Webzen
_�����ӳ���
���ӵ�������
Behavioral task
behavioral1
Sample
a3d7c67c3eb40f0a86007e3450c16425e0eeee085fcf33d19c2ea458e80d5ae4.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a3d7c67c3eb40f0a86007e3450c16425e0eeee085fcf33d19c2ea458e80d5ae4.dll
Resource
win10v2004-20240802-en
Target
a3d7c67c3eb40f0a86007e3450c16425e0eeee085fcf33d19c2ea458e80d5ae4
Size
236KB
MD5
4815cc358e308c5c0be2449c07501c82
SHA1
60c6f3157713f530f916a786788e0346bdad42ee
SHA256
a3d7c67c3eb40f0a86007e3450c16425e0eeee085fcf33d19c2ea458e80d5ae4
SHA512
fdd590e6b816e3b4e8a54add156819d4095b761e0f3441532a7b4696a99706d690caef565b66698eb0962991a29d30cf2acc02c59d68742e4c560bd1f1caa48d
SSDEEP
3072:GVrol5eYGgev2FaZ2DFjCgVjed3GmPtplgKrF50n8po/QaM2tg6:GVm51FleEm1plrF6Dor6
resource | yara_rule |
---|---|
sample | family_blackmoon |
Checks for missing Authenticode signature.
resource |
---|
a3d7c67c3eb40f0a86007e3450c16425e0eeee085fcf33d19c2ea458e80d5ae4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LCMapStringA
FreeLibrary
GetCommandLineA
GetCurrentDirectoryA
GetDiskFreeSpaceA
MulDiv
WritePrivateProfileStringA
GetFileSize
lstrlenA
GetWindowsDirectoryA
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalAlloc
GlobalLock
TlsAlloc
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
InterlockedDecrement
SetErrorMode
lstrcatA
lstrcpyA
ReadFile
GetVersion
GlobalFlags
InterlockedIncrement
SetLastError
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
SetFilePointer
FlushFileBuffers
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
HeapSize
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
MoveFileA
DeleteFileA
GetPrivateProfileStringA
GetModuleFileNameA
CreateFileA
WriteFile
Sleep
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetProcessHeap
VirtualProtectEx
VirtualQueryEx
GetModuleHandleA
CloseHandle
GetCurrentProcess
QueryDosDeviceA
GetLogicalDriveStringsA
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
GetSystemDirectoryA
GetTempFileNameA
VirtualAllocEx
CopyFileA
GetTempPathA
GetVersionExA
WriteProcessMemory
VirtualProtect
GetProcAddress
lstrcpyn
TerminateProcess
GetCurrentProcessId
RtlZeroMemory
LoadLibraryA
LocalFree
LocalAlloc
PostQueuedCompletionStatus
GetQueuedCompletionStatus
GetLastError
LeaveCriticalSection
EnterCriticalSection
CreateThread
InitializeCriticalSection
HeapCreate
CreateIoCompletionPort
GetTickCount
lstrcpynA
RtlMoveMemory
SetWindowLongA
SetWindowPos
ShowWindow
SetFocus
GetSystemMetrics
GetWindowPlacement
IsIconic
SystemParametersInfoA
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
GetSysColor
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
LoadStringA
DestroyMenu
GetDC
GetMenuItemCount
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameA
UnregisterClassA
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
GetWindowLongA
SetCursor
SendMessageA
PostMessageA
PostQuitMessage
SetForegroundWindow
GetActiveWindow
GetForegroundWindow
IsWindowEnabled
GetParent
EnableWindow
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
RegisterWindowMessageA
ReleaseDC
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SetViewportExtEx
GetDeviceCaps
CreateBitmap
OffsetViewportOrgEx
ScaleViewportExtEx
SetViewportOrgEx
SetMapMode
SetTextColor
Escape
GetObjectA
GetStockObject
SetBkColor
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
ExtTextOutA
TextOutA
RectVisible
PtVisible
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptReleaseContext
CryptCreateHash
CryptAcquireContextA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
PathFindFileNameA
PathFileExistsA
gethostbyname
htons
inet_addr
connect
WSAStartup
WSASend
WSARecv
WSASocketA
closesocket
ord1141
OpenPrinterA
DocumentPropertiesA
ClosePrinter
ord17
SHGetSpecialFolderPathA
Webzen
_�����ӳ���
���ӵ�������
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ