HackyBird[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

HackyBird.exe
Size

4.3MB
MD5

519ac6d925355af61559d99f5dbed7b4
SHA1

5f3cd53ea215a1aec9e5eb07ee74de63f134add0
SHA256

7aa24d17cec7181c71a04b7a8279e420c30f7364acd8cc7ac351be63254071b0
SHA512

4a8efbabbd904153e435bea408d07aab4784c1c8c4483db848a54754096b75678ff930d15049add74c18f34c9314c2a8f5928a2373cfc61e0a7c22aca2bfabc8
SSDEEP

6144:mEguTVq3Ir4fwsVZUNLOu0VtQmJVuvGQUDIPra3mcRVZEmPgHVCjMVgH9r+QByo2:mEgB3Ir4fZDnK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HackyBird.exe

Files

HackyBird.exe
.exe windows:6 windows x86 arch:x86

9d394e905b58d042bd03d467716bb115

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GetCommandLineA
MultiByteToWideChar
GetOEMCP
GetACP
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFileType
GetProcessHeap
SetStdHandle
GetStringTypeW
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
GetCPInfo
GetModuleHandleW
IsValidCodePage
FindNextFileW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
LCMapStringW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
DecodePointer

user32

DefWindowProcW
DestroyWindow
CreateWindowExW
RegisterClassExW
ShowWindow
SetTimer
AdjustWindowRect
LoadIconW
LoadCursorW
SetWindowLongW
SystemParametersInfoW
GetWindowLongW
IntersectRect
GetMessageW
DispatchMessageW
TranslateMessage
GetClientRect
PostQuitMessage
InvalidateRect
BeginPaint
EndPaint
GetDC
DrawTextW
ReleaseDC
LoadBitmapW
UpdateWindow

gdi32

CreateBitmap
CreateCompatibleBitmap
SetTextColor
SetBkMode
CreatePen
Rectangle
CreateSolidBrush
CreateFontIndirectW
RoundRect
BitBlt
SelectObject
CreateCompatibleDC
DeleteDC
GetObjectW
SetBkColor
DeleteObject

msimg32

AlphaBlend

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d394e905b58d042bd03d467716bb115

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

Sections

.text Size: 66KB - Virtual size: 65KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 3KB - Virtual size: 5KB

.sdata Size: 512B - Virtual size: 64B

.rsrc Size: 4.2MB - Virtual size: 4.2MB

.text
Size: 66KB - Virtual size: 65KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 3KB - Virtual size: 5KB

.sdata
Size: 512B - Virtual size: 64B

.rsrc
Size: 4.2MB - Virtual size: 4.2MB