kor_eng_final[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
kor_eng_final.zip
Size 852KB
Sample260806-ppln7abm7v
SHA256 262db0882b2870b8299e8a438df57311f42c9279985ee86437fc2d24ab1df8b2
MD5 d5ed0b698d1d716dc7220c6a54f988b9
SHA1 56636e4b02b576f6092f84a7c90ba3bd2096d7f2
SHA512 b35670dfb44395cf71c466b8b099a1d41b35912063d0a98079dfa68fb184f858167c40a8a937a693060e13e09e946124106bb752d529e2f1fcf669e0c93f9e7e
SSDEEP 24576:H/EcoyF341lLvhrhMw2cB5i4TZvuAk+xX:Hyb1rhMW5i4TZvDF
TLSH
T190053377D3BEB2F19BBE817A758FA8B3E54E4582E0F1D2598A2D62815C520CCD1F4807
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/한영스마트_V29.exe

File Explorer

kor_eng_final.zip

.zip 852KB
eng.wav

81KB
kor.png

.png 21KB
kor.wav

139KB
main.ico

84KB
usa.png

.png 28KB
한영스마트_V29.exe

.exe 1.2MB

kor_eng_final.zip

SHA256 262db0882b2870b8299e8a438df57311f42c9279985ee86437fc2d24ab1df8b2
MD5 d5ed0b698d1d716dc7220c6a54f988b9
SHA1 56636e4b02b576f6092f84a7c90ba3bd2096d7f2
SHA512 b35670dfb44395cf71c466b8b099a1d41b35912063d0a98079dfa68fb184f858167c40a8a937a693060e13e09e946124106bb752d529e2f1fcf669e0c93f9e7e
SSDEEP 24576:H/EcoyF341lLvhrhMw2cB5i4TZvuAk+xX:Hyb1rhMW5i4TZvDF
TLSH
T190053377D3BEB2F19BBE817A758FA8B3E54E4582E0F1D2598A2D62815C520CCD1F4807
MD5 SHA1 SHA512 SSDEEP TLSH

한영스마트_V29.exe

IMPHASH 77f2f8da764256f9bd471d4ad74556ad
SHA256 8e13499c3642e638fbdee88b019249d0a7e8cd987854a5d60983aef9c3572f31
MD5 a66417e2e8dad68017ce9d9d39eb7410
SHA1 9c7866ec702e4717a4196669248d8ad72ed2caf6
SHA512 809d4436480b19be07decb6c8e3a9d58caa4d6efe184da9eb5874c4c942a9ceba6674522b4ec759944a1b0858f59bb9698b52823f034c5e845aabb55e83b5a1c
SSDEEP 24576:yk/ty/rXtGy5jFBE7mOwcQBEwOkB+8F73rt9Y5HtllqhMMI8GjjO:DqpGy5ZBE6OXqAkB+8F7sHrlq+V8Qa
TLSH
T1AF559E0773E7C1F9DA77C1FAC5610226EB31B86417389ADB2590452EEF63AD04E3AB11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

776156

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wsock32

WSAGetLastError getservbyname htonl send recv inet_addr WSAAsyncSelect inet_ntoa gethostbyname WSASetLastError ioctlsocket htons gethostbyaddr getservbyport ntohs WSAStartup gethostname shutdown WSACleanup closesocket connect socket

winmm

joyGetPosEx mciSendStringW joyGetDevCapsW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

comctl32

ImageList_GetIconSize ImageList_Create ImageList_Destroy ImageList_AddMasked ImageList_ReplaceIcon CreateStatusWindowW

psapi

GetProcessImageFileNameW

wininet

InternetCloseHandle InternetReadFileExA InternetReadFile InternetOpenW InternetOpenUrlW

shlwapi

StrCmpLogicalW

uxtheme

EnableThemeDialogTexture SetWindowTheme IsAppThemed

dwmapi

DwmGetWindowAttribute

kernel32

GlobalFree GlobalUnlock WideCharToMultiByte GetCPInfo GetSystemDirectoryA LoadLibraryA GetProcAddress FreeLibrary GetCurrentThreadId GetEnvironmentVariableW IsValidCodePage LoadLibraryW GetLastError OutputDebugStringW lstrcmpiW GetStringTypeExW CreateThread SetThreadPriority GetExitCodeThread CloseHandle CreateMutexW VirtualProtect SetLastError GetModuleHandleW GetDiskFreeSpaceExW GetDriveTypeW CreateFileW DeviceIoControl SetVolumeLabelW GetVolumeInformationW GetDiskFreeSpaceW SetEnvironmentVariableW MultiByteToWideChar GetFullPathNameW GetFileAttributesW CreateDirectoryW ReadFile DeleteFileW LoadResource LockResource WriteFile SizeofResource SetCurrentDirectoryW CompareStringOrdinal CopyFileW SetFileAttributesW FindFirstFileW FindNextFileW FindClose FileTimeToLocalFileTime LocalFileTimeToFileTime GetSystemTimeAsFileTime SetFileTime GlobalLock MoveFileW GetCurrentProcessId OpenProcess TerminateProcess SetPriorityClass GetProcessId QueryDosDeviceW EnterCriticalSection LeaveCriticalSection Beep GetLocalTime GetDateFormatW GetTimeFormatW GetDateFormatEx GetTickCount64 GetSystemTime GetSystemDefaultUILanguage GetComputerNameW GetCurrentDirectoryW GetSystemWindowsDirectoryW GetTempPathW WaitForSingleObject GetExitCodeProcess WriteProcessMemory ReadProcessMemory GetVersionExW InitializeCriticalSection DeleteCriticalSection GetModuleFileNameW SetDllDirectoryW GetModuleHandleExW GetShortPathNameW CreateProcessW FormatMessageW CompareStringW RemoveDirectoryW GetCurrentProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW GetPrivateProfileStringW GetPrivateProfileSectionW GetPrivateProfileSectionNamesW WritePrivateProfileStringW WritePrivateProfileSectionW SetEndOfFile GetACP GetFileType GetStdHandle SetFilePointerEx SystemTimeToFileTime FileTimeToSystemTime GetFileSize IsWow64Process VirtualAllocEx VirtualFreeEx EnumResourceNamesW LoadLibraryExW GlobalSize FindResourceW SetErrorMode Sleep GetTickCount MulDiv RaiseException FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer InitializeCriticalSectionEx GetCommandLineA GetCommandLineW ExitProcess SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlLookupFunctionEntry RtlUnwindEx HeapSize HeapReAlloc HeapQueryInformation IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapFree HeapAlloc GetProcessHeap FindFirstFileExW GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GlobalAlloc SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleOutputCP GetConsoleMode WriteConsoleW GetFileSizeEx RtlPcToFileHeader

user32

IsWindowVisible IsChild SetWindowRgn SetWindowPos EnumWindows IsZoomed IsIconic GetLayeredWindowAttributes SetLayeredWindowAttributes DestroyWindow RegisterClassExW SystemParametersInfoW CreateWindowExW GetMenu EnableMenuItem LoadAcceleratorsW AddClipboardFormatListener RemoveClipboardFormatListener LoadImageW PostQuitMessage CheckMenuItem RegisterWindowMessageW DefWindowProcW SetForegroundWindow MonitorFromPoint GetSystemMenu GetMenuItemCount GetMenuItemID GetSubMenu GetMenuStringW ExitWindowsEx GetPropW GetClassLongW SetMenu SetPropW RemovePropW GetSysColor RedrawWindow DrawTextW SetParent GetClassInfoExW AdjustWindowRectEx GetAncestor UpdateWindow FlashWindow GetMessagePos GetSysColorBrush FillRect GetClassLongPtrW CallWindowProcW CheckRadioButton IntersectRect GetUpdateRect PtInRect CreateDialogIndirectParamW CreateAcceleratorTableW DestroyAcceleratorTable InsertMenuItemW RemoveMenu SetMenuItemInfoW GetMenuItemInfoW SetMenuDefaultItem CreateMenu CreatePopupMenu SetMenuInfo DestroyMenu TrackPopupMenuEx CopyImage CreateIconIndirect CreateIconFromResourceEx DrawIconEx EnumClipboardFormats GetWindow BringWindowToTop GetQueueStatus GetLastActivePopup SetActiveWindow GetKeyboardLayoutNameW ActivateKeyboardLayout GetGUIThreadInfo GetWindowTextW mouse_event WindowFromPoint keybd_event SetKeyboardState GetKeyboardState GetCursorPos GetAsyncKeyState AttachThreadInput SendInput UnregisterHotKey RegisterHotKey SendMessageTimeoutW CharUpperW UnhookWindowsHookEx SetWindowsHookExW PostThreadMessageW IsCharAlphaNumericW IsCharUpperW IsCharLowerW ToUnicodeEx GetKeyboardLayout CallNextHookEx CharLowerW GetDC DialogBoxParamW ScrollWindow GetSystemMetrics GetWindowRect GetWindowLongPtrW SetFocus DefDlgProcW MoveWindow MapWindowPoints GetClientRect EnableWindow MapDialogRect GetDlgItem SetWindowLongPtrW SetWindowTextW MessageBoxW OpenClipboard GetClipboardData GetClipboardFormatNameW CloseClipboard SetClipboardData EmptyClipboard PostMessageW FindWindowW EndDialog IsWindow DispatchMessageW EnumChildWindows GetLastInputInfo LoadCursorW GetCursorInfo ClientToScreen MessageBeep GetIconInfo GetWindowTextLengthW InvalidateRect AdjustWindowRect SetDlgItemTextW SendDlgItemMessageW IsCharAlphaW DestroyIcon EnumDisplayMonitors GetMonitorInfoW TranslateMessage ShowWindow IsClipboardFormatAvailable CountClipboardFormats SetWindowLongW ScreenToClient VkKeyScanExW IsDialogMessageW SendMessageW IsWindowEnabled GetWindowLongW GetKeyState TranslateAcceleratorW KillTimer PeekMessageW GetFocus GetClassNameW GetWindowThreadProcessId GetForegroundWindow GetMessageW SetTimer GetParent GetDlgCtrlID MapVirtualKeyW BlockInput GetShellWindow MapVirtualKeyExW ReleaseDC

gdi32

GdiFlush CreateDIBSection EnumFontFamiliesExW SetBrushOrgEx CreatePatternBrush GetObjectW GetClipBox SetBkMode SetBkColor GetDeviceCaps CreateCompatibleDC CreateFontIndirectW GetStockObject CreateSolidBrush GetCharABCWidthsW GetTextMetricsW GetPixel GetDIBits SelectObject CreateDCW CreateFontW CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateEllipticRgn DeleteObject BitBlt CreateCompatibleBitmap DeleteDC GetSystemPaletteEntries SetTextColor

advapi32

UnlockServiceDatabase RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegQueryValueExW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegDeleteValueW GetUserNameW RegConnectRegistryW RegCloseKey RegOpenKeyExW RegQueryInfoKeyW RegEnumValueW RegEnumKeyExW CreateProcessWithLogonW OpenSCManagerW LockServiceDatabase CloseServiceHandle RegDeleteKeyExW

shell32

SHBrowseForFolderW DragFinish SHGetKnownFolderPath ExtractIconW DragQueryPoint SHEmptyRecycleBinW SHFileOperationW SHGetPathFromIDListW DragQueryFileW SHGetDesktopFolder SHGetMalloc SHCreateItemFromParsingName ShellExecuteExW SHGetFolderPathW Shell_NotifyIconW

ole32

CoCreateInstance CoTaskMemFree CLSIDFromString OleInitialize OleFlushClipboard OleUninitialize CoInitialize CoUninitialize CLSIDFromProgID CoGetObject StringFromGUID2 CreateStreamOnHGlobal

oleaut32

SafeArrayUnaccessData SafeArrayGetElemsize SafeArrayAccessData SafeArrayUnlock SafeArrayPtrOfIndex SafeArrayDestroy SysFreeString OleLoadPicture SysStringLen SafeArrayCreate VariantClear VariantChangeType SysAllocString SafeArrayCopy SysAllocStringLen GetActiveObject VariantCopyInd SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetDim SafeArrayLock