C:\Users\Administrator\Desktop\代理专用版本\火哥2\Bullet\Release\Bullet.pdb
Static task
static1
Behavioral task
behavioral1
Sample
116b779ed106e7703cff0a4887d5ed30N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
116b779ed106e7703cff0a4887d5ed30N.exe
Resource
win10v2004-20240802-en
General
-
Target
116b779ed106e7703cff0a4887d5ed30N
-
Size
375KB
-
MD5
116b779ed106e7703cff0a4887d5ed30
-
SHA1
810dc9c6861a2efb35a896a4a3d7d842c0df7353
-
SHA256
7511ec17796a75cf05053b12c2c6ea6aeb084d829156af41bb9c0feba9f72e31
-
SHA512
5495329d3724ffd2440ef02acfc73e3c6be144bffc8850aa3a291376dee277fd237f17ec720937192d0dabd1a799d9babf6c06994d46b18ab4a5324536543c1b
-
SSDEEP
6144:EmGsEQMaBn0Pt+JmiBIYvSWLUOBIYvSWLUyDGpkY7Zd+EHltB+WD:6scqn0POfvVv/DGpkY90EHltB+WD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 116b779ed106e7703cff0a4887d5ed30N
Files
-
116b779ed106e7703cff0a4887d5ed30N.exe windows:6 windows x86 arch:x86
e8fcd80d5bdec052cf4d7f994bfbb009
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
TlsFree
TlsSetValue
WriteConsoleW
SetStdHandle
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetStringTypeW
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
OutputDebugStringW
GetFileType
GetProcessHeap
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
GetModuleFileNameW
GetLastError
GetFullPathNameA
GetProcAddress
LoadLibraryW
GetFileAttributesW
lstrlenW
WriteFile
SizeofResource
LoadResource
FindResourceW
CreateFileW
CloseHandle
CreateThread
DeleteFileW
GetStdHandle
GetModuleHandleW
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
QueryPerformanceCounter
lstrlenA
LocalFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
HeapReAlloc
HeapAlloc
HeapFree
GetCommandLineW
RtlUnwind
RaiseException
IsDebuggerPresent
IsProcessorFeaturePresent
HeapSize
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStartupInfoW
user32
LoadStringW
LoadAcceleratorsW
GetMessageW
PostThreadMessageW
wsprintfW
FillRect
SetRect
ReleaseDC
GetDC
DefWindowProcW
EndDialog
GetDlgItemTextW
SetTimer
EnableWindow
GetDlgItem
SetWindowTextW
PostMessageW
UpdateWindow
ShowWindow
DialogBoxParamW
MessageBoxW
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
PostQuitMessage
IsWindow
FindWindowW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
gdi32
SetBkMode
DeleteObject
CreateSolidBrush
TextOutW
SetTextColor
advapi32
OpenServiceA
CreateServiceA
DeleteService
ControlService
CloseServiceHandle
StartServiceW
OpenSCManagerW
ole32
CoInitialize
OleRun
CoCreateInstance
oleaut32
VariantCopy
VariantChangeType
VariantClear
VariantInit
SysFreeString
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysAllocString
GetErrorInfo
iphlpapi
GetAdaptersInfo
Sections
.text Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 211KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ