HGM_Kure_Setup_4_2_98[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

HGM_Kure_Setup_4_2_98.exe
Size

60.0MB
MD5

33982415102d964132ac6166783de033
SHA1

56f8d719b5b42254aca3c2a6dba3edd0b8ddf090
SHA256

916e9c16375be1bf0fac1116cedba92693b504e878adc6b3bc72ee5ceba0dbc9
SHA512

1941ac986dfa4cc2721a22902097899a456f7be191df113606aaf3632be5cc84c57d5f5e1b815bf1e040ae2d1963515f9889ef4c8c400506ae68faa9548fdf7a
SSDEEP

1572864:3N+cLcR9ZOliuWsrYFjv9cFvi0AkPu97u:9+EOZOpYFj6aT7u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HGM_Kure_Setup_4_2_98.exe

Files

HGM_Kure_Setup_4_2_98.exe
.exe windows x86

c7ad02eb9e6056c54d42bc0a36f8ba98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
LocalFree
FormatMessageW
FindClose
FindFirstFileW
FindNextFileW
GetLastError
CloseHandle
GetFileSize
SetFilePointer
ReadFile
SetFileTime
WriteFile
SetEndOfFile
GetCurrentDirectoryW
CreateFileW
GetStdHandle
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
VirtualAlloc
VirtualFree
GetVersionExW
WaitForSingleObject
CreateEventW
SetEvent
ResetEvent
InitializeCriticalSection
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetWindowsDirectoryW
SetFileAttributesW
RemoveDirectoryW
DeleteFileW
GetShortPathNameW
GetTempPathW
GetTempFileNameW
lstrlenW
GetFullPathNameW
Sleep
GetVersion
SetCurrentDirectoryW
GetExitCodeProcess
CreateProcessW
GetCommandLineW
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryA
GetSystemTimeAsFileTime
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
CreateDirectoryW
DeleteCriticalSection
HeapCreate
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
RaiseException
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
ExitThread
CreateThread
GetCommandLineA
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc

user32

CharUpperW
DestroyWindow
RegisterWindowMessageW
LoadIconW
KillTimer
SetTimer
PostMessageW
SetDlgItemTextW
EndDialog
IsDlgButtonChecked
SetWindowTextW
PeekMessageW
MessageBoxW
GetDesktopWindow
SetForegroundWindow
DialogBoxParamW
SendMessageW
GetWindowLongW
SetWindowLongW
ShowWindow
GetWindowTextW
GetWindowTextLengthW
LoadStringW
GetDlgItem

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW

shell32

ShellExecuteExW

ole32

CoInitialize
CoCreateInstance

oleaut32

SysAllocStringLen
SysAllocString
VariantClear
SysFreeString

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c7ad02eb9e6056c54d42bc0a36f8ba98

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 123KB - Virtual size: 122KB

.rdata Size: 33KB - Virtual size: 32KB

.data Size: 8KB - Virtual size: 28KB

.rsrc Size: 365KB - Virtual size: 365KB

.text
Size: 123KB - Virtual size: 122KB

.rdata
Size: 33KB - Virtual size: 32KB

.data
Size: 8KB - Virtual size: 28KB

.rsrc
Size: 365KB - Virtual size: 365KB