2.2
中危

b7c33fe9268db79cabd1012594296e6193fc3af1dbddf85af6209191cccbe55f

ac409d6cc847837e56a676e51bf127ed.exe

分析耗时

85s

最近分析

文件大小

1.1MB
静态报毒 动态报毒
鹰眼引擎
未检测 暂无鹰眼引擎检测结果
静态判定
反病毒引擎
未检测 暂无反病毒引擎检测结果
行为判定
动态指标
Foreign language identified in PE resource (1 个事件)
name RT_VERSION language LANG_CHINESE offset 0x00034b90 filetype data sublanguage SUBLANG_CHINESE_SIMPLIFIED size 0x00000220
可视化分析
二进制图像
暂无二进制图像 该样本未生成二进制可视化图像
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2016-04-02 11:20:05

Imports

Library KERNEL32.dll:
0x407064 GetTickCount
0x407068 GetShortPathNameA
0x40706c GetFullPathNameA
0x407070 MoveFileA
0x407078 GetFileAttributesA
0x40707c SetFileAttributesA
0x407080 CompareFileTime
0x407084 SearchPathA
0x407088 GetFileSize
0x40708c GetModuleFileNameA
0x407090 GetCurrentProcess
0x407094 CopyFileA
0x407098 ExitProcess
0x4070a0 GetTempPathA
0x4070a4 Sleep
0x4070a8 lstrcmpiA
0x4070ac GetVersion
0x4070b0 SetErrorMode
0x4070b4 lstrcpynA
0x4070b8 GetDiskFreeSpaceA
0x4070bc GlobalUnlock
0x4070c0 GlobalLock
0x4070c4 CreateThread
0x4070c8 GetLastError
0x4070cc CreateDirectoryA
0x4070d0 CreateProcessA
0x4070d4 RemoveDirectoryA
0x4070d8 CreateFileA
0x4070dc GetTempFileNameA
0x4070e0 lstrcatA
0x4070e4 GetSystemDirectoryA
0x4070e8 WaitForSingleObject
0x4070ec SetFileTime
0x4070f0 CloseHandle
0x4070f4 GlobalFree
0x4070f8 lstrcmpA
0x407100 GetExitCodeProcess
0x407104 GlobalAlloc
0x407108 lstrlenA
0x40710c GetCommandLineA
0x407110 GetProcAddress
0x407114 FindFirstFileA
0x407118 FindNextFileA
0x40711c DeleteFileA
0x407120 SetFilePointer
0x407124 ReadFile
0x407128 FindClose
0x407134 WriteFile
0x407138 MulDiv
0x40713c MultiByteToWideChar
0x407140 LoadLibraryExA
0x407144 GetModuleHandleA
0x407148 FreeLibrary
Library USER32.dll:
0x40716c SetCursor
0x407170 GetWindowRect
0x407174 EnableMenuItem
0x407178 GetSystemMenu
0x40717c SetClassLongA
0x407180 IsWindowEnabled
0x407184 SetWindowPos
0x407188 GetSysColor
0x40718c EndDialog
0x407190 ScreenToClient
0x407194 LoadCursorA
0x407198 CheckDlgButton
0x40719c GetMessagePos
0x4071a0 LoadBitmapA
0x4071a4 CallWindowProcA
0x4071a8 IsWindowVisible
0x4071ac CloseClipboard
0x4071b0 SetForegroundWindow
0x4071b4 GetWindowLongA
0x4071b8 RegisterClassA
0x4071bc TrackPopupMenu
0x4071c0 AppendMenuA
0x4071c4 CreatePopupMenu
0x4071c8 GetSystemMetrics
0x4071cc SetDlgItemTextA
0x4071d0 GetDlgItemTextA
0x4071d4 MessageBoxIndirectA
0x4071d8 CharPrevA
0x4071dc DispatchMessageA
0x4071e0 PeekMessageA
0x4071e4 GetDC
0x4071e8 EnableWindow
0x4071ec InvalidateRect
0x4071f0 SendMessageA
0x4071f4 DefWindowProcA
0x4071f8 BeginPaint
0x4071fc GetClientRect
0x407200 FillRect
0x407204 DrawTextA
0x40720c CreateWindowExA
0x407210 GetClassInfoA
0x407214 DialogBoxParamA
0x407218 CharNextA
0x40721c ExitWindowsEx
0x407220 SetTimer
0x407224 PostQuitMessage
0x407228 SetWindowLongA
0x40722c SendMessageTimeoutA
0x407230 LoadImageA
0x407234 wsprintfA
0x407238 GetDlgItem
0x40723c FindWindowExA
0x407240 IsWindow
0x407244 SetClipboardData
0x407248 EmptyClipboard
0x40724c OpenClipboard
0x407250 EndPaint
0x407254 CreateDialogParamA
0x407258 DestroyWindow
0x40725c ShowWindow
0x407260 SetWindowTextA
Library GDI32.dll:
0x407040 SelectObject
0x407044 SetBkMode
0x407048 CreateFontIndirectA
0x40704c SetTextColor
0x407050 DeleteObject
0x407054 GetDeviceCaps
0x407058 CreateBrushIndirect
0x40705c SetBkColor
Library SHELL32.dll:
0x407158 SHBrowseForFolderA
0x40715c SHGetFileInfoA
0x407160 SHFileOperationA
0x407164 ShellExecuteA
Library ADVAPI32.dll:
0x407000 RegDeleteValueA
0x407004 SetFileSecurityA
0x407008 RegOpenKeyExA
0x40700c RegDeleteKeyA
0x407010 RegEnumValueA
0x407014 RegCloseKey
0x407018 RegCreateKeyExA
0x40701c RegSetValueExA
0x407020 RegQueryValueExA
0x407024 RegEnumKeyA
Library COMCTL32.dll:
0x40702c ImageList_AddMasked
0x407030 ImageList_Destroy
0x407034 ImageList_Create
0x407038
Library ole32.dll:
0x407268 OleUninitialize
0x40726c OleInitialize
0x407270 CoTaskMemFree
0x407274 CoCreateInstance

Hosts

No hosts contacted.

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 49713 114.114.114.114 53
192.168.56.101 50002 114.114.114.114 53
192.168.56.101 50568 114.114.114.114 53
192.168.56.101 53657 114.114.114.114 53
192.168.56.101 60384 114.114.114.114 53
192.168.56.101 61680 114.114.114.114 53
192.168.56.101 62318 114.114.114.114 53
192.168.56.101 137 192.168.56.255 137
192.168.56.101 138 192.168.56.255 138
192.168.56.101 123 20.189.79.72 time.windows.com 123
192.168.56.101 49235 224.0.0.252 5355
192.168.56.101 50534 224.0.0.252 5355
192.168.56.101 51808 224.0.0.252 5355
192.168.56.101 51963 224.0.0.252 5355
192.168.56.101 56804 224.0.0.252 5355
192.168.56.101 57756 224.0.0.252 5355
192.168.56.101 57874 224.0.0.252 5355
192.168.56.101 62191 224.0.0.252 5355
192.168.56.101 63429 224.0.0.252 5355
192.168.56.101 1900 239.255.255.250 1900

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.