1.6
低危

dfc2924e6435def431ae0be57fa55fe2bec58c8556a561b0f2680f9bc0090bf9

4312a284f30a17b6d04c7605fd5a8c31.exe

分析耗时

39s

最近分析

文件大小

3.7MB
静态报毒 动态报毒
鹰眼引擎
未检测 暂无鹰眼引擎检测结果
静态判定
反病毒引擎
未检测 暂无反病毒引擎检测结果
可视化分析
二进制图像
暂无二进制图像 该样本未生成二进制可视化图像
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2012-11-01 19:53:44

Imports

Library SHLWAPI.dll:
0x40838c SHGetValueA
0x408390 PathFileExistsA
Library MFC42.DLL:
0x40807c
0x408080
0x408084
0x408088
0x40808c
0x408090
0x408094
0x408098
0x40809c
0x4080a0
0x4080a4
0x4080a8
0x4080ac
0x4080b0
0x4080b4
0x4080b8
0x4080bc
0x4080c0
0x4080c4
0x4080c8
0x4080cc
0x4080d0
0x4080d4
0x4080d8
0x4080dc
0x4080e0
0x4080e4
0x4080e8
0x4080ec
0x4080f0
0x4080f4
0x4080f8
0x4080fc
0x408100
0x408104
0x408108
0x40810c
0x408110
0x408114
0x408118
0x40811c
0x408120
0x408124
0x408128
0x40812c
0x408130
0x408134
0x408138
0x40813c
0x408140
0x408144
0x408148
0x40814c
0x408150
0x408154
0x408158
0x40815c
0x408160
0x408164
0x408168
0x40816c
0x408170
0x408174
0x408178
0x40817c
0x408180
0x408184
0x408188
0x40818c
0x408190
0x408194
0x408198
0x40819c
0x4081a0
0x4081a4
0x4081a8
0x4081ac
0x4081b0
0x4081b4
0x4081b8
0x4081bc
0x4081c0
0x4081c4
0x4081c8
0x4081cc
0x4081d0
0x4081d4
0x4081d8
0x4081dc
0x4081e0
0x4081e4
0x4081e8
0x4081ec
0x4081f0
0x4081f4
0x4081f8
0x4081fc
0x408200
0x408204
0x408208
0x40820c
0x408210
0x408214
0x408218
0x40821c
0x408220
0x408224
0x408228
0x40822c
0x408230
0x408234
0x408238
0x40823c
0x408240
0x408244
0x408248
0x40824c
0x408250
0x408254
0x408258
0x40825c
0x408260
0x408264
0x408268
0x40826c
0x408270
0x408274
0x408278
0x40827c
0x408280
0x408284
0x408288
0x40828c
0x408290
0x408294
0x408298
0x40829c
0x4082a0
0x4082a4
0x4082a8
0x4082ac
0x4082b0
0x4082b4
0x4082b8
0x4082bc
0x4082c0
0x4082c4
0x4082c8
0x4082cc
0x4082d0
0x4082d4
0x4082d8
0x4082dc
0x4082e0
0x4082e4
0x4082e8
0x4082ec
0x4082f0
0x4082f4
0x4082f8
0x4082fc
0x408300
0x408304
0x408308
0x40830c
0x408310
0x408314
Library MSVCRT.dll:
0x40831c _controlfp
0x408320 _except_handler3
0x408324 __set_app_type
0x408328 __p__fmode
0x40832c __p__commode
0x408330 _adjust_fdiv
0x408334 __setusermatherr
0x408338 _initterm
0x40833c __getmainargs
0x408340 _acmdln
0x408344 _setmbcp
0x408348 _strupr
0x40834c _strcmpi
0x408350 _exit
0x408354 _XcptFilter
0x408358 __CxxFrameHandler
0x40835c sprintf
0x408360 strrchr
0x408364 exit
0x408368 _beginthread
0x40836c strstr
0x408370 fclose
0x408374 fgets
0x408378 fopen
0x40837c strtol
0x408380 __dllonexit
0x408384 _onexit
Library KERNEL32.dll:
0x408040 GetVersionExA
0x408044 GetSystemDirectoryA
0x40804c WinExec
0x408054 DeleteFileA
0x408058 Sleep
0x40805c CreateMutexA
0x408060 GetLastError
0x408064 GetProcAddress
0x408068 GetModuleHandleA
0x40806c GetStartupInfoA
0x408070 GetModuleFileNameA
0x408074 MoveFileA
Library USER32.dll:
0x408398 LoadMenuA
0x40839c DrawIcon
0x4083a0 IsIconic
0x4083a4 SetForegroundWindow
0x4083a8 KillTimer
0x4083ac GetSystemMenu
0x4083b0 AppendMenuA
0x4083b4 FindWindowA
0x4083b8 ShowWindow
0x4083bc SendMessageA
0x4083c0 LoadCursorA
0x4083c4 SetCursor
0x4083c8 GetSystemMetrics
0x4083cc GetWindowRect
0x4083d0 SetTimer
0x4083d4 EnableWindow
0x4083d8 GetClientRect
0x4083dc IsWindow
0x4083e0 InvalidateRect
0x4083e4 LoadImageA
0x4083e8 PostMessageA
0x4083ec GetWindowLongA
0x4083f0 SetWindowLongA
0x4083f4 RedrawWindow
0x4083f8 LoadIconA
Library GDI32.dll:
0x408020 StretchBlt
0x408024 CreateSolidBrush
0x408028 CreateCompatibleDC
0x40802c SelectObject
0x408030 BitBlt
0x408034 GetObjectA
0x408038 DeleteObject
Library ADVAPI32.dll:
0x408000 RegCloseKey
0x408004 RegQueryValueExA
0x408008 RegSetValueExA
0x40800c RegOpenKeyA
Library COMCTL32.dll:
0x408018 _TrackMouseEvent

Hosts

No hosts contacted.

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 50534 114.114.114.114 53
192.168.56.101 51963 114.114.114.114 53
192.168.56.101 55368 114.114.114.114 53
192.168.56.101 60123 114.114.114.114 53
192.168.56.101 60384 114.114.114.114 53
192.168.56.101 137 192.168.56.255 137
192.168.56.101 138 192.168.56.255 138
192.168.56.101 123 20.189.79.72 time.windows.com 123
192.168.56.101 49713 224.0.0.252 5355
192.168.56.101 51378 224.0.0.252 5355
192.168.56.101 51808 224.0.0.252 5355
192.168.56.101 53237 224.0.0.252 5355
192.168.56.101 56804 224.0.0.252 5355
192.168.56.101 62191 224.0.0.252 5355
192.168.56.101 62318 224.0.0.252 5355
192.168.56.101 63429 224.0.0.252 5355
192.168.56.101 65004 224.0.0.252 5355
192.168.56.101 1900 239.255.255.250 1900
192.168.56.101 51379 239.255.255.250 3702
192.168.56.101 55369 239.255.255.250 3702

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.