GetFilterVersion
HttpFilterProc
TerminateFilter
Behavioral task
behavioral1
Sample
源码保护伞CodeSafe v1.0 测试版/CodeSafe.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
源码保护伞CodeSafe v1.0 测试版/CodeSafe.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
源码保护伞CodeSafe v1.0 测试版/EnWeb.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
源码保护伞CodeSafe v1.0 测试版/EnWeb.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
源码保护伞CodeSafe v1.0 测试版/说明.vbs
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
源码保护伞CodeSafe v1.0 测试版/说明.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
源码保护伞CodeSafe v1.0 测试版/非常世纪资源网.url
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
源码保护伞CodeSafe v1.0 测试版/非常世纪资源网.url
Resource
win10v2004-20231215-en
Target
3ec7edff323c7d736ed9c6fcb79849a3
Size
79KB
MD5
3ec7edff323c7d736ed9c6fcb79849a3
SHA1
b44a24de4a553b2f9fa7024bcaf8a305179220ba
SHA256
45e2a7c3f95eeaa2399518ceb5f84f56d00a73a811440798d74924e555904e47
SHA512
0f2d19a62fa47e4f802812cbd83d45689b2bbf0ad4f19016e7fca5275f5d739b7796fef056761f55ef1cbc5556d1a7c0181a27d82224419a715d2eaa23a255a2
SSDEEP
1536:5DA8S49syd1ldNdK5S6+o4RVkc8eOvJRIxGhu9vE/kjPlVMf4:xpz9bvK5S6+NRVkcCvID9s/Oa4
resource | yara_rule |
---|---|
static1/unpack001/源码保护伞CodeSafe v1.0 测试版/EnWeb.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/源码保护伞CodeSafe v1.0 测试版/CodeSafe.dll |
unpack001/源码保护伞CodeSafe v1.0 测试版/EnWeb.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetFilterVersion
HttpFilterProc
TerminateFilter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE