| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2022-Nov-09 09:14:14 |
| Detected languages |
Chinese - PRC
English - United States |
| Debug artifacts |
E:\jia\è°é³å°\车æº\CA560\CA560\Release\CA560.pdb
|
| CompanyName | TODO: |
| FileDescription | TODO: |
| FileVersion | 2, 2018, 7, 27 |
| InternalName | CA560.exe |
| LegalCopyright | TODO: |
| OriginalFilename | CA560.exe |
| ProductName | TODO: |
| ProductVersion | 2, 2018, 7, 27 |
| Info | Matching compiler(s): | Microsoft Visual C++ 6.0 - 8.0 |
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Safe | VirusTotal score: 0/74 (Scanned on 2024-07-11 00:04:31) | All the AVs think this file is safe. |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0xf8 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 5 |
| TimeDateStamp | 2022-Nov-09 09:14:14 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
|
| Magic | PE32 |
|---|---|
| LinkerVersion | 9.0 |
| SizeOfCode | 0x205200 |
| SizeOfInitializedData | 0x708800 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0013173E (Section: .text) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x207000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 5.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 5.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x930000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x9188cc |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| KERNEL32.dll |
GetConsoleMode
LCMapStringA GetLocaleInfoA GetStringTypeA GetStringTypeW GetCurrentDirectoryA GetConsoleCP GetDriveTypeA WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA GetProcessHeap LCMapStringW GetDateFormatA IsValidCodePage GetTimeFormatA GetOEMCP GetCPInfo GetACP GetTimeZoneInformation InitializeCriticalSectionAndSpinCount IsDebuggerPresent UnhandledExceptionFilter TerminateProcess QueryPerformanceCounter VirtualFree HeapCreate GetStartupInfoA SetHandleCount GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA GetStdHandle SetUnhandledExceptionFilter VirtualQuery GetSystemInfo VirtualAlloc HeapSize GetFileType SetStdHandle HeapReAlloc RaiseException RtlUnwind ExitThread HeapFree HeapAlloc ExitProcess GetStartupInfoW FindResourceExW VirtualProtect GetProfileIntW SearchPathW GetTempFileNameW SetErrorMode GlobalGetAtomNameW lstrlenA lstrcpyW TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc GlobalFlags GetFileTime GetFileSizeEx GetFileAttributesW GetFullPathNameW GetVolumeInformationW GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer FindNextFileW GetThreadLocale GetModuleHandleA GlobalFindAtomW GetVersionExW CompareStringW LoadLibraryA GetVersionExA CopyFileW GlobalSize FormatMessageW LocalFree MulDiv GetCurrentProcessId SetLastError GlobalAddAtomW ResumeThread SetThreadPriority GlobalFree GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA InterlockedExchange lstrcmpW GetModuleHandleW FreeResource GlobalUnlock GlobalLock GlobalAlloc GetPrivateProfileIntW WritePrivateProfileStringW FindClose FindFirstFileW CreateDirectoryW GetTempPathW FileTimeToSystemTime FileTimeToLocalFileTime GetLocalTime GetCurrentDirectoryW GetModuleFileNameW DeleteFileW lstrlenW FreeLibrary GetProcAddress LoadLibraryW LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetSystemTimeAsFileTime GetTickCount CancelIo WaitForSingleObject ReleaseSemaphore WaitForMultipleObjects WaitCommEvent PurgeComm SetCommMask GetCommMask ResetEvent ReadFile ClearCommError GetOverlappedResult WriteFile CloseHandle CreateThread CreateSemaphoreW SetCommState GetCommState CreateEventW CreateFileW InterlockedIncrement InterlockedDecrement WideCharToMultiByte SetThreadUILanguage MultiByteToWideChar GetLastError CreateMutexW GetSystemDefaultLCID Sleep FindResourceW LoadResource LockResource SizeofResource |
|---|---|
| USER32.dll |
LoadMenuW
CharUpperW MapVirtualKeyW GetKeyNameTextW EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW FillRect RegisterWindowMessageW SendDlgItemMessageA IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenu SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement DefWindowProcW CallWindowProcW GetMenu IntersectRect SystemParametersInfoA GetWindowPlacement GetSysColor DestroyMenu GetMenuItemInfoW InflateRect GetWindowTextLengthW GetWindowTextW SetFocus ShowWindow MoveWindow SetWindowTextW IsDialogMessageW SetDlgItemTextW SendDlgItemMessageW GetDlgItemTextW GetDlgItemInt CheckDlgButton UnhookWindowsHookEx GetMenuStringW WindowFromPoint EnumChildWindows RemoveMenu GetWindowThreadProcessId GetLastActivePopup MessageBoxW ShowOwnedPopups SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW IsWindowVisible GetKeyState PeekMessageW GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuW GetMenuState GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetDlgItem IsWindowEnabled GetNextDlgTabItem EndDialog GetWindow SetWindowContextHelpId MapDialogRect WinHelpW SystemParametersInfoW OffsetRect MessageBeep RedrawWindow DestroyCursor GetWindowRgn PostQuitMessage FrameRect CreateMenu GetDoubleClickTime LoadIconW PostMessageW GetSystemMenu SetRectEmpty GetDlgCtrlID CopyRect SetCapture ReleaseCapture SetWindowRgn ReleaseDC LoadBitmapW GetDC GetWindowLongW SetWindowLongW EnableMenuItem CheckMenuItem GetSubMenu InsertMenuW CreatePopupMenu MessageBoxExW SetWindowPos GetWindowRect GetFocus GetParent WaitMessage DeleteMenu GetSysColorBrush PostThreadMessageW CopyAcceleratorTableW ToUnicodeEx GetKeyboardLayout GetKeyboardState GetAsyncKeyState DestroyAcceleratorTable LoadAcceleratorsW CreateAcceleratorTableW NotifyWinEvent SetTimer PtInRect EnableWindow KillTimer InvalidateRect GetAncestor LoadCursorW SetCursor IsZoomed DrawIcon GetClientRect SetParent SetClassLongW IsMenu IsRectEmpty BringWindowToTop LockWindowUpdate AppendMenuW SendMessageW RegisterClipboardFormatW GetMenuItemCount FindWindowW IsIconic GetSystemMetrics GetIconInfo SubtractRect CopyIcon CharUpperBuffW GetUpdateRect TranslateMDISysAccel DrawMenuBar DefMDIChildProcW DefFrameProcW IsClipboardFormatAvailable MapVirtualKeyExW IsCharLowerW GetMenuDefaultItem SetMenuDefaultItem UpdateLayeredWindow EnableScrollBar UnionRect SetCursorPos DrawFocusRect DrawFrameControl DrawEdge DrawIconEx UnpackDDElParam ReuseDDElParam InsertMenuItemW TranslateAcceleratorW UnregisterClassW GetNextDlgGroupItem InvalidateRgn SetRect CharNextW EmptyClipboard CloseClipboard SetClipboardData LoadImageW DestroyIcon CopyImage OpenClipboard GetMenuItemID DrawStateW |
| GDI32.dll |
ExcludeClipRect
IntersectClipRect LineTo MoveToEx SetTextAlign SelectClipRgn GetViewportExtEx GetWindowExtEx GetPixel PtVisible RectVisible TextOutW Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC CreatePatternBrush GetStockObject SelectPalette GetObjectType CreateHatchBrush CreateRectRgnIndirect PatBlt SetRectRgn CombineRgn GetMapMode SetMapMode OffsetRgn GetRgnBox CreateDIBitmap GetTextMetricsW EnumFontFamiliesW GetTextCharsetInfo GetTextColor SetDIBColorTable GetDIBits RealizePalette SetPixel CreateDIBSection GetBkColor CreateEllipticRgn CreatePolygonRgn Polyline Polygon RoundRect CreatePalette GetPaletteEntries GetWindowOrgEx PtInRegion FillRgn FrameRgn GetBoundsRect GetViewportOrgEx LPtoDP ExtFloodFill SetPaletteEntries GetNearestPaletteIndex GetSystemPaletteEntries EnumFontFamiliesExW GetTextFaceW SetPixelV SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox GetDCOrgEx GetTextExtentPoint32W ExtTextOutW CreateFontIndirectW CopyMetaFileW GetDeviceCaps CreateBitmap DeleteObject CreateSolidBrush GetObjectW Rectangle CreateRectRgn CreateFontW CreateCompatibleBitmap CreateRoundRectRgn StretchBlt SelectObject CreateCompatibleDC Ellipse DPtoLP BitBlt CreatePen |
| MSIMG32.dll |
AlphaBlend
TransparentBlt |
| COMDLG32.dll |
GetFileTitleW
|
| WINSPOOL.DRV |
ClosePrinter
OpenPrinterW DocumentPropertiesW |
| ADVAPI32.dll |
RegEnumValueW
RegCloseKey RegQueryValueExW RegCreateKeyExW RegSetValueExW RegEnumKeyExW RegOpenKeyExW RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegDeleteValueW |
| SHELL32.dll |
DragFinish
SHGetFileInfoW SHAppBarMessage ShellExecuteW DragQueryFileW Shell_NotifyIconW SHBrowseForFolderW SHGetPathFromIDListW |
| COMCTL32.dll |
InitCommonControlsEx
ImageList_GetIconSize |
| SHLWAPI.dll |
PathFindFileNameW
PathRemoveFileSpecW PathStripToRootW PathFindExtensionW PathIsUNCW |
| oledlg.dll |
OleUIBusyW
|
| ole32.dll |
ReleaseStgMedium
CoTaskMemAlloc OleDuplicateData CoCreateInstance CoUninitialize CoInitializeEx CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleLockRunning OleIsCurrentClipboard OleFlushClipboard DoDragDrop OleGetClipboard OleUninitialize CoFreeUnusedLibraries OleInitialize OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator CoTaskMemFree CLSIDFromString CLSIDFromProgID CreateStreamOnHGlobal CoRegisterMessageFilter CoRevokeClassObject RevokeDragDrop CoLockObjectExternal RegisterDragDrop |
| OLEAUT32.dll |
SysFreeString
SysAllocStringByteLen SysStringLen SysAllocString SysAllocStringLen VariantInit VariantCopy VariantTimeToSystemTime SafeArrayDestroy SystemTimeToVariantTime OleCreateFontIndirect VariantChangeType VariantClear |
| gdiplus.dll |
GdipBitmapUnlockBits
GdipBitmapLockBits GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipDrawRectangle GdipFillRectangle GdipDrawImagePointRectI GdipDrawPath GdipAddPathLine2I GdipSetClipHrgn GdipReleaseDC GdipGetDC GdipFillPolygonI GdipDrawLineI GdipDrawEllipseI GdipFillEllipseI GdipSetSolidFillColor GdipSetPenColor GdipDeletePen GdipCreatePen1 GdipCreateBitmapFromScan0 GdipDrawImageI GdipGetImageGraphicsContext GdipDeletePath GdipCreatePath GdipSetInterpolationMode GdipSetSmoothingMode GdipCreateFromHDC GdipDeleteGraphics GdipCreateSolidFill GdipDeleteBrush GdipFree GdipAlloc GdipCloneBrush GdipFillRectangleI GdiplusStartup GdipDisposeImage GdipCloneImage GdiplusShutdown GdipSetPixelOffsetMode GdipDrawImageRectRect GdipCreateLineBrushI GdipSetLinePresetBlend GdipCreateFont GdipGetGenericFontFamilySansSerif GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipDeleteFont GdipCreateStringFormat GdipDeleteStringFormat GdipSetStringFormatFlags GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipSetStringFormatTrimming GdipSetTextRenderingHint GdipDrawString GdipLoadImageFromStream GdipGetImageWidth GdipGetImageHeight GdipMeasureString |
| WINMM.dll |
PlaySoundW
|
| HID.DLL |
HidD_GetHidGuid
HidD_GetAttributes |
| SETUPAPI.dll |
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInterfaces |
| WS2_32.dll |
gethostname
recvfrom __WSAFDIsSet WSAStartup connect gethostbyname socket htons htonl send closesocket recv bind inet_addr sendto setsockopt select |
| IMM32.dll |
ImmReleaseContext
ImmGetContext ImmGetOpenStatus |
| OLEACC.dll (delay-loaded) |
AccessibleObjectFromWindow
LresultFromObject CreateStdAccessibleObject |
| Attributes | 0x1 |
|---|---|
| Name | OLEACC.dll |
| ModuleHandle | 0x2a5b44 |
| DelayImportAddressTable | 0x29fe30 |
| DelayImportNameTable | 0x29439c |
| BoundDelayImportTable | 0x2943fc |
| UnloadDelayImportTable | 0 |
| TimeStamp | 1970-Jan-01 00:00:00 |
| 关于 CA560(&A)... |
| 打开 |
| 另存为 |
| 所有文件(*.*) |
| 无标题 |
| 未命名的文件 |
| 隐藏(&H) |
| 无法获取错误信息。 |
| 试图执行的操作不受支持。 |
| 所需资源不可用。 |
| 内存不足。 |
| 发生未知错误 |
| 遇到不适当的参数。 |
| 文件名不正确。 |
| 打开文档失败。 |
| 保存文档失败。 |
| 是否保存对 %1 的更改? |
| 建立空文档失败。 |
| 该文件太大,无法打开。 |
| 无法启动打印作业。 |
| 启动帮助失败。 |
| 内部应用程序出错。 |
| 命令失败。 |
| 没有足够的内存执行操作。 |
| 系统注册项已被移除并且相应的 INI 文件(如存在)也被删除。 |
| 不是所有的系统注册项(或 INI 文件)都被移除。 |
| 在系统中没有找到该程序所需的文件 %s。 |
| 该程序连接到丢失的输出 %s (在文件 %s 中)。该计算机上安装的可能是不兼容的 %s 版本。 |
| 请输入一个整数。 |
| 请输入一个数字。 |
| 请输入一个在 %1 和 %2 之间的整数。 |
| 请输入一个在 %1 和 %2 之间的数字。 |
| 请输入不多于 %1 个的字符。 |
| 请选择一个按钮。 |
| 请输入一个在 0 和 255 之间的整数。 |
| 请输入一个正整数。 |
| 请输入一个日期和/或时间值。 |
| 请输入一种货币。 |
| 请输入一个 GUID。 |
| 请输入一个时间。 |
| 请输入一个日期。 |
| 意外的文件格式。 |
| %1 |
| 无法找到该文件。 |
| 请验证指定的路径和文件名是否正确。 |
| 目标磁盘驱动器已满。 |
| 无法对 %1 进行读操作,它已经被其他人打开。 |
| 无法对 %1 进行写操作,因为它是只读文件或已经被其他人打开。 |
| 在对 %1 进行读操作时发生错误。 |
| 在对 %1 进行写操作时发生错误。 |
| %1: %2 |
| 是否继续运行脚本? |
| 调度异常: %1 |
| 无法读取只写属性。 |
| 无法写入只读属性。 |
| 无法加载邮件系统支持。 |
| 邮件系统 DLL 无效。 |
| “发送邮件”未能发送邮件。 |
| 未发生错误。 |
| 访问 %1 时发生未知错误。 |
| 没有找到 %1。 |
| %1 包含错误的路径。 |
| 无法打开 %1,因为打开的文件太多。 |
| 对 %1 的访问被拒绝。 |
| 与 %1 相关联的文件句柄不正确。 |
| 无法删除 %1,因为它是当前目录。 |
| 该目录已满,无法创建 %1。 |
| 对 %1 进行查找失败。 |
| 访问 %1 时遇到硬件 I/O 错误。 |
| 访问 %1 时遇到共享冲突。 |
| 访问 %1 时遇到锁定冲突。 |
| 访问 %1 时磁盘已满。 |
| 试图访问 %1 时超过它的结尾。 |
| 未发生错误。 |
| 访问 %1 时发生未知错误。 |
| 试图在对 %1 进行读操作的同时对其进行写操作。 |
| 试图访问 %1 时超过它的结尾。 |
| 试图在对 %1 进行写操作的同时对其进行读操作。 |
| %1 格式错误。 |
| %1 包含意外的对象。 |
| %1 包含错误的架构。 |
| 像素 |
| 取消选中 |
| 选中 |
| 混合 |
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 2.2018.7.27 |
| ProductVersion | 2.2018.7.27 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | Chinese - PRC |
| CompanyName | TODO: |
| FileDescription | TODO: |
| FileVersion (#2) | 2, 2018, 7, 27 |
| InternalName | CA560.exe |
| LegalCopyright | TODO: |
| OriginalFilename | CA560.exe |
| ProductName | TODO: |
| ProductVersion (#2) | 2, 2018, 7, 27 |
| Resource LangID | Chinese - PRC |
|---|
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2022-Nov-09 09:14:14 |
| Version | 0.0 |
| SizeofData | 78 |
| AddressOfRawData | 0x24d0f8 |
| PointerToRawData | 0x24b6f8 |
| Referenced File | E:\jia\è°é³å°\车æº\CA560\CA560\Release\CA560.pdb |
| Size | 0x48 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x69c820 |
| SEHandlerTable | 0x655f30 |
| SEHandlerCount | 4163 |
| XOR Key | 0x484b3b5e |
|---|---|
| Unmarked objects | 0 |
| Imports (9210) | 2 |
| C objects (VS2012 build 50727 / VS2005 build 50727) | 11 |
| Imports (VS2012 build 50727 / VS2005 build 50727) | 39 |
| Total imports | 849 |
| ASM objects (VS2008 SP1 build 30729) | 49 |
| C objects (VS2008 SP1 build 30729) | 188 |
| C++ objects (VS2008 SP1 build 30729) | 355 |
| C++ objects (VS2008 build 21022) | 8 |
| 138 (VS2008 SP1 build 30729) | 36 |
| Linker (VS2008 build 21022) | 1 |
| Resource objects (VS2008 SP1 build 30729) | 1 |
No comments yet.