51fb7e3ce2fa72aaa4d20bee473de5d7a765f812916f9ba27619f17f39e38e0c

Sharing

Copy URL Twitter E-mail

General

Target
51fb7e3ce2fa72aaa4d20bee473de5d7a765f812916f9ba27619f17f39e38e0c
Size 2.1MB
Sample261027-jml92sct3q
SHA256 51fb7e3ce2fa72aaa4d20bee473de5d7a765f812916f9ba27619f17f39e38e0c
MD5 ead7ecb02941aacc9ebed9dc983e0008
SHA1 ea1bec5fc052403636696e5c24023927ca0dcc3f
SHA512 2938f9704da1abcf6c661e6aedf3ab0daaf420a62970ea8798ca81ff827ec0452911f90909881b4ccade57203bcab7fc468cfc7d60b881ddd5bd3daf03b63bf7
SSDEEP 49152:WeHEpnNg0vhRyYnikmUWV7lVi79pCQ1dFjBj1zi8ux5awEi:vExNrwyikmUMLWCAfj1zux8wl
TLSH
T145A5332ED6DA81F7CF67F4BD846E43A5054D2CDF736B18B39226AC3B969C518620240E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

qr link

Malware Config

Signatures

One or more HTTP URLs in qr code identified
Detects presence of HTTP links in QR codes.
qr link

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/procexp.exe
unpack001/procexp64.exe

File Explorer

51fb7e3ce2fa72aaa4d20bee473de5d7a765f812916f9ba27619f17f39e38e0c

.zip 2.1MB
jb51.net.txt

4KB
procexp.exe

.exe 1.3MB
procexp64.exe

.exe 2.3MB
关注公众号获取更多惊喜资源.jpg

.jpg 19KB
去脚本之家看看.url

124B
更新使用说明.txt

577B
服务器软件.url

112B

51fb7e3ce2fa72aaa4d20bee473de5d7a765f812916f9ba27619f17f39e38e0c

SHA256 51fb7e3ce2fa72aaa4d20bee473de5d7a765f812916f9ba27619f17f39e38e0c
MD5 ead7ecb02941aacc9ebed9dc983e0008
SHA1 ea1bec5fc052403636696e5c24023927ca0dcc3f
SHA512 2938f9704da1abcf6c661e6aedf3ab0daaf420a62970ea8798ca81ff827ec0452911f90909881b4ccade57203bcab7fc468cfc7d60b881ddd5bd3daf03b63bf7
SSDEEP 49152:WeHEpnNg0vhRyYnikmUWV7lVi79pCQ1dFjBj1zi8ux5awEi:vExNrwyikmUMLWCAfj1zux8wl
TLSH
T145A5332ED6DA81F7CF67F4BD846E43A5054D2CDF736B18B39226AC3B969C518620240E
MD5 SHA1 SHA512 SSDEEP TLSH

procexp.exe

IMPHASH 40e5756c30e8a97a052538422b8f4b5d
SHA256 5db0a6e342a668529f07ad3ed22724f1266c11e8396a046a2d4894a4da820e7d
MD5 68d9d3d2f5df39c3c5b6f792bdb0b424
SHA1 dd21010045c57195ffbf6c2042e88df57b9a3175
SHA512 8f4d555b1a50024b1dbc60bd1265ddab424159e3d26d80a936fcf91dce121d7e28f5474304572911843b828f9f88bb16ab8a040cf364e64e1061d96e115a6c9d
SSDEEP 24576:l4lcamlP3Wz5yl99wRO5+O0EhFH1OroXr1q4dvI3u1seHQ7nRGc8Be:l4lcadzsl99wOVhFVNb1Hw+SB749Be
TLSH
T19F55E09AD86D40E3C49B0F3C4D4D67793DBEBDBC6396378A4641FB1E2A201981B36076
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

115487

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

shell32

SHGetMalloc ShellExecuteExW SHGetSpecialFolderPathW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHGetPathFromIDListW

gdi32

CreateCompatibleDC CreateFontIndirectW DeleteObject DeleteDC GetCurrentObject StretchBlt GetDeviceCaps CreateCompatibleBitmap SelectObject SetStretchBltMode GetObjectW

advapi32

FreeSid AllocateAndInitializeSid CheckTokenMembership

user32

EnableMenuItem EnableWindow MessageBeep LoadIconW LoadImageW SetWindowsHookExW PtInRect CallNextHookEx DefWindowProcW CallWindowProcW DrawIconEx DialogBoxIndirectParamW GetWindow ClientToScreen GetDC DrawTextW SystemParametersInfoW SetFocus UnhookWindowsHookEx SetWindowLongW GetSystemMetrics GetClientRect GetDlgItem IsWindow GetKeyState GetSystemMenu DestroyWindow GetSysColor SetWindowTextW GetWindowTextLengthW GetWindowTextW wsprintfA GetClassNameA GetWindowLongW GetMenu GetWindowDC ReleaseDC CopyImage GetParent ScreenToClient CreateWindowExW GetDesktopWindow GetWindowRect CreateWindowExA SetTimer GetMessageW DispatchMessageW KillTimer SetWindowPos SendMessageW ShowWindow BringWindowToTop wsprintfW MessageBoxW EndDialog wvsprintfW MessageBoxA CharUpperW

ole32

CreateStreamOnHGlobal CoInitialize CoCreateInstance

oleaut32

SysFreeString VariantClear SysAllocStringLen OleLoadPicture SysAllocString

kernel32

ReadFile SetFileTime SetEndOfFile VirtualAlloc VirtualFree GetFileInformationByHandle WaitForMultipleObjects SetFilePointer GetFileSize LeaveCriticalSection EnterCriticalSection DeleteCriticalSection FormatMessageW lstrcpyW LocalFree IsBadReadPtr GetSystemDirectoryW GetCurrentThreadId SuspendThread TerminateThread InitializeCriticalSection ResetEvent SetEvent CreateEventW GetVersionExW GetModuleFileNameW GetCurrentProcess SetProcessWorkingSetSize SetEnvironmentVariableW GetDriveTypeW CreateFileW LoadLibraryA SetThreadLocale GetSystemTimeAsFileTime ExpandEnvironmentStringsW CompareFileTime WideCharToMultiByte GetTempPathW GetCurrentDirectoryW GetEnvironmentVariableW lstrcmpiW GetLocaleInfoW MultiByteToWideChar GetUserDefaultUILanguage GetSystemDefaultUILanguage GetSystemDefaultLCID lstrcmpiA GlobalAlloc GlobalFree MulDiv FindResourceExA SizeofResource LoadResource LockResource GetModuleHandleW FindFirstFileW lstrcmpW DeleteFileW FindNextFileW FindClose RemoveDirectoryW GetStdHandle WriteFile lstrlenA CreateDirectoryW GetFileAttributesW SetCurrentDirectoryW GetLocalTime SystemTimeToFileTime CreateThread GetExitCodeThread Sleep SetFileAttributesW GetDiskFreeSpaceExW SetLastError GetCommandLineW GetTickCount lstrlenW ExitProcess lstrcatW GetProcAddress CloseHandle WaitForSingleObject GetExitCodeProcess GetQueuedCompletionStatus ResumeThread SetInformationJobObject CreateIoCompletionPort AssignProcessToJobObject CreateJobObjectW GetLastError CreateProcessW GetStartupInfoW GetStartupInfoA

msvcrt

malloc ?terminate@@YAXXZ ??3@YAXPAX@Z _purecall ??2@YAPAXI@Z _wtol memset memmove memcpy _wcsnicmp strncpy wcsncpy wcsncmp strncmp ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z _beginthreadex _CxxThrowException wcsstr free realloc _except_handler3 __dllonexit _onexit ??1type_info@@UAE@XZ _c_exit _exit _XcptFilter _cexit exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp

procexp64.exe

IMPHASH 0eeb370fc645e9c036c0531402cbea67
SHA256 b4dc1d3d205736ae7e72cf53f67748d5395a54a19b168e6b073a1b1de736a080
MD5 41dee637d786bb70c35fd4c637d942f5
SHA1 f47c1865fa08b4ce42cb0d5a8e236ac113a79de9
SHA512 0904bc4b640daa967f1d964d475f122712f02cf6b71cbd6fb15fceccb8ff1dc47c6436158b72aeec4b4fa4b84c38de7b527899fde4dbf07f23f02040b6bd30f6
SSDEEP 49152:r/SoWFTGeaX1N5eVibmRKzQSBgZGjbSi1c5:f/5kSiGj2+I
TLSH
T145B59E5393EC41E5E07B8674885A8227FEF17C190B74A6DF0645FA0E2F336C25A76722
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

950976

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

C:\__w\1\s\exe\x64\Release\procexp64.pdb

shlwapi

ColorRGBToHLS ColorHLSToRGB SHAutoComplete StrCmpIW PathIsNetworkPathW UrlUnescapeW StrStrIW ord176

iphlpapi

GetExtendedTcpTable GetExtendedUdpTable

ws2_32

htons htonl ntohl WSAStartup getservbyport gethostbyaddr ntohs

mpr

WNetGetConnectionW

comctl32

ImageList_ReplaceIcon ImageList_Add InitCommonControlsEx ImageList_Destroy ImageList_DrawEx ImageList_GetIconSize ImageList_Create ImageList_AddMasked ImageList_BeginDrag ImageList_EndDrag ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ord17 PropertySheetW CreateStatusWindowW CreatePropertySheetPageW ImageList_GetIcon ord410 ord413

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

credui

CredUIPromptForCredentialsW

setupapi

SetupDiGetDeviceInterfaceDetailW SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInterfaces

crypt32

CertDuplicateCertificateContext CertGetNameStringW

aclui

ord1

powrprof

IsPwrSuspendAllowed SetSuspendState IsPwrHibernateAllowed

wtsapi32

WTSQuerySessionInformationW WTSEnumerateSessionsW WTSSendMessageW WTSLogoffSession WTSFreeMemory WTSDisconnectSession

uxtheme

CloseThemeData OpenThemeData EnableThemeDialogTexture SetWindowTheme GetThemePartSize DrawThemeBackground

ntdll

NtQueryObject NtOpenSymbolicLinkObject NtQuerySystemInformation NtSetInformationProcess NtQueryInformationProcess VerSetConditionMask NtUnloadDriver NtLoadDriver NtQuerySymbolicLinkObject NtOpenKey NtQueryInformationThread NtQuerySection NtSuspendThread NtResumeThread NtResumeProcess NtOpenThread RtlCreateQueryDebugBuffer RtlQueryProcessDebugInformation RtlDestroyQueryDebugBuffer NtQuerySemaphore NtQueryEvent NtCreateKey RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext NtQueryMutant NtSuspendProcess RtlUnwind

gdi32

CreateRectRgnIndirect CreateSolidBrush DeleteDC GetBkColor GetBkMode GetDeviceCaps CreateDIBSection LineTo RectInRegion SelectClipRgn SelectObject SetBkColor SetDCPenColor SetBkMode SetTextColor GetTextMetricsW MoveToEx Polyline ExtTextOutW SetViewportOrgEx CreateCompatibleDC GetTextExtentPoint32W Rectangle SetTextAlign TextOutW SetMapMode StartDocW EndDoc StartPage EndPage CreateBitmap CreatePatternBrush ExcludeClipRect GetCurrentObject PatBlt Polygon GetTextExtentExPointW RestoreDC SaveDC SetROP2 CreatePen CreateCompatibleBitmap BitBlt DeleteObject CreateFontIndirectW GetObjectW GetStockObject

comdlg32

ChooseColorW GetSaveFileNameW GetOpenFileNameW CommDlgExtendedError ChooseFontW PrintDlgW FindTextW

kernel32

CreateFileW FileTimeToLocalFileTime GetFileSize GetFileTime GetFullPathNameW GetLongPathNameW WriteFile CloseHandle GetLastError SetErrorMode InitializeCriticalSection Sleep GetCurrentProcess ExitThread TlsAlloc TlsSetValue CreateProcessW OpenProcess GetVersion GetSystemWindowsDirectoryW CreateFileMappingW MapViewOfFile UnmapViewOfFile IsWow64Process GetSystemWow64DirectoryW GetModuleFileNameW GetModuleHandleW GetProcAddress LocalFree FormatMessageA lstrlenW FileTimeToSystemTime GetDateFormatW GetTimeFormatW GetLocaleInfoW GetNumberFormatW CreateToolhelp32Snapshot Process32FirstW LCMapStringW FindFirstFileW GetFileAttributesW GetPrivateProfileStringW FreeLibrary LoadLibraryExW ReadFile MultiByteToWideChar FindClose FindNextFileW EnterCriticalSection LeaveCriticalSection SetEvent WaitForSingleObject CreateEventW WaitForMultipleObjects GetCurrentThread HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap CreateThread GetExitCodeThread FindResourceExW LoadResource LockResource SizeofResource FindResourceW SetLastError GetVersionExW SetEnvironmentVariableW LoadLibraryW GetTickCount MulDiv GlobalAddAtomW GlobalAlloc GlobalUnlock GlobalLock GetPrivateProfileIntW RaiseException InitializeCriticalSectionEx DeleteCriticalSection GetCurrentThreadId DeleteFileW GetTempFileNameW GetTempPathW GetThreadId FormatMessageW GetCommandLineW GetFileType LocalAlloc TerminateThread GlobalReAlloc Module32FirstW Module32NextW GetSystemTime GetSystemTimeAsFileTime SystemTimeToFileTime IsBadStringPtrW OpenEventW VerifyVersionInfoW GetEnvironmentVariableW ReadProcessMemory lstrcmpiW GetSystemDirectoryW SearchPathW SetFilePointer GetCurrentProcessId VirtualQueryEx QueryFullProcessImageNameW OpenThread SuspendThread ResumeThread GetThreadContext Thread32First Thread32Next QueryPerformanceCounter QueryPerformanceFrequency ResetEvent IsBadReadPtr TerminateProcess SetPriorityClass ProcessIdToSessionId GetProcessId GlobalMemoryStatusEx GetLogicalProcessorInformation SetProcessWorkingSetSize GlobalFree PulseEvent GetComputerNameW WTSGetActiveConsoleSessionId GetCurrentDirectoryW GetDiskFreeSpaceExW GetDriveTypeW GetVolumeInformationW GetVolumePathNameW OutputDebugStringW DuplicateHandle DeviceIoControl GetProcessInformation GetWindowsDirectoryW VirtualAlloc VirtualFree GetProcessWorkingSetSize TrySubmitThreadpoolCallback IsProcessInJob CreateJobObjectW QueryInformationJobObject GetThreadGroupAffinity SetThreadGroupAffinity GlobalMemoryStatus GetProcessAffinityMask SetProcessAffinityMask GetActiveProcessorGroupCount GetActiveProcessorCount WideCharToMultiByte K32GetModuleFileNameExW IsDebuggerPresent K32QueryWorkingSet DecodePointer GetStartupInfoW GetThreadIdealProcessorEx GetTickCount64 QueryThreadCycleTime SystemTimeToTzSpecificLocalTime GetNativeSystemInfo IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetConsoleMode ReadConsoleInputW GetStdHandle ReadConsoleW GetTimeZoneInformation TlsGetValue FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCPInfo WakeAllConditionVariable SleepConditionVariableSRW UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount TlsFree FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetConsoleCP GetSystemInfo VirtualProtect VirtualQuery FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringEx GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetEndOfFile WriteConsoleW GetStringTypeW TryAcquireSRWLockExclusive ExpandEnvironmentStringsW GetFileSizeEx CompareStringW AcquireSRWLockExclusive ReleaseSRWLockExclusive LoadLibraryExA FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead EncodePointer Process32NextW K32GetMappedFileNameW

user32

GetMenuItemInfoW SetMenuDefaultItem AllowSetForegroundWindow AdjustWindowRectEx MessageBeep SetCursorPos ClientToScreen WindowFromPoint SetRectEmpty GetDesktopWindow GetWindow CheckMenuRadioItem MonitorFromPoint GetWindowPlacement CheckDlgButton IsDlgButtonChecked EnableWindow ModifyMenuW TrackPopupMenu SetMenuInfo InvalidateRgn SetClassLongW EnumWindows CopyAcceleratorTableW TranslateAcceleratorW DrawMenuBar IsDialogMessageW GetMenuBarInfo ShowWindowAsync IsIconic EndTask RegisterWindowMessageW GetMessageW TranslateMessage DispatchMessageW ExitWindowsEx SetLayeredWindowAttributes CreateDialogParamW GetDlgItemTextW CreateMenu GetMenuInfo EndMenu LoadIconW LockWorkStation ChangeWindowMessageFilterEx IsHungAppWindow SendMessageTimeoutW SetDlgItemInt CheckRadioButton MsgWaitForMultipleObjects MapDialogRect GetGuiResources CharNextW MoveWindow IsChild GetSysColorBrush GetWindowTextLengthW GetWindowTextW SetWindowTextW KillTimer GetClassInfoExW UnregisterClassW RemoveMenu GetSysColor SetMenuItemInfoW DestroyMenu EmptyClipboard SetClipboardData CloseClipboard OpenClipboard GetScrollInfo SetScrollInfo GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW OffsetRect IntersectRect InflateRect CopyRect SetRect FillRect MapWindowPoints GetCursorPos GetWindowRect GetClientRect GetPropW SetPropW ScrollWindowEx ValidateRect InvalidateRect EndPaint BeginPaint UpdateWindow DrawTextW SetTimer ReleaseCapture SetCapture GetCapture GetKeyState GetFocus SetWindowPos CreateWindowExW RegisterClassExW CallWindowProcW DefWindowProcW GetParent SetDlgItemTextW PostMessageW LoadStringW ReleaseDC GetDC EnumDisplaySettingsW LoadImageW DestroyIcon LoadCursorW GetWindowThreadProcessId FindWindowExW FindWindowW SetCursor MessageBoxW SetForegroundWindow DeleteMenu InsertMenuW GetSubMenu CheckMenuItem GetMenu GetSystemMetrics SetFocus ShowWindow WaitForInputIdle SendMessageW AppendMenuW GetMenuItemCount GetMenuItemID EnableMenuItem CreatePopupMenu GetMenuStringW LoadMenuW LoadAcceleratorsW GetDlgCtrlID SetWindowPlacement IsWindow PostQuitMessage GetMessagePos PeekMessageW DrawEdge TrackMouseEvent LoadStringA DefMDIChildProcW DefFrameProcW DefDlgProcW CreateIconIndirect DestroyWindow EnumChildWindows UnionRect EndDeferWindowPos DeferWindowPos BeginDeferWindowPos DrawFrameControl DialogBoxParamW GetDlgItem EndDialog DialogBoxIndirectParamW GetAncestor GetWindowModuleFileNameW GetMonitorInfoW MonitorFromWindow SystemParametersInfoW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetClassNameW SetClassLongPtrW SetWindowLongW GetWindowLongW PtInRect FrameRect DrawFocusRect ScreenToClient TrackPopupMenuEx ShowScrollBar SetScrollPos RedrawWindow GetWindowDC IsWindowEnabled IsZoomed DrawIconEx IsWindowVisible

advapi32

AllocateAndInitializeSid DuplicateTokenEx EqualSid FreeSid GetTokenInformation ImpersonateLoggedOnUser RevertToSelf LookupAccountSidW LookupAccountNameW LookupPrivilegeValueW RegCreateKeyExW RegDeleteKeyW RegEnumKeyW RegEnumValueW RegLoadKeyW RegOpenKeyW RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegSetValueExW RegUnLoadKeyW RegQueryValueW CryptAcquireContextW CryptReleaseContext CryptGetHashParam CryptCreateHash CryptHashData AdjustTokenPrivileges RegDeleteValueW CloseServiceHandle GetServiceDisplayNameW OpenSCManagerW OpenServiceW QueryServiceConfig2W ControlService QueryServiceStatus StartServiceW RegCreateKeyW RegGetValueW MapGenericMask QueryServiceObjectSecurity SetServiceObjectSecurity StartTraceW ControlTraceW OpenTraceW ProcessTrace CloseTrace CopySid GetLengthSid QueryServiceConfigW AddAccessAllowedAce AddAce CreateRestrictedToken GetAce GetSidIdentifierAuthority GetSidSubAuthority GetSidSubAuthorityCount InitializeAcl CryptDestroyHash RegCloseKey IsValidSid SetTokenInformation GetSecurityInfo SetSecurityInfo LsaFreeMemory RegEnumKeyExW LsaClose LsaOpenPolicy LsaEnumerateAccountRights ConvertSidToStringSidW FlushTraceW RegConnectRegistryW CreateProcessAsUserW GetKernelObjectSecurity SetKernelObjectSecurity LookupPrivilegeNameW EnumServicesStatusExW OpenProcessToken

shell32

SHGetFolderPathW SHGetFileInfoW ShellExecuteW SHGetStockIconInfo SHBrowseForFolderW SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetMalloc Shell_NotifyIconW ShellExecuteExW ExtractAssociatedIconW ExtractIconExW

ole32

CoCreateInstance CoUninitialize CoTaskMemFree CoMarshalInterThreadInterfaceInStream CoInitializeEx CoSetProxyBlanket CoInitialize CoTaskMemAlloc CoTaskMemRealloc CoGetInterfaceAndReleaseStream

oleaut32

SysFreeString SysAllocString SysStringLen VarUI4FromStr SysAllocStringLen SafeArrayGetElement SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetLBound SafeArrayGetUBound SafeArrayDestroy VariantChangeType VariantClear VariantInit SysAllocStringByteLen

msimg32

GradientFill

dwmapi

DwmDefWindowProc DwmSetWindowAttribute

winhttp

WinHttpReadData WinHttpConnect WinHttpCloseHandle WinHttpOpen WinHttpGetProxyForUrl WinHttpWriteData WinHttpSetOption WinHttpQueryHeaders WinHttpReceiveResponse WinHttpOpenRequest WinHttpSendRequest WinHttpQueryDataAvailable

Sharing

General

Malware Config

Signatures

File Explorer

51fb7e3ce2fa72aaa4d20bee473de5d7a765f812916f9ba27619f17f39e38e0c

jb51.net.txt

procexp.exe

comctl32

shell32

gdi32

advapi32

user32

ole32

oleaut32

kernel32

msvcrt

generic

procexp64.exe

shlwapi

iphlpapi

ws2_32

mpr

comctl32

version

credui

setupapi

crypt32

aclui

powrprof

wtsapi32

uxtheme

ntdll

gdi32

comdlg32

kernel32

user32

advapi32

shell32

ole32

oleaut32

msimg32

dwmapi

winhttp

generic

关注公众号 获取更多惊喜资源.jpg

Extracted URLs

去脚本之家看看.url

更新使用说明.txt

服务器软件.url

关注公众号获取更多惊喜资源.jpg