1afc97ca9bb785513691ac23466d9c3e854b8d3e30ecd7478846dd07e01e7b79
- SHA256 1afc97ca9bb785513691ac23466d9c3e854b8d3e30ecd7478846dd07e01e7b79
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Splash 2.7.0 자동설치 한글패치 v1.0.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Splash 2.7.0 자동설치 한글패치 v1.0.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 1afc97ca9bb785513691ac23466d9c3e854b8d3e30ecd7478846dd07e01e7b79
- Size 690KB
- Sample261113-sdlftscz3r
- SHA256 1afc97ca9bb785513691ac23466d9c3e854b8d3e30ecd7478846dd07e01e7b79
- MD5 daf9aa2f72fcb3b09133061d3e8385f2
- SHA1 a44a9211bf7cc7b977e3523b479d7b8e7295f47b
- SHA512 16fbaa9e39b6fdb265f33bf316725b4261bca38376f5bc081e8651e9f5a7579a9efdc6627fcb5e8cc2ea902bfc67682ca6f0cc01d2dc7d2295898677c75649fb
- SSDEEP 12288:XrYpF+yGNdH+8SJiZXUTGbJ87yRUNbRctQpge8n182i/oRn9L3wHef/4RYvX:UD+a8SgZkTGF8yUBRcKpgnbHeI
- TLSH T19BE423991BEE470413EBA2F27645E438433A40334CDE59F9380D64DAC4D765AB3F8A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Splash 2.7.0 자동설치 한글패치 v1.0.exe
File Explorer
-
1afc97ca9bb785513691ac23466d9c3e854b8d3e30ecd7478846dd07e01e7b79.zip 690KB
-
Splash 2.7.0 자동설치 한글패치 v1.0.exe.exe 1.7MB
Splash 2.7.0 자동설치 한글패치 v1.0.exe
- IMPHASH 959c044ec3947a5d701df0786b2aebaa
- SHA256 867fa4322fd6797c2854aeb2488d9e81b436ad759deda8f2b477bf5abf98c341
- MD5 8ef1401977f5a1479ee06e7720b163ca
- SHA1 dd1407238cdd64fcb38cc61eb6b3e01063b5c21d
- SHA512 abfd064c722026576f030ce35e1a448e520c47c4c3aa98745958cdf42ece0f1880f402444fd1b7d9ad8fbf96aa716ead060b166a909685c23e06efc4a798b762
- SSDEEP 24576:0qqnuHIeyAopYfyZFGKJjxKmhSMABnCUmRyybDn6h0h3e3vgzLA83Ooc8SHkC2eG:bquHzy5pd9jxKESJCe/g3Aesq
- TLSH T118856C22778289B2D4D623F466C9933157BEBCA1072073D393DB93E95F643C4A633A91
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
35112
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptAcquireContextW
shell32
ShellExecuteW
user32
MessageBoxW
kernel32
WriteConsoleW
HeapReAlloc
HeapSize
CreateDirectoryW
CreateFileW
DeleteFileW
FlushFileBuffers
GetFileAttributesW
GetFileSizeEx
ReadFile
RemoveDirectoryW
WriteFile
CloseHandle
GetLastError
OpenProcess
FindResourceExW
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
LoadResource
LockResource
SizeofResource
FindResourceW
FormatMessageW
QueryFullProcessImageNameW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
CopyFileW
MoveFileExW
SetConsoleOutputCP
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetFilePointerEx
RaiseException
RtlUnwind
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
ExitProcess
GetModuleHandleExW
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
GetFileType
GetConsoleOutputCP
GetConsoleMode
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
GetStringTypeW
DecodePointer
Name
.text
Size
113KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=33145,
count=141, id=261, version=33145,
count=19, id=260, version=33145,
count=20, id=259, version=35207,
count=18, id=260, version=35207,
count=9, id=257, version=33145,
count=117, id=1, productName=Unmarked objects,
count=43, id=261, version=35207,
count=1, id=261, version=35228,
count=1, id=255, version=35228,
count=1, id=151,
count=1, id=258, version=35228,