PCHunter64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

PCHunter64.exe
Size

8.8MB
MD5

d02afb207db034af6a2e8de60b676729
SHA1

87c6aafbeed236b3d2a207e3fa4cc37bc7086869
SHA256

395b666e80388433951b764ee61b80bc5149a94507f134265f4372fba7d951b4
SHA512

7d2aed6f0de8fb92b6aabdce5daaf36f46ffec83049b4b2f2ec3449baa11b12371a6d21ecda2980c725b720ec57f976b0bc06dae0c80cba23765a966f0c75d3b
SSDEEP

98304:D+rVhDf7ThGwyrs+8e/2XGTPuPCVrNETb5fR:D+rVhDzThGPCeWGaP6rNY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PCHunter64.exe

Files

PCHunter64.exe
.exe windows:5 windows x64 arch:x64

864f0f6780553cca1220813eef1e3ea7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Y:\ViewEngine\View++\Release\PCHunter64.pdb

Imports

kernel32

GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeW
FatalAppExitA
SetConsoleCtrlHandler
QueryPerformanceCounter
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetCPInfo
SetCurrentDirectoryW
GetFullPathNameA
GetProcessHeap
SetEnvironmentVariableA
HeapDestroy
HeapCreate
TerminateProcess
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
HeapSetInformation
FlsAlloc
FlsFree
FlsSetValue
FlsGetValue
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateFileA
UnhandledExceptionFilter
GetStdHandle
SetUnhandledExceptionFilter
GetVersionExW
VirtualQuery
SetThreadStackGuarantee
VirtualAlloc
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
ExitThread
HeapReAlloc
GetTimeFormatW
GetDateFormatW
GetSystemTimeAsFileTime
RtlPcToFileHeader
RaiseException
HeapAlloc
HeapFree
EncodePointer
DecodePointer
RtlUnwindEx
RtlLookupFunctionEntry
GetStartupInfoW
GetCommandLineW
FindResourceExW
GetDiskFreeSpaceW
ReplaceFileW
GetUserDefaultLCID
SearchPathW
GetProfileIntW
GetNumberFormatW
GetTempPathW
GetTempFileNameW
LocalUnlock
LocalLock
GetFileTime
GetFileSizeEx
SetFileTime
LocalFileTimeToFileTime
GetFileAttributesExW
SetErrorMode
GetCurrentDirectoryW
SystemTimeToFileTime
GetAtomNameW
GlobalGetAtomNameW
lstrlenA
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
TlsGetValue
lstrcpyW
WritePrivateProfileStringW
GetPrivateProfileIntW
SetEvent
SetThreadPriority
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
GetLocaleInfoW
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
MoveFileW
lstrcmpiW
GetStringTypeExW
GetThreadLocale
ReleaseActCtx
CreateActCtxW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InitializeCriticalSectionAndSpinCount
lstrcmpW
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
FormatMessageW
LocalFree
lstrlenW
MulDiv
FlushFileBuffers
MapViewOfFileEx
LoadLibraryExW
GetExitCodeThread
FindNextFileW
FindClose
DefineDosDeviceW
FindFirstFileW
DeviceIoControl
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
GetCurrentProcessId
SuspendThread
ResumeThread
GetLogicalDrives
RemoveDirectoryW
CreateDirectoryW
OpenProcess
DuplicateHandle
MoveFileExW
FileTimeToLocalFileTime
FileTimeToSystemTime
QueryDosDeviceW
ActivateActCtx
DeactivateActCtx
GetDriveTypeW
GetFileAttributesW
FreeResource
GetUserDefaultLangID
SetFileAttributesW
ExitProcess
GetPrivateProfileStringW
GetProfileStringW
CreateEventW
OutputDebugStringW
WaitForSingleObject
Sleep
DeleteFileW
GetWindowsDirectoryW
WriteFile
ReadFile
GetLongPathNameW
GetTickCount
WideCharToMultiByte
LocalAlloc
GlobalLock
GlobalUnlock
CreateFileW
SetLastError
GetFileSize
GetLastError
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetCurrentProcess
IsBadReadPtr
VirtualProtect
CreateThread
TerminateThread
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
GetSystemDirectoryW
ExpandEnvironmentStringsW
MultiByteToWideChar
FreeLibrary
LoadLibraryW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetSystemInfo
GetVersion
GetLocaleInfoA

user32

GetIconInfo
HideCaret
InvertRect
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
SetClassLongPtrW
DestroyAcceleratorTable
SetParent
GetNextDlgGroupItem
GetTabbedTextExtentW
IsClipboardFormatAvailable
WaitMessage
InvalidateRgn
SetRect
CopyAcceleratorTableW
UnregisterClassW
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsRectEmpty
IsZoomed
GetAsyncKeyState
NotifyWinEvent
MessageBeep
ReleaseCapture
SetCapture
KillTimer
SetTimer
SetWindowRgn
DeleteMenu
IntersectRect
CopyImage
GetDialogBaseUnits
RealChildWindowFromPoint
GetSysColorBrush
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
GetMessageW
TranslateMessage
PostQuitMessage
CharUpperW
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
OffsetRect
CharNextW
WindowFromPoint
ScrollWindowEx
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
RegisterClipboardFormatW
ModifyMenuW
CheckMenuItem
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetMessageTime
GetSystemMetrics
SendMessageW
GetClientRect
EnableWindow
SetWindowLongW
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
RedrawWindow
ValidateRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
FrameRect
TranslateAcceleratorW
InsertMenuItemW
GetMenuBarInfo
ReuseDDElParam
UnpackDDElParam
CopyIcon
CharUpperBuffW
PostThreadMessageW
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
InSendMessage
CreateMenu
SendNotifyMessageW
CallWindowProcW
GetMenu
CopyRect
PtInRect
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
GetWindowLongW
GetDlgItem
GetUpdateRect
GetDoubleClickTime
IsCharLowerW
SubtractRect
DestroyCursor
EnumChildWindows
WindowFromDC
GetWindowRgn
GetDCEx
GetMenuCheckMarkDimensions
GetWindowRect
InvalidateRect
MapVirtualKeyExW
SetCursor
LoadCursorW
CreatePopupMenu
AppendMenuW
IsWindow
GetCursorPos
EnableMenuItem
SetClipboardData
EmptyClipboard
OpenClipboard
CloseClipboard
MessageBoxW
SetWindowPos
GetParent
PostMessageW
ScreenToClient
DrawIcon
GetSystemMenu
IsIconic
SetForegroundWindow
LoadIconW
RegisterWindowMessageW
UnregisterHotKey
RegisterHotKey
UnhookWindowsHookEx
GetFocus
SetWindowTextA
GetWindowTextA
LoadImageW
DestroyIcon
DestroyWindow
IsWindowVisible
GetClassNameW
GetWindowThreadProcessId
GetWindowTextW
EnumWindows
ShowWindow
wsprintfW
DrawStateW
FillRect
UpdateWindow
LoadBitmapW
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
GetMenuStringW
GetMenuState
EndDialog
GetNextDlgTabItem
IsWindowEnabled

gdi32

Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
GetDIBits
StretchBlt
SetPixel
Rectangle
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
RoundRect
EnumFontFamiliesExW
ExtFloodFill
Polyline
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
CreateMetaFileW
CloseMetaFile
DeleteMetaFile
SetPixelV
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
CreatePolygonRgn
CreateEllipticRgn
GetCurrentObject
StretchDIBits
GetCharWidthW
GetRgnBox
CreateDIBSection
CreateRoundRectRgn
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
CreateCompatibleBitmap
CreateDIBitmap
PatBlt
CreateRectRgnIndirect
GetTextExtentPoint32W
CreateFontIndirectW
GetTextColor
GetBkColor
CreateHatchBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreateCompatibleDC
CreateBitmap
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
SetPaletteEntries
CreateSolidBrush
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
StartDocW
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetLayout
GetLayout
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
CreateDCW
CopyMetaFileW
GetDeviceCaps
GetStockObject
GetObjectW
CreateFontW
DeleteObject
ScaleWindowExtEx

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
GetJobW
ClosePrinter

advapi32

RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegNotifyChangeKeyValue
CloseServiceHandle
DeleteService
OpenServiceW
OpenSCManagerW
GetFileSecurityW
SetFileSecurityW
RegEnumKeyExW
RegQueryValueW
RegEnumKeyW
RegSetValueW
RegEnumValueW
RegDeleteKeyW
RegCreateKeyW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
EnumServicesStatusW
StartServiceW
ControlService
QueryServiceStatus
EnumServicesStatusExW
QueryServiceConfigW
QueryServiceConfig2W

shell32

DragFinish
ShellExecuteExW
Shell_NotifyIconW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHAddToRecentDocs
ExtractIconW
SHGetDesktopFolder
SHGetMalloc
DragQueryFileW
ShellExecuteW
SHAppBarMessage
SHGetSpecialFolderLocation

comctl32

_TrackMouseEvent
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx

shlwapi

PathFileExistsW
StrStrIW
StrStrIA
PathRemoveFileSpecW
PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
UrlUnescapeW

ole32

WriteClassStm
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
CoTreatAsClass
OleDuplicateData
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleRun
CreateStreamOnHGlobal
OleSetClipboard
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
StringFromGUID2
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
StgCreateDocfile
CreateFileMoniker
StgOpenStorage
StgIsStorageFile
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleSetMenuDescriptor
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
PropVariantCopy
OleSave
CreateDataAdviseHolder
CreateOleAdviseHolder
CoGetMalloc
GetRunningObjectTable
OleIsRunning
OleQueryLinkFromData
OleQueryCreateFromData
OleRegGetMiscStatus
OleRegEnumVerbs
CreateGenericComposite
CreateItemMoniker
OleGetIconOfClass
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
GetHGlobalFromILockBytes
OleLoad
OleCreate
OleCreateStaticFromData
OleCreateLinkFromData
CoInitializeEx
CoTaskMemFree
CoInitializeSecurity
CoUninitialize
CoCreateInstance
OleCreateFromData
OleSaveToStream
ReadClassStg
CoInitialize

oleaut32

SysStringByteLen
OleCreateFontIndirect
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SysAllocStringByteLen
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
VarDateFromStr
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarBstrFromDate
VariantChangeType
CreateErrorInfo
SysAllocStringLen
SysAllocString
VariantClear
VariantInit
SysFreeString
SysStringLen
SafeArrayCopy
GetErrorInfo
SetErrorInfo
VarDecFromStr

oledlg

OleUIBusyW

urlmon

URLDownloadToCacheFileW

gdiplus

GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCreateBitmapFromStreamICM
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageHeight

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

iphlpapi

GetAdaptersInfo

netapi32

NetApiBufferFree
NetUserEnum
NetUserDel

ws2_32

ntohs
inet_ntoa

wininet

InternetCloseHandle
InternetOpenUrlW
GopherOpenFileW
FtpFindFirstFileW
GopherCreateLocatorW
FtpCommandW
FtpOpenFileW
GopherGetAttributeW
HttpSendRequestExW
HttpEndRequestW
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
GopherFindFirstFileW
InternetFindNextFileW
InternetErrorDlg
FtpGetFileW
FtpPutFileW
FtpGetCurrentDirectoryW
FtpSetCurrentDirectoryW
FtpRemoveDirectoryW
FtpCreateDirectoryW
FtpRenameFileW
FtpDeleteFileW
InternetGetCookieW
InternetSetCookieW
InternetSetOptionExW
InternetQueryOptionW
InternetCanonicalizeUrlW
InternetQueryDataAvailable
InternetOpenW
InternetSetOptionW
InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
InternetCrackUrlW

wintrust

WinVerifyTrust

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 694KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

864f0f6780553cca1220813eef1e3ea7

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

gdiplus

version

iphlpapi

netapi32

ws2_32

wininet

wintrust

oleacc

imm32

winmm

Sections

.text Size: 4.0MB - Virtual size: 4.0MB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.data Size: 694KB - Virtual size: 1.2MB

.pdata Size: 202KB - Virtual size: 202KB

text Size: 3KB - Virtual size: 2KB

data Size: 2KB - Virtual size: 1KB

.rsrc Size: 1.9MB - Virtual size: 1.9MB

.text
Size: 4.0MB - Virtual size: 4.0MB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 694KB - Virtual size: 1.2MB

.pdata
Size: 202KB - Virtual size: 202KB

text
Size: 3KB - Virtual size: 2KB

data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1.9MB - Virtual size: 1.9MB