TestSro-Guncelleyici-1865.zip
- SHA256 d046adc3f7027cef2c9283826c730383c6e9f069073056c34a144dfadbeac0bb
Overview
overview
3Static
static
3GFXFileManager.dll
windows10-2004-x64
3GFXFileManager.dll
windows11-ltsc_2024-x64
3Oyunu-Baslat.bat
windows10-2004-x64
3Oyunu-Baslat.bat
windows11-ltsc_2024-x64
3replacer.exe
windows10-2004-x64
3replacer.exe
windows11-ltsc_2024-x64
3silkroad.exe
windows10-2004-x64
3silkroad.exe
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GFXFileManager.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
GFXFileManager.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Oyunu-Baslat.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
Oyunu-Baslat.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
replacer.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
replacer.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
silkroad.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
silkroad.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target TestSro-Guncelleyici-1865.zip
- Size 753KB
- Sample260925-vrmbdss15k
- SHA256 d046adc3f7027cef2c9283826c730383c6e9f069073056c34a144dfadbeac0bb
- MD5 c4663a9aa196f2b4b461635e04f3ce92
- SHA1 913778efab80d03d28cd7edba8a66030e7332e48
- SHA512 66bde5e5c0c8009c6c00071e1c8e93e67eb30172ccfb94682fd47571a54668ec24609e6a957087056af0480e01cdcb1a2e4d3e6faed63dd34f5b957fdbfead6a
- SSDEEP 12288:y8UkxX+MdRATqHarFgylmrYGmgYrnAH+5Rhgl0hPJuj3F70jQTjO2Wtv6riSOp88:xxRyqHSVl4YGJYrAHAhgK7WFgjQHQ6rU
- TLSH T1CEF433DCE420C9E79A71E225E7EEE1C72EE8CC8979A729DCD18B41A3E511DC484944DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/replacer.exe unpack001/silkroad.exe
File Explorer
-
TestSro-Guncelleyici-1865.zip.zip 753KB
-
GFXFileManager.dll.dll 713KB
-
OKU.txt1022B
-
Oyunu-Baslat.bat56B
-
VSRO-Web.cer803B
-
replacer.exe.exe 320KB
-
silkroad.exe.exe 760KB
GFXFileManager.dll
- IMPHASH 9f31186f45bfe298402cb915c3fc6b25
- SHA256 fa2010d4abe215d66ba88865ec2bdf600aaa2196cd0e7c30c327ba85a7ad48b8
- MD5 c55de7d9005f2d6108cb353fad2a7103
- SHA1 7e817846d153dd3ee1c00d541d00170cddfa7a25
- SHA512 2b6acff3cb8360cd652decd9b35daa915b2caadce70c5f8b99bfa19b3267627191b9b049a30845298fb3cbcade6a82dd88060b18504e1f1567cd441b0e0a19a6
- SSDEEP 12288:yF9ZcFmCCyNPqdc9VwlC1c7uf4NlSBL7r:AZEPBjANlSBL7
- TLSH T11EF49D12B940C032D6B625314979EABA19BCA9301F3855DFA3C84F7A6F705D16B3632B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5e:08:b7:6e:8c:42:36:a1:0d:91:dd:2d:f3:f2:49:c5:fc:f8:f2:61:1b:8d:b0:ee:cf:ed:19:ec:d0:b2:0b:0a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=214-86-15315,CN=JOYMAX Co.\, Ltd,O=JOYMAX Co.\, Ltd,L=Seongnam-si,ST=Gyeonggi-do,C=KR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b52
Chains
Dec 16, 2020
SERIALNUMBER=214-86-15315,CN=JOYMAX Co.\, Ltd,O=JOYMAX Co.\, Ltd,L=Seongnam-si,ST=Gyeonggi-do,C=KR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b52
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=214-86-15315,CN=JOYMAX Co.\, Ltd,O=JOYMAX Co.\, Ltd,L=Seongnam-si,ST=Gyeonggi-do,C=KR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b52
Serial Number
0b:ce:dc:ad:21:a7:93:91:ee:ae:90:1d:ee:59:c5:45
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 16, 2020 - Oct 24, 2023
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
168104
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\vss-od\JMX_Library\Out\Release\GFXFileManager\GFXFileManager.pdb
kernel32
GetSystemTime
SystemTimeToFileTime
OutputDebugStringA
GetCurrentDirectoryA
RemoveDirectoryA
GetFileSize
GetSystemTimeAsFileTime
GetTickCount
lstrlenA
CompareStringA
GetCommandLineA
lstrcpyA
FreeLibrary
GetProcAddress
ExitProcess
LoadLibraryA
GetLastError
EnterCriticalSection
LeaveCriticalSection
CreateThread
GetLocalTime
DeleteCriticalSection
WaitForSingleObject
Sleep
Beep
CreateProcessA
DecodePointer
WaitForSingleObjectEx
OutputDebugStringW
WriteConsoleW
SetFilePointerEx
GetConsoleCP
FlushFileBuffers
ReadConsoleW
GetConsoleMode
HeapReAlloc
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
SetEnvironmentVariableA
GetCurrentProcessId
GetModuleHandleA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
FindFirstFileA
CreateDirectoryA
CreateFileA
SetCurrentDirectoryA
CloseHandle
SetFileTime
GetFileTime
FindClose
SetFilePointer
ReadFile
InitializeCriticalSection
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateFileW
GetCommandLineW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindFirstFileExA
EnumSystemLocalesW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
EncodePointer
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameA
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetCurrentThread
GetACP
GetStringTypeW
GetStdHandle
GetFileType
GetFileAttributesExW
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
user32
ScreenToClient
wsprintfA
DialogBoxParamA
EndDialog
GetDlgItem
SetWindowTextA
GetWindowTextA
GetMessagePos
SendMessageA
DrawTextA
PostMessageA
InflateRect
InvalidateRect
MessageBoxA
gdi32
SetBkMode
SelectObject
Rectangle
DeleteObject
CreatePen
CreateBrushIndirect
SetTextColor
advapi32
CryptHashData
CryptCreateHash
CryptDeriveKey
CryptReleaseContext
CryptAcquireContextA
CryptDecrypt
CryptEncrypt
CryptDestroyHash
ws2_32
recv
send
connect
htons
inet_addr
socket
gethostbyaddr
gethostbyname
WSAStartup
closesocket
GFXDllCreateObject
GFXDllReleaseObject
GFXFMInfo
Name
.text
Size
464KB
Virtual Size
463KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.shared
Size
152KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
1024B
Virtual Size
556B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=241, version=40116,
count=138, id=243, version=40116,
count=25, id=242, version=40116,
count=22, id=259, version=24123,
count=16, id=260, version=24123,
count=32, id=261, version=24123,
count=12, id=264, version=24215,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=152, id=1, productName=Unmarked objects,
count=19, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
OKU.txt
- SHA256 8392fc02c077d0a29a17c4b42c04c2e1b5cfb151856c53a22b8339486fafffcf
- MD5 cf8ef1ef3bc4d86012f3169fa82d189d
- SHA1 a1df7d43e2fc8c8aff6f971389fc6ffbcb705093
- SHA512 01a3ef243604d980a1b313f46d69b628c482785fcff5361416113f2dc76cceca6fc9151fef74c4d03392b30b49100acff02edd7ee495c2dd8bf34a666d77865e
- TLSH T14E11650B3A732A201F5773DECDFE1B377216539BB2604485CEB88713050D7A983A7810
- MD5 SHA1 SHA512 TLSH
Oyunu-Baslat.bat
- SHA256 bc2d48a95fae03ce67c459a2308c98726eca308de17912772bd1a0c55a7d004f
- MD5 6edc607432bda17d3ca8dc46f68e0489
- SHA1 02e892154b5d11b0da60e636fdca03aed54aa011
- SHA512 be07801f1bfe3ab2dae777ebc6a7a9de369c4f2b46be167df5a97a78bf322e1eb4a49a10bf9da0a63b933f39ceede9a52baeda084247ff73844f550205e1757d
- TLSH T1B29002415C64442935565950105A3D4DFC0FA147A0005A6021D1686958CFA40A28B0E1
- MD5 SHA1 SHA512 TLSH
VSRO-Web.cer
- SHA256 f9bae96d3ddc0b1f2f510c34817988bdf0d74341b0402e553dca7105764b3c9e
- MD5 c63f0e846cabc8df445d5d7d846e7239
- SHA1 24c99e99c7e0e9f4e88ce86324c90b68cdfa5653
- SHA512 10ae4f5a7fa398d7a23a1301cca2063217ffce620fcb9a7871bc8ec77aa89b350cacc23daf3642401524fd82948ec9d9044d621e460311d5e849351a729d0e7f
- TLSH T10F0186E0CF50350779438E03CD9F27339C74F26AC2418423122F89224F003825D4E225
- MD5 SHA1 SHA512 TLSH
replacer.exe
- IMPHASH 606378cdfb92d3a438b329ca62c1e5ac
- SHA256 0baa7f4608b38df8fa843c0619dd610166cda5d0a586f0a4f202fc265b1a8781
- MD5 a8f45107e2405f8d64716b603aa2e323
- SHA1 4b217326e2cea8477ef8f1b65bbf0e24d4fe3da8
- SHA512 11ccece796bf21397a7213223a98f5ceccd5e59d7abcf86b04a26139bc7c6c91f1e12bd830726b4d6eb277212d9f5446a8ebaf112c7d5d450aea6f1acc8307d2
- SSDEEP 6144:4JobstRc13okl9cVPw+75pDa0yeTHkeyC1E:4Co49APw8Tyerkh
- TLSH T154647B2177E5C076C6A301724E47D76BA2BAFD909E26438377D13B0EAE345D2DA39780
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
142569
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetErrorMode
FileTimeToLocalFileTime
GetFileTime
GetTickCount
RtlUnwind
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
RaiseException
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
FileTimeToSystemTime
GetConsoleMode
VirtualFree
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
CreateFileA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
WritePrivateProfileStringA
InterlockedDecrement
GetModuleFileNameW
FormatMessageA
LocalFree
MulDiv
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GlobalUnlock
GlobalFree
FreeResource
GetCurrentProcessId
SetLastError
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
GlobalLock
lstrcmpA
GlobalAlloc
GetModuleHandleA
lstrlenA
CompareStringW
CompareStringA
GetVersion
MultiByteToWideChar
CreateMutexA
GetLastError
CloseHandle
MoveFileA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
CreateProcessA
LoadLibraryA
WideCharToMultiByte
Sleep
InterlockedExchange
FindResourceA
LoadResource
LockResource
SizeofResource
FindFirstFileA
FindClose
GetProcAddress
FreeLibrary
GetConsoleCP
lstrcpyA
user32
SetRect
InvalidateRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
SetFocus
GetWindowTextA
GetForegroundWindow
IsRectEmpty
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
MessageBoxA
DrawIcon
AppendMenuA
SendMessageA
GetSystemMenu
IsIconic
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
SetCursor
SetWindowsHookExA
CallNextHookEx
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
ReleaseCapture
LoadCursorA
SetCapture
GetClientRect
UpdateWindow
SetTimer
EnableWindow
LoadIconA
GetSystemMetrics
ShowWindow
wsprintfA
PostQuitMessage
GetDlgItem
KillTimer
CharUpperA
PostMessageA
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
GetParent
GetFocus
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
RemovePropA
gdi32
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
CreateBitmap
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
ExtTextOutA
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetWindowExtEx
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoRevokeClassObject
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc
oleaut32
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
SysFreeString
Name
.text
Size
224KB
Virtual Size
223KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
60KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=126, version=50327,
count=10, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=23, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=537, id=1, productName=Unmarked objects,
count=25, id=125, productName=VS2005 build 50727, version=50727,
count=151, id=109, productName=VS2005 build 50727, version=50727,
count=164, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
silkroad.exe
- IMPHASH a70e80e5a9cdcd591b8145ada5fd66e6
- SHA256 8d417de7ce0bcf7b9e275d02818dadd09832ba37eca5445358281072696f087d
- MD5 3eab42f01de3ab238d897d24ff11e0be
- SHA1 6dcb0f89be76694746ef0b10ec80512e49ba4581
- SHA512 344172088ca9ec02fd58d7cb20d9faa132a0257b9935cd75ab84e5395a4fa19a9ea8549700bdd4fa467ae247cd3aa1b37aedaab288206f9320c782c26978427e
- SSDEEP 12288:1HNYpdkjZHB087wazLMC3Zf+zqg/AbiUI3HsX:BNCQ5jMCF+zqg/AbjI3MX
- TLSH T12DF46B127BCBC0B7CA5311760C19E77F61A6FA511B283AC3EB992F0E5EB42D11E35249
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
469616
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
FileTimeToSystemTime
WritePrivateProfileStringA
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
SetErrorMode
FileTimeToLocalFileTime
RtlUnwind
RaiseException
ExitThread
CreateThread
GetSystemTimeAsFileTime
ExitProcess
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetStartupInfoA
HeapSize
TlsAlloc
HeapDestroy
HeapCreate
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedDecrement
GetModuleFileNameW
SuspendThread
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
GlobalAlloc
FormatMessageA
LocalFree
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetLastError
lstrcmpW
InterlockedIncrement
GetDateFormatA
GetTimeFormatA
FindNextFileA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ResetEvent
GlobalMemoryStatus
GetLocalTime
QueryPerformanceFrequency
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
GetProcessHeap
HeapAlloc
HeapFree
lstrcatA
WinExec
lstrcpyA
GetWindowsDirectoryA
CompareStringW
CompareStringA
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingA
MapViewOfFile
SleepEx
FlushInstructionCache
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersion
MultiByteToWideChar
GetDiskFreeSpaceExA
CreateDirectoryA
GetFileTime
FindClose
FindFirstFileA
DeleteFileA
lstrlenA
OutputDebugStringA
GetFileSize
WriteFile
CreateFileA
ReadFile
FindResourceA
LoadResource
LockResource
SizeofResource
SetCurrentDirectoryA
CreateMutexA
GetFileAttributesA
GetModuleHandleA
CreateProcessA
GetLastError
GetSystemDirectoryA
CreateEventA
GetModuleFileNameA
LoadLibraryA
GetTickCount
GetCurrentProcessId
Process32First
Process32Next
OpenProcess
GetExitCodeProcess
TerminateProcess
TerminateThread
GetProcAddress
FreeLibrary
CreateToolhelp32Snapshot
SetEvent
WaitForSingleObject
Module32First
Module32Next
CloseHandle
Sleep
InterlockedExchange
VirtualFree
WideCharToMultiByte
user32
RegisterClipboardFormatA
PostThreadMessageA
IsRectEmpty
CopyAcceleratorTableA
GetSysColorBrush
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
GetMessageA
TranslateMessage
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
DefWindowProcA
CallWindowProcA
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindowTextLengthA
GetWindowTextA
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
GetForegroundWindow
InvalidateRgn
GetWindow
OffsetRect
UnionRect
ScreenToClient
SetWindowLongA
GetCursorPos
PtInRect
GetWindowLongA
ReleaseCapture
IsWindow
GetFocus
SetCapture
GetCapture
GetComboBoxInfo
RedrawWindow
CopyRect
LoadCursorA
LoadBitmapA
SetCursor
DrawTextA
CharNextA
CharUpperA
GetParent
SetRect
PostQuitMessage
wsprintfA
LoadIconA
KillTimer
SetTimer
IsWindowVisible
InvalidateRect
ReleaseDC
GetDC
GetClientRect
PostMessageA
SendMessageA
MessageBoxA
UpdateWindow
EnableWindow
GetMenu
gdi32
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
SetViewportOrgEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
CreateCompatibleBitmap
SetMapMode
RestoreDC
SaveDC
SetBkColor
GetClipBox
GetDeviceCaps
GetTextExtentPoint32A
CreateRectRgn
GetStockObject
CreateSolidBrush
GetTextMetricsA
CreateBitmap
SetBkMode
SetTextColor
StretchBlt
PatBlt
GetObjectA
CreateDIBitmap
CreateFontA
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegSetValueExA
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
shell32
ShellExecuteA
comctl32
_TrackMouseEvent
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
StgOpenStorageOnILockBytes
OleFlushClipboard
CoRegisterMessageFilter
CoCreateGuid
oleaut32
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantClear
VariantInit
VariantChangeType
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
ws2_32
WSAWaitForMultipleEvents
WSASetEvent
ntohs
WSASendTo
WSASend
getsockopt
getpeername
accept
connect
getsockname
WSARecv
shutdown
listen
WSASocketA
recvfrom
htons
socket
bind
WSACreateEvent
WSACleanup
WSAStartup
inet_ntoa
gethostbyname
inet_addr
WSAGetLastError
WSAIoctl
WSARecvFrom
setsockopt
WSACloseEvent
closesocket
sendto
WSAGetOverlappedResult
WSAResetEvent
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
winmm
timeKillEvent
timeSetEvent
iphlpapi
GetAdaptersInfo
Name
.text
Size
580KB
Virtual Size
576KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
132KB
Virtual Size
129KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
364KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
20KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=126, version=50327,
count=10, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=33, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=621, id=1, productName=Unmarked objects,
count=29, id=125, productName=VS2005 build 50727, version=50727,
count=161, id=109, productName=VS2005 build 50727, version=50727,
count=42, id=114, version=50727,
count=197, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,