朴道征信个人征信异议申请表_2024_08_06_docx[.]exe[.]virus

Resubmissions

06/08/2024, 06:35

240806-hclebssbkr1

06/08/2024, 06:12

240806-gyf63a1fqp1

Sharing

Copy URL Twitter E-mail

General

Target
朴道征信个人征信异议申请表_2024_08_06_docx.exe.virus
Size 3.9MB
Sample240806-hclebssbkr
SHA256 7bc91803ebe6351d6f063e7197a1b11043014fd5bfcfea0b2daaab97524f54a2
MD5 92feaab527acc9a4d6d2c9423627882e
SHA1 90f82ccfc51c6fe68916222a7d51f2e92e075d88
SHA512 33b64d1454a987b8096b09ac423edadcd87a84fc3e7223a2d3b0b88c6339a0a7f86f8179344b13a0983ae7ab5753d546fa08580693b0ef3d1d0010055eb05a69
SSDEEP 49152:znG5k1kVAWrCsdTFg/R9Cfw4iUwlJsr1riCxb3NJm/VTlvSXb1kf3Ehv+616wUNT:zMkWVrdTWtJEpjNJiVshG3++6haXj
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

朴道征信个人征信异议申请表_2024_08_06_docx.exe.virus

.exe 3.9MB

朴道征信个人征信异议申请表_2024_08_06_docx.exe.virus

IMPHASH 0614034a1d5741459fbc3ee802c933c8
SHA256 7bc91803ebe6351d6f063e7197a1b11043014fd5bfcfea0b2daaab97524f54a2
MD5 92feaab527acc9a4d6d2c9423627882e
SHA1 90f82ccfc51c6fe68916222a7d51f2e92e075d88
SHA512 33b64d1454a987b8096b09ac423edadcd87a84fc3e7223a2d3b0b88c6339a0a7f86f8179344b13a0983ae7ab5753d546fa08580693b0ef3d1d0010055eb05a69
SSDEEP 49152:znG5k1kVAWrCsdTFg/R9Cfw4iUwlJsr1riCxb3NJm/VTlvSXb1kf3Ehv+616wUNT:zMkWVrdTWtJEpjNJiVshG3++6haXj
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

32:70:e0:ae:ff:d0:61:48:c3:1b:98:79:af:10:69:10:0a:01:bf:06:3b:bb:24:9e:44:79:64:70:17:ac:bb:16

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=HanGil-IT,C=Korea,1.2.840.113549.1.9.1=#0c19736f796f756e672e6b696d4061726f6164757365722e636f6d

Chains

Aug 5, 2024

PE Signature issue

Digest

61:57:5c:f4:f1:2f:20:a1:62:15:1b:11:59:51:1f:21:a6:68:c7:d7

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=HanGil-IT,C=Korea,1.2.840.113549.1.9.1=#0c19736f796f756e672e6b696d4061726f6164757365722e636f6d

Chains

Aug 5, 2024

Minor OS version

Major OS version

Entry point

1846656

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\dvs\p4\build\sw\rel\gpu_drv\r530\r530_00\drivers\ui\SedonaServers\WorkStationServer\NvGpuUtilization\NvGpuUtilization\x64\Release\bin\NvGpuUtilization.pdb

kernel32

GetFileAttributesExW GetFileTime SystemTimeToTzSpecificLocalTime OutputDebugStringA EncodePointer GlobalDeleteAtom GlobalAddAtomW GlobalFindAtomW CreateActCtxW ActivateActCtx DeactivateActCtx FindActCtxSectionStringW QueryActCtxW SetThreadPriority GlobalGetAtomNameW TlsAlloc TlsGetValue TlsSetValue TlsFree GlobalReAlloc GlobalHandle LocalReAlloc FindClose FindFirstFileW FlushFileBuffers GetFileSize GetVolumeInformationW LockFile ReadFile SetEndOfFile SetFilePointer UnlockFile DuplicateHandle GlobalFlags CompareStringW lstrcpyW GetCurrentDirectoryW GetWindowsDirectoryW GetTempFileNameW GetTempPathW GetTickCount GetProfileIntW SearchPathW GetUserDefaultLCID InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetStringTypeW LCMapStringW GetCPInfo FormatMessageA FindNextFileW SetFilePointerEx GetModuleHandleA FileTimeToLocalFileTime RtlUnwindEx ExitThread FreeLibraryAndExitThread HeapQueryInformation GetCommandLineA GetCommandLineW VirtualAlloc SetStdHandle GetFileType ExitProcess GetStdHandle GetTimeZoneInformation IsValidLocale EnumSystemLocalesW GetConsoleCP GetConsoleMode ReadConsoleW FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW GlobalFree GlobalLock GlobalUnlock GlobalAlloc ResumeThread CreateThread CreateEventW HeapFree ResetEvent GetSystemDefaultLCID GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar lstrcmpiW lstrcmpW FormatMessageW MulDiv LoadLibraryW FindResourceW SizeofResource LockResource LoadResource GetModuleHandleExW FreeResource FindResourceExW GetVersionExW GetSystemTimeAsFileTime ProcessIdToSessionId GetCurrentThreadId TerminateProcess GetCurrentProcessId GetCurrentProcess WaitForSingleObjectEx WaitForSingleObject SetEvent QueryPerformanceFrequency QueryPerformanceCounter OutputDebugStringW WriteFile GetFileSizeEx LoadLibraryExA VirtualQuery VirtualProtect GetSystemInfo CopyFileW GlobalSize RtlPcToFileHeader FileTimeToSystemTime VerifyVersionInfoW lstrcmpA LocalFree LocalAlloc LoadLibraryExW GetModuleHandleW GetModuleFileNameW GetModuleFileNameA GetSystemDirectoryW SetLastError CloseHandle GetFullPathNameW GetFileAttributesW CreateFileW VerSetConditionMask GetProcAddress FreeLibrary Sleep LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetProcessHeap DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize InitializeCriticalSectionEx InitializeCriticalSectionAndSpinCount

gdi32

MoveToEx PolylineTo DeleteObject GetStockObject SetDCBrushColor SetDCPenColor Rectangle LineTo SetBkColor SetTextColor TextOutW CreateFontW CreateSolidBrush SetBkMode SelectObject ExtCreatePen SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CombineRgn CreateRectRgnIndirect PatBlt SetRectRgn DPtoLP EnumFontFamiliesExW CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette GetBkColor CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo SetPixel StretchBlt CreateDIBSection SetDIBColorTable CreateEllipticRgn Ellipse GetTextColor CreatePolygonRgn Polygon Polyline GetTextFaceW GetViewportOrgEx GetWindowOrgEx SetPixelV SetPaletteEntries ExtFloodFill PtInRegion GetBoundsRect FrameRgn FillRgn RoundRect CreateRoundRectRgn CreateCompatibleBitmap OffsetRgn GetRgnBox SetViewportExtEx ExtTextOutW SetTextAlign SetROP2 SetPolyFillMode GetLayout SetLayout SetMapMode SelectPalette ExtSelectClipRgn SelectClipRgn SaveDC RestoreDC RectVisible PtVisible IntersectClipRect GetWindowExtEx GetViewportExtEx GetPixel GetObjectType GetClipBox ExcludeClipRect Escape CreateRectRgn CreatePatternBrush CreatePen CreateHatchBrush CreateBitmap CreateDCW CopyMetaFileW CreateCompatibleDC BitBlt DeleteDC GetObjectW GetTextMetricsW GetTextExtentPoint32W GetDeviceCaps CreateFontIndirectW LPtoDP

oleaut32

LoadTypeLi VarBstrFromDate VariantCopy VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen VariantChangeType VariantClear VariantInit SysAllocStringLen SysFreeString SysAllocString

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

uxtheme

OpenThemeData DrawThemeParentBackground IsThemeBackgroundPartiallyTransparent DrawThemeText GetThemeSysColor GetThemePartSize DrawThemeBackground GetThemeColor GetCurrentThemeName GetWindowTheme IsAppThemed CloseThemeData

gdiplus

GdipDrawImageRectI GdipAlloc GdipFree GdiplusStartup GdipSetInterpolationMode GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusShutdown

wtsapi32

WTSQueryUserToken

winmm

PlaySoundW

shlwapi

PathIsUNCW StrFormatKBSizeW PathFindExtensionW PathStripToRootW PathRemoveFileSpecW PathFindFileNameW

msimg32

TransparentBlt AlphaBlend

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

ImpersonateLoggedOnUser RevertToSelf RegCloseKey RegCreateKeyExW RegDeleteValueW RegEnumKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW RegDeleteKeyW

ole32

IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleLockRunning RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleGetClipboard DoDragDrop CoInitializeEx CoInitialize CoUninitialize CoDisconnectObject ReleaseStgMedium OleDuplicateData CoTaskMemFree CoTaskMemAlloc CreateStreamOnHGlobal CoCreateInstance

Name

.text

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

726KB

Virtual Size

725KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

41KB

Virtual Size

111KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

93KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=19, id=259, version=26715,

count=2, id=261, version=23013,

count=39, id=260, version=24123,

count=10, id=259, version=24123,

count=13, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=374, id=261, version=24123,

count=35, id=260, version=26715,

count=1, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=1, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=205, id=261, version=26715,

count=1, id=263, version=26715,

count=2, id=262, version=26715,

count=45, id=257, version=26715,

count=912, id=1, productName=Unmarked objects,

count=94, id=265, version=24215,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=1, id=151,

count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,