H:\其他\git\Maplespe\ExplorerBlurMica\build\x64\Release\ExplorerBlurMica.pdb
Static task
static1
1 signatures
General
-
Target
Release_x64.zip
-
Size
101KB
-
MD5
b5ae0889c83afa12d2dc89f892a8040f
-
SHA1
2975e3d42d81a05b4bca73db8513fe9defe0018f
-
SHA256
83670de15dec73ea72ceb62f1100df27e6b3f4d05047b7511a9546bcb2db1f53
-
SHA512
666ec8d3b51ea77f6d565f127e3a974e1948220b2abfc1216b2b90a300d776dc94ad9ec881996d453c06ba3dd20a5dc51c0d70b7551859d4f2c6e95ca815802b
-
SSDEEP
3072:iZuqdDuveiPIUzOcwkqDS86XjURn5iJfv6s:dvxIUzOPkqDS8ugRn5iJ36s
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Release/ExplorerBlurMica.dll
Files
-
Release_x64.zip.zip
-
ReadMe.txt
-
Release/ExplorerBlurMica.dll.dll regsvr32 windows:6 windows x64 arch:x64
1d6d0725f9f648e015904961fb855188
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
HeapDestroy
GetThreadContext
GetThreadId
GetCurrentProcessId
FlushInstructionCache
SetThreadContext
OpenThread
WriteConsoleW
HeapSize
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
GetStringTypeW
GetProcessHeap
HeapAlloc
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
SetFilePointerEx
GetLastError
GetStdHandle
LCMapStringW
TerminateThread
HeapReAlloc
CreateToolhelp32Snapshot
ResumeThread
SuspendThread
ReleaseMutex
Thread32First
CreateMutexW
Thread32Next
HeapFree
VirtualProtect
HeapCreate
GetSystemInfo
VirtualAlloc
VirtualFree
GetCurrentThreadId
VirtualQuery
GetProcAddress
CreateThread
LoadLibraryW
CloseHandle
FreeEnvironmentStringsW
GetPrivateProfileStringW
CreateFileW
WaitForSingleObject
FindClose
GetCurrentProcess
SetLastError
GetFileSizeEx
FindFirstFileW
GetModuleHandleW
DisableThreadLibraryCalls
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeLibraryAndExitThread
GetFileType
GetModuleFileNameW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
user32
DestroyWindow
MessageBoxW
GetKeyState
ReleaseDC
SystemParametersInfoW
SetLayeredWindowAttributes
DrawTextExW
WindowFromDC
OffsetRect
SendMessageW
CreateWindowExW
SystemParametersInfoForDpi
GetDesktopWindow
GetClassNameW
MonitorFromWindow
GetDC
EndPaint
BeginPaint
InvalidateRect
GetParent
GetSysColorBrush
DrawTextW
IsZoomed
GetSystemMetricsForDpi
FillRect
GetWindowLongW
GetWindowRect
GetDpiForWindow
SetWindowLongW
gdi32
GetDeviceCaps
GetBkColor
SaveDC
SelectObject
GetBkMode
CreateCompatibleDC
PatBlt
GetTextCharacterExtra
GetStockObject
GetTextAlign
SetBkMode
GetObjectW
GetTextColor
SetBkColor
RestoreDC
CreateSolidBrush
GetCurrentObject
SetTextAlign
ExtTextOutW
SetTextCharacterExtra
IntersectClipRect
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExW
RegSetValueExW
OpenProcessToken
ole32
CoCreateInstance
gdiplus
GdipCreateFromHDC
GdipCreateSolidFill
GdipDeleteBrush
GdipFillRectangleI
GdipDeleteGraphics
GdiplusStartup
GdiplusShutdown
GdipSetSolidFillColor
uxtheme
ord47
BeginBufferedPaint
DrawThemeTextEx
DrawThemeBackground
GetThemeColor
EndBufferedPaint
DrawThemeText
dwmapi
DwmFlush
DwmSetWindowAttribute
DwmExtendFrameIntoClientArea
DwmGetWindowAttribute
DwmEnableBlurBehindWindow
comctl32
ord410
ord413
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Release/config.ini
-
Release/register.cmd
-
Release/uninstall.cmd