_�����ӳ���
����DLL
��˫����С����
��ȡFPSֵ
ȡ�ӳ�����ʵ��ַ
��Ϣѭ��
���ؽ���ģ��RC
Behavioral task
behavioral1
Sample
9e5ed76d017e1e3292b27aaa311ec4053a3a7913d556d2b2db1ff463f9e4c9d4.dll
Resource
win7-20230831-en
Target
9e5ed76d017e1e3292b27aaa311ec4053a3a7913d556d2b2db1ff463f9e4c9d4
Size
4.6MB
MD5
23b2880542ad137f9e21372221bd2b5c
SHA1
ce8cb3ba51df532dcc351338ea7eb0d18a6ddb58
SHA256
9e5ed76d017e1e3292b27aaa311ec4053a3a7913d556d2b2db1ff463f9e4c9d4
SHA512
7b9008a34759674949ab7112905a6772dfbfe84dd31bffe61ee306a00709abc5873ea728f2abc5426f85a02da8ed6f244dca03d6f90c767eab08c6a62b81f25f
SSDEEP
98304:0w+bpd1DPkD8/13hnTp9Va4tfbXGAEAGMZAw8Y5Is13rrAduYHXfY1U6:Od1DsD8VBLVk1Q7vGs13rrqHXfY17
resource | yara_rule |
---|---|
sample | family_blackmoon |
Checks for missing Authenticode signature.
resource |
---|
9e5ed76d017e1e3292b27aaa311ec4053a3a7913d556d2b2db1ff463f9e4c9d4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
timeGetTime
GlobalMemoryStatusEx
GlobalSize
DeviceIoControl
VirtualProtect
CreateToolhelp32Snapshot
Module32Next
VirtualAlloc
VirtualFree
CreateMutexA
OpenFileMappingA
CreateFileMappingA
OpenEventA
CreateEventA
Sleep
VirtualFreeEx
VirtualAllocEx
CreateWaitableTimerA
SetWaitableTimer
IsDebuggerPresent
GetCurrentProcess
Process32First
Process32Next
GetVersionExA
GetSystemInfo
IsWow64Process
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
WaitForSingleObject
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetPrivateProfileStringA
GetLocalTime
CreateProcessA
GetComputerNameA
GetTickCount
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
DeleteCriticalSection
GetWindowsDirectoryA
GetSystemDirectoryA
GetTempPathA
TerminateThread
GetModuleHandleA
GetModuleFileNameA
GetCurrentProcessId
OpenProcess
CloseHandle
CreateThread
TerminateProcess
GetStartupInfoA
wsprintfA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
CallWindowProcA
GetAsyncKeyState
SetTimer
GetWindowInfo
GetSystemMetrics
SetWindowPos
GetWindowLongA
CreateWindowStationA
GetClassNameA
GetWindowTextA
IsWindowVisible
GetWindowThreadProcessId
MessageBoxA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenProcessToken
WSAStartup
closesocket
send
recv
getsockname
ntohs
WSAAsyncSelect
select
socket
htons
inet_addr
connect
gethostbyname
WSACleanup
calloc
_stricmp
strncmp
memmove
realloc
strchr
rand
srand
strrchr
modf
_CIfmod
strtod
__CxxFrameHandler
_CIpow
sprintf
atoi
_ftol
??3@YAXPAX@Z
??2@YAPAXI@Z
free
malloc
floor
ShellExecuteA
SHGetSpecialFolderPathA
_�����ӳ���
����DLL
��˫����С����
��ȡFPSֵ
ȡ�ӳ�����ʵ��ַ
��Ϣѭ��
���ؽ���ģ��RC
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ