__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
绝情谷三城专用版.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
绝情谷三城专用版.exe
Resource
win10v2004-20240508-en
Target
绝情谷三城专用版.exe
Size
7.2MB
MD5
fc4b4952ce972f26333371132f800f2a
SHA1
50555139421389803ac1a69fa8697d0a56f2df09
SHA256
8a0590a2b0c404384f3499147d2ebaa8a92604afecfbf7275148b5d0a1b534d9
SHA512
4f4c460a28269900ebb0d50218c08181d2425fa55b0f919fa61f21d497675c34c60ac81e34102b41de6418f0100d60ebe54f6387c4a08a1df73e2bcd3895d3dc
SSDEEP
196608:5Z2Lwm2kZzvG/ahjQ2VMEOrBj72A5cid7sVSUW:Jm2kpWahjQ2VeF72yzUW
Checks for missing Authenticode signature.
resource |
---|
绝情谷三城专用版.exe |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DocumentPropertiesW
ChooseColorW
FlatSB_SetScrollInfo
SHGetSpecialFolderLocation
CopyImage
GetFileVersionInfoSizeW
URLDownloadToFileW
SafeArrayPutElement
NetWkstaGetInfo
WTSUnRegisterSessionNotification
RegSetValueExW
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
SHGetFolderPathW
IsEqualGUID
Pie
ZwQueryInformationProcess
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ