D:\Jenkins\.jenkins\workspace\master_lu\inst_ui\inst_ui\Release\单词风暴_b015226917.pdb
Static task
static1
Behavioral task
behavioral1
Sample
04354e78c4092bd874be23227f12b16a21a1d4b30c9a790845f99c8bda21a34d.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
04354e78c4092bd874be23227f12b16a21a1d4b30c9a790845f99c8bda21a34d.exe
Resource
win10v2004-20241007-en
General
-
Target
04354e78c4092bd874be23227f12b16a21a1d4b30c9a790845f99c8bda21a34d
-
Size
5.4MB
-
MD5
fbff26875521d685e4b4a3621d08924c
-
SHA1
72720d6845d381460545613d4c203dea62465c50
-
SHA256
04354e78c4092bd874be23227f12b16a21a1d4b30c9a790845f99c8bda21a34d
-
SHA512
0909ab40c5e4137adce8b63850d1d2f184c5f125b5cbb02929e1a141c1428e44ef3afab4b5cddd8c948daa320a3dbbe89f1848154505a6ec8bc2f694d4fae9b6
-
SSDEEP
98304:YpTSnAWfADmVwKQWTacPJ/XQuPFfybqxb1Dfb/yy38iH/pw1XSIfUEbnUme0/ao/:mGA1DmbT3d5Z/y+EfUEAaaNkP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04354e78c4092bd874be23227f12b16a21a1d4b30c9a790845f99c8bda21a34d
Files
-
04354e78c4092bd874be23227f12b16a21a1d4b30c9a790845f99c8bda21a34d.exe windows:6 windows x86 arch:x86
7528c6fa6e50b11c85c6d043d7885b65
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SendMessageW
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
oleaut32
VariantInit
dbghelp
MakeSureDirectoryPathExists
vcruntime140
_except_handler4_common
api-ms-win-crt-string-l1-1-0
strcmp
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
api-ms-win-crt-heap-l1-1-0
calloc
api-ms-win-crt-locale-l1-1-0
_unlock_locales
api-ms-win-crt-math-l1-1-0
modf
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-time-l1-1-0
_localtime64_s
api-ms-win-crt-filesystem-l1-1-0
_wsplitpath_s
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-conio-l1-1-0
_getch
winmm
timeGetTime
wldap32
ord127
wtsapi32
WTSSendMessageW
Exports
Exports
TitanSDK_AddHttpHeaderBypassKey
TitanSDK_AsyncOpenSession
TitanSDK_CloseSession
TitanSDK_CloseSwarm
TitanSDK_GetDownloadUrl
TitanSDK_GetFlow
TitanSDK_GetFlowDone
TitanSDK_GetVodUrl
TitanSDK_OnNetworkChanged
TitanSDK_OpenSwarm
TitanSDK_PlayQuality
TitanSDK_PlayStatistics
TitanSDK_SetListenPort
TitanSDK_SetPauseTimeout
TitanSDK_SetSleepTimeout
TitanSDK_SetStartCallback
TitanSDK_SetToken
TitanSDK_SetWorkspace
TitanSDK_Start
TitanSDK_Stop
pthreadCancelableTimedWait
pthreadCancelableWait
pthread_attr_destroy
pthread_attr_getdetachstate
pthread_attr_getinheritsched
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_setdetachstate
pthread_attr_setinheritsched
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_init
pthread_barrier_wait
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setpshared
pthread_create
pthread_delay_np
pthread_detach
pthread_equal
pthread_exit
pthread_getconcurrency
pthread_getschedparam
pthread_getspecific
pthread_getunique_np
pthread_getw32threadhandle_np
pthread_getw32threadid_np
pthread_join
pthread_key_create
pthread_key_delete
pthread_kill
pthread_mutex_consistent
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_timedlock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getkind_np
pthread_mutexattr_getpshared
pthread_mutexattr_getrobust
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setkind_np
pthread_mutexattr_setpshared
pthread_mutexattr_setrobust
pthread_mutexattr_settype
pthread_num_processors_np
pthread_once
pthread_rwlock_destroy
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_setcancelstate
pthread_setcanceltype
pthread_setconcurrency
pthread_setschedparam
pthread_setspecific
pthread_spin_destroy
pthread_spin_init
pthread_spin_lock
pthread_spin_trylock
pthread_spin_unlock
pthread_testcancel
pthread_timechange_handler_np
pthread_win32_process_attach_np
pthread_win32_process_detach_np
pthread_win32_test_features_np
pthread_win32_thread_attach_np
pthread_win32_thread_detach_np
ptw32_get_exception_services_code
ptw32_pop_cleanup
ptw32_push_cleanup
sched_get_priority_max
sched_get_priority_min
sched_getscheduler
sched_setscheduler
sched_yield
sem_close
sem_destroy
sem_getvalue
sem_init
sem_open
sem_post
sem_post_multiple
sem_timedwait
sem_trywait
sem_unlink
sem_wait
Sections
.text Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 601KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.inx0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.inx1 Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ