D:\2012_new_src\FTNN_发布\ftstandardctrls_发布\Pdb\Release\SOUI\render-skia.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ccf9a75298aa11766c2a0f07b6c4af4b39d6b567e32641b2fec1ab385bd1837b.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ccf9a75298aa11766c2a0f07b6c4af4b39d6b567e32641b2fec1ab385bd1837b.dll
Resource
win10v2004-20240412-en
General
-
Target
ccf9a75298aa11766c2a0f07b6c4af4b39d6b567e32641b2fec1ab385bd1837b
-
Size
2.0MB
-
MD5
b563278f2c2b5827043996ab4221f59f
-
SHA1
8f10a9c2daca63d64f947e70636a62fcdb2af5ed
-
SHA256
ccf9a75298aa11766c2a0f07b6c4af4b39d6b567e32641b2fec1ab385bd1837b
-
SHA512
f49aaf7957750db42b55418bd3d87e6b9b65a0fc6cf0772060c4d8b3786c0dbbe08329971379a147afd02e37fe65cd05ca68f5691380d1ac41172044a1fc3274
-
SSDEEP
24576:vHb4a/fSAjqW/vOCpufyVf5nkJ3P5kRKj2GmKGSKL/QxAc+YKq6boy69MIo6Q:vr/fSAufkf5kdRmGTIIFE6Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccf9a75298aa11766c2a0f07b6c4af4b39d6b567e32641b2fec1ab385bd1837b
Files
-
ccf9a75298aa11766c2a0f07b6c4af4b39d6b567e32641b2fec1ab385bd1837b.dll windows:5 windows x86 arch:x86
5af8c2ed06f2d6e344ab25d617f6a096
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
utilities
??_7IObject@SOUI@@6B@
?SetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJPBD0H@Z
?SetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@DUchar_traits@SOUI@@@2@0H@Z
?OnInitFinished@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEXVxml_node@pugi@@@Z
?IsClass@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBEHPB_W@Z
?InitFromXml@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEHVxml_node@pugi@@@Z
?GetObjectType@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBEHXZ
?GetObjectClass@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBEPB_WXZ
?GetName@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBEPB_WXZ
?GetID@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBEHXZ
?DefAttributeProc@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?AfterAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0HJ@Z
?GetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@@Z
?SetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?first_attribute@xml_node@pugi@@QBE?AVxml_attribute@2@XZ
??7xml_node@pugi@@QBE_NXZ
?get_userdata@xml_attribute@pugi@@QBEHXZ
?next_attribute@xml_attribute@pugi@@QBE?AV12@XZ
?value@xml_attribute@pugi@@QBEPB_WXZ
?name@xml_attribute@pugi@@QBEPB_WXZ
??Bxml_attribute@pugi@@QBEP6AXPAPAPAV01@@ZXZ
?CvtW2W@SStrCpCvt@SOUI@@SA?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@I@Z
?CvtA2W@SStrCpCvt@SOUI@@SA?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV?$TStringT@DUchar_traits@SOUI@@@2@II@Z
?Find@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBEHPB_WH@Z
?Find@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBEH_WH@Z
?Mid@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBE?AV12@HH@Z
?CompareNoCase@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBEHPB_W@Z
?Compare@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBEHPB_W@Z
??4?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAEAAV01@ABV01@@Z
??0?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAE@PB_WH@Z
??0?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAE@XZ
??0?$TStringT@DUchar_traits@SOUI@@@SOUI@@QAE@PBD@Z
?SouiFree@soui_mem_wrapper@SOUI@@SAXPAX@Z
?SouiMalloc@soui_mem_wrapper@SOUI@@SAPAXI@Z
?AlphaRestore@CGdiAlpha@SOUI@@SAXAAUtagALPHAINFO@2@@Z
?AlphaBackup@CGdiAlpha@SOUI@@SAHPAUHDC__@@PBUtagRECT@@AAUtagALPHAINFO@2@@Z
?CvtW2A@SStrCpCvt@SOUI@@SA?AV?$TStringT@DUchar_traits@SOUI@@@2@ABV?$TStringT@_WUwchar_traits@SOUI@@@2@I@Z
??1?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAE@XZ
??0?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAE@PB_W@Z
??1?$TStringT@DUchar_traits@SOUI@@@SOUI@@QAE@XZ
usp10
ScriptItemize
ScriptFreeCache
ScriptShape
opengl32
wglGetCurrentContext
wglGetProcAddress
kernel32
FindFirstFileExW
FindClose
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
FatalAppExitA
SetConsoleCtrlHandler
CreateSemaphoreW
GetModuleHandleW
GetTickCount
TlsFree
TerminateProcess
GetCurrentProcess
Sleep
InterlockedIncrement
InterlockedDecrement
MulDiv
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedCompareExchange
GetDriveTypeW
GetFileInformationByHandle
GetFileSizeEx
CloseHandle
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
MultiByteToWideChar
WideCharToMultiByte
TlsAlloc
TlsGetValue
TlsSetValue
FreeLibrary
GetProcAddress
LoadLibraryA
CreateEventW
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateDirectoryW
GetFileAttributesExW
DeleteFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
LoadLibraryExW
OutputDebugStringW
SetEnvironmentVariableA
GetStringTypeW
WriteConsoleW
FileTimeToLocalFileTime
PeekNamedPipe
GetFullPathNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileW
GetTimeZoneInformation
SetEndOfFile
GetFullPathNameA
OutputDebugStringA
QueryPerformanceCounter
GetModuleFileNameA
RtlUnwind
EncodePointer
DecodePointer
GetLastError
HeapFree
HeapAlloc
RaiseException
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
HeapReAlloc
IsDebuggerPresent
ReadFile
SetStdHandle
GetFileType
SetLastError
GetCurrentThread
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
GetStartupInfoW
user32
DrawIconEx
OffsetRect
InflateRect
GetIconInfo
SystemParametersInfoW
GetDC
ReleaseDC
gdi32
GetTextExtentPointI
GdiFlush
GetTextFaceW
ExtTextOutW
SetWorldTransform
GetTextMetricsW
SetTextAlign
SetTextColor
SetGraphicsMode
SetBkMode
RemoveFontMemResourceEx
AddFontMemResourceEx
GetGlyphIndicesW
GetFontUnicodeRanges
GetOutlineTextMetricsW
GetGlyphOutlineW
GetFontData
GetCharABCWidthsW
EnumFontFamiliesExW
CreateFontIndirectW
SetViewportOrgEx
GetObjectW
CreateDIBSection
SelectObject
SelectClipRgn
IntersectClipRect
GetRegionData
ExtCreateRegion
DeleteObject
DeleteDC
CreateCompatibleDC
ole32
CoCreateGuid
Exports
Exports
SCreateInstance
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 339KB - Virtual size: 338KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ