L6Sanguo
alirsce
����_����ȡ����ID
����_ȡ����·��
Ŀ¼_ȡsystem32Ŀ¼
�ļ�_ȡ��С
�߳�_ȡ���߳�ID
Static task
static1
Behavioral task
behavioral1
Sample
60931c53230520b8baf247fda38704b320447a732d4d636761ac8d91d1a57407.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
60931c53230520b8baf247fda38704b320447a732d4d636761ac8d91d1a57407.dll
Resource
win10v2004-20240802-en
Target
60931c53230520b8baf247fda38704b320447a732d4d636761ac8d91d1a57407
Size
1.9MB
MD5
6357209162bf984bcf195b7cf38080f3
SHA1
3c585bcebe203b74197a5f1c589a592807939b4e
SHA256
60931c53230520b8baf247fda38704b320447a732d4d636761ac8d91d1a57407
SHA512
68509cd9cb1fb32d76f4b581033ea4337b31005cf3e9ccf1d781540f5987e022582848019a5e09b58c8dbf78536145a06c26f7ab0a30a413b9dc6e8ae9235609
SSDEEP
49152:dlFB7AHM2Mljwlq5YWPHIFjA47u7+/2541PNwTFiJMvusDt+Rpm:dt8HDI5YyHsjfcl5cPNui0jt+Hm
Checks for missing Authenticode signature.
resource |
---|
60931c53230520b8baf247fda38704b320447a732d4d636761ac8d91d1a57407 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionExA
SetMenuDefaultItem
CombineRgn
InitCommonControlsEx
LookupPrivilegeValueA
Shell_NotifyIconW
CLSIDFromString
StrTrimW
ord42
GradientFill
strncpy
GetInterfaceInfo
GetMappedFileNameW
L6Sanguo
alirsce
����_����ȡ����ID
����_ȡ����·��
Ŀ¼_ȡsystem32Ŀ¼
�ļ�_ȡ��С
�߳�_ȡ���߳�ID
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ