WindowEnd
WindowStart
Behavioral task
behavioral1
Sample
两只老虎5.5/COMMON.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
两只老虎5.5/COMMON.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
两只老虎5.5/WG2WG.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
两只老虎5.5/WG2WG.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
两只老虎5.5/wg2wg.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
两只老虎5.5/wg2wg.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
两只老虎5.5/wg2wg1.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
两只老虎5.5/wg2wg1.exe
Resource
win10v2004-20231215-en
Target
1c676e21f5931c4c57649584a29539d4
Size
1.3MB
MD5
1c676e21f5931c4c57649584a29539d4
SHA1
3af7c78241fa676cb67c5f907679a2b83041fccb
SHA256
56cbae38ddfaa005c3e877a494419d048b61e4f233b6e38bec99223965a41618
SHA512
c9f10c6d5f5f8722fb30ee674f96aecc6e5901c10c5b35891cca990bb4363ca55dbec199e16ac740f7242b30dd0829efdd43e725690d24ff3f1e97173795f40b
SSDEEP
24576:mNl0wWdPR1d39SSQ3wp+3D8eia2ddpm4ogbQr/82Zma3g+FezP:K0wELdNSl3w+2ddZogELnZE+FaP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/两只老虎5.5/COMMON.DLL | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/两只老虎5.5/COMMON.DLL | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/两只老虎5.5/COMMON.DLL |
unpack001/两只老虎5.5/WG2WG.dll |
unpack001/两只老虎5.5/wg2wg.dat |
unpack001/两只老虎5.5/wg2wg1.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WindowEnd
WindowStart
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetModuleHandleA
SetMirHook
UnSetMirHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE