Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: 12818c3ab222f7e4e67bb71d12a50330 --

Hashes
MD5: 12818c3ab222f7e4e67bb71d12a50330
SHA1: b707d37a2a5550625072bc80d17c1f8417484532
SHA256: 2f89e8b7d12eabe343220b26c00bf4adea18dfe2035ca405c6437e749d3441fe
SSDEEP: 3072:OD9xtwRQkcymaH1xBZ4S/rrlCTI9XkcEEoE6lp55Xjzbt+/rABxZEIRrh8W26:OhIPBZxlCTakXEoEY/jzbt+cZpR18q
Details
File Type: PE32
Yara Hits
YRP/Armadillo_v171 | YRP/Microsoft_Visual_Cpp_v60 | YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional | YRP/Microsoft_Visual_Cpp_50 | YRP/Microsoft_Visual_Cpp_v50v60_MFC | YRP/Armadillo_v171_additional | YRP/Microsoft_Visual_Cpp | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/HasRichSignature | YRP/domain | YRP/contentis_base64 | YRP/screenshot |
Parent Files
726e2edef2577bb9c0d4b1bb33c9030b
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
MFC42.DLL
printf
memset
__CxxFrameHandler
fclose
rewind
_wfopen
MSVCRT.dll
__dllonexit
_onexit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
GetModuleFileNameW
GetModuleHandleA
GetStartupInfoA
KERNEL32.dll
MessageBoxA
wsprintfA
GetSysColor
EnableWindow
GetWindowLongA
CopyRect
ReleaseCapture
PtInRect
GetClientRect
InvalidateRect
GetCapture
SetCapture
GetFocus
LoadIconA
SendMessageA
GetSystemMetrics
DrawIcon
IsIconic
SetRect
LoadBitmapA
USER32.dll
GetTextExtentPoint32A
CreatePen
CreateSolidBrush
RoundRect
Rectangle
CreatePolygonRgn
CreateCompatibleDC
SelectObject
PaintRgn
BitBlt
GDI32.dll
_setmbcp
state is:
+-+-+-+
You win!
It is a draw!
The computer win!
It is a draw!
myapp.exe
www.meitu.com
 $.' ",#
(7),01444
'9=82<.342
!22222222222222222222222222222222222222222222222222
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
<)8&=G u"
tU1>en
vsMfouo*
Cx8~}n#
='|E=a0
I+'[vT
zjQ2 4l
D>$|mj
8nERRN0
P~{uG?0
	R[]THV
dz:gAZ
{+G1x{
AOfv)Gh
".8_s>x
gV&(Bd`
H`,6~Ja
$m4NQ$O
M>rxDM
h`f957
J+,r"IxPq?U
:rNQ(lW
Yl<a8\W
"dd~0DR
U_E<Ln/[
N!nv{p0
+2z>> 
)o:3h)
,i|v	L5
X'fY,-lr
QCj#|(
.~YHhC
G[ewSk
(p~Fcz
6)\T]6
	V4wB|
b0St$RH
nKpu[D0
TH<=W\
=ElNWxuGX
7^yD5F
*|~(4j
2`;=-r?
1&{eX{/
x7(-.W
	@6>|`
%Rx]C(
lSvO^Y,
G<sZN)
#/Ioli
P3pxc'
(SB>F[5EkNI
of_zW	
l,F4o]d
)C*Ym*
mRK|0Z
Ej}C87
*	(bQ2
tO`9R9
IC~x{Q@k
"a)hj%
V:jyZ6
6-<?a"
zlV\|:
UBx.W.
tkmQdI
ZRj9bNI
K*1"Z%
G](!?UR
BIg<U_
%+R!jE
/hi-A9>
.$Ca-b
;sE$]bW
~M?wgJCZ
&|$vY%a^
1w:maw
<T{!nRU#
y&W4]m
}BL+|%
~s0`L2
gryitp
	D`X?&
x`z580h
j}5)N6
;I_{C~
"k:uCo
\Hjb-3
:1<|8IZ
-dQ-Bi
t-(PgO
t*r:lcK$zS
2Uc-#H
|N^*1I
~\p]gf
JH04DrBk
/L"3+7ss
:AS6B+	
wLRwj4
0W35&t_(
H5rSq{
Oi;|>2*%
lvGAgR
Yi	PM 
H:#1_Wc
#&_COr&Q9lk
^ZxC|U
V.pFyZ
dX!I'!
Qr?c%A
]Jt!^p_
)U96ev`
 =@Qy8
$m6F#|Z
h{n;+Vq {
.}6K}]
I)M[6tS
1@a]H.
	x_5F`
fut]?L
Z7f#e.
ZPisAS
"{URb`
kmi%Cp
[$7c5r
P}PL]z%
]\!ti4
!r.+Nf
*t2KX&
J[|a5b
,v/_$T
\VR\PZ
*)za*]S
<tAdr`
x(jHO$
LU9I2P
Untl60
]A8Y%7
PPz;"?
gGlwFB_
,R]w.L
rh?&qm
"O!~PW%
wH}!}j
|GLS2<
xg,\[5
cF1:8CA
arwdA;
6Z=Bl1
4vT-L_
R(n[RfP
ia,Vs!f1
YI3VV<3
/k*J(22
)e-7z?5
8kP@	hL"8
'AI3AE
>wgPf+OF'
rt%6>%
18^Ita
8aL?8N
mx(y"T
{%0Sq[s
aK{(UZ@\Nd
nAD!Gy}5U}
}"0BA;_
S?xg(XUD
[vgVT<
JxoG'.
"x	*;:4
,(M,Qf
:D'}h?"
MvoZ0B
=-/,6TH)
$>%JmA
&#F];_
Qb`Z]{^
1F?aOV
mJkGGO
18R:"Y
ZgsMB^H
hvbz'a\'}V#!
[xa3Z0
1JQ'4(
-$zU"_
:h&LK{DS
5p1-31H
O	`@:i*
j-d+1l
Dj~I(P
wlnDT 
Q`1r`2R
PYu<OA
mM,>q^<
S)DbM<|
v %dl}7
)0c'C.
c;P#,j
/uYbj+
M%j3l?N
278HgH
f1h8qI
0lz;HO/
{+~HQU5
w!lktb
Un~xi<
;R`KZNaWtYBJ
K'gD/~
8L-ZUb
NUjdw$%
?H utw
X<c{F+
KR%Msl
S,~m~T
>BVNB]
	J1lQwjC
K)qe/Le
L	^iFK
nF40V[`^T
'(&BVV
,B!Zdh
!_Qo}u)
%[jKzP
,$LG^<v
^Y29`2E
@j'drd
Ba85cG
866}`Z
xr;M-84
5A5^kS
3]H;YTA
&7771d
:Q2wKq
n=+Q*(
7E.x-5
CD'=!o
;F}D:I]
~uupHD
jQ5Bsoj
zM%P|X
4.n|vX%
b[rl5Ru
V}w,/r_
a;#['Fn
dVy'.,
ff=/3y.
2txF)N>9
%f+%6j
8L%{58
P]cQR1}
?=l|f1
R'!a_c
Sh-(Cm
:@{.zzr3
C$ [F9
/SIP?e
%hq`}`
$B~C|A2
#w-ut'
@f*z'!
]g4aewA
M<+6;<1z
:2,H#z
nbPNmxf97
1'KQ~Ap
2Jhi=g
0N|K2a
EO_<W7
-lta["
?*fHU-
D*3g;<CH!
6m:4'QX
K.\&#N
|^34P~
,P!/L-
s1aH=i
50<U&o/O
.,~c&0
ls*Rn=%
*Rky5Qy
 Ar1&Qd
pSNYrc
;2"JUh
g9=sJw
NH&gSG
?WT	>Iz
DCxU4{
L0Y& [\
(K-duF
!{m~Fr
j,#pbB
R[/bRx
TY~9f5WJ
UZJ)WM
O(SpK<3t]Gxf
4A3m\6
vg7m#'
phy<n#Gg
p=}gUW
3|Kf!y
+uOXdP
.N9Ky1=0
hk-WbGW
N{e}qb
$?U3xV
hK=?AEKs>
C.3C)"z
IGjr2X
j[nNO<
H$sUpg
dYsM!d
<6(tT;:
t0gCae
)kzy*+0
rDo~5(6
 	4lP'XF
2[B*10
 H*8bZ	
UY}_^^w[
vSNV{3
~SZV+W
t:sa@T;
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
M}^vyl