윤종신 오르막길 (Feat[.] 정인) (자동재생) mp3듣기-2[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
윤종신 오르막길 (Feat. 정인) (자동재생) mp3듣기-2.zip
Size 80KB
Sample260828-e4a6wstbjb
SHA256 960b0485d81c0d9aab32613b4a662f5e0cda78086722137b35581aa1713be51b
MD5 389503e8c07e9a0de00397c516dcac8f
SHA1 7fdd58ef861a034d0651cf41d21b2a185a88e31b
SHA512 1c9420456266bec1371c33cca802da9acc47bc79e0cf647f2559fc34953f7e82cd30df7025b122779dccb49c991ace46e8538e281bf4c5b16a028473cb1fbc1b
SSDEEP 1536:kuBb+MeO0E/KWKlzsIC95HSCuGbGLqbtEqmeJEf8XB5ZP9jfFDjYY8l:kYbQhDlIIC95yAbGL8YeJJRLP9bFQY8l
TLSH
T16E83020EFA631609915863B81BBB4FD22F70F7F75218C83712E4BBAB83911B93658181
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/  (Feat. ) (ڵ) mp3.exe

File Explorer

윤종신 오르막길 (Feat. 정인) (자동재생) mp3듣기-2.zip

.zip 80KB
.txt

160B
  (Feat. ) (ڵ) mp3.exe

.exe 164KB

윤종신 오르막길 (Feat. 정인) (자동재생) mp3듣기-2.zip

SHA256 960b0485d81c0d9aab32613b4a662f5e0cda78086722137b35581aa1713be51b
MD5 389503e8c07e9a0de00397c516dcac8f
SHA1 7fdd58ef861a034d0651cf41d21b2a185a88e31b
SHA512 1c9420456266bec1371c33cca802da9acc47bc79e0cf647f2559fc34953f7e82cd30df7025b122779dccb49c991ace46e8538e281bf4c5b16a028473cb1fbc1b
SSDEEP 1536:kuBb+MeO0E/KWKlzsIC95HSCuGbGLqbtEqmeJEf8XB5ZP9jfFDjYY8l:kYbQhDlIIC95yAbGL8YeJJRLP9bFQY8l
TLSH
T16E83020EFA631609915863B81BBB4FD22F70F7F75218C83712E4BBAB83911B93658181
MD5 SHA1 SHA512 SSDEEP TLSH

  (Feat. ) (ڵ) mp3.exe

IMPHASH c795bd97c39af59a2e1b9651044ab113
SHA256 d0d1e52df526ca023599c0a613a761a5c5178612fef04d2bd07599ba46d4a07c
MD5 02387570c61a6fa52ad3842734b275e3
SHA1 ab16cb23bd99680b99f2ffada7479553906231ae
SHA512 6f33bc1fc0dab3ae4dbeb6876f97b7144d52bdbb7386849c9c3ad6e86536a9816d6227ee65f9de6af6e63d7e50b7f622c6a916a1ce057312645323cba35e6d95
SSDEEP 1536:/CZkyevLGyJvD8hYqvqLHBy/HbT3VOaCizEx5P6KnD3Ytq+2Eo/fl7L2IxvCyW+J:6ZkZvlvDi4YnkXsEPP5zWH42GKYlQu3
TLSH
T178F38E2235E1C8F3D25701300DE5AB7AE3B9E9744F724B836398DF1D6D394848A3B266
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26786

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsFree GlobalReAlloc TlsSetValue LocalReAlloc TlsGetValue FileTimeToSystemTime FileTimeToLocalFileTime GetModuleHandleA GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA GetVersion GetProcessVersion GlobalFlags WritePrivateProfileStringA GetCPInfo GetOEMCP RtlUnwind GetTimeZoneInformation GetSystemTime HeapFree HeapAlloc ExitProcess GetStartupInfoA GetCommandLineA RaiseException SetStdHandle GetFileType GetACP GlobalHandle HeapSize GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr LCMapStringA LCMapStringW UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetStringTypeA GetStringTypeW SetUnhandledExceptionFilter GetDriveTypeA IsBadReadPtr IsBadCodePtr CompareStringA CompareStringW SetEnvironmentVariableA GlobalUnlock GlobalFree TlsAlloc lstrcatA SetErrorMode GetFileTime GetFileSize GetFileAttributesA GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetCurrentThread GetCurrentThreadId LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection LocalAlloc FreeLibrary EnterCriticalSection SetLastError GetModuleFileNameA lstrcmpiA GetFullPathNameA lstrcpynA GetVolumeInformationA lstrcpyA LoadLibraryA GetProcAddress SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer ReadFile DuplicateHandle InterlockedDecrement InterlockedIncrement FormatMessageA LocalFree GetCurrentProcess CopyFileA lstrlenA MultiByteToWideChar WideCharToMultiByte GetLastError FindFirstFileA FindNextFileA FindClose TerminateProcess GetLocalTime SystemTimeToFileTime WaitForSingleObject GetTempFileNameA Sleep GetTempPathA GetWindowsDirectoryA GetSystemDirectoryA GetCurrentDirectoryA DeleteFileA CreateFileA WriteFile CloseHandle HeapReAlloc SetFileAttributesA

user32

AdjustWindowRectEx SetFocus GetSysColor MapWindowPoints LoadIconA SetWindowTextA ShowWindow LoadCursorA GetSysColorBrush ReleaseDC GetDC PtInRect ClientToScreen TabbedTextOutA DrawTextA GrayStringA DestroyMenu GetClientRect CopyRect GetTopWindow GetCapture WinHelpA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetDlgItem GetDlgCtrlID DestroyWindow CreateWindowExA GetClassLongA SetPropA GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime GetMessagePos GetForegroundWindow SetWindowLongA SetWindowPos RegisterWindowMessageA SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect UnhookWindowsHookEx LoadStringA GetMessageA TranslateMessage GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA GetLastActivePopup IsWindowEnabled GetWindowLongA MessageBoxA EnableWindow SetCursor PostQuitMessage PostMessageA GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem SendMessageA EnableMenuItem GetFocus GetNextDlgTabItem GetSystemMetrics CharUpperA wsprintfA SetForegroundWindow GetWindowTextA GetClassNameA GetWindow GetParent DispatchMessageA UnregisterClassA

gdi32

RestoreDC PtVisible RectVisible TextOutA ExtTextOutA Escape SaveDC SetWindowExtEx ScaleWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode GetStockObject CreateBitmap DeleteDC DeleteObject GetDeviceCaps GetObjectA SetBkColor SetTextColor GetClipBox SelectObject

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA ClosePrinter DocumentPropertiesA

advapi32

RegOpenKeyExA RegSetValueExA RegCreateKeyExA RegCloseKey RegQueryValueExA

shell32

SHGetSpecialFolderPathA ShellExecuteExA ShellExecuteA

comctl32

ord17

wininet

InternetReadFile InternetQueryDataAvailable InternetCloseHandle InternetOpenUrlA InternetOpenA DeleteUrlCacheEntry HttpQueryInfoA InternetCrackUrlA InternetCanonicalizeUrlA InternetQueryOptionA InternetSetStatusCallback InternetSetFilePointer InternetWriteFile InternetGetLastResponseInfoA

iphlpapi

GetAdaptersInfo