Overview
overview
3Static
static
361ca3b8474...7b.rar
windows7-x64
361ca3b8474...7b.rar
windows10-2004-x64
3ComicEnhan...03.exe
windows7-x64
1ComicEnhan...03.exe
windows10-2004-x64
1Win10系统下载.url
windows7-x64
1Win10系统下载.url
windows10-2004-x64
1使用必读.url
windows7-x64
1使用必读.url
windows10-2004-x64
1需要更�...��.url
windows7-x64
1需要更�...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
61ca3b8474524fb44f0f652c42ddc08009bae31073f44b9206885ce9a2dd537b.rar
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
61ca3b8474524fb44f0f652c42ddc08009bae31073f44b9206885ce9a2dd537b.rar
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
ComicEnhancerPro5.03.exe
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
ComicEnhancerPro5.03.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
Win10系统下载.url
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
Win10系统下载.url
Resource
win10v2004-20230824-en
Behavioral task
behavioral7
Sample
使用必读.url
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
使用必读.url
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
需要更多_百度搜索.url
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
需要更多_百度搜索.url
Resource
win10v2004-20230703-en
General
-
Target
61ca3b8474524fb44f0f652c42ddc08009bae31073f44b9206885ce9a2dd537b
-
Size
3.2MB
-
MD5
275f2ccdfa8cc5d16fd379a06e9454e4
-
SHA1
c141ec3c47b222ed6e259a0a201f26fe707dc508
-
SHA256
61ca3b8474524fb44f0f652c42ddc08009bae31073f44b9206885ce9a2dd537b
-
SHA512
01046e4dbbadc5535e91a796d40a9d273c79a4486a9a16bae39164f16b773e116637c27fcd7a48e077edc3ec35add1567b0846ef93b340937d89e8617ee7a3c4
-
SSDEEP
49152:jysgUgm7wWH/0tVfDIqCVt6OBCIM0Ro4RNgS1qO/7zI6RCPsnCN4Q:jdgw7waGIqCVMOM0CxSEO/vJO/+Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ComicEnhancerPro5.03.exe
Files
-
61ca3b8474524fb44f0f652c42ddc08009bae31073f44b9206885ce9a2dd537b.rar .ps1
-
ComicEnhancerPro5.03.exe.exe windows x86
e1398d50a55e1d01de1551fdea65954e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrFormatByteSizeW
PathCombineW
StrCmpNW
PathFindExtensionW
StrRChrW
PathIsDirectoryW
PathRenameExtensionW
PathFileExistsW
PathAddBackslashW
PathFindFileNameW
PathRemoveExtensionW
StrCpyNW
PathRemoveFileSpecW
StrChrW
kernel32
CreateThread
ExitThread
SetStdHandle
GetFileType
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
Sleep
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
RaiseException
GetLocalTime
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFullPathNameA
DeleteFileA
GetSystemInfo
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
GetSystemTime
GetTimeZoneInformation
TerminateProcess
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
GetCurrentProcessId
GetSystemTimeAsFileTime
FindResourceA
GlobalAddAtomA
GetProfileStringA
InterlockedExchangeAdd
CreateSemaphoreA
CreateEventA
CreateFileMappingA
CreateFileA
InterlockedExchange
FormatMessageA
lstrcpyW
lstrcpynW
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExW
MulDiv
LoadResource
FindResourceW
LockResource
GlobalAlloc
GetModuleHandleA
GetCurrentThreadId
MultiByteToWideChar
lstrcatW
lstrlenW
GetModuleFileNameW
GlobalFree
lstrcmpiW
SetEvent
WaitForSingleObject
EnterCriticalSection
CreateEventW
CloseHandle
GlobalUnlock
GlobalLock
lstrcmpW
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextChangeNotification
CompareFileTime
ExitProcess
GetStartupInfoW
FindResourceExW
GlobalSize
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
SetFileAttributesW
SystemTimeToFileTime
LocalFileTimeToFileTime
IsBadReadPtr
IsBadWritePtr
CopyFileW
GetDriveTypeA
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileSectionNamesW
GetTempFileNameW
MoveFileExW
FindClose
FindNextFileW
FindFirstFileW
EnumResourceNamesW
UnmapViewOfFile
IsBadStringPtrW
GetProcessVersion
FileTimeToLocalFileTime
FileTimeToSystemTime
VirtualProtect
GetDiskFreeSpaceW
GetFileTime
SetFileTime
GetFileAttributesW
ReleaseSemaphore
lstrcmpiA
GetCurrentThread
SetThreadPriority
GlobalGetAtomNameW
GetShortPathNameW
GetThreadLocale
GetStringTypeExW
GetFullPathNameW
GetVolumeInformationW
DeleteFileW
MoveFileW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcmpA
LocalFree
SetLastError
LoadLibraryA
GlobalAddAtomW
MapViewOfFile
GlobalFindAtomW
GlobalDeleteAtom
GetModuleHandleW
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetVersion
ResetEvent
GetCurrentDirectoryW
CreateDirectoryW
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileW
GetFileSize
CreateFileMappingW
user32
GetMenuStringW
InsertMenuW
GetClassNameW
GetSysColorBrush
GetAsyncKeyState
ShowOwnedPopups
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
DefFrameProcW
wvsprintfW
LoadStringW
ValidateRect
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
TranslateAcceleratorW
LoadAcceleratorsW
DeleteMenu
SetParent
DestroyMenu
CharUpperW
IsZoomed
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
EndPaint
BeginPaint
GetWindowDC
MoveWindow
IsDialogMessageW
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
DeferWindowPos
ScrollWindow
GetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpW
RegisterClassW
GetMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthW
SetPropW
GetPropW
RemovePropW
GetMessageTime
GetForegroundWindow
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetIconInfo
GetNextDlgGroupItem
EnableWindow
GetWindowRect
GetClientRect
GetParent
SendMessageW
KillTimer
InvalidateRect
SetTimer
SetWindowLongW
GetWindowLongW
EnumDisplaySettingsW
DrawTextExW
IsWindowEnabled
FindWindowW
AdjustWindowRectEx
FindWindowExW
AdjustWindowRect
SetWindowTextW
CreateWindowExW
GetDlgItem
GetWindowTextW
SetFocus
EndDialog
GetDoubleClickTime
RegisterWindowMessageW
SetCursorPos
GrayStringW
DrawTextW
TabbedTextOutW
GetDesktopWindow
GetDCEx
PeekMessageW
PostQuitMessage
ShowWindow
GetLastActivePopup
SetForegroundWindow
IsIconic
IsWindowVisible
LoadIconW
GetDlgCtrlID
IsClipboardFormatAvailable
GetClipboardData
RegisterClipboardFormatW
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
LockWindowUpdate
GetFocus
MessageBoxW
MessageBeep
wsprintfW
GetCursorPos
SetWindowPos
GetMessagePos
GetCapture
DrawFocusRect
LoadMenuW
GetSubMenu
FillRect
GetSysColor
UpdateWindow
CloseWindow
IsWindow
DestroyCursor
GetCursor
DrawFrameControl
OffsetRect
SetRectEmpty
SetRect
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
SetWindowsHookExW
CallNextHookEx
UnhookWindowsHookEx
ClientToScreen
CreatePopupMenu
WindowFromPoint
ScreenToClient
RedrawWindow
IsRectEmpty
BeginDeferWindowPos
EqualRect
EndDeferWindowPos
GetWindow
CallWindowProcW
MapDialogRect
CreateMenu
AppendMenuW
LoadImageW
InflateRect
CopyRect
DrawEdge
DrawStateW
DestroyIcon
SystemParametersInfoW
GetSystemMetrics
CopyAcceleratorTableW
GetMenuItemCount
GetMenuItemInfoW
SetMenuItemInfoW
LoadBitmapW
GetClassInfoW
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
DefWindowProcW
LoadCursorW
SetCapture
PostMessageW
GetKeyState
SetCursor
PtInRect
GetDC
ReleaseDC
ReleaseCapture
GetMessageW
TranslateMessage
DispatchMessageW
MessageBoxA
CharNextW
GetPropA
SetPropA
SetWindowLongA
GetClassNameA
IsWindowUnicode
SendMessageA
GetWindowLongA
SetWindowsHookExA
SetScrollInfo
gdi32
GetViewportOrgEx
SetBkColor
CreateDCW
GetPaletteEntries
CreateRectRgnIndirect
Polyline
SetTextColor
SetBkMode
GetClipBox
SaveDC
RestoreDC
SelectPalette
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
SetBrushOrgEx
SetViewportOrgEx
CreateRectRgn
CreatePatternBrush
SetRectRgn
CombineRgn
DPtoLP
GetTextMetricsW
GetCharWidthW
CreateFontW
LPtoDP
EnumFontFamiliesExW
GetBitmapDimensionEx
SelectObject
CreateCompatibleDC
GetPixel
GetObjectW
CreatePolygonRgn
PlgBlt
BitBlt
Rectangle
CreateCompatibleBitmap
FillRgn
PtInRegion
CreateFontIndirectW
CreateBitmap
GetStockObject
Polygon
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreatePalette
GetTextExtentPoint32W
GetDeviceCaps
RealizePalette
CreatePen
SetStretchBltMode
SetDIBitsToDevice
GetBkColor
StretchDIBits
SetPixel
DeleteObject
CreateSolidBrush
DeleteDC
StretchBlt
CreateDIBSection
GetDIBits
SetBitmapDimensionEx
ExtTextOutA
GetTextExtentPointA
CreateDIBitmap
Ellipse
PatBlt
comdlg32
GetFileTitleW
GetSaveFileNameW
CommDlgExtendedError
GetOpenFileNameW
ChooseColorW
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegCreateKeyW
RegSetValueW
GetFileSecurityW
SetFileSecurityW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyW
RegQueryValueW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
shell32
DragAcceptFiles
SHGetDesktopFolder
SHBrowseForFolderW
SHGetFileInfoW
ExtractIconW
SHGetPathFromIDListW
SHGetMalloc
SHFileOperationW
ShellExecuteW
DragQueryFileW
DragFinish
SHGetSpecialFolderLocation
comctl32
DestroyPropertySheetPage
PropertySheetW
ImageList_LoadImageW
ImageList_Create
ImageList_Destroy
ord17
ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_Draw
ImageList_GetIcon
ImageList_GetImageCount
ImageList_AddMasked
_TrackMouseEvent
CreatePropertySheetPageW
ole32
CreateStreamOnHGlobal
CoCreateInstance
OleGetClipboard
olepro32
ord251
winmm
timeGetDevCaps
timeBeginPeriod
timeSetEvent
timeEndPeriod
timeKillEvent
ws2_32
htonl
ntohs
Sections
.text Size: 13.5MB - Virtual size: 13.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 272KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512KB - Virtual size: 509KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 479KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 612KB - Virtual size: 609KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 828KB - Virtual size: 827KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Win10系统下载.url.url
-
使用必读.url.url
-
使用说明.txt
-
压缩包解压密码:www.win10com.com.txt
-
需要更多_百度搜索.url.url