62c85d0ef75131917a0e050c6d021394d4e5f63abd08e57e66dc58072b9fee0c

Sharing

Copy URL Twitter E-mail

General

Target

62c85d0ef75131917a0e050c6d021394d4e5f63abd08e57e66dc58072b9fee0c
Size

97KB
MD5

d6b867920028e0f33b6761dd8d440d46
SHA1

a7ac6f942987208b9df213f5156337ccec5a56cc
SHA256

62c85d0ef75131917a0e050c6d021394d4e5f63abd08e57e66dc58072b9fee0c
SHA512

07b634d63403ef5174d3bc06da378c5c307e091a7431fecbfb6985b0a949d454e73027927b7e2502070aba6c02a235f67ced11bf64314f602e547e1a2fbe20f4
SSDEEP

1536:BlxW86g/rH8W7wx6N/3QrmlR8I8+t7hvG5amByoMeseeCNVjuCkNm1MaAqpyM:BlN62r7c2lR8I8qVufyO/TN7k4aaBpP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62c85d0ef75131917a0e050c6d021394d4e5f63abd08e57e66dc58072b9fee0c

Files

62c85d0ef75131917a0e050c6d021394d4e5f63abd08e57e66dc58072b9fee0c
.dll windows:5 windows x64 arch:x64

eb133e43605a391b1a451a214894845d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

e:\HAURI\HLib\trunk\windows\x64.MT\pdb\hacsMT.pdb

Imports

kernel32

WideCharToMultiByte
ReadFile
CreateFileW
lstrcmpW
MultiByteToWideChar
lstrlenW
GetLastError
CloseHandle
SetFilePointer
SetEndOfFile
WriteFile
GetFileSizeEx
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSetInformation
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
HeapSize
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

Exports

Exports

h_bytecmp
h_filecmp
h_filecmp_by_handle
h_mbfromw
h_mem_alloc
h_mem_free
h_print_byte
h_sprint_byte
h_sprint_byte_alloc
h_sscan_byte
h_sscan_byte_alloc
h_wfrommb
hcsCryptClose
hcsCryptOpen
hcsCryptReset
hcsDecrypt
hcsDecryptAlloc
hcsDecryptCont
hcsDecryptFile
hcsDecryptFileByHandle
hcsDecryptFromFileAlloc
hcsDecryptFromFileAllocByHandle
hcsDecryptStr
hcsDecryptStrAlloc
hcsDecryptStrFromFileAlloc
hcsDecryptStrFromFileAllocByHandle
hcsEncrypt
hcsEncryptAlloc
hcsEncryptCont
hcsEncryptFile
hcsEncryptFileByHandle
hcsEncryptStr
hcsEncryptStrAlloc
hcsEncryptStrToFile
hcsEncryptStrToFileByHandle
hcsEncryptToFile
hcsEncryptToFileByHandle
hcsMemAlloc
hcsMemFree
hcsSHA256_Close
hcsSHA256_Encrypt
hcsSHA256_Init
hcsSHA256_Process
hcs_hmac_sha256
hcs_kdf1

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb133e43605a391b1a451a214894845d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 67KB - Virtual size: 66KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 5KB - Virtual size: 13KB

.pdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 728B

.text
Size: 67KB - Virtual size: 66KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 5KB - Virtual size: 13KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 728B