이미지 및 영상 저작권 위반 목록 - SM 엔터테인먼트[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

이미지 및 영상 저작권 위반 목록 - SM 엔터테인먼트.exe
Size

2.1MB
MD5

292a5af0d8d4a5803022019507a83bed
SHA1

85310ecfd16b0920977229ad87f08d1207e756e6
SHA256

b195c8a81abf7913891a8bae26d1a5ad70dc5fdc555a9b57b848a82e251160eb
SHA512

c5cdec88a0ef29f7f7fa92f73296bb6d6b7bde8ccfc600e3fb3012288997981cc1cc356675e32bab55b684ab5b8838ee6f2032cdcac888d2cea5ee681a743766
SSDEEP

24576:ZUubL6cMcjdtsnFVZ+Ghc8zTxm+6Sv/Sr4XDeErmauz5y868Vk5rzarBNz0Kpcq:ZUuGOqFVZfhc8zM+6SvTSz5y868Vk5uV

Score

1^/10

Malware Config

Signatures

Files

이미지 및 영상 저작권 위반 목록 - SM 엔터테인먼트.exe
.exe windows:5 windows x86 arch:x86

7a1839c5ffbf744a0e837650f0866746

Code Sign

04:5b:d7:bd:e9:5f:97:12
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

09/10/2020, 11:32

Not After

09/10/2021, 11:32

Subject

CN=JetBrains s.r.o.,O=JetBrains s.r.o.,L=Praha 4,C=CZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:5b:d7:bd:e9:5f:97:12
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

09/10/2020, 11:32

Not After

09/10/2021, 11:32

Subject

CN=JetBrains s.r.o.,O=JetBrains s.r.o.,L=Praha 4,C=CZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

fb:45:27:dc:6b:b9:f6:f0:f8:0c:70:cd:f9:43:da:44:d9:f1:9d:55:bf:2f:92:e7:51:30:c4:7d:07:a3:c9:53
Signer

Actual PE Digest

fb:45:27:dc:6b:b9:f6:f0:f8:0c:70:cd:f9:43:da:44:d9:f1:9d:55:bf:2f:92:e7:51:30:c4:7d:07:a3:c9:53

Digest Algorithm

sha256

PE Digest Matches

false

11:00:00:fd:a3:1f:6a:33:f6:01:b6:99:de:4f:06:54:d5:6c:ca:b0
Signer

Actual PE Digest

11:00:00:fd:a3:1f:6a:33:f6:01:b6:99:de:4f:06:54:d5:6c:ca:b0

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\vmagent_new\bin\joblist\203677\out\Release\MedalWall.pdb

Imports

kernel32

CreateMutexW
GlobalFree
GetPrivateProfileStringW
LocalFree
GetTimeZoneInformation
GetModuleHandleA
LocalAlloc
GetSystemPowerStatus
GetDriveTypeW
GetFileAttributesExW
ProcessIdToSessionId
GetUserDefaultUILanguage
SetCurrentDirectoryW
DeleteFileW
CopyFileW
GetSystemDirectoryW
CompareFileTime
GetSystemTimeAsFileTime
GetWindowsDirectoryW
CreateDirectoryW
CreateRemoteThread
GetVersionExW
FileTimeToLocalFileTime
FileTimeToSystemTime
WriteFile
GetVersion
CreateProcessW
GetCurrentProcessId
CreateFileW
DeviceIoControl
lstrcmpiW
LoadLibraryExW
CreateEventW
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameW
GetLastError
lstrcmpW
lstrlenW
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
DeleteCriticalSection
CreateThread
GetSystemInfo
lstrcmpiA
lstrcmpA
DeleteAtom
FindAtomW
AddAtomW
OpenThread
GetAtomNameW
CreateToolhelp32Snapshot
WaitForSingleObject
GetFileSizeEx
SetFilePointerEx
LocalFileTimeToFileTime
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
FlushFileBuffers
GetStringTypeA
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleMode
GetConsoleCP
GetDateFormatA
GetTimeFormatA
IsValidCodePage
GetOEMCP
GetACP
HeapCreate
ExitProcess
GetModuleFileNameA
GetStdHandle
GetStringTypeW
LCMapStringW
LCMapStringA
GetCPInfo
GetStartupInfoW
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
ResumeThread
TlsSetValue
OpenEventA
TlsGetValue
TlsFree
TlsAlloc
Process32FirstW
Process32NextW
FreeConsole
WideCharToMultiByte
OpenProcess
HeapAlloc
GetProcessHeap
HeapFree
GetTempPathW
GetTempFileNameW
ReadFile
InterlockedCompareExchange
InterlockedExchange
GetTickCount
GetFileSize
SetFilePointer
FormatMessageW
SetErrorMode
GetModuleHandleW
FreeLibrary
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
RaiseException
SetLastError
GetCurrentProcess
FlushInstructionCache
CreateEventA
CloseHandle
SetEvent
MulDiv
LoadLibraryW
GetProcAddress
GetComputerNameExW
OpenMutexW
ReleaseMutex
TerminateProcess
TerminateThread
LoadLibraryA
lstrlenA
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
ResetEvent
SystemTimeToFileTime
GetSystemTime
MoveFileExW
SetFileAttributesW
OutputDebugStringW
GetCurrentThreadId
GetBinaryTypeW
GetFileAttributesW
RemoveDirectoryW

user32

IsRectEmpty
GetWindowRect
GetParent
GetClientRect
ShowWindow
SetWindowPos
LoadImageW
GetSystemMetrics
SetWindowTextW
PostQuitMessage
PostMessageW
ReleaseDC
GetDC
SwitchToThisWindow
SetForegroundWindow
BringWindowToTop
SetTimer
KillTimer
SendMessageW
IsDialogMessageW
MapWindowPoints
GetMonitorInfoW
MonitorFromWindow
GetWindowLongW
GetWindow
DefWindowProcW
SetWindowLongW
CreateWindowExW
CallWindowProcW
RegisterWindowMessageW
GetClassInfoExW
UnregisterClassA
LoadStringW
LoadCursorW
RegisterClassExW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
DestroyWindow
GetWindowTextW
GetWindowTextLengthW
PostThreadMessageW
DestroyAcceleratorTable
GetSysColor
GetFocus
SetFocus
IsChild
EndPaint
FillRect
BeginPaint
IsWindow
RedrawWindow
GetClassNameW
CharNextW
GetDesktopWindow
CreateAcceleratorTableW
MoveWindow
ClientToScreen
ScreenToClient
ReleaseCapture
SetCapture
InvalidateRect
InvalidateRgn
GetDlgItem
GetWindowThreadProcessId
SendMessageTimeoutW
FindWindowW
GetWindowPlacement
IsWindowVisible
EnableWindow
IsWindowEnabled
SetRectEmpty
EnumDisplaySettingsW
MonitorFromPoint
SetActiveWindow
AttachThreadInput
GetForegroundWindow
AllowSetForegroundWindow
keybd_event
GetKeyboardState
WindowFromPoint
LoadIconW
MonitorFromRect
UpdateWindow
SetWindowRgn
MessageBoxW
GetActiveWindow
DrawTextW
IntersectRect
WaitForInputIdle
CopyRect
InflateRect
SetCursor
SetRect
OffsetRect
GetMessagePos
SetClassLongW
PtInRect
GetClassLongW

gdi32

GetObjectA
CreateFontW
CreatePolygonRgn
GetStockObject
GetObjectW
CreateSolidBrush
DeleteObject
GetTextMetricsW
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetDeviceCaps
GetTextExtentPoint32W
SetViewportOrgEx
CreateFontIndirectW
CreateCompatibleBitmap

advapi32

LookupAccountSidW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
RegCreateKeyA
GetSidSubAuthority
DuplicateTokenEx
ConvertStringSidToSidW
GetLengthSid
SetTokenInformation
CreateProcessAsUserW
OpenProcessToken
GetTokenInformation
RegQueryValueExW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExA
RegOpenKeyExA
RegEnumValueW
RegOpenKeyW
ConvertSidToStringSidW
RegQueryValueExA

shell32

ShellExecuteW
SHGetSpecialFolderPathW
ExtractIconExW
ord680
SHGetPathFromIDListW
SHBrowseForFolderW
Shell_NotifyIconW
ShellExecuteExW
ord165
SHGetFolderPathW

ole32

CoUninitialize
OleUninitialize
OleInitialize
CoInitialize
CreateStreamOnHGlobal
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
OleLockRunning
CoTaskMemFree
CoTaskMemAlloc

oleaut32

SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayLock
SafeArrayUnlock
VariantCopy
SysAllocStringByteLen
SysStringByteLen
SafeArrayGetVartype
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysAllocString
SysStringLen
SysAllocStringLen
SysFreeString
VarBstrCmp
DispCallFunc
VariantInit
VariantClear
SafeArrayCopy

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

urlmon

URLDownloadToCacheFileW

shlwapi

PathUnquoteSpacesW
wnsprintfW
StrCmpNIW
PathFindExtensionW
PathFindFileNameW
ColorHLSToRGB
ColorRGBToHLS
SHSetValueA
SHGetValueA
PathFileExistsW
PathCompactPathW
PathAddBackslashW
PathStripPathW
ord437
PathAppendW
StrStrIW
SHGetValueW
PathStripToRootW
PathIsDirectoryW
PathRemoveFileSpecW
PathCombineW
SHDeleteValueA

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

ws2_32

ntohl
htonl
htons
ntohs

wintrust

WTHelperProvDataFromStateData
WinVerifyTrust

crypt32

CertGetNameStringW

psapi

GetModuleFileNameExW

wininet

InternetQueryOptionW
InternetGetConnectedState
DeleteUrlCacheEntryW

gdiplus

GdipCreateFromHDC
GdipDeleteGraphics
GdipAddPathArcI
GdipCreateLineBrushFromRectI
GdipClosePathFigure
GdipCreateSolidFill
GdipResetPath
GdipDeleteBrush
GdipDeletePath
GdipCreatePath
GdipDeletePen
GdipCreatePen1
GdipAlloc
GdipFree
GdipGetSmoothingMode
GdipPrivateAddMemoryFont
GdipCreateBitmapFromStream
GdipSetPathGradientGammaCorrection
GdipSetPathGradientCenterPoint
GdipAddPathLine2
GdipGetPathWorldBoundsI
GdipAddPathPie
GdipAddPathLine
GdipAddPathArc
GdipSaveImageToFile
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSetInterpolationMode
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipCreateHBITMAPFromBitmap
GdipDrawImagePointRectI
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipBitmapSetPixel
GdipBitmapGetPixel
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetFontHeight
GdipDeleteFont
GdipCreateFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDeleteFontFamily
GdipSetSmoothingMode
GdipDeletePrivateFontCollection
GdipNewPrivateFontCollection
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipResetClip
GdipSetClipRectI
GdipDrawImageRectRectI
GdipDrawImageRectI
GdipMeasureString
GdipDrawString
GdipFillRectangle
GdipDrawEllipseI
GdipDrawRectangleI
GdipDrawLineI
GdipDrawLine
GdipSetPixelOffsetMode
GdipGetPixelOffsetMode
GdipSetTextRenderingHint
GdipGetImageGraphicsContext
GdipCreateFromHWNDICM
GdipCreateFromHWND
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterColor
GdipCreatePathGradientFromPath
GdipAddPathEllipseI
GdipAddPathRectangleI
GdipAddPathLineI
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipSetPenDashOffset
GdipSetPenDashStyle
GdipSetPenWidth
GdipCreatePen2
GdipSetLinePresetBlend
GdipCreateLineBrushFromRect
GdipFillPath
GdipFillRectangleI
GdipDrawPath
GdipCloneBrush

netapi32

Netbios

Sections

.text
Size: 1008KB - Virtual size: 1012KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 915KB - Virtual size: 915KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a1839c5ffbf744a0e837650f0866746

Code Sign

04:5b:d7:bd:e9:5f:97:12Certificate

Extended Key Usages

Key Usages

07Certificate

Key Usages

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14Certificate

Extended Key Usages

Key Usages

04:5b:d7:bd:e9:5f:97:12Certificate

Extended Key Usages

Key Usages

07Certificate

Key Usages

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14Certificate

Extended Key Usages

Key Usages

fb:45:27:dc:6b:b9:f6:f0:f8:0c:70:cd:f9:43:da:44:d9:f1:9d:55:bf:2f:92:e7:51:30:c4:7d:07:a3:c9:53Signer

11:00:00:fd:a3:1f:6a:33:f6:01:b6:99:de:4f:06:54:d5:6c:ca:b0Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

wtsapi32

urlmon

shlwapi

comctl32

version

ws2_32

wintrust

crypt32

psapi

wininet

gdiplus

netapi32

Sections

.text Size: 1008KB - Virtual size: 1012KB

.rdata Size: 190KB - Virtual size: 192KB

.data Size: 20KB - Virtual size: 40KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 915KB - Virtual size: 915KB

04:5b:d7:bd:e9:5f:97:12
Certificate

07
Certificate

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

04:5b:d7:bd:e9:5f:97:12
Certificate

07
Certificate

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

fb:45:27:dc:6b:b9:f6:f0:f8:0c:70:cd:f9:43:da:44:d9:f1:9d:55:bf:2f:92:e7:51:30:c4:7d:07:a3:c9:53
Signer

11:00:00:fd:a3:1f:6a:33:f6:01:b6:99:de:4f:06:54:d5:6c:ca:b0
Signer

.text
Size: 1008KB - Virtual size: 1012KB

.rdata
Size: 190KB - Virtual size: 192KB

.data
Size: 20KB - Virtual size: 40KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 915KB - Virtual size: 915KB