PassNgsLoading
_�����ӳ���
����_ȡ����·��
Ŀ¼_ȡsystem32Ŀ¼
�ļ�_ȡ��չ��
Static task
static1
Behavioral task
behavioral1
Sample
1eb16574d96cd7d917758603991511adf4a2aa173feed2815c5014a29f845476.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
1eb16574d96cd7d917758603991511adf4a2aa173feed2815c5014a29f845476.dll
Resource
win10v2004-20231020-en
Target
1eb16574d96cd7d917758603991511adf4a2aa173feed2815c5014a29f845476
Size
11.9MB
MD5
4854813578c3c072a2092462292678e6
SHA1
6f7f6d386c8fe07a5f5766e1b5881734f3ea6d44
SHA256
1eb16574d96cd7d917758603991511adf4a2aa173feed2815c5014a29f845476
SHA512
a5940931e5fa85663d906f6afe2cc963b6e7c544b4e299d458c87420e8d035d36cb9bc5b17d1fdf6a6c09fb417e4129c35fdaec780623c436bed0c0e307e342a
SSDEEP
196608:7PGyNmfZO9PvXx8/iiligkL0EwaBZRprJmK0KqW8saLjUJ1Wui:LGyNMZ2xdiIIqBZbrMK0KqW8s6M1g
Checks for missing Authenticode signature.
resource |
---|
1eb16574d96cd7d917758603991511adf4a2aa173feed2815c5014a29f845476 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpy
InitCommonControls
PassNgsLoading
_�����ӳ���
����_ȡ����·��
Ŀ¼_ȡsystem32Ŀ¼
�ļ�_ȡ��չ��
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE