ResourceHacker[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ResourceHacker.exe
Size 5.9MB
Sample260802-c871bacj2x
SHA256 14a44fe31b04fbcc65e94e80016138a2e9fc9bb6dfcea09b98de57f8a22a1240
MD5 4906152af5478455c500941ae234391b
SHA1 d03cc533e283468679406f88fedee17b8fe44903
SHA512 db45680f7b100ece21f547b75e48a5c9527490a8ed7f40101720573f99be968c8dfc9e82c55052a0d804e7b9c01f7399e56752cb5ea9c538effc328867920250
SSDEEP 98304:joWeDMCtt6/CTaSmOTu9eYlga4rN5rQzwGO0jpERaMZK:PN4tC9KrKwGDj6RaaK
TLSH
T134568D03B389943BD02B1B368D67C3B0163BBE206E265D1757E87C4D3F7A185391A69B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ResourceHacker.exe

File Explorer

ResourceHacker.exe

.exe 5.9MB

ResourceHacker.exe

IMPHASH 9c785f0b2e16cc692ad351d120d996f6
SHA256 14a44fe31b04fbcc65e94e80016138a2e9fc9bb6dfcea09b98de57f8a22a1240
MD5 4906152af5478455c500941ae234391b
SHA1 d03cc533e283468679406f88fedee17b8fe44903
SHA512 db45680f7b100ece21f547b75e48a5c9527490a8ed7f40101720573f99be968c8dfc9e82c55052a0d804e7b9c01f7399e56752cb5ea9c538effc328867920250
SSDEEP 98304:joWeDMCtt6/CTaSmOTu9eYlga4rN5rQzwGO0jpERaMZK:PN4tC9KrKwGDj6RaaK
TLSH
T134568D03B389943BD02B1B368D67C3B0163BBE206E265D1757E87C4D3F7A185391A69B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3745576

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

sndPlaySoundW mciSendCommandW timeGetTime mciGetErrorStringW

oleacc

LresultFromObject

shlwapi

PathIsRelativeW

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW GetDefaultPrinterW EnumPrintersW

comdlg32

FindTextW ChooseFontW ChooseColorW GetSaveFileNameW GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo InitCommonControls ImageList_DragMove ImageList_Destroy _TrackMouseEvent ImageList_DragShowNolock ImageList_Add ImageList_GetDragImage FlatSB_SetScrollProp ImageList_Create ImageList_EndDrag ImageList_DrawEx ImageList_SetImageCount FlatSB_GetScrollPos FlatSB_SetScrollPos InitializeFlatSB FlatSB_GetScrollInfo ImageList_Write ImageList_DrawIndirect ImageList_SetBkColor ImageList_GetBkColor ImageList_BeginDrag ImageList_GetIcon ImageList_Replace ImageList_GetImageCount ImageList_DragEnter ImageList_GetIconSize ImageList_SetIconSize ImageList_Read ImageList_DragLeave ImageList_Draw ImageList_Remove ImageList_ReplaceIcon ImageList_SetOverlayImage

shell32

DragFinish SHGetDesktopFolder DragQueryFileW IsUserAnAdmin DragAcceptFiles Shell_NotifyIconW SHAppBarMessage ShellExecuteW

user32

CopyImage MoveWindow SetMenuItemInfoW GetMenuItemInfoW DefFrameProcW SetCaretPos GetCaretPos ScrollWindowEx GetDlgCtrlID FrameRect RegisterWindowMessageW GetMenuStringW FillRect ClipCursor SendMessageA IsClipboardFormatAvailable EnumWindows ShowOwnedPopups GetClassInfoW GetScrollRange SetActiveWindow GetActiveWindow DrawEdge GetKeyboardLayoutList LoadBitmapW EnumChildWindows GetScrollBarInfo UnhookWindowsHookEx SetCapture GetCapture CreatePopupMenu ShowCaret GetMenuItemID DestroyCaret CharLowerBuffW PostMessageW SetWindowLongW IsZoomed SetParent DrawMenuBar GetClientRect IsChild SendDlgItemMessageW IsIconic CallNextHookEx ShowWindow SetForegroundWindow GetWindowTextW GetAsyncKeyState IsDialogMessageW DestroyWindow RegisterClassW EndMenu CharNextW GetFocus GetDC SetFocus ReleaseDC GetClassLongW SetScrollRange DrawTextW PeekMessageA MessageBeep SetClassLongW LockWindowUpdate RemovePropW GetSubMenu DestroyIcon IsWindowVisible GetMenuBarInfo PtInRect DispatchMessageA UnregisterClassW GetTopWindow SendMessageW GetMessageTime NotifyWinEvent GetComboBoxInfo CreateMenu LoadStringW CharLowerW SetWindowRgn SetWindowPos GetMenuItemCount GetSysColorBrush GetWindowDC DrawTextExW EnumClipboardFormats ScrollDC GetScrollInfo SetWindowTextW GetMessageExtraInfo GetSysColor EnableScrollBar TrackPopupMenu keybd_event DrawIconEx GetClassNameW GetMessagePos GetIconInfo SetScrollInfo GetKeyNameTextW GetDesktopWindow SetCursorPos GetCursorPos SetMenu GetMenuState GetMenu SetRect GetKeyState IsRectEmpty CreateIconFromResourceEx ValidateRect IsCharAlphaW GetCursor KillTimer BeginDeferWindowPos WaitMessage TranslateMDISysAccel GetWindowPlacement GetClipboardFormatNameW CreateIconIndirect GetMenuItemRect CreateWindowExW ChildWindowFromPoint GetDCEx PeekMessageW MonitorFromWindow GetUpdateRect SetTimer WindowFromPoint BeginPaint DrawStateW RegisterClipboardFormatW MapVirtualKeyW OffsetRect IsWindowUnicode DispatchMessageW DefMDIChildProcW GetSystemMenu SetScrollPos GetScrollPos InflateRect DrawFocusRect ReleaseCapture LoadCursorW ScrollWindow GetLastActivePopup GetCursorInfo SetMenuInfo GetSystemMetrics CharUpperBuffW ClientToScreen SetClipboardData GetClipboardData SetWindowPlacement GetMonitorInfoW CheckMenuItem CharUpperW DefWindowProcW MapDialogRect GetForegroundWindow ToAscii EnableWindow GetWindowThreadProcessId RedrawWindow EndPaint MsgWaitForMultipleObjectsEx LoadKeyboardLayoutW ActivateKeyboardLayout GetParent CreateCaret MonitorFromRect InsertMenuItemW GetPropW MessageBoxW SetPropW UpdateWindow MsgWaitForMultipleObjects DestroyMenu SetWindowsHookExW GetDoubleClickTime EmptyClipboard GetDlgItem AdjustWindowRectEx IsWindow DrawIcon EnumThreadWindows InvalidateRect SetKeyboardState GetKeyboardState ScreenToClient DrawFrameControl IsCharAlphaNumericW BringWindowToTop SetCursor CreateIcon RemoveMenu SubtractRect CreateDialogIndirectParamW GetKeyboardLayoutNameW OpenClipboard TranslateMessage MapWindowPoints EnumDisplayMonitors CallWindowProcW CountClipboardFormats CloseClipboard DestroyCursor PostQuitMessage ShowScrollBar LoadImageW EnableMenuItem DeferWindowPos HideCaret EndDeferWindowPos LoadMenuIndirectW FindWindowExW MonitorFromPoint LoadIconW SystemParametersInfoW GetWindow GetWindowLongW GetWindowRect InsertMenuW IsWindowEnabled IsDialogMessageA FindWindowW DeleteMenu GetKeyboardLayout

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

oleaut32

SafeArrayPutElement GetErrorInfo VariantInit VariantClear SysFreeString SafeArrayAccessData SysReAllocStringLen SafeArrayCreate SafeArrayGetElement SysAllocStringLen SafeArrayUnaccessData SafeArrayPtrOfIndex VariantCopy SafeArrayGetUBound SafeArrayGetLBound VariantCopyInd VariantChangeType

wtsapi32

WTSUnRegisterSessionNotification WTSRegisterSessionNotification

advapi32

RegSetValueExW RegEnumKeyExW RegFlushKey RegQueryValueExW RegDeleteKeyW RegCloseKey RegCreateKeyExW RegQueryInfoKeyW RegOpenKeyExW

msvcrt

memcpy memset

kernel32

GetFileTime SetFileTime GetACP CloseHandle LocalFree GetCurrentProcessId SizeofResource QueryPerformanceFrequency IsValidCodePage IsDebuggerPresent GetFullPathNameW VirtualFree GetProcessHeap ExitProcess HeapAlloc GetCPInfoExW GlobalSize RtlUnwind GetCPInfo EnumSystemLocalesW GetStdHandle GetModuleHandleW FreeLibrary HeapDestroy ReadFile GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW CreateThread CompareStringW MapViewOfFile CreateMutexW LoadLibraryA ResetEvent MulDiv FreeResource GetVersion RaiseException MoveFileW GlobalAddAtomW FormatMessageW SwitchToThread GetExitCodeThread WriteConsoleW GetCurrentThread LoadLibraryExW LockResource GetCurrentThreadId UnhandledExceptionFilter VirtualQuery GlobalFindAtomW VirtualQueryEx GlobalFree Sleep EnterCriticalSection SetFilePointer LoadResource SuspendThread GetTickCount WritePrivateProfileStringW GetFileSize GetTempFileNameW GetStartupInfoW GlobalDeleteAtom GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW InitializeCriticalSection GetThreadPriority GetCurrentProcess SetThreadPriority GlobalLock VirtualAlloc GetTempPathW GetCommandLineW GetSystemInfo LeaveCriticalSection GetProcAddress ResumeThread GetVersionExW VerifyVersionInfoW HeapCreate LCMapStringW GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage UnmapViewOfFile GlobalHandle lstrlenW CompareStringA QueryPerformanceCounter SetEndOfFile lstrcmpW HeapFree WideCharToMultiByte FindClose MultiByteToWideChar LoadLibraryW SetEvent CreateFileW GetLocaleInfoW EnumResourceNamesW DeleteFileW FreeConsole GetLocalTime WaitForSingleObject WriteFile CreateFileMappingW ExitThread DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode IsValidLocale TlsSetValue CreateDirectoryW GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW CreateEventW GetPrivateProfileStringW WaitForMultipleObjectsEx GetThreadLocale SetThreadLocale

ole32

RevokeDragDrop CreateDataAdviseHolder CoCreateInstance CoUninitialize OleGetClipboard ReleaseStgMedium OleSetClipboard RegisterDragDrop IsEqualGUID CreateStreamOnHGlobal OleInitialize OleUninitialize CoInitialize CoDisconnectObject CoTaskMemFree CoTaskMemAlloc StringFromCLSID DoDragDrop

gdi32

Pie SetBkMode GetRandomRgn CreateCompatibleBitmap GetEnhMetaFileHeader RectVisible AngleArc TranslateCharsetInfo ResizePalette SetAbortProc SetTextColor GetTextColor StretchBlt RoundRect SelectClipRgn RestoreDC SetRectRgn GetTextMetricsW GetWindowOrgEx CreatePalette CreateDCW CreateICW CreatePen PolyBezierTo GetStockObject CreateSolidBrush Polygon MoveToEx PlayEnhMetaFile Ellipse StartPage GetBitmapBits StartDocW GetSystemPaletteEntries GetEnhMetaFileBits SetBitmapBits GetEnhMetaFilePaletteEntries CreatePenIndirect SetMapMode GetMapMode CreateFontIndirectW PolyBezier ExtCreatePen LPtoDP EndDoc GetObjectW GetCurrentObject GetWinMetaFileBits SetROP2 GetEnhMetaFileDescriptionW ArcTo Arc CreateRectRgnIndirect TextOutW SelectPalette ExcludeClipRect MaskBlt SetWindowOrgEx CreatePatternBrush EndPage DeleteEnhMetaFile Chord SetDIBits SetViewportOrgEx CreateRectRgn RealizePalette SetDIBColorTable GetDIBColorTable CreateBrushIndirect PatBlt SetEnhMetaFileBits Rectangle SaveDC DeleteDC BitBlt FrameRgn GetDeviceCaps GetTextExtentPoint32W GetClipBox Polyline IntersectClipRect CreateBitmap CombineRgn SetWinMetaFileBits CreateDIBitmap GetStretchBltMode CreateDIBSection SetStretchBltMode GetDIBits LineTo GetRgnBox EnumFontsW SetWindowExtEx CreateHalftonePalette SelectObject DeleteObject ExtFloodFill UnrealizeObject CopyEnhMetaFileW OffsetRgn SetBkColor GetBkColor CreateCompatibleDC GetBrushOrgEx GetCurrentPositionEx SetDCPenColor GetNearestPaletteIndex GetTextExtentPointW ExtTextOutW SetBrushOrgEx GetPixel GdiFlush SetViewportExtEx SetPixel PolyPolyline EnumFontFamiliesExW StretchDIBits GetPaletteEntries

Name

.text

Size

3.6MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

236KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

119B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

84B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

93B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

301KB

Virtual Size

301KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ResourceHacker.exe

winmm

oleacc

shlwapi

winspool.drv

comdlg32

comctl32

shell32

user32

version

oleaut32

wtsapi32

advapi32

msvcrt

kernel32

ole32

gdi32

generic