hyperion[.]exe

Resubmissions

21/11/2023, 19:30

231121-x7wk4sha61 3

21/11/2023, 19:29

231121-x7g3qagc89 3

Sharing

Copy URL Twitter E-mail

General

Target

hyperion.exe
Size

134KB
MD5

aa4f20b5929d1f22a83a9f0118caf5a3
SHA1

b6f98a1648bcefdc9ad716afa71490879a4e97bb
SHA256

9dc8c6c4c206b854bf2350a006936ef90f2ae080d0aa1a9a60f2ff41abdfb0e2
SHA512

9dbd684a80110c8ae6f6cff55c53bdc9cce4434ac77f294ba7897408fca9dc8b34c7f5dfcbd5768698d8633ca5a576cb4cffe190270d8e98028d5e6d99cde0f5
SSDEEP

3072:zJh6GkzZ1KKOwVxnAhFxNtfj1F7PrcWUxIzaVMwrUFjpkgcZBviqheD6Pqo+Rf0L:zJsGkzZ1NOT0WUxIzaVMwrUFjpkgcZBz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hyperion.exe

Files

hyperion.exe
.exe windows:4 windows x86 arch:x86

d6e7e1e934b30472a329debec00a2e90

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

cygwin1

__cxa_atexit
__main
__wrap__ZdaPv
__wrap__ZdlPv
__wrap__Znaj
__wrap__Znwj
_dll_crt0@0
_impure_ptr
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
free
malloc
memcmp
memcpy
memmove
memset
posix_memalign
rand
realloc
srand
strcmp
strcpy
strlen
strtol
time

cyggcc_s-1

_Unwind_Resume

cygstdc++-6

_ZNKSt12__basic_fileIcE7is_openEv
_ZNKSt5ctypeIcE13_M_widen_initEv
_ZNSi4readEPci
_ZNSi5seekgESt4fposI10_mbstate_tE
_ZNSi5tellgEv
_ZNSo3putEc
_ZNSo5flushEv
_ZNSo5seekpExSt12_Ios_Seekdir
_ZNSo5writeEPKci
_ZNSo9_M_insertImEERSoT_
_ZNSs4_Rep10_M_destroyERKSaIcE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep9_S_createEjjRKSaIcE
_ZNSs6appendEPKc
_ZNSs6appendEPKcj
_ZNSs6appendERKSs
_ZNSs6assignERKSs
_ZNSsC1EPKcRKSaIcE
_ZNSt12__basic_fileIcED1Ev
_ZNSt13basic_filebufIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode
_ZNSt13basic_filebufIcSt11char_traitsIcEE5closeEv
_ZNSt13basic_filebufIcSt11char_traitsIcEEC1Ev
_ZNSt13basic_filebufIcSt11char_traitsIcEED1Ev
_ZNSt14basic_ifstreamIcSt11char_traitsIcEED1Ev
_ZNSt14basic_ofstreamIcSt11char_traitsIcEED1Ev
_ZNSt19basic_ostringstreamIcSt11char_traitsIcESaIcEED1Ev
_ZNSt6localeC1Ev
_ZNSt6localeD1Ev
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZNSt8ios_baseC2Ev
_ZNSt8ios_baseD2Ev
_ZNSt9basic_iosIcSt11char_traitsIcEE4initEPSt15basic_streambufIcS1_E
_ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate
_ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_i
_ZSt16__throw_bad_castv
_ZSt19__throw_logic_errorPKc
_ZSt4cerr
_ZSt4cout
_ZSt4endlIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_
_ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc
_ZTTSt14basic_ifstreamIcSt11char_traitsIcEE
_ZTTSt14basic_ofstreamIcSt11char_traitsIcEE
_ZTTSt19basic_ostringstreamIcSt11char_traitsIcESaIcEE
_ZTVSt13basic_filebufIcSt11char_traitsIcEE
_ZTVSt14basic_ifstreamIcSt11char_traitsIcEE
_ZTVSt14basic_ofstreamIcSt11char_traitsIcEE
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTVSt15basic_stringbufIcSt11char_traitsIcESaIcEE
_ZTVSt19basic_ostringstreamIcSt11char_traitsIcESaIcEE
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZdaPv
_ZdlPv
_Znaj
_Znwj
__cxa_guard_acquire
__cxa_guard_release
__gxx_personality_v0

kernel32

CloseHandle
CreatePipe
CreateProcessA
GetCurrentDirectoryA
GetExitCodeProcess
GetLastError
GetModuleHandleA
GetProcAddress
LoadLibraryA
SetHandleInformation
WaitForSingleObject

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 336B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 512B - Virtual size: 49B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/78
Size: 512B - Virtual size: 422B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/89
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

d6e7e1e934b30472a329debec00a2e90

Headers

DLL Characteristics

File Characteristics

Imports

cygwin1

cyggcc_s-1

cygstdc++-6

kernel32

Sections

.text Size: 21KB - Virtual size: 21KB

.data Size: 512B - Virtual size: 68B

.rdata Size: 7KB - Virtual size: 6KB

.buildid Size: 512B - Virtual size: 53B

/4 Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 336B

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

/14 Size: 512B - Virtual size: 376B

/29 Size: 28KB - Virtual size: 28KB

/41 Size: 3KB - Virtual size: 3KB

/55 Size: 4KB - Virtual size: 3KB

/67 Size: 512B - Virtual size: 49B

/78 Size: 512B - Virtual size: 422B

/89 Size: 512B - Virtual size: 48B

.text
Size: 21KB - Virtual size: 21KB

.data
Size: 512B - Virtual size: 68B

.rdata
Size: 7KB - Virtual size: 6KB

.buildid
Size: 512B - Virtual size: 53B

/4
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 336B

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

/14
Size: 512B - Virtual size: 376B

/29
Size: 28KB - Virtual size: 28KB

/41
Size: 3KB - Virtual size: 3KB

/55
Size: 4KB - Virtual size: 3KB

/67
Size: 512B - Virtual size: 49B

/78
Size: 512B - Virtual size: 422B

/89
Size: 512B - Virtual size: 48B