JMP��ַȡ������
audition
����ת��
���������
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan-PSW.QQTen.508.6254.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan-PSW.QQTen.508.6254.dll
Resource
win10v2004-20231215-en
Target
SecuriteInfo.com.Trojan-PSW.QQTen.508.6254.dll
Size
3.3MB
MD5
0b9fa014901e73062b4efa1e63818736
SHA1
b7a666da8f03a3a3581de060f1c663fc1ee2f6e6
SHA256
84e5701c7551f3fcffe5ba49660f5709b300832761d676cc2bd0d2b815c83fdc
SHA512
95bd289de34bd59abdf1fde1b04af3856b5cbb00bbeac58a501d0285abb76a4879063f40c5492998dfffd296fc73561bb19ff7bb1fa32276e4768bb1aa9f119e
SSDEEP
49152:9Z9STklTXT6VSHiVb9zyEvSmVx2DtZCdK8COgb8Pel48S0N+s8KuqGaX0ToIBAUl:304/1YywSm/ItZC/XKCelZS0mJBAUZL7
Checks for missing Authenticode signature.
resource |
---|
SecuriteInfo.com.Trojan-PSW.QQTen.508.6254.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteCriticalSection u<
JMP��ַȡ������
audition
����ת��
���������
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ