92b4472175e30dfb089030007f877b28fccea4f7f3c925f8b95b463fd39f5076

Sharing

Copy URL Twitter E-mail

General

Target

92b4472175e30dfb089030007f877b28fccea4f7f3c925f8b95b463fd39f5076
Size

3.1MB
MD5

5f65037918b776ea3d8c3e87b1b70595
SHA1

11a18f3d9fa7d7faee23e1d184e16c1be989bccd
SHA256

92b4472175e30dfb089030007f877b28fccea4f7f3c925f8b95b463fd39f5076
SHA512

bd484999963a3ab66d91fd6827c309a001dcc7b3506be185485c9c616b0caebb2d3566d8597358adc8ebf70c843b21934626ba199f7369cefd2428ee17da9f42
SSDEEP

12288:VRuu16PwOhlT1EMSOFClBY5qS99PJ/+CBEqxuPAnvMHI3SADn0:VRu1hEMSxIgyLal+vMHI1L0

Score

1^/10

Malware Config

Signatures

Files

92b4472175e30dfb089030007f877b28fccea4f7f3c925f8b95b463fd39f5076
.exe windows:4 windows x86 arch:x86

4c6f453d3e6360eb7d3e164a5b5f935d

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:2e:40:d7:ab:ef:ea:25:fb:e4:2b:63
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

01/03/2024, 07:13

Not After

18/05/2025, 08:35

Subject

SERIALNUMBER=0106-01-020323,CN=JRA SYSTEM SERVICE CO.\,LTD.,OU=VAN,O=JRA SYSTEM SERVICE CO.\,LTD.,L=Koto-Ku,ST=Tokyo,C=JP,1.3.6.1.4.1.311.60.2.1.3=#13024a50,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06/04/2022, 07:44

Not After

08/05/2033, 07:44

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

20/02/2019, 00:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:8a:d3:58:1d:31:c3:79:27:50:87:14:d0:ab:ec:9f:08:6e:9d:80
Signer

Actual PE Digest

59:8a:d3:58:1d:31:c3:79:27:50:87:14:d0:ab:ec:9f:08:6e:9d:80

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\20231029_targetインストーラ\release\JVPlusTF.pdb

Imports

wininet

InternetSetOptionA
FtpOpenFileA
HttpSendRequestExA
HttpEndRequestA
InternetWriteFile
InternetSetFilePointer
InternetOpenUrlA
GopherOpenFileA
FtpFindFirstFileA
GopherCreateLocatorA
FtpCommandA
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetSetOptionExA
InternetSetCookieA
InternetGetCookieA
InternetQueryDataAvailable
FtpDeleteFileA
FtpRenameFileA
FtpCreateDirectoryA
FtpRemoveDirectoryA
FtpSetCurrentDirectoryA
FtpGetCurrentDirectoryA
FtpPutFileA
FtpGetFileA
InternetErrorDlg
HttpAddRequestHeadersA
InternetFindNextFileA
GopherFindFirstFileA
InternetGetLastResponseInfoA
InternetSetStatusCallback
GopherGetAttributeA

psapi

GetModuleBaseNameA
EnumProcesses
EnumProcessModules

kernel32

GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
lstrcmpiW
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetVersion
InterlockedExchange
CreateThread
GetFileAttributesA
lstrcatA
GetExitCodeProcess
CreateProcessA
Sleep
ExitThread
DeleteFileA
WaitForSingleObject
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
OpenProcess
SuspendThread
ResumeThread
FindFirstFileA
FindNextFileA
FindClose
CloseHandle
CreateFileA
GetFileSize
WriteFile
GetLastError
FindResourceA
LoadResource
MulDiv
LocalFree
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
CopyFileA
GlobalFree
SetLastError
GetProcAddress
GetModuleHandleA
GetModuleFileNameW
InterlockedDecrement
FreeLibrary
GetVersionExA
lstrcmpW
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
FreeResource
GetModuleFileNameA
GetCurrentProcessId
lstrcmpA
LoadLibraryExA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
SetThreadPriority
SetEvent
CreateEventA
MoveFileA
GetThreadLocale
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
WritePrivateProfileStringA
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
InterlockedIncrement
GlobalFlags
GetCPInfo
GetOEMCP
GetAtomNameA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileTime
GetTickCount
RtlUnwind
ExitProcess
HeapFree
CreateDirectoryA
HeapAlloc
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
FatalAppExitA
SetConsoleCtrlHandler
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetDriveTypeA
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetCurrentDirectoryA
SetEnvironmentVariableA
LockResource
SizeofResource
GetCurrentDirectoryA
GetPrivateProfileStringA
lstrcpyA
GetTempPathA
GetPrivateProfileIntA

user32

GetLastActivePopup
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
IsWindow
GetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetCapture
IsChild
WinHelpA
SendDlgItemMessageA
RegisterWindowMessageA
CheckMenuItem
EnableMenuItem
ModifyMenuA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
IsWindowEnabled
ScrollWindowEx
ValidateRect
GetCursorPos
GetActiveWindow
TranslateMessage
GetMessageA
SetCursor
ShowOwnedPopups
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
MapDialogRect
SetWindowContextHelpId
InflateRect
GetMenuItemInfoA
DestroyMenu
UnregisterClassA
GetSysColorBrush
DeleteMenu
SetCapture
WindowFromPoint
ReleaseCapture
WaitMessage
DestroyIcon
SetScrollPos
CharNextA
CopyAcceleratorTableA
IsRectEmpty
GetMessageTime
SetActiveWindow
GetNextDlgGroupItem
MessageBeep
TranslateAcceleratorA
SetMenu
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
TrackPopupMenu
GetKeyNameTextA
MapVirtualKeyA
SetParent
UnionRect
PostThreadMessageA
GetDCEx
LockWindowUpdate
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
LoadBitmapA
CopyRect
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
UpdateWindow
GetMenu
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetSysColor
EndPaint
BeginPaint
GetWindowDC
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
InvalidateRgn
DestroyWindow
ReleaseDC
GetDC
ClientToScreen
SetRect
TrackPopupMenuEx
CharUpperW
CharUpperA
CharLowerW
CharLowerA
GetSystemMetrics
WaitForInputIdle
LoadIconA
GetDesktopWindow
KillTimer
SetTimer
GetClientRect
IsIconic
GetSystemMenu
SendMessageA
AppendMenuA
DrawIcon
EnumWindows
GetWindowThreadProcessId
PostQuitMessage
LoadCursorA
SetClassLongA
EnableWindow
GetParent
InvalidateRect
GetWindowRect
PostMessageA
GetKeyState
SetScrollRange
RegisterClipboardFormatA
GetScrollRange
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
UnhookWindowsHookEx
GetDialogBaseUnits
GetMenuState

gdi32

CopyMetaFileA
CreateDCA
SaveDC
RestoreDC
GetDeviceCaps
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
DeleteObject
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
BitBlt
GetPixel
StartDocA
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
GetTextMetricsA
DPtoLP
PatBlt
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
GetTextExtentPoint32A
CreateFontIndirectA
GetDCOrgEx
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreateBitmap
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
GetStockObject
CreateCompatibleDC
GetRgnBox
CreateCompatibleBitmap
GetCharWidthA
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
CreateFontA
StretchDIBits
GetWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetObjectA

advapi32

RegOpenKeyA
RegSetValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

ShellExecuteA
DragQueryFileA
DragFinish
ExtractIconA
SHGetFileInfoA

oleaut32

VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarDateFromStr
VarCyFromStr
SysAllocStringLen
SysReAllocStringLen
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SysFreeString
LoadTypeLi
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringByteLen
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocString

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFindFileNameA
PathRemoveExtensionA
PathStripToRootA
PathIsUNCA
UrlUnescapeA
PathFindExtensionA

oledlg

ord8

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

GetFileTitleA

ole32

CreateStreamOnHGlobal
CoRegisterMessageFilter
OleIsCurrentClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleRun
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
StringFromGUID2
CoCreateInstance
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
CoTaskMemFree
SetConvertStg
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
OleFlushClipboard

Sections

.text
Size: 492KB - Virtual size: 489KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4c6f453d3e6360eb7d3e164a5b5f935d

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

1a:2e:40:d7:ab:ef:ea:25:fb:e4:2b:63Certificate

Extended Key Usages

Key Usages

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1dCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fcCertificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

59:8a:d3:58:1d:31:c3:79:27:50:87:14:d0:ab:ec:9f:08:6e:9d:80Signer

Headers

File Characteristics

PDB Paths

Imports

wininet

psapi

kernel32

user32

gdi32

advapi32

shell32

oleaut32

comctl32

shlwapi

oledlg

oleacc

winspool.drv

comdlg32

ole32

Sections

.text Size: 492KB - Virtual size: 489KB

.rdata Size: 124KB - Virtual size: 122KB

.data Size: 16KB - Virtual size: 34KB

.rsrc Size: 2.4MB - Virtual size: 2.4MB

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

1a:2e:40:d7:ab:ef:ea:25:fb:e4:2b:63
Certificate

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

59:8a:d3:58:1d:31:c3:79:27:50:87:14:d0:ab:ec:9f:08:6e:9d:80
Signer

.text
Size: 492KB - Virtual size: 489KB

.rdata
Size: 124KB - Virtual size: 122KB

.data
Size: 16KB - Virtual size: 34KB

.rsrc
Size: 2.4MB - Virtual size: 2.4MB