TPHelper
��������
����_ȡ����״̬
ȡ����״̬
���
���
Behavioral task
behavioral1
Sample
36ef78ec15cec78185019cfcc4465a08ac1fb0dc7afc106c79d8fb9a4238fa58.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
36ef78ec15cec78185019cfcc4465a08ac1fb0dc7afc106c79d8fb9a4238fa58.dll
Resource
win10v2004-20231215-en
Target
36ef78ec15cec78185019cfcc4465a08ac1fb0dc7afc106c79d8fb9a4238fa58
Size
10.2MB
MD5
959993b3e6e355ef075950cddcab8d7a
SHA1
505e500bd6158f101659ec1741f68770e40aeb26
SHA256
36ef78ec15cec78185019cfcc4465a08ac1fb0dc7afc106c79d8fb9a4238fa58
SHA512
2bc2f4b4b0acf48c400f984410a7d59ef011d81125caeb798f631f4bd6f98c047bee265d337cdb0eb545acd905a58d77736a54d039db3d02fa51ab3c067a9c1f
SSDEEP
196608:c9tTo/IBGkRcfjGm+icK+Gul1qRNrxkBIwMXCttw:cqIPRWj+XK0A7xkBIwMytS
resource | yara_rule |
---|---|
sample | family_blackmoon |
Checks for missing Authenticode signature.
resource |
---|
36ef78ec15cec78185019cfcc4465a08ac1fb0dc7afc106c79d8fb9a4238fa58 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TerminateProcess
GetLogicalDriveStringsA
QueryDosDeviceA
GetModuleHandleA
ExitProcess
HeapReAlloc
IsBadReadPtr
GetModuleFileNameA
GetLocalTime
GetPrivateProfileStringA
GetTickCount
Sleep
WritePrivateProfileStringA
ReadFile
GetFileSize
DeleteFileA
WriteFile
FindClose
FindNextFileA
RemoveDirectoryA
FindFirstFileA
SetLocalTime
GetEnvironmentVariableA
LCMapStringA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GlobalLock
GlobalAlloc
GlobalSize
lstrcpyn
GlobalUnlock
GetSystemDirectoryA
lstrcmpW
RtlZeroMemory
lstrcmpiA
HeapDestroy
HeapCreate
GetAtomNameW
GetModuleFileNameW
GetCommandLineW
GetModuleHandleW
SetProcessWorkingSetSize
lstrcpyA
lstrcatA
MulDiv
GetWindowsDirectoryA
TerminateThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateWaitableTimerA
SetWaitableTimer
GetCurrentThread
VirtualProtect
GetTempPathA
GetTempFileNameA
MoveFileExA
GetFileAttributesA
CreateToolhelp32Snapshot
Module32Next
GlobalMemoryStatusEx
GetDiskFreeSpaceExA
CreateFileA
RtlMoveMemory
Process32First
Process32Next
VirtualAlloc
VirtualFree
GetCurrentProcessId
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CreateMutexA
OpenEventA
CreateEventA
CreateThread
CloseHandle
WideCharToMultiByte
CreateDirectoryA
MoveFileA
GetProcessHeap
HeapAlloc
LocalSize
InterlockedIncrement
InterlockedDecrement
HeapFree
lstrlenA
lstrlenW
lstrcmpA
lstrcmpiW
LocalAlloc
ReleaseMutex
GetSystemInfo
MultiByteToWideChar
lstrcatW
StrToIntExW
wvnsprintfW
PathIsDirectoryA
StrToIntW
StrTrimW
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsA
inet_addr
connect
htons
socket
closesocket
WSAStartup
gethostbyname
send
recv
getsockname
ntohs
WSAAsyncSelect
select
WSACleanup
DestroyMenu
GetMenuItemCount
GetMenuItemInfoW
AppendMenuW
InsertMenuW
SetMenuInfo
CheckMenuRadioItem
SetForegroundWindow
TrackPopupMenu
GetMenuStringW
GetMenuItemRect
GetMenuState
GetMenuDefaultItem
MenuItemFromPoint
RemoveMenu
CheckMenuItem
SetMenuItemInfoW
SetMenuDefaultItem
LoadStringW
CharUpperW
CharLowerW
MessageBoxA
wsprintfA
DispatchMessageA
GetMessageA
PeekMessageA
GetCursorPos
SetRect
LoadIconW
EnumPropsExW
RemovePropA
RemovePropW
GetPropA
GetPropW
SetPropA
SetPropW
KillTimer
GetMenuInfo
SetWindowTextW
SetParent
ValidateRect
GetMenuItemID
ScreenToClient
GetIconInfo
CopyIcon
PostMessageW
ShowWindow
CallWindowProcW
CreateMDIWindowW
DialogBoxParamW
CreateDialogParamW
EndDialog
DialogBoxIndirectParamW
DestroyWindow
SetClassLongW
GetClassLongW
CreateDialogIndirectParamW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
PostQuitMessage
DispatchMessageW
TranslateMessage
IsDialogMessageW
TranslateAcceleratorW
TranslateMDISysAccel
IsChild
GetSubMenu
GetScrollInfo
GetLastActivePopup
DrawIconEx
ChildWindowFromPointEx
FindWindowExA
SwitchToThisWindow
SetActiveWindow
GetMessageW
GetFocus
LoadMenuW
GetSystemMenu
CreatePopupMenu
CreateMenu
LoadImageW
CreateIconFromResourceEx
GetWindowInfo
MessageBoxW
GetMenuStringA
WindowFromPoint
GetMenuBarInfo
RedrawWindow
EnableMenuItem
UpdateLayeredWindow
WindowFromDC
UnregisterHotKey
SetWindowLongA
SendMessageA
UnhookWinEvent
RegisterHotKey
LoadBitmapA
CreateWindowExA
MsgWaitForMultipleObjects
IsWindowVisible
GetWindowTextA
GetClassNameA
GetWindowThreadProcessId
CreateWindowStationA
EnumDisplaySettingsA
DrawIcon
GetCursorInfo
SetWinEventHook
SendInput
SetKeyboardState
AttachThreadInput
MapVirtualKeyA
SystemParametersInfoW
RegisterWindowMessageW
DrawMenuBar
SetMenu
GetMenu
GetSystemMetrics
IsZoomed
InvalidateRect
SetTimer
GetAsyncKeyState
CallWindowProcA
FindWindowA
GetWindowRect
GetParent
MoveWindow
UpdateWindow
SetWindowRgn
BeginPaint
EndPaint
TrackMouseEvent
GetDlgItem
GetAncestor
SetWindowLongW
IsWindow
FindWindowExW
GetClassNameW
GetWindowTextLengthW
GetWindowTextW
GetWindowLongW
SendMessageW
DestroyCursor
SetCursor
GetClientRect
SetCapture
ReleaseCapture
LoadCursorW
DestroyIcon
DestroyAcceleratorTable
GetSysColor
IsWindowEnabled
EnableWindow
SetWindowPos
GetNextDlgTabItem
SetFocus
GetDC
DrawTextA
ReleaseDC
OffsetRect
DefWindowProcW
GetWindowDC
FillRect
ClientToScreen
MessageBoxTimeoutW
IsIconic
CreateDIBSection
CreateCompatibleDC
CreateRoundRectRgn
CreateSolidBrush
GetStockObject
BitBlt
CreateDIBitmap
SetTextColor
GetTextExtentPoint32A
CreateBitmap
SetBkColor
GetDIBits
CreateFontA
GetDeviceCaps
TranslateCharsetInfo
DeleteObject
DeleteDC
SelectObject
CreatePatternBrush
CreateEllipticRgn
CreateFontIndirectW
GetObjectW
Rectangle
SetStretchBltMode
GetStretchBltMode
StretchBlt
SetBkMode
GetCurrentObject
RegCreateKeyExA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
DeleteService
ControlService
StartServiceA
CloseServiceHandle
OpenServiceA
CreateServiceA
OpenSCManagerA
SHGetSpecialFolderPathA
SHAppBarMessage
DragAcceptFiles
CommandLineToArgvW
Shell_NotifyIconW
DragFinish
DragQueryFileW
ShellExecuteA
DragQueryFileA
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_Create
ImageList_BeginDrag
ImageList_Add
ImageList_Destroy
ImageList_DragMove
ord17
InitCommonControlsEx
ImageList_EndDrag
CoUninitialize
CoInitialize
CLSIDFromString
GetHGlobalFromStream
StringFromGUID2
CreateStreamOnHGlobal
GdipGetVisibleClipBounds
GdipIsClipEmpty
GdipIsVisibleClipEmpty
GdipIsVisiblePoint
GdipIsVisibleRect
GdipSaveGraphics
GdipRestoreGraphics
GdipBeginContainer
GdipDrawString
GdipEndContainer
GdipLoadImageFromFile
GdipLoadImageFromStream
GdipCloneImage
GdipGetImageRawFormat
GdipGetImagePixelFormat
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipGetImageDimension
GdipGetImageBounds
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipGetImageThumbnail
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipCreateHICONFromBitmap
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateFromHWND
GdipCreateFont
GdipCreateFontFromLogfontW
GdipDeletePrivateFontCollection
GdipDeleteFontFamily
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCloneFont
GdipGetLogFontW
GdipGetLogFontA
GdipGetFamily
GdipGetFontStyle
GdipGetFontSize
GdipGetFontUnit
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipCreatePath
GdipCreatePath2
GdipClonePath
GdipResetPath
GdipGetPathFillMode
GdipSetPathFillMode
GdipGetPointCount
GdipGetPathData
GdipStartPathFigure
GdipClosePathFigure
GdipClosePathFigures
GdipSetPathMarker
GdipClearPathMarkers
GdipReversePath
GdipGetPathLastPoint
GdipAddPathLine
GdipAddPathArc
GdipAddPathBezier
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathRectangle
GdipAddPathEllipse
GdipAddPathPie
GdipAddPathPolygon
GdipAddPathPath
GdipAddPathString
GdipTransformPath
GdipGetPathWorldBounds
GdipFlattenPath
GdipWidenPath
GdipWindingModeOutline
GdipWarpPath
GdipIsVisiblePathPoint
GdipIsOutlineVisiblePathPoint
GdipCreateRegionRect
GdipCreateRegionPath
GdipCreateRegionHrgn
GdipCreateRegionRgnData
GdipCloneRegion
GdipSetInfinite
GdipSetEmpty
GdipCombineRegionRect
GdipCombineRegionRegion
GdipCombineRegionPath
GdipTranslateRegion
GdipTransformRegion
GdipGetRegionBounds
GdipGetRegionDataSize
GdipGetRegionData
GdipGetRegionHRgn
GdipIsEmptyRegion
GdipIsInfiniteRegion
GdipIsEqualRegion
GdipIsVisibleRegionPoint
GdipIsVisibleRegionRect
GdipGetRegionScansCount
GdipGetRegionScans
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCloneMatrix
GdipSetMatrixElements
GdipGetMatrixElements
GdipMultiplyMatrix
GdipTranslateMatrix
GdipGetClipBounds
GdipInvertMatrix
GdipScaleMatrix
GdipShearMatrix
GdipTransformMatrixPoints
GdipVectorTransformMatrixPoints
GdipIsMatrixInvertible
GdipIsMatrixIdentity
GdipIsMatrixEqual
GdipCreateBitmapFromFile
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCloneBitmapArea
GdipBitmapSetResolution
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetGenericFontFamilyMonospace
GdipGetFamilyName
GdipIsStyleAvailable
GdipGetEmHeight
GdipGetCellAscent
GdipGetCellDescent
GdipGetLineSpacing
GdipFillRegion
GdipFillClosedCurve2
GdipFillClosedCurve
GdipFillPath
GdipFillPie
GdipFillEllipse
GdipFillPolygon
GdipGraphicsClear
GdipDrawClosedCurve2
GdipDrawClosedCurve
GdipDrawCurve2
GdipDrawCurve
GdipDrawPath
GdipDrawPolygon
GdipDrawPie
GdipDrawEllipse
GdipDrawRectangle
GdipDrawBezier
GdipDrawArc
GdipDrawLine
GdipGetNearestColor
GdipTransformPointsI
GdipTransformPoints
GdipGetDpiY
GdipGetDpiX
GdipGetPageScale
GdipSetPageScale
GdipGetPageUnit
GdipSetPageUnit
GdipRotateWorldTransform
GdipScaleWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipDeleteMatrix
GdipGetWorldTransform
GdipSetWorldTransform
GdipGetPixelOffsetMode
GdipSetPixelOffsetMode
GdipGetSmoothingMode
GdipSetSmoothingMode
GdipGetInterpolationMode
GdipSetInterpolationMode
GdipGetTextRenderingHint
GdipSetTextRenderingHint
GdipReleaseDC
GdipGetDC
GdipFlush
GdipCreateFromHDC
GdipCreateHBITMAPFromBitmap
GdipSetImageAttributesColorMatrix
GdipGetImageAttributesAdjustedPalette
GdipSetImageAttributesWrapMode
GdipSetImageAttributesRemapTable
GdipSetImageAttributesOutputChannelColorProfile
GdipSetImageAttributesOutputChannel
GdipSetImageAttributesColorKeys
GdipSetImageAttributesGamma
GdipSetImageAttributesNoOp
GdipSetImageAttributesThreshold
GdipResetImageAttributes
GdipSetImageAttributesToIdentity
GdipCloneImageAttributes
GdipCreateImageAttributes
GdipSaveImageToStream
GdipDrawImageRectRect
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipGetClip
GdipTranslateClip
GdipResetClip
GdipSetClipHrgn
GdipSetClipRegion
GdipSetClipRect
GdipSetClipPath
GdipSetClipGraphics
GdipDrawImagePointsRect
GdipDrawImagePointRect
GdipDrawImagePoints
GdipGetImageHeight
GdipGetImageWidth
GdipCreateSolidFill
GdipCreateBitmapFromStream
GdipDeleteRegion
GdipDeletePath
GdiplusStartup
GdiplusShutdown
GdipDisposeImage
GdipDrawImageRect
GdipDrawImage
GdipDrawDriverString
GdipMeasureCharacterRanges
GdipCreateRegion
GdipRotateMatrix
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipDeleteBrush
GdipFillRectangle
GdipCreateTexture
GdipMeasureString
GdipBeginContainer2
GdipDeleteFont
ord42
CryptStringToBinaryW
AlphaBlend
_stricmp
free
malloc
_atoi64
_ftol
modf
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
srand
rand
atoi
strtod
strncpy
strncmp
__CxxFrameHandler
_CIfmod
floor
qsort
atof
_CIpow
strrchr
strchr
realloc
memmove
calloc
TPHelper
��������
����_ȡ����״̬
ȡ����״̬
���
���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ