h3uhpnbhxa0ogckh[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

h3uhpnbhxa0ogckh.exe
Size

14.3MB
MD5

2569ff780875a72ccac8a1636f4b0077
SHA1

7893a01e9ba36c13e20ae3b3c7a158539dc87d04
SHA256

621857d321017a91540aeacbbaa92fc75319eaf30e37dd0ce7ba5e9d8db4e871
SHA512

8ebce9b26752dede4f1f59e4d8b0bd425b44f2b397a60cc677edc441319cb1683df8d216c8cbe7bf495bf4da79be1f5237daceb6076c79cad6b50ab4dd1053cf
SSDEEP

393216:zUKZw1CqEDs+PkE156WQWLSB+gRcsLPEivQmM:vj4+cEtQWOpTvQm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
h3uhpnbhxa0ogckh.exe

Files

h3uhpnbhxa0ogckh.exe
.exe windows:6 windows x64

444c974be180e5a014ac40402b6bd9fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

closesocket

opengl32

glBindTexture

kernel32

FreeLibrary
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

SetWindowLongPtrA

gdi32

DeleteObject

advapi32

CryptGenRandom

shell32

DragQueryPoint

imm32

ImmSetCompositionWindow

Sections

wP<Ng;J1
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

o.sH:?B6
Size: - Virtual size: 658KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BGM0;dUp
Size: - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hDcDO'M_
Size: - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

&OZybgG[
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

I9aDZYAk
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PF>Ynfme
Size: - Virtual size: 9.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

3k/q&>$?
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rtgl3dgD
Size: 14.3MB - Virtual size: 14.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

nk@Jm_vo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

T$KTbRh^
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

444c974be180e5a014ac40402b6bd9fb

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

opengl32

kernel32

user32

gdi32

advapi32

shell32

imm32

Sections

wP<Ng;J1 Size: - Virtual size: 1.3MB

o.sH:?B6 Size: - Virtual size: 658KB

BGM0;dUp Size: - Virtual size: 75KB

hDcDO'M_ Size: - Virtual size: 59KB

&OZybgG[ Size: - Virtual size: 348B

I9aDZYAk Size: 512B - Virtual size: 128B

PF>Ynfme Size: - Virtual size: 9.6MB

3k/q&>$? Size: 4KB - Virtual size: 3KB

rtgl3dgD Size: 14.3MB - Virtual size: 14.3MB

nk@Jm_vo Size: 512B - Virtual size: 56B

T$KTbRh^ Size: 512B - Virtual size: 480B

wP<Ng;J1
Size: - Virtual size: 1.3MB

o.sH:?B6
Size: - Virtual size: 658KB

BGM0;dUp
Size: - Virtual size: 75KB

hDcDO'M_
Size: - Virtual size: 59KB

&OZybgG[
Size: - Virtual size: 348B

I9aDZYAk
Size: 512B - Virtual size: 128B

PF>Ynfme
Size: - Virtual size: 9.6MB

3k/q&>$?
Size: 4KB - Virtual size: 3KB

rtgl3dgD
Size: 14.3MB - Virtual size: 14.3MB

nk@Jm_vo
Size: 512B - Virtual size: 56B

T$KTbRh^
Size: 512B - Virtual size: 480B