b6a35c1752162f639ca16bb5d3ecb49e

Sharing

Copy URL Twitter E-mail

General

Target

b6a35c1752162f639ca16bb5d3ecb49e
Size

371KB
MD5

b6a35c1752162f639ca16bb5d3ecb49e
SHA1

392b13e2a3962c3df720483a3861c6946ca2f0c4
SHA256

05dead192b682040e49e8955fc55f09433d90d9089274fe27554ca6da590fad2
SHA512

127097b9d3ca12eb996ce1c6284da524e1eaff1f93f39d96fc20d1e0eab4992e5a02ca3c87235bb54389efc03f486ed8586ecf2e0eab35e3191a18833c56ccc0
SSDEEP

6144:dQzDaxjZPIYipnF5UsdM96wBGctaQk7x+nuBUvT86aVrAQTNodrbHmk622:dZxunF5UowBGctw0RcxodrbN2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6a35c1752162f639ca16bb5d3ecb49e

Files

b6a35c1752162f639ca16bb5d3ecb49e
.exe windows:5 windows x86 arch:x86

9f8deb86bc426a0860ef00384d02a591

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\진행프로젝트\01.오버추어하단바\IPlus\IPlusSetup\Release\IPlusSetup.pdb

Imports

wininet

DeleteUrlCacheEntry

imagehlp

MakeSureDirectoryPathExists

iphlpapi

GetAdaptersInfo

kernel32

TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetCurrentDirectoryA
GlobalFlags
SetErrorMode
GetCPInfo
GetOEMCP
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
ExitProcess
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GlobalReAlloc
HeapCreate
VirtualFree
GetStdHandle
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetDriveTypeA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetModuleHandleW
GetFileTime
GetFileSizeEx
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetModuleFileNameW
GlobalAddAtomA
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GetCurrentProcessId
FreeResource
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
LoadLibraryA
CompareStringA
InterlockedExchange
lstrcmpA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetLastError
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
MulDiv
GetFileAttributesA
SetFileAttributesA
LocalFree
CloseHandle
CreateToolhelp32Snapshot
FindNextFileA
Process32Next
FindClose
RemoveDirectoryA
FindFirstFileA
MultiByteToWideChar
GetSystemDirectoryA
CreateProcessA
OpenProcess
GetProcessHeap
GetTickCount
WaitForSingleObject
Process32First
HeapFree
InterlockedDecrement
HeapAlloc
lstrlenA
GetComputerNameA
GetVersionExA
DeleteFileA
GetTempPathA
Sleep
GetPrivateProfileStringA
WritePrivateProfileStringA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GlobalHandle
IsDebuggerPresent

user32

PostThreadMessageA
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
ReleaseCapture
SetCapture
LoadCursorA
GetSysColorBrush
RegisterWindowMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
DefWindowProcA
CallWindowProcA
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowTextA
SetFocus
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
UnhookWindowsHookEx
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
RegisterClipboardFormatA
EnableMenuItem
CheckMenuItem
DestroyMenu
CharUpperA
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
GetWindow
SetWindowContextHelpId
GetParent
MapDialogRect
SetWindowPos
PostQuitMessage
PostMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
EnableWindow
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SendMessageA
LoadIconA
MessageBoxA
GetDC

gdi32

SetViewportOrgEx
GetBkColor
GetTextColor
GetStockObject
GetRgnBox
GetMapMode
CreateRectRgnIndirect
SelectObject
Escape
ExtTextOutA
TextOutA
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
CreateBitmap
GetDeviceCaps
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetObjectA
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
OffsetViewportOrgEx

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
GetUserNameA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
GetTokenInformation
ConvertSidToStringSidA
OpenProcessToken
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA

shell32

SHGetSpecialFolderPathA

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFileExistsA
PathFindExtensionA

oledlg

ord8

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoCreateInstance
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantChangeType
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
VariantInit
VariantClear

urlmon

URLOpenStreamA
URLDownloadToFileA

Sections

.text
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f8deb86bc426a0860ef00384d02a591

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wininet

imagehlp

iphlpapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

Sections

.text Size: 274KB - Virtual size: 274KB

.rdata Size: 62KB - Virtual size: 62KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 97KB - Virtual size: 97KB

.reloc Size: 36KB - Virtual size: 35KB

.text
Size: 274KB - Virtual size: 274KB

.rdata
Size: 62KB - Virtual size: 62KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 97KB - Virtual size: 97KB

.reloc
Size: 36KB - Virtual size: 35KB