Overview

overview

7

Static

static

5

fb779c419d...18.exe

windows7-x64

7

fb779c419d...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...ib.dll

windows7-x64

3

$PLUGINSDI...ib.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/SogouPY.dll

windows7-x64

3

$SYSDIR/SogouPY.dll

windows10-2004-x64

3

$_14_/SogouPY.dll

windows7-x64

1

$_14_/SogouPY.dll

windows10-2004-x64

1

$_14_/SogouPY.dll

windows7-x64

1

$_14_/SogouPY.dll

windows10-2004-x64

1

$_16_/Conf...b2.exe

windows7-x64

3

$_16_/Conf...b2.exe

windows10-2004-x64

3

$_16_/ErrorReport.exe

windows7-x64

3

$_16_/ErrorReport.exe

windows10-2004-x64

3

$_16_/HWSignature.dll

windows7-x64

6

$_16_/HWSignature.dll

windows10-2004-x64

6

$_16_/ImeHint.exe

windows7-x64

3

$_16_/ImeHint.exe

windows10-2004-x64

3

$_16_/ImeUtil.exe

windows7-x64

3

$_16_/ImeUtil.exe

windows10-2004-x64

3

$_16_/PinyinUp.exe

windows7-x64

3

$_16_/PinyinUp.exe

windows10-2004-x64

3

$_16_/Resource.dll

windows7-x64

1

$_16_/Resource.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    fb779c419d9d2688080c22d463c8ab6e_JaffaCakes118

  • Size

    11.1MB

  • MD5

    fb779c419d9d2688080c22d463c8ab6e

  • SHA1

    aa16506b5d870a2ba314d1cee149f4a9317d9fcf

  • SHA256

    811a43997b2f9dcb0ea106175839fd8308e23680f9703cfdfbb24dc9b6e538a9

  • SHA512

    17f3812769a0879b02512fe7d01d0686c62466bfeef6f4af67cfd24c833faa1baeddb11b9f4d4464750ddd78f36d097af5e7a01638e44aeffcc34b40957ca077

  • SSDEEP

    196608:EWKPjYxIuOa9O+a/8iVkvaDhBtteZ61Tu78nDV84Vg7mVvyIKGeALgI:s0x7OEa/8iVkvUtu6Y78DV847KKxgI

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • fb779c419d9d2688080c22d463c8ab6e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SetupLib.dll
    .dll windows:4 windows x86 arch:x86

    68d2fd6116bd296f74b20603b371daf0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7868cd55f358bfb360f9eb8ce1512ca0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/SogouPY.ime~
    .dll windows:4 windows x86 arch:x86

    112197e7bef8980fddaf3ff719d87044


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_14_/$_16_/Uninstall.exe.nsis
  • $_14_/SogouPY.ime
    .dll windows:4 windows x64 arch:x64

    5cf0318a3c4f177a15cb07d7add40e83


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_14_/SogouPY.ime~
    .dll windows:4 windows x64 arch:x64

    5cf0318a3c4f177a15cb07d7add40e83


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_16_/AllSkin/2008.ssf
    .zip
  • a1.bmp
  • a2.bmp
  • a3.bmp
  • ban1.bmp
  • ban2.bmp
  • ban3.bmp
  • bar.bmp
  • cn1.bmp
  • cn2.bmp
  • cn3.bmp
  • cn_biaodian1.bmp
  • cn_biaodian2.bmp
  • cn_biaodian3.bmp
  • en1.bmp
  • en2.bmp
  • en3.bmp
  • en_biaodian1.bmp
  • en_biaodian2.bmp
  • en_biaodian3.bmp
  • key1.bmp
  • key2.bmp
  • key3.bmp
  • menu1.bmp
  • menu2.bmp
  • menu3.bmp
  • pass1.bmp
  • pass2.bmp
  • pass3.bmp
  • passon1.bmp
  • passon2.bmp
  • passon3.bmp
  • quan1.bmp
  • quan2.bmp
  • quan3.bmp
  • skin.ini
  • skin1.bmp
  • skin1_1.bmp
  • skin1_2.bmp
  • skin2.bmp
  • skin2_1.bmp
  • skin2_2.bmp
  • $_16_/AllSkin/ħС.ssf
    .zip
  • a1.bmp
  • a2.bmp
  • a3.bmp
  • ban1.bmp
  • ban2.bmp
  • ban3.bmp
  • bar.bmp
    .png
  • cn1.bmp
  • cn2.bmp
  • cn3.bmp
  • cn_biaodian1.bmp
  • cn_biaodian2.bmp
  • cn_biaodian3.bmp
  • en1.bmp
  • en2.bmp
  • en3.bmp
  • en_biaodian1.bmp
  • en_biaodian2.bmp
  • en_biaodian3.bmp
  • key1.bmp
  • key2.bmp
  • key3.bmp
  • menu1.png
    .png
  • menu2.png
    .png
  • menu3.png
    .png
  • pass1.bmp
  • pass2.bmp
  • pass3.bmp
  • passon1.bmp
  • passon2.bmp
  • passon3.bmp
  • quan1.bmp
  • quan2.bmp
  • quan3.bmp
  • skin.ini
  • skin1.png
    .png
  • skin1_1.png
    .png
  • skin1_2.png
    .png
  • skin2.png
    .png
  • skin2_1.png
    .png
  • skin2_2.png
    .png
  • $_16_/AllSkin/ġް.ssf
    .zip
  • a1.bmp
  • a2.bmp
  • a3.bmp
  • ban1.bmp
  • ban2.bmp
  • ban3.bmp
  • bar.bmp
  • cn1.bmp
  • cn2.bmp
  • cn3.bmp
  • cn_biaodian1.bmp
  • cn_biaodian2.bmp
  • cn_biaodian3.bmp
  • en1.bmp
  • en2.bmp
  • en3.bmp
  • en_biaodian1.bmp
  • en_biaodian2.bmp
  • en_biaodian3.bmp
  • key1.bmp
  • key2.bmp
  • key3.bmp
  • menu1.bmp
  • menu2.bmp
  • menu3.bmp
  • pass1.bmp
  • pass2.bmp
  • pass3.bmp
  • passon1.bmp
  • passon2.bmp
  • passon3.bmp
  • quan1.bmp
  • quan2.bmp
  • quan3.bmp
  • skin.ini
  • skin1.bmp
  • skin1_1.bmp
  • skin1_2.bmp
  • skin2.bmp
  • skin2_1.bmp
  • skin2_2.bmp
  • $_16_/AllSkin/-·ڽ.ssf
    .zip
  • a1.bmp
  • a2.bmp
  • a3.bmp
  • ban1.bmp
  • ban2.bmp
  • ban3.bmp
  • bar.bmp
  • cn1.bmp
  • cn2.bmp
  • cn3.bmp
  • cn_biaodian1.bmp
  • cn_biaodian2.bmp
  • cn_biaodian3.bmp
  • en1.bmp
  • en2.bmp
  • en3.bmp
  • en_biaodian1.bmp
  • en_biaodian2.bmp
  • en_biaodian3.bmp
  • key1.bmp
  • key2.bmp
  • key3.bmp
  • menu1.bmp
  • menu2.bmp
  • menu3.bmp
  • pass1.bmp
  • pass2.bmp
  • pass3.bmp
  • passon1.bmp
  • passon2.bmp
  • passon3.bmp
  • quan1.bmp
  • quan2.bmp
  • quan3.bmp
  • skin.ini
  • skin1.bmp
  • skin1_1.bmp
  • skin1_2.bmp
  • skin2.bmp
  • skin2_1.bmp
  • skin2_2.bmp
  • $_16_/AllSkin/-һֻ.ssf
    .zip
  • a1.bmp
  • a2.bmp
  • a3.bmp
  • ban1.bmp
  • ban2.bmp
  • ban3.bmp
  • bar.bmp
  • cn1.bmp
  • cn2.bmp
  • cn3.bmp
  • cn_biaodian1.bmp
  • cn_biaodian2.bmp
  • cn_biaodian3.bmp
  • en1.bmp
  • en2.bmp
  • en3.bmp
  • en_biaodian1.bmp
  • en_biaodian2.bmp
  • en_biaodian3.bmp
  • key1.bmp
  • key2.bmp
  • key3.bmp
  • menu1.bmp
  • menu2.bmp
  • menu3.bmp
  • pass1.bmp
  • pass2.bmp
  • pass3.bmp
  • passon1.bmp
  • passon2.bmp
  • passon3.bmp
  • quan1.bmp
  • quan2.bmp
  • quan3.bmp
  • skin.ini
  • skin1.bmp
  • skin1_1.bmp
  • skin1_2.bmp
  • skin2.bmp
  • skin2_1.bmp
  • skin2_2.bmp
  • $_16_/AllSkin/״̬ĬƤ.ssf
    .zip
  • 1.bmp
  • 10.bmp
  • 11.bmp
  • 12.bmp
  • 13.bmp
  • 14.bmp
  • 15.bmp
  • 16.bmp
  • 17.bmp
  • 18.bmp
  • 19.bmp
  • 2.bmp
  • 20.bmp
  • 21.bmp
  • 22.bmp
  • 23.bmp
  • 24.bmp
  • 25.bmp
  • 26.bmp
  • 27.bmp
  • 28.bmp
  • 29.bmp
  • 3.bmp
  • 30.bmp
  • 31.bmp
  • 32.bmp
  • 33.bmp
  • 34.bmp
  • 35.bmp
  • 36.bmp
  • 37.bmp
  • 38.bmp
  • 39.bmp
  • 4.bmp
  • 40.bmp
  • 41.bmp
  • 42.bmp
  • 5.bmp
  • 6.bmp
  • 7.bmp
  • 8.bmp
  • 9.bmp
  • bar.bmp
  • pass1.bmp
  • pass2.bmp
  • pass3.bmp
  • passon1.bmp
  • passon2.bmp
  • passon3.bmp
  • skin.ini
  • skin1.bmp
  • skin1_1.bmp
  • skin1_2.bmp
  • skin2.bmp
  • skin2_1.bmp
  • skin2_2.bmp
  • $_16_/AllSkin/˹-.ssf
    .zip
  • a1.bmp
  • a2.bmp
  • a3.bmp
  • ban1.bmp
  • ban2.bmp
  • ban3.bmp
  • bar.bmp
  • cn1.bmp
  • cn2.bmp
  • cn3.bmp
  • cn_biaodian1.bmp
  • cn_biaodian2.bmp
  • cn_biaodian3.bmp
  • en1.bmp
  • en2.bmp
  • en3.bmp
  • en_biaodian1.bmp
  • en_biaodian2.bmp
  • en_biaodian3.bmp
  • key1.bmp
  • key2.bmp
  • key3.bmp
  • menu1.bmp
  • menu2.bmp
  • menu3.bmp
  • pass1.bmp
  • pass2.bmp
  • pass3.bmp
  • passon1.bmp
  • passon2.bmp
  • passon3.bmp
  • quan1.bmp
  • quan2.bmp
  • quan3.bmp
  • skin.ini
  • skin1.bmp
  • skin1_1.bmp
  • skin1_2.bmp
  • skin2.bmp
  • skin2_1.bmp
  • skin2_2.bmp
  • $_16_/AllSkin/-͵.ssf
    .zip
  • a1.bmp
  • a2.bmp
  • a3.bmp
  • ban1.bmp
  • ban2.bmp
  • ban3.bmp
  • bar.bmp
  • cn1.bmp
  • cn2.bmp
  • cn3.bmp
  • cn_biaodian1.bmp
  • cn_biaodian2.bmp
  • cn_biaodian3.bmp
  • en1.bmp
  • en2.bmp
  • en3.bmp
  • en_biaodian1.bmp
  • en_biaodian2.bmp
  • en_biaodian3.bmp
  • key1.bmp
  • key2.bmp
  • key3.bmp
  • menu1.bmp
  • menu2.bmp
  • menu3.bmp
  • pass1.bmp
  • pass2.bmp
  • pass3.bmp
  • passon1.bmp
  • passon2.bmp
  • passon3.bmp
  • quan1.bmp
  • quan2.bmp
  • quan3.bmp
  • skin.ini
  • skin1.bmp
  • skin1_1.bmp
  • skin1_2.bmp
  • skin2.bmp
  • skin2_1.bmp
  • skin2_2.bmp
  • $_16_/ConfigMover30b2.exe
    .exe windows:4 windows x86 arch:x86

    23c66f324e0bfa41a56200360ba3ef41


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/Correction.ini
  • $_16_/ErrorReport.exe
    .exe windows:4 windows x86 arch:x86

    eadada9b14fc50d843327593d54c00a9


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/HWSignature.dll
    .dll windows:4 windows x86 arch:x86

    3805775f1dde052333909932d791dd7f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_16_/ImeHint.exe
    .exe windows:4 windows x86 arch:x86

    819ced62d1b59ec708b1ff8978a4b4b3


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/ImeUtil.exe
    .exe windows:4 windows x86 arch:x86

    54306172970cc973f6ddea76e4b5f421


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/MoHuYin.ini
  • $_16_/PinyinUp.exe
    .exe windows:4 windows x86 arch:x86

    81144eb83d45d3f284106bd200988db2


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/Punctures.ini
  • $_16_/Resource.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_16_/ScdMaker.exe
    .exe windows:4 windows x86 arch:x86

    b61c88b32d5d44dc2d3dbf818ee6a596


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/ScdReg.exe
    .exe windows:4 windows x86 arch:x86

    b9d549f1f267cec71843909cce4fcf93


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/ScdViewer.exe
    .exe windows:4 windows x86 arch:x86

    2fd4ce42f3412d026ae3bf4cbdcf77fc


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/ShuangPinSchemes/ABC.ini
  • $_16_/ShuangPinSchemes/MS2003.ini
  • $_16_/ShuangPinSchemes/PinyinJiaJia.ini
  • $_16_/ShuangPinSchemes/Sogou.ini
  • $_16_/ShuangPinSchemes/ZiGuang.ini
  • $_16_/ShuangPinSchemes/ZiRanMa.ini
  • $_16_/SkinEditor.exe
    .exe windows:4 windows x86 arch:x86

    6fc1d7a0305884e43c62ac34e3d582db


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/SkinReg.exe
    .exe windows:4 windows x86 arch:x86

    bc2f628937d4058c840ae1875d55d8ab


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/SogouTSF.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    eeaf1cf892d8e72dc6f6ddfd02e103df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_16_/SpeedMeter.exe
    .exe windows:4 windows x86 arch:x86

    a248a7ff37d9332d68ad414c2d0103df


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/UserPage.exe
    .exe windows:4 windows x86 arch:x86

    c1753cbe9155bff72dbc8a9f999aa469


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/UsrDictUtil.exe
    .exe windows:4 windows x86 arch:x86

    88e8e74f3ec0007acf22057e6057bc67


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/Wizard.exe
    .exe windows:4 windows x86 arch:x86

    530c47d19bc90ee9db4ef1de0c4a3c97


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/ZipLib.dll
    .dll windows:4 windows x86 arch:x86

    1f9bbcf64bd00ab9c608fd36f2184919


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_16_/ZipLib64.dll
    .dll windows:4 windows x64 arch:x64

    c72b7e0f1eaf64b127485b3988f7b2c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_16_/config.exe
    .exe windows:4 windows x86 arch:x86

    b698a9e47b565a751b92c2454be0de0d


    Code Sign

    Headers

    Imports

    Sections

  • $_16_/phrases.ini
  • $_16_/scd/ʫ.scel
  • $_16_/scd/δʾѡ.scel
  • $_16_/scd/йƱ.scel
  • $_16_/scd/ʫ300.scel
  • $_16_/scd/´.scel
  • $_16_/scdlist.ini
  • $_16_/sgim_annex.bin
  • $_16_/sgim_bigram.bin
  • $_16_/sgim_hz.bin
  • $_16_/sgim_py.bin
  • $_16_/sgim_pytip.bin
  • $_16_/sgim_sys.bin
  • $_16_/sgim_tra.bin
  • $_16_/sgim_url.bin
  • $_16_/sgim_urlGuide.bin
  • $_16_/userNetSchedule.exe
    .exe windows:4 windows x86 arch:x86

    27bed4e079f9e793ce5fd241d1840f6f


    Code Sign

    Headers

    Imports

    Sections

  • $_17_/FC_Puncture.exe
    .exe windows:4 windows x86 arch:x86

    4ec991ad4766fae88ecc694e8a3d8728


    Code Sign

    Headers

    Imports

    Sections

  • $_17_/Install.exe
    .exe windows:4 windows x86 arch:x86

    84e10bb38fc5625c884d57a4831d7337


    Code Sign

    Headers

    Imports

    Sections

  • $_17_/check.exe
    .exe windows:4 windows x86 arch:x86

    3591ece22fca4956b0a46c079dd293d2


    Code Sign

    Headers

    Imports

    Sections

  • $_20_/SogouPy.ime
    .dll windows:4 windows x86 arch:x86

    112197e7bef8980fddaf3ff719d87044


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AllSkin/tmp/2008.ssf
    .zip
  • AllSkin/tmp/ħС.ssf
    .zip
  • AllSkin/tmp/ġް.ssf
    .zip
  • AllSkin/tmp/-·ڽ.ssf
    .zip
  • AllSkin/tmp/-һֻ.ssf
    .zip
  • AllSkin/tmp/״̬ĬƤ.ssf
    .zip
  • AllSkin/tmp/˹-.ssf
    .zip
  • AllSkin/tmp/-͵.ssf
    .zip
  • InstTemp/ConfigMover30b2.exe
    .exe windows:4 windows x86 arch:x86

    23c66f324e0bfa41a56200360ba3ef41


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/ErrorReport.exe
    .exe windows:4 windows x86 arch:x86

    eadada9b14fc50d843327593d54c00a9


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/HWSignature.dll
    .dll windows:4 windows x86 arch:x86

    3805775f1dde052333909932d791dd7f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • InstTemp/ImeHint.exe
    .exe windows:4 windows x86 arch:x86

    819ced62d1b59ec708b1ff8978a4b4b3


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/ImeUtil.exe
    .exe windows:4 windows x86 arch:x86

    54306172970cc973f6ddea76e4b5f421


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/PinyinUp.exe
    .exe windows:4 windows x86 arch:x86

    81144eb83d45d3f284106bd200988db2


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/Plugin/SgImeWord.dll
    .dll windows:4 windows x86 arch:x86

    0ffa36faefb0707d5d617bb0165da0ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • InstTemp/Plugin/SgImeWord64.dll
    .dll windows:4 windows x64 arch:x64

    8bb59566f7d43e0e385b652144cb7310


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • InstTemp/Resource.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • InstTemp/ScdMaker.exe
    .exe windows:4 windows x86 arch:x86

    b61c88b32d5d44dc2d3dbf818ee6a596


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/ScdReg.exe
    .exe windows:4 windows x86 arch:x86

    b9d549f1f267cec71843909cce4fcf93


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/ScdViewer.exe
    .exe windows:4 windows x86 arch:x86

    2fd4ce42f3412d026ae3bf4cbdcf77fc


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/SkinEditor.exe
    .exe windows:4 windows x86 arch:x86

    6fc1d7a0305884e43c62ac34e3d582db


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/SkinReg.exe
    .exe windows:4 windows x86 arch:x86

    bc2f628937d4058c840ae1875d55d8ab


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/SogouTSF.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    eeaf1cf892d8e72dc6f6ddfd02e103df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • InstTemp/SpeedMeter.exe
    .exe windows:4 windows x86 arch:x86

    a248a7ff37d9332d68ad414c2d0103df


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/UserPage.exe
    .exe windows:4 windows x86 arch:x86

    c1753cbe9155bff72dbc8a9f999aa469


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/UsrDictUtil.exe
    .exe windows:4 windows x86 arch:x86

    88e8e74f3ec0007acf22057e6057bc67


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/Wizard.exe
    .exe windows:4 windows x86 arch:x86

    530c47d19bc90ee9db4ef1de0c4a3c97


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/ZipLib.dll
    .dll windows:4 windows x86 arch:x86

    1f9bbcf64bd00ab9c608fd36f2184919


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • InstTemp/ZipLib64.dll
    .dll windows:4 windows x64 arch:x64

    c72b7e0f1eaf64b127485b3988f7b2c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • InstTemp/config.exe
    .exe windows:4 windows x86 arch:x86

    b698a9e47b565a751b92c2454be0de0d


    Code Sign

    Headers

    Imports

    Sections

  • InstTemp/sgim_annex.bin
  • InstTemp/sgim_bigram.bin
  • InstTemp/sgim_hz.bin
  • InstTemp/sgim_py.bin
  • InstTemp/sgim_pytip.bin
  • InstTemp/sgim_sys.bin
  • InstTemp/sgim_tra.bin
  • InstTemp/sgim_url.bin
  • InstTemp/sgim_urlGuide.bin
  • InstTemp/userNetSchedule.exe
    .exe windows:4 windows x86 arch:x86

    27bed4e079f9e793ce5fd241d1840f6f


    Code Sign

    Headers

    Imports

    Sections

  • Plugin/SgImeWord.dll
    .dll windows:4 windows x86 arch:x86

    0ffa36faefb0707d5d617bb0165da0ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugin/SgImeWord64.dll
    .dll windows:4 windows x64 arch:x64

    8bb59566f7d43e0e385b652144cb7310


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ShuangPinSchemes/ABC.ini
  • ShuangPinSchemes/MS2003.ini
  • ShuangPinSchemes/PinyinJiaJia.ini
  • ShuangPinSchemes/Sogou.ini
  • ShuangPinSchemes/ZiGuang.ini
  • ShuangPinSchemes/ZiRanMa.ini
  • installfile.txt
  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • scd/ʫ.scel
  • scd/δʾѡ.scel
  • scd/йƱ.scel
  • scd/ʫ300.scel
  • scd/´.scel
  • scdlist.ini