MDScan_Close
MDScan_Init
MDScan_Scan
Static task
static1
Behavioral task
behavioral1
Sample
MScaner/MDScan.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
MScaner/MDScan.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
MScaner/MScaner.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
MScaner/MScaner.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
MScaner/新云软件.url
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
MScaner/新云软件.url
Resource
win10v2004-20240226-en
Target
d5670f41eafd9aaf7dd4814e3c6337f1
Size
792KB
MD5
d5670f41eafd9aaf7dd4814e3c6337f1
SHA1
cbd4f751a1255851cb8c5d53565e3993098251c9
SHA256
6985795eef5e4a56ce4e7fb51770bebc3ca423fbc33e9ed8081c2e2d532b4b20
SHA512
88e2bc14a7c27e8b625dd5c48fabe13273fb8a8de61ff9b694e51434f892fcd56d6adb9a92c4d2920431cc541eae4bd0dd104d0d7b4ae197b0a8bfba2800747f
SSDEEP
24576:B2fPaYKXCF6F75P1tlxz09Fd6ORr6wDw1q+yOLr950TLyw:kqZCF45709Fd6F+h+BLJSTF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/MScaner/MDScan.dll | acprotect |
Checks for missing Authenticode signature.
resource |
---|
unpack001/MScaner/MDScan.dll |
unpack001/MScaner/MScaner.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MDScan_Close
MDScan_Init
MDScan_Scan
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\MyProject\VC\MScaner\Release\MScaner.pdb
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
GetUserDefaultLCID
EnumSystemLocalesA
WriteConsoleA
GetLocaleInfoW
GetProcessHeap
SetEnvironmentVariableA
CompareStringW
GetStringTypeW
GetStringTypeA
GetTimeZoneInformation
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
LCMapStringW
LCMapStringA
IsValidCodePage
GetACP
GetConsoleMode
CreateFileW
GetConsoleCP
VirtualFree
HeapCreate
GetStdHandle
SetHandleCount
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
HeapSize
RaiseException
RtlUnwind
HeapReAlloc
GetStartupInfoA
GetCommandLineA
CreateThread
ExitThread
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
HeapFree
FindResourceExA
VirtualProtect
GetProfileIntA
GetTickCount
SearchPathA
GetOEMCP
GetCPInfo
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesA
GetCurrentDirectoryA
GlobalFlags
InterlockedIncrement
GetModuleHandleW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
InterlockedDecrement
GetModuleFileNameW
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
LocalAlloc
DeleteCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
FreeResource
SuspendThread
WaitForSingleObject
SetThreadPriority
GlobalAddAtomA
GetCurrentProcessId
GlobalDeleteAtom
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
CompareStringA
InterlockedExchange
lstrcmpA
FreeLibrary
GetModuleHandleA
GlobalFree
CopyFileA
GlobalSize
FormatMessageA
LocalFree
lstrlenW
MulDiv
GetLastError
SetLastError
ResumeThread
CloseHandle
GetCurrentThreadId
WaitForMultipleObjects
ResetEvent
EnterCriticalSection
LeaveCriticalSection
CreateEventA
Sleep
InitializeCriticalSection
GetCurrentThread
SetEvent
lstrcpyA
DeleteFileA
GetTempPathA
OutputDebugStringA
GetModuleFileNameA
WritePrivateProfileStringA
LoadLibraryA
GetTempFileNameA
GetProcAddress
GlobalUnlock
MultiByteToWideChar
GetPrivateProfileIntA
GlobalAlloc
GlobalLock
lstrlenA
LockResource
SizeofResource
WideCharToMultiByte
LoadResource
FindResourceA
WriteConsoleW
GetConsoleOutputCP
IsValidLocale
IsClipboardFormatAvailable
MapVirtualKeyExA
IsCharLowerA
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
SetCursorPos
SetRect
DrawIconEx
DrawFocusRect
DrawFrameControl
DrawEdge
UnpackDDElParam
ReuseDDElParam
InsertMenuItemA
TranslateAcceleratorA
UnregisterClassA
LoadImageA
CopyImage
DrawStateA
RegisterClipboardFormatA
EnumChildWindows
LockWindowUpdate
BringWindowToTop
IsRectEmpty
KillTimer
SetTimer
InvalidateRect
IsMenu
SetClassLongA
SetParent
CreatePopupMenu
NotifyWinEvent
SetWindowRgn
CreateAcceleratorTableA
LoadAcceleratorsA
DestroyAcceleratorTable
GetAsyncKeyState
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
PostThreadMessageA
SetRectEmpty
DestroyIcon
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
DeleteMenu
LoadCursorA
GetSysColorBrush
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CheckDlgButton
RegisterWindowMessageA
SendDlgItemMessageA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
IntersectRect
GetWindowPlacement
GetWindowRect
DestroyMenu
GetMenuItemInfoA
InflateRect
UnhookWindowsHookEx
CharUpperA
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
GetWindow
SetFocus
WinHelpA
SystemParametersInfoA
OffsetRect
MessageBeep
RedrawWindow
IsZoomed
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
FrameRect
GetUpdateRect
CharUpperBuffA
CopyIcon
SubtractRect
ValidateRect
MapVirtualKeyA
GetKeyNameTextA
ReleaseDC
GetDC
CopyRect
IsWindow
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
GetNextDlgGroupItem
DestroyCursor
GetWindowRgn
MapDialogRect
CreateMenu
GetDoubleClickTime
MapWindowPoints
GetIconInfo
MessageBoxA
ShowOwnedPopups
SetCursor
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
CloseClipboard
GetSystemMenu
ScreenToClient
IsIconic
GetSubMenu
LoadMenuA
LoadIconA
wsprintfA
DrawIcon
GetClientRect
SendMessageA
EmptyClipboard
GetCursorPos
AppendMenuA
PostMessageA
OpenClipboard
GetSystemMetrics
EnableWindow
SetClipboardData
ExtTextOutA
CreateHatchBrush
CreateFontIndirectA
GetTextExtentPoint32A
GetDCOrgEx
SetRectRgn
CombineRgn
DPtoLP
GetTextMetricsA
OffsetRgn
GetRgnBox
CreateDIBitmap
CreateCompatibleBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
GetTextColor
SetDIBColorTable
GetDIBits
RealizePalette
StretchBlt
SetPixel
CreateDIBSection
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
Polyline
Ellipse
Polygon
Rectangle
CreateSolidBrush
CreatePalette
CreatePen
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
LPtoDP
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExA
GetTextFaceA
SetPixelV
TextOutA
RectVisible
PtVisible
RoundRect
GetPixel
BitBlt
GetWindowExtEx
GetObjectType
SelectPalette
GetStockObject
CreateCompatibleDC
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetPaletteEntries
GetDeviceCaps
GetViewportExtEx
GetObjectA
CreateRectRgn
SelectClipRgn
DeleteObject
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
PatBlt
CreateRectRgnIndirect
CreateBitmap
CopyMetaFileA
Escape
AlphaBlend
TransparentBlt
GetFileTitleA
ClosePrinter
OpenPrinterA
DocumentPropertiesA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA
DragFinish
SHGetFileInfoA
SHGetPathFromIDListA
SHBrowseForFolderA
DragQueryFileA
ShellExecuteA
SHAppBarMessage
InitCommonControlsEx
ImageList_GetIconSize
PathFindExtensionA
PathFindFileNameA
UrlUnescapeA
PathStripToRootA
PathIsUNCA
PathFileExistsA
PathRemoveFileSpecW
DoDragDrop
OleGetClipboard
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoTaskMemFree
SysStringLen
SysAllocString
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysFreeString
GdiplusShutdown
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImageGraphicsContext
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI
GdipCloneImage
GdipGetImagePalette
GdiplusStartup
HttpOpenRequestA
InternetConnectA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
HttpQueryInfoA
HttpAddRequestHeadersA
InternetSetOptionExA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetQueryDataAvailable
ImmGetOpenStatus
ImmGetContext
ImmReleaseContext
PlaySoundA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ