Overview
overview
4Static
static
批量图�...rk.exe
windows7-x64
1批量图�...rk.exe
windows10-2004-x64
1批量图�...rk.rtf
windows7-x64
4批量图�...rk.rtf
windows10-2004-x64
1批量图�...mo.png
windows7-x64
1批量图�...mo.png
windows10-2004-x64
3批量图�...��.url
windows7-x64
1批量图�...��.url
windows10-2004-x64
1批量图�...��.url
windows7-x64
1批量图�...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
批量图片水印 WaterMark 2.8.1_cfanpc.com/WaterMark.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
批量图片水印 WaterMark 2.8.1_cfanpc.com/WaterMark.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
批量图片水印 WaterMark 2.8.1_cfanpc.com/WaterMark.rtf
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
批量图片水印 WaterMark 2.8.1_cfanpc.com/WaterMark.rtf
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
批量图片水印 WaterMark 2.8.1_cfanpc.com/demo.png
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
批量图片水印 WaterMark 2.8.1_cfanpc.com/demo.png
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
批量图片水印 WaterMark 2.8.1_cfanpc.com/天猫淘宝优惠券领取-极客券购.url
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
批量图片水印 WaterMark 2.8.1_cfanpc.com/天猫淘宝优惠券领取-极客券购.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
批量图片水印 WaterMark 2.8.1_cfanpc.com/电脑极客.url
Resource
win7-20220901-en
Behavioral task
behavioral10
Sample
批量图片水印 WaterMark 2.8.1_cfanpc.com/电脑极客.url
Resource
win10v2004-20220812-en
General
-
Target
77ea8f618839661a4af80feeef2f30585ca61dcf0278c94139bd744c84b849ad
-
Size
172KB
-
MD5
9c07cfc4c9a28258ac522b96bc1de69e
-
SHA1
2356d8d94c45e0faaa50300f51135f28170b99cf
-
SHA256
77ea8f618839661a4af80feeef2f30585ca61dcf0278c94139bd744c84b849ad
-
SHA512
e482d01b65cdc8e9ba202bfe865907a54e5933b1cb3d0190fcaa70ae457480fbb401d930f437be044d93a1f1f358192b95c218ef05b1c28439ccfaac0ccb4223
-
SSDEEP
3072:U7SEYp1WcucTJQtTvMf9iFnyXHib1GkHaOk+qxSfbNt+YAjvT+rL:U7AWcutMf91HCZHH3qxS3Ajvm
Malware Config
Signatures
Files
-
77ea8f618839661a4af80feeef2f30585ca61dcf0278c94139bd744c84b849ad.rar
-
批量图片水印 WaterMark 2.8.1_cfanpc.com/WaterMark.exe.exe windows x86
96d772bafcc7008d1fd48d716926c18d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
HeapAlloc
GetProcessHeap
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
FreeLibrary
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
WaitForSingleObject
CopyFileW
GetLocalTime
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
WideCharToMultiByte
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapSize
Sleep
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
HeapCreate
HeapDestroy
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
RtlUnwind
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetVersionExA
MulDiv
CreateDirectoryW
GetModuleFileNameW
CreateFileW
GetFileSize
CloseHandle
lstrcpyW
GetFileAttributesW
FindFirstFileW
GetFullPathNameW
FindClose
FindNextFileW
lstrlenW
CreateThread
OutputDebugStringW
DebugBreak
SetLastError
CompareStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
InterlockedIncrement
lstrlenA
lstrcmpW
GetThreadLocale
GetStringTypeExW
MultiByteToWideChar
InterlockedDecrement
GetVersionExW
GetModuleHandleA
GetProcAddress
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetTickCount
user32
DrawTextW
UpdateWindow
GetWindowTextLengthW
SetRectEmpty
TranslateMessage
DrawFocusRect
LoadBitmapW
LoadImageW
GetWindowDC
IsDialogMessageW
GetCursorPos
FrameRect
ReleaseCapture
IsWindowEnabled
FillRect
GetFocus
GetClassNameW
DrawEdge
CallWindowProcW
SetWindowLongW
GetWindowLongW
CreateWindowExW
DestroyWindow
MoveWindow
GetWindowRect
CharLowerW
CreateDialogParamW
SetCursor
IsWindowVisible
GetWindowTextW
GetClientRect
InvalidateRect
ShowWindow
SetCapture
GetParent
GetDlgCtrlID
SetWindowPos
CopyRect
PtInRect
InflateRect
OffsetRect
SendMessageW
GetSysColor
DefWindowProcW
BeginPaint
EndPaint
GetDC
ReleaseDC
RegisterWindowMessageW
GetSystemMetrics
UnregisterClassW
GetActiveWindow
PostQuitMessage
GetCapture
PeekMessageW
DispatchMessageW
GetMessageW
RegisterClassExW
LoadCursorW
SystemParametersInfoW
DeleteMenu
DestroyMenu
SetWindowTextW
GetSystemMenu
GetDlgItemInt
SetDlgItemInt
SetDlgItemTextW
GetDlgItem
ScreenToClient
EnableWindow
GetDlgItemTextW
MessageBoxW
SetRect
LoadStringW
CharNextW
CharUpperW
SetTimer
KillTimer
UnregisterClassA
IsWindow
GetClassInfoExW
DialogBoxParamW
EndDialog
wvsprintfW
SetFocus
MapWindowPoints
GetWindow
FindWindowExW
PostMessageW
gdi32
SetTextColor
SetPolyFillMode
SetBkMode
SetBkColor
RealizePalette
Rectangle
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
EnumFontFamiliesExW
GetObjectW
DPtoLP
ExtTextOutW
GetTextExtentPoint32W
CreatePalette
DeleteObject
SelectObject
Polygon
CreatePen
CreateSolidBrush
GetDeviceCaps
CreateFontIndirectW
DeleteDC
SelectPalette
GetStockObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
ChooseColorW
advapi32
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
shell32
DragFinish
DragAcceptFiles
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
DragQueryFileW
ole32
CoTaskMemAlloc
CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoInitialize
oleaut32
VarUI4FromStr
comctl32
_TrackMouseEvent
InitCommonControlsEx
gdiplus
GdipDrawEllipseI
GdipDrawLineI
GdipDrawImageRectRectI
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipSetImageAttributesColorMatrix
GdipSetPropertyItem
GdipGetAllPropertyItems
GdipGetPropertySize
GdipSaveImageToStream
GdipSaveImageToFile
GdipDeletePen
GdipCreatePen1
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdiplusStartup
GdiplusShutdown
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipSetImagePalette
GdipGetImagePixelFormat
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDrawString
GdipFillRectangle
GdipSetSmoothingMode
GdipMeasureString
GdipSetStringFormatAlign
GdipBitmapSetResolution
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImageVerticalResolution
GdipGetImageHorizontalResolution
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawImageRectI
GdipSetInterpolationMode
GdipGetImageHeight
GdipGetImageWidth
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipCloneImage
GdipCloneBrush
GdipDrawImageI
GdipFillRectangleI
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipCreateSolidFill
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipDeleteGraphics
GdipDeleteBrush
GdipAlloc
GdipFree
GdipSetStringFormatLineAlign
GdipDrawLine
GdipStringFormatGetGenericTypographic
Sections
.text Size: 172KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
批量图片水印 WaterMark 2.8.1_cfanpc.com/WaterMark.wri.rtf .wri
-
批量图片水印 WaterMark 2.8.1_cfanpc.com/demo.bmp.png
-
批量图片水印 WaterMark 2.8.1_cfanpc.com/example.jpg.jpg
-
批量图片水印 WaterMark 2.8.1_cfanpc.com/images/lock.gif.gif
-
批量图片水印 WaterMark 2.8.1_cfanpc.com/使用说明.txt
-
批量图片水印 WaterMark 2.8.1_cfanpc.com/天猫淘宝优惠券领取-极客券购.url.url
-
批量图片水印 WaterMark 2.8.1_cfanpc.com/注册码.txt
-
批量图片水印 WaterMark 2.8.1_cfanpc.com/电脑极客.url.url