hu8y3z[.]rar | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

hu8y3z.rar
Size

476KB
MD5

cdf3b326951bd5cd55254e5599302183
SHA1

217316d0d637d818e2d2d22397222d715ed7b64c
SHA256

d0681c030a51811edc6f19b6cc418043ef928e251c681cdf75a05949f932340b
SHA512

e7d0f735dfd665199acbc0a0d409d5494ab9649cd97809cf7727aa8d86f2695fa516f42ad9943d59ff1754629900590081c2d63c38cfc6a856b6a4902f600071
SSDEEP

12288:j7fimEsIsmY4K08oM1Wd8t5KQhNdv5z+:j7aVRBn7x6jt0

Score

N/A

Malware Config

Signatures

Files

hu8y3z.rar
.dll windows x86

03540fe05cb0473f2f956a0d0a682262

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutGetPitch

ws2_32

WSACleanup
inet_addr

opengl32

glBegin

comctl32

ImageList_ReplaceIcon

kernel32

GetModuleFileNameW
CloseHandle
CreateFileW
GetProcessVersion
DeleteTimerQueue
VirtualAllocEx
InitAtomTable

wininet

InternetReadFile

user32

IsWinEventHookInstalled
GetClassNameA
TranslateMessage
CreateWindowExA
FillRect
BlockInput
DefMDIChildProcW
GetWindowTextA
GetWindowContextHelpId

crypt32

CryptUnregisterOIDFunction
CertCreateContext

setupapi

SetupDiOpenDeviceInterfaceW

esent

JetInit

advapi32

CryptGenKey
RegCloseKey
CryptAcquireContextW
CryptContextAddRef
CreateRestrictedToken

msvcrt

memset
wcscoll

gdi32

GetViewportOrgEx
SetWindowOrgEx
Polyline

imm32

ImmGetCandidateListW

pdh

PdhAddCounterW

ntdsapi

DsGetDomainControllerInfoW

shlwapi

AssocGetPerceivedType

rpcrt4

RpcMgmtSetCancelTimeout
NdrGetUserMarshalInfo

iphlpapi

GetIpAddrTable

ole32

CoCreateInstanceEx
StringFromGUID2
CoGetObjectContext

lz32

LZCopy

oleaut32

VarCyFromR4

wintrust

WintrustSetRegPolicyFlags

Exports

Exports

Vmcoqkxldefhrsw

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03540fe05cb0473f2f956a0d0a682262

Headers

DLL Characteristics

File Characteristics

Imports

winmm

ws2_32

opengl32

comctl32

kernel32

wininet

user32

crypt32

setupapi

esent

advapi32

msvcrt

gdi32

imm32

pdh

ntdsapi

shlwapi

rpcrt4

iphlpapi

ole32

lz32

oleaut32

wintrust

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 404KB - Virtual size: 403KB

.data Size: 24KB - Virtual size: 30KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 404KB - Virtual size: 403KB

.data
Size: 24KB - Virtual size: 30KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 8KB - Virtual size: 4KB