微软锁屏画报_支持win10win11[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

微软锁屏画报_支持win10win11.exe
Size

4.2MB
MD5

ee1da257caaeb67a5b72d2f959d564cf
SHA1

81827ee5093db823ba9c1a1625af479dfad36659
SHA256

ce2daeaf4fcc6cf3499d6f1ab9d13e4c1db008fd50d48dcd9dfa496a561a135e
SHA512

f376405944062c1d9456a43cb229bc654113ee10323febe69a89ac75175a34012a40ef198ffed0f17d8ffe0e57f910a25ab45d88b45b12f6fd6791345efe2d16
SSDEEP

98304:0Oz7v2kH5U3t3IEpf/ImMMvSgJQtPwpYWJ2/xDe0y73fqXY:0iwlMMvSgeyYWJmxnSPEY

Score

N/A

Malware Config

Signatures

Files

微软锁屏画报_支持win10win11.exe
.exe windows x86

20d6f935b9b655824353df603e7684e5

Code Sign

33:00:00:02:53:e3:83:de:96:de:c5:6e:cc:00:00:00:00:02:53
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:33

Not After

01-09-2022 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ce:b4:e3:37:84:bf:84:d6:04:93:64:6c:e8:62:f0:73:f4:0d:37:e3:91:c5:4d:f4:51:5d:f6:68:3e:66:e9:dd
Signer

Actual PE Digest

ce:b4:e3:37:84:bf:84:d6:04:93:64:6c:e8:62:f0:73:f4:0d:37:e3:91:c5:4d:f4:51:5d:f6:68:3e:66:e9:dd

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

20-04-2022 15:59
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord141
ord88

kernel32

DeleteCriticalSection
DecodePointer
HeapAlloc
GetProcessHeap
HeapReAlloc
GetDiskFreeSpaceExW
GetLastError
Sleep
HeapSize
LockResource
SizeofResource
LoadResource
FindResourceW
MulDiv
RaiseException
OutputDebugStringW
FormatMessageA
CreateDirectoryW
FindFirstFileExW
FindNextFileW
GetFileInformationByHandle
SetFileInformationByHandle
SetFilePointerEx
AreFileApisANSI
GetFileInformationByHandleEx
QueryPerformanceFrequency
LCMapStringEx
GetStringTypeW
GetCPInfo
SleepEx
GetSystemDirectoryA
MoveFileExA
GetEnvironmentVariableA
GetStdHandle
GetFileType
PeekNamedPipe
WaitForMultipleObjects
VerifyVersionInfoA
CreateFileA
RtlUnwind
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapQueryInformation
GetSystemInfo
VirtualAlloc
VirtualQuery
SetStdHandle
ExitProcess
GetDriveTypeW
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
ReleaseMutex
GetComputerNameExW
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
SetEvent
CreateEventW
GetCurrentThreadId
SetThreadPriority
SuspendThread
ResumeThread
OutputDebugStringA
EncodePointer
SetLastError
GetSystemDirectoryW
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryExW
WaitForSingleObject
InitializeCriticalSectionEx
CreateMutexW
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
LoadLibraryW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
GlobalUnlock
GlobalLock
GetCurrentThread
GetVersionExW
GlobalAlloc
lstrcmpA
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCurrentProcessId
GlobalFree
GlobalSize
LocalFree
FormatMessageW
CopyFileW
VerSetConditionMask
lstrcpyW
VerifyVersionInfoW
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GlobalGetAtomNameW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
GetCurrentDirectoryW
DeleteFileW
CreateFileW
FindClose
FindFirstFileW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
HeapFree
DuplicateHandle
GetCurrentProcess
lstrcmpiW
GetSystemPowerStatus
GetThreadLocale
FileTimeToSystemTime
GetTempPathW
GetFileAttributesW
FindResourceExW
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GetWindowsDirectoryW
GetTickCount
GetTempFileNameW
GetUserDefaultLCID
GetProfileIntW
SearchPathW
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW

user32

MonitorFromPoint
EnableScrollBar
UpdateLayeredWindow
UnionRect
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetClassLongW
LockWindowUpdate
CreatePopupMenu
BringWindowToTop
SetParent
SetCursorPos
NotifyWinEvent
IsZoomed
TrackMouseEvent
DestroyAcceleratorTable
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
SetWindowRgn
SetMenuDefaultItem
ModifyMenuW
IsCharLowerW
DrawStateW
DrawFrameControl
DrawEdge
LoadMenuW
MessageBeep
TranslateAcceleratorW
InvalidateRgn
CopyAcceleratorTableW
CharNextW
CharUpperW
WaitMessage
DeleteMenu
IntersectRect
GetAsyncKeyState
RealChildWindowFromPoint
GetIconInfo
DrawIconEx
CopyImage
LoadImageW
DestroyIcon
IsRectEmpty
DrawFocusRect
MapVirtualKeyExW
CharUpperBuffW
FrameRect
IsChild
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
InsertMenuItemW
WindowFromPoint
InvalidateRect
UnpackDDElParam
ReuseDDElParam
GetMenuDefaultItem
RegisterClipboardFormatW
GetDoubleClickTime
SetRect
CopyIcon
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetNextDlgGroupItem
InflateRect
GetMenuItemInfoW
DestroyMenu
OffsetRect
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
EnumDisplayMonitors
SystemParametersInfoW
LoadCursorW
SetRectEmpty
GetSysColorBrush
SetLayeredWindowAttributes
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
GetMenuStringW
MapVirtualKeyW
GetKeyNameTextW
MapDialogRect
SetWindowContextHelpId
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
GetWindowThreadProcessId
IsWindowEnabled
SetCursor
ShowOwnedPopups
PostQuitMessage
FillRect
ClientToScreen
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
UnhookWindowsHookEx
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetParent
GetClassLongW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
PostThreadMessageW
CreateMenu
HideCaret
InvertRect
GetComboBoxInfo
DestroyCursor
GetWindowRgn
IsMenu
IsWindow
CreateWindowExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetSystemMenu
GetMenuItemID
GetMenuItemCount
SendMessageW
GetSystemMetrics
DrawIcon
LockWorkStation
SetFocus
LoadIconW
GetClientRect
EnableMenuItem
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
IsIconic
EnableWindow
RegisterClassExW
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
GetClassInfoExW
PostMessageW
UnregisterClassW
FindWindowW
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetSubMenu
SetMenu
GetMenu
GetCapture
GetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
SendDlgItemMessageA

gdi32

GetTextFaceW
SetPixelV
GetViewportOrgEx
GetWindowOrgEx
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
LPtoDP
GetSystemPaletteEntries
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
RoundRect
OffsetRgn
EnumFontFamiliesExW
Rectangle
SetDIBColorTable
StretchBlt
SetPixel
RealizePalette
CreateDIBSection
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
GetRgnBox
GetTextColor
GetBkColor
DPtoLP
SetRectRgn
GetMapMode
CombineRgn
GetTextExtentPoint32W
GetTextMetricsW
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
CreateCompatibleBitmap
CopyMetaFileW
CreateRectRgnIndirect
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateBitmap
BitBlt
SetTextColor
SetBkColor
PatBlt
CreateDCW
GetDeviceCaps
GetObjectW
CreateSolidBrush
CreateFontIndirectW
DeleteDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
RegCreateKeyW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
GetCurrentHwProfileW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegQueryValueW
RegQueryValueExW
RegEnumValueW

shell32

SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
DragQueryFileW
ShellExecuteW
SHGetFileInfoW
DragFinish

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
StrFormatKBSizeW

uxtheme

DrawThemeParentBackground
DrawThemeText
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize

ole32

RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
CoRegisterMessageFilter
CoRevokeClassObject
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitializeEx
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize

oleaut32

LoadTypeLi
OleCreateFontIndirect
VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysFreeString
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SafeArrayDestroy

oledlg

OleUIBusyW

gdiplus

GdipDisposeImage
GdipCloneImage
GdipCreateFromHDC
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipDrawImageI
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics

ws2_32

WSASetLastError
ntohl
gethostname
ioctlsocket
sendto
recvfrom
freeaddrinfo
getaddrinfo
socket
listen
htonl
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
send
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
bind
recv
WSAGetLastError
closesocket
accept
select
__WSAFDIsSet
WSACleanup
WSAStartup
WSAIoctl
WSAWaitForMultipleEvents

wldap32

ord79
ord301
ord200
ord30
ord41
ord35
ord33
ord32
ord27
ord143
ord217
ord46
ord211
ord60
ord45
ord50
ord26
ord22

winmm

PlaySoundW

crypt32

CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFreeCertificateContext
CryptStringToBinaryA
PFXImportCertStore
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertFindCertificateInStore

iphlpapi

GetAdaptersInfo

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

normaliz

IdnToAscii

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 422KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20d6f935b9b655824353df603e7684e5

Code Sign

33:00:00:02:53:e3:83:de:96:de:c5:6e:cc:00:00:00:00:02:53Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

ce:b4:e3:37:84:bf:84:d6:04:93:64:6c:e8:62:f0:73:f4:0d:37:e3:91:c5:4d:f4:51:5d:f6:68:3e:66:e9:ddSigner

Signature Validations

Verification

20-04-2022 15:59 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

msi

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

wldap32

winmm

crypt32

iphlpapi

oleacc

imm32

normaliz

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 422KB - Virtual size: 422KB

.data Size: 27KB - Virtual size: 46KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

.reloc Size: 158KB - Virtual size: 157KB

33:00:00:02:53:e3:83:de:96:de:c5:6e:cc:00:00:00:00:02:53
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

ce:b4:e3:37:84:bf:84:d6:04:93:64:6c:e8:62:f0:73:f4:0d:37:e3:91:c5:4d:f4:51:5d:f6:68:3e:66:e9:dd
Signer

20-04-2022 15:59
Valid: false

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 422KB - Virtual size: 422KB

.data
Size: 27KB - Virtual size: 46KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

.reloc
Size: 158KB - Virtual size: 157KB