CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
fhxy hook V0.3__/fhxy hook V0.3公开/fhxy.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fhxy hook V0.3__/fhxy hook V0.3公开/fhxy.dll
Resource
win10v2004-20231215-en
General
-
Target
53cb9c5271cfd1b655053778c1157b5a
-
Size
659KB
-
MD5
53cb9c5271cfd1b655053778c1157b5a
-
SHA1
38adb41e12636edd7ebae13adbaa7065c83e3561
-
SHA256
6d32c71e93ff0ecd5b27019a75c6c1af2af4183fa1d923bed5df6f61c2934018
-
SHA512
c39c376f49d7db0602b7609e2bd3a6e62871d9188c7c8ccce782342bd9ff8e936cd672229f4becb7f01dc2e5ae7f160e1aa802758d458f3c8638ea2c74514afb
-
SSDEEP
12288:aFB0+nnrYMOTEF7Lbcg/qMgwY6KrpwMsw5PO7nWQvKR1ak8:aORli7Phbghd2Md4npvKRMk8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fhxy hook V0.3__/fhxy hook V0.3公开/fhxy.dll
Files
-
53cb9c5271cfd1b655053778c1157b5a.zip
-
fhxy hook V0.3__/-=XITER-BR=-.htm.html .js polyglot
-
fhxy hook V0.3__/Leia-Me.txt
-
fhxy hook V0.3__/fhxy hook V0.3公开/[F]hxy [H]oo[K].XK
-
fhxy hook V0.3__/fhxy hook V0.3公开/[F]hxy [H]oo[K].cfg
-
fhxy hook V0.3__/fhxy hook V0.3公开/de_dust20425.JPG.jpg
-
fhxy hook V0.3__/fhxy hook V0.3公开/de_dust20799.JPG.jpg
-
fhxy hook V0.3__/fhxy hook V0.3公开/de_dust20801.JPG.jpg
-
fhxy hook V0.3__/fhxy hook V0.3公开/de_dust20802.JPG.jpg
-
fhxy hook V0.3__/fhxy hook V0.3公开/fhxy.dll.dll windows:4 windows x86 arch:x86
aa1ca832e28e2c6a63685365c58b52b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadModule
user32
MessageBoxA
Exports
Exports
Sections
.text Size: - Virtual size: 880KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 142B - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
fhxy hook V0.3__/fhxy hook V0.3公开/fhxy.ini
-
fhxy hook V0.3__/fhxy hook V0.3公开/version.ini
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/!!!!!!!!!!!!!!!!!!!!17-iceworl.ct
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/!!!!!!!!!!!!!!!!!!!!17-iceworl.t
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/!!!!!!!!!!!!!!!!17-iceworld.ct
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/!!!!!!!!!!!!!!!!17-iceworld.t
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/!!!17-iceworld.ct
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/!!!17-iceworld.t
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/de_aztec.ct
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/de_aztec.t
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/de_cbble.ct
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/de_cbble.t
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/de_dust.ct
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/de_dust.t
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/de_dust2.ct
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/de_dust2.t
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/de_inferno.ct
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/de_inferno.t
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/de_nuke.ct
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/de_nuke.t
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/de_train.ct
-
fhxy hook V0.3__/fhxy hook V0.3公开/ways/de_train.t
-
fhxy hook V0.3__/fhxy hook V0.3公开/版本/2834.ini
-
fhxy hook V0.3__/fhxy hook V0.3公开/版本/3147.ini
-
fhxy hook V0.3__/fhxy hook V0.3公开/版本/3213.ini
-
fhxy hook V0.3__/fhxy hook V0.3公开/版本/3248.ini
-
fhxy hook V0.3__/fhxy hook V0.3公开/版本/3266.ini
-
fhxy hook V0.3__/fhxy hook V0.3公开/说明.txt