Static task
static1
Behavioral task
behavioral1
Sample
傀儡机驱动级复活DDoS攻击穿透破防版.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
傀儡机驱动级复活DDoS攻击穿透破防版.exe
Resource
win10v2004-20230220-en
General
-
Target
傀儡机驱动级复活DDoS攻击穿透破防版.exe
-
Size
788KB
-
MD5
8cdb97c357033f6fea887cb77694c125
-
SHA1
1f0dba805313a242ed3bec9b528c1dc3d238978a
-
SHA256
41714666bc249395a1baed3c1ddb6feee2633b15b214df40c39d49a1c727c63b
-
SHA512
052952cb246cda3a220c2ffb4fe8d799953eea75efccb3d82776d043e03cb8482983b21b2b4a5bf1b98dfa4f82c9e102078042a4d8ddfdba82f4ae356af1d147
-
SSDEEP
12288:HXbLoJQXSC9NxJOlcyw4tvvV5rn6JfXCjUafpVeDQyUXfW+u/oS:3noJQNNClcyrt3TrnjjUafpVMUXfnu
Malware Config
Signatures
Files
-
傀儡机驱动级复活DDoS攻击穿透破防版.exe.exe windows x86
f75b6f1a7ba3cefab3188c040a002ad7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32
RtlUnwind
HeapFree
ExitProcess
TerminateProcess
RaiseException
GetStartupInfoA
GetCommandLineA
HeapSize
GetACP
GetTimeZoneInformation
VirtualFree
VirtualAlloc
IsBadWritePtr
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapAlloc
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
FileTimeToLocalFileTime
SetErrorMode
GetFileTime
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalFlags
GetCurrentThread
lstrcmpA
MulDiv
SetLastError
LocalFree
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
FreeLibrary
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalLock
GlobalUnlock
FreeResource
FileTimeToSystemTime
lstrcpynA
CompareFileTime
lstrcpyA
lstrlenA
GetLocalTime
GetSystemInfo
PostQueuedCompletionStatus
TerminateThread
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
GetLastError
CreateIoCompletionPort
GetQueuedCompletionStatus
EnterCriticalSection
LeaveCriticalSection
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
LoadLibraryA
Sleep
GetModuleHandleA
OpenFile
GetFileSize
ReadFile
VirtualProtect
SystemTimeToFileTime
CreateThread
GetTickCount
GetProcAddress
FindResourceA
SizeofResource
LoadResource
GlobalAlloc
LockResource
GetCurrentDirectoryA
DeleteFileA
CreateFileA
WriteFile
CloseHandle
GetModuleFileNameA
lstrcatA
GetFileAttributesA
FreeEnvironmentStringsA
user32
SetRect
GetDCEx
LockWindowUpdate
SetParent
DestroyMenu
GetSysColorBrush
GetDesktopWindow
GetClassNameA
SetRectEmpty
PostQuitMessage
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetMessageA
TranslateMessage
ValidateRect
CharUpperA
wvsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
IsWindowVisible
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetDlgItemTextA
GetWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
IsIconic
PostMessageA
DrawIcon
LoadIconA
RedrawWindow
ReleaseDC
GetDC
InflateRect
GetIconInfo
SetWindowRgn
DrawIconEx
wsprintfA
ChildWindowFromPointEx
KillTimer
SetTimer
ScreenToClient
ClientToScreen
FillRect
OffsetRect
CopyRect
WindowFromPoint
GetSystemMetrics
GetWindowRect
SystemParametersInfoA
GetDlgCtrlID
LoadStringA
IsChild
SetFocus
GetCursorPos
GetSysColor
IsWindow
LoadCursorA
GetParent
SetCapture
InvalidateRect
GetClientRect
PtInRect
SetCursor
SetWindowLongA
ReleaseCapture
SendMessageA
EnableWindow
MessageBoxA
RegisterClassA
UnregisterClassA
gdi32
GetDeviceCaps
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetRectRgn
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
GetObjectA
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateRectRgnIndirect
PatBlt
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
FrameRgn
FillRgn
CreateRoundRectRgn
CreatePolygonRgn
CreateRectRgn
CombineRgn
DeleteObject
GetTextMetricsA
GetTextExtentPoint32A
Rectangle
Polygon
CreateSolidBrush
CreateFontIndirectA
SetWindowExtEx
comdlg32
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
shell32
ShellExecuteA
comctl32
ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create
ws2_32
WSASend
WSAAccept
setsockopt
WSAIoctl
getpeername
htonl
shutdown
recv
send
WSAGetLastError
inet_addr
WSASocketA
gethostname
WSARecv
WSACleanup
closesocket
select
connect
htons
gethostbyname
ioctlsocket
socket
WSAStartup
inet_ntoa
accept
listen
bind
skinh
SkinH_AdjustHSV
SkinH_AttachRes
SkinH_SetAero
Sections
.text Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 520KB - Virtual size: 517KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ