jnuwtgnstrd
Static task
static1
Behavioral task
behavioral1
Sample
3bc7665a0a7abfb7a909b62bb0fd6eafbb7f4a0de7479f884a5bfb7f31452a84.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3bc7665a0a7abfb7a909b62bb0fd6eafbb7f4a0de7479f884a5bfb7f31452a84.dll
Resource
win10v2004-20220812-en
General
-
Target
3bc7665a0a7abfb7a909b62bb0fd6eafbb7f4a0de7479f884a5bfb7f31452a84
-
Size
52KB
-
MD5
f2696df0be7e3f46e94dcc2414f4747e
-
SHA1
71f1bf1f3e5e261e621ef9e7976a7a4110e8f19f
-
SHA256
3bc7665a0a7abfb7a909b62bb0fd6eafbb7f4a0de7479f884a5bfb7f31452a84
-
SHA512
69b5b62fce97152e3814fcf334f438ec9ab96cb8a8a932c019b99283846552607173876e334a2027a3bd4491aa6bb1200da739197a80bef36fb9879c0643a574
-
SSDEEP
768:7TXGWn459EoM19zjSXrUakJKZDv9bOK5wlJGDrqq2KsXlnqHHiTTryShpn:3ntzSX4adBlCK56UDrqzlqHCTPbn
Malware Config
Signatures
Files
-
3bc7665a0a7abfb7a909b62bb0fd6eafbb7f4a0de7479f884a5bfb7f31452a84.dll windows x86
5fcaa32fee510681529813df3be1c279
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetLocaleInfoA
SetThreadPriority
GetStringTypeA
UnmapViewOfFile
GlobalReAlloc
GlobalLock
CloseHandle
SetStdHandle
lstrcpyW
GetFileSize
GetProcAddress
LoadLibraryA
GetVersionExW
CreateDirectoryW
VirtualQuery
WideCharToMultiByte
CreateFileMappingW
GetCurrentThreadId
GetTempPathW
GetStartupInfoA
SearchPathW
FileTimeToLocalFileTime
lstrcpynA
GetModuleFileNameA
GetThreadTimes
lstrcmpW
Sleep
LockResource
HeapReAlloc
SetEnvironmentVariableA
ReadFile
LeaveCriticalSection
GetSystemTime
CreateMutexW
SetLastError
WaitForSingleObject
lstrlenA
IsBadStringPtrW
QueryPerformanceCounter
SuspendThread
GetTempFileNameW
lstrcatA
SetPriorityClass
LoadLibraryExW
InterlockedDecrement
WriteFile
WriteConsoleA
SearchPathA
ResetEvent
VirtualFree
SetCurrentDirectoryA
GetCurrentProcessId
RaiseException
CreateEventA
GetProcessHeap
GetStringTypeW
GetTimeFormatA
GetModuleHandleA
GetTickCount
GetTempPathA
GetVersion
GetStdHandle
GetFileTime
LocalAlloc
GetThreadLocale
CopyFileA
FreeLibrary
IsValidLocale
SetErrorMode
CreateFileA
HeapSize
GetHandleInformation
GetCPInfo
VirtualAlloc
user32
GetSysColor
SetDlgItemTextA
ReleaseDC
IsWindow
CharNextA
PostQuitMessage
DestroyWindow
ShowWindow
LoadIconA
GetFocus
SetTimer
SendMessageA
DialogBoxParamA
GetClientRect
SetWindowLongA
KillTimer
EndDialog
SendDlgItemMessageA
GetWindowRect
BeginPaint
LoadStringA
MessageBoxA
DispatchMessageA
TranslateMessage
SetWindowTextA
SetFocus
GetParent
SetWindowPos
shell32
DragQueryPoint
ShellExecuteA
DragAcceptFiles
comctl32
InitCommonControlsEx
ord6
PropertySheetW
winspool.drv
DeletePrintProvidorA
FreePrinterNotifyInfo
WritePrinter
EnumPrinterKeyA
EnumPrinterDriversA
DeletePrinterDataExA
DeleteMonitorA
ScheduleJob
StartPagePrinter
SetPrinterDataExA
AddPortA
AddFormA
DeletePrintProcessorA
SetPrinterDataA
DeletePrinter
ConnectToPrinterDlg
PrinterMessageBoxA
PrinterProperties
EnumPrintProcessorsA
FindFirstPrinterChangeNotification
StartDocPrinterA
ReadPrinter
EnumFormsA
GetPrinterA
AddPrintProcessorA
ClosePrinter
SetPrinterA
DocumentPropertiesA
DeletePrinterDriverExA
DeletePrinterDataA
DeletePrinterConnectionA
GetPrinterDriverA
AbortPrinter
GetPrinterDriverDirectoryA
ResetPrinterA
AddMonitorA
DeletePrinterDriverA
EnumJobsA
AdvancedDocumentPropertiesA
DeviceCapabilitiesA
GetPrinterDataExA
EnumMonitorsA
SetFormA
EnumPrinterDataExA
DeletePortA
AddPrinterConnectionA
GetFormA
EndPagePrinter
msvcrt
malloc
_initterm
free
sprintf
fread
fwrite
printf
fopen
fclose
_unlink
fseek
memset
ftell
__dllonexit
_onexit
_adjust_fdiv
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ