47aaa7a5d78f8fdfbcdb1e79e3004c3f845ef1b64950f6e8307ca1848bfef374

Sharing

Copy URL

Twitter E-mail

General

Target

47aaa7a5d78f8fdfbcdb1e79e3004c3f845ef1b64950f6e8307ca1848bfef374
Size

81KB
MD5

de54d8bfa39924ab2b82fd78576a9ac4
SHA1

789cdaf44dab5d055369dc862d50b572a41bcbd5
SHA256

47aaa7a5d78f8fdfbcdb1e79e3004c3f845ef1b64950f6e8307ca1848bfef374
SHA512

0825304295f48267bc58e4ae51e06c36b11b4c54f3d1a445ad3ee888e2dbb9da38199fb4253e98cedb74c46aaa0a92818a794730e0218921397f7fb9fce0bed9
SSDEEP

1536:9v4Co/qCN1OwbiAvzr1+l6clOtrHrMnnP+rMnnPYz2:9k1ViALr1c6KOtr4nPNnPY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47aaa7a5d78f8fdfbcdb1e79e3004c3f845ef1b64950f6e8307ca1848bfef374

Files

47aaa7a5d78f8fdfbcdb1e79e3004c3f845ef1b64950f6e8307ca1848bfef374
.dll windows:5 windows x86 arch:x86

eb6a51afca9eac2c793e77b2f4587f09

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\01_작업실\인터넷승인관련\01_인터넷승인_NEW\KisPosDll\KisPosDll\Release\KisPosDll.pdb

Imports

kernel32

lstrlenA
Sleep
CreateDirectoryA
GetPrivateProfileStringA
GetLocalTime
WritePrivateProfileStringA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
DisableThreadLibraryCalls

msvcr90

ftell
fseek
_vscprintf
fclose
_mbscmp
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
fwrite
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_CxxThrowException
memcpy
memset
memcpy_s
fopen
strncpy
_mbschr
vsprintf_s
strnlen
fgetc
atoi
_mbsstr
_localtime64_s
feof
sprintf
memmove_s
??3@YAXPAX@Z
strncmp
_time64
srand
rand
_decode_pointer
__CxxFrameHandler3

ws2_32

ioctlsocket
connect
WSAStartup
inet_addr
select
htons
setsockopt
WSACleanup
recv
socket
__WSAFDIsSet
closesocket
send

Exports

Exports

CAT_Approval
GF_SCRDecOT
GF_SCRDecrypt
GF_SCREncOT
GF_SCREncyrpt
GF_SCRGetOTK
GF_SCRMakeASK
GF_SCRMakeMSK
GF_SCRRandomNumber
KIS_Approval_SK
MakeNACF3Format
NACF_Approval
NACF_Approval_Etc
NACF_Approval_GC
VB_CAT_Approval
VB_GF_SCRDecOT
VB_GF_SCRDecrypt
VB_GF_SCREncOT
VB_GF_SCREncyrpt
VB_GF_SCRGetOTK
VB_GF_SCRMakeASK
VB_GF_SCRMakeMSK
VB_GF_SCRRandomNumber
VB_KIS_Approval_SK
VB_MakeNACF3Format
VB_NACF_Approval
VB_NACF_Approval_Etc
VB_NACF_Approval_GC
VB_log_print_rtn
log_print_rtn

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb6a51afca9eac2c793e77b2f4587f09

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcr90

ws2_32

Exports

Exports

Sections

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 9KB - Virtual size: 22KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 9KB - Virtual size: 22KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB