Static task
static1
Behavioral task
behavioral1
Sample
hardgate_d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
hardgate_d.exe
Resource
win10v2004-20230915-en
General
-
Target
hardgate_d.exe
-
Size
7.3MB
-
MD5
3c02e83fbc0690e9ec7cf75dc96b87f5
-
SHA1
2e9eaac3c653659e923cad3a35dc571a0f0f052f
-
SHA256
ba80f7aae5f61bdba9fdb8d297d94fdc6df6461460cf5af095b24c7fc043865e
-
SHA512
93ef817c9b2ed52502b534504c4e8ab25e2332df12c204a5fee96a36a9c23cf7f07670b7e9a4c87d7fbf503ee76eed49543e2bf6ec7deb7c4fe726fd1891fe53
-
SSDEEP
49152:Scysm0JUTqhogwWu3gtOwC1NPzCNiiW7SVg1OtJpPjW7P5iU/RMhtqUnrZi1DCOJ:a9+OwiZcpLQG7JtcWez9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hardgate_d.exe
Files
-
hardgate_d.exe.exe windows:6 windows x86
c4bf24879f45a0a283eb8c8dd4ab0a7d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
GetModuleFileNameA
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
ReadFile
CloseHandle
CreateEventA
Sleep
CreateFileA
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
WriteProcessMemory
WriteFile
WaitForSingleObject
SetThreadPriority
ClearCommError
GetCommState
PurgeComm
SetCommState
SetCommTimeouts
BuildCommDCBA
GetCurrentDirectoryW
FindClose
FindFirstFileW
FindNextFileW
SetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetFullPathNameW
SetEndOfFile
FormatMessageW
QueryPerformanceCounter
QueryPerformanceFrequency
EncodePointer
DecodePointer
RaiseException
TryEnterCriticalSection
GetStringTypeW
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
DuplicateHandle
WaitForSingleObjectEx
GetCurrentThread
GetExitCodeThread
GetNativeSystemInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
SetEvent
ResetEvent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
CreateTimerQueue
SignalObjectAndWait
CreateThread
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
OutputDebugStringW
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
SetProcessAffinityMask
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
WaitForMultipleObjectsEx
LoadLibraryW
RtlUnwind
HeapValidate
GetSystemInfo
GetModuleHandleExW
GetStdHandle
GetFileType
WriteConsoleW
ExitThread
ResumeThread
SetEnvironmentVariableW
SetCurrentDirectoryW
CreateDirectoryW
GetFileAttributesExW
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetConsoleMode
ReadConsoleW
GetConsoleCP
ExitProcess
GetCommandLineA
GetCommandLineW
HeapReAlloc
HeapSize
HeapQueryInformation
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
SetFilePointerEx
GetTimeZoneInformation
FlushFileBuffers
SetStdHandle
RtlCaptureStackBackTrace
user32
wsprintfA
ws2_32
inet_ntoa
gethostbyname
dbghelp
MiniDumpWriteDump
Sections
.text Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 336KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 914B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ