__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
HiBitUninstaller_3.1.60_Single/HiBitUninstaller_3.1.60_Single.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
HiBitUninstaller_3.1.60_Single/HiBitUninstaller_3.1.60_Single.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
HiBitUninstaller_3.1.60_Single/果核剥壳 - 全网更新最快.url
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
HiBitUninstaller_3.1.60_Single/果核剥壳 - 全网更新最快.url
Resource
win10v2004-20230915-en
Target
80fa382f096921676c586778cc98033cb831bbac5c4ac3ec180273328c3466ab
Size
3.1MB
MD5
0c65a9fbd12dec826a58071bf1446f49
SHA1
33284a423e898a5e775034dba6aebd4925cff0bf
SHA256
80fa382f096921676c586778cc98033cb831bbac5c4ac3ec180273328c3466ab
SHA512
42182eb42382beefefa33a312a23d3ab588f857b5c23e1849d096332c36c2e8e9d01976414c5ee08c4bc8130ea88b3897b7e1d727b293c7ac43d99458b69bc9f
SSDEEP
98304:mgAq2msa7Vwklko+R9RPHcBtNtKOURVpXr2hF8oDDn:mgAq2mnBwAkoyRcBtu/6h+U
resource | yara_rule |
---|---|
static1/unpack001/HiBitUninstaller_3.1.60_Single/HiBitUninstaller_3.1.60_Single.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/HiBitUninstaller_3.1.60_Single/HiBitUninstaller_3.1.60_Single.exe |
unpack002/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ