Static task
static1
Behavioral task
behavioral1
Sample
개인정보유출내역.hwp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
개인정보유출내역.hwp.exe
Resource
win10v2004-20230221-en
General
-
Target
개인정보유출내역.hwp .exe
-
Size
292KB
-
MD5
8133c5f663f89b01b30a052749b5a988
-
SHA1
3048657b1651e2de6180ce404f1e6093d42fd41d
-
SHA256
e5226f945e3ec29868891edc63e64caecae0f9eef1627eba826ac08809339a39
-
SHA512
bfc4d89469f01f43f72e454cfb1f381b0cb7c25b42bfff3460b9c813a1d2bbd87a0cd3eaf55e27b47ba28b7c2e954705abe52d54c37c856f65fed26396a0e457
-
SSDEEP
3072:gzbQMMMMBMMM9MMMAMMMMdMMMnMMMM+MMMEMMMMeQWkkTkhh6hhhhh1hhhD7uglk:gsLTz7u+1PQkEn9/bj9ZBU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 개인정보유출내역.hwp .exe
Files
-
개인정보유출내역.hwp .exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ