CompileMonoMethod
ConnectTrMonoServer
InjectTrMonoServerDll
QueryMonoAssembly
QueryMonoDomain
Static task
static1
Behavioral task
behavioral1
Sample
仙剑6七十二项修改器2.7.1/PAL6.Plus.72.Trainer.V2.7.1-XiaoXing.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
仙剑6七十二项修改器2.7.1/PAL6.Plus.72.Trainer.V2.7.1-XiaoXing.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
仙剑6七十二项修改器2.7.1/TrMonoClient.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
仙剑6七十二项修改器2.7.1/TrMonoClient.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
仙剑6七十二项修改器2.7.1/TrMonoServer.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
仙剑6七十二项修改器2.7.1/TrMonoServer.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
仙剑6七十二项修改器2.7.1/游迅网.url
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
仙剑6七十二项修改器2.7.1/游迅网.url
Resource
win10v2004-20231215-en
Target
3b0a6d95c657491c714e10f0f26bee8e
Size
2.8MB
MD5
3b0a6d95c657491c714e10f0f26bee8e
SHA1
d3f3f9fbe59fbce2f45ac7879a0e35b3331594ad
SHA256
3cba9ec61d78351a20c22133b855a4c3a3f72f267df2f2d1c9267bf202b19d96
SHA512
8dc23616ec8f8bf5e499e8c23d90b907e806c411d5165b28361e80d0c41b614f410b359a9b0115d9cf4d8ff1cec2c1821f882f99ef005a281b522910a65aefad
SSDEEP
49152:7jh2lG/M5vVHZ1HVtfMqm4Jp0RLaSl65VbOGi2ztMdfVaRL7+AArB9fx51NBdW:7cU05vVHHVt3ia7aGiMtMdfkL75AF9ZI
Checks for missing Authenticode signature.
resource |
---|
unpack001/仙剑6七十二项修改器2.7.1/PAL6.Plus.72.Trainer.V2.7.1-XiaoXing.exe |
unpack001/仙剑6七十二项修改器2.7.1/TrMonoClient.dll |
unpack001/仙剑6七十二项修改器2.7.1/TrMonoServer.dll |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
midiStreamOut
htons
VerLanguageNameA
RasHangUpA
QueryPerformanceCounter
PeekMessageA
ExcludeClipRect
GradientFill
OpenPrinterA
GetUserNameA
ShellExecuteA
OleRun
VariantCopy
ImageList_ReplaceIcon
InternetCanonicalizeUrlA
GetFileTitleA
strncpy
GetInterfaceInfo
GetMappedFileNameW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetLastError
CreateFileA
Sleep
ReadFile
WriteFile
GetModuleHandleW
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
FlushFileBuffers
WriteConsoleW
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
HeapAlloc
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
SetLastError
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
LCMapStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
OutputDebugStringW
GetStringTypeW
SetStdHandle
CreateFileW
MessageBoxA
CompileMonoMethod
ConnectTrMonoServer
InjectTrMonoServerDll
QueryMonoAssembly
QueryMonoDomain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateNamedPipeA
GetLastError
ConnectNamedPipe
Sleep
ReadFile
WriteFile
CreateThread
LoadLibraryW
GetProcAddress
GetModuleHandleA
GetCurrentThread
FreeLibraryAndExitThread
GetCurrentProcessId
FlushFileBuffers
ReadConsoleW
GetCommandLineA
GetCurrentThreadId
EncodePointer
DecodePointer
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
HeapAlloc
HeapFree
SetLastError
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
HeapSize
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
HeapReAlloc
LCMapStringW
OutputDebugStringW
SetStdHandle
WriteConsoleW
GetStringTypeW
CreateFileW
MessageBoxA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ