狗谷DN下载器[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
狗谷DN下载器.exe
Size 37.6MB
Sample261030-pp2emsef43
SHA256 58bd3d61e76277345a69de400044a29af6341923586c3673952e5bcdd1198368
MD5 7ace6bfc5251053e4020138089359dbf
SHA1 895726711ccda2e20b7c187c27ee8bcc511c92a8
SHA512 db5c9ba853961ce0328c5c95400477f0f67b7578ea038d487b0da5e78b16416ecbf842e9c703b628bc5b817f8300a441822610204ee0b7980256df6976750e37
SSDEEP 786432:p/ivk5YEv+WkfVDxm7vDRP3pG72Fu/wNC/2Fu/wNC:p/iWv+DovPGKSwzSw
TLSH
T1E387AE17E69310E8C52BC170865BE777AA31B8154030FE7BBA58DA717F32E605B1E728
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
狗谷DN下载器.exe

File Explorer

狗谷DN下载器.exe

.exe 37.6MB

狗谷DN下载器.exe

IMPHASH b8043adc28c2f5622073c59dde134a73
SHA256 58bd3d61e76277345a69de400044a29af6341923586c3673952e5bcdd1198368
MD5 7ace6bfc5251053e4020138089359dbf
SHA1 895726711ccda2e20b7c187c27ee8bcc511c92a8
SHA512 db5c9ba853961ce0328c5c95400477f0f67b7578ea038d487b0da5e78b16416ecbf842e9c703b628bc5b817f8300a441822610204ee0b7980256df6976750e37
SSDEEP 786432:p/ivk5YEv+WkfVDxm7vDRP3pG72Fu/wNC/2Fu/wNC:p/iWv+DovPGKSwzSw
TLSH
T1E387AE17E69310E8C52BC170865BE777AA31B8154030FE7BBA58DA717F32E605B1E728
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

702560

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateToolhelp32Snapshot Process32First Process32Next GetCurrentProcess OpenProcess TerminateProcess CreateWaitableTimerA CreateFileA ReadDirectoryChangesW WaitForSingleObject GetExitCodeThread TerminateThread GetProcessHeap GetNativeSystemInfo FindResourceA LoadResource LockResource SizeofResource FreeResource RtlMoveMemory LocalSize GetLocalTime GetSystemDirectoryA LoadLibraryA GetModuleHandleA ExitProcess HeapAlloc HeapReAlloc IsBadReadPtr GetModuleFileNameA WriteFile GetFileAttributesA SetFileAttributesA GetPrivateProfileStringA WritePrivateProfileStringA GetUserDefaultLCID FormatMessageA ReadFile GetFileSize GetCommandLineA FreeLibrary LCMapStringA CreateThread GlobalSize DeleteFileA CompareStringW CompareStringA SetEndOfFile FindClose SetStdHandle IsBadCodePtr SetUnhandledExceptionFilter GetStringTypeW GetStringTypeA GetOEMCP GetACP GetCPInfo LCMapStringW SetFilePointer HeapSize IsBadWritePtr RaiseException HeapCreate HeapDestroy TlsGetValue SetLastError TlsAlloc TlsSetValue GetCurrentThreadId GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter InterlockedIncrement InterlockedDecrement GetSystemTime GetTimeZoneInformation RtlUnwind GetVersion GetStartupInfoA InitializeCriticalSection DeleteCriticalSection EnterCriticalSection FindNextFileW DeleteFileW lstrlenW FindFirstFileW GetModuleHandleW lstrcpyn LocalFree LocalAlloc IsWow64Process GetSystemInfo LeaveCriticalSection VirtualQueryEx GetEnvironmentVariableA GetCurrentProcessId SetEnvironmentVariableA GetCurrentDirectoryA GetLastError GetWindowsDirectoryA GetTempPathA GetVersionExA CloseHandle SetWaitableTimer CreateWaitableTimerW HeapFree GlobalFree GlobalUnlock GlobalLock GlobalAlloc MultiByteToWideChar WideCharToMultiByte GetProcAddress VirtualFree FlushFileBuffers VirtualAlloc

user32

GetClassNameW IsWindow GetMessageW TranslateMessage DispatchMessageW DestroyWindow KillTimer GetInputState LoadCursorW LookupIconIdFromDirectoryEx RegisterClassExW DefWindowProcW SetCursor SendMessageA GetAsyncKeyState IntersectRect InvalidateRect UpdateLayeredWindow ReleaseCapture PostMessageW IsZoomed IsIconic GetPropA LoadCursorFromFileW SetTimer PtInRect ReleaseDC SystemParametersInfoA GetCursorPos GetWindowRect RemovePropA SetForegroundWindow SetPropA GetParent CallWindowProcW TrackMouseEvent ShowWindow BeginPaint EndPaint SetCapture GetFocus SetFocus SetWindowLongW SetWindowPos GetClassLongW GetWindowTextW SetWindowRgn MoveWindow MessageBoxA wsprintfA DispatchMessageA GetMessageA PeekMessageA SendMessageW CreateWindowExW GetSystemMetrics CreateIconFromResourceEx EnableWindow IsWindowEnabled GetForegroundWindow GetActiveWindow SetActiveWindow CopyImage MsgWaitForMultipleObjects SetCaretPos

advapi32

CryptAcquireContextA CryptCreateHash CryptReleaseContext CryptHashData CryptDestroyHash CryptGetHashParam RegCloseKey RegQueryValueExA RegOpenKeyA

shell32

SHGetPathFromIDListA Shell_NotifyIconW SHGetSpecialFolderPathA SHBrowseForFolderA ShellExecuteA SHGetMalloc

ole32

CreateStreamOnHGlobal CLSIDFromString StringFromGUID2 CoInitialize CoUninitialize OleRun CoCreateInstance CLSIDFromProgID

gdi32

CreateRoundRectRgn BitBlt CreateCompatibleDC CreateDIBSection SelectObject DeleteObject DeleteDC CreateRectRgn GetDIBits

oleaut32

SafeArrayDestroy VariantClear SysAllocString SafeArrayCreate VariantCopy RegisterTypeLi LHashValOfNameSys LoadTypeLi VariantChangeType VarR8FromBool VarR8FromCy SysFreeString SafeArrayGetElemsize SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetDim SafeArrayAllocData SafeArrayAllocDescriptor VariantInit VariantTimeToSystemTime OleLoadPicture SystemTimeToVariantTime

winmm

mciSendStringA

gdiplus

GdipGetCompositingQuality GdipCreateHBITMAPFromBitmap GdipGetFamilyName GdipCreatePathGradientFromPath GdipDrawPolygon GdipFillPolygon GdipCreatePen2 GdipCreateLineBrush GdipFillPath GdipClosePathFigure GdipAddPathArc GdipCreatePath GdipDeletePath GdipDrawPath GdipCreateRegionHrgn GdipDeleteRegion GdipGetRegionBounds GdipMeasureCharacterRanges GdipCreateRegion GdipSetStringFormatMeasurableCharacterRanges GdipGetPropertyItem GdipGetPropertyItemSize GdipImageGetFrameCount GdipImageSelectActiveFrame GdipGetStringFormatFlags GdipGetStringFormatTrimming GdipGetStringFormatAlign GdipSetStringFormatFlags GdipSetStringFormatTrimming GdipSetStringFormatAlign GdipSetInterpolationMode GdipSetCompositingQuality GdipGetImageGraphicsContext GdipCreateBitmapFromScan0 GdipDrawString GdipCreateSolidFill GdipGetFontHeight GdipMeasureString GdipDeleteBrush GdipFillRectangle GdipCreateLineBrushFromRect GdipDeleteStringFormat GdipSetStringFormatHotkeyPrefix GdipCreateStringFormat GdipDrawImageRect GdipBitmapUnlockBits GdipBitmapLockBits GdipCloneBitmapArea GdipGetImagePixelFormat GdipDrawImageRectRect GdipGraphicsClear GdipSetSmoothingMode GdipGetSmoothingMode GdipCreateFromHDC GdipDeleteGraphics GdipSetTextRenderingHint GdipGetTextRenderingHint GdipResetClip GdipSetPenDashStyle GdipDeletePen GdipDrawRectangle GdipSetClipRect GdipSetClipRegion GdipCreateImageAttributes GdiplusStartup GdipDisposeImage GdipGetImageEncoders GdipGetImageEncodersSize GdipSaveImageToStream GdipGetImageHeight GdipGetImageWidth GdipLoadImageFromStream GdipDeleteFont GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipCreateFont GdipGetFontStyle GdipGetFontSize

shlwapi

PathFileExistsA StrFormatByteSize64A

imm32

ImmAssociateContext ImmGetContext