AlphaBlend
DllInitialize
GradientFill
TransparentBlt
_�����ӳ���
vSetDdrawflag
Behavioral task
behavioral1
Sample
1078f258831cb2f2c294ab6cf1226019caa80b3e489778c53f8c2b28491710d5.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1078f258831cb2f2c294ab6cf1226019caa80b3e489778c53f8c2b28491710d5.dll
Resource
win10v2004-20240802-en
Target
1078f258831cb2f2c294ab6cf1226019caa80b3e489778c53f8c2b28491710d5
Size
1.4MB
MD5
81fc5e21bf1bde902aa6db6f2dd6a25f
SHA1
60635adc753ba8aaa63f19017072f0f5b0b8ed94
SHA256
1078f258831cb2f2c294ab6cf1226019caa80b3e489778c53f8c2b28491710d5
SHA512
2052fef2227395b87b7d3028f27dc72247cfb98d569cb8db8aa10f85c09ffde1a68a386f5d4bfe958e9fcc6fc5a459695519798d12e0b79019ad71c44b31fc2c
SSDEEP
24576:4uTb3ngNtJDQ7udb7CHBIZXiHgpPx/rIEKz7sOCDHnS/440Q5:4rnCh9CNDKXsrDyeQ
resource | yara_rule |
---|---|
sample | family_blackmoon |
Checks for missing Authenticode signature.
resource |
---|
1078f258831cb2f2c294ab6cf1226019caa80b3e489778c53f8c2b28491710d5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LCMapStringA
GetCommandLineA
Sleep
GetModuleFileNameA
GetTickCount
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetModuleHandleA
GetProcessHeap
QueryDosDeviceA
GetLogicalDriveStringsA
GetSystemInfo
ReleaseMutex
FreeLibrary
SetStdHandle
RtlMoveMemory
WriteProcessMemory
GetProcAddress
LoadLibraryA
IsDebuggerPresent
SetWaitableTimer
CreateWaitableTimerA
CreateEventA
OpenEventA
CreateFileMappingA
IsBadCodePtr
GetStringTypeW
GetStringTypeA
OpenFileMappingA
CreateMutexA
GetCurrentProcessId
VirtualFree
VirtualAlloc
DeviceIoControl
GlobalSize
GlobalMemoryStatusEx
GetComputerNameA
WideCharToMultiByte
TerminateProcess
LCMapStringW
SetUnhandledExceptionFilter
CloseHandle
CreateThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalAlloc
GlobalLock
LocalAlloc
LocalFree
TlsAlloc
GlobalFree
GlobalUnlock
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
InterlockedDecrement
SetErrorMode
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
GetVersion
GlobalFlags
WritePrivateProfileStringA
InterlockedIncrement
MultiByteToWideChar
SetLastError
GetLastError
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
GetCurrentProcess
WriteFile
SetFilePointer
FlushFileBuffers
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
HeapSize
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
CallWindowProcA
GetWindowThreadProcessId
IsWindowVisible
GetWindowTextA
GetClassNameA
CreateWindowStationA
GetWindowLongA
PostQuitMessage
PostMessageA
SendMessageA
SetCursor
GetParent
SetWindowsHookExA
GetCursorPos
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
GetNextDlgTabItem
GetFocus
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
UnhookWindowsHookEx
UnregisterClassA
PtInRect
GetDlgCtrlID
GetWindow
ClientToScreen
SetWindowTextA
GetMenuItemCount
TabbedTextOutA
DrawTextA
GrayStringA
SetWindowLongA
SetFocus
GetWindowPlacement
SystemParametersInfoA
RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
MessageBoxTimeoutW
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
GetSysColor
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
LoadStringA
DestroyMenu
UnhookWinEvent
IsIconic
ShowWindow
IsWindowEnabled
EnableMenuItem
RedrawWindow
GetWindowRect
GetAncestor
GetMenuBarInfo
WindowFromPoint
SetActiveWindow
GetSystemMetrics
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetWindowInfo
SetKeyboardState
AttachThreadInput
MapVirtualKeyA
MoveWindow
GetMenuStringA
GetMenuItemID
GetSubMenu
GetMenu
GetScrollInfo
GetLastActivePopup
EnableWindow
DrawIconEx
FillRect
GetDC
ChildWindowFromPointEx
GetCursorInfo
GetDlgItem
ReleaseDC
GetWindowDC
IsZoomed
FindWindowExA
SetWindowPos
SwitchToThisWindow
GetModuleFileNameExA
send
recv
getsockname
ntohs
closesocket
htons
inet_addr
WSAStartup
connect
gethostbyname
WSACleanup
socket
GdiplusShutdown
GetObjectA
GetStockObject
GetDIBits
BitBlt
CreateDIBSection
CreateSolidBrush
CreateCompatibleDC
Rectangle
SelectObject
CreateBitmap
DeleteObject
DeleteDC
SaveDC
RestoreDC
SetBkColor
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
SHAppBarMessage
OpenPrinterA
DocumentPropertiesA
ClosePrinter
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
ord17
PathFileExistsA
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
_�����ӳ���
vSetDdrawflag
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ