[分析引擎开发笔记]64位系统支持

2017-4-14 Nie.Meining Life

这两天为分析引擎http://tcasoft.com/提供了64位系统支持,上传样本时可以选择64位环境了:

64up.png


其实Windows系统64位和32位的内核数据结构差异并不大,只是变量具体偏移、具体长度方面的变化,所以对于API等上层行为的监控来讲比较容易实现,反而是Shellcode检测、漏洞攻击检测等指令分析方面的差异很大,还需要不断优化。

目前64位分析环节只准备了一个简单的镜像用于测试,没有安装Office等常用软件。展示一个测试样本的分析报告:

http://tcasoft.com/tcaCloudPlatform/report/toViewReport.action?id=65

20170414200619.png


基本上具备了和32位系统一样的分析能力。

----------------------------------------------------------------------------------


另外再分享一个最近比较火的样本,CVE-2017-0199:

http://tcasoft.com/tcaCloudPlatform/report/toViewReport.action?id=73

从网络数据包解析一栏可以看出,该样本从 rottastics36w.net/template.doc 下载了恶意代码:

64up.png


不过这个链接目前已经无法访问了。


评论:

WillieAriva
11 分钟前
buy cialis daily online http://www.sectionaltitlecentre.co.za/groups/buy-viagra-quick-delivery-81138
http://simcast.co.uk/forums/topic/order-real-viagra-89990/
profile buy cheap viagra
can you buy cialis over the counter in canada http://unitedwerize.org/groups/viagra-sale-glasgow-87131
http://ithele.co.za/groups/order-viagra-online-illegal-82796
viagra sale usa
want buy cialis uk http://violentadegen.ro/topic/buy-viagra-gold-online-84088/
http://www.cerebralsyndicate.com/forums/topic/buy-viagra-los-angeles-96307/
buy viagra in america
where can i buy cialis soft tabs https://iwantadeal.com/groups/buy-viagra-uk-98320
http://accessliberia.com/forums/topic/cheap-viagra-quick-delivery-80912/
cheap cialis drug
buy viagra now online http://hausvergleich.ch/forums/topic/can-you-buy-viagra-walgreens-94395/
http://skoutsports.com/groups/viagra-buy-chennai-96557
viagra sale edmonton
where to get cialis cheap http://myboscorp.com/groups/buy-viagra-cialis-uk-90405
http://cafafranchise.org/groups/viagra-buy-in-usa/
can you buy cialis over the counter in usa
buy cialis ebay http://www.boazandruthpalace.org/forums/topic/cheap-viagra-thailand-99107/
http://www.sundialfitnessclub.com/forums/topic/buy-cheap-viagra-with-mastercard-86120/
levitra buy in uk
order liquid cialis http://bettersightonline.com/groups/buy-viagra-com-80007
http://youlifechallenge.com/groups/can-you-buy-viagra-online-81336
buy viagra legally online
buy viagra thailand http://pharaohbank.com/groups/do-not-order-mexican-viagra-89066
http://altenergiya.ru/forums/topic/buy-viagra-cheap-australia-90491
buy levitra from india
WillieAriva
约 1 小时前
cheap generic levitra online https://lescent.co.za/forums/topic/buy-priligy-viagra-online-87604/
http://www.skillpaw.com/groups/buy-viagra-cheap-online-no-prescription-94569
order viagra uk
caverta cheap cialis generic viagra http://expharm.co.za/forums/topic/generic-viagra-cheap-india-80235/
http://www.everythingstrange.news/groups/order-a-viagra-online-92895
buy levitra overnight
cialis c20 pill http://contrata.se/forums/topic/buy-viagra-dubai-84066/
http://petzplanet.com/groups/buy-generic-viagra-online-canada-98872
viagra super force 100mg 100mg pills
cheap cialis once day http://findabiker.com/groups/how-to-order-viagra-from-canada-86122
http://www.artsyfact.com/forums/topic/viagra-sale-jhb-98802/
where to buy cialis
cialis sale sydney http://stylefinderacademy.com/groups/buy-viagra-online-australia-98484
http://codigo.coffee/forums/topic/cuanto-sale-el-viagra-en-uruguay-97226/
how to buy cialis in toronto
how to buy viagra in london http://hecah.com/groups/buy-viagra-real-97401
http://blackinvestornetwork.com/groups/buy-viagra-and-cialis-online-80187
viagra buy south africa
buy viagra zimbabwe http://www.nexttopathlete.com/groups/pink-pill-female-viagra-92860
http://www.ccmining.org/groups/best-place-buy-viagra-online-92184
viagra buy cvs
buy viagra high street http://interpretation-of-oral-radiology.ir/forums/topic/buy-viagra-rio-janeiro-92568/
http://contrata.se/forums/topic/cheap-viagra-and-levitra-93512/
cheap cialis eu
viagra for sale atlanta https://www.eropodium.nl/forums/onderwerp/legal-buy-viagra-online-98370/
http://www.smytex.com/groups/buy-generic-viagra-professional-90371
viagra buy
WillieAriva
约 8 小时前
buy levitra without rx http://www.delofilaptop.com/forums/topic/legal-buy-viagra-online-88558/
http://muhltiply.com/groups/himalayan-viagra-sale-87975
buy viagra malaysia online
buy viagra hua hin https://perfectdesire.com/forums/topic/order-viagra-ireland-80761/
https://perfectdesire.com/forums/topic/viagra-sale-in-new-zealand-80178/
cheapest cialis internet
canadian pharmacy cheap cialis http://dealshappenhere.com/groups/viagra-sale-supermarkets-81508
http://www.cci-property.com/groups/order-viagra-europe-93069
viagra sale malaysia
can you cut cialis pills in half http://expharm.co.za/forums/topic/how-to-buy-viagra-in-london-93041/
http://justushub.com/groups/viagra-to-buy-online-uk-94690
pills like cialis
buy viagra dhaka http://asiaanimationalliance.com/forums/topic/viagra-sale-perth-87766/
http://forum.mikedolbear.com/forums/topic/viagra-buy-toronto-89429/
buy viagra generic usa
cheap viagra generic http://www.careersunboxed.com/forums/topic/buy-viagra-rio-janeiro-97959/
http://dignifiedbeauty.org/groups/viagra-sale-asda-98643
best buy levitra
buy cialis mexico http://www.brownmeyersbrokers.com/forums/topic/viagra-on-the-cheap-92882/
http://www.phlisting.com/groups/cheap-herbal-viagra-uk-92971
buy viagra cialis levitra
cialis super active cheap https://www.chronicsouls.com/forums/topic/viagra-sale-online-ireland-87803/
http://brv.no/forums/topic/cheap-viagra-in-canada-99534/
cialis super active for sale
viagra sale china http://www.ccmining.org/forums/user/maitrancan1988
http://contrata.se/forums/topic/buy-viagra-canada-91881/
levitra buy singapore
Rannevknoca
约 11 小时前
how do i get is prescribed
Ladonnajoils
约 12 小时前
http://yoursurveyplus.com/forums/topic/best-adult-games-99363/
http://violentadegen.ro/topic/casino-games-88762/
https://www.eropodium.nl/forums/onderwerp/online-gambling-casino-84935/
http://www.worklifestrife.com/groups/casino-games-97737
http://www.untoldhistory.com/forums/topic/adult-games-90845/
http://theelitedesigner.com/groups/best-adult-games-86529
http://www.handpager.com/groups/casino-online-96980
http://genesisos.co.uk/groups/online-adult-games-91080
http://youace.eu/topic/real-money-slots-97620/
http://internetcreditrating.com/groups/adult-flash-games-88460
http://yaztrainingset.com/groups/online-slots-82268
http://xminutegameplay.com/groups/casino-games-online-80607
https://gamingproject.eu/groups/best-online-casino-80526
http://www.mensshaving.co.uk/forums/topic/casino-slots-98076/
http://www.habeshacentral.com/groups/casino-games-online-99925
http://wayoftherose.org/groups/online-casinos-80957
http://ouagalive.com/forums/topic/real-money-casino-99455/
http://www.ganzablog.com/groups/xxx-games-97363
http://goconvo.org/groups/online-slots-89884
http://www.rectrekker.com/groups/online-sex-games-84879
Laraknoca
2019-06-18 22:46
is pharmacology

     cf3b is espa
Laraknoca
2019-06-18 19:52
is in boots uk

     cf3b is site de confiance
Rannevknoca
2019-06-18 14:04
viagra online ua
Miloslavaknoca
2019-06-17 20:58
is  be on line

     c61d is 20 mg barato espaa
Rannevknoca
2019-06-17 12:26
generic viagra from china
Rannevknoca
2019-06-17 11:22
click here viagra one a day
Galyaknoca
2019-06-17 10:39
069c cheapest viagra usa

  
    

viagra levitra vs cialis
Galyaknoca
2019-06-17 10:11
069c does viagra work for everyone

  
    

how to use viagra capsule
Lowellimits
2019-06-17 09:30
cialis for sale in nz http://minimeboxing.com/forums/topic/rx-drugs-canada-82246 buy viagra super active online
cheap viagra cialis http://kokita.de/forums/topic/drugs-canada-86994/ cialis cheap usa
levitra by mail order http://miopinio.com/forums/topic/how-to-buy-a-viagra-93032/ buy cialis uk no prescription
cheap viagra blog http://www.prisonercompanion.com/groups/www-canadianhealth-caremall-85323 order viagra online illegal
viagra sale supermarkets http://circleoasis.org/forums/topic/cialis-viagra-sale-canada-91068 viagra sale united states
buy cialis europe http://betterpreparedtogether.org/groups/canada-drugs-discount-81825 cialis online cheap from canada
viagra cheap online uk http://www.hksnowball888.net/groups/prescription-pharmacy-92378 buy cialis daily use
viagra sale in canada http://completediet.com/forums/topic/buy-viagra-generic-usa-97704/ cialis super active buy
cialis 20 mg 4 tablet fiyat http://altenergiya.ru/forums/user/unaraq1985 cheap cialis canada
Galyaknoca
2019-06-17 09:12
069c how is viagra used

  
    

viagra reseptfri

发表评论:

Powered by emlog