YourOnlyMoveIsHUSTLE[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

YourOnlyMoveIsHUSTLE.exe
Size

41.0MB
MD5

677c486cadd78c34c882aa6c8161132c
SHA1

f015bfb07d9f8a54bf50937ba8822adb6e9e1cd7
SHA256

9cb277ae5c9d1c89058426270cdc0c58e22a4d9b148ac3aebf1fe20b50a62bfd
SHA512

485fc618c164697f8a8a4767f0aa495477c417238482e734125e99dcf259aa3527837bfc39787b1b650de937d109d17b8a3406b639e93de4615eed1d60b0dab6
SSDEEP

393216:sAnZtt1CNkTixGEmgiKGWYiGcbfVxBHkSF8uvywzluXQr9LKVF+S3ea3QgiHkXWS:snPEXDyiIQe5l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
YourOnlyMoveIsHUSTLE.exe

Files

YourOnlyMoveIsHUSTLE.exe
.exe windows:6 windows x64 arch:x64

10d9f98eeb8e36bcc2ea50096e41bbc6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

winmm

midiInOpen
midiInStart
midiInClose
midiInGetErrorTextA
midiInGetNumDevs
midiInGetID
midiInStop
midiInGetDevCapsA
timeBeginPeriod
timeEndPeriod

opengl32

wglGetProcAddress
wglDeleteContext
wglMakeCurrent
wglCreateContext

kernel32

GetLastError
AttachConsole
GetCurrentThread
QueryPerformanceFrequency
CloseHandle
GetNativeSystemInfo
GetSystemInfo
LoadLibraryW
GetLocalTime
GetProcAddress
GlobalLock
GetCurrentProcessId
SystemTimeToFileTime
CreateProcessW
FreeLibrary
GetSystemTime
QueryPerformanceCounter
GlobalUnlock
LoadLibraryExW
GetExitCodeProcess
LoadLibraryA
GetSystemPowerStatus
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetConsoleOutputCP
FlushFileBuffers
GetTimeZoneInformation
GetFileSizeEx
ReadConsoleW
GetConsoleMode
SetFilePointerEx
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCommandLineA
WriteFile
RemoveDirectoryW
MoveFileExW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
CreateFileW
ExitProcess
FormatMessageW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetFileType
SetStdHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
GetModuleHandleW
Sleep
MultiByteToWideChar
LCIDToLocaleName
GetModuleHandleA
WaitForSingleObject
GetEnvironmentVariableW
CreatePipe
SetThreadPriority
GetUserDefaultUILanguage
GetLocaleInfoEx
SetEnvironmentVariableW
GetModuleFileNameW
TerminateProcess
OutputDebugStringA
GetStdHandle
GetCurrentProcess
SetPriorityClass
GetSystemTimeAsFileTime
SetLastError
SetHandleInformation
SetConsoleCtrlHandler
ReadFile
WideCharToMultiByte
CreateSemaphoreA
LocalFree
GlobalAlloc
GetCommandLineW
GetFullPathNameW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleHandleExW
WriteConsoleW
SetEndOfFile
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetExitCodeThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FindNextFileW
FindClose
CreateEventA
VirtualFree
CreateMutexA
ReleaseMutex
HeapFree
GetTickCount64
HeapAlloc
GetProcessHeap
ReleaseSemaphore
SetEvent
TryEnterCriticalSection
ReplaceFileW
CreateDirectoryW
GetVolumeInformationW
GetLogicalDrives
FindFirstFileExW
GetFileAttributesW
DeleteFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetTempFileNameW
GetDiskFreeSpaceExA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
GetCurrentThreadId
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WaitForSingleObjectEx
HeapSize

ole32

CoInitialize
CoCreateInstance
PropVariantClear
CoTaskMemFree

user32

GetDC
GetRawInputDeviceInfoA
GetRawInputDeviceList
DefWindowProcW
AdjustWindowRectEx
GetKeyState
GetMessageExtraInfo
AllowSetForegroundWindow
CallWindowProcW
MonitorFromPoint
CloseTouchInputHandle
GetTouchInputInfo
GetWindowRect
LoadCursorA
SetWindowPos
MessageBoxW
MonitorFromWindow
SetWindowRgn
EnumDisplayMonitors
CreateWindowExW
GetKeyboardLayoutNameA
ScreenToClient
GetSystemMetrics
SetWindowTextW
RegisterClassExW
ShowWindow
OpenClipboard
DispatchMessageW
SetTimer
DestroyIcon
RegisterTouchWindow
GetMonitorInfoW
CreateIconIndirect
ClientToScreen
CloseClipboard
EmptyClipboard
PeekMessageW
GetKeyboardLayoutList
GetRawInputData
TrackMouseEvent
GetKeyboardLayout
CreateIconFromResource
MessageBoxA
MoveWindow
SetFocus
RegisterRawInputDevices
TranslateMessage
GetClipboardData
ClipCursor
SendMessageA
SetCapture
SetClipboardData
SetCursor
LoadIconA
FlashWindowEx
SystemParametersInfoA
GetClientRect
IsClipboardFormatAvailable
GetWindowLongPtrA
ActivateKeyboardLayout
KillTimer
EnumDisplaySettingsW
MapVirtualKeyExA
SetWindowLongPtrA
ReleaseCapture
SetForegroundWindow
IsIconic
SetCursorPos
ReleaseDC
GetCursorPos

gdi32

CreateBitmap
GetObjectA
ChoosePixelFormat
SwapBuffers
DeleteObject
SetBkColor
SetPixelFormat
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
CreatePolygonRgn
GetDeviceCaps
CreateRectRgn
DeleteDC
SetTextColor

shell32

DragQueryFileW
CommandLineToArgvW
ShellExecuteW
SHGetKnownFolderPath
SHFileOperationW
DragAcceptFiles

advapi32

RegOpenKeyExW
GetCurrentHwProfileA
RegCloseKey
RegQueryValueExW

dinput8

DirectInput8Create

imm32

ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
ImmAssociateContext

avrt

AvSetMmThreadPriority
AvSetMmThreadCharacteristicsA

dwmapi

DwmIsCompositionEnabled
DwmEnableBlurBehindWindow
DwmFlush

iphlpapi

GetBestInterfaceEx
GetAdaptersAddresses

shlwapi

PathFileExistsW

wsock32

WSACleanup
__WSAFDIsSet
accept
htons
ntohs
closesocket
send
getsockname
htonl
ntohl
WSAGetLastError
setsockopt
connect
socket
sendto
ioctlsocket
bind
recv
select
inet_ntoa
recvfrom
listen
WSAStartup

ws2_32

freeaddrinfo
getnameinfo
inet_pton
WSAConnect
getaddrinfo

bcrypt

BCryptGenRandom

steam_api64

SteamAPI_UnregisterCallback
SteamInternal_ContextInit
SteamAPI_Shutdown
SteamInternal_FindOrCreateGameServerInterface
SteamAPI_GetHSteamUser
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamGameServer_GetHSteamUser
SteamAPI_RestartAppIfNecessary
SteamAPI_Init
SteamAPI_UnregisterCallResult
SteamInternal_FindOrCreateUserInterface
SteamAPI_RunCallbacks

Exports

Exports

?_main@@YAHXZ
?widechar_main@@YAHHPEAPEA_W@Z
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
main

Sections

.text
Size: 31.6MB - Virtual size: 31.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7.3MB - Virtual size: 7.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 517KB - Virtual size: 590KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 956KB - Virtual size: 955KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

pck
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10d9f98eeb8e36bcc2ea50096e41bbc6

Headers

DLL Characteristics

File Characteristics

Imports

winmm

opengl32

kernel32

ole32

user32

gdi32

shell32

advapi32

dinput8

imm32

avrt

dwmapi

iphlpapi

shlwapi

wsock32

ws2_32

bcrypt

steam_api64

Exports

Exports

Sections

.text Size: 31.6MB - Virtual size: 31.6MB

.rdata Size: 7.3MB - Virtual size: 7.3MB

.data Size: 517KB - Virtual size: 590KB

.pdata Size: 956KB - Virtual size: 955KB

_RDATA Size: 512B - Virtual size: 348B

pck Size: 512B - Virtual size: 8B

.rsrc Size: 352KB - Virtual size: 352KB

.reloc Size: 194KB - Virtual size: 194KB

.text
Size: 31.6MB - Virtual size: 31.6MB

.rdata
Size: 7.3MB - Virtual size: 7.3MB

.data
Size: 517KB - Virtual size: 590KB

.pdata
Size: 956KB - Virtual size: 955KB

_RDATA
Size: 512B - Virtual size: 348B

pck
Size: 512B - Virtual size: 8B

.rsrc
Size: 352KB - Virtual size: 352KB

.reloc
Size: 194KB - Virtual size: 194KB