5695_hmrgbducixw[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5695_hmrgbducixw.exe
Size

29.0MB
MD5

954ba10090f3707f7914e9fbf6e4b406
SHA1

3d9b91d0a783a29898fc84d27ff5bd5d41edd913
SHA256

04e4b15e1635ce72c9834dec05c74983a957789f796a1fc3f4540e14e1fdb249
SHA512

a6058f2bd9b2a47d18f6659bc1ccf638b1b5e714ffcabf7e1d918f7c81bdd70b90abbefb0189c712b373685a8d259db468bb0008970113afa6636443e98f49eb
SSDEEP

786432:0rQ7GWkoU6hcc8RVc5vrHLKJSbDfsUmd+J23bz:087q6x8Ri5vLL6Umw2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5695_hmrgbducixw.exe

Files

5695_hmrgbducixw.exe
.exe windows:6 windows x86 arch:x86

56bb090f47a0e035c7cacb4ab9223c21

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetWindowThreadProcessId

advapi32

RegSetValueExW

shell32

SHGetFolderPathA

ole32

CoInitialize

shlwapi

PathCombineA

d3d9

Direct3DCreate9

d3dx9_43

D3DXCreateFontA

ws2_32

getsockname

crypt32

CertGetCertificateChain

wldap32

ord35

normaliz

IdnToAscii

Sections

.text
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 755KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gamesen
Size: - Virtual size: 17.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gamesen
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gamesen
Size: 29.0MB - Virtual size: 29.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

56bb090f47a0e035c7cacb4ab9223c21

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

shlwapi

d3d9

d3dx9_43

ws2_32

crypt32

wldap32

normaliz

Sections

.text Size: - Virtual size: 1.3MB

.rdata Size: - Virtual size: 203KB

.data Size: - Virtual size: 755KB

.gamesen Size: - Virtual size: 17.3MB

.gamesen Size: 2KB - Virtual size: 2KB

.gamesen Size: 29.0MB - Virtual size: 29.0MB

.rsrc Size: 512B - Virtual size: 480B

.text
Size: - Virtual size: 1.3MB

.rdata
Size: - Virtual size: 203KB

.data
Size: - Virtual size: 755KB

.gamesen
Size: - Virtual size: 17.3MB

.gamesen
Size: 2KB - Virtual size: 2KB

.gamesen
Size: 29.0MB - Virtual size: 29.0MB

.rsrc
Size: 512B - Virtual size: 480B