����CALL
����·CALL
ȡ����CALL
��������
Behavioral task
behavioral1
Sample
龙神5.16免费版/3KM2.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
龙神5.16免费版/3KM2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
龙神5.16免费版/SKY.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
龙神5.16免费版/SKY.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
龙神5.16免费版/龍神辅助免费2013.exe
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
龙神5.16免费版/龍神辅助免费2013.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
龙神5.16免费版/龙神辅助官网.url
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
龙神5.16免费版/龙神辅助官网.url
Resource
win10v2004-20241007-en
Target
93827acad3e7a19ef2ffa0d49a270474_JaffaCakes118
Size
2.2MB
MD5
93827acad3e7a19ef2ffa0d49a270474
SHA1
edf3dcdd3d0b997c094ee250083db0d3a6d8ca35
SHA256
b7cbf65667ecb8abde3b7953fc24056ef9cfdf70cbf9b680d5a602904a6d46e6
SHA512
4ca6921f74216765d436e190c30e59d86f51fd91bb5a0e3c6f1315e78e967f2f303d2e03f3e9a18e81154b7e5bf74aef9fa79cdf3b3927ca930cc5ed824a428f
SSDEEP
49152:cs96nTjbMiEy82ZhxftTr4PIqiGMfsfsf7LLekZlxHkSZF:cs96TjbMiEr29tT0PQfBfzesxE8F
Processes:
resource | yara_rule |
---|---|
static1/unpack001/龙神5.16免费版/3KM2.dll | vmprotect |
static1/unpack001/龙神5.16免费版/SKY.dll | vmprotect |
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/龙神5.16免费版/3KM2.dll |
unpack001/龙神5.16免费版/SKY.dll |
unpack001/龙神5.16免费版/龍神辅助免费2013.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
����CALL
����·CALL
ȡ����CALL
��������
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DLL�ӿ�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE