A6F86D2D67D9403eA725820C4EF210A2
A6F92A92B69B4082AB0F9C7A9C1FF10C
CheckRuntime
EC1DB9C1620C48588C4701045B242FA9
GetCpuID
GetDiskID
GetMacID
MainDLL
Overview
overview
7Static
static
7福星基�...Vw.dll
windows7-x64
1福星基�...Vw.dll
windows10-2004-x64
1福星基�...il.exe
windows7-x64
7福星基�...il.exe
windows10-2004-x64
7福星基�...Xp.dll
windows7-x64
1福星基�...Xp.dll
windows10-2004-x64
1福星基�...gn.dll
windows7-x64
1福星基�...gn.dll
windows10-2004-x64
1福星基�...gn.dll
windows7-x64
1福星基�...gn.dll
windows10-2004-x64
1福星基�...Fv.dll
windows7-x64
1福星基�...Fv.dll
windows10-2004-x64
1福星基�...Mn.dll
windows7-x64
1福星基�...Mn.dll
windows10-2004-x64
1福星基�...Px.dll
windows7-x64
1福星基�...Px.dll
windows10-2004-x64
1福星基�...Vw.dll
windows7-x64
1福星基�...Vw.dll
windows10-2004-x64
1福星基�...de.exe
windows7-x64
3福星基�...de.exe
windows10-2004-x64
3福星基�...st.dll
windows7-x64
7福星基�...st.dll
windows10-2004-x64
7福星基�...nt.dll
windows7-x64
1福星基�...nt.dll
windows10-2004-x64
1福星基�...pa.dll
windows7-x64
1福星基�...pa.dll
windows10-2004-x64
1福星基�...pu.dll
windows7-x64
1福星基�...pu.dll
windows10-2004-x64
1福星基�...qu.dll
windows7-x64
1福星基�...qu.dll
windows10-2004-x64
1福星基�...fm.dll
windows7-x64
1福星基�...fm.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
福星基金通绿色版/AxInterop.SHDocVw.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
福星基金通绿色版/AxInterop.SHDocVw.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
福星基金通绿色版/FundsDetail.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
福星基金通绿色版/FundsDetail.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
福星基金通绿色版/HpBtnXp.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
福星基金通绿色版/HpBtnXp.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
福星基金通绿色版/HphrBt4Lgn.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
福星基金通绿色版/HphrBt4Lgn.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
福星基金通绿色版/HphrLgn.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
福星基金通绿色版/HphrLgn.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
福星基金通绿色版/HphrLibFv.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
福星基金通绿色版/HphrLibFv.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
福星基金通绿色版/HphrMn.dll
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
福星基金通绿色版/HphrMn.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
福星基金通绿色版/HpnrMkIPx.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
福星基金通绿色版/HpnrMkIPx.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
福星基金通绿色版/Interop.SHDocVw.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
福星基金通绿色版/Interop.SHDocVw.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
福星基金通绿色版/OnlineUpgrade.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
福星基金通绿色版/OnlineUpgrade.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
福星基金通绿色版/asist.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
福星基金通绿色版/asist.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
福星基金通绿色版/hrPnt.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
福星基金通绿色版/hrPnt.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
福星基金通绿色版/hrSepa.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
福星基金通绿色版/hrSepa.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
福星基金通绿色版/hrSepu.dll
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
福星基金通绿色版/hrSepu.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
福星基金通绿色版/hrSequ.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
福星基金通绿色版/hrSequ.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
福星基金通绿色版/hrasfm.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
福星基金通绿色版/hrasfm.dll
Resource
win10v2004-20240802-en
Target
e24a386c636c7e169d4954d8856aa174_JaffaCakes118
Size
4.5MB
MD5
e24a386c636c7e169d4954d8856aa174
SHA1
9d1a092106bf7f33c6b9703dd0d294e9e1297fac
SHA256
4eb2bfa806e6ac69d0583593881d64be26af4d575af1b828feefb6a4e9edff20
SHA512
adf4cdf9f69cd0788aaf15f86a07997ea9cfa42d9c96e6acd1747cf94b763d8807e60cae7b96f52eac0f68b7ff462c20b96aea656dd882571d8d18ed3b57348d
SSDEEP
98304:lq/jlhfuNzPVIFVWCdAyxviV4OlJrenkmz6I8m7Jp2PLVzu3ufw:YjehVIGCdz1OlJSBn8Spcz8u4
resource | yara_rule |
---|---|
static1/unpack001/福星基金通绿色版/asist.dll | themida |
Checks for missing Authenticode signature.
resource |
---|
unpack001/福星基金通绿色版/AxInterop.SHDocVw.DLL |
unpack001/福星基金通绿色版/FundsDetail.exe |
unpack001/福星基金通绿色版/HpBtnXp.DLL |
unpack001/福星基金通绿色版/HphrBt4Lgn.DLL |
unpack001/福星基金通绿色版/HphrLgn.dll |
unpack001/福星基金通绿色版/HphrLibFv.DLL |
unpack001/福星基金通绿色版/HphrMn.DLL |
unpack001/福星基金通绿色版/HpnrMkIPx.DLL |
unpack001/福星基金通绿色版/Interop.SHDocVw.DLL |
unpack001/福星基金通绿色版/OnlineUpgrade.exe |
unpack001/福星基金通绿色版/asist.dll |
unpack001/福星基金通绿色版/hrPnt.DLL |
unpack001/福星基金通绿色版/hrSepa.dll |
unpack001/福星基金通绿色版/hrSepu.dll |
unpack001/福星基金通绿色版/hrSequ.dll |
unpack001/福星基金通绿色版/hrasfm.DLL |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
A6F86D2D67D9403eA725820C4EF210A2
A6F92A92B69B4082AB0F9C7A9C1FF10C
CheckRuntime
EC1DB9C1620C48588C4701045B242FA9
GetCpuID
GetDiskID
GetMacID
MainDLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ