SmartHawk

1.4

低危

2 个模型检测该样本为恶意！

重新分析

下载样本

da72e8955adab118252e4bf6422d9a4240bd985296d87e39824741d30e4853f1

e4f08170f1764c7c1b56ae01adbaaeee.exe

分析耗时

97s

查杀引擎	查杀时间	查杀版本
McAfee	20210108	6.0.6.653
Baidu	20190318	1.0.0.2
Alibaba	20190527	0.3.0.5
Avast	20210109	21.1.5827.0
Kingsoft	20210109	2017.9.26.565
Tencent	20210109	1.0.0.1
CrowdStrike	20190702	1.0

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析

⚡ 行为特征

🛡️ 防护建议

🔧 技术手段

🎯 检测方法

🤖

Static Analysis
Strings

PE Compile Time

2020-07-28 21:59:29

Imports

Library gdiplus.dll:

• 0xa93bb8 GdipAlloc

• 0xa93bbc GdipDisposeImage

• 0xa93bc0 GdipCreateFromHDC

• 0xa93bc4 GdipDeleteGraphics

• 0xa93bc8 GdipSetPageUnit

• 0xa93bcc GdipFree

• 0xa93bd0 GdipSetPageScale

• 0xa93bd4 GdipGetDpiX

• 0xa93bd8 GdipDrawImageRectI

• 0xa93bdc GdipBitmapLockBits

• 0xa93be0 GdipLoadImageFromFile

• 0xa93be4 GdipCloneImage

• 0xa93be8 GdipGetImageWidth

• 0xa93bec GdipGetImageHeight

• 0xa93bf0 GdiplusStartup

• 0xa93bf4 GdipDeleteBrush

• 0xa93bf8 GdipCloneBrush

• 0xa93bfc GdipCreateLineBrush

• 0xa93c00 GdipFillRectangle

• 0xa93c04 GdipSetLineBlend

• 0xa93c08 GdipFillRectangleI

• 0xa93c0c GdipCreateLineBrushI

• 0xa93c10 GdipBitmapUnlockBits

• 0xa93c14 GdipGetImageGraphicsContext

• 0xa93c18 GdipDrawImageI

• 0xa93c1c GdipCreateBitmapFromScan0

• 0xa93c20 GdipCreateBitmapFromStream

• 0xa93c24 GdipGetImagePalette

• 0xa93c28 GdipGetImagePaletteSize

• 0xa93c2c GdipGetImagePixelFormat

• 0xa93c30 GdipSetInterpolationMode

• 0xa93c34 GdipCreateBitmapFromHBITMAP

• 0xa93c38 GdipLoadImageFromFileICM

• 0xa93c3c GdiplusShutdown

Library WINMM.dll:

• 0xa93b98 timeGetTime

• 0xa93b9c PlaySoundA

Library WININET.dll:

• 0xa93b74 HttpQueryInfoA

• 0xa93b78 InternetAttemptConnect

• 0xa93b7c InternetOpenA

• 0xa93b80 InternetCloseHandle

• 0xa93b84 InternetSetOptionA

• 0xa93b88 InternetQueryOptionA

• 0xa93b8c InternetReadFile

• 0xa93b90 InternetOpenUrlA

Library KERNEL32.dll:

• 0xa932cc GlobalReAlloc

• 0xa932d0 GlobalHandle

• 0xa932d4 TlsAlloc

• 0xa932d8 TlsSetValue

• 0xa932dc LocalReAlloc

• 0xa932e0 TlsFree

• 0xa932e4 GetACP

• 0xa932e8 GetCPInfo

• 0xa932ec GetOEMCP

• 0xa932f0 GetSystemDirectoryW

• 0xa932f4 SetErrorMode

• 0xa932f8 FindResourceExW

• 0xa932fc GetWindowsDirectoryA

• 0xa93300 GetNumberFormatA

• 0xa93304 EncodePointer

• 0xa93308 DecodePointer

• 0xa9330c GetSystemTimeAsFileTime

• 0xa93310 GetTimeFormatA

• 0xa93314 GetDriveTypeA

• 0xa93318 FindFirstFileExA

• 0xa9331c HeapReAlloc

• 0xa93320 RemoveDirectoryA

• 0xa93324 PeekNamedPipe

• 0xa93328 VirtualAlloc

• 0xa9332c VirtualQuery

• 0xa93330 GetCommandLineA

• 0xa93334 HeapSetInformation

• 0xa93338 GetStartupInfoW

• 0xa9333c RtlUnwind

• 0xa93340 RaiseException

• 0xa93344 SetStdHandle

• 0xa93348 HeapQueryInformation

• 0xa9334c HeapSize

• 0xa93350 UnhandledExceptionFilter

• 0xa93354 IsDebuggerPresent

• 0xa93358 IsValidCodePage

• 0xa9335c GetStdHandle

• 0xa93360 LCMapStringW

• 0xa93364 IsProcessorFeaturePresent

• 0xa93368 SetHandleCount

• 0xa9336c GetStringTypeW

• 0xa93370 GetConsoleCP

• 0xa93374 GetConsoleMode

• 0xa93378 GetCurrentDirectoryW

• 0xa9337c GetLocaleInfoW

• 0xa93380 CompareStringW

• 0xa93384 FreeEnvironmentStringsW

• 0xa93388 GetEnvironmentStringsW

• 0xa9338c GetDriveTypeW

• 0xa93390 WriteConsoleW

• 0xa93394 EnumSystemLocalesA

• 0xa93398 IsValidLocale

• 0xa9339c GetProcessHeap

• 0xa933a0 CreateFileW

• 0xa933a4 SetEnvironmentVariableA

• 0xa933a8 SearchPathA

• 0xa933ac GlobalFlags

• 0xa933b0 GetPrivateProfileStringA

• 0xa933b4 EnumResourceLanguagesA

• 0xa933b8 EnumResourceNamesA

• 0xa933bc EnumResourceTypesA

• 0xa933c0 GetPrivateProfileSectionNamesA

• 0xa933c4 LoadLibraryExW

• 0xa933c8 LocalSize

• 0xa933cc FindResourceW

• 0xa933d0 LoadResource

• 0xa933d4 WideCharToMultiByte

• 0xa933d8 SizeofResource

• 0xa933dc LockResource

• 0xa933e0 InterlockedIncrement

• 0xa933e4 InterlockedCompareExchange

• 0xa933e8 LeaveCriticalSection

• 0xa933ec SetThreadPriority

• 0xa933f0 EnterCriticalSection

• 0xa933f4 DeleteCriticalSection

• 0xa933f8 SetThreadAffinityMask

• 0xa933fc CreateThread

• 0xa93400 GetCurrentThread

• 0xa93404 GetTempPathA

• 0xa93408 SuspendThread

• 0xa9340c ResumeThread

• 0xa93410 OutputDebugStringA

• 0xa93414 SetLastError

• 0xa93418 WritePrivateProfileStringA

• 0xa9341c GetPrivateProfileIntA

• 0xa93420 GetUserDefaultUILanguage

• 0xa93424 DeactivateActCtx

• 0xa93428 GetLastError

• 0xa9342c LoadLibraryA

• 0xa93430 GetModuleHandleA

• 0xa93434 GetProcAddress

• 0xa93438 ActivateActCtx

• 0xa9343c GetSystemInfo

• 0xa93440 GetThreadTimes

• 0xa93444 _llseek

• 0xa93448 _lread

• 0xa9344c _hread

• 0xa93450 _lopen

• 0xa93454 _lclose

• 0xa93458 MultiByteToWideChar

• 0xa9345c DeleteFileA

• 0xa93460 CopyFileA

• 0xa93464 GlobalSize

• 0xa93468 GlobalAlloc

• 0xa9346c GlobalLock

• 0xa93470 GlobalUnlock

• 0xa93474 GlobalFree

• 0xa93478 FindResourceA

• 0xa9347c FreeResource

• 0xa93480 InterlockedDecrement

• 0xa93484 GetTickCount

• 0xa93488 GetUserDefaultLangID

• 0xa9348c ExitProcess

• 0xa93490 WaitForSingleObject

• 0xa93494 CreateDirectoryA

• 0xa93498 FindFirstFileA

• 0xa9349c FindNextFileA

• 0xa934a0 SetThreadLocale

• 0xa934a4 GetCurrentProcess

• 0xa934a8 InitializeCriticalSection

• 0xa934ac VirtualFreeEx

• 0xa934b0 VirtualAllocEx

• 0xa934b4 lstrlenA

• 0xa934b8 lstrcpyA

• 0xa934bc lstrcatA

• 0xa934c0 lstrcpynA

• 0xa934c4 ExitThread

• 0xa934c8 HeapAlloc

• 0xa934cc HeapFree

• 0xa934d0 HeapDestroy

• 0xa934d4 HeapCreate

• 0xa934d8 GetCurrentThreadId

• 0xa934dc GetSystemDirectoryA

• 0xa934e0 GetVolumeInformationA

• 0xa934e4 GetSystemDefaultLCID

• 0xa934e8 SetUnhandledExceptionFilter

• 0xa934ec GetModuleFileNameA

• 0xa934f0 CreateFileA

• 0xa934f4 GetCurrentProcessId

• 0xa934f8 CloseHandle

• 0xa934fc TerminateProcess

• 0xa93500 Sleep

• 0xa93504 TerminateThread

• 0xa93508 GetFileSize

• 0xa9350c ReadFile

• 0xa93510 GetSystemDefaultLangID

• 0xa93514 FreeLibrary

• 0xa93518 QueryPerformanceCounter

• 0xa9351c GetExitCodeThread

• 0xa93520 MulDiv

• 0xa93524 WriteFile

• 0xa93528 CompareStringA

• 0xa9352c WinExec

• 0xa93530 GetDateFormatA

• 0xa93534 FindClose

• 0xa93538 InitializeCriticalSectionAndSpinCount

• 0xa9353c SetEvent

• 0xa93540 ResetEvent

• 0xa93544 CreateProcessA

• 0xa93548 GetSystemTime

• 0xa9354c GetTimeZoneInformation

• 0xa93550 GetVersionExA

• 0xa93554 SystemTimeToFileTime

• 0xa93558 OpenProcess

• 0xa9355c DuplicateHandle

• 0xa93560 GetFileType

• 0xa93564 SetFilePointer

• 0xa93568 GetCurrentDirectoryA

• 0xa9356c DosDateTimeToFileTime

• 0xa93570 SetFileTime

• 0xa93574 FileTimeToSystemTime

• 0xa93578 GetFileInformationByHandle

• 0xa9357c FileTimeToDosDateTime

• 0xa93580 UnmapViewOfFile

• 0xa93584 GetLocalTime

• 0xa93588 GetVersion

• 0xa9358c lstrlenW

• 0xa93590 LocalFree

• 0xa93594 FormatMessageA

• 0xa93598 lstrcmpW

• 0xa9359c LoadLibraryW

• 0xa935a0 GlobalDeleteAtom

• 0xa935a4 GlobalFindAtomA

• 0xa935a8 GlobalAddAtomA

• 0xa935ac TlsGetValue

• 0xa935b0 GlobalGetAtomNameA

• 0xa935b4 lstrcmpA

• 0xa935b8 GetStringTypeExA

• 0xa935bc GetThreadLocale

• 0xa935c0 lstrcmpiA

• 0xa935c4 MoveFileA

• 0xa935c8 FlushFileBuffers

• 0xa935cc LockFile

• 0xa935d0 UnlockFile

• 0xa935d4 SetEndOfFile

• 0xa935d8 GetFullPathNameA

• 0xa935dc GetShortPathNameA

• 0xa935e0 GetFileAttributesExA

• 0xa935e4 SetFileAttributesA

• 0xa935e8 FileTimeToLocalFileTime

• 0xa935ec LocalFileTimeToFileTime

• 0xa935f0 GetFileAttributesA

• 0xa935f4 GetFileSizeEx

• 0xa935f8 GetFileTime

• 0xa935fc CreateEventA

• 0xa93600 CreateActCtxW

• 0xa93604 ReleaseActCtx

• 0xa93608 GetModuleFileNameW

• 0xa9360c VirtualProtect

• 0xa93610 GetUserDefaultLCID

• 0xa93614 ReplaceFileA

• 0xa93618 GetTempFileNameA

• 0xa9361c GetDiskFreeSpaceA

• 0xa93620 GetProfileIntA

• 0xa93624 InterlockedExchange

• 0xa93628 GetModuleHandleW

• 0xa9362c LoadLibraryExA

• 0xa93630 GetLocaleInfoA

• 0xa93634 GetSystemDefaultUILanguage

• 0xa93638 ConvertDefaultLocale

• 0xa9363c LocalAlloc

Library USER32.dll:

• 0xa93738 SetDlgItemTextA

• 0xa9373c SetDlgItemInt

• 0xa93740 GetDlgItemInt

• 0xa93744 CheckDlgButton

• 0xa93748 SendDlgItemMessageA

• 0xa9374c WinHelpA

• 0xa93750 IsChild

• 0xa93754 GetClassLongA

• 0xa93758 SetPropA

• 0xa9375c GetPropA

• 0xa93760 RemovePropA

• 0xa93764 SetFocus

• 0xa93768 GetWindowTextLengthA

• 0xa9376c GetForegroundWindow

• 0xa93770 BeginDeferWindowPos

• 0xa93774 EndDeferWindowPos

• 0xa93778 GetTopWindow

• 0xa9377c GetMessageTime

• 0xa93780 GetMessagePos

• 0xa93784 MonitorFromWindow

• 0xa93788 GetMonitorInfoA

• 0xa9378c ScrollWindow

• 0xa93790 TrackPopupMenu

• 0xa93794 SetMenu

• 0xa93798 SetScrollRange

• 0xa9379c GetScrollRange

• 0xa937a0 SetScrollPos

• 0xa937a4 ShowScrollBar

• 0xa937a8 ValidateRect

• 0xa937ac GetClassInfoExA

• 0xa937b0 GetClassInfoA

• 0xa937b4 AdjustWindowRectEx

• 0xa937b8 DeferWindowPos

• 0xa937bc SetScrollInfo

• 0xa937c0 SetWindowPlacement

• 0xa937c4 GetWindowPlacement

• 0xa937c8 GetDlgCtrlID

• 0xa937cc CallWindowProcA

• 0xa937d0 SetWindowPos

• 0xa937d4 GetMenuStringA

• 0xa937d8 InsertMenuA

• 0xa937dc CreateDialogIndirectParamA

• 0xa937e0 DestroyWindow

• 0xa937e4 GetNextDlgTabItem

• 0xa937e8 EndDialog

• 0xa937ec SetMenuItemBitmaps

• 0xa937f0 GetMenuCheckMarkDimensions

• 0xa937f4 ModifyMenuA

• 0xa937f8 GetMenuState

• 0xa937fc IntersectRect

• 0xa93800 GetWindowDC

• 0xa93804 SetWindowRgn

• 0xa93808 GrayStringA

• 0xa9380c DrawTextExA

• 0xa93810 TabbedTextOutA

• 0xa93814 IsRectEmpty

• 0xa93818 EqualRect

• 0xa9381c LockWindowUpdate

• 0xa93820 MapWindowPoints

• 0xa93824 TrackPopupMenuEx

• 0xa93828 SetCapture

• 0xa9382c ReleaseCapture

• 0xa93830 CreateIconIndirect

• 0xa93834 CheckMenuRadioItem

• 0xa93838 LoadCursorW

• 0xa9383c SetForegroundWindow

• 0xa93840 GetLastActivePopup

• 0xa93844 MessageBoxW

• 0xa93848 GetWindowRgn

• 0xa9384c GetClassNameA

• 0xa93850 SetWindowsHookExA

• 0xa93854 CallNextHookEx

• 0xa93858 MapDialogRect

• 0xa9385c UnhookWindowsHookEx

• 0xa93860 GetCursorPos

• 0xa93864 SetCursorPos

• 0xa93868 GetWindow

• 0xa9386c GetWindowThreadProcessId

• 0xa93870 MessageBoxA

• 0xa93874 SendInput

• 0xa93878 SetRectEmpty

• 0xa9387c IsClipboardFormatAvailable

• 0xa93880 GetAsyncKeyState

• 0xa93884 InvertRect

• 0xa93888 SendMessageW

• 0xa9388c DispatchMessageA

• 0xa93890 IsDialogMessageA

• 0xa93894 PeekMessageA

• 0xa93898 FrameRect

• 0xa9389c EnableMenuItem

• 0xa938a0 RemoveMenu

• 0xa938a4 UpdateLayeredWindow

• 0xa938a8 CreatePopupMenu

• 0xa938ac MoveWindow

• 0xa938b0 GetCapture

• 0xa938b4 GetDlgItemTextW

• 0xa938b8 SetActiveWindow

• 0xa938bc GetActiveWindow

• 0xa938c0 IsWindowEnabled

• 0xa938c4 GetDesktopWindow

• 0xa938c8 AppendMenuA

• 0xa938cc GetMenu

• 0xa938d0 DeleteMenu

• 0xa938d4 GetMenuItemInfoA

• 0xa938d8 ReuseDDElParam

• 0xa938dc UnpackDDElParam

• 0xa938e0 GetMenuItemID

• 0xa938e4 LoadMenuW

• 0xa938e8 GetSubMenu

• 0xa938ec GetMenuItemCount

• 0xa938f0 IsWindowVisible

• 0xa938f4 DestroyAcceleratorTable

• 0xa938f8 PostQuitMessage

• 0xa938fc SetDlgItemTextW

• 0xa93900 CloseClipboard

• 0xa93904 GetClipboardData

• 0xa93908 OpenClipboard

• 0xa9390c GetFocus

• 0xa93910 RegisterClassA

• 0xa93914 LoadCursorA

• 0xa93918 CreateWindowExA

• 0xa9391c ScreenToClient

• 0xa93920 GetDlgItem

• 0xa93924 DefWindowProcA

• 0xa93928 SetCursor

• 0xa9392c EndPaint

• 0xa93930 BeginPaint

• 0xa93934 GetWindowTextA

• 0xa93938 SetWindowLongA

• 0xa9393c GetWindowLongA

• 0xa93940 LoadIconA

• 0xa93944 LoadIconW

• 0xa93948 GetScrollPos

• 0xa9394c GetIconInfo

• 0xa93950 LoadImageA

• 0xa93954 DestroyIcon

• 0xa93958 KillTimer

• 0xa9395c SetTimer

• 0xa93960 IsWindow

• 0xa93964 ReleaseDC

• 0xa93968 GetDC

• 0xa9396c MonitorFromPoint

• 0xa93970 CreateAcceleratorTableA

• 0xa93974 GetKeyboardState

• 0xa93978 GetKeyboardLayout

• 0xa9397c ToAsciiEx

• 0xa93980 GetSystemMetrics

• 0xa93984 DrawFocusRect

• 0xa93988 OffsetRect

• 0xa9398c ShowWindow

• 0xa93990 PostMessageA

• 0xa93994 PtInRect

• 0xa93998 GetParent

• 0xa9399c GetWindowRect

• 0xa939a0 DrawTextA

• 0xa939a4 DrawIcon

• 0xa939a8 FillRect

• 0xa939ac InflateRect

• 0xa939b0 RedrawWindow

• 0xa939b4 GetClientRect

• 0xa939b8 CopyRect

• 0xa939bc SetRect

• 0xa939c0 DrawFrameControl

• 0xa939c4 DrawEdge

• 0xa939c8 SetWindowTextA

• 0xa939cc CharUpperA

• 0xa939d0 GetKeyNameTextA

• 0xa939d4 MapVirtualKeyA

• 0xa939d8 GetMessageA

• 0xa939dc DefFrameProcA

• 0xa939e0 DefMDIChildProcA

• 0xa939e4 BringWindowToTop

• 0xa939e8 SubtractRect

• 0xa939ec GetDoubleClickTime

• 0xa939f0 CharUpperBuffA

• 0xa939f4 CopyIcon

• 0xa939f8 GetUpdateRect

• 0xa939fc SetClassLongA

• 0xa93a00 DrawIconEx

• 0xa93a04 NotifyWinEvent

• 0xa93a08 EnableScrollBar

• 0xa93a0c HideCaret

• 0xa93a10 GetMenuDefaultItem

• 0xa93a14 CreateMenu

• 0xa93a18 GetNextDlgGroupItem

• 0xa93a1c InvalidateRgn

• 0xa93a20 CopyAcceleratorTableA

• 0xa93a24 CharNextA

• 0xa93a28 SetMenuDefaultItem

• 0xa93a2c MapVirtualKeyExA

• 0xa93a30 IsCharLowerA

• 0xa93a34 LoadImageW

• 0xa93a38 EmptyClipboard

• 0xa93a3c TranslateMDISysAccel

• 0xa93a40 TranslateMessage

• 0xa93a44 PostThreadMessageA

• 0xa93a48 GetTabbedTextExtentA

• 0xa93a4c MessageBeep

• 0xa93a50 UnionRect

• 0xa93a54 IsZoomed

• 0xa93a58 UnregisterClassA

• 0xa93a5c SetLayeredWindowAttributes

• 0xa93a60 EnumDisplayMonitors

• 0xa93a64 CopyImage

• 0xa93a68 GetDialogBaseUnits

• 0xa93a6c GetSysColorBrush

• 0xa93a70 WaitMessage

• 0xa93a74 GetTabbedTextExtentW

• 0xa93a78 RealChildWindowFromPoint

• 0xa93a7c IsMenu

• 0xa93a80 ShowOwnedPopups

• 0xa93a84 LoadAcceleratorsW

• 0xa93a88 SetWindowContextHelpId

• 0xa93a8c RegisterClipboardFormatA

• 0xa93a90 GetDCEx

• 0xa93a94 SetParent

• 0xa93a98 GetSystemMenu

• 0xa93a9c SystemParametersInfoA

• 0xa93aa0 WindowFromPoint

• 0xa93aa4 AdjustWindowRect

• 0xa93aa8 RegisterClassW

• 0xa93aac DefMDIChildProcW

• 0xa93ab0 DefDlgProcW

• 0xa93ab4 DefDlgProcA

• 0xa93ab8 DefFrameProcW

• 0xa93abc DefWindowProcW

• 0xa93ac0 CallWindowProcW

• 0xa93ac4 LoadStringA

• 0xa93ac8 GetMenuStringW

• 0xa93acc LoadBitmapA

• 0xa93ad0 LookupIconIdFromDirectoryEx

• 0xa93ad4 EnumWindows

• 0xa93ad8 IsWindowUnicode

• 0xa93adc GetWindowLongW

• 0xa93ae0 SetWindowLongW

• 0xa93ae4 mouse_event

• 0xa93ae8 SendMessageTimeoutA

• 0xa93aec GetCursor

• 0xa93af0 ShowCaret

• 0xa93af4 GetKeyboardLayoutList

• 0xa93af8 wsprintfA

• 0xa93afc CreateIconFromResourceEx

• 0xa93b00 GetSysColor

• 0xa93b04 DrawMenuBar

• 0xa93b08 ClientToScreen

• 0xa93b0c LoadBitmapW

• 0xa93b10 GetKeyState

• 0xa93b14 SendMessageA

• 0xa93b18 RegisterWindowMessageA

• 0xa93b1c LoadMenuA

• 0xa93b20 DestroyMenu

• 0xa93b24 LoadAcceleratorsA

• 0xa93b28 InsertMenuItemA

• 0xa93b2c DestroyCursor

• 0xa93b30 IsIconic

• 0xa93b34 CheckMenuItem

• 0xa93b38 InvalidateRect

• 0xa93b3c UpdateWindow

• 0xa93b40 EnableWindow

• 0xa93b44 TranslateAcceleratorA

• 0xa93b48 SetClipboardData

• 0xa93b4c GetScrollInfo

• 0xa93b50 DrawStateA

Library GDI32.dll:

• 0xa93090 BeginPath

• 0xa93094 CloseFigure

• 0xa93098 EndPath

• 0xa9309c StrokeAndFillPath

• 0xa930a0 FillPath

• 0xa930a4 StrokePath

• 0xa930a8 ExtTextOutW

• 0xa930ac SetBrushOrgEx

• 0xa930b0 GetBitmapBits

• 0xa930b4 SetWinMetaFileBits

• 0xa930b8 GetObjectA

• 0xa930bc ScaleViewportExtEx

• 0xa930c0 SetPixelV

• 0xa930c4 SetPaletteEntries

• 0xa930c8 ExtFloodFill

• 0xa930cc RoundRect

• 0xa930d0 SetPixel

• 0xa930d4 GetDIBits

• 0xa930d8 SetDIBColorTable

• 0xa930dc Polyline

• 0xa930e0 GetSystemPaletteEntries

• 0xa930e4 GetNearestPaletteIndex

• 0xa930e8 GetPaletteEntries

• 0xa930ec EnumFontFamiliesExA

• 0xa930f0 GetTextCharsetInfo

• 0xa930f4 EnumFontFamiliesA

• 0xa930f8 CreateDIBitmap

• 0xa930fc CreateEllipticRgn

• 0xa93100 GetWindowOrgEx

• 0xa93104 GetTextExtentPoint32W

• 0xa93108 GetTextExtentPointA

• 0xa9310c GetCharWidthA

• 0xa93110 GetTextFaceA

• 0xa93114 GetStretchBltMode

• 0xa93118 GetROP2

• 0xa9311c GetPolyFillMode

• 0xa93120 SetRectRgn

• 0xa93124 CreateRectRgnIndirect

• 0xa93128 CopyMetaFileA

• 0xa9312c CreateHatchBrush

• 0xa93130 CreatePen

• 0xa93134 GetObjectType

• 0xa93138 CreatePatternBrush

• 0xa9313c ExtSelectClipRgn

• 0xa93140 PolyBezierTo

• 0xa93144 ScaleWindowExtEx

• 0xa93148 SetWindowExtEx

• 0xa9314c OffsetWindowOrgEx

• 0xa93150 SetWindowOrgEx

• 0xa93154 CreateSolidBrush

• 0xa93158 SetViewportExtEx

• 0xa9315c OffsetViewportOrgEx

• 0xa93160 SetViewportOrgEx

• 0xa93164 GetClipRgn

• 0xa93168 SelectClipRgn

• 0xa9316c SetLayout

• 0xa93170 MoveToEx

• 0xa93174 LineTo

• 0xa93178 IntersectClipRect

• 0xa9317c ExcludeClipRect

• 0xa93180 GetClipBox

• 0xa93184 SetROP2

• 0xa93188 SetPolyFillMode

• 0xa9318c RestoreDC

• 0xa93190 SaveDC

• 0xa93194 SetMapMode

• 0xa93198 CreateDIBSection

• 0xa9319c CreatePolyPolygonRgn

• 0xa931a0 GetPixel

• 0xa931a4 GetRgnBox

• 0xa931a8 CombineRgn

• 0xa931ac CreatePolygonRgn

• 0xa931b0 CreateRoundRectRgn

• 0xa931b4 FrameRgn

• 0xa931b8 FillRgn

• 0xa931bc GetRegionData

• 0xa931c0 ExtCreateRegion

• 0xa931c4 Escape

• 0xa931c8 PtVisible

• 0xa931cc RectVisible

• 0xa931d0 GetViewportExtEx

• 0xa931d4 GetWindowExtEx

• 0xa931d8 LPtoDP

• 0xa931dc DeleteDC

• 0xa931e0 GetBkColor

• 0xa931e4 GetNearestColor

• 0xa931e8 AbortDoc

• 0xa931ec EndDoc

• 0xa931f0 EndPage

• 0xa931f4 StartPage

• 0xa931f8 DPtoLP

• 0xa931fc StartDocA

• 0xa93200 SetAbortProc

• 0xa93204 CreateDCA

• 0xa93208 GetViewportOrgEx

• 0xa9320c GetCurrentPositionEx

• 0xa93210 ResetDCA

• 0xa93214 CreateBitmap

• 0xa93218 PtInRegion

• 0xa9321c OffsetRgn

• 0xa93220 RealizePalette

• 0xa93224 GetTextAlign

• 0xa93228 Arc

• 0xa9322c PatBlt

• 0xa93230 UnrealizeObject

• 0xa93234 SetBkColor

• 0xa93238 GetDeviceCaps

• 0xa9323c GetCurrentObject

• 0xa93240 GetTextColor

• 0xa93244 CreateRectRgn

• 0xa93248 SetTextAlign

• 0xa9324c TextOutA

• 0xa93250 ExtTextOutA

• 0xa93254 Rectangle

• 0xa93258 GetStockObject

• 0xa9325c CreateFontIndirectA

• 0xa93260 GetBoundsRect

• 0xa93264 StretchBlt

• 0xa93268 StretchDIBits

• 0xa9326c SetStretchBltMode

• 0xa93270 SelectPalette

• 0xa93274 CreatePalette

• 0xa93278 GetTextMetricsA

• 0xa9327c SelectObject

• 0xa93280 GetBkMode

• 0xa93284 SetTextColor

• 0xa93288 SetBkMode

• 0xa9328c DeleteObject

• 0xa93290 Ellipse

• 0xa93294 Polygon

• 0xa93298 GetTextExtentPoint32A

• 0xa9329c CreateFontA

• 0xa932a0 GetMapMode

• 0xa932a4 GetLayout

• 0xa932a8 BitBlt

• 0xa932ac CreateCompatibleBitmap

• 0xa932b0 CreateCompatibleDC

• 0xa932b4 PlayEnhMetaFile

Library MSIMG32.dll:

• 0xa93644 TransparentBlt

• 0xa93648 AlphaBlend

Library COMDLG32.dll:

• 0xa93088 GetFileTitleA

Library WINSPOOL.DRV:

• 0xa93ba4 OpenPrinterA

• 0xa93ba8 DocumentPropertiesA

• 0xa93bac GetJobA

• 0xa93bb0 ClosePrinter

Library ADVAPI32.dll:

• 0xa93000 SetFileSecurityA

• 0xa93004 GetFileSecurityA

• 0xa93008 RegDeleteKeyA

• 0xa9300c RegOpenKeyExA

• 0xa93010 RegQueryValueExA

• 0xa93014 RegCreateKeyExA

• 0xa93018 RegSetValueExA

• 0xa9301c RegSetValueExW

• 0xa93020 RegQueryValueExW

• 0xa93024 RegCloseKey

• 0xa93028 RegSetValueA

• 0xa9302c RegOpenKeyExW

• 0xa93030 RegDeleteValueA

• 0xa93034 RegEnumValueA

• 0xa93038 RegEnumKeyExA

• 0xa9303c RegEnumKeyA

• 0xa93040 RegQueryValueA

Library SHELL32.dll:

• 0xa936d4 ExtractIconExA

• 0xa936d8 FindExecutableA

• 0xa936dc DragAcceptFiles

• 0xa936e0 SHGetFolderPathA

• 0xa936e4 Shell_NotifyIconA

• 0xa936e8 SHGetFileInfoA

• 0xa936ec DragFinish

• 0xa936f0 SHBrowseForFolderA

• 0xa936f4 SHGetMalloc

• 0xa936f8 SHAppBarMessage

• 0xa936fc SHGetSpecialFolderLocation

• 0xa93700 SHGetPathFromIDListA

• 0xa93704 SHGetDesktopFolder

• 0xa93708 SHAddToRecentDocs

• 0xa9370c ExtractIconA

• 0xa93710 DragQueryFileA

• 0xa93714 ShellExecuteA

Library COMCTL32.dll:

• 0xa93048 ImageList_GetImageInfo

• 0xa9304c ImageList_AddMasked

• 0xa93050 ImageList_Destroy

• 0xa93054 ImageList_GetImageCount

• 0xa93058 ImageList_Create

• 0xa9305c ImageList_GetBkColor

• 0xa93060 ImageList_GetIconSize

• 0xa93064 PropertySheetA

• 0xa93068 DestroyPropertySheetPage

• 0xa9306c CreatePropertySheetPageA

• 0xa93070 ImageList_DrawEx

• 0xa93074 FlatSB_GetScrollProp

• 0xa93078 ImageList_Draw

• 0xa9307c _TrackMouseEvent

• 0xa93080 ImageList_DrawIndirect

Library SHLWAPI.dll:

• 0xa9371c PathRemoveFileSpecW

• 0xa93720 PathFindExtensionA

• 0xa93724 PathRemoveExtensionA

• 0xa93728 PathFindFileNameA

• 0xa9372c PathIsUNCA

• 0xa93730 PathStripToRootA

Library ole32.dll:

• 0xa93c4c RevokeDragDrop

• 0xa93c50 RegisterDragDrop

• 0xa93c54 CoInitialize

• 0xa93c58 DoDragDrop

• 0xa93c5c StgCreateDocfileOnILockBytes

• 0xa93c60 OleGetClipboard

• 0xa93c64 CoLockObjectExternal

• 0xa93c68 OleLockRunning

• 0xa93c6c OleDestroyMenuDescriptor

• 0xa93c70 OleCreateMenuDescriptor

• 0xa93c74 IsAccelerator

• 0xa93c78 OleTranslateAccelerator

• 0xa93c7c CreateILockBytesOnHGlobal

• 0xa93c80 CreateStreamOnHGlobal

• 0xa93c84 StgOpenStorageOnILockBytes

• 0xa93c88 CoRegisterMessageFilter

• 0xa93c8c OleFlushClipboard

• 0xa93c90 OleIsCurrentClipboard

• 0xa93c94 CoRevokeClassObject

• 0xa93c98 CoGetClassObject

• 0xa93c9c OleInitialize

• 0xa93ca0 CoFreeUnusedLibraries

• 0xa93ca4 OleUninitialize

• 0xa93ca8 CoCreateGuid

• 0xa93cac CLSIDFromString

• 0xa93cb0 CLSIDFromProgID

• 0xa93cb4 OleRun

• 0xa93cb8 CoInitializeEx

• 0xa93cbc CoCreateInstance

• 0xa93cc0 OleDuplicateData

• 0xa93cc4 CoTaskMemAlloc

• 0xa93cc8 ReleaseStgMedium

• 0xa93ccc StringFromCLSID

• 0xa93cd0 CoTaskMemFree

• 0xa93cd4 CoDisconnectObject

• 0xa93cd8 GetHGlobalFromStream

• 0xa93cdc CoUninitialize

Library OLEAUT32.dll:

• 0xa93660 SystemTimeToVariantTime

• 0xa93664 SysFreeString

• 0xa93668 VarBstrFromDate

• 0xa9366c VarUdateFromDate

• 0xa93670 VariantClear

• 0xa93674 SysAllocString

• 0xa93678 VariantInit

• 0xa9367c OleCreateFontIndirect

• 0xa93680 LoadTypeLib

• 0xa93684 SafeArrayDestroy

• 0xa93688 OleLoadPicturePath

• 0xa9368c VarCmp

• 0xa93690 VariantChangeTypeEx

• 0xa93694 VariantCopy

• 0xa93698 SafeArrayGetDim

• 0xa9369c SafeArrayGetElemsize

• 0xa936a0 SafeArrayGetLBound

• 0xa936a4 SafeArrayGetUBound

• 0xa936a8 SafeArrayAccessData

• 0xa936ac SafeArrayUnaccessData

• 0xa936b0 SysStringByteLen

• 0xa936b4 SysStringLen

• 0xa936b8 SysAllocStringLen

• 0xa936bc VariantChangeType

• 0xa936c0 OleCreatePictureIndirect

• 0xa936c4 VarDateFromStr

• 0xa936c8 SysAllocStringByteLen

• 0xa936cc VariantTimeToSystemTime

Library oledlg.dll:

• 0xa93ce4

• 0xa93ce8

Library USP10.dll:

• 0xa93b58 ScriptItemize

• 0xa93b5c ScriptPlace

• 0xa93b60 ScriptLayout

• 0xa93b64 ScriptCPtoX

• 0xa93b68 ScriptFreeCache

• 0xa93b6c ScriptShape

Library OLEACC.dll:

• 0xa93650 LresultFromObject

• 0xa93654 AccessibleObjectFromWindow

• 0xa93658 CreateStdAccessibleObject

Library IMM32.dll:

• 0xa932bc ImmGetOpenStatus

• 0xa932c0 ImmReleaseContext

• 0xa932c4 ImmGetContext

Library imagehlp.dll:

• 0xa93c44 ImageDirectoryEntryToData

Hosts

No hosts contacted.

DNS

Name	Response	Post-Analysis Lookup
time.windows.com	A 20.189.79.72 CNAME time.microsoft.akadns.net
dns.msftncsi.com	A 131.107.255.255	131.107.255.255
dns.msftncsi.com	AAAA fd3e:4f5a:5b81::1	131.107.255.255
teredo.ipv6.microsoft.com

TCP

No TCP connections recorded.

UDP

Source	Source Port	Destination	Destination Port
192.168.56.101	50534	114.114.114.114	53
192.168.56.101	51963	114.114.114.114	53
192.168.56.101	56539	114.114.114.114	53
192.168.56.101	58367	114.114.114.114	53
192.168.56.101	65004	114.114.114.114	53
192.168.56.101	137	192.168.56.255	137
192.168.56.101	138	192.168.56.255	138
192.168.56.101	123	20.189.79.72 time.windows.com	123
192.168.56.101	49235	224.0.0.252	5355
192.168.56.101	56804	224.0.0.252	5355
192.168.56.101	60123	224.0.0.252	5355
192.168.56.101	62191	224.0.0.252	5355
192.168.56.101	1900	239.255.255.250	1900
192.168.56.101	56540	239.255.255.250	3702
192.168.56.101	56807	239.255.255.250	1900
192.168.56.101	58368	239.255.255.250	3702
192.168.56.101	58370	239.255.255.250	3702
192.168.56.101	58707	239.255.255.250	3702

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.

Sorry! No dropped buffers.

resource name	PNG
resource name	TEXTFILE
resource name	None

Bkav	W32.AIDetectVM.malware2
VBA32	suspected of Trojan.Downloader.gen.h

host	172.217.24.14
host	203.208.41.65
host	203.208.41.98