c8af03effc4037eb4a6b3ccc9f8391206827d386004ef8595bb0c4097ebc0303
- SHA256 c8af03effc4037eb4a6b3ccc9f8391206827d386004ef8595bb0c4097ebc0303
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
build/디코 퀘스트 날먹/data/src-win.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
build/디코 퀘스트 날먹/data/src-win.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
build/디코 퀘스트 날먹/디코 퀘스트 날먹.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
build/디코 퀘스트 날먹/디코 퀘스트 날먹.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
General
- Target c8af03effc4037eb4a6b3ccc9f8391206827d386004ef8595bb0c4097ebc0303
- Size 6.0MB
- Sample260715-mxpppsdx9w
- SHA256 c8af03effc4037eb4a6b3ccc9f8391206827d386004ef8595bb0c4097ebc0303
- MD5 ec80aeb90fa4584279647f7a3abc952d
- SHA1 dd90a0250094225fadf887127e68603bd37caf67
- SHA512 a7c7f502a3569413dc192bdad482904f645adaa59d781aee88a25ba1493c67273307ec777c8c99b3e37b7f3ca8a6968c6dd7bb2ffbae4644e33b250247efd352
- SSDEEP 98304:3XMCo5grdIB9dmHFw0z++l1W2wNRAUfey/ghY4TerVuh93aoXKObg7VD9HsvHi:MCooI/glw0z++l16Rrey/fqeU99XKJVV
- TLSH T1945633F7C0BB974E6C27FA0263734D58E1301A6BB113867B4BBAB06662484D36DD354B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/build/디코 퀘스트 날먹/data/src-win.exe unpack001/build/디코 퀘스트 날먹/디코 퀘스트 날먹.exe
File Explorer
-
c8af03effc4037eb4a6b3ccc9f8391206827d386004ef8595bb0c4097ebc0303.zip 6.0MB
-
build/디코 퀘스트 날먹/data/src-win.exe.exe 250KB
-
build/디코 퀘스트 날먹/resources/icon.ico31KB
-
build/디코 퀘스트 날먹/디코 퀘스트 날먹.exe.exe 16.5MB
build/디코 퀘스트 날먹/data/src-win.exe
- IMPHASH c962431a5f5a539ae8ff885b7074d106
- SHA256 fa7149160a338451975260925bea7986802a06a9441d8afc6a899352194532eb
- MD5 ae36d2abc77abdffb33f1f452a9fbe97
- SHA1 394bbc7a3e4d46032caa35b6454e1f6ac7a3cbd3
- SHA512 ac06a41251e1fe2c3a23b46158f00216c49b5b91ec4cbc9719a969cbf4ab72e9434630f08e92e6583335e24d7ffbc9aa40ccfd50b83ca6abda79eca28dd47eb6
- SSDEEP 3072:1sO4TKkzF1VOmMaTovXttn3tCk9hhNVt1yK75ooO9mAn/j:+O4TKkzFH0/vb9DhvUKKsO
- TLSH T1A5448D2676984CE9D86AC076C30686735A7378C51F22E6FF03D44134AF6AAE57F3CA44
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
147968
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
src_win.pdb
user32
DefWindowProcW
GetDC
RegisterWindowMessageA
IsProcessDPIAware
MonitorFromWindow
TrackPopupMenu
ClientToScreen
GetCursorPos
GetWindowDC
OffsetRect
GetWindowRect
MapWindowPoints
GetMenuBarInfo
ReleaseDC
GetClientRect
SetWindowPos
DefWindowProcA
GetMenuItemInfoW
CreateWindowExA
SystemParametersInfoA
CreateAcceleratorTableW
DestroyAcceleratorTable
SendMessageW
CheckMenuItem
DestroyIcon
DestroyMenu
RemoveMenu
SetMenu
MessageBoxW
DispatchMessageA
TranslateMessage
GetMessageA
SetForegroundWindow
ShowWindow
SetWindowLongPtrA
GetWindowLongPtrA
RegisterClassA
CreateWindowExW
RegisterClassW
LoadImageW
DrawMenuBar
SetMenuItemInfoW
DrawIconEx
AppendMenuW
CreatePopupMenu
CreateMenu
PostQuitMessage
SendInput
DestroyWindow
gdi32
CreateSolidBrush
GetTextExtentPoint32A
DeleteDC
SelectObject
CreateDIBSection
CreateCompatibleDC
GetDeviceCaps
GetStockObject
SetBkMode
shell32
Shell_NotifyIconW
ShellExecuteW
Shell_NotifyIconGetRect
kernel32
GetProcAddress
LoadLibraryA
LoadLibraryW
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetModuleFileNameW
QueryPerformanceFrequency
GetLastError
GetCurrentThreadId
GetModuleHandleW
GetEnvironmentVariableW
RtlVirtualUnwind
WideCharToMultiByte
ReleaseMutex
lstrlenW
GetCurrentProcess
LoadLibraryExA
WaitForSingleObjectEx
QueryPerformanceCounter
CreateMutexA
GetCurrentProcessId
GetModuleHandleA
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentDirectoryW
IsProcessorFeaturePresent
HeapFree
HeapAlloc
FormatMessageW
SetLastError
UnhandledExceptionFilter
CloseHandle
SetUnhandledExceptionFilter
GetProcessHeap
SwitchToThread
GetCommandLineW
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
HeapReAlloc
CreateThread
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
WriteConsoleW
WaitForSingleObject
MultiByteToWideChar
comctl32
DefSubclassProc
RemoveWindowSubclass
SetWindowSubclass
uxtheme
CloseThemeData
DrawThemeText
DrawThemeBackground
OpenThemeData
ntdll
RtlNtStatusToDosError
NtWriteFile
oleaut32
SysFreeString
SysStringLen
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
WaitOnAddress
WakeByAddressSingle
bcryptprimitives
ProcessPrng
vcruntime140
__current_exception_context
__current_exception
__C_specific_handler
memmove
memset
memcpy
__CxxFrameHandler3
memcmp
api-ms-win-crt-math-l1-1-0
round
__setusermatherr
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
_get_initial_narrow_environment
terminate
_crt_atexit
_set_app_type
_exit
_configure_narrow_argv
_register_onexit_function
_initialize_onexit_table
__p___argc
exit
_initterm
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_initialize_narrow_environment
__p___argv
_initterm_e
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
Name
.text
Size
149KB
Virtual Size
148KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=35207,
count=3, id=259, version=35207,
count=9, id=260, version=35207,
count=23, id=261, version=35207,
count=162, id=1, productName=Unmarked objects,
count=31, productName=Unmarked objects (old),
count=1, id=255, version=35217,
count=1, id=258, version=35217,
build/디코 퀘스트 날먹/resources/icon.ico
- SHA256 231c8bed9a365c14977e51bf06e8b4e90a569a14443611acd8a49ca441f5577d
- MD5 fdd97352fa0d0b41dd8e61955d833c3d
- SHA1 99a7f55b74d4b13286534835c9b82f30a3340911
- SHA512 a78f81b26e88e8216fa5093b9e4b2f16937c9f3cc06ffc479a74ac258d9ce744b93b5290d40a8a6bc3c3212b2fc81d096e3a3999ddcbba44c1a71d3e83e9efc0
- SSDEEP 768:OmJiVBvkze+HWYDsBZ+6BO3FEOuKwhQcIkBs:bLDsBvOgZs
- TLSH T128E2E15236FA6C1FEAE91B76A1F6D8C50C100638008C95D60F8DED96A396FC9F84724F
- MD5 SHA1 SHA512 SSDEEP TLSH
build/디코 퀘스트 날먹/디코 퀘스트 날먹.exe
- IMPHASH 3ebc9072499789c2ad62dc630bf5d20d
- SHA256 6ec063f19205e61cec74f50596d15aa429ab3b92d3531e83f63984ced64d466a
- MD5 a3b6f91a30892bbfb90093bda3f64131
- SHA1 e7bbbfd2b76222e8deb24a3acfc4f7272d3c13eb
- SHA512 937df57e35bfba183782ea7c1e168fb09c6f1bd605051f3d347322ebf8bfc72e0a026bf361e2a3082939437e12237093373012da745f77886d1c2f3b3357d3f7
- SSDEEP 98304:J+a26rUc3ES+BiuWlVlSjEuGqOIcgWGWb1dyktRaN4yOIrdgjmu+PEvfGnfqk1y3:J+orUc3EcHuGIcIkVm4fmfrnPEj
- TLSH T12C0707257B5BA9ADC09BC4B483474A725A3170CB0B35B9FF44C492382F69BF42F38659
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
10998896
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
discord_quest_completer.pdb
kernel32
RtlVirtualUnwind
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
CreateFileW
SetNamedPipeHandleState
lstrlenW
LoadLibraryA
HeapAlloc
IsProcessorFeaturePresent
GetProcessHeap
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
InitializeSListHead
GetProcAddress
SleepConditionVariableSRW
WakeAllConditionVariable
CreateMutexA
WaitForSingleObjectEx
LoadLibraryW
AcquireSRWLockExclusive
WideCharToMultiByte
ReleaseSRWLockExclusive
MultiByteToWideChar
GetConsoleOutputCP
CreateProcessW
GetWindowsDirectoryW
GetSystemDirectoryW
GetFinalPathNameByHandleW
DeviceIoControl
CreateDirectoryW
GetFileInformationByHandleEx
FindNextFileW
SetEnvironmentVariableW
GetTempPathW
GetFullPathNameW
SetWaitableTimer
CreateWaitableTimerExW
CreateThread
WaitForMultipleObjects
ReadFileEx
ExitProcess
CancelIo
LCIDToLocaleName
GetSystemTimeAsFileTime
GetCurrentThreadId
ReleaseMutex
HeapReAlloc
CopyFileExW
FindClose
FindFirstFileExW
GetFileAttributesW
OutputDebugStringA
OutputDebugStringW
GetModuleFileNameW
GetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
LoadLibraryExW
GetModuleHandleW
FreeLibrary
GetEnvironmentVariableW
GetSystemTimePreciseAsFileTime
QueryPerformanceFrequency
TerminateProcess
GetUserDefaultUILanguage
WriteConsoleW
GetExitCodeProcess
SleepEx
WriteFileEx
TlsFree
GetCurrentProcessId
GetStdHandle
SetFilePointerEx
DuplicateHandle
GetCurrentProcess
SetFileInformationByHandle
GetCommandLineW
GetEnvironmentStringsW
GetCurrentDirectoryW
SetLastError
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemInfo
QueryPerformanceCounter
SwitchToThread
SetHandleInformation
GetCurrentThread
SetThreadStackGuarantee
AddVectoredExceptionHandler
CompareStringOrdinal
FreeEnvironmentStringsW
GetModuleHandleA
Sleep
GetConsoleMode
CreateIoCompletionPort
CancelIoEx
ReadFile
GetOverlappedResult
WriteFile
PostQueuedCompletionStatus
GetQueuedCompletionStatusEx
GetFileInformationByHandle
CloseHandle
FormatMessageW
WaitForSingleObject
SetFileCompletionNotificationModes
CreateEventW
LoadLibraryExA
advapi32
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
SystemFunction036
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
RegGetValueW
RegCloseKey
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
WaitOnAddress
WakeByAddressSingle
bcryptprimitives
ProcessPrng
shell32
ord190
ord155
ShellExecuteExW
SHCreateItemFromParsingName
SHGetKnownFolderPath
DragQueryFileW
DragFinish
SHOpenFolderAndSelectItems
SHAppBarMessage
ole32
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitializeEx
RevokeDragDrop
RegisterDragDrop
CoTaskMemAlloc
CoInitialize
OleInitialize
user32
DestroyAcceleratorTable
CreateMenu
DestroyMenu
RemoveMenu
DrawMenuBar
SetMenu
DrawTextW
GetWindowDC
OffsetRect
GetMenuBarInfo
GetMenuItemInfoW
TranslateAcceleratorW
DestroyWindow
ToUnicodeEx
InsertMenuW
GetKeyState
GetAsyncKeyState
GetKeyboardState
SendInput
SetForegroundWindow
GetWindowTextW
AppendMenuW
GetWindowTextLengthW
SetWindowTextW
SetMenuItemInfoW
MonitorFromPoint
EnumDisplayMonitors
SystemParametersInfoA
SetPropW
IsWindowVisible
GetMenu
GetKeyboardLayout
GetRawInputData
CreateIcon
SetWindowDisplayAffinity
ClipCursor
GetClipCursor
ShowCursor
SetWindowLongW
EnableMenuItem
GetSystemMenu
ScreenToClient
GetWindowLongW
ClientToScreen
DestroyIcon
SystemParametersInfoW
ReleaseCapture
SetCapture
SetWindowLongPtrW
MsgWaitForMultipleObjectsEx
RegisterRawInputDevices
IsProcessDPIAware
SetParent
MapWindowPoints
MonitorFromRect
RegisterWindowMessageA
ShowWindow
CreateAcceleratorTableW
TrackMouseEvent
ReleaseDC
GetDC
CheckMenuItem
DrawIconEx
TrackPopupMenu
IsWindowEnabled
RedrawWindow
PostQuitMessage
EnableWindow
GetWindowLongPtrW
GetParent
SetWindowRgn
FindWindowExW
GetTouchInputInfo
AdjustWindowRect
MapVirtualKeyExW
GetForegroundWindow
RegisterTouchWindow
IsWindow
AdjustWindowRectEx
FlashWindowEx
GetActiveWindow
UpdateWindow
InvalidateRect
SetCursorPos
InvalidateRgn
GetWindowPlacement
SetWindowPlacement
ChangeDisplaySettingsExW
DefWindowProcW
GetMessageW
MapVirtualKeyW
IsIconic
EnumChildWindows
DispatchMessageA
GetMessageA
CreateWindowExW
RegisterClassExW
GetWindowRect
GetClientRect
SetWindowPos
PostMessageW
LoadCursorW
DispatchMessageW
TranslateMessage
SendMessageW
GetUpdateRect
PeekMessageW
PostThreadMessageW
ValidateRect
GetMonitorInfoW
MonitorFromWindow
GetCursorPos
SetCursor
FillRect
GetSystemMetrics
CloseTouchInputHandle
CreatePopupMenu
comctl32
SetWindowSubclass
DefSubclassProc
TaskDialogIndirect
RemoveWindowSubclass
gdi32
DeleteObject
CombineRgn
SetBkMode
GetDeviceCaps
SetTextColor
CreateRectRgn
CreateSolidBrush
CreateCompatibleDC
DeleteDC
SelectObject
CreateDIBSection
BitBlt
dwmapi
DwmGetWindowAttribute
DwmSetWindowAttribute
DwmEnableBlurBehindWindow
shlwapi
SHCreateMemStream
ws2_32
WSACleanup
getaddrinfo
freeaddrinfo
getsockopt
WSAStartup
getpeername
getsockname
WSASocketW
bind
connect
ioctlsocket
shutdown
recv
send
WSASend
setsockopt
WSAIoctl
WSAGetLastError
closesocket
bcrypt
BCryptGenRandom
ntdll
NtWriteFile
NtCreateFile
NtReadFile
RtlGetVersion
NtCreateNamedPipeFile
NtOpenFile
NtCancelIoFileEx
NtDeviceIoControlFile
RtlNtStatusToDosError
oleaut32
SysFreeString
SetErrorInfo
SysStringLen
GetErrorInfo
api-ms-win-crt-math-l1-1-0
trunc
round
__setusermatherr
floor
pow
api-ms-win-crt-string-l1-1-0
strcpy_s
wcsncmp
strcmp
wcslen
_wcsicmp
strlen
wcscmp
api-ms-win-crt-convert-l1-1-0
wcstol
_wtoi
_ultow_s
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
_callnewh
malloc
calloc
api-ms-win-crt-runtime-l1-1-0
_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
_seh_filter_exe
_initterm
_initterm_e
exit
_exit
_get_initial_narrow_environment
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
abort
_initialize_onexit_table
terminate
_register_onexit_function
_crt_atexit
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
10.7MB
Virtual Size
10.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5.1MB
Virtual Size
5.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
589KB
Virtual Size
588KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=259, version=35207,
count=13, id=260, version=35207,
count=47, id=261, version=35207,
count=5, id=257, version=33140,
count=12, id=260, version=35217,
count=478, id=1, productName=Unmarked objects,
count=888, productName=Unmarked objects (old),
count=1, id=255, version=35217,
count=1, id=258, version=35217,