hui[.]scr[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
hui.scr.exe
Size 1.3MB
Sample230124-s5cm1aea3x
SHA256 ad7f60b401fff080de66189bb4b4ecb1a99643deb577884566818757a6eb4018
MD5 9ac3387e9d8450a61e2b6e4c1d86537a
SHA1 f3a387ef36386726c4d4876ffdab14acca951785
SHA512 0e5193916849f6a489127874f43bfb4100919421c90e7f337b1cb3d67843d85fb42b2c9081b95d5bffc574941418e392415e6cdbe17429befd610118ed4c7c39
SSDEEP 24576:8rbA4ECQP2Qh7CLzobAtxzoT+QD5Ff4ldE/fLKi+3JG7DrDMTCcb1lX1:MWP2Qh7CHobEz4NQ83MCDrDMeILX1
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

hui.scr.exe

.exe 1.3MB

hui.scr.exe

IMPHASH 28b10c057e28f940e4becc8b85714d60
SHA256 ad7f60b401fff080de66189bb4b4ecb1a99643deb577884566818757a6eb4018
MD5 9ac3387e9d8450a61e2b6e4c1d86537a
SHA1 f3a387ef36386726c4d4876ffdab14acca951785
SHA512 0e5193916849f6a489127874f43bfb4100919421c90e7f337b1cb3d67843d85fb42b2c9081b95d5bffc574941418e392415e6cdbe17429befd610118ed4c7c39
SSDEEP 24576:8rbA4ECQP2Qh7CLzobAtxzoT+QD5Ff4ldE/fLKi+3JG7DrDMTCcb1lX1:MWP2Qh7CHobEz4NQ83MCDrDMeILX1
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

342225

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winhttp

WinHttpSetStatusCallback WinHttpConnect WinHttpCrackUrl WinHttpQueryDataAvailable WinHttpCloseHandle WinHttpSendRequest WinHttpSetOption WinHttpOpenRequest WinHttpReceiveResponse WinHttpOpen WinHttpQueryHeaders WinHttpReadData

ws2_32

WSAStartup inet_ntoa

kernel32

ReleaseMutex DuplicateHandle Sleep OpenMutexA CloseHandle LocalFree FormatMessageA HeapFree ReleaseSemaphore WaitForMultipleObjectsEx FormatMessageW SetEvent GetProcAddress HeapAlloc GetProcessHeap WideCharToMultiByte CreateSemaphoreA CreateEventA WriteFile CreateFileA WaitForSingleObject CopyFileW MultiByteToWideChar GetCurrentThreadId GetSystemTimeAsFileTime GetVersionExA lstrcmpiA CreateThread TerminateThread GetModuleFileNameA lstrlenA LoadLibraryA GetTickCount WriteConsoleW HeapSize SwitchToThread GetLastError GetModuleHandleA UnmapViewOfFile GetSystemInfo GlobalMemoryStatus FlushConsoleInputBuffer CreateMutexA GetCurrentProcess MapViewOfFileEx OpenFileMappingA DeleteFileW CreateFileMappingA GetConsoleCP SetConsoleMode ReadConsoleInputW WaitForSingleObjectEx TlsAlloc SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetLocaleInfoEx GetStringTypeW CompareStringEx GetCPInfo QueryPerformanceCounter QueryPerformanceFrequency ResetEvent OpenEventA SetWaitableTimer GetCurrentProcessId ResumeThread TlsGetValue TlsSetValue TlsFree CreateWaitableTimerA GetModuleHandleW CreateDirectoryW CreateFileW FindClose FindNextFileW GetFileAttributesW GetFullPathNameW SetEndOfFile SetFilePointerEx DeviceIoControl AreFileApisANSI UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount CreateEventW IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlUnwind RaiseException SetLastError FreeLibrary LoadLibraryExW ReadFile ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameW GetStdHandle GetCommandLineA GetCommandLineW GetFileType GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileSizeEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadConsoleW GetTimeZoneInformation HeapReAlloc SetConsoleCtrlHandler FindFirstFileExW IsValidCodePage

user32

GetProcessWindowStation GetUserObjectInformationW MessageBoxA wsprintfA GetSystemMetrics

advapi32

StartServiceA StartServiceCtrlDispatcherA SetServiceStatus RegisterServiceCtrlHandlerA OpenServiceA ReportEventA RegisterEventSourceA DeregisterEventSource OpenSCManagerA DeleteService CreateServiceA ControlService CloseServiceHandle ChangeServiceConfigA RegCloseKey RegQueryValueExA RegSetValueExA RegOpenKeyExA RegDeleteValueA SetSecurityDescriptorDacl InitializeSecurityDescriptor

shell32

SHGetFolderPathW ShellExecuteW

ole32

CoUninitialize CoInitialize