{"id":"9e9b0ef4fc739c3eb36a762122451992","title":"恶意软件依赖组件 — 恶意软件依赖组件 · 木马/恶意软件 · PE32 DLL","md5":"9e9b0ef4fc739c3eb36a762122451992","sha256":"0ee7783213426a5e46bc11a91acf5f2d73890bb09bbf4f3b932a4b79eeb6b820","family":"恶意软件依赖组件","apt":null,"verdict":null,"sample_type":"木马/恶意软件","lang":"C++","file_format":"PE32 DLL","compiler":"MSVC 2015","published_at":"2020-02-24T16:00:00.000Z","summary":"这3个DLL文件编译于完全相同的秒级时间戳 (2020-02-11 20:03:38)，使用相同版本的MSVC 2015，大小均为166KB。 导入表极简：仅KERNEL32.dll的4个函数 (lstrlenW, CloseHandle, SetErrorMode, CreateThread)，无导出表。 3个SHA256: 0ee7783213426a5e46bc11a91acf5f2d / 218ad6e33041a0bdb60c8de03e7dcdf4 / 8c55958dc4f421350c0b0c5ac1600423 评估: 这3个文件极可能为同一恶意软件的依赖组件，通过 CreateThread 创建执行线程。由于无导出函数、无可读字符串， 它们需要主程序调用来加载/初始化。建议与主EXE关联分析。","url":"https://zseceye.com/report/9e9b0ef4fc739c3eb36a762122451992","json_url":"https://zseceye.com/report/9e9b0ef4fc739c3eb36a762122451992.json","html_url":"https://zseceye.com/report/9e9b0ef4fc739c3eb36a762122451992","hash_urls":{"md5":"https://zseceye.com/hash/9e9b0ef4fc739c3eb36a762122451992","sha256":"https://zseceye.com/hash/0ee7783213426a5e46bc11a91acf5f2d73890bb09bbf4f3b932a4b79eeb6b820"},"search_urls":{"md5":"https://zseceye.com/?q=9e9b0ef4fc739c3eb36a762122451992","sha256":"https://zseceye.com/?q=0ee7783213426a5e46bc11a91acf5f2d73890bb09bbf4f3b932a4b79eeb6b820"},"sample_download_url":"https://zseceye.com/report/9e9b0ef4fc739c3eb36a762122451992/sample","sample_filename":"0ee77832.zip","iocs":[],"ips":[]}