E:\DMT_2.10_src_cn\DMT\DMT\obj\Release\DMT.pdb
Overview
overview
3Static
static
3Dual Monit...VC.url
windows7-x64
1Dual Monit...VC.url
windows10-2004-x64
1Dual Monit...��.url
windows7-x64
1Dual Monit...��.url
windows10-2004-x64
1Dual Monit...MT.exe
windows7-x64
1Dual Monit...MT.exe
windows10-2004-x64
1Dual Monit...er.scr
windows7-x64
1Dual Monit...er.scr
windows10-2004-x64
1Dual Monit...er.exe
windows7-x64
1Dual Monit...er.exe
windows10-2004-x64
1Behavioral task
behavioral1
Sample
Dual Monitor Tools/#XIAOYI.VC.url
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Dual Monitor Tools/#XIAOYI.VC.url
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Dual Monitor Tools/#ע.url
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
Dual Monitor Tools/#ע.url
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Dual Monitor Tools/DMT.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Dual Monitor Tools/DMT.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Dual Monitor Tools/DmtWallpaper.scr
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Dual Monitor Tools/DmtWallpaper.scr
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
Dual Monitor Tools/DualWallpaper.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Dual Monitor Tools/DualWallpaper.exe
Resource
win10v2004-20240226-en
General
-
Target
0bd483a95d3f09154b1ef6a27298b0fbb3d4ac55e90d9c80ec362a89350d7f20
-
Size
359KB
-
MD5
1e9ca7edb381a6006120aa532e675b3e
-
SHA1
78b8c73bf1f302ccaabef662fd8bdd6ea1c1e26e
-
SHA256
0bd483a95d3f09154b1ef6a27298b0fbb3d4ac55e90d9c80ec362a89350d7f20
-
SHA512
e64aa9cf9023e49fe4a9db59e816adac1c3478b32ef8b8f8c5fe6345d562aeaf415270da84970e53cd34e7c72eeaba2b4ba15e5eb8cdfdc11be0c0c4942beedf
-
SSDEEP
6144:ex2GiCWF7R4CVtwueaOpkwuo/y+j98Hx8kFbiR2k4BnoJ+XLs4WNknoFBdDDI8+:PGiCWRZvwueaYuo/VyR8kFHAJ+XLCkgE
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/Dual Monitor Tools/DMT.exe unpack001/Dual Monitor Tools/DmtWallpaper.scr unpack001/Dual Monitor Tools/DualWallpaper.exe
Files
-
0bd483a95d3f09154b1ef6a27298b0fbb3d4ac55e90d9c80ec362a89350d7f20.zip
-
Dual Monitor Tools/#XIAOYI.VC.url.url
-
Dual Monitor Tools/#ע.url.url
-
Dual Monitor Tools/#ȡ.png.png
-
http://weixin.qq.com/r/c0QvNzrEjmfxrX5U9xFh
-
-
Dual Monitor Tools/#ǵȺ.txt
-
Dual Monitor Tools/COPYING.txt
-
Dual Monitor Tools/DMT.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 877KB - Virtual size: 877KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Dual Monitor Tools/DmtWallpaper.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
E:\DMT_2.10_src_cn\DmtWallpaper\DmtWallpaper\obj\Release\DmtWallpaper.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Dual Monitor Tools/DualWallpaper.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
E:\DMT_2.10_src_cn\DualWallpaper\DualWallpaper\obj\Release\DualWallpaper.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Dual Monitor Tools/˵.md
-
Dual Monitor Tools/˵.txt