PassNgsLoading
_�����ӳ���
����_ȡ����·��
Ŀ¼_ȡsystem32Ŀ¼
�ļ�_ȡ��չ��
Static task
static1
Behavioral task
behavioral1
Sample
5640e7f9f26224fd2d4444586e9f0343b64534ec8445c07ca3dbbf6cbaa283f5.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5640e7f9f26224fd2d4444586e9f0343b64534ec8445c07ca3dbbf6cbaa283f5.dll
Resource
win10v2004-20240611-en
Target
5640e7f9f26224fd2d4444586e9f0343b64534ec8445c07ca3dbbf6cbaa283f5
Size
12.4MB
MD5
bb87130251742a24f70432b80055af79
SHA1
2754f5e59ec7218ea05f1f7d2b8e9f6d589600bb
SHA256
5640e7f9f26224fd2d4444586e9f0343b64534ec8445c07ca3dbbf6cbaa283f5
SHA512
50212a1a8c2a7b8a3f555b114591ef3e22dbe229d5c5e7d538336f085e405a5ce8c87ef18e85de4a990e993961478c261c9354bc530e3502553ece9897f8c9d3
SSDEEP
196608:0NPPmoWkuk9EAn7mQ6dP9KyOmdR4bk1k6sFXvKISMFh4X5r01PFG9:0lPm4uamrQyOW4bk1k6wXZx650b
Checks for missing Authenticode signature.
resource |
---|
5640e7f9f26224fd2d4444586e9f0343b64534ec8445c07ca3dbbf6cbaa283f5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpy
InitCommonControls
PassNgsLoading
_�����ӳ���
����_ȡ����·��
Ŀ¼_ȡsystem32Ŀ¼
�ļ�_ȡ��չ��
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE