_MainWndProc@16
_StubFileWrite@12
Static task
static1
1 signatures
General
-
Target
hluplink.exe
-
Size
48.5MB
-
MD5
498afa6af130a64ff5966774654b0f18
-
SHA1
605e110670ca3d55b2093b7750d1d0138cbf1f4c
-
SHA256
9f236e9785980c127d46870a828ba4dac756308767ebd498b85bd7edff3305a8
-
SHA512
2629fd06db71f2ea8bd7937ee271c7dd8804c0b570b6ccd0d82a93edd94a11cd0b9736719a9a9e4c1545bc11abaef52c05155188970b762d0afbe4ff0a8aa753
-
SSDEEP
1572864:h0ghSgLmKON5CaVoLvJ8YF3mW0JsFLAc0:h3HLmr6bJNF3mNEw
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hluplink.exe
Files
-
hluplink.exe.exe windows:4 windows x86 arch:x86
Password: infected
3dbb35930afd16d5a0423571da5ea031
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
lstrlenA
_lopen
GetCommandLineA
GetModuleHandleA
GetModuleFileNameA
_lwrite
_llseek
GlobalUnlock
lstrcpyA
MulDiv
_lclose
GlobalAlloc
GlobalFree
_lcreat
LoadLibraryA
GetProcAddress
FreeLibrary
OpenFile
GetVersionExA
GetCurrentProcess
WinExec
ExitProcess
_lread
GetTempPathA
GetTempFileNameA
GlobalLock
user32
GetDC
PostQuitMessage
InvalidateRect
BeginPaint
EndPaint
SendMessageA
DefWindowProcA
GetClientRect
CreateWindowExA
ReleaseDC
SetWindowPos
ShowWindow
LoadIconA
LoadCursorA
RegisterClassA
MessageBoxA
ExitWindowsEx
SetTimer
UpdateWindow
gdi32
DeleteObject
GetStockObject
GetDeviceCaps
PatBlt
CreateSolidBrush
GetTextExtentPointA
TextOutA
SetTextColor
SetBkMode
SelectObject
StretchDIBits
SelectPalette
CreatePalette
CreateFontA
RealizePalette
advapi32
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ