BrickHill[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

BrickHill.exe
Size

24.0MB
MD5

8f6f8272907d37117d0b5037c1d3c090
SHA1

0953c9f24f64d45392dc71dcb47da15c223b2b2d
SHA256

5cf20961dc0ef724e65433687cca01dcf30b9f65c61efdec9cce2cb222145d2c
SHA512

ed6188ea19c6bb0f269008072100844f75250c29769ded97e15f44900fefb2668bad6b5e8289a5ebd79f6f86a184150c0b3293203296a63f6a939edc4e77fc8a
SSDEEP

196608:TuYg4E3jYABWAvRxI9t/6fVXDHg/tEs3jl:KQAZZq996fhAt1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BrickHill.exe

Files

BrickHill.exe
.exe windows:4 windows x64 arch:x64

Password: e

be8310c7d219911b1178a9396b0fb250

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

CryptAcquireContextA
CryptCreateHash
CryptDestroyHash
CryptGenRandom
CryptGetHashParam
CryptHashData
CryptReleaseContext
OpenProcessToken

comctl32

DefSubclassProc
RemoveWindowSubclass
SetWindowSubclass

d3dcompiler_47

D3DCompile

dwmapi

DwmEnableBlurBehindWindow

gdi32

CreateRectRgn
DeleteObject
GetDeviceCaps

imm32

ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow

kernel32

AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredExceptionHandler
CancelIo
CloseHandle
CompareStringOrdinal
CopyFileExW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileMappingA
CreateFileW
CreateHardLinkW
CreateIoCompletionPort
CreateMutexA
CreateNamedPipeW
CreateProcessW
CreateSymbolicLinkW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileW
DeviceIoControl
DosDateTimeToFileTime
DuplicateHandle
EnterCriticalSection
ExitProcess
FileTimeToDosDateTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineW
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeProcess
GetFileInformationByHandle
GetFileSizeEx
GetFinalPathNameByHandleW
GetHandleInformation
GetLastError
GetLogicalProcessorInformation
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessId
GetQueuedCompletionStatusEx
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetTickCount
GetTickCount64
GetTimeZoneInformation
HeapAlloc
HeapFree
HeapReAlloc
InitOnceExecuteOnce
InitializeCriticalSection
InitializeSRWLock
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
MapViewOfFile
Module32FirstW
Module32NextW
MoveFileExA
MoveFileExW
MultiByteToWideChar
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleW
ReadFile
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
RemoveDirectoryW
RemoveVectoredExceptionHandler
RtlCaptureContext
RtlLookupFunctionEntry
SetConsoleMode
SetConsoleTextAttribute
SetCurrentDirectoryW
SetEnvironmentVariableW
SetFileAttributesW
SetFileCompletionNotificationModes
SetFileInformationByHandle
SetFilePointerEx
SetHandleInformation
SetLastError
SetThreadErrorMode
SetThreadStackGuarantee
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SleepEx
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
TzSpecificLocalTimeToSystemTime
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrlenW
IsDBCSLeadByteEx
RaiseException
RtlUnwindEx
RtlVirtualUnwind
VirtualProtect
VirtualQuery
__C_specific_handler

ole32

CoCreateInstance
CoInitializeEx
CoTaskMemFree
CoUninitialize
OleInitialize
RegisterDragDrop
RevokeDragDrop

shell32

DragFinish
DragQueryFileW
SHCreateItemFromParsingName
SHGetKnownFolderPath

user32

AdjustWindowRectEx
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CloseTouchInputHandle
CreateIcon
CreateWindowExW
DefWindowProcW
DestroyIcon
DestroyWindow
DispatchMessageW
EnumDisplayMonitors
GetActiveWindow
GetClientRect
GetClipCursor
GetCursorPos
GetDC
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetMessageW
GetMonitorInfoW
GetRawInputData
GetRawInputDeviceInfoW
GetSystemMetrics
GetTouchInputInfo
GetUpdateRect
GetWindowLongPtrW
GetWindowLongW
GetWindowPlacement
GetWindowRect
InvalidateRgn
IsProcessDPIAware
LoadCursorW
LoadImageW
MapVirtualKeyA
MapVirtualKeyW
MessageBoxW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MsgWaitForMultipleObjectsEx
PeekMessageW
PostMessageW
PostThreadMessageW
RedrawWindow
RegisterClassExW
RegisterRawInputDevices
RegisterTouchWindow
RegisterWindowMessageA
ReleaseCapture
ScreenToClient
SendInput
SendMessageW
SetCapture
SetCursor
SetForegroundWindow
SetWindowLongPtrW
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextW
ShowCursor
ShowWindow
SystemParametersInfoA
ToUnicodeEx
TrackMouseEvent
TranslateMessage
ValidateRect

uxtheme

SetWindowTheme

bcrypt

BCryptGenRandom

crypt32

CertAddCertificateContextToStore
CertCloseStore
CertCreateCertificateChainEngine
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFindExtension
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateContext
CertGetCertificateChain
CertGetNameStringA
CertOpenStore
CryptDecodeObjectEx
CryptQueryObject
CryptStringToBinaryA
PFXImportCertStore

msvcrt

___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_access
_acmdln
_amsg_exit
_assert
_beginthreadex
_cexit
_commode
_errno
_fmode
_fpreset
_fstat64
_gmtime64
_hypot
_initterm
_lock
_lseeki64
_onexit
_open
_stat64
_sys_errlist
_sys_nerr
_time64
_unlock
abort
atan2f
atoi
calloc
ceil
ceilf
exit
fclose
feof
fflush
fgets
floor
floorf
fmodf
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
getc
islower
isspace
isupper
isxdigit
localeconv
log
log10
malloc
memchr
memcmp
memcpy
memmove
memset
pow
powf
qsort
realloc
signal
sin
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtol
strtoul
tolower
ungetc
vfprintf
wcslen
wcstombs
_write
_unlink
_strdup
_read
_close

userenv

GetUserProfileDirectoryW

ws2_32

WSACleanup
WSACloseEvent
WSACreateEvent
WSADuplicateSocketW
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAIoctl
WSAPoll
WSARecv
WSARecvFrom
WSAResetEvent
WSASend
WSASendTo
WSASetEvent
WSASetLastError
WSASocketW
WSAStartup
WSAWaitForMultipleEvents
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getpeername
getsockname
getsockopt
htonl
htons
ioctlsocket
listen
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Sections

.text
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 582KB - Virtual size: 581KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 373KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/35
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/51
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/63
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/77
Size: 427KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/89
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/102
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/113
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/124
Size: 461KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: e

be8310c7d219911b1178a9396b0fb250

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comctl32

d3dcompiler_47

dwmapi

gdi32

imm32

kernel32

ole32

shell32

user32

uxtheme

bcrypt

crypt32

msvcrt

userenv

ws2_32

Sections

.text Size: 8.9MB - Virtual size: 8.9MB

.data Size: 9KB - Virtual size: 8KB

.rdata Size: 2.7MB - Virtual size: 2.7MB

.pdata Size: 289KB - Virtual size: 289KB

.xdata Size: 582KB - Virtual size: 581KB

.bss Size: - Virtual size: 5KB

.idata Size: 16KB - Virtual size: 15KB

.CRT Size: 512B - Virtual size: 184B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 119KB - Virtual size: 118KB

.reloc Size: 61KB - Virtual size: 61KB

/4 Size: 4KB - Virtual size: 3KB

/19 Size: 373KB - Virtual size: 372KB

/35 Size: 512B - Virtual size: 234B

/51 Size: 1.1MB - Virtual size: 1.1MB

/63 Size: 29KB - Virtual size: 28KB

/77 Size: 427KB - Virtual size: 426KB

/89 Size: 9KB - Virtual size: 9KB

/102 Size: 1.0MB - Virtual size: 1.0MB

/113 Size: 161KB - Virtual size: 161KB

/124 Size: 461KB - Virtual size: 461KB

.text
Size: 8.9MB - Virtual size: 8.9MB

.data
Size: 9KB - Virtual size: 8KB

.rdata
Size: 2.7MB - Virtual size: 2.7MB

.pdata
Size: 289KB - Virtual size: 289KB

.xdata
Size: 582KB - Virtual size: 581KB

.bss
Size: - Virtual size: 5KB

.idata
Size: 16KB - Virtual size: 15KB

.CRT
Size: 512B - Virtual size: 184B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 119KB - Virtual size: 118KB

.reloc
Size: 61KB - Virtual size: 61KB

/4
Size: 4KB - Virtual size: 3KB

/19
Size: 373KB - Virtual size: 372KB

/35
Size: 512B - Virtual size: 234B

/51
Size: 1.1MB - Virtual size: 1.1MB

/63
Size: 29KB - Virtual size: 28KB

/77
Size: 427KB - Virtual size: 426KB

/89
Size: 9KB - Virtual size: 9KB

/102
Size: 1.0MB - Virtual size: 1.0MB

/113
Size: 161KB - Virtual size: 161KB

/124
Size: 461KB - Virtual size: 461KB