Hibernian[.]Spermidin

Resubmissions

19/04/2023, 10:42

230419-mrrxwabg9y 10

19/04/2023, 10:37

230419-mn9zaaaa29 1

Sharing

Copy URL Twitter E-mail

General

Target

Hibernian.Spermidin
Size

989KB
MD5

b3ca35047dd878683292348f3bb0999a
SHA1

cfccc700b71e009c124cdac4a2b969efed596aff
SHA256

993360f695736634fb46c8667eda27f119778b35ccd783d646e7e6ba4784fc19
SHA512

aac174c090e9c75f7b0aaab85887cc3396b25e496307a0c4419de21b8947452c57520463af116b4752b077b0a3345537c25c4f108a7024e8a28da52078680c17
SSDEEP

12288:dIAETyZizswDZr2rnVed8b2NFCKh6RaG7EeDATbURJTdL7K2qzla:dI3AwDj02Nlh6IG7EeYU7TVW2qzla

Score

1^/10

Malware Config

Signatures

Files

Hibernian.Spermidin
.dll windows x86

Password: infected

eb842ac86186f73eea06f1e518a1bd36

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
SetFilePointer
ReadFile
GetSystemTimeAsFileTime
GetFileSize
CreateMutexW
GetCurrentProcess
GetProcAddress
GetModuleHandleA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SystemTimeToFileTime
GetSystemTime
SetEvent
GetEnvironmentVariableA
OpenEventA
LoadLibraryA
GetLocalTime
GetVersionExA
GetComputerNameW
FindFirstVolumeA
FindClose
FindFirstFileA
CreateEventA
CreateMutexA
GlobalFree
GlobalAlloc
ResetEvent
GetModuleFileNameW
GetPrivateProfileStringW
lstrlenA
DisableThreadLibraryCalls
QueryDosDeviceA
CreateThread
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
CompareStringW
GetDriveTypeA
GetVolumeInformationA
FindFirstVolumeMountPointA
FindNextVolumeMountPointA
FindVolumeMountPointClose
FindNextVolumeA
FindVolumeClose
GetVolumePathNamesForVolumeNameA
CreateFileW
CreateFileA
FlushFileBuffers
Sleep
DeviceIoControl
CloseHandle
SetLastError
GetLastError
GetCurrentThreadId
ReleaseMutex
WaitForSingleObject
LocalAlloc
LocalFree
GetTimeZoneInformation
CompareStringA
SetStdHandle
GetConsoleMode
GetConsoleCP
RtlUnwind
MultiByteToWideChar
RaiseException
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FileTimeToSystemTime
FileTimeToLocalFileTime
WideCharToMultiByte
ExitThread
ResumeThread
GetCommandLineA
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
GetStdHandle
GetModuleFileNameA
GetFullPathNameA
GetCurrentDirectoryA
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetFileAttributesA

user32

FindWindowA
SendMessageA
BroadcastSystemMessageA
wsprintfW

advapi32

RegCreateKeyExA
RegEnumValueA
RegSetValueExA
RegFlushKey
GetUserNameW
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
FreeSid
LookupAccountSidA
EqualSid
RegOpenKeyExW
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiRemoveDevice
SetupDiGetDeviceRegistryPropertyA

Exports

Exports

ISASetWearOutParams
IsaAlarm
IsaApiInternalGetRaid6Options
IsaBattery
IsaClearAdapterSasPhyInfo
IsaClearControllerNvsRam
IsaClearDeadDriveLog
IsaClearDriveErrorTable
IsaClearMaxCachePool
IsaClearPreservedLogicalDriveCache
IsaCloseAdapter
IsaCommitDriveConfiguration
IsaContainer
IsaContainerForceOnline
IsaContainerGetCacheMode
IsaContainerGetCacheParams
IsaContainerSetCacheParams
IsaContainerSetITPCacheSettings
IsaContainerSetMaxCacheWriteCacheSettings
IsaContainerSetPowerManagement
IsaContainerSwapDrives
IsaCreateJBOD
IsaCreateLogicalDrive
IsaCreateMirrorFromVolume
IsaCreatePrimaryContainer
IsaCreateRAID50
IsaCreateRAID60
IsaCreateSecondaryContainer
IsaCreateUFIfromFile
IsaCtrChangeComplete
IsaCtrRemovalComplete
IsaDeleteJBOD
IsaDeleteMultipleContainer
IsaDiagnostic
IsaDiagnosticEx
IsaDisableDebugLogs
IsaEnclosureMgt
IsaEnumAdaptersA
IsaEnumAdaptersW
IsaEnumChannels
IsaEnumScsiChannels
IsaExposeCtrToOs
IsaExposeNewPhysicalSpace
IsaFailPartition
IsaFailoverSpace
IsaFailoverSpaceByUniqueCtrID
IsaForcePartitionCacheUpdate
IsaGetAdapterOemId
IsaGetAdapterSasPhyInfo
IsaGetAutomaticFailover
IsaGetBusTargetLunFromDevHandle
IsaGetConnectorMap
IsaGetConnectorMapSize
IsaGetContainerInfo
IsaGetContainerInfo2
IsaGetContainerOptions
IsaGetContainerUsage
IsaGetControllerInternalLogData
IsaGetControllerInternalLogInfo
IsaGetControllerStats
IsaGetCopyback
IsaGetDeadDriveLog
IsaGetDeadDriveLog2
IsaGetDiskSasPhyInfo
IsaGetDriveErrorTable
IsaGetDriveErrorTable2
IsaGetDriveErrorTableSize
IsaGetDriveLetterUsage
IsaGetDriveLetterUsageEx
IsaGetErrorTextA
IsaGetErrorTextW
IsaGetErrorTunableParamList
IsaGetErrorTunableProfileID
IsaGetExpanderCount
IsaGetFsaPartitionInfo
IsaGetGeneralInformation
IsaGetGeneralInformation2
IsaGetGeneralInformation2Ex
IsaGetHandleFromIndex
IsaGetHandleFromSerial
IsaGetIndexFromSerial
IsaGetMaxCacheFeatures
IsaGetMaxCacheIndexList
IsaGetNvramEventLog
IsaGetOSType
IsaGetOwnerId
IsaGetPCIIds
IsaGetPCISerdesInfo
IsaGetPbsiConfiguration
IsaGetPhyPCIDfeInfo
IsaGetPhySASDfeInfo
IsaGetPhysicalDeviceInfo
IsaGetPreservedLogicalDriveInfo
IsaGetRaid6Options
IsaGetSASAddress
IsaGetSPMParameters
IsaGetSPMParametersDefault
IsaGetScsiStorageDeviceInfo
IsaGetSmartDeviceInfo
IsaGetSmartHistoryBufferData
IsaGetSmartHistoryBufferStatus
IsaGetSmartHistoryDescriptor
IsaGetSmartHistoryDictionary
IsaGetSmartHistoryModuleCount
IsaGetStorageDeviceInfo
IsaGetTaskDetails
IsaGetTaskList
IsaGetTaskProgress
IsaGetVersionStatus
IsaGrowPrimaryVolumeSet
IsaHasDirtyData
IsaHasDirtyDataContainer
IsaInitCreateThread
IsaInitStorageDeviceForFsa
IsaInitStorageDeviceSetForFsa
IsaInstallFeatureKey
IsaInvokeCpldCommand
IsaInvokeSetBiosParamsCommand
IsaInvokeSetBootDevice
IsaIsAdapterPausedEx
IsaIsNTOS
IsaIsUnixOS
IsaLinkForContainerExInternal
IsaMaxCacheWriteCacheDisableAll
IsaMirror
IsaMorphContainer
IsaNTCheckDynamicDiskOnContainer
IsaNTCheckFTDiskOnContainer
IsaNTGetByContainer
IsaNTLinkForContainer
IsaNewFailoverSpace
IsaNewFailoverSpaceByUniqueCtrID
IsaNewGetDiskSasPhyInfo
IsaNvram
IsaOnlineControllerDiagnostic
IsaOnlineDiskDiagnostic
IsaOpenAdapter2A
IsaOpenAdapter2W
IsaOpenAdapterA
IsaOpenAdapterW
IsaParseAdapterName
IsaPauseResumeIo
IsaPauseResumeIoStatus
IsaPauseResumeIoStatusEx
IsaPollForEvent
IsaPrepareCtrForChange
IsaPrepareCtrForRemoval
IsaProtectStorageDeviceSet
IsaRefreshSupportedRAIDFeatures
IsaRegisterGeneralCallback
IsaReleaseContainerCache
IsaResetController
IsaResetControllerStatsCounters
IsaResetNvramEventLog
IsaResetScsiBus
IsaResetScsiBusEx
IsaRunHardwareDiagnosticTest
IsaSendATACommand
IsaSendReceiveFib
IsaSendSMPCommand
IsaSendScsiCommand
IsaSetAutomaticFailover
IsaSetConnectorFunctionalMode
IsaSetControllerDeviceCachePolicy
IsaSetControllerStats
IsaSetCopyback
IsaSetDDRCachePreservation
IsaSetDefaultLDTaskPriority
IsaSetDirtyPageThresholdValue
IsaSetErrorTunableParams
IsaSetErrorTunableProfile
IsaSetFairnessMode
IsaSetFairnessParameters
IsaSetFunctionalMode
IsaSetGlobalMaxSASPhyLinkRate
IsaSetGlobalPhysicalDevicesWriteCachePolicy
IsaSetMaxCacheBgCheck
IsaSetMaxCacheFlushAndFetchRate
IsaSetMaxCacheRWFactor
IsaSetMaxCacheWrite
IsaSetMonitorLogSeverityLevel
IsaSetPCISerdesInfo
IsaSetPMSpinupLimits
IsaSetPMStayAwakePeriod
IsaSetPMUTCToLocalTimeDiff
IsaSetPbsiConfiguration
IsaSetPerformanceMode
IsaSetSPMParameters
IsaSetSataNCQ
IsaSetUiThreadCallBack
IsaSnapshot
IsaStartGetConfig
IsaStartMaxCacheBgCheck
IsaStorageDevice
IsaStorageDevice2
IsaStorageDeviceSetCachePool
IsaTask
IsaUnloadAPI
IsaUpdateFlashImages
IsaValidHostOs
IsaVerifyContainer
IsaVerifyContainer2
IsaVerifyContainerGetInfo
IsaVerifyContainerGetInfo2
IsaWaitForTaskComplete
ItaFinishJob
ItaNotifyAppFilesysChanged
ItaNotifyFormatComplete
ItaUpdateJob
IetFibDebug
Iaos_RemoveDiskDriverLinks
Motd

Sections

.text
Size: 604KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: infected

eb842ac86186f73eea06f1e518a1bd36

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

setupapi

Exports

Exports

Sections

.text Size: 604KB - Virtual size: 601KB

.rdata Size: 196KB - Virtual size: 194KB

.data Size: 8KB - Virtual size: 24KB

.rsrc Size: 108KB - Virtual size: 106KB

.reloc Size: 36KB - Virtual size: 35KB

.text
Size: 604KB - Virtual size: 601KB

.rdata
Size: 196KB - Virtual size: 194KB

.data
Size: 8KB - Virtual size: 24KB

.rsrc
Size: 108KB - Virtual size: 106KB

.reloc
Size: 36KB - Virtual size: 35KB