1.2
低危

1610d1387c3aa74c9ec538a39489fcfc1620bab927347f577315bbb1d6fd2e55

1610d1387c3aa74c9ec538a39489fcfc1620bab927347f577315bbb1d6fd2e55.exe

分析耗时

193s

最近分析

373天前

文件大小

103.2KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN GENERICKD
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.84
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Injector-CVE [Trj] 20191124 18.4.3895.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20191124 2013.8.14.323
McAfee Dropper-FVF!F114774C1B2E 20191124 6.0.6.653
Tencent None 20191124 1.0.0.1
静态指标
行为判定
动态指标
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (3 个事件)
section {'name': '.rsrc', 'virtual_address': '0x00001000', 'virtual_size': '0x00026000', 'size_of_data': '0x00000e00', 'entropy': 7.884364792823813} entropy 7.884364792823813 description 发现高熵的节
section {'name': '.lol\\x0a\\x09\\x091', 'virtual_address': '0x0002b000', 'virtual_size': '0x000164c8', 'size_of_data': '0x00016600', 'entropy': 7.718029295169997} entropy 7.718029295169997 description 发现高熵的节
entropy 1.0 description 此PE文件的整体熵值较高
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 52 个反病毒引擎识别为恶意 (50 out of 52 个事件)
ALYac Trojan.GenericKD.40815110
APEX Malicious
AVG Win32:Injector-CVE [Trj]
Acronis suspicious
Ad-Aware Trojan.GenericKD.40815110
AhnLab-V3 Trojan/Win32.Dinwod.R247308
Arcabit Trojan.Generic.D26ECA06
Avast Win32:Injector-CVE [Trj]
Avira TR/Black.Gen2
BitDefender Trojan.GenericKD.40815110
BitDefenderTheta Gen:NN.ZexaF.32253.gqY@a06B2od
CAT-QuickHeal Trojan.Wacatac.A2.mue
ClamAV Win.Malware.Dinwod-6718271-0
Comodo TrojWare.Win32.TrojanDropper.Dinwod.XC@7u8vdc
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.c1b2e8
Cylance Unsafe
Cyren W32/S-7cb72385!Eldorado
DrWeb Trojan.Inject1.58305
ESET-NOD32 a variant of Win32/Packed.BlackMoon.A potentially unwanted
Emsisoft Trojan.GenericKD.40815110 (B)
Endgame malicious (high confidence)
F-Prot W32/S-7cb72385!Eldorado
F-Secure Trojan.TR/Black.Gen2
FireEye Generic.mg.f114774c1b2e899f
Fortinet W32/Pliskal.B!tr
GData Trojan.GenericKD.40815110
Ikarus Trojan.Win32.VMProtect
Invincea heuristic
Jiangmin Trojan.Generic.buzgq
K7AntiVirus Trojan ( 005003ac1 )
K7GW Trojan ( 005003ac1 )
Kaspersky HEUR:Trojan.Win32.Generic
MAX malware (ai score=87)
McAfee Dropper-FVF!F114774C1B2E
McAfee-GW-Edition BehavesLike.Win32.Dropper.cc
MicroWorld-eScan Trojan.GenericKD.40815110
Microsoft Trojan:Win32/Wacatac.B!ml
NANO-Antivirus Trojan.Win32.Inject1.flebwj
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM16.0.6F3B.Malware.Gen
Rising Trojan.Agent!1.B5B7 (CLASSIC)
SentinelOne DFI - Malicious PE
Sophos Troj/Agent-AZNO
Symantec ML.Attribute.HighConfidence
Trapmine malicious.high.ml.score
VBA32 TrojanDropper.Dinwod
VIPRE Trojan.Win32.Generic!BT
Webroot W32.Trojan.Gen
Yandex Trojan.Agent!iXRRoU+A7Gw
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2015-01-27 11:56:27

PE Imphash

a7ca36aefde49259784672acc7d27a4d

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.rsrc 0x00001000 0x00026000 0x00000e00 7.884364792823813
coderpub 0x00027000 0x00000c00 0x00000000 0.0
.lol\x0a\x09\x090 0x00028000 0x0000278d 0x00000000 0.0
.lol\x0a\x09\x091 0x0002b000 0x000164c8 0x00016600 7.718029295169997

Imports

Library kernel32.dll:
0x42c000 LoadLibraryA
0x42c004 GetProcAddress
Library kernel32.dll:
0x42c00c GetModuleFileNameW
Library kernel32.dll:
0x42c014 GetModuleHandleA
0x42c018 LoadLibraryA
0x42c01c LocalAlloc
0x42c020 LocalFree
0x42c024 GetModuleFileNameA
0x42c028 ExitProcess

coderpub
@}m@2``
YO$5p3^juK
2=<EKu
oL/SW.
]vN.5gvqy|L
F(<q1|R
exNH2D
ktJP1)_
bpHy5v[&gkq@lwf3
_ConxDg
<yYve`x;
}9|W{+
Z9Ol7XF=AOq!
AD-3i
oF={&#
W60HS(XJXhUZu
Tq.*V}W
`t7*5&H
m*Pd(1
mMI]B=xL
AC:?b %]
x!cb=yg{dxm&
;"+0)g\
dRzJEgU?!
m2SV2=#In;^Y=
A!u=fKW
"qeXOP
>^b,^DR
`W}zl4;
em<y1n
dF |ZT*k\
td)V9?{V
=/_fnm!^Ed
zIy|>Umx
"&^i1M
xV}g1eA
6j%_*4h2P
M1,pZJC2[
xh78 g%\A
Gz8@kLPaH\^
\m=qBv
j1VpN2?
< 6pf>E
~S7{*G
KSP5cf;#h*U
2bwbLgWC*=
0D+ZjqF/ot0xQ
AKw#in*+0
:^l=jx_
+"v5DO
A/-j59?c
'.?A6zAj,U
&F#$dlu
;E'ZT>8=
8b8*&E"
W8l~n_
9x|#T|*"
uErvYD
Ui|3Hv
"u3b*;Rc(m
y?o"4&|w0
6W?gyu
\:[ TGiI
+0Sobw
bCAssR
#?%o4B
a{Te7De`~&
c3essn_p9
Ru:u.Il
xr}9[`3YA_-r
0BV5dc-:
m174p&
%Wp-T|
wB*OAe
e[d,H5w
$+2):Faip
-asS`fD$
,Th)lD$
D$ t$$(
`hkK.d$$
YDvZP-
`$/*5~G0&l}I
PC$b7x'k,i
wKEo(0
L]'>LQo
N*Z Ni[
VjK/Ck0#
NM{Xnm
H4?B^(k(&]w
R2Bx-H#h
898QPI[9-
B\G16kl
fC~sWI
C{@b7'b
XTeK~H
OZMY^y
5}V{8%
RWE)bm:
Hu'JdH
#|T$8vM
s,yUW<\v
sBt-`<
i/^d7f
p|x9J|hxj
+v-sN%L-9
7~>4V/Mv;$X
N:o'clF|
@o)#R"<f
b;9 g/%
C~Rq+uu
1)\n$3v\(_
G!ZMR9I
9q^82f
$;`{@8'
y~;K]8RCz`]j>|ll
$k?1E# gt(?IlXu
^u:D@`ln
7Bw2s/n@4K
rlPqc?/
V1Eka`t=Fgr
rjfNy?%{
:us\.X
a5qf88m
>;_(g~
ax7xby`
'19}HGv,{JuJK*JJ4
Eu:Lz7xl@
uuh~v]g
RN@<n9
T<Fm~7,H
Aqmuv*!b
Rm9S'6
S68.m3dY|M|+/R
!rK?>
E'y,a#@`
@wY}E5
r-p'7E`vUYX
x=&>t6m
cs2Sk'>
#S30Ub&
8qXHZ{SN
W!t>UW7eeB
@*52B{_W
*w2,uL
[@d(3~,948:I
_'eam]yqyzY
dJ'@51
9+&9~+
e5asCbN
_]E."-gW+OYtG|(Xw
$4$7D$
``D$@C
D$@St$DH
?#`d$
O<Ao$qzw
,nm;}^\u67$TV
^Z-eV"M8MlpwX\&I&K CM7oR3<("$+!
P_Omu}'
;B/|Z
xo?x~Bzhm
Us^x="=RV
~nZ@+`
4O=h^R
E$+YP\
LvWAk3r
{'Sp=Q
BN"(-
E,ax._1
1)m'7P;bv%CS
%#/x\`&z
KoCO'R
foF9|95-g7
R^?R;5
!',2_p
~TIcu_3
sCy?0F$
?3~hNr^
:1Pu7VE 4+
j,kf W]c8
@{HmLs[
QCk}VA
fk)[YR
bEiWVeJ!W2
cy?*<_
G.X/4nR'mz+x+p
Qj q2R
0e8ZKesVZ
4Jg5Y9QB}^
8lLIXVc
>Sh5\)X!NG
hb]A dA3e0j<*ni
==-1@Ab
E,QJN:gJU70
ONmF3m<0"
rk(kjnh7i
DR}=h0_me
0=^]PK 'E
%P8hL?N
!TAoYF6N
1yZ2Z:a
n>CHF_4y|
@;/XB-_UC<<a9m1
0gz&ufp
Qe0U<2
XH00/IX9D5Fz;d
$m@!n]"O
E,@AU
i%4BCI^
k$Fr/X=${n:
U@HuaT*gv;A&F(i
EsE),P
/ G8s96Xij8
hR *;yuUR
9h+wl~
KdH&;C%
@l'NXW
8iN)jh
7|`-Dw
n^?Rm=760{V,1
mwKePS
}$_7#>
:k?yVp
{6:Z}_eP8
wohzO{YB]QK
6n:{3x
4L"r&R
RXjt(4
p>^7kkAQ
m\]dm&^
}M00g0
e`cGir)b_<)8ipVUK
=CbG\ K\O
(x@FiEu
HSgS?#
yI5'g"KX
Rrh&d][\V!>8
;E#/^7]
xB(ikLElvmN
l)0q&5o
<-A:4_bh,)
R I6v!\b
cd^6[X
KHUC,3u8/1W
m&>QMoB[og
HLd]A\
"/t dUV
{m>?i8
:[]^*J
t(cAPtnC5l
0Gwf{,y/
DM^$O5gCtTNE
u`^-yD
qOO!Ts6yKB9vp_G[g
i%/K-/pM
cB-NR;
CuG8d=>\%
YMRMQbd?<
IRum.=KOb
rn8T=sNH}?
X\IRfx3s8|{
)#~y"YYx0
18LG_|
2#m>xF:sT
6n^'J]R%:N
FZyUf&
Z|pw*[v=$)UfK-Ay3]
<#p@wSI1
)Eo}$Q U[GUpoqJx
oL$FETy
@Qti}*
Dr8"xpi0
ru|=Xm<-DB
:CFI.~8
;X>i~3R/,t4fuuUwS$
>eU(;)
Vv"{/Zb
+o%*/9tLA
nIQc<V
[8\pL
&#5)q48P
\ehF}IY
c~ o-E
`b/j=X
BVc0O`I
yq|s{Z
}3+J9E
ZRS7#qU
_Ptr-Ya
TCTVPt
lj%y_U
kr4HUA5f3T
"-XQsO
FBpK&!`y
I-)8)L")O{
U'8J&,h
=pB@iK
|-lJQ9u
dXmY!T7
k5~eZ-ON)lE(Ku@07e
)"U<&jXc"
B[g Y\
67U^G2
hOX)I-w=
0vBGWtX
61$0TBrG
I-B*Yi5
v0-g-t(
T SOsKtW@v
?a s'N
*=4VS>Q:k7N
eyGIHi7
ge3kvx
7(0=Sz|VaH3
jV* UE
KZj'4GMT
B`pC-,?X8ls1yQngo
{E@U>ou#B48bh
%rI2MwD
%$A/5*iP%P
-Q'e6~S
GK3Kul
Uc5qM{
sNjv{@j8
ISz|^W'
XbhH#AAV
S>tN6'm)@f
~219+]
jY@2%x
LhdP#A
IFeD7n
<&kgigYa
7"b>[(XBj
r?SO;d
Ih\s3R
H.Os+-
Qu8=B?Zl`bDAoG{14
rFI!@>"
+vo;,T
M;xi&.k:[
tmiZg68J
A| {w!
P6e$svH]YfX<E
H~-Ug_=H<+
F.<P^Rmv
`nIQ/%7XK
WxsaA+*>
!h=-|_l6
K/$*#&Hd
Mql] hJ(l
P_1xr?7W
m[B""/dh+GOc14`t
<PSwb>=,
*3<7f[3
HG'+dx
!\"|bZ*H
QLuIoyQyvfc
NfCP9?dp(
2"LmGH=*;KL2/T
>)x8:@:PL
#%W2./;
>7*Ru0XK
|~cGT?
NiyKTvKa1@e#HV
B0%^?p$B[:|yk
04p-gQ
*I3$uWr
5k]$>}_t)2
+o4{5;
(S/Z#,E[lBDf&(.Hi
&]+og2[fsr
|alGad$=kQ
ZSq}@2
}WRO/C-
oeufa
e:\?c3zT!G
p{B+e
iIA$
'IMLQA
\?Q,<vak
uimXke%X(ejdW"pk_,
#@WGLNbP,
-U8kG#
gq*MiL.t^
LF?"2\D
sj(j!(
K!U?3c'>
+28-B$=
K@zOs|
Mm49c2X?v4K
p{d{;m
.Cw+%J
}g+D7q<A
x7s{`0Z)y
F}@MJCX&
P?=93k
6;FD']p=
1fvlu-]F)
D+AP^$vn1
I.5F(;Kd3Lc_
eE(v]!
9^Qad.\Sy<J1\
=|>"so8
Wrvo<mWN&
v8%eU\4iE=MURyH
u/TT>p,A
VX'JMo
)OQd9!>
?7=Wu6W;
=,Zh0U|J!
o=0,$7
zlp,qkr
#?j/]0xg
?J:JiN'>
31}b:s
}om@gqj
$O'>PeU/o
Zsr9/lfl
Q*'(r}lj$
RF<d+m}=vL!_g,
Q12yJ}MP
O5/lZIL
lMpVHi]IL*{i"#
+<Q:T&
``xB>b&:
k:GMv9D
aCI;mHS;u
ztKsev#mUA4
2FE\y12TM
nZ==,C
',r+w1
bJ]]!wvO>_
>P5Mer
},9(#d;
Ydb{k=
mN$F}r]p:
1!Z_b#Q
%Qv_x
Aw0A),.
:t$!~O:
uTxtV )
J.)9e600E
cB}a[q7
lcSb[;
vbzPnG9*
M1cBmlw
}jes_m
MkEf1&x
M4=9O90"r
"3:Vzq
}*qtw x
:W5{zB9
LH59^N&n
rt-Rmi|3Ya(F
%+#WJl
+~mh5`
M+%x#nPT;52,L
*XV4>fA
[0MGHkkY>[9K
Z0m/7vd
!CW\i@
QcKbA^~Dj
]'tnh5QA|
hR3X%$
%KW_e@+kn
;%D}g(
!9M>.8
;&jwH@
NyU{Ip
pSJ,CP"02; G
/x;.lN
T_^ H*b}x!"i
3(^s~V
n= ZfK
K}|e;G
y+WH{K?s
oqx^c2
Rr.-x*@
<v5_of
Qpcwz$b$z?
5tSD$/
+jp,SY
H5x%Im"-xv
+<P7\'ZxA
8PBV93';
@#'<p8%3
\a8zv]
Pww'6Q?>
U+2d2X
uKJV2fe%Weh
1q+>(y_|+
w N9h5=~+iu
~Zwcmm:\v
5$X#tN+
-,a/}x7~
)%5ZtF
c46HXb
*ikk,u
St'<g8|-&R
e0n4dMaH3*wdI
y;"J#"prL3
WCh`cS}
d,e0EP
[;OHp@eW
ry,Ux.Z.jUU=
(ksC7)-
;5691z8v
j>o'*/
,:#,y)
D;.DW1)b-f-"bY&U
48Z4.{v*M%
N_OowWBRV=
OV;;1!RI
XYY{dp
`wS4OA
A;D|3J
qU IyVi
hGHfW{U"EzvhIruZpy)_
]P4P>oT
YMffHQ
}x3~l"M6
8|#QM\4
U#<P=1&5
uND|.O
RGh{VF
:AgA|!QXX:MD0
O)UWpS
fo(!j5<nHW6
vy5]1I~J
`>E<Jt
47@`i]#
DWnX
7(8|aY@1v&Eu
q7(5DTT@D3\
a3S#R}
G5Ifjdjq(j
G+YD16T
KnK1KF
72Z@p%,Qjbs
krpY%E
"WEM&uO
IGzA4&
G}['o_x
9L{VZx
wDN[>
]qm"\9v
Q(L\YG
&0aNo@1L$BKE
{+RM4b
lP3bKwwf
*#r#!g7RO
{^+"A_:
TgsO3Cz
UQ8OFc:
8;RwbhYS9
'9lcV9Y
5)] 7O!cXAk]m
b!y]FjLKH6<oQ|
NISJ19uP3E
M,$g~Q
e0%4Ex%Ns`|%+c,
U=T^6ce
B3,]{3
!yN}JqI
RtQm,f,'uZ
A~)[d+'
tv,oiys2
;c#1av/U<w
#DOgNNk
u>/\r\)8XTRrCI{
&%pb y
"M{KNu?
[iDao;J
vt:YW9l
a}Lq(+N1
sH>cLX#
Tn'43"R]=04
6zq$$@n
F^X0T^@iZ
j-ft)3Ww3Vk
!*=6`!
K~>;E,K"'Z
ANyg#{53vTW
,Hm$f=
6W]xVf;6^U`xNJu`O
g`tP6X
[{{>=qKPpN|:
\^36UcI[]
#cJ5x>+z
#rVVU]'
5QOP L
@S~w&z9Nu>k
pq#}GqE)k?6.H
:\:r<N48aCr7_
0sunT4glL
f.B+.ki
As>,n#.>vf?*z
J]G'a"
(!'Q(Y8}u|OX
;nn]TUG
-]7nu]
?+-x4p6QbaANR
aj%b'?
x}NjJ7
NR17QU
+rp0<y3&7wK
>?8gw)U
BrC@4:Su%+e
8=vN#>
XvXSYB
{+/jl'
o"|Q~p
siy>[^
q9N-1P U$E
G|)$|H
=Mz<u
L<**iPP
HJBR&]k=L#oGY>DH
+-;S?W~+
q,BoZ>(6;j:Ig=
3[.}+~(,!gegc{
\_Nn33It
3=+M=#6H]4ClEvr
dN)U~=
#]>"s,
M&}5W<G5Ki
y<'PTSU=Y
y1<.~gzH
d>qrr8gVF
:q{,q]JY
UEZSJRx
plega<uVnGH
{RJ.>IcB
!4u;[ GD%7)G*t0t`J
_JZ.V_Uk4/8fa`t
Z`lS2r
-@cQ,\
/D8rjK
N#k!.k8cq
)8jG+e{r
1!3 "2P6:
]-D<R
y?+'XC)(^
<P:%te
A} AE~JO
3KYdv7
@o49<s
QV37Y8/
@qy_lf
j@#;~z
V4o:`=
9Nc_c?
,1-Cw9W~O8a
,}yy4+
cv,4=z13
sgSVXa
^gu1/Q"-
Qx D/R.
<cQfRp
Ua}+>yh
T,oEUZ
{e17E-u9@
2F#W>]d
o#IWEi
\VFDRt
G1@i%Owz-
8?x{)=1
;;N^9g
5gvPlAt_
AL|+xUcM
f94wO|X6O_
V:RXy`VAdEn=
q\8YV3dS~Q6[
r!U9@X{L
Vg#?cw'^B6
SOv"L7Q
XHls%F
/6^i&,RN
#lV)ui
PkCd%e
!|:J&)*%,s
)\)$"P&xu(.
5XD"=9~h
Wn|!%4K87P
KUAVp}
IV}QWU6MQ7CX
%fS(o"d$
RW,{'a
,@R*9cy
{h(ig<e6
T4l6tOzk
aW.Q$}
h@f|X
*(KG6y6
wlzcX
xso.boR
go0lC-"3
w}k!DV
O[Pr"
}\Kfy_Y
/.IJX%
]Ml1acS?Z{:>[h8=
Zs1te[/'r
;42dI*
m~P1P\
O2&_$
(p}GSC
Z@x*Pe
486kxd
Ya;DFzbynM?
9pIB2O-
/$ uT,%
qS+y8l)f
x0fd!
x+-&O,Z
y|OuZ#~
8gIf s\$$u
$QSudS=#F
XT_X%`
2$Ta6-:gL8,m;`"tJL
i}OawU
TZ+XsITgO%
^_7ZcaBgC
~Z9n)fT[#
=]e)0A
(~VvgM
ZZ;`PwV!x/
csOqnrPY#
0&pl+02C
`7GfW$aGkVUzr
0]=KRzw
Ba^AA
4;:{+hR2
mEJ1(LE
lx OKD:pqO%%qK8(
kO7NNy
=Q|h.?f
@g&d$6
]iz{NuN6a
m|i_)n%
&(jlC;
T*i$i(U>b`
3M>YP=
xd.oi"peF
HP&*Au
h@ysT}L
6t-ygp
RfgK?<wa^5
z3iD<_.
eT8h%S>3"y
z9s7)p
r_^5yn3
D)|9`XO
]\C/gExQwtY%l1f$|j
jY5\2%6~&
?$vz{v&<"s
h40ASuF
5"h;\Ea $kywj
Qr6uTF|
\e=P&H
)kw50lpxj3
c9g(s{
D8SxHp"jN vig%Z
3}ZH!4`r1
#]*"W2 %g )U,
GLkQ&{RMN9
;>=p3g
:gfk;{vz2(_
K~W:A+
RlP3Oa
1r~?q5{
r%o<be)
U$}ZWI
<_0=#U-kBStP
1Sl9.6~=
,*NB@i4 6u#%}W%/\<
8_eh9j
},j@vK
OGc,pi
Jq{t,X
Mv?tJDJK
hQX.r7a^.0UMie4f
4~m7,~g4+$
p6EKbN.k
$7)!n=
w*K=#@
+"_JC?<"&
M-@w+j]%a
s,+wL%^8O'fW1Lp
<{7*/
a"*~eb
#U5=+<s'|*Q([S}B<DL
m*@B9
Q9*^MWIR
b'yH:C
+^3[H]L
C<<jE#)Slm
Y?x+C'
_[I.3\%
O89uI\-Po
pvKO/
: D5j3g/
*u|82jJ?@t^i9
02Y>B`
TP[Cm")
T[lwbc
(p6UbN-U#H?=l@'~+
j)9_ujj=}LR6>
1PE5r?7d-kwJ*
m?u4vY
W8x?C
jwY>mp
S[T`W\Di4
I,%'V,5~
&_69(s
05t[D`!r r\kfD@
>fM:Ly
h?tj2#l$
MQ*wP+
eN{*Hq
o;H&`0C;8r
I(S*h_
&aLE&?
|PSfJTU|6[]
h&J]Ar
N*ehBY
mlLvo<t
_Rrv6,
6MM3J;~
+B>|C_
}at3Bj3VC(J)2
]^MC%[|]G96
VZ2Z5w|b
tpxoYtTPdY8
vu0""p703
z/!"YR
d9R|XSif
?/rzg|7#
EMLI/x
/)x>*3]kw2l)
'K>1'y/A<[M>?Ai
Yi7nh:6
Xv+->;
zvfb){-o
pWl"0E?
6^4YhB*Y
O(zVd3
*@UGQ7G-p*U
hwE5(*OzL
"G2}uy
w<-%Wf
cP!nd'
h:Wv$$`d$$
L$$h D$,Li;Mo!
=.=`d$$
hi{Wd$
:a@:YT"S
wd&.cZ9
.Yqg8EV$\!rN
j,I2DY
O-)ogMk+
cZl6E]
l- ]*D
gFf,$LI
GetModuleFileNameW
D,@hz-KK2
B3"m}sZ4
x!@W*.VHr!H
yfN,6{{c\<_N
xV},/g
1=)}J{
+3+%67?
orB5,+/
rL79b(A
PvP8<B}p
u{Pxs~>
$Q SNP
cy6Srz{
5iN/SFf:+
o-p3ia
auBn{JT
24.$^kB
o;Iz^|E
5QhW|aV:8
t;qEe?
rTaGm&v
BPbtK$.VLeScNgW$`5T5W:$9
IxpG+*
FrnF+QiMF
;8%bRO:fU[.A
'=jN{BpQ
z=mS]\@{
pqa>TG
d3I5nKZ3
R^s)?N+u4~d
Hz+&Ay
CrvNQHPNJa3bD'D
%agU}3a48jk
QUUJeI/
>fXJB/
8]dgG1
%0*qv*F
?aMv@~
0D;{e RKm
G1{5QvuRH)
;1[DMf$
P#cij~GQ(L`D
j5zbc-
W?0FbSA
3~mX5{-= 2]vN
R!Xp>g
@D$cE&h
,+wWWZt=
*nm$=f
<E_x0,E
7a1-Lw
fQAlf|
W[!T30]{%q~
0#T'X#>t}@*
g);cT4d
3tgkI{<
UIQHX*'C
'_Gkx>%6
b!4WHdY
6m#I9Sn<Ir9
NcHbdP~~
ou"~8$)[
oBkLaB$
l+q_?SMr"'w`R0kPZ
"ML;a[
[JJ-o
V_X#Tz+
BKt~:Bp73
oUvkqx
H7cC|T.eMU=tX
(p<wT8zN
2u'V0X"q
-^883Fw
C:7!Z=p
{pcOIw=cs
Z>[W-L2xj4!P&`nr5CB[<
9np>ul@U?
t.`x;4
Io(v^`[ZI;+c:M>
AiHH-e
m<H+#<=
>NNyR.cBi
CU|(q'K!I2?\
A8{!(e
l;#LKV.-
AhLeg\
4RHDB0y=
Qq-xhI
/=\o$y
9uhp[Bcy#7|
N)^Hki
6aW| I
MAj9wB
=%/jm"
zQb${M
n/"9VNXz0Rf-nlcQVQ#
Yj-%HW_;~6
+|&Fz*
:<%g_jom
tagA{Q0z
?yM-$eD
=,g2haz-@}n
RuxaK!
`wj"p$
gYYb4/Y]'&]
Cb"=tX
`Zu?~4
oE:U--
cv$Tt66,
{lPDy5)
qb!&m>
w'{"B]|ONZ7
E4v(|Cr
0d],BqpL:
GH3HL;B
Cr[xc;
v~^`R|
ODv{RUn
`JHeiWn4V'wXx
ZfG|7q#S/UF
DYFvPI4^
b8:^J;k
6YuwJ\
Wm3m~4@
Qp8q/VdY
KSE)Kb
?j]]Vs
^^`^eR<E
T#ER55W
R314AZN0AwZ}g
bC[t6o
oI'CZA
X(-+6NW
]52]ldT{"
>j8J-Gk|X;3n
A:2+oACRI
0:bPY1c~b7.{
E+[_Px+n
|\\sbcoUj
]Dwrg`
}?A&Ek8
t^?i5Xwb0
6Bc2Dabh
e!1ciN&
R(uhoOZ
IJRi1N
LM2Kp\O
hs#:4$d$
f9h]ViU=
$`d$$H
?#`d$(
.]d$05
h+3d$(
y(hT0`
h"3D$ 4$Qt$(,
Fwd^HJ
eG#~OpJyi'F
0zoi@]i
-uvwaCN#]gD
/=f2{P
avWhW5DR7+
!;ZyK(I
WtWNU~
?#4$d$
1N$Du,
kernel32.dll
D$(d$0
pW`D$
D$,S|$
user32.dll
CRA{_P
P;BS6CCj<*KAYK
/y>~u#fZ
zLU&|h-4p)m
1u,0`<
72yx*E
^}K,aA
tJ1d4Xc!GV}pG-
K8qH3/n
a4tVV?Q:Nm
M47qY[]F
m6#1Zq8kBy
"uvnMc
\v%0k)
0r12g!ba5&B
~xHjQ$W.\
4$,$d$
LocalAlloc
V[Y'U(
(`l$ `Rt$LX
$Rd$L,
2Jq n5`
3Dh!&
e1}9dsf
u6oc|/vS
8GS&Qf
V)U`EE'
f f3?#`t$
?#QRd$
0CjtBa6-lk
kRw&(K(8
3Rx^4l
!@c(,-]?8
QAh{%ft
oLWXy-*/Sd[
%7=V)+vA+A
|o][Q#
0``hOhd$H
Ff)fff
7`d$L9
$_d$0^'
+`d$@wP
X`,$d$
o+M*M6s
6<l7&`%AKP
h`d$8%
EyL'"Y&=
a!7nbK`t!6cd'
=yBYxhcZ
2zk]f
zs/t$f
lgpie
Ed21)61r
,$d$<d"
h-Td$ O"
"WABu.C
#p=PwwT/
rvhUF9+
E6?$CZPmFc(m
r8smsX=^s
NY@zhCQi
i ^i*
\!,Qe)
wb`5nW./
][]sT}oNM
/"+(eT
V_Ab~n
\[V/_K 9
y^5P@tt
;ley<PF~
.5o60SK
X3KKSX`\6fFT
)j\l0Z=@
\%F @ITr
?5mg1%P{BYd7
>?Bx0q~.m.olGd
OlVD$8
NAR7${}
/;@m.'tG
Gt@!/1_Iu1
KR><B
f`MI_f
ijWy*[P=g\$vo1
P[4NhK=
u+BcY&?
4ekR9<
_zysD[
UPklG*
SLlATK
-nOLk)
vobI`.
`Xt$<|$8
u #5D\S_4w
s;P0Q]|W0ji"
RO:{xs"(+
tFH]n/TCzX
Fg=m#m
oWQj7Z0
1@knYB
h6p;EB
QX3mK1w
d'%3,q
*8;t^l?$
5eEpK!
RG2nLsFGV
YP!3!Jk.
")7)eK
Wbie1941|
j@>(["7
Q-k3XO]{
8v?A{Y2q(
Yc+@4XYD"
eSV>[Rrp]
*YJLNpN
p\>j:A,+`!
j8X3{Rcz]drf
M4wqCCD
`4$d$$
```8;E
{;\]_)
HiwmbG>mvv
~<0!<b
7@^cSi#L
e]+lg
8q`bjk
{0}3DXf0
bh4rbv
u"O4&cm\Ec6
*+}nP!*8H$/6_
Y5Tfd>67^N[(e'
[5N@fqw
'49L~,S3vA^z
C>(zi1:
sJZ[T"c4x<
GetProcAddress
1 W1I6
,gV(K^|'=DGJ[
O3p_nIb
l5wiOhi6
<$f1\$
4$9`4$d$,
7,?lbu
{+R ]p|Q~d.zN%+
k~eW
{`~fNC6
Hc!n'a'k
1zc;*XY
Lcjlq[Gh
=7Ff`RZ
Lso1gf|/+
Bf>ldmfI%
O,B4nin3w.lo(Q
(hU)83H]ki-J
Pb,z$W
Ic1z%+
(f/mW
hfq`d$(
5BzAFh(#F!k8^?|H
:5]r `_
rc,AMn<
GetModuleFileNameA
P7h.)vO &ma
NK$4VZ
f;Ed$4
fo``fD$
`fMO\$
`D$$lC
`D$ qYd$$9P
LAX7KXO
vM QiSS
E@5oU#pKGFYP
d$$```d$ R*
P,0`fo"
|}yQhNA$W^
VkZ7KfH
D$H4$t$PT
`d$(.
,0^7D$$`$
[ve]P{
3f!1BR
S0$aH3%YZ
cpfUt:=UK
\o93a,
```TD$$
8$`d$(
`d$4hK
J;pYG$
esq0rg
=Z&g34eV
L&+8|<
szfmVS%R}
Vhj/L$
hkmsWfK
f:'l2!
D$ `fD$
RS`d$0
`hK:sd$4V<
LoadLibraryA
h+lPd$
NZ9XK`
(f[`R`d$D
@b>BX>b%}=Z
k=gtVD
1`jRfZ
=NunE?Wr]#zE3Ge;0..
^_X{rK
,h4>m
zD~~Rex_<]fmv
yZm`*;b
0zDs#zeb
/fW,}#r {A
YXBmB%
:PIrVk
G$}',m;aOpd
gN?(V)H
hUTf<$d$
ei@V%XcfL/
%6#?J
<h_{23(
e6}yDOe-
<[+CPBPW
}iT?(Q^
PT?1%)^)^
9}\&7tF}f9zxH2}
U&`2?Cevl=
?tTEvS
YdG?5=
E?Ni5.;
osAw37?3X
^(s=7r3N
W=`YqL
~8_KCI"
3HaZ0)">5aE
LocalFree
Wf<$d$
Y4cr+_+
Bf\yo
$&<A$eHY
K5Kix'
MU#pI~!N@!
%8s#~2
T,$d$0
$`4$d$(
gne%<EZe6`R%;P%
H3b$Et(Cx;
Qj0x,M
&IkI83
T"EK Z
E:#P;2{iT][=
``hEH`D$@bC
$!0D$@D$
sh)G-ziTkz3
D^=>xxt
'tV,EaG9
m_"KXrsH
^m!~Y`D$@
4$D$@|$
2za|R),o
|:pM5huWY
v`vT4
`:kRFl.R
YzkyKa
|HF:gJtN
`4$d$(
)6u<oP-
hrI`d$(
N`h:7d$$
`D$ 'C
ExitProcess
5Z9$g?Z]4
C"{NLZ
0JQ9qSx~-3DyO
\YoJ!v
A3 b4|j+)xG=
!cxDu4H
)_[``t$
>,wi??
/.hE'8Ec
T:o:3'
f4$f<$`\$ }d$H
{Hk! k/b
g"Q.-Tu;F%7
pnJ[;.Yyc4
AjU}Nl
h9Ad$(
* r4K'dQ
ITeW/
9nYtxTG
$/E4$f
$od$,?f
f4$d$ X
((YXVJ`LI
d$<d$4
; 9BA)Vyj
N\ARw<@
la[!ar
!VOVCK=
K>L[p"'
4*&`_=KX
Wvx";!b0xn2
2HJi/i4,JV
*8Ky)
Vpy>>E
<;y|~~oQQ"~?IB
C#{/[qNf(~ _
"%eJ16C6
pr)0l(G ,b[]
C5!Xzd3
e!|CpPUK@
a@c[AH>
-J:sU2X
lJ<jgfiJH
<;{e^H,
m\?Ks5'=
'5Y'|@LY
i7gp?k!
F?gN"_
LRe7"8$
OPf|QfB~tw
&BTWx
nwMizY4v
MnsA+w
[HC^-!
dV;yS&
gUZ|c"]eR9hY
vV1G<:";Cx
Dd_+g/u
Wf$$4$d$
wV+~%PkeQOQQ*za.
>J}T9!\n
4$4$4B
vMt%,73j
l([%`d$(
7D$(f9
uW',)4
=<g~;B
vE8.},_6E
hu_f$s
<1j~gl
lw6pQx!/AM
!1)rv[
:W`)d$
z$hn(4$
zm}&D<
xCQ8!]-wXx{wp
H}F=Hc
F&1Q*)$:
i)-2'at
XGN,`{_%K>twEvWhI2E
:KU#/^x:a K
W;EV4$w`
Ry)sJ.D
0;[l1U
NBnY74T
wr+"3e/+
bG+mLC
3cx(fs
BC^hyD$
$S`f9[
h%nVD$
$xCd$8
=4$`d$(
hb]h4HD$ `f
4$t$DH
``?#fl$
87D$ 9
GetModuleHandleA
R%Z/e1VtG
o^|D72y
$Omx)\!9
v#m_1Qzs
-:7v j@k
W?#`d$,
$Fd$H[
`,0}Bq%
)l)U9+@zl
p>@/|^
PfYf|$
ht^csf
T$04$hr
o4$d$0d
`Td$0U
,,$NQh3
W7t$0E
8U`d$8
;`D$ hw\D$
$hd$(G
D$$t$$E
R`d$<_
VD$0P4$4$t$<E
NhG^fE
tD$(4$hb
O@)/'E
$$T$ `4$d$D[0
h `D$ f
D`f)ff
t$8t$<Pd$P
`,$d$8
Whn`hb
$4$d$()
$`h`+nt$,E
ha>dD$
D$(d$,
`D$$`T$@hu
$`d$D$f
[hXSR\$
L$8ft$<f
\$Hl$Pf
fT$TOfD$
`TT$@hnH
`T$ `Wd$D'
F7`(Pu
^t$@Ut$Hh
hAt{t$
`hDd$,
`T$(TD$
hph'G`hT@*d$03
4$D$8t$@E
4$f4$V8of
Uh{.fT$
$d$Pm`V`T$@d$DS
3hVRW<$`
4$h]&d$8
h07`d$$
`4$d$$`$$L$44$t$DH
$Ld$0$$t$@E
`h#>Hm
f,$h2%
$f<$`d$(
&18f`D
hYYd$0
`d$,.D$DD$
,vhv=f|$
Qd$(o,f
hi`D$(
<DG`RE
@D$0|$
hO@ffD$
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

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.