Config
GetFunAddr
Init
UnInit
Static task
static1
Behavioral task
behavioral1
Sample
gexgg_-10-502/通用的逐鹿中原登陆器配置器/服务端插件/yinling.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
gexgg_-10-502/通用的逐鹿中原登陆器配置器/服务端插件/yinling.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
gexgg_-10-502/通用的逐鹿中原登陆器配置器/逐鹿中原登陆器配置器.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
gexgg_-10-502/通用的逐鹿中原登陆器配置器/逐鹿中原登陆器配置器.exe
Resource
win10v2004-20231215-en
Target
1a9b721e53669edb7f8897b9e40f8bb8
Size
2.5MB
MD5
1a9b721e53669edb7f8897b9e40f8bb8
SHA1
a2ef2768720d06c8206576847101c7a11f8bfd23
SHA256
56921843b5aa3ca1c6c231ef1bee879a0c3d19f2e3ce5c8acab07151825f2bd3
SHA512
81c18bc66831d6ed354fe3c45b965548a6bbfe25179d71530cad319c0537196d9860a4b4501717edeeaa8dd38fd029c22167094941e3a63cae3b19fcbbce73f2
SSDEEP
49152:qQpjHMbrA+sSsVkyaVo5Z8GqH2TwJ3uxF9cUmmH28ZAa7dIkPAbbYJ:3HMb8dSsUUZ8llpScRm5bPAC
Checks for missing Authenticode signature.
resource |
---|
unpack001/gexgg_-10-502/通用的逐鹿中原登陆器配置器/服务端插件/yinling.dll |
unpack001/gexgg_-10-502/通用的逐鹿中原登陆器配置器/逐鹿中原登陆器配置器.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Config
GetFunAddr
Init
UnInit
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE