自 制 勒 索 V4.0 全部重构！

55791163

提示您所在的用户组无法下载或查看附件 请问如何晋级？

henry217

55791163 发表于 2021-7-25 10:43
提示您所在的用户组无法下载或查看附件 请问如何晋级？

https://bbs.kafan.cn/thread-2211568-1-1.html

记住不要连续回复同一个楼层两次

0p9o8i

henry217 发表于 2021-7-25 10:36
只有楼主和管理人员能对回帖进行置顶

所以在自己的帖子里怎么顶楼？

henry217

0p9o8i 发表于 2021-7-25 11:13
所以在自己的帖子里怎么顶楼？

帖子右下角有一个小复选框

选中置顶即可

0p9o8i

henry217 发表于 2021-7-25 11:39
帖子右下角有一个小复选框

选中置顶即可

好的谢谢

笑笑2006

导入表HASH
f34d5f2d4577ed6d9ceec516c1f5a744

编译时间戳
2085-04-02 04:09:49        <---     ？？？？？

PEID

• PE: library: .NET(v4.0.30319)[-]
• PE: linker: Microsoft Linker(48.0*)[EXE32,admin]
  

入口所在段
.text

PDB信息
D:\源码\RansomeWare\RansomeWare\obj\Release\RansomeWare.pdb

入口点(OEP)
0x50282

镜像基地址
0x400000

PE 文件签名

签名验证
NotSigned

第三方检测信息

URLs提取

• http://schemas.microsoft.com/SMI/2005/WindowsSettings
  

PE 节表信息

节名

虚拟地址

虚拟大小

物理地址

物理大小

节权限

熵值

.text0x000020000x0004e2880x000002000x0004e400R-E5.189657924282129
.rsrc0x000520000x0004d9dc0x0004e6000x0004da00R--5.171050851125227
.reloc0x000a00000x0000000c0x0009c0000x00000200R--0.08153941234324169

PE 资源信息

资源名

语言

资源类型

子语言

偏移地址

资源大小

RT_ICONLANG_NEUTRALPNG image data, 256 x 256, 8-bit/color RGBA, non-interlacedSUBLANG_NEUTRAL0x000523e00x00004e55
RT_ICONLANG_NEUTRALdataSUBLANG_NEUTRAL0x000572480x00000668
RT_ICONLANG_NEUTRALdBase IV DBT of @.DBF, block length 512, next free block index 40, next free block 2087061590, next used block 7109750SUBLANG_NEUTRAL0x000578c00x000002e8
RT_ICONLANG_NEUTRALdataSUBLANG_NEUTRAL0x00057bb80x000001e8
RT_ICONLANG_NEUTRALGLS_BINARY_LSB_FIRSTSUBLANG_NEUTRAL0x00057db00x00000128
RT_ICONLANG_NEUTRALPNG image data, 256 x 256, 8-bit/color RGBA, non-interlacedSUBLANG_NEUTRAL0x00057ee80x00001af6
RT_ICONLANG_NEUTRALdataSUBLANG_NEUTRAL0x000599f00x00000ea8
RT_ICONLANG_NEUTRALdBase IV DBT of @.DBF, block length 1024, next free block index 40, next free block 0, next used block 0SUBLANG_NEUTRAL0x0005a8a80x000008a8
RT_ICONLANG_NEUTRALdataSUBLANG_NEUTRAL0x0005b1600x000006c8
RT_ICONLANG_NEUTRALGLS_BINARY_LSB_FIRSTSUBLANG_NEUTRAL0x0005b8380x00000568
RT_ICONLANG_NEUTRALPNG image data, 768 x 768, 8-bit/color RGBA, non-interlacedSUBLANG_NEUTRAL0x0005bdb00x00009783
RT_ICONLANG_NEUTRALPNG image data, 512 x 512, 8-bit/color RGBA, non-interlacedSUBLANG_NEUTRAL0x000655440x000057f3
RT_ICONLANG_NEUTRALdBase IV DBT, blocks size 0, block length 2048, next free block index 40, next free block 0, next used block 0SUBLANG_NEUTRAL0x0006ad480x00010828
RT_ICONLANG_NEUTRALdataSUBLANG_NEUTRAL0x0007b5800x000094a8
RT_ICONLANG_NEUTRALdataSUBLANG_NEUTRAL0x00084a380x000067e8
RT_ICONLANG_NEUTRALdataSUBLANG_NEUTRAL0x0008b2300x00005488
RT_ICONLANG_NEUTRALdBase IV DBT of \200.DBF, blocks size 0, block length 16896, next free block index 40, next free block 4294967295, next used block 4294967295SUBLANG_NEUTRAL0x000906c80x00004228
RT_ICONLANG_NEUTRALdataSUBLANG_NEUTRAL0x000949000x00003a48
RT_ICONLANG_NEUTRALdataSUBLANG_NEUTRAL0x000983580x000025a8
RT_ICONLANG_NEUTRALdataSUBLANG_NEUTRAL0x0009a9100x00001a68
RT_ICONLANG_NEUTRALdataSUBLANG_NEUTRAL0x0009c3880x000010a8
RT_ICONLANG_NEUTRALdataSUBLANG_NEUTRAL0x0009d4400x00000988
RT_ICONLANG_NEUTRALdataSUBLANG_NEUTRAL0x0009ddd80x000006b8
RT_ICONLANG_NEUTRALGLS_BINARY_LSB_FIRSTSUBLANG_NEUTRAL0x0009e4a00x00000468
RT_GROUP_ICONLANG_NEUTRALdataSUBLANG_NEUTRAL0x0009e9180x00000156
RT_VERSIONLANG_NEUTRALdataSUBLANG_NEUTRAL0x0009ea800x0000033c
RT_MANIFESTLANG_NEUTRALXML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminatorsSUBLANG_NEUTRAL0x0009edcc0x00000c09