hutepkeazyauxbqsiykw[.]dll[.]exe

General

Target
hutepkeazyauxbqsiykw.dll.exe
Size 3.8MB
Sample260816-qeq2laydmd
SHA256 655463f1d430d92a8f1d3491f4933da355b9f28efa368bf21258ed25e0f86195
MD5 b9430aaa08ac926afdc14b6712df98c4
SHA1 8e27b7c1459714501637301dea3d723ff7c583cd
SHA512 f3229df46b51268942e3f8ded94e07595c11254455097e4bde46ab0543e029dce5c07aa1e95994416fb6247b3a682ee66e6817e2e7af652813d69f4112e0c842
SSDEEP 49152:X8JY14H9AIK4soeI/K/0yyqBW9SwP1gPnGL:+MIKhlPGL
TLSH
T19E062C3227668A7AF57156B1293C992E542978710774B8CBD2984C3DDCB8AC30F36F27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hutepkeazyauxbqsiykw.dll.exe

File Explorer

hutepkeazyauxbqsiykw.dll.exe

.exe 3.8MB

hutepkeazyauxbqsiykw.dll.exe

IMPHASH 545ab5f5e725852666113bb96037b688
SHA256 655463f1d430d92a8f1d3491f4933da355b9f28efa368bf21258ed25e0f86195
MD5 b9430aaa08ac926afdc14b6712df98c4
SHA1 8e27b7c1459714501637301dea3d723ff7c583cd
SHA512 f3229df46b51268942e3f8ded94e07595c11254455097e4bde46ab0543e029dce5c07aa1e95994416fb6247b3a682ee66e6817e2e7af652813d69f4112e0c842
SSDEEP 49152:X8JY14H9AIK4soeI/K/0yyqBW9SwP1gPnGL:+MIKhlPGL
TLSH
T19E062C3227668A7AF57156B1293C992E542978710774B8CBD2984C3DDCB8AC30F36F27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

2098416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\repos\main\SSH2\Release\pdbs\totermc.pdb

kernel32

SetConsoleTextAttribute GetConsoleScreenBufferInfo FillConsoleOutputAttribute CreateConsoleScreenBuffer SetConsoleTitleW SetConsoleMode SetConsoleCursorInfo SetConsoleCtrlHandler GetNumberOfConsoleInputEvents ReadConsoleInputW ScrollConsoleScreenBufferW SetConsoleCursorPosition GetConsoleCursorInfo SetConsoleActiveScreenBuffer FillConsoleOutputCharacterW ReadConsoleOutputW GetConsoleMode OutputDebugStringW FormatMessageW GetStringTypeW EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount LCMapStringW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent WaitForSingleObjectEx GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwind LoadLibraryExW ExitThread FreeLibraryAndExitThread HeapAlloc HeapReAlloc HeapFree GetCommandLineA GetCommandLineW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapSize GetProcessHeap FindFirstFileExW IsValidCodePage CreateFileW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle SetFilePointerEx FlushFileBuffers SetFilePointer SetEndOfFile CancelIo GetOverlappedResult Sleep SwitchToFiber DeleteFiber CreateFiberEx ConvertFiberToThread ConvertThreadToFiber FindNextFileW FindClose Beep GetEnvironmentVariableW GetConsoleTitleW GetConsoleWindow GetModuleHandleA LoadLibraryW GetSystemDirectoryW LocalFree lstrlenW InterlockedIncrement WaitForMultipleObjectsEx InterlockedExchangeAdd QueryPerformanceFrequency FileTimeToLocalFileTime FileTimeToSystemTime MulDiv GetLargestConsoleWindowSize SetConsoleScreenBufferSize VerSetConditionMask GetCurrentProcess FreeLibrary CompareStringW RtlCaptureStackBackTrace CreateFileA OutputDebugStringA MultiByteToWideChar WideCharToMultiByte GetProcAddress GetModuleHandleW LeaveCriticalSection EnterCriticalSection InitializeCriticalSection ReadFile ReadConsoleW IsDBCSLeadByteEx WriteFile WriteConsoleW GetFileSizeEx GetThreadLocale GetLocaleInfoW GetCPInfoExW GetOEMCP GetACP GetConsoleOutputCP GetConsoleCP WaitForMultipleObjects ReleaseMutex InterlockedExchange CreateThread CreateMutexW GetFileAttributesW GetModuleFileNameW GetModuleHandleExW SwitchToThread InterlockedCompareExchange SetEvent CreateProcessW WaitForSingleObject ExitProcess GetCurrentProcessId GetModuleFileNameA DebugBreak IsDebuggerPresent SetConsoleWindowInfo GetFileType DeleteCriticalSection DecodePointer ResetEvent RaiseException CloseHandle GetLastError CreateEventW GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetStdHandle GetEnvironmentStringsW SetLastError

user32

DestroyIcon GetPropA RemovePropA GetDC ReleaseDC CallWindowProcW wsprintfW MessageBeep GetWindowRect SetWindowPos IntersectRect GetMonitorInfoW MonitorFromRect EnumWindows GetWindowLongW GetWindowThreadProcessId GetUserObjectInformationW GetProcessWindowStation wsprintfA MessageBoxA AllowSetForegroundWindow

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey CryptGenRandom

gdi32

GetDeviceCaps DeleteDC

Name

.text

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

928KB

Virtual Size

928KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

38KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

153B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

604KB

Virtual Size

604KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

hutepkeazyauxbqsiykw.dll.exe

kernel32

user32

advapi32

gdi32

generic