OIU
RemovePropW
UNOIU
Overview
overview
6Static
static
3冰天加�...41.exe
windows7-x64
6冰天加�...41.exe
windows10-2004-x64
6冰天加�...ll.dll
windows7-x64
3冰天加�...ll.dll
windows10-2004-x64
3冰天加�...ll.dll
windows7-x64
3冰天加�...ll.dll
windows10-2004-x64
3冰天加�...ll.dll
windows7-x64
3冰天加�...ll.dll
windows10-2004-x64
3冰天加�...43.exe
windows7-x64
6冰天加�...43.exe
windows10-2004-x64
6访问零�...��.url
windows7-x64
1访问零�...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
冰天加速1.41免费版/BTJS1.41.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
冰天加速1.41免费版/BTJS1.41.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
冰天加速1.41免费版/ptdll.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
冰天加速1.41免费版/ptdll.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
冰天加速1.43免费版/ntdll.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
冰天加速1.43免费版/ntdll.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
冰天加速1.43免费版/ptdll.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
冰天加速1.43免费版/ptdll.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
冰天加速1.43免费版/冰天加速1.43.exe
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
冰天加速1.43免费版/冰天加速1.43.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
访问零度软件园获取更多资源.url
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
访问零度软件园获取更多资源.url
Resource
win10v2004-20241007-en
Target
3e707b70eeebd6d04ff651db37978c59_JaffaCakes118
Size
3.2MB
MD5
3e707b70eeebd6d04ff651db37978c59
SHA1
476748749d12b5dcad7a83b16bcfd980f926cd88
SHA256
2748dd4d5018568c226287ae0979dbe94aa9aa2e5801066d3c5e6eb8e5627423
SHA512
d092f91949fd7a32eaab6f704d2437ccb991c51fd3f3b6292cf42cf3205db7ed1092c7d70511d429e270e124d9d10ce6f8f556798d38b8bcbfe98489325221eb
SSDEEP
98304:fa+3M+3b+3QChVHkWFXQmEhZ7XD2unlBO:fH9AQChVH7FXeXSR
Checks for missing Authenticode signature.
resource |
---|
unpack001/冰天加速1.41免费版/BTJS1.41.exe |
unpack001/冰天加速1.41免费版/ptdll.dll |
unpack001/冰天加速1.43免费版/ntdll.dll |
unpack001/冰天加速1.43免费版/ptdll.dll |
unpack001/冰天加速1.43免费版/冰天加速1.43.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
OIU
RemovePropW
UNOIU
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
OIU
RemovePropW
UNOIU
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
OIU
RemovePropW
UNOIU
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE