d:\MyFile\项目\PSX Download Helper\PSXDownloadHelper\HelpWizard\obj\Release\HelpWizard.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PSXDownloadHelper.zip
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
PSXDownloadHelper.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
PSXDownloadHelper.zip
Resource
win11-20240802-en
General
-
Target
PSXDownloadHelper.zip
-
Size
873KB
-
MD5
dd42823e9f2916301a3c52585d0ab3ea
-
SHA1
71e6e10eb26dd542f14efcabdfa388b343276fc0
-
SHA256
ff67983a514940c6d29d1ec51b91c406255b3af396695559dcd2b17d6384cc61
-
SHA512
4589c9034c8d981cf7bea3f648d1e1144ad0ada6f39ce65c322361206f05956f23738da036c2e3cb162262fb82c81dcf27bf090518d5ee5cabda5a712ed1191e
-
SSDEEP
24576:BIsSE8o3pwpMyTdRifTb+pQc8pykeU8c87babiZRfbhYUd9sofx:cGwpFTdReTEQVpykdsJhhXDfx
Malware Config
Signatures
-
Unsigned PE 9 IoCs
Checks for missing Authenticode signature.
resource unpack001/PSXDownloadHelper/HelpWizard.exe unpack001/PSXDownloadHelper/MetroStyle.dll unpack001/PSXDownloadHelper/PSXDH.BLL.dll unpack001/PSXDownloadHelper/PSXDH.DAL.dll unpack001/PSXDownloadHelper/PSXDH.HttpsHelp.dll unpack001/PSXDownloadHelper/PSXDH.Model.dll unpack001/PSXDownloadHelper/PSXDH.ProxyHelp.dll unpack001/PSXDownloadHelper/PSXDownloadHelper.exe unpack001/PSXDownloadHelper/en/PSXDownloadHelper.resources.dll
Files
-
PSXDownloadHelper.zip.zip
-
PSXDownloadHelper/Extensions/Featuring.html
-
PSXDownloadHelper/Extensions/css/semantic.min.css
-
PSXDownloadHelper/Extensions/css/site.css
-
PSXDownloadHelper/Extensions/donations-by-alipay.html.js
-
PSXDownloadHelper/Extensions/donations-by-paypal.html.js
-
PSXDownloadHelper/Extensions/fonts/basic.icons.eot
-
PSXDownloadHelper/Extensions/fonts/basic.icons.svg.xml
-
PSXDownloadHelper/Extensions/fonts/basic.icons.ttf
-
PSXDownloadHelper/Extensions/fonts/basic.icons.woff
-
PSXDownloadHelper/Extensions/fonts/icons.eot
-
PSXDownloadHelper/Extensions/fonts/icons.otf
-
PSXDownloadHelper/Extensions/fonts/icons.svg.xml
-
PSXDownloadHelper/Extensions/fonts/icons.ttf
-
PSXDownloadHelper/Extensions/fonts/icons.woff
-
PSXDownloadHelper/Extensions/images/donate-with-alipay.png.png
-
PSXDownloadHelper/Extensions/images/donate-with-paypal.png.png
-
PSXDownloadHelper/Extensions/images/loader-large-inverted.gif.gif
-
PSXDownloadHelper/Extensions/images/loader-large.gif.gif
-
PSXDownloadHelper/Extensions/images/loader-medium-inverted.gif.gif
-
PSXDownloadHelper/Extensions/images/loader-medium.gif.gif
-
PSXDownloadHelper/Extensions/images/loader-mini-inverted.gif.gif
-
PSXDownloadHelper/Extensions/images/loader-mini.gif.gif
-
PSXDownloadHelper/Extensions/images/loader-small-inverted.gif.gif
-
PSXDownloadHelper/Extensions/images/loader-small.gif.gif
-
PSXDownloadHelper/Extensions/javascript/jquery-1.8.3.min.js.js
-
PSXDownloadHelper/Extensions/javascript/semantic.min.js.js
-
PSXDownloadHelper/Extensions/weibo.htm.html
-
PSXDownloadHelper/HelpWizard.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PSXDownloadHelper/Hosts/CdnHosts.ini
-
PSXDownloadHelper/Hosts/CustomHosts.ini
-
PSXDownloadHelper/MetroStyle.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
g:\CODE\IconBuild\MetroStyle\MetroStyle\obj\Release\MetroStyle.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PSXDownloadHelper/PSXDH.BLL.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\MyFile\项目\PSX Download Helper\PSXDownloadHelper\PSXDH.BLL\obj\Release\PSXDH.BLL.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PSXDownloadHelper/PSXDH.DAL.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\MyFile\项目\PSX Download Helper\PSXDownloadHelper\PSXDH.DAL\obj\Release\PSXDH.DAL.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PSXDownloadHelper/PSXDH.HttpsHelp.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\MyFile\项目\PSX Download Helper\PSXDownloadHelper\PSXDH.HttpsHelp\obj\Release\PSXDH.HttpsHelp.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PSXDownloadHelper/PSXDH.Model.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\MyFile\项目\PSX Download Helper\PSXDownloadHelper\PSXDH.Model\obj\Release\PSXDH.Model.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PSXDownloadHelper/PSXDH.ProxyHelp.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\MyFile\项目\PSX Download Helper\PSXDownloadHelper\PSXDH.ProxyHelp\obj\Release\PSXDH.ProxyHelp.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PSXDownloadHelper/PSXDownloadHelper.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
d:\MyFile\项目\PSX Download Helper\PSXDownloadHelper\PSXDownloadHelper\obj\Release\PSXDownloadHelper.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 704KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PSXDownloadHelper/PSXDownloadHelper.exe.config
-
PSXDownloadHelper/Resources/AppIco.ico
-
PSXDownloadHelper/Resources/AppIco.png.png
-
PSXDownloadHelper/en/PSXDownloadHelper.resources.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ