[分析引擎开发笔记]64位系统支持

2017-4-14 Nie.Meining Life

这两天为分析引擎（http://tcasoft.com/）提供了64位系统支持，上传样本时可以选择64位环境了：

64up.png


其实Windows系统64位和32位的内核数据结构差异并不大，只是变量具体偏移、具体长度方面的变化，所以对于API等上层行为的监控来讲比较容易实现，反而是Shellcode检测、漏洞攻击检测等指令分析方面的差异很大，还需要不断优化。

目前64位分析环节只准备了一个简单的镜像用于测试，没有安装Office等常用软件。展示一个测试样本的分析报告：

http://tcasoft.com/tcaCloudPlatform/report/toViewReport.action?id=65

20170414200619.png


基本上具备了和32位系统一样的分析能力。

----------------------------------------------------------------------------------


另外再分享一个最近比较火的样本，CVE-2017-0199：

http://tcasoft.com/tcaCloudPlatform/report/toViewReport.action?id=73

从网络数据包解析一栏可以看出，该样本从 rottastics36w.net/template.doc 下载了恶意代码：

64up.png


不过这个链接目前已经无法访问了。


« WannaCry勒索软件分析 | 分析平台再次升级»

评论：

dglrxlo
2020-06-20 06:26
cheap viagra online viagra discount https://mdstoremdmd.com/# - viagra no prescription where can i buy viagra viagra over the counter walmart <a href="https://mdstoremdmd.com/#&quot;&gt;price of viagra&lt;/a&gt; online pharmacy viagra viagra over the counter usa 2019
回复
qawjehk
2020-06-20 06:25
price of viagra generic for viagra https://trustedstoremjd.com/# - viagra prescription online viagra prices viagra amazon <a href="https://trustedstoremjd.com/#&quot;&gt;cvs viagra&lt;/a&gt; buy viagra online buy viagra online usa
回复
Beulahhplx
2020-06-19 04:45
Greetings from California! I'm bored at work so I decided to check out your blog on my iphone during lunch break. I really like the information you provide here and can't wait to take a look when I get home. I'm shocked at how quick your blog loaded on my phone .. I'm not even using WIFI, just 3G .. Anyhow, superb site!
回复
mggbixh
2020-06-19 03:59
coupon for cialis cialis coupon walmart https://spcialisps.com/# - cialis manufacturer coupon 2019 cialis coupon cvs generic cialis for sale <a href="https://spcialisps.com/#&quot;&gt;when will cialis be over the counter&lt;/a&gt; buy generic cialis online generic cialis cost
回复
cbaciiu
2020-06-19 03:52
cialis coupons generic cialis online https://bwcialiskls.com/# - cialis from canada canadian pharmacy cialis 20mg is there a generic cialis available in the us <a href="https://bwcialiskls.com/#&quot;&gt;cialis canadian pharmacy&lt;/a&gt; generic cialis cost cialis cost
回复
xkjwfkc
2020-06-19 01:33
generic cialis 2019 cialis generic https://bwcialiskls.com/# - how much does cialis cost at walmart over the counter cialis generic cialis india <a href="https://bwcialiskls.com/#&quot;&gt;cialis on line&lt;/a&gt; buy real cialis online otc cialis
回复
ktidvgt
2020-06-19 01:28
cialis generic cialis india https://wbmaastr.com/# - discount cialis prices of cialis cialis price walmart <a href="https://wbmaastr.com/#&quot;&gt;cialis without prescription&lt;/a&gt; cialis without a doctor prescription cialis pills
回复
wisurdm
2020-06-18 20:57
cialis discount price of cialis https://wbmaastr.com/# - cialis online pharmacy generic for cialis cialis coupon walgreens <a href="https://wbmaastr.com/#&quot;&gt;order cialis online&lt;/a&gt; cialis cost otc cialis
回复
xbvxozk
2020-06-17 12:51
viagra cost per pill online doctor prescription for viagra https://gredichepri.com/# - mail order viagra cheap viagra viagra without a doctor prescription usa <a href="https://gredichepri.com/#&quot;&gt;buy viagra online canada&lt;/a&gt; discount viagra where to get viagra
回复
GregoryPed
2020-06-16 18:44
http://onlinepharmacyero.com/# viagra without a doctor prescription walmart
回复
knjqune
2020-06-16 17:58
buy real viagra online viagra pill https://gemedjie.com/# - is there a generic for viagra viagra mail order viagra <a href="https://gemedjie.com/#&quot;&gt;how much does viagra cost&lt;/a&gt; viagra prices price of viagra
回复
milossb
2020-06-16 16:44
generic viagra walmart buy generic viagra https://gemedjie.com/# - viagra price price of viagra viagra prescription online <a href="https://gemedjie.com/#&quot;&gt;when will viagra be generic&lt;/a&gt; generic name for viagra buy viagra
回复
cwrcdnz
2020-06-16 12:58
cost of viagra price of viagra https://gredichepri.com/# - is there a generic for viagra viagra without a doctor prescription usa where to buy viagra <a href="https://gredichepri.com/#&quot;&gt;where to buy viagra online&lt;/a&gt; viagra over the counter walmart viagra no prescription
回复
lbtjbgf
2020-06-16 08:51
buy viagra generic viagra india https://gemedjie.com/# - online doctor prescription for viagra online viagra prescription is there a generic viagra <a href="https://gemedjie.com/#&quot;&gt;cheap viagra&lt;/a&gt; viagra buy real viagra online
回复
GregoryPed
2020-06-16 08:44
http://onlinepharmacyero.com/# online ed meds
回复

发表评论：

Powered by emlog