RJAFZN
Static task
static1
Behavioral task
behavioral1
Sample
39c9be25e0a9281c196b0de2ad91842cae351dbd148a9ee7ea86ad78ea0caf67.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
39c9be25e0a9281c196b0de2ad91842cae351dbd148a9ee7ea86ad78ea0caf67.dll
Resource
win10v2004-20220901-en
General
-
Target
39c9be25e0a9281c196b0de2ad91842cae351dbd148a9ee7ea86ad78ea0caf67
-
Size
392KB
-
MD5
702e26c057de71054835d11488977900
-
SHA1
4af167ec0b3d20b6312c853244ab3cf115c880db
-
SHA256
39c9be25e0a9281c196b0de2ad91842cae351dbd148a9ee7ea86ad78ea0caf67
-
SHA512
a8c874cf3183b75b1d54e4c9b12c58f9e128e645a1bd01c6eeb29198e2ab3e972f340abba99082a5908a50a146b3ee5698d237af72ddb5e7b3c2ea4670ea1f88
-
SSDEEP
6144:9gA72KUFWPgnCGJhrDUxWSjHggAXGGjPWQW6:X7GWPgn/hrm/Dgn2W
Malware Config
Signatures
Files
-
39c9be25e0a9281c196b0de2ad91842cae351dbd148a9ee7ea86ad78ea0caf67.dll windows x86
eeeec08a38ed3f4479b34715664db2fb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreatePenIndirect
GdiPlayPageEMF
GetMetaRgn
SetMapMode
Escape
Polygon
GetGraphicsMode
GetEnhMetaFilePixelFormat
ModifyWorldTransform
Pie
GetEnhMetaFileHeader
RestoreDC
ScaleWindowExtEx
SetWindowExtEx
GdiArtificialDecrementDriver
GetFontUnicodeRanges
CreateFontIndirectW
DeleteDC
DeleteObject
ExtTextOutW
GetBkMode
GetCurrentObject
GetLayout
GetMapMode
GetObjectType
GetObjectW
GetTextAlign
GetTextCharacterExtra
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
SelectObject
SetTextAlign
SetViewportExtEx
SetViewportOrgEx
SetWindowOrgEx
TranslateCharsetInfo
CloseEnhMetaFile
CreateDCW
CreateRectRgnIndirect
GetDeviceCaps
SetICMMode
SetICMProfileW
TextOutA
CreateFontIndirectExA
GetROP2
GetStockObject
PaintRgn
RectInRegion
kernel32
Beep
CloseHandle
DefineDosDeviceA
GetConsoleAliasW
GetDiskFreeSpaceExA
GetLocalTime
GetProcessHeap
GetSystemInfo
Sleep
WriteFile
LCMapStringW
CreateEventA
CreateEventW
DeviceIoControl
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileTime
GetModuleHandleW
GetOverlappedResult
GetProcAddress
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
InterlockedExchange
InterlockedIncrement
QueryPerformanceCounter
ResetEvent
SetEvent
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
lstrcmp
lstrlenW
ConnectNamedPipe
CreateFileA
DisableThreadLibraryCalls
ExitVDM
FreeLibrary
GetACP
GetDiskFreeSpaceA
GetSystemDirectoryA
LoadLibraryA
LoadLibraryExA
LocalAlloc
LocalFree
MultiByteToWideChar
ReleaseMutex
SetConsoleFont
SetFilePointer
VirtualAlloc
VirtualFreeEx
WriteConsoleOutputW
lstrcatA
lstrcmpA
lstrcpynA
lstrlenA
CreateThread
LocalReAlloc
ReadFile
SetEnvironmentVariableA
AddAtomA
FormatMessageW
GetCPInfo
GetProfileStringW
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
OutputDebugStringA
UnregisterWait
CreateTimerQueue
GetLocaleInfoW
GetUserDefaultLCID
GetVolumeInformationW
GlobalAlloc
GlobalFree
QueryDosDeviceA
SetLocaleInfoA
WriteConsoleA
CreateFileMappingA
EnumSystemLocalesW
GetModuleFileNameW
LoadResource
SetCommMask
SizeofResource
TerminateThread
VirtualQuery
lstrcatW
lstrcmpiW
lstrcpyW
lstrcpynW
CreateFileW
CreateIoCompletionPort
CreateMutexA
GetCommModemStatus
GetCommState
GlobalFix
GlobalHandle
RaiseException
ReadConsoleW
SetCommState
SetCommTimeouts
SetupComm
WaitCommEvent
CreateFileMappingW
ExpandEnvironmentStringsW
FindFirstFileA
FreeResource
GetConsoleAliasesLengthW
GetEnvironmentVariableW
GetModuleFileNameA
GetPrivateProfileIntA
InterlockedExchangeAdd
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
LoadLibraryW
LocalFileTimeToFileTime
MapViewOfFile
ResumeThread
SetTimeZoneInformation
SleepEx
TlsGetValue
UnmapViewOfFile
VirtualFree
WaitForMultipleObjects
WideCharToMultiByte
lstrcmpW
WriteConsoleInputW
ExitProcess
GetLastError
SetEndOfFile
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
DeleteFileA
LCMapStringA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
HeapFree
HeapReAlloc
HeapAlloc
HeapCompact
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetStdHandle
GetFileType
GetCommandLineA
GetVersion
TlsSetValue
ExitThread
CreateDirectoryW
SetConsoleCtrlHandler
SetFileTime
SystemTimeToFileTime
RtlUnwind
DeleteCriticalSection
FatalAppExitA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetOEMCP
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetModuleHandleA
CompareStringA
CompareStringW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TlsAlloc
TlsFree
SetLastError
GetCurrentThread
GetFileAttributesA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapSize
GetSystemTime
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetExitCodeProcess
CreateProcessA
FlushFileBuffers
oleaut32
VarI1FromCy
VarBstrCat
CreateErrorInfo
VarDateFromStr
OleCreateFontIndirect
VarBoolFromUI1
VarNumFromParseNum
OleLoadPictureFileEx
VarCyFromI1
BSTR_UserMarshal
OACreateTypeLib2
VarDecFromStr
rpcrt4
NdrXmitOrRepAsMarshall
tree_into_ndr
I_RpcNsBindingSetEntryNameW
NdrConformantArrayBufferSize
NdrPointerFree
NdrByteCountPointerFree
NdrNonConformantStringUnmarshall
RpcMgmtInqDefaultProtectLevel
UuidFromStringW
tree_peek_ndr
NdrComplexStructMemorySize
RpcNetworkIsProtseqValidA
RpcBindingSetAuthInfoExW
I_RpcServerAllocateIpPort
NdrMesSimpleTypeDecode
RpcMgmtInqStats
NdrEncapsulatedUnionBufferSize
NdrConformantStructBufferSize
RpcMgmtIsServerListening
RpcStringFreeW
UuidToStringW
user32
ClientToScreen
CloseDesktop
DdeCreateDataHandle
FindWindowA
GetMenuContextHelpId
SetWinEventHook
AttachThreadInput
EnumPropsExA
GetNextDlgTabItem
MapVirtualKeyExA
OemToCharW
CharNextA
CreateDesktopW
CreateWindowExA
DefWindowProcA
DrawStateW
GetActiveWindow
GetClassWord
IsCharAlphaA
PostMessageA
RegisterClassExA
RegisterClassW
SetRect
SetWindowLongA
UnregisterClassW
VkKeyScanA
wsprintfA
wvsprintfA
DrawTextExW
IsCharUpperW
SendIMEMessageExW
FreeDDElParam
GetMessagePos
CreateCaret
EnableMenuItem
GetKeyboardLayoutList
GetWindowModuleFileNameW
MessageBeep
CallWindowProcW
CharNextW
CreateWindowExW
DdeAccessData
DefWindowProcW
DestroyWindow
EqualRect
GetClassInfoExW
GetDC
GetParent
IntersectRect
IsMenu
IsWindow
LoadCursorW
OffsetRect
RegisterClassExW
ReleaseDC
SetFocus
SetWindowPos
SetWindowRgn
ShowWindow
ShowWindowAsync
wsprintfW
CountClipboardFormats
CreateMDIWindowA
DdeConnectList
DdeDisconnect
DestroyMenu
DialogBoxParamW
EnumDesktopsW
GetGUIThreadInfo
GetKeyState
GetPropA
ImpersonateDdeClientWindow
OpenClipboard
SendDlgItemMessageA
SendIMEMessageExA
SetUserObjectInformationW
Exports
Exports
Sections
.text Size: 284KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ