20aa727f0c9fbc0cc495b3a39067713c

Sharing

Copy URL

Twitter E-mail

General

Target

20aa727f0c9fbc0cc495b3a39067713c
Size

2.6MB
MD5

20aa727f0c9fbc0cc495b3a39067713c
SHA1

49a17ba2ff13c01fa11fca3ec43ad1c4dc8665f8
SHA256

b748cacd8a7534551e4dbb07dbd3e618d3deae2e540afc3f2887c6e479cbcb98
SHA512

6674db2ec2cf9b9b3dcb4cf00d0bb7cea3e4c9b66b3dac22db77ba8031b388a62e69a2cc394e5ccaf8a63705f2ccfcde77dd7441899e652730f6841070303aa5
SSDEEP

49152:K8nladP+y/sDOFcTJ5gyzA7/ZZy+g8TE6Iz+qpYKI1o5e7fv01hoF3KGYh99:K8nladP+plFKvTG+su1Ae4haDYh99

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Framing Studio/Framing Studio.exe
unpack001/Framing Studio/soft2cn汉化说明.exe

Files

20aa727f0c9fbc0cc495b3a39067713c
.rar
Framing Studio/Base.lst
Framing Studio/CForm.atp
Framing Studio/Dirs.lst
Framing Studio/Form.lst
Framing Studio/Framing Studio.JPG
.jpg
Framing Studio/Framing Studio.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 550KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

heatray
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Framing Studio/Framing Studio.url
Framing Studio/Help.chm
.chm
Framing Studio/Lang.lst
Framing Studio/License.txt
Framing Studio/Lite/Thumbs.db
Framing Studio/Lite/f002.gif
.gif
Framing Studio/Lite/f003.gif
.gif
Framing Studio/Lite/f011.gif
.gif
Framing Studio/Lite/f012.gif
.gif
Framing Studio/Lite/f013.gif
.gif
Framing Studio/Lite/f014.gif
.gif
Framing Studio/Lite/f015.gif
.gif
Framing Studio/Lite/f017.gif
.gif
Framing Studio/Lite/f018.gif
.gif
Framing Studio/Lite/f022.gif
.gif
Framing Studio/Lite/f025.gif
.gif
Framing Studio/Lite/f029.gif
.gif
Framing Studio/MASTER/F1.jpg
.jpg
Framing Studio/MASTER/F2.jpg
.jpg
Framing Studio/MASTER/F3.jpg
.jpg
Framing Studio/MASTER/F4.jpg
.jpg
Framing Studio/MASTER/F5.jpg
.jpg
Framing Studio/MASTER/F6.jpg
.jpg
Framing Studio/Masks/M01.jpg
.jpg
Framing Studio/Masks/M02.jpg
.jpg
Framing Studio/Masks/M03.JPG
.jpg
Framing Studio/Masks/M04.jpg
.jpg
Framing Studio/Masks/M05.jpg
.jpg
Framing Studio/Masks/M06.jpg
.jpg
Framing Studio/Masks/M07.JPG
.jpg
Framing Studio/Masks/M08.JPG
.jpg
Framing Studio/Masks/M09.JPG
.jpg
Framing Studio/Masks/M10.JPG
.jpg
Framing Studio/Masks/M11.jpg
.jpg
Framing Studio/Masks/M12.bmp
Framing Studio/Masks/M13.jpg
.jpg
Framing Studio/Masks/M14.jpg
.jpg
Framing Studio/Patterns/Pat1.BMP
Framing Studio/Patterns/Pat10.bmp
Framing Studio/Patterns/Pat11.bmp
Framing Studio/Patterns/Pat12.bmp
Framing Studio/Patterns/Pat13.bmp
Framing Studio/Patterns/Pat14.bmp
Framing Studio/Patterns/Pat15.bmp
Framing Studio/Patterns/Pat16.bmp
Framing Studio/Patterns/Pat17.bmp
Framing Studio/Patterns/Pat18.bmp
Framing Studio/Patterns/Pat19.bmp
Framing Studio/Patterns/Pat2.bmp
Framing Studio/Patterns/Pat20.bmp
Framing Studio/Patterns/Pat21.bmp
Framing Studio/Patterns/Pat22.bmp
Framing Studio/Patterns/Pat23.bmp
Framing Studio/Patterns/Pat24.bmp
Framing Studio/Patterns/Pat25.bmp
Framing Studio/Patterns/Pat26.bmp
Framing Studio/Patterns/Pat27.bmp
Framing Studio/Patterns/Pat28.bmp
Framing Studio/Patterns/Pat29.bmp
Framing Studio/Patterns/Pat3.bmp
Framing Studio/Patterns/Pat30.bmp
Framing Studio/Patterns/Pat31.BMP
Framing Studio/Patterns/Pat32.bmp
Framing Studio/Patterns/Pat33.BMP
Framing Studio/Patterns/Pat34.BMP
Framing Studio/Patterns/Pat35.BMP
Framing Studio/Patterns/Pat36.bmp
Framing Studio/Patterns/Pat37.BMP
Framing Studio/Patterns/Pat38.bmp
Framing Studio/Patterns/Pat4.bmp
Framing Studio/Patterns/Pat5.bmp
Framing Studio/Patterns/Pat6.bmp
Framing Studio/Patterns/Pat7.bmp
Framing Studio/Patterns/Pat8.bmp
Framing Studio/Patterns/Pat9.bmp
Framing Studio/Readme.txt
Framing Studio/Seti.atp
Framing Studio/Super/00.bmp
Framing Studio/Super/01.BMP
Framing Studio/Super/011.bmp
Framing Studio/Super/02.bmp
Framing Studio/Super/03.bmp
Framing Studio/Super/04.JPG
.jpg
Framing Studio/Super/04.bmp
Framing Studio/Super/05.bmp
Framing Studio/Super/06.bmp
Framing Studio/Super/08.bmp
Framing Studio/Super/09.bmp
Framing Studio/Super/10.bmp
Framing Studio/Super/11.bmp
Framing Studio/Super/12.bmp
Framing Studio/Super/13.bmp
Framing Studio/Super/14.bmp
Framing Studio/Super/15.bmp
Framing Studio/Super/16.bmp
Framing Studio/Super/17.bmp
Framing Studio/Super/18.bmp
Framing Studio/Super/19.bmp
Framing Studio/Super/20.bmp
Framing Studio/Super/21.bmp
Framing Studio/Super/22.bmp
Framing Studio/Super/25.bmp
Framing Studio/Super/26.bmp
Framing Studio/Super/28.bmp
Framing Studio/Super/29.bmp
Framing Studio/Super/30.bmp
Framing Studio/Super/31.bmp
Framing Studio/Super/32.bmp
Framing Studio/Super/33.bmp
Framing Studio/Super/34.bmp
Framing Studio/Super/35.bmp
Framing Studio/Super/36.bmp
Framing Studio/Textures/Back_1.jpg
.jpg
Framing Studio/Textures/Back_10.jpg
.jpg
Framing Studio/Textures/Back_11.jpg
.jpg
Framing Studio/Textures/Back_12.jpg
.jpg
Framing Studio/Textures/Back_13.jpg
.jpg
Framing Studio/Textures/Back_2.jpg
.jpg
Framing Studio/Textures/Back_3.jpg
.jpg
Framing Studio/Textures/Back_4.jpg
.jpg
Framing Studio/Textures/Back_5.jpg
.jpg
Framing Studio/Textures/Back_6.jpg
.jpg
Framing Studio/Textures/Back_7.gif
.gif
Framing Studio/Textures/Back_8.jpg
.jpg
Framing Studio/Textures/Back_9.jpg
.jpg
Framing Studio/Vector/Horiz/DD00153_.WMF
Framing Studio/Vector/Horiz/DD01851_.WMF
Framing Studio/Vector/Horiz/DD01858_.WMF
Framing Studio/Vector/Huge/BK00021_.WMF
Framing Studio/Vector/Huge/DD01872_.WMF
Framing Studio/Vector/Other/BK00015_.WMF
Framing Studio/Vector/Other/BK00031_.WMF
Framing Studio/Vector/Other/DD01023_.WMF
Framing Studio/Vector/Other/DD01855_.WMF
Framing Studio/Vector/Other/DD01857_.WMF
Framing Studio/Vector/Oval/BK00006_.WMF
Framing Studio/Vector/Oval/DD01025_.WMF
Framing Studio/Vector/Simple/BK00014_.WMF
Framing Studio/Vector/Simple/BK00035_.WMF
Framing Studio/Vector/Simple/DD01029_.WMF
Framing Studio/Vector/Simple/DD01031_.WMF
Framing Studio/Vector/Simple/DD01033_.WMF
Framing Studio/Vector/Vert/BK00011_.WMF
Framing Studio/Vector/Vert/DD00154_.WMF
Framing Studio/Vector/Vert/DD00181_.WMF
Framing Studio/Vector/Vert/DD00196_.WMF
Framing Studio/View.atp
Framing Studio/soft2cn汉化说明.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HH_By_Soft2CN
RefreshDesktop

Sections

.Ray
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Ray
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Ray
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Framing Studio/新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

Size: 550KB - Virtual size: 1.5MB

Size: 12KB - Virtual size: 36KB

Size: - Virtual size: 48KB

Size: 10KB - Virtual size: 12KB

Size: - Virtual size: 4KB

Size: 512B - Virtual size: 4KB

Size: - Virtual size: 80KB

.rsrc Size: 83KB - Virtual size: 464KB

Size: 512B - Virtual size: 4KB

heatray Size: 356KB - Virtual size: 356KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

.Ray Size: - Virtual size: 104KB

.Ray Size: 38KB - Virtual size: 40KB

.Ray Size: 15KB - Virtual size: 16KB

.rsrc
Size: 83KB - Virtual size: 464KB

heatray
Size: 356KB - Virtual size: 356KB

.adata
Size: - Virtual size: 4KB

.Ray
Size: - Virtual size: 104KB

.Ray
Size: 38KB - Virtual size: 40KB

.Ray
Size: 15KB - Virtual size: 16KB