HD_Tune_Pro_v5[.]00[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

HD_Tune_Pro_v5.00.exe
Size

7.5MB
MD5

14a93cf0f4e1c3239336990f90f18362
SHA1

88bb17f887556e669f721769cbbfac5d5580e60d
SHA256

8c44c173870c5cdc938e7e13fe92b5a813306368bc331a72a04dcc47a0f77a8a
SHA512

24cb9eacf4b5ff2b92b418e23707f261fde9a8a38d77ded3b89e565357720f7b78f32c982209f0e1d4f02736b25b25a58a7e6b3347a0a91d299cb51457a0f210
SSDEEP

98304:B8fgSSdjQelz0XWy3HBKpyhDTOQulLmx5tYIFasOtulKllQ06JBRJU6+HHqIBqUg:yfqDqWy3hZ91AIFasOgMllx6JBXU6vGu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HD_Tune_Pro_v5.00.exe

Files

HD_Tune_Pro_v5.00.exe
.exe windows:5 windows x86 arch:x86

4f0b4ecd5472ee12c1c4d68e628c7a06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\trunk\Cameyo\Release\Loader.pdb

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

wininet

InternetCloseHandle
InternetGetLastResponseInfoW
HttpQueryInfoW
InternetReadFile
InternetOpenUrlW
InternetOpenW

advapi32

RegQueryValueW
GetKernelObjectSecurity
GetLengthSid
LookupPrivilegeValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyW
IsTextUnicode
CreateServiceW
CloseServiceHandle
DeleteService
OpenSCManagerW
OpenServiceW
RegEnumKeyW
StartServiceW
QueryServiceStatus
ChangeServiceConfigW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumValueW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumKeyExW
OpenProcessToken
GetUserNameW
RegCreateKeyW
GetTokenInformation
EqualSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetNamedSecurityInfoW
LookupPrivilegeValueW
AllocateAndInitializeSid
SetSecurityDescriptorOwner
SetEntriesInAclW
FreeSid
RegSetKeySecurity
AdjustTokenPrivileges
RegSetValueExW
EnumDependentServicesW
QueryServiceStatusEx
ControlService
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
GetSecurityDescriptorSacl

oleaut32

VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
OleLoadPicture
OleCreatePictureIndirect
SysFreeString

ole32

CoInitializeEx
GetHGlobalFromStream
CreateStreamOnHGlobal
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoInitialize

kernel32

EndUpdateResourceW
WaitForSingleObjectEx
OpenMutexW
BeginUpdateResourceW
GetCurrentThreadId
ReleaseMutex
SetEvent
CreateEventW
GlobalAlloc
MulDiv
ResetEvent
ResumeThread
FreeResource
GetCommandLineW
SetFilePointer
GetComputerNameW
GetVersionExW
GetVersion
FindFirstFileExW
GetSystemTimeAsFileTime
GetWindowsDirectoryW
GetLongPathNameW
WaitNamedPipeW
InitializeCriticalSection
LeaveCriticalSection
GetExitCodeProcess
GetModuleFileNameW
MultiByteToWideChar
lstrlenW
GetTempPathW
EnterCriticalSection
GetLocalTime
SetNamedPipeHandleState
UpdateResourceW
EnumResourceLanguagesW
LocalFree
HeapAlloc
HeapFree
GetProcessHeap
SystemTimeToFileTime
SetFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
FlushViewOfFile
LoadLibraryExW
OpenFileMappingW
GetLogicalDrives
QueryDosDeviceW
GetFileInformationByHandle
FindResourceExW
LocalAlloc
DeleteCriticalSection
VirtualFree
VirtualAlloc
GetThreadLocale
GetStartupInfoA
GetLocaleInfoA
GetCommandLineA
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
lstrlenA
lstrcpyW
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatW
WaitForMultipleObjects
VirtualQuery
VirtualProtect
TerminateThread
SetThreadPriority
ReleaseSemaphore
OpenMutexA
OpenFileMappingA
OpenEventW
OpenEventA
LoadLibraryExA
LoadLibraryA
IsBadWritePtr
IsBadReadPtr
GetVersionExA
GetThreadContext
GetSystemDirectoryA
GetModuleHandleA
GetModuleFileNameA
GetFileAttributesA
GetExitCodeThread
GetCurrentThread
GetCurrentDirectoryA
InterlockedExchange
FormatMessageA
DeviceIoControl
CreateSemaphoreA
CreateProcessA
CreatePipe
CreateMutexA
CreateFileMappingA
CreateFileA
CreateEventA
InterlockedDecrement
FormatMessageW
lstrcmpW
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FlushFileBuffers
CompareStringA
GetLocaleInfoW
ConvertDefaultLocale
GlobalFlags
GlobalReAlloc
GlobalHandle
LocalReAlloc
InterlockedIncrement
SetErrorMode
WritePrivateProfileStringW
GetStartupInfoW
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
ExitThread
HeapSize
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
LCMapStringA
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
FreeLibrary
CreateMutexW
EnumResourceNamesW
GetSystemTime
GetCurrentProcessId
RemoveDirectoryW
SetCurrentDirectoryW
MoveFileW
FileTimeToSystemTime
LoadLibraryW
GetSystemDirectoryW
GetTickCount
OutputDebugStringW
SleepEx
WaitForSingleObject
SetEnvironmentVariableW
CompareFileTime
CreateProcessW
GetEnvironmentVariableW
CreateThread
DisconnectNamedPipe
CreateNamedPipeW
ConnectNamedPipe
GlobalFree
GlobalUnlock
GlobalLock
DeleteFileW
GetFileAttributesW
CopyFileW
WriteFile
SetFileAttributesW
FindNextFileW
FreeEnvironmentStringsW
GetSystemInfo
FindClose
CreateFileW
ReadFile
CreateDirectoryW
GetEnvironmentStringsW
GetDriveTypeW
FindFirstFileW
GetFileSize
Sleep
CloseHandle
IsWow64Process
SetLastError
TerminateProcess
OpenProcess
WriteProcessMemory
DuplicateHandle
VirtualProtectEx
GetProcAddress
ReadProcessMemory
WideCharToMultiByte
VirtualQueryEx
GetModuleHandleW
ExpandEnvironmentStringsW
LockResource
GetLastError
SizeofResource
GetCurrentProcess
LoadResource
FindResourceW
ExitProcess
CreateFileMappingW

user32

SetFocus
RemovePropW
GetPropW
SetPropW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
GetCapture
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
IsDialogMessageW
SetWindowTextW
SetCursor
ValidateRect
DestroyMenu
GetSysColorBrush
UnregisterClassW
PtInRect
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetMenuItemCount
UnhookWindowsHookEx
GetActiveWindow
CreateDialogIndirectParamW
GetDlgItem
GetNextDlgTabItem
EndDialog
GetForegroundWindow
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
CloseDesktop
DispatchMessageA
GetSystemMetrics
GetThreadDesktop
GetUserObjectInformationA
MsgWaitForMultipleObjects
OpenInputDesktop
PeekMessageA
GetKeyboardType
EndPaint
ClientToScreen
BeginPaint
AdjustWindowRectEx
GetDlgCtrlID
GetWindow
MessageBoxA
EnumWindows
GetWindowTextW
SetActiveWindow
TrackPopupMenu
RegisterWindowMessageW
GetMenuItemID
KillTimer
GetSubMenu
LoadMenuW
GetClassNameW
IsWindow
SetMenuDefaultItem
DestroyIcon
PostMessageW
SetForegroundWindow
TrackPopupMenuEx
AppendMenuW
GetCursorPos
CreatePopupMenu
RemoveMenu
FillRect
GetDC
SetRect
ReleaseDC
GetSysColor
CopyRect
WaitMessage
SystemParametersInfoW
PeekMessageW
wsprintfW
DestroyWindow
GetMessageW
PostQuitMessage
LoadCursorW
EnableWindow
RegisterClassExW
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
GetKeyState
SetMenu
LoadIconW
GetDesktopWindow
IsWindowVisible
GetClassInfoExW
GetClassInfoW
RegisterClassW
ShowWindow
CreateWindowExW
DefWindowProcW
MoveWindow
DispatchMessageW
GetWindowRect
GetParent
InvalidateRect
UpdateWindow
FindWindowW
SendMessageW
MessageBoxW
GetClientRect
LoadBitmapW
TranslateMessage

gdi32

CreateSolidBrush
GetStockObject
BitBlt
StretchBlt
DeleteDC
GetTextMetricsA
GetTextExtentPointA
CreateFontW
CreateBitmap
SaveDC
RestoreDC
CreateCompatibleDC
SetBkMode
SetTextColor
SetMapMode
GetClipBox
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
CreateCompatibleBitmap
SetWindowExtEx
DeleteObject
SelectObject
ScaleWindowExtEx
GetDeviceCaps
SetBkColor
GetObjectW
PtVisible

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

shell32

ShellExecuteExW
ShellExecuteW
CommandLineToArgvW
Shell_NotifyIconW
ExtractAssociatedIconW
SHChangeNotify

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
SHCopyKeyW

msi

ord173
ord217

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

CODE
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 626KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 463KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f0b4ecd5472ee12c1c4d68e628c7a06

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

wininet

advapi32

oleaut32

ole32

kernel32

user32

gdi32

winspool.drv

shell32

comctl32

shlwapi

msi

oleacc

Sections

CODE Size: 125KB - Virtual size: 125KB

.text Size: 626KB - Virtual size: 626KB

.rdata Size: 155KB - Virtual size: 155KB

.data Size: 10KB - Virtual size: 27KB

DATA Size: 5KB - Virtual size: 5KB

BSS Size: 2KB - Virtual size: 1KB

.rsrc Size: 463KB - Virtual size: 463KB

CODE
Size: 125KB - Virtual size: 125KB

.text
Size: 626KB - Virtual size: 626KB

.rdata
Size: 155KB - Virtual size: 155KB

.data
Size: 10KB - Virtual size: 27KB

DATA
Size: 5KB - Virtual size: 5KB

BSS
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 463KB - Virtual size: 463KB