MaiDMFunc
_MmmAssociateContext@8
Static task
static1
Behavioral task
behavioral1
Sample
新建文件夹 (3)/破解补丁/crack_for_niiduma_lc/[email protected]
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
新建文件夹 (3)/破解补丁/crack_for_niiduma_lc/[email protected]
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
新建文件夹 (3)/破解补丁/crack_for_niiduma_lc/crack_for_niiduma_lc.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
新建文件夹 (3)/破解补丁/crack_for_niiduma_lc/crack_for_niiduma_lc.exe
Resource
win10v2004-20240802-en
Target
db1f1291dcd856cb6392a4716b04a915_JaffaCakes118
Size
4.1MB
MD5
db1f1291dcd856cb6392a4716b04a915
SHA1
cec75fb29894977d4c57f98c1f9590d63ece32cc
SHA256
0b25416fe6ef4ebabe95261bfade65406ed9b09cf2697e83784e76e3a1263ca2
SHA512
677b84241f4d3c8afe280221b1c618c97be8ce58618494fd4a067413ad08398da174ae133ef3b6c18c4911f7e3a5aca65a8ff8230a6199b3898a9cab6cc0727e
SSDEEP
98304:luOu/4O5D//h77YdkDFbNjybHnRAxYt1mvjGbV/x:U95j5gEybHFtAjm5
Checks for missing Authenticode signature.
resource |
---|
unpack001/新建文件夹 (3)/破解补丁/crack_for_niiduma_lc/[email protected] |
unpack001/新建文件夹 (3)/破解补丁/crack_for_niiduma_lc/crack_for_niiduma_lc.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentThreadId
OpenThread
GetThreadContext
SetThreadContext
VirtualAlloc
VirtualProtect
GetModuleHandleA
GetModuleHandleW
GetProcAddress
SetProcessDEPPolicy
LoadLibraryA
CreateToolhelp32Snapshot
Thread32First
Thread32Next
ExitProcess
ResumeThread
CreateProcessW
VirtualAllocEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
K32EnumProcessModules
K32GetModuleFileNameExW
HeapDestroy
FindNextFileW
RemoveDirectoryW
GetCurrentProcessId
Sleep
SetUnhandledExceptionFilter
FindClose
CreateDirectoryW
SuspendThread
CloseHandle
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetCommandLineA
HeapAlloc
EncodePointer
DecodePointer
RaiseException
GetLastError
HeapFree
DeleteCriticalSection
FatalAppExitA
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
IsDebuggerPresent
IsProcessorFeaturePresent
SetLastError
GetCurrentThread
GetProcessHeap
GetStdHandle
GetFileType
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
CreateSemaphoreW
GetModuleFileNameW
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
SetFilePointerEx
WriteConsoleW
OutputDebugStringW
HeapSize
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStringTypeW
CreateFileW
ReadFile
ReadConsoleW
InitializeCriticalSection
GetFileSize
SetFilePointer
SetEndOfFile
MoveFileExW
GetFileAttributesW
DeleteFileW
VirtualFree
CreateThread
FindFirstFileW
HeapCreate
MessageBoxW
CreateWindowExA
RegOpenKeyExW
RegOpenKeyExA
htonl
ImmAssociateContext
MaiDMFunc
_MmmAssociateContext@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
MaiDMFunc
TlsSetValue
CreateFileW
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
SetLastError
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
RtlUnwind
OutputDebugStringW
HeapAlloc
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ