Puyo15_Carnival[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Puyo15_Carnival.exe
Size 30.2MB
Sample260628-2aa1csft5w
SHA256 d66c7247e8fafd525586cb7cab0a3ecb7f34f76f55e1fe27c0bccc39e8b9cc64
MD5 361b99ce83b29111b083a985878f82f9
SHA1 3a939b0b39be9bd27ea3366594c3fc3614e92b3b
SHA512 0366677f8c615a9f6c29eece3e48dd05c240cca290a23976f4cd76bf4252987f925f1299a28b35053033849182752753ba451baaaabac00ad9fed26ef0040a37
SSDEEP 786432:J+V8uO+5ftMyRmCd1JnFkmYnqvoUTCv6a+T4Bi7:JBCftMy0Cd17kmYqvoUTCvQ17
TLSH
T14F673307532205C1E896CCB3BDB5FA51B8C2E48FD75A43C36A41FD698F4652DF4A2B82
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Puyo15_Carnival.exe

File Explorer

Puyo15_Carnival.exe

.exe 30.2MB

Puyo15_Carnival.exe

IMPHASH e40cc5a9ad350fcfd18750ae12081e5a
SHA256 d66c7247e8fafd525586cb7cab0a3ecb7f34f76f55e1fe27c0bccc39e8b9cc64
MD5 361b99ce83b29111b083a985878f82f9
SHA1 3a939b0b39be9bd27ea3366594c3fc3614e92b3b
SHA512 0366677f8c615a9f6c29eece3e48dd05c240cca290a23976f4cd76bf4252987f925f1299a28b35053033849182752753ba451baaaabac00ad9fed26ef0040a37
SSDEEP 786432:J+V8uO+5ftMyRmCd1JnFkmYnqvoUTCv6a+T4Bi7:JBCftMy0Cd17kmYqvoUTCvQ17
TLSH
T14F673307532205C1E896CCB3BDB5FA51B8C2E48FD75A43C36A41FD698F4652DF4A2B82
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4927

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

crtdll

strrchr _close free _read _lseek malloc _filelength _open memcpy strchr wcsrchr _write _tell strtok strstr wcscpy wcscat wcschr _splitpath atoi strncpy wcsstr wcscspn wcslen ??2@YAPAXI@Z memset ??3@YAXPAX@Z

kernel32

RemoveDirectoryA DeleteFileA SetFileAttributesA lstrcmpiA CloseHandle WaitForSingleObject CreateThread GetFileAttributesA lstrcatA lstrlenA GetModuleFileNameA lstrcpyA GlobalLock GlobalReAlloc GlobalAlloc Sleep GetExitCodeProcess SearchPathA GetShortPathNameA FileTimeToDosDateTime FileTimeToLocalFileTime GetFileSize GetFileTime CreateFileA GlobalHandle FreeLibrary LoadLibraryA MultiByteToWideChar WideCharToMultiByte CreateDirectoryA SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime GetSystemDirectoryA GetWindowsDirectoryA GetTempPathA lstrcmpA FindClose FindNextFileA FindFirstFileA IsDBCSLeadByte ExitProcess GetModuleHandleA GetStartupInfoA GetCommandLineA GlobalFree

user32

SetDlgItemTextA DialogBoxParamA EndDialog IsDlgButtonChecked GetDlgItemTextA DestroyIcon GetDlgItem SendMessageA ShowWindow CreateDialogParamA PostQuitMessage SetWindowPos CreateWindowExA DestroyWindow PeekMessageA WaitForInputIdle IsWindow FindWindowA LoadStringA UpdateWindow MessageBoxA wsprintfA GetMessageA IsDialogMessageA TranslateMessage DispatchMessageA MessageBeep

shell32

SHBrowseForFolderA SHGetPathFromIDListA ShellExecuteExA ShellExecuteA SHGetFileInfoA

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey

ole32

CoTaskMemFree

comctl32

ord17