hamachi-2-ui[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

hamachi-2-ui.exe
Size

5.6MB
MD5

8e7a3caa9432693ef68a2a7840e0fb0a
SHA1

e4a1fdcc7a97bacb6d7d1c402519e6ac367e7031
SHA256

5233b61006e3cb16935de073b880ae1902c22575b282766af96ffcef944471ca
SHA512

327dd3d09f33b099b1a4314827b678ceed018b3acaf36e88c853e3beeeec27fc8a3a766246c3df1b263d30dc3968870090754f3358803bffd7f0b0125637625f
SSDEEP

98304:tddwGkOds6ofps8nesiK/n8iwLSFCVDrLzzhCI6yIKcgXTeif2XD2QBU9s1:bdwGkOdWF0SFCNEif2XDcs

Score

1^/10

Malware Config

Signatures

Files

hamachi-2-ui.exe
.exe windows x86

99d023bc7029a2a3865afce23aad75ae

Code Sign

07:77:dd:21:cf:5d:c9:dc:78:5a:cb:ae:2a:02:bb:26
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

26/10/2018, 00:00

Not After

03/11/2021, 12:00

Subject

CN=LogMeIn\, Inc.,O=LogMeIn\, Inc.,L=Boston,ST=Massachusetts,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

86:2d:26:40:7a:25:42:55:18:aa:95:1f:21:23:94:b3:0b:2e:2a:62:a2:59:e1:4d:74:ff:26:ae:a6:9f:d1:d5
Signer

Actual PE Digest

86:2d:26:40:7a:25:42:55:18:aa:95:1f:21:23:94:b3:0b:2e:2a:62:a2:59:e1:4d:74:ff:26:ae:a6:9f:d1:d5

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=LogMeIn\, Inc.,O=LogMeIn\, Inc.,L=Boston,ST=Massachusetts,C=US

02/04/2019, 15:04
Valid: true

Chain 1

CN=LogMeIn\, Inc.,O=LogMeIn\, Inc.,L=Boston,ST=Massachusetts,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundW

secur32

GetUserNameExW

ws2_32

WSAGetLastError
connect
recv
send
shutdown
WSACleanup
inet_addr
gethostbyname
htons
getservbyname
htonl
inet_ntoa
ntohs
getservbyport
gethostbyaddr
closesocket
socket
WSAStartup
WSAAddressToStringA
WSASetLastError
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent
WSAResetEvent
ioctlsocket
WSACloseEvent

kernel32

WaitForMultipleObjects
GetCommandLineW
GetModuleHandleExW
AreFileApisANSI
IsDebuggerPresent
IsProcessorFeaturePresent
RtlUnwind
ExitThread
HeapQueryInformation
GetSystemInfo
VirtualAlloc
GetSystemDirectoryA
SetStdHandle
GetFileType
SetConsoleCtrlHandler
GetFileInformationByHandle
PeekNamedPipe
GetStdHandle
GetStartupInfoW
SetEnvironmentVariableW
SetCurrentDirectoryW
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetDateFormatW
GetTimeFormatW
LCMapStringW
GetConsoleCP
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
OutputDebugStringW
WriteConsoleW
SetEnvironmentVariableA
QueryPerformanceCounter
GetTimeZoneInformation
GetSystemTimeAsFileTime
ExitProcess
GetVersion
ExpandEnvironmentStringsW
CreateDirectoryW
InterlockedDecrement
TerminateProcess
OpenProcess
GetExitCodeProcess
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
CreateFileMappingW
Thread32Next
Thread32First
CreateToolhelp32Snapshot
SetUnhandledExceptionFilter
GetSystemTime
FindResourceExW
VirtualProtect
SearchPathW
GetProfileIntW
VerifyVersionInfoW
VerSetConditionMask
lstrcpyW
GetWindowsDirectoryW
GetCurrentDirectoryW
SetErrorMode
SetFileAttributesW
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
WritePrivateProfileStringW
GetPrivateProfileIntW
GlobalGetAtomNameW
GetCurrentThread
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
SetThreadPriority
lstrcmpA
lstrcmpiW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
GetVersionExW
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
FormatMessageW
LocalFree
GlobalFree
GlobalSize
GetCurrentProcessId
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleA
FreeResource
GetSystemDirectoryW
SetLastError
EncodePointer
OutputDebugStringA
WideCharToMultiByte
TryEnterCriticalSection
CompareStringW
GetTickCount
GetFileAttributesW
GetComputerNameExW
GetOverlappedResult
ReadFile
WriteFile
GetModuleHandleW
GetCurrentThreadId
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryW
MulDiv
GlobalAlloc
GlobalUnlock
GlobalLock
CopyFileW
DeleteFileW
GetTempFileNameW
GetTempPathW
ResetEvent
CreateMutexW
CreateEventW
WaitForSingleObject
SetEvent
OpenEventW
MoveFileExW
GetModuleFileNameW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateThread
CreateProcessW
CloseHandle
GetFileTime
CreateFileW
GetLocalTime
Sleep
DeleteCriticalSection
DecodePointer
LockResource
HeapSize
GetLastError
RaiseException
SizeofResource
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
LoadResource
FindResourceW
HeapReAlloc
InterlockedIncrement
GetPrivateProfileStringW
lstrlenA
GlobalMemoryStatus
FlushConsoleInputBuffer
ReadConsoleInputA
SetConsoleMode
VirtualQuery

user32

EnableScrollBar
GetAsyncKeyState
GetIconInfo
DrawIconEx
GetMenuDefaultItem
PostThreadMessageW
SetParent
GetSystemMenu
UnionRect
WaitMessage
RealChildWindowFromPoint
CopyImage
RegisterClipboardFormatW
ShowOwnedPopups
MessageBeep
GetNextDlgGroupItem
ReuseDDElParam
UnpackDDElParam
DestroyIcon
InsertMenuItemW
DestroyMenu
CreatePopupMenu
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
TranslateMessage
GetMessageW
WindowFromPoint
CharUpperW
SendDlgItemMessageA
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
CharNextW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
IsDialogMessageW
SetWindowTextW
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
MapVirtualKeyW
GetKeyNameTextW
GetMenuState
GetMenuStringW
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetLastActivePopup
GetTopWindow
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
DefWindowProcW
GetMessageTime
GetMessagePos
DispatchMessageW
SetRect
InvalidateRgn
InvertRect
IsWindowEnabled
SetFocus
DrawFocusRect
EndMenu
SetMenuDefaultItem
GetLastInputInfo
CheckMenuRadioItem
AppendMenuW
DeleteMenu
RemoveMenu
InsertMenuW
IsIconic
RegisterWindowMessageW
GetFocus
NotifyWinEvent
FlashWindowEx
EnableMenuItem
LoadMenuW
LoadImageW
LockWindowUpdate
SetMenuItemInfoW
CallWindowProcW
SetWindowLongW
GetMenuItemID
GetSysColorBrush
FillRect
DrawIcon
DrawEdge
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetSubMenu
GetMenuItemCount
GetMenuItemInfoW
ReleaseCapture
SetCapture
ClientToScreen
GetCapture
SetCursor
SetWindowRgn
LoadCursorW
ScreenToClient
IsRectEmpty
MapWindowPoints
IsWindow
SetWindowPos
GetClassNameW
GetDlgItem
GetDesktopWindow
GetParent
GetWindowLongW
GetWindow
IntersectRect
EndDeferWindowPos
DeferWindowPos
EqualRect
BeginDeferWindowPos
SetLayeredWindowAttributes
EnumDisplayMonitors
DrawStateW
DrawFrameControl
IsMenu
MonitorFromPoint
TrackMouseEvent
GetComboBoxInfo
IsZoomed
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
SetCursorPos
GetDlgCtrlID
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetClipboardData
EmptyClipboard
CloseClipboard
SetClassLongW
GetDoubleClickTime
CopyIcon
ModifyMenuW
CharUpperBuffW
FrameRect
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
IsWindowVisible
GetMonitorInfoW
MonitorFromRect
MsgWaitForMultipleObjects
GetKeyState
SetForegroundWindow
GetCursorPos
UpdateWindow
SetRectEmpty
UpdateLayeredWindow
CharNextExA
GetWindowRgn
DestroyCursor
CreateMenu
SubtractRect
GetActiveWindow
KillTimer
HideCaret
SetTimer
OffsetRect
SystemParametersInfoW
GetSysColor
wsprintfW
GetWindowRect
CopyRect
InvalidateRect
PeekMessageW
LoadIconW
PostMessageW
GetSystemMetrics
GetClientRect
UnregisterClassW
RedrawWindow
PtInRect
InflateRect
ReleaseDC
SendMessageW
GetDC
EnableWindow
GetUpdateRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA
CopyAcceleratorTableW
GetClassLongW
ToUnicodeEx

gdi32

ScaleViewportExtEx
ScaleWindowExtEx
CopyMetaFileW
CreateDCW
PatBlt
GetBkColor
GetTextColor
GetMapMode
SetRectRgn
DPtoLP
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
SetWindowExtEx
OffsetWindowOrgEx
CreateEllipticRgn
Ellipse
CreatePolygonRgn
EnumFontFamiliesExW
OffsetRgn
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
LPtoDP
GetTextFaceW
LineTo
IntersectClipRect
GetWindowExtEx
OffsetViewportOrgEx
SetDIBColorTable
SetWindowOrgEx
SetViewportExtEx
MoveToEx
SetTextAlign
CreateSolidBrush
Escape
ExtTextOutW
TextOutW
RectVisible
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
PtVisible
BitBlt
SetViewportOrgEx
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
GetObjectW
GetStockObject
SelectObject
GetTextCharsetInfo
GetTextExtentPoint32W
GetViewportExtEx
GetObjectType
GetClipBox
ExcludeClipRect
CreateHatchBrush
CreateBitmap
SetTextColor
SetBkColor
GetRgnBox
RoundRect
SetPixel
Polygon
GetTextMetricsW
Polyline
CreatePatternBrush
CreatePen
CreateRoundRectRgn
GetCurrentObject
GetPixel
DeleteObject
GetDeviceCaps
CreateDIBSection
StretchBlt
DeleteDC
CombineRgn
CreateRectRgnIndirect
GetClipRgn
GetWindowOrgEx
GetViewportOrgEx
CreateRectRgn
Rectangle
RestoreDC

msimg32

AlphaBlend
GradientFill
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

OpenServiceW
QueryServiceStatus
CloseServiceHandle
RegCloseKey
RegOpenKeyExW
ReportEventA
RegisterEventSourceA
DeregisterEventSource
SetEntriesInAclW
OpenSCManagerW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
SetNamedSecurityInfoW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW

shell32

ShellExecuteW
Shell_NotifyIconW
SHGetFileInfoW
DragQueryFileW
DragFinish
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderW
SHAppBarMessage
SHGetSpecialFolderPathW

comctl32

InitCommonControlsEx
ImageList_Add
_TrackMouseEvent
ImageList_Draw
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetImageInfo

shlwapi

PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
StrFormatKBSizeW
PathIsUNCW

uxtheme

DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemePartSize
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
IsAppThemed

ole32

CoUninitialize
CLSIDFromString
CoInitializeEx
CoCreateGuid
CLSIDFromProgID
CoInitialize
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
DoDragDrop
OleLockRunning
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoDisconnectObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoInitializeSecurity

oleaut32

SafeArrayDestroy
SysAllocStringLen
VariantInit
VariantChangeType
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
VarBstrFromDate
VariantCopy
SysAllocString
SysFreeString
VariantClear

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDrawImageI
GdiplusShutdown

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

dnsapi

DnsQuery_W
DnsRecordListFree

setupapi

SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status

iphlpapi

GetAdaptersInfo
GetIfTable

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 657KB - Virtual size: 657KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99d023bc7029a2a3865afce23aad75ae

Code Sign

07:77:dd:21:cf:5d:c9:dc:78:5a:cb:ae:2a:02:bb:26Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

86:2d:26:40:7a:25:42:55:18:aa:95:1f:21:23:94:b3:0b:2e:2a:62:a2:59:e1:4d:74:ff:26:ae:a6:9f:d1:d5Signer

Signature Validations

Verification

02/04/2019, 15:04 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

winmm

secur32

ws2_32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

oleacc

gdiplus

imm32

version

dnsapi

setupapi

iphlpapi

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.rdata Size: 657KB - Virtual size: 657KB

.data Size: 55KB - Virtual size: 109KB

.rsrc Size: 2.0MB - Virtual size: 2.0MB

.reloc Size: 206KB - Virtual size: 206KB

07:77:dd:21:cf:5d:c9:dc:78:5a:cb:ae:2a:02:bb:26
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

86:2d:26:40:7a:25:42:55:18:aa:95:1f:21:23:94:b3:0b:2e:2a:62:a2:59:e1:4d:74:ff:26:ae:a6:9f:d1:d5
Signer

02/04/2019, 15:04
Valid: true

.text
Size: 2.7MB - Virtual size: 2.7MB

.rdata
Size: 657KB - Virtual size: 657KB

.data
Size: 55KB - Virtual size: 109KB

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

.reloc
Size: 206KB - Virtual size: 206KB