SmartHawk

0.6

低危

该样本未表现出任何异常！

重新分析

下载样本

2db0758d60d1e61b6c69778283df5dde77c84cc771b29953c9821433f348b336

471cc802e8c51fe22eaa3a5e348bf904.exe

分析耗时

17s

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析

⚡ 行为特征

🛡️ 防护建议

🔧 技术手段

🎯 检测方法

🤖

Static Analysis
Strings

PE Compile Time

2020-09-01 02:54:03

Imports

Library KERNEL32.dll:

• 0x429088 lstrcmpW

• 0x42908c GlobalFindAtomA

• 0x429090 GlobalAddAtomA

• 0x429094 WritePrivateProfileStringA

• 0x429098 GlobalFlags

• 0x42909c GetCPInfo

• 0x4290a0 GetOEMCP

• 0x4290a4 ReadFile

• 0x4290a8 WriteFile

• 0x4290ac SetFilePointer

• 0x4290b0 FlushFileBuffers

• 0x4290b4 GetCurrentProcess

• 0x4290b8 CreateFileA

• 0x4290bc RtlUnwind

• 0x4290c0 RaiseException

• 0x4290c4 HeapReAlloc

• 0x4290c8 VirtualAlloc

• 0x4290cc GetStartupInfoA

• 0x4290d0 HeapSize

• 0x4290d4 TerminateProcess

• 0x4290d8 UnhandledExceptionFilter

• 0x4290dc SetUnhandledExceptionFilter

• 0x4290e0 IsDebuggerPresent

• 0x4290e4 GetACP

• 0x4290e8 GetStringTypeA

• 0x4290ec GetStringTypeW

• 0x4290f0 LCMapStringA

• 0x4290f4 LCMapStringW

• 0x4290f8 VirtualFree

• 0x4290fc HeapDestroy

• 0x429100 HeapCreate

• 0x429104 GetStdHandle

• 0x429108 Sleep

• 0x42910c FreeEnvironmentStringsA

• 0x429110 GetEnvironmentStrings

• 0x429114 FreeEnvironmentStringsW

• 0x429118 GetEnvironmentStringsW

• 0x42911c SetHandleCount

• 0x429120 GetFileType

• 0x429124 QueryPerformanceCounter

• 0x429128 GetTickCount

• 0x42912c GetSystemTimeAsFileTime

• 0x429130 GetUserDefaultLCID

• 0x429134 EnumSystemLocalesA

• 0x429138 IsValidLocale

• 0x42913c IsValidCodePage

• 0x429140 GetConsoleCP

• 0x429144 GetConsoleMode

• 0x429148 GetLocaleInfoW

• 0x42914c SetStdHandle

• 0x429150 WriteConsoleA

• 0x429154 GetConsoleOutputCP

• 0x429158 WriteConsoleW

• 0x42915c GetThreadLocale

• 0x429160 GlobalGetAtomNameA

• 0x429164 InterlockedIncrement

• 0x429168 InterlockedDecrement

• 0x42916c GetModuleFileNameW

• 0x429170 TlsFree

• 0x429174 DeleteCriticalSection

• 0x429178 LocalReAlloc

• 0x42917c TlsSetValue

• 0x429180 TlsAlloc

• 0x429184 InitializeCriticalSection

• 0x429188 GlobalHandle

• 0x42918c GlobalReAlloc

• 0x429190 EnterCriticalSection

• 0x429194 TlsGetValue

• 0x429198 LeaveCriticalSection

• 0x42919c LocalAlloc

• 0x4291a0 GetCurrentProcessId

• 0x4291a4 GetCurrentThread

• 0x4291a8 GetCurrentThreadId

• 0x4291ac ConvertDefaultLocale

• 0x4291b0 EnumResourceLanguagesA

• 0x4291b4 GetLocaleInfoA

• 0x4291b8 lstrcmpA

• 0x4291bc GlobalDeleteAtom

• 0x4291c0 SetErrorMode

• 0x4291c4 GetModuleFileNameA

• 0x4291c8 GlobalFree

• 0x4291cc GlobalAlloc

• 0x4291d0 GlobalLock

• 0x4291d4 GlobalUnlock

• 0x4291d8 FormatMessageA

• 0x4291dc LocalFree

• 0x4291e0 SetLastError

• 0x4291e4 FreeLibrary

• 0x4291e8 lstrlenA

• 0x4291ec CompareStringA

• 0x4291f0 GetVersion

• 0x4291f4 MultiByteToWideChar

• 0x4291f8 InterlockedExchange

• 0x4291fc ExitProcess

• 0x429200 GetCommandLineA

• 0x429204 GetModuleHandleA

• 0x429208 GetProcessHeap

• 0x42920c HeapAlloc

• 0x429210 HeapFree

• 0x429214 OpenProcess

• 0x429218 CloseHandle

• 0x42921c LoadLibraryA

• 0x429220 GetProcAddress

• 0x429224 GetWindowsDirectoryA

• 0x429228 GetLastError

• 0x42922c WideCharToMultiByte

• 0x429230 FindResourceA

• 0x429234 LoadResource

• 0x429238 LockResource

• 0x42923c SizeofResource

• 0x429240 GetVersionExA

Library USER32.dll:

• 0x429274 DestroyMenu

• 0x429278 EnableMenuItem

• 0x42927c CheckMenuItem

• 0x429280 GetMessageA

• 0x429284 TranslateMessage

• 0x429288 GetActiveWindow

• 0x42928c GetCursorPos

• 0x429290 ValidateRect

• 0x429294 RegisterWindowMessageA

• 0x429298 LoadIconA

• 0x42929c WinHelpA

• 0x4292a0 GetCapture

• 0x4292a4 SetWindowsHookExA

• 0x4292a8 CallNextHookEx

• 0x4292ac GetClassLongA

• 0x4292b0 GetClassNameA

• 0x4292b4 SetPropA

• 0x4292b8 GetPropA

• 0x4292bc RemovePropA

• 0x4292c0 GetFocus

• 0x4292c4 IsWindow

• 0x4292c8 GetForegroundWindow

• 0x4292cc DispatchMessageA

• 0x4292d0 GetDlgItem

• 0x4292d4 GetTopWindow

• 0x4292d8 DestroyWindow

• 0x4292dc GetMessageTime

• 0x4292e0 GetMessagePos

• 0x4292e4 PeekMessageA

• 0x4292e8 MapWindowPoints

• 0x4292ec GetKeyState

• 0x4292f0 IsWindowVisible

• 0x4292f4 GetClientRect

• 0x4292f8 GetMenu

• 0x4292fc CreateWindowExA

• 0x429300 GetClassInfoExA

• 0x429304 GetClassInfoA

• 0x429308 RegisterClassA

• 0x42930c AdjustWindowRectEx

• 0x429310 CopyRect

• 0x429314 PtInRect

• 0x429318 GetDlgCtrlID

• 0x42931c DefWindowProcA

• 0x429320 CallWindowProcA

• 0x429324 SetWindowLongA

• 0x429328 SetWindowPos

• 0x42932c SystemParametersInfoA

• 0x429330 IsIconic

• 0x429334 GetWindowPlacement

• 0x429338 GetWindowRect

• 0x42933c GetWindow

• 0x429340 ClientToScreen

• 0x429344 GrayStringA

• 0x429348 DrawTextExA

• 0x42934c DrawTextA

• 0x429350 TabbedTextOutA

• 0x429354 GetWindowTextA

• 0x429358 ShowWindow

• 0x42935c LoadCursorA

• 0x429360 GetSystemMetrics

• 0x429364 GetDC

• 0x429368 ReleaseDC

• 0x42936c GetSysColor

• 0x429370 GetSysColorBrush

• 0x429374 UnhookWindowsHookEx

• 0x429378 GetWindowThreadProcessId

• 0x42937c SendMessageA

• 0x429380 GetParent

• 0x429384 GetWindowLongA

• 0x429388 GetLastActivePopup

• 0x42938c IsWindowEnabled

• 0x429390 UnregisterClassA

• 0x429394 SetWindowTextA

• 0x429398 SetCursor

• 0x42939c SetMenuItemBitmaps

• 0x4293a0 GetMenuCheckMarkDimensions

• 0x4293a4 LoadBitmapA

• 0x4293a8 SetForegroundWindow

• 0x4293ac ModifyMenuA

• 0x4293b0 GetSubMenu

• 0x4293b4 GetMenuItemCount

• 0x4293b8 GetMenuItemID

• 0x4293bc GetMenuState

• 0x4293c0 EnableWindow

• 0x4293c4 MessageBoxA

• 0x4293c8 PostMessageA

• 0x4293cc PostQuitMessage

Library iphlpapi.dll:

• 0x4293f8 GetTcpTable

• 0x4293fc GetUdpTable

• 0x429400 SetTcpEntry

Library WS2_32.dll:

• 0x4293e4 htons

• 0x4293e8 inet_addr

• 0x4293ec inet_ntoa

• 0x4293f0 ntohs

Library PSAPI.DLL:

• 0x429258 EnumProcessModules

• 0x42925c GetModuleBaseNameA

• 0x429260 EnumProcesses

Library SHLWAPI.dll:

• 0x429268 PathFindExtensionA

• 0x42926c PathFindFileNameA

Library GDI32.dll:

• 0x429028 PtVisible

• 0x42902c DeleteDC

• 0x429030 CreateBitmap

• 0x429034 GetStockObject

• 0x429038 SaveDC

• 0x42903c RestoreDC

• 0x429040 SetBkColor

• 0x429044 ScaleWindowExtEx

• 0x429048 SetTextColor

• 0x42904c SetMapMode

• 0x429050 GetClipBox

• 0x429054 SetWindowExtEx

• 0x429058 ScaleViewportExtEx

• 0x42905c SetViewportExtEx

• 0x429060 OffsetViewportOrgEx

• 0x429064 SetViewportOrgEx

• 0x429068 SelectObject

• 0x42906c Escape

• 0x429070 ExtTextOutA

• 0x429074 TextOutA

• 0x429078 GetDeviceCaps

• 0x42907c DeleteObject

• 0x429080 RectVisible

Library WINSPOOL.DRV:

• 0x4293d4 DocumentPropertiesA

• 0x4293d8 OpenPrinterA

• 0x4293dc ClosePrinter

Library ADVAPI32.dll:

• 0x429000 RegQueryValueA

• 0x429004 RegEnumKeyA

• 0x429008 RegDeleteKeyA

• 0x42900c RegSetValueExA

• 0x429010 RegCreateKeyExA

• 0x429014 RegOpenKeyExA

• 0x429018 RegQueryValueExA

• 0x42901c RegOpenKeyA

• 0x429020 RegCloseKey

Library OLEAUT32.dll:

• 0x429248 VariantClear

• 0x42924c VariantChangeType

• 0x429250 VariantInit

Hosts

No hosts contacted.

DNS

No domains contacted.

TCP

No TCP connections recorded.

UDP

No UDP connections recorded.

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.

Sorry! No dropped buffers.