bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803

Sharing

Copy URL Twitter E-mail

General

Target
bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803
Size 3.9MB
Sample260702-bry6eaax5v
SHA256 bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803
MD5 0388207d9609e26500953aab2a670256
SHA1 56e3b8ac20f95dbd6459f2ca67d1381f0b1043a5
SHA512 4500a8afe05e9697577ebcfc5d64808f139f0ef845b451774a5de0c46187618dbb4fce4fd85706fd6488a6ce2ad9520cb515d553f82a97c281dac35072fa2793
SSDEEP 98304:WYl57HXHfKRp0anl0bosnlDMWHDNS+BxUcFWBXBnEgLu74bQV3n3QfY:Wa7H3fSRn5slYmg6iRnfCuA3n3Q
TLSH
T1E2163312C1E1F2A7FE80C476593650AAC7D9CA1E8294522F1F163BA1D833BD3EB4752D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/nsExec.dll

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803
unpack001/daily-huddle.exe

File Explorer

bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803

.exe 3.9MB
$PLUGINSDIR/nsExec.dll

.dll 7KB
daily-huddle.exe

.exe 7.6MB

bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803

IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
SHA256 bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803
MD5 0388207d9609e26500953aab2a670256
SHA1 56e3b8ac20f95dbd6459f2ca67d1381f0b1043a5
SHA512 4500a8afe05e9697577ebcfc5d64808f139f0ef845b451774a5de0c46187618dbb4fce4fd85706fd6488a6ce2ad9520cb515d553f82a97c281dac35072fa2793
SSDEEP 98304:WYl57HXHfKRp0anl0bosnlDMWHDNS+BxUcFWBXBnEgLu74bQV3n3QfY:Wa7H3fSRn5slYmg6iRnfCuA3n3Q
TLSH
T1E2163312C1E1F2A7FE80C476593650AAC7D9CA1E8294522F1F163BA1D833BD3EB4752D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

77:26:31:9a:4a:33:14:e8:28:bb:0e:49:eb:f3:34:01:40:0a:67:7e:70:9f:8a:bf:a7:1e:c1:6b:9f:18:a9:d6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Precision Quality

Chains

Jul 2, 2026

CN=Precision Quality

Subject

CN=Precision Quality

Serial Number

13:56:a4:45:14:16:df:af:4d:a5:f4:b9:9e:a9:6b:1a

Issuer

CN=Precision Quality

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 21, 2026 - Jun 21, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

13709

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/nsExec.dll

IMPHASH 68b7023f8923dd087549802f8fa631c3
SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
MD5 c953dd0aab774f1446fcd63fa7c5f613
SHA1 6b7e1ef30b3ce2b353d310a8c99111c01e1f752e
SHA512 7fdfc451ada1789ad44a33fee7a97acf9f482ae58b5207564ce8ac90fbc8b0fc891bc02d8c1d9a1d0d3fb77954106115582080e129bb93634a2cb16777201e14
SSDEEP 96:JbzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHwDQ:JEQHDb2vSuOc41ZfUNQZGdHo
TLSH
T15EE1093571C02DF7D08D897438167D2F83F4D52627BA05A046771AD579D0AF6EE28B42
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

daily-huddle.exe

IMPHASH 5da8941fcd5ef825ee28aaed8905c00d
SHA256 0c5609dc4e329372b8a08fff7d0a77762fbebc5ff15b17ee770cee6ebed54b88
MD5 46285269243b7083649bcf2c3ee46222
SHA1 14ab8afdb9c86fe474732b247e42a8dc333e9aa3
SHA512 e4029079f0776ff09e3d081d26c8e4392a3110023c0da0f6a5f743b6cc546cbab2749a95a5aecaa2f496d477d3574a0bc8c916ac9b741a5e68bb3cb1b3a772d5
SSDEEP 98304:g4I+irn0njwaxr6LZ8V1DUFk1tQlusoA8PC6t+DZf1q7cIA46w1+n+I:3E8/5PCYkzq73ADGkX
TLSH
T143866C07E29480E9C0AEC0B8C31B9A37EB72B8895535F29F5BE44B512F26F506F1D719
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

68:b7:57:f7:d0:29:44:3a:a3:9d:c9:c6:7d:a2:00:04:60:20:e4:f4:23:89:d1:27:06:2b:0f:3b:5c:c9:1c:2a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Precision Quality

Chains

Jul 2, 2026

CN=Precision Quality

Subject

CN=Precision Quality

Serial Number

13:56:a4:45:14:16:df:af:4d:a5:f4:b9:9e:a9:6b:1a

Issuer

CN=Precision Quality

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 21, 2026 - Jun 21, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

5805936

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

daily_huddle.pdb

ntdll

NtCancelIoFileEx NtCreateNamedPipeFile RtlNtStatusToDosError NtCreateFile NtWriteFile NtDeviceIoControlFile NtReadFile NtOpenFile RtlGetVersion

kernel32

IsProcessorFeaturePresent OpenProcess WakeAllConditionVariable GetCurrentThreadId LoadLibraryW SleepConditionVariableSRW GetModuleHandleA IsDebuggerPresent RtlLookupFunctionEntry SetLastError WaitForSingleObjectEx WideCharToMultiByte ReleaseMutex MultiByteToWideChar SetWaitableTimer FormatMessageW AcquireSRWLockExclusive GetModuleFileNameW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW DuplicateHandle SleepEx ExitProcess GetSystemTimePreciseAsFileTime HeapAlloc SetHandleInformation LCIDToLocaleName GetUserDefaultUILanguage RtlPcToFileHeader EncodePointer TlsAlloc TlsGetValue TlsSetValue GetSystemInfo GetCurrentProcess LocalFree GetCurrentProcessId CloseHandle RtlUnwindEx DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection SystemTimeToFileTime ReleaseSRWLockExclusive QueryPerformanceCounter FreeEnvironmentStringsW GetEnvironmentStringsW TerminateProcess QueryPerformanceFrequency GetEnvironmentVariableW GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext WaitForSingleObject SetEnvironmentVariableW AddVectoredExceptionHandler TlsFree GetModuleHandleW GlobalSize GlobalLock CreateFileMappingW GlobalAlloc LoadLibraryA GetProcAddress Process32NextW Process32FirstW CreateToolhelp32Snapshot GlobalUnlock OpenMutexW CreateEventA AreFileApisANSI ReadFile WriteFile GetDiskFreeSpaceW LockFile SetFilePointer GetFullPathNameA SetEndOfFile UnlockFileEx GetTempPathA GetDiskFreeSpaceA GetExitCodeProcess GetFileAttributesA GetFileAttributesExW OpenEventW CreateFileA DeleteFileA UnlockFile LockFileEx GetFileSize FlushFileBuffers LoadLibraryExA PostQueuedCompletionStatus CopyFileExW DeleteFileW WriteFileEx GetTickCount MapViewOfFile FormatMessageA GetSystemTime GetSystemTimeAsFileTime FreeLibrary HeapDestroy HeapCompact FlushViewOfFile OutputDebugStringW HeapSize HeapValidate InitializeCriticalSectionAndSpinCount OutputDebugStringA HeapCreate RaiseException LoadLibraryExW GetLastError HeapReAlloc ReadFileEx CreateThread UnhandledExceptionFilter SetEvent GetFileAttributesW CreateProcessW lstrlenW FindFirstFileExW CreateDirectoryW GetCommandLineW SetUnhandledExceptionFilter SwitchToThread Sleep SetFilePointerEx FindNextFileW FindClose HeapFree GetProcessHeap GetCurrentThread SetThreadStackGuarantee InitializeSListHead GetFinalPathNameByHandleW CreateEventW SetFileInformationByHandle CreateFileW GetFullPathNameW GetFileInformationByHandleEx GetFileInformationByHandle GetTempPathW CreateWaitableTimerExW UnmapViewOfFile CreateMutexW WriteConsoleW GetQueuedCompletionStatusEx GetConsoleOutputCP GetConsoleMode CreateIoCompletionPort SetFileCompletionNotificationModes GetStdHandle CreateMutexA

user32

GetTouchInputInfo ScreenToClient TrackMouseEvent SystemParametersInfoW FlashWindowEx LoadCursorW SetCursor IsIconic GetParent RegisterTouchWindow SetWindowLongPtrW IsWindow KillTimer SetTimer CloseTouchInputHandle GetWindow SetCursorPos UpdateWindow SetWindowRgn GetForegroundWindow IsWindowEnabled SetWindowTextW IsWindowVisible GetWindowTextW SetFocus GetWindowTextLengthW EnableWindow SetParent ShowCursor ClipCursor GetClipCursor MonitorFromRect EnumChildWindows EnumDisplayMonitors GetKeyState ToUnicodeEx GetKeyboardLayout MapVirtualKeyExW GetKeyboardState InvalidateRect ReleaseCapture SetCapture SetWindowLongW GetSystemMenu GetMonitorInfoW SetWindowPlacement ChangeDisplaySettingsExW SetPropW GetSystemMetrics GetWindowPlacement RegisterRawInputDevices DispatchMessageA TranslateMessage GetMessageA AdjustWindowRectEx GetMenu GetWindowLongW InvalidateRgn RegisterWindowMessageA IsProcessDPIAware MonitorFromWindow TrackPopupMenu SetForegroundWindow ClientToScreen GetCursorPos EnableMenuItem CreateIcon CreatePopupMenu CreateMenu AppendMenuW InsertMenuW DrawIconEx GetDC VkKeyScanW SetMenuItemInfoW SendInput CheckMenuItem DrawTextW ReleaseDC FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo ShowWindow SystemParametersInfoA GetActiveWindow DrawMenuBar CreateAcceleratorTableW DestroyAcceleratorTable DestroyIcon DestroyMenu SetMenu RemoveMenu SetWindowPos FindWindowExW MessageBoxW CreateWindowExW RegisterClassExW PostMessageW GetWindowLongPtrW RedrawWindow AdjustWindowRect SetProcessDpiAwarenessContext DestroyWindow TranslateAcceleratorW GetMenuItemInfoW ChangeWindowMessageFilterEx SetWindowDisplayAffinity SendMessageW MonitorFromPoint CloseClipboard GetClipboardData IsClipboardFormatAvailable OpenClipboard SetClipboardData EmptyClipboard DefWindowProcW PostQuitMessage RemoveClipboardFormatListener CallNextHookEx GetAsyncKeyState UnhookWindowsHookEx AddClipboardFormatListener RegisterClassW SetWindowsHookExW RegisterClipboardFormatW MsgWaitForMultipleObjectsEx DispatchMessageW MapVirtualKeyW GetUpdateRect PeekMessageW PostThreadMessageW ValidateRect GetRawInputData GetMessageW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

comctl32

SetWindowSubclass TaskDialogIndirect DefSubclassProc RemoveWindowSubclass

ole32

CoCreateFreeThreadedMarshaler RegisterDragDrop RevokeDragDrop CoTaskMemFree CoTaskMemAlloc OleInitialize CoSetProxyBlanket CoCreateInstance CoUninitialize CoInitializeEx

shlwapi

SHCreateMemStream

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute DwmEnableBlurBehindWindow

shell32

SHGetKnownFolderPath DragFinish Shell_NotifyIconGetRect SHAppBarMessage Shell_NotifyIconW ShellExecuteExW DragQueryFileW ShellExecuteW

oleaut32

SysAllocStringByteLen SysAllocStringLen SetErrorInfo SysStringLen GetErrorInfo SysFreeString SysStringByteLen

gdi32

CreateCompatibleDC CombineRgn CreateDIBSection SelectObject SetTextColor DeleteDC SetBkMode BitBlt DeleteObject GetDeviceCaps CreateRectRgn CreateSolidBrush

advapi32

GetTokenInformation ImpersonateLoggedOnUser DuplicateTokenEx AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegQueryValueExW RegOpenKeyExW SystemFunction036 EventRegister EventSetInformation RegGetValueW EventWriteTransfer EventUnregister RevertToSelf

bcryptprimitives

ProcessPrng

ws2_32

send recv getsockname connect freeaddrinfo WSACleanup WSAStartup getaddrinfo closesocket recvfrom getsockopt WSAGetLastError setsockopt WSASocketW ioctlsocket bind WSAIoctl sendto WSASend

crypt32

CryptUnprotectData CryptProtectData

ncrypt

NCryptFreeObject NCryptOpenKey NCryptOpenStorageProvider NCryptDecrypt

d3d11

D3D11CreateDevice

bcrypt

BCryptGenRandom

iphlpapi

GetAdaptersAddresses

api-ms-win-crt-string-l1-1-0

strncmp strcspn strcmp wcscmp strspn strncpy_s wcslen strlen strcpy_s wcsncmp _wcsicmp

api-ms-win-crt-math-l1-1-0

floorf floor ceil log round __setusermatherr roundf fabs sqrtf log10 _dclass trunc pow

api-ms-win-crt-heap-l1-1-0

realloc _msize malloc _callnewh calloc _set_new_mode free

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_exit _initterm_e __p___argc __p___argv _initterm _seh_filter_exe _cexit _c_exit _get_initial_narrow_environment _register_thread_local_exe_atexit_callback abort terminate _crt_atexit _initialize_narrow_environment _configure_narrow_argv _beginthreadex _register_onexit_function _initialize_onexit_table _wassert _set_app_type _endthreadex exit

api-ms-win-crt-convert-l1-1-0

wcstol _ultow_s _wtoi

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vsnprintf_s __acrt_iob_func __p__commode __stdio_common_vfprintf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/nsExec.dll

advapi32

user32

kernel32

generic

daily-huddle.exe

PE Signature issue

ntdll

kernel32

user32

api-ms-win-core-synch-l1-2-0

comctl32

ole32

shlwapi

dwmapi

shell32

oleaut32

gdi32

advapi32

bcryptprimitives

ws2_32

crypt32

ncrypt

d3d11

bcrypt

iphlpapi

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic