PassNgsLoading
_�����ӳ���
����_ȡ����·��
Ŀ¼_ȡsystem32Ŀ¼
�ļ�_ȡ��չ��
Static task
static1
Behavioral task
behavioral1
Sample
dd01b985713a69edbed83e1db3cb79d388894b921bcdf7d9f028c6fb064598e2.dll
Resource
win7-20240704-en
Target
dd01b985713a69edbed83e1db3cb79d388894b921bcdf7d9f028c6fb064598e2
Size
12.4MB
MD5
b3b0722b5088e3c674bcd02472dc723b
SHA1
368e36cc2b46b86ae540de130151d3806d0c50d5
SHA256
dd01b985713a69edbed83e1db3cb79d388894b921bcdf7d9f028c6fb064598e2
SHA512
e0493659727e7495a30e4f6cc382350469feed6da65bb1f066dbd4c66e99987c5be141f6299b5f63d07bebc0f19b2611cd027b2fc439a36ca19bf71936868d59
SSDEEP
196608:s+MglCMSj2VjC0FL97nP+GuD8gzZLvRfGM3ivEUPYqlze8lPEe7MZiN4AOIA0:zZFL5juD8gnr3wzecPtjOI9
Checks for missing Authenticode signature.
resource |
---|
dd01b985713a69edbed83e1db3cb79d388894b921bcdf7d9f028c6fb064598e2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpy
InitCommonControls
PassNgsLoading
_�����ӳ���
����_ȡ����·��
Ŀ¼_ȡsystem32Ŀ¼
�ļ�_ȡ��չ��
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE