DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
上传硬盘物理序列号控件/上传硬盘物理序列号控件.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
上传硬盘物理序列号控件/上传硬盘物理序列号控件.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
上传硬盘物理序列号控件/网络资料阅读器.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
上传硬盘物理序列号控件/网络资料阅读器.exe
Resource
win10v2004-20240226-en
Target
d53e0ea0526a8d54cc10452080fe0587
Size
46KB
MD5
d53e0ea0526a8d54cc10452080fe0587
SHA1
5216bffcbecc293cfd43051829810af989e6d040
SHA256
146d830f0f6ffac748d05b793f8206926905effbf91822501bfaf78698ecd205
SHA512
fd2cd6dcf257a854845461867df56e4e27f67917d9b5610c72a46a4564e118ba429f52de554d459dec5888831255830a79276db41bb3fe5e521e827e1c2f6120
SSDEEP
768:tVP6TlzfRPk4s8IOZC+Mci+CUCc0xuWMoT3R5Je1z0emS4VkWkzRYD:tVPkHk5OZd7i+hhr03R5AmvJVkWQYD
Checks for missing Authenticode signature.
resource |
---|
unpack001/上传硬盘物理序列号控件/上传硬盘物理序列号控件.ocx |
unpack001/上传硬盘物理序列号控件/网络资料阅读器.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
__vbaStrI2
_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
__vbaAptOffset
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaRecAnsiToUni
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord300
__vbaObjSet
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
ord306
ord520
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaAryConstruct2
DllFunctionCall
_adj_fpatan
__vbaFixstrConstruct
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaStrUI1
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaVarCat
__vbaLsetFixstrFree
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
__vbaPowerR8
_adj_fdiv_r
ord101
ord102
ord103
ord104
ord105
__vbaStrToAnsi
__vbaVarDup
__vbaFpI4
_CIatan
__vbaStrMove
__vbaUI1Str
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
URLDownloadToFileA
CloseHandle
DeleteFileA
CreateFileA
GlobalFree
GlobalAlloc
MultiByteToWideChar
WaitForSingleObject
lstrlenA
CreateProcessA
CreateDirectoryA
GetVersionExA
CreateMutexA
GetTempPathA
LCMapStringW
CreateThread
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
FlushFileBuffers
SetStdHandle
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
InterlockedIncrement
Sleep
lstrcpynA
CompareStringW
LCMapStringA
SetEnvironmentVariableA
CompareStringA
ReadFile
SetEndOfFile
LoadLibraryA
GetProcAddress
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentDirectoryA
GetFullPathNameA
WriteFile
GetTimeZoneInformation
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
GetStringTypeA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
PostQuitMessage
DefWindowProcA
SetWindowLongA
GetWindowLongA
GetClientRect
KillTimer
ShowWindow
RegisterClassExA
GetSystemMetrics
MessageBoxA
CreateWindowExA
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
SetTimer
wsprintfA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OleInitialize
OleUninitialize
OleCreate
OleSetContainedObject
VariantClear
SysAllocString
VariantInit
send
closesocket
recv
connect
htons
socket
WSAStartup
gethostbyname
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ