ExxHack[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ExxHack.exe
Size

13.0MB
MD5

eb91f3b0cf10cd5ef7815e448b3d8590
SHA1

182172b475c0e52d499e7412873177252734d66d
SHA256

b0578ea367b26f4da0eed32ac9bd89262c0d21e0f8f002598268e3f071501137
SHA512

435fb3c5a9406f96f9b82dff0d2c1a03c1223c7b462bcfa5a86fec90472f90e3cb200f1f3bd190982aa83381b675729c9e772b33190fd178e06c535d5e37427c
SSDEEP

393216:ZhO+UD1+q3Oz2TxybD2fXTHKoywvBO/qxo:ZhO+wczzCuqP7nBO/qx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ExxHack.exe

Files

ExxHack.exe
.exe windows:5 windows x86 arch:x86

10db795108ad27346517b7650b83b8c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFindFileNameA

kernel32

LockResource
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

CreateWindowExA

Sections

.text
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HWh
Size: - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4"x
Size: - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.`:+
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pnp
Size: 13.0MB - Virtual size: 13.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ