DNF_SET_AHK.zip
- SHA256 13fef450b1de98bc22dfd4b4af48e91f250daa9b3ce4d8f4c2220cf2914828d6
Overview
overview
7Static
static
7DNF_SET_AHK/AHK.exe
windows10-2004-x64
3DNF_SET_AHK/AHK.exe
windows11-ltsc_2024-x64
3DNF_SET_AH...HK.exe
windows10-2004-x64
5DNF_SET_AH...HK.exe
windows11-ltsc_2024-x64
5DNF_SET_AH...HK.dll
windows10-2004-x64
5DNF_SET_AH...HK.dll
windows11-ltsc_2024-x64
5DNF_SET_AH...HK.exe
windows10-2004-x64
5DNF_SET_AH...HK.exe
windows11-ltsc_2024-x64
5DNF_SET_AHK/upx.exe
windows10-2004-x64
5DNF_SET_AHK/upx.exe
windows11-ltsc_2024-x64
5DNF_SET_AH...�.html
windows10-2004-x64
3DNF_SET_AH...�.html
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
DNF_SET_AHK/AHK.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
DNF_SET_AHK/AHK.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
DNF_SET_AHK/SET_AHK.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
DNF_SET_AHK/SET_AHK.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
DNF_SET_AHK/SET_AHK.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
DNF_SET_AHK/SET_AHK.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral7
Sample
DNF_SET_AHK/SET_AHK.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
DNF_SET_AHK/SET_AHK.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
DNF_SET_AHK/upx.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
DNF_SET_AHK/upx.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
DNF_SET_AHK/更多系统软件下载.html
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral12
Sample
DNF_SET_AHK/更多系统软件下载.html
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
General
- Target DNF_SET_AHK.zip
- Size 850KB
- Sample260730-blsrfahh98
- SHA256 13fef450b1de98bc22dfd4b4af48e91f250daa9b3ce4d8f4c2220cf2914828d6
- MD5 6fa6589946d7eab250e93c31e9b97147
- SHA1 3b7802521c16c4c8a2c86eac8e6df0cca10f29da
- SHA512 dd774065972d3b110b8bfef917d032bb852ed3984b53bd8cbd1b23daf5e5e947634e5c7339fbf20767b7c071880aeeb9e7ea0828ad0f03bea07b9110d6e8380b
- SSDEEP 24576:YE35RlqwhfTeZpfvrnHj6afplMMXfBz4W95E3EthfTejWL:VVTfmvrn2KvXZdC07fqu
- TLSH T1C305333D38EC7658640FAC72892021D48DFC760F78CADCC51DA956D5398B7039A9BB17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/DNF_SET_AHK/SET_AHK.dll acprotect -
resource yara_rule static1/unpack001/DNF_SET_AHK/SET_AHK.dll upx static1/unpack001/DNF_SET_AHK/SET_AHK.exe upx static1/unpack001/DNF_SET_AHK/upx.exe upx - Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
resource unpack001/DNF_SET_AHK/AHK.exe unpack001/DNF_SET_AHK/SET_AHK.bin unpack001/DNF_SET_AHK/SET_AHK.dll unpack002/out.upx unpack001/DNF_SET_AHK/SET_AHK.exe unpack003/out.upx unpack001/DNF_SET_AHK/upx.exe
File Explorer
-
DNF_SET_AHK.zip.zip 850KB
-
DNF_SET_AHK/AHK.exe.exe 412KB
-
DNF_SET_AHK/DNF_AHK.ini62B
-
DNF_SET_AHK/SET_AHK.bin.exe 411KB
-
DNF_SET_AHK/SET_AHK.dll.dll 56KB
-
out.upx.dll 112KB
-
DNF_SET_AHK/SET_AHK.exe.exe 29KB
-
out.upx.exe 104KB
-
DNF_SET_AHK/config/剑魂.ini226B
-
DNF_SET_AHK/config/默认.ini218B
-
DNF_SET_AHK/upx.exe.exe 283KB
-
DNF_SET_AHK/使用说明.txt1KB
-
DNF_SET_AHK/更多系统软件下载.html.html 427B
DNF_SET_AHK/AHK.exe
- IMPHASH 8cb987c79d5402d49bbd4392cc7a1ada
- SHA256 c37d43d92c3ce2a128c78413fa4cb29db51bc57dbac64790b5e8aa7b63eac83b
- MD5 784427fe03b49c97dd924fcc24d7f5c1
- SHA1 a9a86297f71699c3d13c074df1d85f370fc49f30
- SHA512 f7c69e7cc7b8da5d473fca4f9582c45eba974ec95593507becd80f34af18c1145d65100948ffcf043603f421ff02e7008b7a4810c5958b89bc92e9d6c16664a3
- SSDEEP 12288:5NIQAPGsAqY9IMVYd38sJdpQHlGlY8KfTu:uPGSY91VwNJcFMqTu
- TLSH T14494BF1634A188F3CC4284B10AAAAF70BBF7DA30083519D3EBD5DD897E695D19B1E317
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
273231
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
wsock32
WSAStartup
gethostname
gethostbyname
inet_addr
WSACleanup
winmm
mixerSetControlDetails
joyGetPosEx
mciSendStringA
joyGetDevCapsA
waveOutGetVolume
mixerGetLineControlsA
mixerGetControlDetailsA
mixerGetLineInfoA
mixerOpen
mixerGetDevCapsA
mixerClose
waveOutSetVolume
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
comctl32
ord6
ImageList_AddMasked
ord17
ImageList_GetIconSize
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
kernel32
Beep
MultiByteToWideChar
SetEnvironmentVariableA
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
CreateProcessA
MulDiv
ReadFile
GetFileSize
CreateFileA
GetEnvironmentVariableA
DeviceIoControl
GetFileAttributesA
CreateDirectoryA
WriteFile
GlobalSize
GetDateFormatA
GetLocalTime
GetSystemTime
GetComputerNameA
GetWindowsDirectoryA
GetTempPathA
GetFullPathNameA
GetShortPathNameA
SetLastError
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetExitCodeProcess
ReadProcessMemory
WriteProcessMemory
TerminateProcess
SetPriorityClass
MoveFileA
GetCurrentProcessId
GetTimeFormatA
GetDiskFreeSpaceA
SetErrorMode
SetVolumeLabelA
GetVolumeInformationA
GetDriveTypeA
DeleteFileA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
FreeLibrary
LoadLibraryA
CompareStringA
RemoveDirectoryA
CopyFileA
GetCurrentProcess
GetPrivateProfileStringA
WritePrivateProfileStringA
FormatMessageA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
SystemTimeToFileTime
FileTimeToSystemTime
GetStartupInfoA
HeapSize
HeapFree
HeapReAlloc
ExitProcess
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
OutputDebugStringA
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
DeleteCriticalSection
GetVersionExA
CreateThread
SetThreadPriority
GetExitCodeThread
CloseHandle
CreateMutexA
GetLastError
lstrcmpiA
GetCurrentThreadId
GlobalUnlock
GlobalAlloc
GlobalLock
GlobalFree
InitializeCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetCurrentDirectoryA
GetModuleHandleA
GetProcAddress
Sleep
SetCurrentDirectoryA
GetTickCount
LCMapStringA
LCMapStringW
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetFilePointer
GetCommandLineA
GetStringTypeA
GetStringTypeW
FlushFileBuffers
GetLocaleInfoA
VirtualProtect
GetSystemInfo
SetStdHandle
QueryPerformanceCounter
OpenProcess
SetEndOfFile
user32
SetWindowTextA
IsWindowVisible
GetWindowRect
GetQueueStatus
SetWindowRgn
SetForegroundWindow
IsIconic
GetWindowTextLengthA
GetDlgItem
MessageBeep
EnumClipboardFormats
ClientToScreen
GetCaretPos
GetCursor
MoveWindow
SetActiveWindow
EnumChildWindows
SetFocus
EnableWindow
InvalidateRect
SetWindowPos
EnumWindows
ReleaseDC
GetDC
GetIconInfo
SetDlgItemTextA
SendDlgItemMessageA
IsZoomed
DefWindowProcA
FillRect
GetSysColorBrush
GetSysColor
RegisterWindowMessageA
DialogBoxParamA
GetMenuStringA
GetSubMenu
GetMenuItemID
GetMenuItemCount
IsWindowEnabled
ExitWindowsEx
RedrawWindow
CallWindowProcA
CheckRadioButton
MapWindowPoints
PtInRect
SetMenu
UpdateWindow
IntersectRect
DefDlgProcA
GetClassLongA
GetMessagePos
FlashWindow
SetMenuDefaultItem
AppendMenuA
DestroyMenu
IsMenu
RemoveMenu
SetMenuItemInfoA
CreatePopupMenu
CreateMenu
SetRect
GetDesktopWindow
GetMenu
DrawIconEx
GetWindow
GetTopWindow
BringWindowToTop
LoadImageA
EnableMenuItem
DestroyWindow
DestroyIcon
ChangeClipboardChain
IsCharAlphaA
AttachThreadInput
WindowFromPoint
GetSystemMetrics
mouse_event
GetKeyNameTextA
GetAsyncKeyState
GetCursorPos
MapVirtualKeyA
VkKeyScanExA
GetKeyboardState
SetKeyboardState
GetWindowTextA
PostQuitMessage
CharUpperA
UnregisterHotKey
RegisterHotKey
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
CallNextHookEx
GetKeyboardLayout
ToAsciiEx
CharLowerA
IsCharAlphaNumericA
IsCharLowerA
IsCharUpperA
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardFormatNameA
GetClipboardData
CloseClipboard
FindWindowA
PostMessageA
SetTimer
GetMessageA
GetFocus
GetForegroundWindow
GetWindowThreadProcessId
GetClassNameA
PeekMessageA
GetKeyState
GetWindowLongA
SendMessageA
IsDialogMessageA
ShowWindow
CountClipboardFormats
DrawTextA
AdjustWindowRectEx
SystemParametersInfoA
GetClientRect
MessageBoxA
SendMessageTimeoutA
LoadCursorA
RegisterClassExA
CreateWindowExA
LoadAcceleratorsA
TrackPopupMenuEx
SetClipboardViewer
ScreenToClient
SetWindowLongA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CopyImage
CheckMenuItem
IsWindow
EndDialog
KillTimer
GetDlgCtrlID
GetParent
IsClipboardFormatAvailable
keybd_event
gdi32
ExcludeClipRect
GetClipRgn
FillRgn
SetTextColor
SetBkColor
SetBkMode
GetObjectA
EnumFontFamiliesExA
GetClipBox
CreateCompatibleBitmap
BitBlt
GetPixel
CreateCompatibleDC
GetDIBits
GetSystemPaletteEntries
CreateEllipticRgn
CreateRoundRectRgn
CreateRectRgn
CreatePolygonRgn
CreateSolidBrush
CreateDCA
GetDeviceCaps
GetStockObject
SelectObject
GetTextFaceA
GetTextMetricsA
CreateFontA
DeleteObject
DeleteDC
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenSCManagerA
LockServiceDatabase
UnlockServiceDatabase
CloseServiceHandle
GetUserNameA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegCloseKey
RegConnectRegistryA
shell32
DragQueryPoint
SHFileOperationA
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteExA
Shell_NotifyIconA
DragQueryFileA
DragFinish
ExtractIconA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
Name
.text
Size
354KB
Virtual Size
353KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=26, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=117, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=2, id=95, version=2179,
count=1, id=28, version=9178,
count=2, id=93, version=2067,
count=3, id=11, version=8966,
count=4, id=25, version=9210,
count=19, id=93, version=2179,
count=363, id=1, productName=Unmarked objects,
count=26, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
DNF_SET_AHK/DNF_AHK.ini
- SHA256 979175903525dbad984fab40e8728d041ca8eb2fb15dfed266d37326ad937175
- MD5 4d50b43ff7c2cce2b911d53484d0ad15
- SHA1 72c9e5fbbcdd96a924265b384e706818a21b9f94
- SHA512 83c1191dd21a923a8b9b1670e448d14159d57fced8c026aa0ee68aa0c163314e7c3973f9f63353e190619b2f010aae02907b96100b6f796828dbe6d24e17649b
- TLSH T12AA0024B954961D1D0C0D20859315D86411FC555CDB4A0880644517B75E092C01ED091
- MD5 SHA1 SHA512 TLSH
DNF_SET_AHK/SET_AHK.bin
- IMPHASH 8cb987c79d5402d49bbd4392cc7a1ada
- SHA256 fd94547a057f8631d05938eb91d9372f4a03798bf920b06303ef21dea6998960
- MD5 87519b8270a024aa0c02d406d3c4876b
- SHA1 4ee45a44310c5cbe5b15f46ba1b1c748a8c2a69a
- SHA512 33a81daebae2f27dcf704b78e0a7aad3e901bdf840f56f64f4a822dd95deb12ee998547950348d850442b2535bae6f66b0b217f4b1aad19e4ef023e6a3127f48
- SSDEEP 12288:ZNIQAPGsAqY9IMVYd38sJdpQHlGlY8KfT:OPGSY91VwNJcFMqT
- TLSH T13F94BF1634A188F3CC4284B10AAAAF70BBF7DA30083519D3EBD5DD897E695D19B1E317
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
273231
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
wsock32
WSAStartup
gethostname
gethostbyname
inet_addr
WSACleanup
winmm
mixerSetControlDetails
joyGetPosEx
mciSendStringA
joyGetDevCapsA
waveOutGetVolume
mixerGetLineControlsA
mixerGetControlDetailsA
mixerGetLineInfoA
mixerOpen
mixerGetDevCapsA
mixerClose
waveOutSetVolume
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
comctl32
ord6
ImageList_AddMasked
ord17
ImageList_GetIconSize
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
kernel32
Beep
MultiByteToWideChar
SetEnvironmentVariableA
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
CreateProcessA
MulDiv
ReadFile
GetFileSize
CreateFileA
GetEnvironmentVariableA
DeviceIoControl
GetFileAttributesA
CreateDirectoryA
WriteFile
GlobalSize
GetDateFormatA
GetLocalTime
GetSystemTime
GetComputerNameA
GetWindowsDirectoryA
GetTempPathA
GetFullPathNameA
GetShortPathNameA
SetLastError
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetExitCodeProcess
ReadProcessMemory
WriteProcessMemory
TerminateProcess
SetPriorityClass
MoveFileA
GetCurrentProcessId
GetTimeFormatA
GetDiskFreeSpaceA
SetErrorMode
SetVolumeLabelA
GetVolumeInformationA
GetDriveTypeA
DeleteFileA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
FreeLibrary
LoadLibraryA
CompareStringA
RemoveDirectoryA
CopyFileA
GetCurrentProcess
GetPrivateProfileStringA
WritePrivateProfileStringA
FormatMessageA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
SystemTimeToFileTime
FileTimeToSystemTime
GetStartupInfoA
HeapSize
HeapFree
HeapReAlloc
ExitProcess
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
OutputDebugStringA
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
DeleteCriticalSection
GetVersionExA
CreateThread
SetThreadPriority
GetExitCodeThread
CloseHandle
CreateMutexA
GetLastError
lstrcmpiA
GetCurrentThreadId
GlobalUnlock
GlobalAlloc
GlobalLock
GlobalFree
InitializeCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetCurrentDirectoryA
GetModuleHandleA
GetProcAddress
Sleep
SetCurrentDirectoryA
GetTickCount
LCMapStringA
LCMapStringW
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetFilePointer
GetCommandLineA
GetStringTypeA
GetStringTypeW
FlushFileBuffers
GetLocaleInfoA
VirtualProtect
GetSystemInfo
SetStdHandle
QueryPerformanceCounter
OpenProcess
SetEndOfFile
user32
SetWindowTextA
IsWindowVisible
GetWindowRect
GetQueueStatus
SetWindowRgn
SetForegroundWindow
IsIconic
GetWindowTextLengthA
GetDlgItem
MessageBeep
EnumClipboardFormats
ClientToScreen
GetCaretPos
GetCursor
MoveWindow
SetActiveWindow
EnumChildWindows
SetFocus
EnableWindow
InvalidateRect
SetWindowPos
EnumWindows
ReleaseDC
GetDC
GetIconInfo
SetDlgItemTextA
SendDlgItemMessageA
IsZoomed
DefWindowProcA
FillRect
GetSysColorBrush
GetSysColor
RegisterWindowMessageA
DialogBoxParamA
GetMenuStringA
GetSubMenu
GetMenuItemID
GetMenuItemCount
IsWindowEnabled
ExitWindowsEx
RedrawWindow
CallWindowProcA
CheckRadioButton
MapWindowPoints
PtInRect
SetMenu
UpdateWindow
IntersectRect
DefDlgProcA
GetClassLongA
GetMessagePos
FlashWindow
SetMenuDefaultItem
AppendMenuA
DestroyMenu
IsMenu
RemoveMenu
SetMenuItemInfoA
CreatePopupMenu
CreateMenu
SetRect
GetDesktopWindow
GetMenu
DrawIconEx
GetWindow
GetTopWindow
BringWindowToTop
LoadImageA
EnableMenuItem
DestroyWindow
DestroyIcon
ChangeClipboardChain
IsCharAlphaA
AttachThreadInput
WindowFromPoint
GetSystemMetrics
mouse_event
GetKeyNameTextA
GetAsyncKeyState
GetCursorPos
MapVirtualKeyA
VkKeyScanExA
GetKeyboardState
SetKeyboardState
GetWindowTextA
PostQuitMessage
CharUpperA
UnregisterHotKey
RegisterHotKey
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
CallNextHookEx
GetKeyboardLayout
ToAsciiEx
CharLowerA
IsCharAlphaNumericA
IsCharLowerA
IsCharUpperA
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardFormatNameA
GetClipboardData
CloseClipboard
FindWindowA
PostMessageA
SetTimer
GetMessageA
GetFocus
GetForegroundWindow
GetWindowThreadProcessId
GetClassNameA
PeekMessageA
GetKeyState
GetWindowLongA
SendMessageA
IsDialogMessageA
ShowWindow
CountClipboardFormats
DrawTextA
AdjustWindowRectEx
SystemParametersInfoA
GetClientRect
MessageBoxA
SendMessageTimeoutA
LoadCursorA
RegisterClassExA
CreateWindowExA
LoadAcceleratorsA
TrackPopupMenuEx
SetClipboardViewer
ScreenToClient
SetWindowLongA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CopyImage
CheckMenuItem
IsWindow
EndDialog
KillTimer
GetDlgCtrlID
GetParent
IsClipboardFormatAvailable
keybd_event
gdi32
ExcludeClipRect
GetClipRgn
FillRgn
SetTextColor
SetBkColor
SetBkMode
GetObjectA
EnumFontFamiliesExA
GetClipBox
CreateCompatibleBitmap
BitBlt
GetPixel
CreateCompatibleDC
GetDIBits
GetSystemPaletteEntries
CreateEllipticRgn
CreateRoundRectRgn
CreateRectRgn
CreatePolygonRgn
CreateSolidBrush
CreateDCA
GetDeviceCaps
GetStockObject
SelectObject
GetTextFaceA
GetTextMetricsA
CreateFontA
DeleteObject
DeleteDC
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenSCManagerA
LockServiceDatabase
UnlockServiceDatabase
CloseServiceHandle
GetUserNameA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegCloseKey
RegConnectRegistryA
shell32
DragQueryPoint
SHFileOperationA
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteExA
Shell_NotifyIconA
DragQueryFileA
DragFinish
ExtractIconA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
Name
.text
Size
354KB
Virtual Size
353KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=26, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=117, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=2, id=95, version=2179,
count=1, id=28, version=9178,
count=2, id=93, version=2067,
count=3, id=11, version=8966,
count=4, id=25, version=9210,
count=19, id=93, version=2179,
count=363, id=1, productName=Unmarked objects,
count=26, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
DNF_SET_AHK/SET_AHK.dll
- SHA256 a8ca5f48cc4e3260d182425dd3c1ea4c0a58ad53d99211dd4ca09197a2751d4e
- MD5 86f93cfc135fe78091a3707278aff56b
- SHA1 04b7cc720e93e3bbc5ece769f3400e4a3163b494
- SHA512 34d03c42b945038dd306b9d9a8f413f0756837b3045a8ba05777df31db3c01e667a4b35774c9db7172d5640326bc2c88538472ea3dd4fcacc3c19f0dd47e974d
- SSDEEP 1536:6AdrMPJgX+i0+UbT6nAnGnnEL4+REtGXlJ52G:6ADX1RUbOnqGnDcEWJIG
- TLSH T16C430258A2B910DFE092963D02A0679E7CCEAB2EC342E9025BE8801C7777FB11F51903
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
189184
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
_Convert@24
Name
UPX0
Size
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
53KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=3, id=12, version=7291,
count=23, id=14, version=7299,
count=133, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=11, version=8047,
count=3, id=11, version=8966,
count=9, id=19, version=8034,
count=116, id=1, productName=Unmarked objects,
count=19, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
out.upx
- SHA256 f6c27af6f559791f37043331f03635b5bea2f7b21823e117e8ddcb21f8f891c2
- MD5 2ceebd99f3124871651ded02fcd0073f
- SHA1 590e3ceb4b996047b93e4ecb0ee7169ec7d3eac8
- SHA512 60621346d180b8ed232eb97ede8c200d5a91af58e8dcfa3aacdf6824289cdb7797a98822fc9d7596d76be1fece1b0d94672010f8f0cd37673ff12e80b59c2569
- SSDEEP 1536:WuZLPFr7ANwG/XVvlcc1+AYVAhXvVY7KPTngpEXbHXCp0tB6pw8H1XI:WcLdrg/X5lcccAYm9WerHS9VXI
- TLSH T107B3AF1272D0C4B2E7E9617D00AF5B36873F6780066299D7CB38DD745F336A2A726287
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50248
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
86KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=12, version=7291,
count=23, id=14, version=7299,
count=133, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=11, version=8047,
count=3, id=11, version=8966,
count=9, id=19, version=8034,
count=116, id=1, productName=Unmarked objects,
count=19, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
DNF_SET_AHK/SET_AHK.exe
- SHA256 ce1913cc55226672d9496b82787afd475cbbbcc6f21f8aaab94458fe6a64cd48
- MD5 e296966d9fdfdec22af2b2e1e15b4c23
- SHA1 7fff3b8b570e9d844ccf76b7261cbcc54d65b558
- SHA512 673876bc6661cb12d2a5d05ceceed9efddf349b23dd86aed24e1c11a529a6bf59f5b8053de9d36907aaf3b6b948f285748a2f24d3bc5bdfcbb66350cb0eb4918
- SSDEEP 768:XXD4czXlWn1T62dHi1f+li+MA2HG/I0w:s+Vu62dHcA2Ys
- TLSH T10ED2C0DF7FE02E03F056B63A243A9A12123AF47107AE4E7DCE456A739D909589F0613C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
111792
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
26KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=2, id=9, version=8783,
count=1, id=13, version=9782,
out.upx
- SHA256 23db65b5614d6b6cd2da7041683ce8075a899602c1a3ddaf815e68619eccf294
- MD5 9619ad0858addc16386feab7e5377b12
- SHA1 f629c88104321e6451bc902730d628889f28b772
- SHA512 d738d5c5cfe5979c35f1f7d44a7bfbea00df221fdbaffe18bf44c7d3b004f98cf17a4f70b3870338c6f0a2655913b651d40c64d825ed6b8f3915c7b43cf27019
- SSDEEP 1536:hOa55DLW4xmb32kgPrdXWJX90awxLavWgE0tyC1S:HDi732k0dGJX90aALPgLt
- TLSH T130A3B717EE34A51AE95284F02835D58EB9267C72944CBD4773926F883071A93FCFA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6868
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
88KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=2, id=9, version=8783,
count=1, id=13, version=9782,
DNF_SET_AHK/config/剑魂.ini
- SHA256 741b624c8a9d0707cdce33057dcb5969e9e3e8325966b7a8cf3d7a3fad606940
- MD5 344bbe6f5e4e7f245fa60cab6d8188e3
- SHA1 b04d40760e11645ba35e693af5375b58f8e8bc39
- SHA512 3d11eab620aac5384efd641268ca688fbc087dffaf56edac7ed27e73df243240605b2cdf3dfadb643562321fcbe9a822af3c514592aaa7c75641fe5a69711b97
- TLSH T144D0A78980C65A3D181F27A3C3250B5C8DDC5150A1271AC5A0EE8FC16E585C658EC1F3
- MD5 SHA1 SHA512 TLSH
DNF_SET_AHK/config/默认.ini
- SHA256 cb87b7e3673503968fcb86091196f9656e94715af8b9161cacb8b831542b0682
- MD5 26cbf1fe6862a603afe38e0acb522b22
- SHA1 f34012a4d0f79f3770666b6da2214e8e73f2b020
- SHA512 c0f6b74a6eeebcbdae52bb43cdaa487698baccf70d61d7e250acb9a9d5a92ce7a1f35fde0d2f699585bf470fa6fea74313212cdd32812f688a7c56ce1b350c01
- TLSH T120D0A744D06B433E69471215C33517DA54690094552767E8E0A84E89FD3404F9CF9093
- MD5 SHA1 SHA512 TLSH
DNF_SET_AHK/upx.exe
- SHA256 c0f9faffdf14ab2c853880457be19a237b10f8986755f184ecfe21670076cb35
- MD5 308f709a8f01371a6dd088a793e65a5f
- SHA1 a07c073d807ab0119b090821ee29edaae481e530
- SHA512 c107f1af768d533d02fb82ae2ed5c126c63b53b11a2e5a5bbf45e396cb7796ca4e7984ce969b487ad38d817f4d4366e7953fb555b279aa019ffb5d1bbba57e28
- SSDEEP 6144:EBgzKMDrn1MUQ8Kr4eNyJf2EycBqABfpV6xSyQy9CZ07Yf+1+ujToS:v5rn6JfXCjUafpVeDQyUXfW+u/oS
- TLSH T1EB5423980AF63084F47B437A88856729D149A36F9EF04ACE6CCC179D3DB74252F2913B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1555024
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
Name
UPX0
Size
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
281KB
Virtual Size
284KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
DNF_SET_AHK/使用说明.txt
- SHA256 f581f774c48d20cce55ac117e59957bad8337ca7e279839734194c7381860ad9
- MD5 b1c62376899c993ace7403f10b10cb0e
- SHA1 213c1f524bd530097a3778454b1ed943129809e2
- SHA512 42013de117ee36bd5f0243b39b1c6e452793d24f20ac08be30ffe5e6a978469e0a3e66e93e1be7cf4e03e535a3841d39324098b88f2647d580fd6a4e12a39481
- TLSH T1B3212219E51B4D45E32A8848E574A2F5D530C942A84CE95FF16D7841DF1D7CE34D1478
- MD5 SHA1 SHA512 TLSH
DNF_SET_AHK/更多系统软件下载.html
- SHA256 a8add497b0fd990c838e8dd29bdf41cb99754ebf09f88abb5ad9766c8e3f9ed3
- MD5 4159db156d26f656ce9182059b1cf3ba
- SHA1 9a93344d014f17231f9f353bb3aaf4d91011c176
- SHA512 186d3ea857082bc8aeaf512d3d51a73c5d8b8754d4195d1c8410c626ce9b94374a9013835c2d67922a00106d50721d783a97bef27ab835632466fcedf10030c4
- TLSH T1F1E0ABBD62129D4983B1EFB430F6E3520402D582B9C500CDE04030DBADDB309E593393
- MD5 SHA1 SHA512 TLSH