Static task
static1
Behavioral task
behavioral1
Sample
피카츄 배구.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
피카츄 배구.exe
Resource
win10v2004-20240226-en
General
-
Target
5b8b1f686315b3d60aee8754779c400584839469b228173f354c0314c470b312
-
Size
1.5MB
-
MD5
94e87a52a8aabae6cd8520e4fba8783c
-
SHA1
b840e17740cf888bdc2c85010633a86e95e3b4d9
-
SHA256
5b8b1f686315b3d60aee8754779c400584839469b228173f354c0314c470b312
-
SHA512
4b60cc8dc0daddc85e723fe66d22d3e02a5349aa39b251c937c63a20854444e2572c5cef4b6c05577afb597626cb64e0b2ea6b7fa3132e5f5c8ae5bd9e6ef0b8
-
SSDEEP
49152:q37yFPSbmj0fMOHT7MxrCqgdszSijfjVDHmd:q37YSyQfMOzwxW1dspId
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/피카츄 배구.EXE
Files
-
5b8b1f686315b3d60aee8754779c400584839469b228173f354c0314c470b312.zip
-
1.jpg.jpg
-
2.jpg.jpg
-
[필독] 스타맵 다운로드 받는곳.txt
-
피카츄 배구.EXE.exe windows:4 windows x86 arch:x86
09fbc0a59e57d945beebcee4ae3f807a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClientRect
MoveWindow
SetWindowPos
SetTimer
DestroyWindow
SetCursor
EndPaint
BeginPaint
LoadCursorA
RegisterClassA
LoadIconA
CreateWindowExA
LoadMenuA
CreateDialogParamA
EndDialog
GetKeyboardState
SetWindowTextA
ShowWindow
GetWindowRect
DefWindowProcA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
SetRect
IsZoomed
EnableMenuItem
SendMessageA
GetDC
ReleaseDC
PostQuitMessage
GetSystemMetrics
GetMenu
CheckMenuItem
winmm
joyGetPosEx
joyGetDevCapsA
mciSendCommandA
timeGetTime
kernel32
HeapAlloc
HeapFree
GetLastError
GetVersion
GetStartupInfoA
GetCommandLineA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetACP
GetOEMCP
SetHandleCount
GetFileType
RtlUnwind
ExitProcess
WriteFile
CloseHandle
ReadFile
SetFilePointer
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetProcAddress
LoadLibraryA
SetStdHandle
FlushFileBuffers
CreateFileA
GetModuleHandleA
HeapReAlloc
HeapSize
FreeResource
FindResourceA
LoadResource
LockResource
GetStdHandle
HeapCreate
WideCharToMultiByte
GetCPInfo
SetEndOfFile
gdi32
GetStockObject
CreatePalette
GetDeviceCaps
SetSystemPaletteUse
GetSystemPaletteEntries
ResizePalette
SetPaletteEntries
GetNearestPaletteIndex
SetDIBColorTable
StretchBlt
SelectPalette
DeleteObject
DeleteDC
SelectObject
GetDIBColorTable
CreateCompatibleDC
RealizePalette
TextOutA
CreateDIBSection
dsound
DirectSoundCreate
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 424KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ