Static task
static1
Behavioral task
behavioral1
Sample
Hash_Suite_64.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Hash_Suite_64.exe
Resource
win10v2004-20231130-en
General
-
Target
Hash_Suite_64.exe
-
Size
7.5MB
-
MD5
5c83be4f7e3affde618351a255eb0bed
-
SHA1
ba78e5c1deac22a3ab0c044b39847e3ee5149944
-
SHA256
4bc3abb96d76a4f42dfcafc8e96d39eaab1645c9e6ca65071bed8a532f4bbd77
-
SHA512
9010b6c6fafa7001b2203509e4473bd75d57a856c98e3dc6397ccd505532a8c4a7a31f1764dbbe19e17d7762f4eba79e0a457e882c7d761530265f1f3f116246
-
SSDEEP
98304:wouXn41Lkcya/ef+/6ovlHARwjYeqrghBD30FLOAkGkzdnEVomFHKnP:wXc9fTlAyjyghBD30FLOyomFHKnP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Hash_Suite_64.exe
Files
-
Hash_Suite_64.exe.exe windows:6 windows x64 arch:x64
5c457521f680131aac6c0f92028e3c75
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
esent
JetBeginSessionA
JetRetrieveColumn
JetEndSession
JetMakeKey
JetSetSystemParameterA
JetGetSystemParameterA
JetOpenDatabaseA
JetMove
JetCloseTable
JetGetTableColumnInfoA
JetAttachDatabaseA
JetGetDatabaseFileInfoA
JetInit
JetTerm
JetCreateInstanceA
JetSeek
JetOpenTableA
JetCloseDatabase
JetDetachDatabaseA
rpcrt4
UuidCreateSequential
advapi32
MD5Update
MD5Final
MD5Init
CryptGenRandom
SystemFunction032
SystemFunction025
CryptGetHashParam
CryptSetKeyParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDecrypt
SystemFunction005
CryptAcquireContextA
CryptDestroyKey
CryptImportKey
CryptSetHashParam
CryptDuplicateKey
LsaClose
LsaOpenPolicy
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
CryptReleaseContext
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
LsaQueryInformationPolicy
kernel32
GetStringTypeExA
GetProfileIntA
SearchPathA
FindResourceExW
GetWindowsDirectoryA
GetFileTime
GetTempFileNameA
SetErrorMode
GetFileAttributesExA
GetACP
GetTimeZoneInformation
GetConsoleCP
CompareStringW
GetTimeFormatW
GetDateFormatW
SetStdHandle
HeapQueryInformation
IsValidCodePage
GetCommandLineW
GetCommandLineA
VirtualQuery
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileType
GetStdHandle
GetLocalTime
ExitProcess
TerminateProcess
FreeLibraryAndExitThread
ExitThread
RtlPcToFileHeader
RtlUnwindEx
lstrcmpiA
DuplicateHandle
LCMapStringW
GetCPInfo
GetOEMCP
VirtualProtect
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentDirectoryA
GlobalReAlloc
GetThreadLocale
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
ResumeThread
SuspendThread
CreateEventA
lstrcmpA
CopyFileA
GlobalSize
VerifyVersionInfoA
lstrcpyA
VerSetConditionMask
GlobalFree
MulDiv
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
GetVolumeInformationA
EncodePointer
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
GetModuleFileNameW
FindResourceA
InitializeSListHead
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
GetTickCount
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetCurrentProcessId
LockFileEx
UnlockFile
HeapCompact
LoadLibraryW
DeleteFileW
WaitForSingleObjectEx
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
HeapValidate
GetCurrentThreadId
GetFileAttributesW
CreateMutexW
GetTempPathW
UnlockFileEx
GetFullPathNameA
InitializeCriticalSection
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
TryEnterCriticalSection
AreFileApisANSI
GetProcessTimes
GlobalUnlock
CreateProcessA
GlobalLock
GlobalAlloc
MultiByteToWideChar
GetSystemTimes
SetPriorityClass
GetExitCodeProcess
DeleteFileA
GetFileAttributesA
WaitNamedPipeA
ReleaseMutex
CreateMutexA
GetModuleFileNameA
GetComputerNameA
FreeLibrary
GetProcAddress
GetSystemInfo
GetNativeSystemInfo
GetVersionExA
LoadLibraryA
GetModuleHandleA
GetCurrentProcess
GetCurrentThread
SetThreadPriority
SetLastError
LocalFree
LocalAlloc
WideCharToMultiByte
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
FindResourceW
LoadResource
RaiseException
HeapReAlloc
LockResource
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
SizeofResource
GetLastError
CreateFileW
ReadFile
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalMemoryStatusEx
VirtualAlloc
VirtualFree
CreateThread
TerminateThread
GetExitCodeThread
WaitForSingleObject
MapViewOfFile
GetFileSize
CreateFileMappingA
CloseHandle
AcquireSRWLockExclusive
CreateFileA
ReleaseSRWLockExclusive
Sleep
UnmapViewOfFile
SetEndOfFile
SetFilePointer
WriteFile
InitializeSRWLock
CreateDirectoryW
FindFirstFileExW
FindNextFileW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
GetDriveTypeW
GetCurrentDirectoryW
WriteConsoleW
GetFileSizeEx
RtlUnwind
user32
GetKeyNameTextA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuState
GetMenuStringA
SetRect
EnumDisplayMonitors
LoadCursorW
LoadCursorA
SetLayeredWindowAttributes
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
SendDlgItemMessageA
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
SetDlgItemInt
MoveWindow
ShowWindow
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassLongPtrA
GetClassLongA
SetWindowLongPtrA
GetWindowLongPtrA
SetWindowLongA
GetWindowLongA
EqualRect
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
MapVirtualKeyA
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenuItemBitmaps
GetMenu
GetCapture
GetKeyState
GetMenuCheckMarkDimensions
SetMenuItemInfoA
PostQuitMessage
GetMessageA
TranslateMessage
ShowOwnedPopups
MessageBeep
BringWindowToTop
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
IntersectRect
LoadBitmapW
DrawIconEx
DrawFocusRect
GetSysColorBrush
GetSysColor
MapWindowPoints
SetWindowRgn
DrawEdge
IsRectEmpty
FillRect
DrawStateA
IsZoomed
IsWindowVisible
DrawFrameControl
GetParent
PtInRect
IsIconic
GetFocus
IsWindow
OpenClipboard
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
CreatePopupMenu
DestroyMenu
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatA
LoadImageW
GetDoubleClickTime
GetAsyncKeyState
GetUpdateRect
MapDialogRect
SetTimer
CloseClipboard
GetNextDlgGroupItem
SetCursor
WindowFromPoint
DestroyIcon
LoadImageA
CopyImage
GetIconInfo
GetWindowThreadProcessId
CheckMenuItem
TrackPopupMenu
EnableMenuItem
LockWindowUpdate
EnableWindow
GetCursorPos
ReleaseCapture
UnregisterClassA
GetClientRect
SystemParametersInfoA
SetCapture
SendMessageA
GetMonitorInfoA
ClientToScreen
CopyRect
RedrawWindow
OffsetRect
DrawIcon
GetClassNameA
GetSystemMetrics
InflateRect
GetWindowRect
GetWindow
MonitorFromPoint
UpdateWindow
RegisterWindowMessageA
PostMessageA
MessageBoxA
SetCursorPos
InvalidateRect
KillTimer
FlashWindowEx
SetRectEmpty
SetClipboardData
EmptyClipboard
UnionRect
SetParent
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
TrackMouseEvent
IsClipboardFormatAvailable
GetSystemMenu
DeleteMenu
GetMenuItemInfoA
SetMenuDefaultItem
CharUpperA
DestroyAcceleratorTable
ModifyMenuA
SetClassLongPtrA
LoadMenuW
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
GetMenuDefaultItem
CopyIcon
UpdateLayeredWindow
FrameRect
DestroyCursor
GetWindowRgn
CreateMenu
MapVirtualKeyExA
IsCharLowerA
CharUpperBuffA
GetComboBoxInfo
SubtractRect
RealChildWindowFromPoint
WaitMessage
PostThreadMessageA
CopyAcceleratorTableA
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
GetKeyboardLayout
GetDialogBaseUnits
SetMenu
EnumChildWindows
gdi32
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
LineTo
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
RoundRect
Rectangle
CopyMetaFileA
CreateDCA
GetDIBits
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
SetRectRgn
DPtoLP
GetRgnBox
OffsetRgn
CreatePalette
GetPaletteEntries
EnumFontFamiliesExA
GetNearestPaletteIndex
GetSystemPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceA
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetDeviceCaps
GetClipBox
ExcludeClipRect
Escape
CreatePatternBrush
CreateBitmap
SetTextColor
SetBkColor
GetTextMetricsA
CreateDIBSection
SelectObject
CreateRoundRectRgn
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
Polyline
Polygon
CreatePolygonRgn
ExtTextOutA
PatBlt
GetBkColor
Ellipse
CreateRectRgn
CreateHatchBrush
CreateEllipticRgn
CombineRgn
GetTextExtentPoint32A
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
GetTextColor
DeleteObject
GetStockObject
DeleteDC
CreateFontIndirectA
SetWindowOrgEx
GetObjectA
msimg32
TransparentBlt
AlphaBlend
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
shell32
DragFinish
SHGetFolderPathA
SHGetMalloc
ShellExecuteA
SHAppBarMessage
SHAddToRecentDocs
DragQueryFileA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetDesktopFolder
ShellExecuteExA
SHGetPathFromIDListA
comctl32
InitCommonControlsEx
shlwapi
StrFormatKBSizeA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA
PathFindExtensionA
StrCpyW
ord156
ord432
uxtheme
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeText
GetWindowTheme
GetThemeSysColor
DrawThemeParentBackground
IsAppThemed
GetCurrentThemeName
GetThemeColor
CloseThemeData
OpenThemeData
DrawThemeBackground
ole32
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
OleLockRunning
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoDisconnectObject
CoInitializeEx
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoSetProxyBlanket
CoTaskMemFree
CoTaskMemAlloc
PropVariantClear
CoCreateInstance
CoUninitialize
CoInitialize
CoRevokeClassObject
oleaut32
VariantCopy
VarBstrFromDate
LoadTypeLi
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocStringLen
VariantInit
SysAllocString
VariantClear
oledlg
ord8
gdiplus
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
netapi32
NetApiBufferFree
NetUserEnum
NetServerEnum
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.const Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ