?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
幻想三国OL刷怪刷技能脚本.exe
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
幻想三国OL刷怪刷技能脚本.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
手机网游幻想三国OL后台刷怪刷技能脚本外挂.doc
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
手机网游幻想三国OL后台刷怪刷技能脚本外挂.doc
Resource
win10v2004-20241007-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
41d2a9acf3edcdc4e205edcaaab48526_JaffaCakes118
-
Size
6.7MB
-
MD5
41d2a9acf3edcdc4e205edcaaab48526
-
SHA1
5f8e941d1725b0c75c4a6e41191abdf302f169f7
-
SHA256
48918efd54efd8ac3b3d9e797b7433e27b31c567a7d54145c7796e264d48bd51
-
SHA512
ed4d66010c6b514db00e0137a705fecdec2a6188d44d9c93c163ceb4875f0276ce0770ef77b4356fc74d2037067dcbc351ad2133bc43a52af63c401cccaa3bdc
-
SSDEEP
196608:G6Ii0kjOglt83ciuTfefWsB4z9R9hC6X3HH0MFlKSoUtZqhv:G6SkagSGTfefWsc9fcg3HnDKBbhv
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/幻想三国OL刷怪刷技能脚本.exe
Files
-
41d2a9acf3edcdc4e205edcaaab48526_JaffaCakes118.rar
-
幻想三国OL刷怪刷技能脚本.exe.exe windows:4 windows x86 arch:x86
dc73d9c1e976828c758bcb75bdcccc0d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord5579
ord5571
ord6061
ord5864
ord3596
ord640
ord6194
ord1640
ord323
ord2405
ord5785
ord1175
ord2096
ord2408
ord5860
ord807
ord2920
ord2012
ord2120
ord554
ord4163
ord1644
ord1146
ord5572
ord2919
ord940
ord941
ord5787
ord4133
ord4297
ord1621
ord4202
ord5856
ord536
ord2452
ord2753
ord1195
ord472
ord5161
ord5162
ord5160
ord4905
ord4742
ord4976
ord4948
ord4358
ord4377
ord4854
ord5287
ord4835
ord491
ord1907
ord4258
ord489
ord768
ord283
ord4478
ord4267
ord2450
ord1908
ord4406
ord3729
ord1690
ord2528
ord5288
ord4439
ord2054
ord4431
ord771
ord804
ord4259
ord4284
ord4715
ord2370
ord857
ord465
ord1572
ord1199
ord2575
ord4396
ord3574
ord609
ord556
ord809
ord2122
ord2639
ord2862
ord3996
ord3302
ord2817
ord801
ord5829
ord3726
ord541
ord2065
ord3716
ord790
ord2301
ord2358
ord6111
ord926
ord6334
ord2642
ord3610
ord656
ord2086
ord5053
ord4774
ord5981
ord6270
ord613
ord289
ord6358
ord1088
ord6449
ord2727
ord6467
ord2730
ord2729
ord1568
ord1180
ord6380
ord2289
ord1200
ord6153
ord5645
ord5583
ord6385
ord2393
ord3790
ord6283
ord6282
ord6877
ord2784
ord4278
ord3089
ord2860
ord3797
ord2299
ord2298
ord3317
ord1158
ord6883
ord773
ord501
ord2448
ord3903
ord5834
ord2044
ord3887
ord2830
ord4222
ord5467
ord1581
ord2918
ord1989
ord2805
ord960
ord6314
ord4179
ord6389
ord5445
ord6012
ord5775
ord2603
ord3180
ord3183
ord3176
ord3508
ord3652
ord703
ord6143
ord1802
ord1934
ord1935
ord6662
ord6663
ord923
ord925
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord4046
ord2145
ord2144
ord6225
ord5231
ord5247
ord2132
ord4601
ord715
ord2621
ord1205
ord1134
ord824
ord5435
ord1683
ord1673
ord2628
ord5980
ord2641
ord4122
ord6214
ord6196
ord4298
ord5948
ord3088
ord3875
ord3872
ord3871
ord6198
ord2841
ord4283
ord3137
ord3796
ord5719
ord6092
ord3524
ord4032
ord6095
ord4035
ord2549
ord2433
ord3353
ord3579
ord426
ord726
ord826
ord2820
ord498
ord415
ord755
ord470
ord5637
ord5849
ord3475
ord4287
ord2109
ord1081
ord1008
ord5736
ord4476
ord284
ord6453
ord798
ord1997
ord6407
ord5194
ord533
ord5303
ord2726
ord4699
ord5715
ord3741
ord817
ord2256
ord565
ord3361
ord326
ord4299
ord4400
ord3706
ord3370
ord2582
ord4402
ord3640
ord693
ord682
ord4243
ord6907
ord5861
ord3998
ord6007
ord3286
ord3698
ord765
ord2108
ord2244
ord4457
ord4981
ord4499
ord1949
ord4034
ord6929
ord2765
ord913
ord4204
ord6876
ord859
ord5600
ord1083
ord5607
ord5278
ord3496
ord3528
ord3005
ord2136
ord1601
ord403
ord879
ord2740
ord2801
ord882
ord547
ord699
ord700
ord603
ord2454
ord1969
ord273
ord404
ord1871
ord6571
ord5620
ord5642
ord6307
ord521
ord912
ord4188
ord397
ord6379
ord777
ord1770
ord462
ord743
ord2170
ord850
ord861
ord394
ord696
ord698
ord3939
ord3937
ord398
ord396
ord3437
ord909
ord4185
ord4187
ord3435
ord911
ord1842
ord844
ord5601
ord4189
ord3702
ord654
ord6140
ord341
ord4167
ord5631
ord3584
ord543
ord803
ord812
ord6144
ord5862
ord5610
ord559
ord1799
ord614
ord2623
ord290
ord4226
ord2486
ord4003
ord446
ord6354
ord5500
ord1578
ord600
ord269
ord1243
ord2864
ord818
ord5678
ord5794
ord1176
ord5597
ord1233
ord3631
ord3226
ord2243
ord683
ord3138
ord2827
ord3957
ord5953
ord2078
ord2754
ord2080
ord2116
ord6616
ord6669
ord6442
ord2114
ord2089
ord2113
ord2119
ord6785
ord3223
ord4386
ord1093
ord2593
ord3221
ord2042
ord6743
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord3719
ord692
ord793
ord6515
ord1988
ord6059
ord5781
ord6654
ord6762
ord3293
ord955
ord3021
ord6605
ord3711
ord783
ord6128
ord3752
ord2112
ord2099
ord4124
ord1844
ord1270
ord1232
ord2380
ord4123
ord3803
ord3742
ord5789
ord5873
ord6172
ord6021
ord6189
ord4330
ord6186
ord5756
ord6192
ord5759
ord2971
ord3619
ord1641
ord2614
ord5788
ord2567
ord2414
ord4277
ord5875
ord3626
ord3693
ord3573
ord3571
ord2859
ord5606
ord2863
ord4083
ord6142
ord2438
ord3654
ord2584
ord4220
ord1862
ord500
ord3701
ord772
ord686
msvcrt
_pctype
_stricmp
fprintf
strncmp
qsort
memchr
printf
isxdigit
__dllonexit
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_itoa
_strnicmp
wcsstr
_wcslwr
_controlfp
mbstowcs
_beginthreadex
isupper
_mbstok
_setmbcp
__mb_cur_max
_isctype
calloc
??8type_info@@QBEHABV0@@Z
_tempnam
fwrite
_CxxThrowException
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_mbsnbicmp
_mbspbrk
_ismbcspace
tolower
_mbschr
isspace
_except_handler3
_getch
_strdup
_splitpath
isprint
islower
isalnum
_mbsstr
strstr
strchr
isalpha
isdigit
sprintf
atol
_mbsicmp
_mbsnbcpy
_purecall
memmove
_ftol
wcslen
wcscpy
malloc
ftell
rewind
fread
free
fgets
fopen
fseek
fgetc
fclose
fputc
rand
time
srand
sscanf
atoi
__CxxFrameHandler
_mbscmp
strncpy
kernel32
GlobalSize
GlobalReAlloc
SetUnhandledExceptionFilter
Module32Next
Module32First
CreateToolhelp32Snapshot
MulDiv
SleepEx
TerminateThread
FileTimeToSystemTime
SetFilePointer
GetFileInformationByHandle
WriteFile
SystemTimeToFileTime
GetLocalTime
LocalFileTimeToFileTime
SetFileTime
LCMapStringA
TerminateProcess
VirtualFree
VirtualQuery
GetSystemInfo
GetStringTypeExA
GetUserDefaultLCID
InterlockedCompareExchange
GetFileSizeEx
FlushInstructionCache
VirtualAlloc
GetStartupInfoA
LocalFree
ReleaseMutex
CreateMutexA
ReadProcessMemory
OutputDebugStringA
GetCurrentThread
SuspendThread
OpenEventA
CopyFileA
WaitForMultipleObjects
PulseEvent
ResumeThread
TlsAlloc
TlsSetValue
FormatMessageA
LocalAlloc
GetFileSize
ReadFile
GlobalFree
GetACP
SetEnvironmentVariableA
VirtualProtect
InterlockedIncrement
SetEvent
ResetEvent
Beep
IsDebuggerPresent
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentDirectoryA
GetFileAttributesExA
InterlockedExchange
GetCurrentThreadId
QueryPerformanceFrequency
OpenProcess
VirtualProtectEx
GetCurrentProcessId
MoveFileA
GetFileAttributesA
OpenMutexA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetCurrentDirectoryA
GetSystemDirectoryA
IsDBCSLeadByte
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
GetModuleFileNameA
GetTempFileNameA
GetProfileStringA
GetPrivateProfileStringA
WriteProfileStringA
CreateFileA
DeviceIoControl
GetProcAddress
CompareStringA
lstrcatA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
lstrcpynA
GetProcessHeap
HeapAlloc
HeapFree
CreateThread
GetExitCodeThread
GetLastError
CreateEventA
CloseHandle
Sleep
GetCurrentProcess
SetPriorityClass
GetPrivateProfileIntA
lstrcmpiA
FindResourceA
LoadResource
LockResource
GetCPInfo
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetVersion
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
CreateProcessA
WaitForSingleObject
GetTempPathA
CreateDirectoryA
DeleteFileA
IsBadReadPtr
SetFileAttributesA
MoveFileExA
GetTickCount
WritePrivateProfileStringA
SetLastError
QueryPerformanceCounter
user32
DrawTextA
GetDC
GetSystemMetrics
AppendMenuA
ReleaseDC
GetMenuItemCount
ModifyMenuA
GetMenuState
GetMenuItemID
GetSysColor
DrawIconEx
CreatePopupMenu
CreateMenu
GetMenuStringA
GetSysColorBrush
CopyRect
FillRect
DrawEdge
SetRect
GetMenuItemInfoA
GetParent
RedrawWindow
IsWindow
SystemParametersInfoA
SetWindowLongA
SetWindowPos
KillTimer
LoadBitmapA
SetTimer
PostMessageA
GetDesktopWindow
IsWindowVisible
GetClientRect
GetWindowRect
GetSubMenu
TabbedTextOutA
GrayStringA
GetDlgCtrlID
PostQuitMessage
DestroyCursor
GetWindowLongA
IsMenu
EnableWindow
SendMessageA
SetCursor
PtInRect
DestroyIcon
SetCursorPos
ClipCursor
GetAsyncKeyState
GetWindowDC
GetMessageA
EqualRect
SetParent
GetForegroundWindow
GetGUIThreadInfo
DestroyWindow
PostThreadMessageA
PeekMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
UnhookWindowsHookEx
GetWindowThreadProcessId
SetWindowsHookExA
GetCursorPos
ScreenToClient
IsIconic
DrawIcon
LoadIconA
LoadMenuA
LoadCursorA
CopyIcon
InvalidateRect
ReleaseCapture
SetCapture
wsprintfA
SetForegroundWindow
SetActiveWindow
MessageBoxA
SetWindowTextA
LoadImageA
GetIconInfo
DrawStateA
FrameRect
InflateRect
SendInput
UnregisterHotKey
RegisterHotKey
MapVirtualKeyA
CheckMenuItem
GetCapture
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EnumDisplaySettingsA
DefWindowProcA
UnregisterClassA
CreateWindowExA
RegisterClassA
ShowWindow
EnumWindows
RegisterWindowMessageA
IsRectEmpty
GetFocus
UpdateWindow
LockWindowUpdate
BringWindowToTop
GetClassInfoA
DrawFrameControl
ShowScrollBar
LoadStringA
OffsetRect
DrawFocusRect
ClientToScreen
WindowFromPoint
GetActiveWindow
GetNextDlgTabItem
gdi32
DeleteObject
BitBlt
SelectObject
CreateDIBSection
SetPixel
DeleteDC
GetObjectA
PatBlt
PtVisible
RectVisible
Rectangle
TextOutA
ExtTextOutA
Escape
GetStockObject
SetTextColor
SetBkColor
CreateBitmap
GetDIBits
CreateDCA
GetBkColor
GetCurrentObject
CreateRectRgn
SetDIBits
Ellipse
GetTextExtentPoint32A
GetTextExtentPoint32W
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectA
CreateSolidBrush
GetDeviceCaps
GetPixel
CreatePen
GetBkMode
advapi32
RegQueryValueExA
ControlService
StartServiceA
OpenServiceA
DeleteService
CreateServiceA
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
RegQueryValueA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
OpenSCManagerA
shell32
Shell_NotifyIconA
SHGetSpecialFolderPathA
ShellExecuteExA
ShellExecuteA
comctl32
ImageList_Draw
ImageList_GetImageCount
ImageList_GetIcon
ImageList_AddMasked
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetBkColor
ImageList_GetBkColor
ole32
OleRun
CoInitialize
CLSIDFromString
CLSIDFromProgID
StgCreateDocfileOnILockBytes
CoUninitialize
CoInitializeEx
CreateStreamOnHGlobal
CoCreateInstance
StgCreateDocfile
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CoFreeUnusedLibraries
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
oleaut32
SysAllocStringByteLen
SafeArrayCreateVector
SafeArrayPutElement
SysStringLen
SysAllocStringLen
VariantCopy
LoadTypeLi
SysAllocString
VariantInit
VariantClear
SysFreeString
GetErrorInfo
urlmon
URLDownloadToFileA
msvcp60
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??_7runtime_error@std@@6B@
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1runtime_error@std@@UAE@XZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0runtime_error@std@@QAE@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Nstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IID@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?_Doraise@runtime_error@std@@MBEXXZ
?what@runtime_error@std@@UBEPBDXZ
??1logic_error@std@@UAE@XZ
??0bad_exception@std@@QAE@ABV01@@Z
??1bad_exception@std@@UAE@XZ
??_7bad_exception@std@@6B@
??8std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PAD0PBD1@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??_7logic_error@std@@6B@
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?what@logic_error@std@@UBEPBDXZ
?_Xlen@std@@YAXXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??_8?$basic_ifstream@DU?$char_traits@D@std@@@std@@7B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0locale@std@@QAE@XZ
??_7?$basic_filebuf@DU?$char_traits@D@std@@@std@@6B@
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
??_7?$basic_ifstream@DU?$char_traits@D@std@@@std@@6B@
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?close@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Stinit@?1??_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@23@@Z@4HA
?clear@ios_base@std@@QAEXH_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1locale@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??_7out_of_range@std@@6B@
winmm
PlaySoundA
timeGetTime
shlwapi
PathFileExistsA
SHDeleteKeyA
ws2_32
ntohs
ntohl
inet_addr
htons
gethostbyname
WSAWaitForMultipleEvents
htonl
WSAGetLastError
setsockopt
WSASocketA
closesocket
WSAConnect
WSAEventSelect
shutdown
WSARecv
WSAEnumNetworkEvents
WSASend
inet_ntoa
psapi
EnumProcessModules
rpcrt4
RpcStringFreeA
UuidToStringA
UuidCreate
imagehlp
MakeSureDirectoryPathExists
dinput8
DirectInput8Create
wininet
InternetSetOptionA
uxtheme
SetThemeAppProperties
olepro32
ord251
Exports
Exports
Sections
.text Size: 720KB - Virtual size: 717KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 428KB - Virtual size: 426KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mmc0 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mmc1 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
手机网游幻想三国OL后台刷怪刷技能脚本外挂.doc.doc windows office2003