e092b0551c46d0921c4a49f62f9b59ae_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e092b0551c46d0921c4a49f62f9b59ae_JaffaCakes118
Size

2.2MB
MD5

e092b0551c46d0921c4a49f62f9b59ae
SHA1

7b888f626bf47448fdd862556bba1bad53654146
SHA256

3f6b867ff4c529899b7e01cedb0cb684fbd6e1ee1f97c8a5d7689ee92ef740bc
SHA512

25886f47e0f92e34f5f3d849851e86a9386641cdda88c6618d2b986be4a861456b67aeae7f6a4156c8b9cdf170e0e6ad05c6897091e11de69f1fd2b2fff75cfb
SSDEEP

49152:sims+rG4wDnSdBgSPfYbJjGAwzaJxMiTkY9d:6XCSdBnobJjGAwz+xzTkY9d

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/gt_setup293/GSTyping.exe
unpack001/gt_setup293/WbCodeModule.dll

Files

e092b0551c46d0921c4a49f62f9b59ae_JaffaCakes118
.rar
gt_setup293/Config.ini
gt_setup293/Data/Account/DefConfig.ini
gt_setup293/Data/Account/iawen.dat
gt_setup293/Data/Account/privilege.cfg
gt_setup293/Data/Account/演示用户.dat
gt_setup293/Data/Dict/dictionary.txt
gt_setup293/Data/Dict/numdictionary.txt
gt_setup293/Data/IMECodeTips/五笔86版.ct
gt_setup293/Data/IMECodeTips/五笔98版.ct
gt_setup293/Data/KBLayout/Dvorak右手键盘.kbl
gt_setup293/Data/KBLayout/Dvorak左手键盘.kbl
gt_setup293/Data/KBLayout/Dvorak键盘.kbl
gt_setup293/Data/KBLayout/标准键盘.kbl
gt_setup293/Data/KBLayout/欧式键盘.kbl
gt_setup293/Data/KBLayout/美式右手键盘.kbl
gt_setup293/Data/KBLayout/美式左手键盘.kbl
gt_setup293/Data/KBLayout/美式键盘.kbl
gt_setup293/Data/Template/printtempl_history.txt
gt_setup293/Data/Template/printtempl_rank.txt
gt_setup293/Data/Template/printtempl_result.txt
gt_setup293/Data/Template/printtempl_trendline.txt
gt_setup293/Data/TestTexts/中文文章/中华人民共和国著作权法实施条例.txt
gt_setup293/Data/TestTexts/中文文章/乌托邦的政体和历史.txt
gt_setup293/Data/TestTexts/中文文章/俞伯牙摔琴谢知音.txt
gt_setup293/Data/TestTexts/中文文章/全面建设小康社会,开创中国特色社会主义事业新局面.txt
gt_setup293/Data/TestTexts/中文文章/利用现代流通开拓农村市场.txt
gt_setup293/Data/TestTexts/中文文章/半日的游程.txt
gt_setup293/Data/TestTexts/中文文章/在空气制造厂.txt
gt_setup293/Data/TestTexts/中文文章/当前我国农村形势分析.txt
gt_setup293/Data/TestTexts/中文文章/悟空学艺.txt
gt_setup293/Data/TestTexts/中文文章/我到了火星.txt
gt_setup293/Data/TestTexts/中文文章/故乡.txt
gt_setup293/Data/TestTexts/中文文章/桂林的山.txt
gt_setup293/Data/TestTexts/中文文章/江南的冬景.txt
gt_setup293/Data/TestTexts/中文文章/计算机信息系统安全保护条例 .txt
gt_setup293/Data/TestTexts/中文文章/钱江看潮记.txt
gt_setup293/Data/TestTexts/五笔简码和词组/五笔86版简码一级.txt
gt_setup293/Data/TestTexts/五笔简码和词组/五笔86版简码三级.txt
gt_setup293/Data/TestTexts/五笔简码和词组/五笔86版简码二级.txt
gt_setup293/Data/TestTexts/五笔简码和词组/五笔86版词组三字.txt
gt_setup293/Data/TestTexts/五笔简码和词组/五笔86版词组二字.txt
gt_setup293/Data/TestTexts/五笔简码和词组/五笔86版词组四字.txt
gt_setup293/Data/TestTexts/五笔简码和词组/五笔86版词组四字以上.txt
gt_setup293/Data/TestTexts/五笔简码和词组/五笔98版简码三级.txt
gt_setup293/Data/TestTexts/五笔简码和词组/五笔98版简码二级.txt
gt_setup293/Data/TestTexts/五笔简码和词组/五笔98版词组三字.txt
gt_setup293/Data/TestTexts/五笔简码和词组/五笔98版词组二字.txt
gt_setup293/Data/TestTexts/五笔简码和词组/五笔98版词组四字.txt
gt_setup293/Data/TestTexts/五笔简码和词组/五笔98版词组四字以上.txt
gt_setup293/Data/TestTexts/原稿对照测试/A Barber's Joke.txt
gt_setup293/Data/TestTexts/原稿对照测试/testcfg.ini
gt_setup293/Data/TestTexts/原稿对照测试/从百草园到三味书屋.txt
gt_setup293/Data/TestTexts/英文文章/A Chance of a lifetime.txt
gt_setup293/Data/TestTexts/英文文章/A Land with the Culture for the Living.txt
gt_setup293/Data/TestTexts/英文文章/A sign from aliens.txt
gt_setup293/Data/TestTexts/英文文章/Attack of the digital age.txt
gt_setup293/Data/TestTexts/英文文章/Beauty Is in the Eye of the Beholder.txt
gt_setup293/Data/TestTexts/英文文章/Emma Chapter XV.txt
gt_setup293/Data/TestTexts/英文文章/Full Circle.txt
gt_setup293/Data/TestTexts/英文文章/Hawking fever hits China.txt
gt_setup293/Data/TestTexts/英文文章/Let's have hope, not sadness.txt
gt_setup293/Data/TestTexts/英文文章/Logion.txt
gt_setup293/Data/TestTexts/英文文章/Mr. Sherlock Holmes.txt
gt_setup293/Data/TestTexts/英文文章/Rich Man.txt
gt_setup293/Data/Tutorial/pub/Course.ini
gt_setup293/Data/Tutorial/pub/chair.bmp
gt_setup293/Data/Tutorial/pub/finger-placement-l.btd
gt_setup293/Data/Tutorial/pub/finger-placement-r.btd
gt_setup293/Data/Tutorial/pub/finger-placement.btd
gt_setup293/Data/Tutorial/pub/hand-l.bmp
gt_setup293/Data/Tutorial/pub/hand-r.bmp
gt_setup293/Data/Tutorial/pub/hand.bmp
gt_setup293/Data/Tutorial/pub/howtosit.btd
gt_setup293/Data/Tutorial/pub/injury.btd
gt_setup293/Data/Tutorial/pub/pos-doc.bmp
gt_setup293/Data/Tutorial/pub/pos-finger-l.bmp
gt_setup293/Data/Tutorial/pub/pos-finger-r.bmp
gt_setup293/Data/Tutorial/pub/pos-finger.bmp
gt_setup293/Data/Tutorial/pub/pos-kb-mouse.bmp
gt_setup293/Data/Tutorial/pub/posture.bmp
gt_setup293/Data/Tutorial/pub/strike-key.btd
gt_setup293/Data/Tutorial/pub/t-chair.bmp
gt_setup293/Data/Tutorial/pub/t-doc.bmp
gt_setup293/Data/Tutorial/pub/t-finger-l.bmp
gt_setup293/Data/Tutorial/pub/t-finger-r.bmp
gt_setup293/Data/Tutorial/pub/t-finger.bmp
gt_setup293/Data/Tutorial/pub/t-hand.bmp
gt_setup293/Data/Tutorial/pub/t-injury.bmp
gt_setup293/Data/Tutorial/pub/t-kbmouse.bmp
gt_setup293/Data/Tutorial/pub/t-sit.bmp
gt_setup293/Data/Tutorial/pub/t-strike.bmp
gt_setup293/Data/Tutorial/五笔86版/Course.ini
gt_setup293/Data/Tutorial/五笔86版/wbzg86.cod
gt_setup293/Data/Tutorial/五笔86版/五笔86版字根.itf
gt_setup293/Data/Tutorial/五笔86版/五笔86版简码.itf
gt_setup293/Data/Tutorial/五笔86版/五笔86版键盘布局.ikbl
gt_setup293/Data/Tutorial/五笔98版/Course.ini
gt_setup293/Data/Tutorial/五笔98版/wbzg98.cod
gt_setup293/Data/Tutorial/五笔98版/五笔98版字根.itf
gt_setup293/Data/Tutorial/五笔98版/五笔98版简码.itf
gt_setup293/Data/Tutorial/五笔98版/五笔98版键盘布局.ikbl
gt_setup293/Data/Tutorial/标准键盘/Course.ini
gt_setup293/Data/Tutorial/标准键盘/标准键盘指法.btf
gt_setup293/Data/Tutorial/欧式键盘/Course.ini
gt_setup293/Data/Tutorial/欧式键盘/欧式键盘指法.btf
gt_setup293/Data/Tutorial/美式键盘/Course.ini
gt_setup293/Data/Tutorial/美式键盘/美式键盘指法.btf
gt_setup293/GSTyping.chm
.chm
gt_setup293/GSTyping.exe
.exe windows:4 windows x86 arch:x86

b23631ea7bdf594e76f8f6fb78702ae1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\My Projects\GS Typing Tutor\Output\Cn\GSTyping.pdb

Imports

kernel32

RaiseException
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
HeapReAlloc
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
ExitProcess
GetTickCount
FindNextFileA
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
RtlUnwind
GetOEMCP
GetCPInfo
InterlockedIncrement
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetCurrentProcessId
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetThreadLocale
SetEndOfFile
FlushFileBuffers
lstrcmpA
InterlockedDecrement
GetModuleFileNameW
GlobalAlloc
GetStartupInfoA
GetProcessHeap
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualAlloc
SetErrorMode
VirtualProtect
LocalFree
MulDiv
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetACP
CompareStringA
InterlockedExchange
CompareStringW
GetModuleFileNameA
FormatMessageA
GetLocalTime
UnlockFile
LockFile
GetVersionExA
GetCurrentThreadId
FreeLibrary
GetTimeFormatA
GetDateFormatA
GetProcAddress
GetModuleHandleA
LoadLibraryA
lstrcpynA
GlobalFree
GlobalUnlock
GlobalLock
FreeResource
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
DeleteFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
CopyFileA
GetFileSize
MultiByteToWideChar
GetWindowsDirectoryA
WriteFile
ReadFile
SetFilePointer
SetLastError
DeviceIoControl
GetLastError
CreateFileA
GetVersion
Sleep
GetShortPathNameA
TerminateThread
GetExitCodeThread
CreateEventA
WaitForSingleObject
SetEvent
CreateThread
CloseHandle
lstrlenA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
SetHandleCount

user32

GetMenuItemInfoA
GetSysColorBrush
UnregisterClassA
IsRectEmpty
CharNextA
CopyAcceleratorTableA
SetRect
InvalidateRgn
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
CreatePopupMenu
SetRectEmpty
SetMenu
TranslateAcceleratorA
GetNextDlgTabItem
EndDialog
InflateRect
EndPaint
BeginPaint
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TrackPopupMenu
ShowOwnedPopups
GetMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetDlgCtrlID
CallWindowProcA
IntersectRect
GetWindowPlacement
DrawTextW
ToUnicode
LockWindowUpdate
ShowCursor
SetFocus
FindWindowExA
CharUpperA
CreateCaret
DestroyCaret
ShowCaret
SetCaretPos
HideCaret
GetTabbedTextExtentA
DestroyCursor
DefWindowProcA
DrawIconEx
IsZoomed
SetWindowRgn
CallNextHookEx
GetForegroundWindow
AdjustWindowRect
SetWindowLongA
GetWindowLongA
LoadIconA
UnhookWindowsHookEx
SetWindowsHookExA
GetNextDlgGroupItem
PostMessageA
DrawFocusRect
MapVirtualKeyExA
GetKeyboardLayout
GetKeyboardState
keybd_event
MapVirtualKeyA
DrawAnimatedRects
GetKeyState
GetFocus
SetCursor
SetActiveWindow
GetActiveWindow
IsWindowEnabled
DestroyWindow
CreateDialogIndirectParamA
GrayStringA
DrawTextExA
TabbedTextOutA
GetDoubleClickTime
GetSystemMetrics
GetWindowDC
GetMessageA
TranslateMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
GetWindowThreadProcessId
LoadAcceleratorsA
InsertMenuItemA
SetWindowPos
UpdateWindow
SystemParametersInfoA
FillRect
GetWindow
SetForegroundWindow
BringWindowToTop
LoadCursorA
LoadImageA
IsIconic
ScreenToClient
GetCursorPos
IsWindowVisible
GetWindowRect
GetSysColor
OffsetRect
CopyRect
InvalidateRect
IsWindow
SendMessageA
GetParent
KillTimer
ReleaseCapture
SetCapture
GetCapture
SetTimer
PtInRect
WindowFromPoint
GetClientRect
ClientToScreen
SetClassLongA
GetClassLongA
DrawTextA
GetDesktopWindow
LoadBitmapA
ReleaseDC
GetDC
EnableWindow
GetSubMenu

gdi32

GetCharWidthA
CreateRectRgn
GetDIBits
CombineRgn
GetTextExtentPoint32W
GetCharWidth32A
GetBitmapBits
OffsetRgn
SetStretchBltMode
GetClipBox
IntersectClipRect
GetViewportExtEx
GetWindowExtEx
GetCharABCWidthsA
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
RestoreDC
LPtoDP
EndDoc
EndPage
SetViewportExtEx
SetWindowExtEx
SetMapMode
StartPage
StartDocA
CreateDCA
Ellipse
LineTo
SetViewportOrgEx
CreateBitmap
ExcludeClipRect
SaveDC
GetTextExtentPoint32A
CreateFontIndirectA
DPtoLP
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
RoundRect
EnumFontFamiliesExA
TextOutW
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreatePen
CreatePalette
GetDeviceCaps
GetStockObject
GetTextMetricsA
SetTextCharacterExtra
Rectangle
CreateSolidBrush
StretchBlt
DeleteObject
CreateCompatibleBitmap
SetBkMode
SetTextColor
SelectPalette
GetObjectA
DeleteDC
BitBlt
SetBkColor
GetPixel
SelectObject
CreateCompatibleDC
MoveToEx

comdlg32

GetFileTitleA
PageSetupDlgA
ChooseColorA
PrintDlgA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA
DragFinish
DragQueryFileA

shlwapi

StrStrIA
PathStripToRootA
PathIsUNCA
PathFileExistsA
PathFindExtensionA
PathFindFileNameA

oledlg

ord8

ole32

CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
OleFlushClipboard
CoGetClassObject
CoTaskMemFree
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard

oleaut32

SysFreeString
SysAllocString
OleCreateFontIndirect
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime

winmm

PlaySoundA
mciSendCommandA

imm32

ImmSetStatusWindowPos
ImmGetStatusWindowPos
ImmSetCompositionWindow
ImmGetCompositionWindow
ImmSetOpenStatus
ImmGetContext
ImmReleaseContext

Sections

.text
Size: 840KB - Virtual size: 839KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
gt_setup293/Music/Game/bk_alien.mid
gt_setup293/Music/Game/bk_balloon.mid
gt_setup293/Music/Game/bk_balloon_2.mid
gt_setup293/Music/Game/bk_card.mid
gt_setup293/Music/Game/bk_hitrat.mid
gt_setup293/Music/Game/bk_hitrat_2.mid
gt_setup293/Music/Game/bk_save.mid
gt_setup293/Music/bkmusic_0.mid
gt_setup293/Music/bkmusic_1.mid
gt_setup293/Music/bkmusic_2.mid
gt_setup293/Music/bkmusic_3.mid
gt_setup293/Music/bkmusic_4.mid
gt_setup293/Music/mainbackgnd.mid
gt_setup293/Readme.txt
gt_setup293/Sound/Game/alien_explode.wav
gt_setup293/Sound/Game/alien_hit.wav
gt_setup293/Sound/Game/balloon_err.wav
gt_setup293/Sound/Game/balloon_explode.wav
gt_setup293/Sound/Game/balloon_hit.wav
gt_setup293/Sound/Game/balloon_upgrade.wav
gt_setup293/Sound/Game/card.WAV
gt_setup293/Sound/Game/card_crash.wav
gt_setup293/Sound/Game/hitrat_err.wav
gt_setup293/Sound/Game/hitrat_hit.wav
gt_setup293/Sound/Game/hitrat_hit1.wav
gt_setup293/Sound/Game/hitrat_run.WAV
gt_setup293/Sound/Game/hitrat_upgrade.wav
gt_setup293/Sound/Game/save_crash.wav
gt_setup293/Sound/Game/save_ok.wav
gt_setup293/Sound/Strike.wav
gt_setup293/Sound/StrikeErr.wav
gt_setup293/Sound/WndCollapse.WAV
gt_setup293/Sound/flippage.wav
gt_setup293/Sound/icon.wav
gt_setup293/Sound/iconHover.wav
gt_setup293/Sound/resultVerygood.wav
gt_setup293/Sound/resultbad.wav
gt_setup293/Sound/resultgood.wav
gt_setup293/Sound/wndClose.wav
gt_setup293/Sound/wndOpen.wav
gt_setup293/SysDat/Present_SkinTheme.ini
gt_setup293/SysDat/StringRes.txt
gt_setup293/SysDat/gt_licence.ini
gt_setup293/WANGMA_ZIGEN.TTF
gt_setup293/WbCodeModule.dll
.dll windows:4 windows x86 arch:x86

9165a11b8fe4c41055c64515c39a36dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
GetACP
MultiByteToWideChar
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ReadFile
CloseHandle
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetModuleFileNameA
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryA
CreateFileA
GetCPInfo
GetOEMCP
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
GetLocaleInfoA
SetEndOfFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gt_setup293/[NSIS].nsi
gt_setup293/license.txt
gt_setup293/whatsnew.txt
gt_setup293/新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

b23631ea7bdf594e76f8f6fb78702ae1

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

winmm

imm32

Sections

.text Size: 840KB - Virtual size: 839KB

.rdata Size: 172KB - Virtual size: 168KB

.data Size: 16KB - Virtual size: 62KB

.rsrc Size: 4.1MB - Virtual size: 4.1MB

9165a11b8fe4c41055c64515c39a36dd

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 176B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 840KB - Virtual size: 839KB

.rdata
Size: 172KB - Virtual size: 168KB

.data
Size: 16KB - Virtual size: 62KB

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 4KB - Virtual size: 3KB