DelHook
SetHook
Overview
overview
4Static
static
3电脑监�...jk.exe
windows7-x64
4电脑监�...jk.exe
windows10-2004-x64
4电脑监�...cm.dll
windows7-x64
1电脑监�...cm.dll
windows10-2004-x64
1电脑监�...ss.dll
windows7-x64
3电脑监�...ss.dll
windows10-2004-x64
3电脑监�...ck.dll
windows7-x64
3电脑监�...ck.dll
windows10-2004-x64
3电脑监�...��.url
windows7-x64
1电脑监�...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
电脑监控试用版v1.3/dnjk.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
电脑监控试用版v1.3/dnjk.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
电脑监控试用版v1.3/fcm.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
电脑监控试用版v1.3/fcm.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
电脑监控试用版v1.3/wincsrss.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
电脑监控试用版v1.3/wincsrss.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
电脑监控试用版v1.3/winsock.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
电脑监控试用版v1.3/winsock.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
电脑监控试用版v1.3/新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
电脑监控试用版v1.3/新云软件.url
Resource
win10v2004-20231215-en
Target
10e0d41409d17343c52f065308763c16
Size
642KB
MD5
10e0d41409d17343c52f065308763c16
SHA1
060f11395edc82e653a6c215e0f0e4276df69342
SHA256
9d7b37d15a51bdb030366b0a3d9c9b7cc22cbbd686f8d93edba2284097aa3b9f
SHA512
67946245985937cbb97f16d7bf89eb45ca34371de1bcad2726e186df179f8c24fc14ea374ce73fc2d53c688a6228f7caffa2e6402be7e9ad5703c96188d44ecd
SSDEEP
12288:CeoSfFqSYJle0c/CdOb7xgjmpkTun3ikpyOIMBjeCN1F04r1yWohMXiiV:CeoSfFPYLeHCdq+qpV6CG4JyWoh2iS
Checks for missing Authenticode signature.
resource |
---|
unpack001/电脑监控试用版v1.3/dnjk.exe |
unpack001/电脑监控试用版v1.3/wincsrss.dll |
unpack001/电脑监控试用版v1.3/winsock.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DelHook
SetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ