProcessEvents.obj
_Obj_Debug/GameSvr/ProcessEvents.sbr
_Obj_Debug/GameSvr/ProcessLogin.obj
_Obj_Debug/GameSvr/ProcessLogin.sbr
_Obj_Debug/GameSvr/ProcessMerchants.obj
_Obj_Debug/GameSvr/ProcessMerchants.sbr
_Obj_Debug/GameSvr/ProcessMonster.obj
_Obj_Debug/GameSvr/ProcessMonster.sbr
_Obj_Debug/GameSvr/ProcessNPC.obj
_Obj_Debug/GameSvr/ProcessNPC.sbr
_Obj_Debug/GameSvr/ProcessUserHuman.obj
_Obj_Debug/GameSvr/ProcessUserHuman.sbr
_Obj_Debug/GameSvr/ProcessUserMsg.obj
_Obj_Debug/GameSvr/ProcessUserMsg.sbr
_Obj_Debug/GameSvr/RegstryHandler.obj
_Obj_Debug/GameSvr/RegstryHandler.sbr
_Obj_Debug/GameSvr/ServerSockHandler.obj
_Obj_Debug/GameSvr/ServerSockHandler.sbr
_Obj_Debug/GameSvr/SockMsg_DBSrv.obj
_Obj_Debug/GameSvr/SockMsg_DBSrv.sbr
_Obj_Debug/GameSvr/SockMsg_GateComm.obj
_Obj_Debug/GameSvr/SockMsg_GateComm.sbr
_Obj_Debug/GameSvr/SockMsg_LogSvr.obj
_Obj_Debug/GameSvr/SockMsg_LogSvr.sbr
_Obj_Debug/GameSvr/StdAfx.obj
_Obj_Debug/GameSvr/StdAfx.sbr
_Obj_Debug/GameSvr/ThreadFuncForComm.obj
_Obj_Debug/GameSvr/ThreadFuncForComm.sbr
_Obj_Debug/GameSvr/UserInfo.obj
_Obj_Debug/GameSvr/UserInfo.sbr
_Obj_Debug/GameSvr/database.obj
_Obj_Debug/GameSvr/database.sbr
_Obj_Debug/GameSvr/syncobj.obj
_Obj_Debug/GameSvr/syncobj.sbr
_Obj_Debug/GameSvr/vc70.idb
_Obj_Debug/GameSvr/vc70.pdb
_bin/debug/GameSvr.exe
.exe windows:4 windows x86 arch:x86

5bdeea8fe1eb1aba20323959657864b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\上载\_Bin\Debug\GameSvr.pdb

Imports

odbc32

ord13
ord211
ord18
ord20
ord208
ord4
ord9
ord207
ord236
ord257
ord31
ord24
ord75

kernel32

GetModuleFileNameA
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
GlobalAlloc
GlobalFree
CloseHandle
SetFilePointer
ReadFile
CreateFileW
lstrcatW
lstrcpyW
GetTickCount
FreeLibrary
LoadLibraryW
SleepEx
GetThreadTimes
GetCurrentThread
InterlockedDecrement
InterlockedIncrement
CreateIoCompletionPort
GetQueuedCompletionStatus
GetSystemInfo
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CompareStringW
GetLastError
GetLocaleInfoW
SetEndOfFile
LCMapStringW
LCMapStringA
VirtualProtect
CreateFileA
FlushFileBuffers
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
GetCurrentThreadId
IsValidCodePage
IsValidLocale
GetDateFormatA
GetTimeFormatA
IsBadCodePtr
SetUnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
GetCurrentProcessId
QueryPerformanceCounter
GetStringTypeW
GetStringTypeA
VirtualFree
HeapCreate
HeapDestroy
GetFileType
CompareStringA
CreateThread
ExitThread
IsBadReadPtr
RaiseException
GetVersionExA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetProcessHeap
HeapAlloc
GetTimeZoneInformation
UnhandledExceptionFilter
InterlockedExchange
GetProcAddress
VirtualQuery
SetConsoleCtrlHandler
GetCurrentProcess
TerminateProcess
HeapValidate
IsBadWritePtr
HeapFree
FatalAppExitA
SetLastError
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetLocaleInfoA
SetEnvironmentVariableA
GetSystemTimeAsFileTime
GetLocalTime
RtlUnwind
DebugBreak
GetStdHandle
WriteFile
OutputDebugStringA
TlsAlloc

user32

DefWindowProcW
GetDlgItem
MoveWindow
GetWindowRect
wsprintfW
CallWindowProcW
FillRect
GetClientRect
DispatchMessageW
TranslateMessage
GetMessageW
RegisterClassW
LoadCursorW
LoadIconW
DialogBoxParamW
UpdateWindow
ShowWindow
SetWindowLongW
LoadStringW
EndDialog
GetWindowTextW
SetWindowTextW
KillTimer
SetTimer
MessageBoxW
PostQuitMessage
CreateWindowExW
GetMenu
GetSubMenu
EnableMenuItem
SendMessageW

gdi32

CreateSolidBrush

advapi32

RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW

ole32

CoUninitialize
OleInitialize

ws2_32

WSAStartup
WSASend
WSARecv
WSACleanup
send
recv
closesocket
WSAAccept
WSAGetLastError
listen
bind
htonl
htons
WSASocketA
connect
WSAAsyncSelect
inet_addr
socket
setsockopt

comctl32

CreateToolbarEx
InitCommonControlsEx

Sections

.textbss
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 456KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_bin/debug/GameSvr.ilk
readme.txt

Sharing

General

Malware Config

Signatures

Files

e6053207bc47a85a4d5ad6895fb29fb8

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

shell32

ole32

ws2_32

avifil32

msvfw32

ddraw

winmm

wininet

dsound

advapi32

Sections

.text Size: 688KB - Virtual size: 684KB

.rdata Size: 48KB - Virtual size: 45KB

.data Size: 4KB - Virtual size: 2.2MB

.rsrc Size: 4KB - Virtual size: 928B

b15f50e3f2711e0feb9b6d0b6f0258b5

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 4KB - Virtual size: 3KB

4fa9be90754f98cb470b0c69b309b303

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

odbc32

ws2_32

comctl32

Sections

.text Size: 152KB - Virtual size: 150KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 30KB

.rsrc Size: 8KB - Virtual size: 6KB

5bdeea8fe1eb1aba20323959657864b9

Headers

File Characteristics

PDB Paths

Imports

odbc32

kernel32

user32

gdi32

advapi32

ole32

ws2_32

comctl32

Sections

.textbss Size: - Virtual size: 212KB

.text Size: 456KB - Virtual size: 452KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 12KB - Virtual size: 41KB

.idata Size: 8KB - Virtual size: 5KB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: 688KB - Virtual size: 684KB

.rdata
Size: 48KB - Virtual size: 45KB

.data
Size: 4KB - Virtual size: 2.2MB

.rsrc
Size: 4KB - Virtual size: 928B

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 152KB - Virtual size: 150KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 30KB

.rsrc
Size: 8KB - Virtual size: 6KB

.textbss
Size: - Virtual size: 212KB

.text
Size: 456KB - Virtual size: 452KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 12KB - Virtual size: 41KB

.idata
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 12KB - Virtual size: 8KB