ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
General
-
Target
738760aba096f0dbd5e6ecddd12f4dc8fce5f61647e50d17963db5d392d395e8
-
Size
3.2MB
-
MD5
8cc30eca826ca3245822a8f2dfc728f5
-
SHA1
ed12e00198b357e4b102c67c1cc8ad0044e6c518
-
SHA256
738760aba096f0dbd5e6ecddd12f4dc8fce5f61647e50d17963db5d392d395e8
-
SHA512
901a937c3f7e4b6e1c48ca4883fa8db150038bf8488f4b849c5d5c0a453395bd7ca26ebe999224960668619e29cd6eec02b37b4b6f1da331d63cf3cf8fa0b718
-
SSDEEP
49152:/VznVktIVvpkBetTBWqzeP5PdLoZVSQlzRg6KoOmJK3OwT2RU/jgCIb8/WJfM:NzVktcvWBeuqzCaglmoH4U/UC08J
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
738760aba096f0dbd5e6ecddd12f4dc8fce5f61647e50d17963db5d392d395e8
-
GMSv83_4GB_完美中文+視窗化+去聊天限制.exe
Headers
Exports
Sections