Ware-Hub-Free-External[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Ware-Hub-Free-External.exe
Size

2.5MB
MD5

bc7be9b29a3b92fc9d497f9cba8c9117
SHA1

44fecb20c4c8a183589e75a7d00ba635f09c2df1
SHA256

a960cc94c1d5e4ac37c2cba14954a91c849f553f6b2af550b81f7d13a9cbf075
SHA512

6f3eee6142f1c8fa93e206130177e0cc547156f3fbda6027de9a8bbd332a94b936048268e42f4f499c9ce8e85907c0aceb4b01312f537c8bfe0fc621b1dbfab5
SSDEEP

49152:Jro9/KvEb41cuOyyZHkNHA1Lnjg4kyUd/Ib31imo3KdT1LW8MMrvoo8lwP:Jro9/KvM41lV+AgZc7yE/ILQrory

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ware-Hub-Free-External.exe

Files

Ware-Hub-Free-External.exe
.exe windows:6 windows x64 arch:x64

f6598a2ad813ae0e2819e5d48e00ce0f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

d3d11

D3D11CreateDeviceAndSwapChain

ntdll

RtlLookupFunctionEntry

kernel32

MoveFileExA
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

LoadCursorW

advapi32

CryptReleaseContext

msvcp140

?always_noconv@codecvt_base@std@@QEBA_NXZ

imm32

ImmReleaseContext

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

wininet

InternetCloseHandle

ws2_32

WSAStartup

psapi

GetModuleInformation

normaliz

IdnToAscii

wldap32

ord50

crypt32

CertEnumCertificatesInStore

rpcrt4

UuidCreate

vcruntime140_1

__CxxFrameHandler4

vcruntime140

strchr

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf

api-ms-win-crt-string-l1-1-0

strpbrk

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-runtime-l1-1-0

strerror

api-ms-win-crt-filesystem-l1-1-0

_unlock_file

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

ceilf

api-ms-win-crt-time-l1-1-0

_time64

Sections

.text
Size: - Virtual size: 936KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Ware-Hu
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Ware-Hu
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Ware-Hu
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6598a2ad813ae0e2819e5d48e00ce0f

Headers

DLL Characteristics

File Characteristics

Imports

d3d11

ntdll

kernel32

user32

advapi32

msvcp140

imm32

d3dcompiler_47

dwmapi

wininet

ws2_32

psapi

normaliz

wldap32

crypt32

rpcrt4

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

Sections

.text Size: - Virtual size: 936KB

.rdata Size: - Virtual size: 170KB

.data Size: - Virtual size: 34KB

.pdata Size: - Virtual size: 30KB

_RDATA Size: - Virtual size: 31KB

.Ware-Hu Size: - Virtual size: 1.2MB

.Ware-Hu Size: 4KB - Virtual size: 4KB

.Ware-Hu Size: 2.5MB - Virtual size: 2.5MB

.reloc Size: 5KB - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 480B

.text
Size: - Virtual size: 936KB

.rdata
Size: - Virtual size: 170KB

.data
Size: - Virtual size: 34KB

.pdata
Size: - Virtual size: 30KB

_RDATA
Size: - Virtual size: 31KB

.Ware-Hu
Size: - Virtual size: 1.2MB

.Ware-Hu
Size: 4KB - Virtual size: 4KB

.Ware-Hu
Size: 2.5MB - Virtual size: 2.5MB

.reloc
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 480B