E:\Document And Settings2\Administrator\Desktop\洛奇英雄传\新版本\1303--1229\sm\Release\wmgj.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0c0224c888beb5ad401da63c45bed663d0df2e048bc73370d1b132e05403b2feN.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0c0224c888beb5ad401da63c45bed663d0df2e048bc73370d1b132e05403b2feN.dll
Resource
win10v2004-20241007-en
General
-
Target
0c0224c888beb5ad401da63c45bed663d0df2e048bc73370d1b132e05403b2feN
-
Size
11KB
-
MD5
186de4275954883fb834023c440db3b0
-
SHA1
5c505fa2492fb8d40719652444d37243b9e51ac7
-
SHA256
0c0224c888beb5ad401da63c45bed663d0df2e048bc73370d1b132e05403b2fe
-
SHA512
f35c489eb780989f6ead81ad71c940480af88d39ccb8f189f7335d502efe5d175cfbce210c720a8c20730293a3e6e49f50b133e97220d84a07dc09daaad685b1
-
SSDEEP
192:2mCQyX3UlPP+WLZmvK4X82bJam9qOYD3zke:2oVBHFINbFE3zke
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c0224c888beb5ad401da63c45bed663d0df2e048bc73370d1b132e05403b2feN
Files
-
0c0224c888beb5ad401da63c45bed663d0df2e048bc73370d1b132e05403b2feN.dll windows:5 windows x86 arch:x86
b5916d1dbd13e0798c24a8a4c260ccc1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
DeleteFileA
IsBadReadPtr
CreateFileA
ReadFile
CloseHandle
CreateThread
GetModuleHandleA
SetFilePointer
lstrcpyA
TerminateProcess
WriteFile
WideCharToMultiByte
Sleep
GetTempPathA
VirtualProtect
LoadLibraryA
GetModuleFileNameA
GetCurrentProcess
ws2_32
closesocket
send
connect
WSAStartup
htons
inet_addr
socket
WSACleanup
wininet
InternetOpenA
HttpOpenRequestA
HttpSendRequestW
InternetReadFile
InternetConnectA
InternetCloseHandle
psapi
GetModuleFileNameExW
msvcrt
memset
_stricmp
strchr
strrchr
memcpy
atol
sprintf
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 766B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ