Overview
overview
3Static
static
3ha_pixilli...e.html
windows7-x64
1ha_pixilli...e.html
windows10-2004-x64
1ha_pixilli...n.html
windows7-x64
1ha_pixilli...n.html
windows10-2004-x64
1ha_pixilli...s.html
windows7-x64
1ha_pixilli...s.html
windows10-2004-x64
1ha_pixilli...l.html
windows7-x64
1ha_pixilli...l.html
windows10-2004-x64
1ha_pixilli...elp.js
windows7-x64
1ha_pixilli...elp.js
windows10-2004-x64
1ha_pixilli...o.html
windows7-x64
1ha_pixilli...o.html
windows10-2004-x64
1ha_pixilli...x.html
windows7-x64
1ha_pixilli...x.html
windows10-2004-x64
1ha_pixilli...n.html
windows7-x64
1ha_pixilli...n.html
windows10-2004-x64
1ha_pixilli...s.html
windows7-x64
1ha_pixilli...s.html
windows10-2004-x64
1ha_pixilli...e.html
windows7-x64
1ha_pixilli...e.html
windows10-2004-x64
1ha_pixilli...e.html
windows7-x64
1ha_pixilli...e.html
windows10-2004-x64
1ha_pixilli...e.html
windows7-x64
1ha_pixilli...e.html
windows10-2004-x64
1ha_pixilli...k.html
windows7-x64
1ha_pixilli...k.html
windows10-2004-x64
1ha_pixilli...t.html
windows7-x64
1ha_pixilli...t.html
windows10-2004-x64
1ha_pixilli...p.html
windows7-x64
1ha_pixilli...p.html
windows10-2004-x64
1ha_pixilli...s.html
windows7-x64
1ha_pixilli...s.html
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ha_pixillion220/Pixillion v2.20/Help/commandline.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ha_pixillion220/Pixillion v2.20/Help/commandline.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
ha_pixillion220/Pixillion v2.20/Help/conversion.html
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
ha_pixillion220/Pixillion v2.20/Help/conversion.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
ha_pixillion220/Pixillion v2.20/Help/formats.html
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
ha_pixillion220/Pixillion v2.20/Help/formats.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
ha_pixillion220/Pixillion v2.20/Help/general.html
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
ha_pixillion220/Pixillion v2.20/Help/general.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
ha_pixillion220/Pixillion v2.20/Help/help.js
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
ha_pixillion220/Pixillion v2.20/Help/help.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
ha_pixillion220/Pixillion v2.20/Help/howto.html
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
ha_pixillion220/Pixillion v2.20/Help/howto.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
ha_pixillion220/Pixillion v2.20/Help/index.html
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
ha_pixillion220/Pixillion v2.20/Help/index.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
ha_pixillion220/Pixillion v2.20/Help/introduction.html
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
ha_pixillion220/Pixillion v2.20/Help/introduction.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
ha_pixillion220/Pixillion v2.20/Help/keys.html
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
ha_pixillion220/Pixillion v2.20/Help/keys.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
ha_pixillion220/Pixillion v2.20/Help/lresize.html
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
ha_pixillion220/Pixillion v2.20/Help/lresize.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
ha_pixillion220/Pixillion v2.20/Help/lrotate.html
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
ha_pixillion220/Pixillion v2.20/Help/lrotate.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
ha_pixillion220/Pixillion v2.20/Help/ltexteffectpage.html
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
ha_pixillion220/Pixillion v2.20/Help/ltexteffectpage.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
ha_pixillion220/Pixillion v2.20/Help/lwatermark.html
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
ha_pixillion220/Pixillion v2.20/Help/lwatermark.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
ha_pixillion220/Pixillion v2.20/Help/postedit.html
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
ha_pixillion220/Pixillion v2.20/Help/postedit.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
ha_pixillion220/Pixillion v2.20/Help/startup.html
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
ha_pixillion220/Pixillion v2.20/Help/startup.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
ha_pixillion220/Pixillion v2.20/Help/terms.html
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
ha_pixillion220/Pixillion v2.20/Help/terms.html
Resource
win10v2004-20231215-en
General
-
Target
73b61bb82666355c2ea58d7a0266d860
-
Size
269KB
-
MD5
73b61bb82666355c2ea58d7a0266d860
-
SHA1
f95628a096bbcfd7ee800b5cab6ef9a321a1916b
-
SHA256
9355ee742daf765f1f6ee807dab15685f07dac8e835434a241520d2adab445ed
-
SHA512
f9c418893c76cb3239d8f8771523acbaa06cf20b7a5d5cd63dce28fd11e7a45f106de4601e82151927faea4d0299d16ed0bc13a90463781fe3dd7f783487d3af
-
SSDEEP
6144:R+lth+3E/MEbVJhGeCdZMFzj/lJs8N88BrtmldrYzHU+jBm8K:Rco3E0UVjGBdZule8/r0LrYouhK
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/ha_pixillion220/Pixillion v2.20/pixillion.exe unpack001/ha_pixillion220/Pixillion v2.20/pixillion2.exe
Files
-
73b61bb82666355c2ea58d7a0266d860.rar
-
ha_pixillion220/Pixillion v2.20/Help/Thumbs.db
-
ha_pixillion220/Pixillion v2.20/Help/arrowlist.gif.gif
-
ha_pixillion220/Pixillion v2.20/Help/commandline.html.html
-
ha_pixillion220/Pixillion v2.20/Help/conversion.html.html
-
ha_pixillion220/Pixillion v2.20/Help/formats.html.html
-
ha_pixillion220/Pixillion v2.20/Help/general.html.html
-
ha_pixillion220/Pixillion v2.20/Help/help.js.js
-
ha_pixillion220/Pixillion v2.20/Help/hlp.css
-
ha_pixillion220/Pixillion v2.20/Help/howto.html.html
-
ha_pixillion220/Pixillion v2.20/Help/index.html.html
-
ha_pixillion220/Pixillion v2.20/Help/introduction.html.html
-
ha_pixillion220/Pixillion v2.20/Help/keys.html.html
-
ha_pixillion220/Pixillion v2.20/Help/lresize.html.html
-
ha_pixillion220/Pixillion v2.20/Help/lrotate.html.html
-
ha_pixillion220/Pixillion v2.20/Help/ltexteffectpage.html.html
-
ha_pixillion220/Pixillion v2.20/Help/lwatermark.html.html
-
ha_pixillion220/Pixillion v2.20/Help/postedit.html.html
-
ha_pixillion220/Pixillion v2.20/Help/startup.html.html
-
ha_pixillion220/Pixillion v2.20/Help/terms.html.html
-
ha_pixillion220/Pixillion v2.20/desktop.ini
-
ha_pixillion220/Pixillion v2.20/main.jpg.jpg
-
ha_pixillion220/Pixillion v2.20/pixillion.exe.exe .pdf windows:4 windows x86 arch:x86 polyglot
39624595b438fdcab800dcd675bcec40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PeekNamedPipe
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
CreateThread
DuplicateHandle
GetThreadPriority
CreatePipe
GetStdHandle
SetThreadPriority
GetCurrentThread
ReleaseMutex
CreateMutexA
ResetEvent
LockResource
GetEnvironmentVariableA
SizeofResource
GetProcessHeap
HeapFree
HeapAlloc
LoadResource
FindResourceA
FileTimeToLocalFileTime
GetModuleHandleA
FileTimeToSystemTime
GetCurrentThreadId
GetModuleFileNameA
SetUnhandledExceptionFilter
VirtualQuery
ExitProcess
GetLocaleInfoA
LocalFree
LocalAlloc
WinExec
LoadLibraryA
RemoveDirectoryA
GetProcAddress
GetStartupInfoA
SetFilePointer
GetLastError
ReadFile
DeleteFileA
GetTempPathA
DeleteCriticalSection
CompareStringA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FindNextFileA
SetEnvironmentVariableA
FindClose
EnterCriticalSection
CopyFileA
FindFirstFileA
CreateDirectoryA
MultiByteToWideChar
CreateProcessA
GetFileAttributesA
LeaveCriticalSection
CreateEventA
Sleep
WideCharToMultiByte
InitializeCriticalSection
WriteFile
SetEvent
WaitForSingleObject
GetCurrentProcess
FreeLibrary
SetPriorityClass
GetTickCount
CloseHandle
GetVersionExA
GetFileTime
GetFileSize
CreateFileA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
HeapReAlloc
VirtualAlloc
GetConsoleMode
GetConsoleCP
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
CompareStringW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetTimeZoneInformation
RaiseException
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetCommandLineA
GetSystemTimeAsFileTime
advapi32
RegCloseKey
RegOpenKeyExA
GetSidSubAuthority
RegQueryValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
GetAce
InitializeAcl
AddAccessAllowedAce
GetSidLengthRequired
InitializeSid
SetFileSecurityA
RegSetValueExA
RegDeleteKeyA
comctl32
CreateToolbarEx
_TrackMouseEvent
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_GetIconSize
PropertySheetA
ord17
ImageList_Create
comdlg32
ChooseFontA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
gdi32
GetStockObject
GetObjectA
CreatePen
CreateCompatibleDC
CreateSolidBrush
DeleteObject
StretchBlt
DeleteDC
SetTextColor
LineTo
MoveToEx
SetDIBits
SetBkMode
SetBkColor
GetDIBits
CreateFontA
CreateDIBitmap
CreateCompatibleBitmap
CreateFontIndirectA
GetTextExtentPoint32A
ExtTextOutA
SetTextAlign
BitBlt
CreateDIBSection
SelectObject
ole32
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize
oleaut32
OleLoadPicturePath
OleLoadPicture
shell32
DragFinish
SHGetMalloc
ShellExecuteExA
DragQueryFileA
ShellExecuteA
SHGetPathFromIDListA
DragAcceptFiles
SHBrowseForFolderA
user32
MessageBoxA
SetDlgItemInt
TranslateMessage
CreateMenu
WaitForInputIdle
GetFocus
SetForegroundWindow
TrackPopupMenu
GetDlgItemInt
SetScrollInfo
LoadCursorA
GetScrollInfo
SetCursor
FindWindowA
LoadImageA
SendMessageTimeoutA
DestroyWindow
SetPropA
GetPropA
GetWindowDC
RegisterClassA
DefWindowProcA
GetWindowLongA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
SetTimer
GetWindowTextA
DrawStateA
InflateRect
GetIconInfo
DrawEdge
EndDialog
DestroyIcon
InsertMenuA
GetMenu
IsDialogMessageA
CreateDialogParamA
GetMessageA
PeekMessageA
MapVirtualKeyA
GetKeyState
GetKeyNameTextA
GetDlgCtrlID
CallWindowProcA
GetDesktopWindow
SetFocus
RemovePropA
ClientToScreen
SetMenuItemInfoA
GetSubMenu
PostQuitMessage
InsertMenuItemA
BeginPaint
EndPaint
GetSysColorBrush
MsgWaitForMultipleObjects
MapDialogRect
UpdateWindow
GetSystemMetrics
IsWindowVisible
SetWindowPos
LoadIconA
IsIconic
GetClassNameA
KillTimer
EnableMenuItem
GetCursorPos
ShowWindow
SetMenu
CreatePopupMenu
AppendMenuA
PostMessageA
DispatchMessageA
DestroyMenu
GetDlgItemTextA
DialogBoxParamA
GetDC
MoveWindow
MonitorFromRect
DialogBoxIndirectParamA
SetWindowTextA
IsWindow
ReleaseDC
ScreenToClient
SendDlgItemMessageA
GetClientRect
DrawFocusRect
GetDlgItem
CheckDlgButton
IsDlgButtonChecked
EnableWindow
SetDlgItemTextA
SetWindowPlacement
GetWindowRect
SetActiveWindow
FillRect
IsZoomed
DrawTextA
GetParent
IsWindowEnabled
SendMessageA
GetMonitorInfoA
GetWindowPlacement
SetWindowLongA
InvalidateRect
CreateWindowExA
GetSysColor
FrameRect
MonitorFromWindow
winmm
PlaySoundA
ws2_32
inet_addr
gethostbyname
ioctlsocket
connect
select
WSAStartup
htons
recv
socket
__WSAFDIsSet
closesocket
send
WSAGetLastError
Sections
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 224KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ha_pixillion220/Pixillion v2.20/pixillion2.exe.exe .pdf windows:4 windows x86 arch:x86 polyglot
39624595b438fdcab800dcd675bcec40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PeekNamedPipe
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
CreateThread
DuplicateHandle
GetThreadPriority
CreatePipe
GetStdHandle
SetThreadPriority
GetCurrentThread
ReleaseMutex
CreateMutexA
ResetEvent
LockResource
GetEnvironmentVariableA
SizeofResource
GetProcessHeap
HeapFree
HeapAlloc
LoadResource
FindResourceA
FileTimeToLocalFileTime
GetModuleHandleA
FileTimeToSystemTime
GetCurrentThreadId
GetModuleFileNameA
SetUnhandledExceptionFilter
VirtualQuery
ExitProcess
GetLocaleInfoA
LocalFree
LocalAlloc
WinExec
LoadLibraryA
RemoveDirectoryA
GetProcAddress
GetStartupInfoA
SetFilePointer
GetLastError
ReadFile
DeleteFileA
GetTempPathA
DeleteCriticalSection
CompareStringA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FindNextFileA
SetEnvironmentVariableA
FindClose
EnterCriticalSection
CopyFileA
FindFirstFileA
CreateDirectoryA
MultiByteToWideChar
CreateProcessA
GetFileAttributesA
LeaveCriticalSection
CreateEventA
Sleep
WideCharToMultiByte
InitializeCriticalSection
WriteFile
SetEvent
WaitForSingleObject
GetCurrentProcess
FreeLibrary
SetPriorityClass
GetTickCount
CloseHandle
GetVersionExA
GetFileTime
GetFileSize
CreateFileA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
HeapReAlloc
VirtualAlloc
GetConsoleMode
GetConsoleCP
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
CompareStringW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetTimeZoneInformation
RaiseException
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetCommandLineA
GetSystemTimeAsFileTime
advapi32
RegCloseKey
RegOpenKeyExA
GetSidSubAuthority
RegQueryValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
GetAce
InitializeAcl
AddAccessAllowedAce
GetSidLengthRequired
InitializeSid
SetFileSecurityA
RegSetValueExA
RegDeleteKeyA
comctl32
CreateToolbarEx
_TrackMouseEvent
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_GetIconSize
PropertySheetA
ord17
ImageList_Create
comdlg32
ChooseFontA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
gdi32
GetStockObject
GetObjectA
CreatePen
CreateCompatibleDC
CreateSolidBrush
DeleteObject
StretchBlt
DeleteDC
SetTextColor
LineTo
MoveToEx
SetDIBits
SetBkMode
SetBkColor
GetDIBits
CreateFontA
CreateDIBitmap
CreateCompatibleBitmap
CreateFontIndirectA
GetTextExtentPoint32A
ExtTextOutA
SetTextAlign
BitBlt
CreateDIBSection
SelectObject
ole32
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize
oleaut32
OleLoadPicturePath
OleLoadPicture
shell32
DragFinish
SHGetMalloc
ShellExecuteExA
DragQueryFileA
ShellExecuteA
SHGetPathFromIDListA
DragAcceptFiles
SHBrowseForFolderA
user32
MessageBoxA
SetDlgItemInt
TranslateMessage
CreateMenu
WaitForInputIdle
GetFocus
SetForegroundWindow
TrackPopupMenu
GetDlgItemInt
SetScrollInfo
LoadCursorA
GetScrollInfo
SetCursor
FindWindowA
LoadImageA
SendMessageTimeoutA
DestroyWindow
SetPropA
GetPropA
GetWindowDC
RegisterClassA
DefWindowProcA
GetWindowLongA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
SetTimer
GetWindowTextA
DrawStateA
InflateRect
GetIconInfo
DrawEdge
EndDialog
DestroyIcon
InsertMenuA
GetMenu
IsDialogMessageA
CreateDialogParamA
GetMessageA
PeekMessageA
MapVirtualKeyA
GetKeyState
GetKeyNameTextA
GetDlgCtrlID
CallWindowProcA
GetDesktopWindow
SetFocus
RemovePropA
ClientToScreen
SetMenuItemInfoA
GetSubMenu
PostQuitMessage
InsertMenuItemA
BeginPaint
EndPaint
GetSysColorBrush
MsgWaitForMultipleObjects
MapDialogRect
UpdateWindow
GetSystemMetrics
IsWindowVisible
SetWindowPos
LoadIconA
IsIconic
GetClassNameA
KillTimer
EnableMenuItem
GetCursorPos
ShowWindow
SetMenu
CreatePopupMenu
AppendMenuA
PostMessageA
DispatchMessageA
DestroyMenu
GetDlgItemTextA
DialogBoxParamA
GetDC
MoveWindow
MonitorFromRect
DialogBoxIndirectParamA
SetWindowTextA
IsWindow
ReleaseDC
ScreenToClient
SendDlgItemMessageA
GetClientRect
DrawFocusRect
GetDlgItem
CheckDlgButton
IsDlgButtonChecked
EnableWindow
SetDlgItemTextA
SetWindowPlacement
GetWindowRect
SetActiveWindow
FillRect
IsZoomed
DrawTextA
GetParent
IsWindowEnabled
SendMessageA
GetMonitorInfoA
GetWindowPlacement
SetWindowLongA
InvalidateRect
CreateWindowExA
GetSysColor
FrameRect
MonitorFromWindow
winmm
PlaySoundA
ws2_32
inet_addr
gethostbyname
ioctlsocket
connect
select
WSAStartup
htons
recv
socket
__WSAFDIsSet
closesocket
send
WSAGetLastError
Sections
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 224KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ha_pixillion220/Pixillion v2.20/汉化说明.rtf.rtf
-
ha_pixillion220/Pixillion v2.20/汉化说明.txt