[分析引擎开发笔记]64位系统支持

2017-4-14 Nie.Meining Life

这两天为分析引擎http://tcasoft.com/提供了64位系统支持,上传样本时可以选择64位环境了:

64up.png


其实Windows系统64位和32位的内核数据结构差异并不大,只是变量具体偏移、具体长度方面的变化,所以对于API等上层行为的监控来讲比较容易实现,反而是Shellcode检测、漏洞攻击检测等指令分析方面的差异很大,还需要不断优化。

目前64位分析环节只准备了一个简单的镜像用于测试,没有安装Office等常用软件。展示一个测试样本的分析报告:

http://tcasoft.com/tcaCloudPlatform/report/toViewReport.action?id=65

20170414200619.png


基本上具备了和32位系统一样的分析能力。

----------------------------------------------------------------------------------


另外再分享一个最近比较火的样本,CVE-2017-0199:

http://tcasoft.com/tcaCloudPlatform/report/toViewReport.action?id=73

从网络数据包解析一栏可以看出,该样本从 rottastics36w.net/template.doc 下载了恶意代码:

64up.png


不过这个链接目前已经无法访问了。


评论:

dglrxlo
2020-06-20 06:26
cheap viagra online viagra discount https://mdstoremdmd.com/# - viagra no prescription where can i buy viagra viagra over the counter walmart <a href="https://mdstoremdmd.com/#&quot;&gt;price of viagra&lt;/a&gt; online pharmacy viagra viagra over the counter usa 2019
qawjehk
2020-06-20 06:25
price of viagra generic for viagra https://trustedstoremjd.com/# - viagra prescription online viagra prices viagra amazon <a href="https://trustedstoremjd.com/#&quot;&gt;cvs viagra&lt;/a&gt; buy viagra online buy viagra online usa
Beulahhplx
2020-06-19 04:45
Greetings from California! I'm bored at work so I decided to check out your blog on my iphone during lunch break. I really like the information you provide here and can't wait to take a look when I get home. I'm shocked at how quick your blog loaded on my phone .. I'm not even using WIFI, just 3G .. Anyhow, superb site!
mggbixh
2020-06-19 03:59
coupon for cialis cialis coupon walmart https://spcialisps.com/# - cialis manufacturer coupon 2019 cialis coupon cvs generic cialis for sale <a href="https://spcialisps.com/#&quot;&gt;when will cialis be over the counter&lt;/a&gt; buy generic cialis online generic cialis cost
cbaciiu
2020-06-19 03:52
cialis coupons generic cialis online https://bwcialiskls.com/# - cialis from canada canadian pharmacy cialis 20mg is there a generic cialis available in the us <a href="https://bwcialiskls.com/#&quot;&gt;cialis canadian pharmacy&lt;/a&gt; generic cialis cost cialis cost
xkjwfkc
2020-06-19 01:33
generic cialis 2019 cialis generic https://bwcialiskls.com/# - how much does cialis cost at walmart over the counter cialis generic cialis india <a href="https://bwcialiskls.com/#&quot;&gt;cialis on line&lt;/a&gt; buy real cialis online otc cialis
ktidvgt
2020-06-19 01:28
cialis generic cialis india https://wbmaastr.com/# - discount cialis prices of cialis cialis price walmart <a href="https://wbmaastr.com/#&quot;&gt;cialis without prescription&lt;/a&gt; cialis without a doctor prescription cialis pills
wisurdm
2020-06-18 20:57
cialis discount price of cialis https://wbmaastr.com/# - cialis online pharmacy generic for cialis cialis coupon walgreens <a href="https://wbmaastr.com/#&quot;&gt;order cialis online&lt;/a&gt; cialis cost otc cialis
xbvxozk
2020-06-17 12:51
viagra cost per pill online doctor prescription for viagra https://gredichepri.com/# - mail order viagra cheap viagra viagra without a doctor prescription usa <a href="https://gredichepri.com/#&quot;&gt;buy viagra online canada&lt;/a&gt; discount viagra where to get viagra
GregoryPed
2020-06-16 18:44
http://onlinepharmacyero.com/# viagra without a doctor prescription walmart
knjqune
2020-06-16 17:58
buy real viagra online viagra pill https://gemedjie.com/# - is there a generic for viagra viagra mail order viagra <a href="https://gemedjie.com/#&quot;&gt;how much does viagra cost&lt;/a&gt; viagra prices price of viagra
milossb
2020-06-16 16:44
generic viagra walmart buy generic viagra https://gemedjie.com/# - viagra price price of viagra viagra prescription online <a href="https://gemedjie.com/#&quot;&gt;when will viagra be generic&lt;/a&gt; generic name for viagra buy viagra
cwrcdnz
2020-06-16 12:58
cost of viagra price of viagra https://gredichepri.com/# - is there a generic for viagra viagra without a doctor prescription usa where to buy viagra <a href="https://gredichepri.com/#&quot;&gt;where to buy viagra online&lt;/a&gt; viagra over the counter walmart viagra no prescription
lbtjbgf
2020-06-16 08:51
buy viagra generic viagra india https://gemedjie.com/# - online doctor prescription for viagra online viagra prescription is there a generic viagra <a href="https://gemedjie.com/#&quot;&gt;cheap viagra&lt;/a&gt; viagra buy real viagra online
GregoryPed
2020-06-16 08:44
http://onlinepharmacyero.com/# online ed meds

发表评论:

Powered by emlog