E:\WSL\资料\项目\ManualReJudgeMent需求\版本修改\ManualReJudgeMent-V1.1.80.1.35\ManualReJudgeMent-V1.1.80.1.35\Debug\ManualReJudgeMent.pdb
Static task
static1
Behavioral task
behavioral1
Sample
00392990f47b6bb1c21c3a3d13377cb2e8a8de95fbd04745c09e8055c36c6542.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00392990f47b6bb1c21c3a3d13377cb2e8a8de95fbd04745c09e8055c36c6542.exe
Resource
win10v2004-20241007-en
General
-
Target
00392990f47b6bb1c21c3a3d13377cb2e8a8de95fbd04745c09e8055c36c6542
-
Size
2.7MB
-
MD5
996fd816274baf4457037bf18042acec
-
SHA1
db43a071f184737e5d47da7484da7e76bc4532f0
-
SHA256
00392990f47b6bb1c21c3a3d13377cb2e8a8de95fbd04745c09e8055c36c6542
-
SHA512
cea7883712a41ea2fe73a088845b3c7e18d2f0a4c5153400eb563065b8403b85a4e42d38a8cdec7a7c38bcdf8c21c37d37ac80ef64b3dc9146bd104d0cfb4cca
-
SSDEEP
49152:o2s5LNSNUelbZ/7mXUHc6PfJna6/jz/x:AINR+UBaa7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00392990f47b6bb1c21c3a3d13377cb2e8a8de95fbd04745c09e8055c36c6542
Files
-
00392990f47b6bb1c21c3a3d13377cb2e8a8de95fbd04745c09e8055c36c6542.exe windows:5 windows x86 arch:x86
e55d50de4c7f725cbfe7d80da98100cd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
libzkfp
ZKFPM_CloseDevice
ZKFPM_SetParameters
ZKFPM_DBInit
ZKFPM_Terminate
ZKFPM_GetParameters
ZKFPM_OpenDevice
ZKFPM_Init
ZKFPM_AcquireFingerprint
ZKFPM_DBMatch
ZKFPM_DBFree
ZKFPM_DBAdd
ZKFPM_Base64ToBlob
ZKFPM_DBClear
ZKFPM_DBIdentify
kernel32
LocalReAlloc
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FileTimeToLocalFileTime
GetLastError
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
SizeofResource
LockResource
LoadResource
CreateMutexW
CreateThread
GetModuleFileNameW
GetModuleHandleW
Sleep
FileTimeToSystemTime
GlobalUnlock
GlobalLock
GlobalAlloc
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
GetTickCount64
GetTickCount
InterlockedDecrement
GetLocalTime
lstrlenW
CreateDirectoryW
GetPrivateProfileStringW
CloseHandle
WaitForSingleObject
InterlockedIncrement
HeapFree
GetProcessHeap
FreeLibrary
LocalFree
LocalAlloc
FormatMessageW
SetLastError
LoadLibraryW
GlobalSize
CopyFileW
GlobalFree
OpenEventA
SetEnvironmentVariableA
CreateFileA
GetConsoleOutputCP
WriteConsoleA
GetDriveTypeA
GetFullPathNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
HeapReAlloc
HeapSize
HeapAlloc
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
SetConsoleCtrlHandler
FatalAppExitA
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
GetFileType
SetStdHandle
GetModuleFileNameA
ExitThread
ExitProcess
IsBadReadPtr
HeapValidate
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
RtlUnwind
GetStartupInfoW
GetDiskFreeSpaceW
GetTempFileNameW
FindResourceExW
WaitForMultipleObjects
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreW
GetCurrentDirectoryW
GetProfileIntW
VirtualProtect
GlobalFlags
lstrlenA
TlsGetValue
MulDiv
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
SetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesW
DeleteCriticalSection
InitializeCriticalSection
ResetEvent
PulseEvent
SetErrorMode
GetAtomNameW
GetShortPathNameW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetFullPathNameW
GetVolumeInformationW
DeleteFileW
MoveFileW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetCurrentProcess
DuplicateHandle
GetHandleInformation
FindNextFileW
FindFirstFileW
FindClose
GetModuleHandleA
SystemTimeToFileTime
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentProcessId
CreateEventW
SetEvent
CompareStringA
lstrcmpA
GetCurrentThread
GetLocaleInfoW
ConvertDefaultLocale
EnumResourceLanguagesW
CompareStringW
LoadLibraryA
GetVersionExW
lstrcmpW
GetCurrentThreadId
GlobalGetAtomNameW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExA
SuspendThread
ResumeThread
GetThreadPriority
SetThreadPriority
GetProcAddress
FreeResource
OpenFileMappingA
user32
UnpackDDElParam
GetClipboardFormatNameW
GetClipboardFormatNameA
ReleaseCapture
SetRectEmpty
GetAsyncKeyState
SystemParametersInfoW
DestroyMenu
GetDialogBaseUnits
CharUpperW
GetWindowThreadProcessId
SetCursor
GetCursorPos
GetMessageW
TranslateMessage
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectW
LoadMenuW
ModifyMenuW
InsertMenuItemW
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
DeleteMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringW
GetTabbedTextExtentW
DrawTextExW
DrawTextW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateW
DrawIcon
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
SetWindowTextW
IsDialogMessageW
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GetMenuCheckMarkDimensions
LoadBitmapW
SetMenuItemBitmaps
RegisterWindowMessageW
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
SendDlgItemMessageW
SendDlgItemMessageA
GetSysColor
DispatchMessageW
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
WinHelpW
TrackPopupMenuEx
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
GetKeyState
GetDlgCtrlID
SetWindowsHookExW
CallNextHookEx
GetClassLongW
LoadAcceleratorsW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
TabbedTextOutW
OpenIcon
CloseWindow
LoadIconW
LoadCursorW
PostThreadMessageW
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
MapDialogRect
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageW
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
GetParent
IsChild
GetLastActivePopup
GetWindow
GetTopWindow
FindWindowExW
FindWindowW
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExW
DlgDirSelectExW
DlgDirListComboBoxW
DlgDirListW
GetFocus
SetCapture
GetCapture
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
ArrangeIconicWindows
SetWindowRgn
GetWindowRgn
BringWindowToTop
GetWindowRect
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
ValidateRect
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
WaitMessage
DestroyIcon
TranslateAcceleratorW
ReuseDDElParam
GetMenuBarInfo
CharNextW
CopyAcceleratorTableW
EndPaint
BeginPaint
MessageBeep
MsgWaitForMultipleObjects
UnregisterClassW
RegisterClipboardFormatW
InSendMessage
IsClipboardFormatAvailable
IsRectEmpty
GetTabbedTextExtentA
GetClassNameW
MoveWindow
ShowWindow
PostQuitMessage
PostMessageW
PeekMessageW
GetDesktopWindow
GetMenuItemID
InsertMenuW
AppendMenuW
GetMenuStringW
PeekMessageA
IsWindowUnicode
GetMessageA
DispatchMessageA
SubtractRect
UnionRect
InflateRect
SetRect
PtInRect
GetMenuState
GetSubMenu
GetMenuItemCount
IsMenu
RemoveMenu
GetSystemMetrics
GetClientRect
MapWindowPoints
ClientToScreen
ScreenToClient
IsIconic
HiliteMenuItem
GetSystemMenu
DrawMenuBar
DragDetect
MapVirtualKeyW
GetKeyNameTextW
SendMessageW
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
EnableWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
IsZoomed
gdi32
GetDeviceCaps
CreateDCW
CopyMetaFileW
GetDIBColorTable
GetObjectW
SetDIBColorTable
DeleteDC
CreateDIBSection
CreateCompatibleDC
SelectObject
StretchBlt
DeleteObject
SetStretchBltMode
CreateDIBPatternBrushPt
CreateFontIndirectW
CreateFontW
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateCompatibleBitmap
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreateICW
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
GetNearestColor
RealizePalette
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetGraphicsMode
GetWorldTransform
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
RectVisible
GetCurrentPositionEx
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
Rectangle
RoundRect
PatBlt
BitBlt
GetPixel
SetPixel
FloodFill
ExtFloodFill
CreateEnhMetaFileW
GetTextExtentPoint32W
CreateMetaFileW
GetTextFaceW
GetTextMetricsW
GetTextCharacterExtra
GetCharWidthW
GetFontLanguageInfo
GetCharacterPlacementW
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCW
GetOutlineTextMetricsW
GetCharABCWidthsW
GetFontData
GetKerningPairsW
GetGlyphOutlineW
StartDocW
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatW
GetCharWidthFloatW
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
PlayEnhMetaFile
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
StretchDIBits
EnumFontFamiliesExW
DeleteMetaFile
GetTextAlign
CloseMetaFile
CloseEnhMetaFile
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
GetStockObject
UnrealizeObject
GetObjectType
CreatePen
CreatePenIndirect
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateBrushIndirect
TextOutW
ExtTextOutW
CreatePatternBrush
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
GetJobW
advapi32
SetThreadToken
GetFileSecurityW
SetFileSecurityW
RegCreateKeyW
RegDeleteValueW
RegSetValueExW
OpenThreadToken
RevertToSelf
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyW
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW
RegQueryValueExW
RegSetValueW
shell32
ShellExecuteW
SHGetFileInfoW
ExtractIconW
DragFinish
DragQueryFileW
DragAcceptFiles
comctl32
InitCommonControlsEx
shlwapi
PathFileExistsW
PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathIsDirectoryW
UrlUnescapeW
PathRemoveFileSpecW
oledlg
OleUIPasteSpecialW
OleUIUpdateLinksW
OleUIChangeIconW
OleUIConvertW
OleUIInsertObjectW
OleUIBusyW
OleUIEditLinksW
ole32
CoLockObjectExternal
GetRunningObjectTable
IsAccelerator
OleTranslateAccelerator
CreateDataAdviseHolder
CreateOleAdviseHolder
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleRegGetMiscStatus
OleRegEnumVerbs
DoDragDrop
OleSetMenuDescriptor
OleGetClipboard
OleQueryLinkFromData
OleQueryCreateFromData
OleIsRunning
OleSaveToStream
WriteClassStm
OleGetIconOfClass
GetHGlobalFromILockBytes
StgIsStorageILockBytes
OleSave
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
OleLockRunning
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CoGetMalloc
GetClassFile
CreateFileMoniker
CreateGenericComposite
CreateItemMoniker
OleFlushClipboard
OleSetClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CoDisconnectObject
StringFromGUID2
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoTaskMemFree
OleDuplicateData
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
CoInitialize
CreateStreamOnHGlobal
CoUninitialize
CoUnmarshalInterface
CoReleaseMarshalData
CoMarshalInterface
oleaut32
RegisterTypeLi
OleCreateFontIndirect
LoadTypeLi
LoadRegTypeLi
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
SafeArrayCreate
SafeArrayRedim
VarUdateFromDate
OleLoadPicture
SysFreeString
VariantClear
SysAllocString
VariantCopy
VariantInit
SysAllocStringByteLen
SafeArrayGetDim
VarDateFromStr
CreateErrorInfo
VariantChangeType
SysStringLen
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarDateFromUdate
SystemTimeToVariantTime
GetErrorInfo
SetErrorInfo
SysStringByteLen
gdiplus
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipFree
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdiplusShutdown
ws2_32
gethostbyname
WSAStartup
WSAGetLastError
select
recvfrom
sendto
socket
closesocket
inet_ntoa
WSACleanup
wininet
FtpCreateDirectoryW
FtpRenameFileW
FtpDeleteFileW
InternetConnectW
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetGetCookieW
InternetSetCookieW
InternetSetStatusCallbackW
InternetSetOptionExW
InternetOpenUrlW
InternetCloseHandle
InternetOpenW
InternetQueryOptionW
InternetCanonicalizeUrlW
InternetCrackUrlW
FtpSetCurrentDirectoryW
FtpGetCurrentDirectoryW
FtpOpenFileW
FtpCommandW
FtpPutFileW
FtpGetFileW
GopherCreateLocatorW
GopherGetAttributeW
GopherOpenFileW
HttpOpenRequestW
InternetErrorDlg
HttpAddRequestHeadersW
HttpSendRequestW
HttpEndRequestW
HttpSendRequestExW
HttpQueryInfoW
FtpFindFirstFileW
InternetFindNextFileW
GopherFindFirstFileW
InternetGetLastResponseInfoW
GopherGetLocatorTypeW
FtpRemoveDirectoryW
Sections
.textbss Size: - Virtual size: 1016KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 1024B - Virtual size: 793B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ