hutepkeazyauxbqsiykw[.]dll[.]exe

General

Target
hutepkeazyauxbqsiykw.dll.exe
Size 3.8MB
Sample260816-rfrj7azbme
SHA256 6c3b4d7c73d4452dfe33a364cb89ff3b768589012dae26c38a28101ff83c91a2
MD5 9233a89db4e2849be346477879db9449
SHA1 fe8905f6a144e2954ba10a42c5382637317ea764
SHA512 8ce298502d59ae81a11f0aef3ab56cb31b6e28c19098b62f94b2f7c5e54baf520501b2d763ecd4b41bb134890b5ceb657c6c0101553c70fd376f764a38c9330a
SSDEEP 49152:X8JY14H9AIK4soeI/K/0yyqBW9SwP1gPnG9:+MIKhlPG9
TLSH
T121062C3227668A7AF57156B1293C992E542978710774B8CBD2984C3DDCB8AC30F36F27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hutepkeazyauxbqsiykw.dll.exe

File Explorer

hutepkeazyauxbqsiykw.dll.exe

.exe 3.8MB

hutepkeazyauxbqsiykw.dll.exe

IMPHASH 545ab5f5e725852666113bb96037b688
SHA256 6c3b4d7c73d4452dfe33a364cb89ff3b768589012dae26c38a28101ff83c91a2
MD5 9233a89db4e2849be346477879db9449
SHA1 fe8905f6a144e2954ba10a42c5382637317ea764
SHA512 8ce298502d59ae81a11f0aef3ab56cb31b6e28c19098b62f94b2f7c5e54baf520501b2d763ecd4b41bb134890b5ceb657c6c0101553c70fd376f764a38c9330a
SSDEEP 49152:X8JY14H9AIK4soeI/K/0yyqBW9SwP1gPnG9:+MIKhlPG9
TLSH
T121062C3227668A7AF57156B1293C992E542978710774B8CBD2984C3DDCB8AC30F36F27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

2098416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\repos\main\SSH2\Release\pdbs\totermc.pdb

kernel32

SetConsoleTextAttribute GetConsoleScreenBufferInfo FillConsoleOutputAttribute CreateConsoleScreenBuffer SetConsoleTitleW SetConsoleMode SetConsoleCursorInfo SetConsoleCtrlHandler GetNumberOfConsoleInputEvents ReadConsoleInputW ScrollConsoleScreenBufferW SetConsoleCursorPosition GetConsoleCursorInfo SetConsoleActiveScreenBuffer FillConsoleOutputCharacterW ReadConsoleOutputW GetConsoleMode OutputDebugStringW FormatMessageW GetStringTypeW EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount LCMapStringW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent WaitForSingleObjectEx GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwind LoadLibraryExW ExitThread FreeLibraryAndExitThread HeapAlloc HeapReAlloc HeapFree GetCommandLineA GetCommandLineW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapSize GetProcessHeap FindFirstFileExW IsValidCodePage CreateFileW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle SetFilePointerEx FlushFileBuffers SetFilePointer SetEndOfFile CancelIo GetOverlappedResult Sleep SwitchToFiber DeleteFiber CreateFiberEx ConvertFiberToThread ConvertThreadToFiber FindNextFileW FindClose Beep GetEnvironmentVariableW GetConsoleTitleW GetConsoleWindow GetModuleHandleA LoadLibraryW GetSystemDirectoryW LocalFree lstrlenW InterlockedIncrement WaitForMultipleObjectsEx InterlockedExchangeAdd QueryPerformanceFrequency FileTimeToLocalFileTime FileTimeToSystemTime MulDiv GetLargestConsoleWindowSize SetConsoleScreenBufferSize VerSetConditionMask GetCurrentProcess FreeLibrary CompareStringW RtlCaptureStackBackTrace CreateFileA OutputDebugStringA MultiByteToWideChar WideCharToMultiByte GetProcAddress GetModuleHandleW LeaveCriticalSection EnterCriticalSection InitializeCriticalSection ReadFile ReadConsoleW IsDBCSLeadByteEx WriteFile WriteConsoleW GetFileSizeEx GetThreadLocale GetLocaleInfoW GetCPInfoExW GetOEMCP GetACP GetConsoleOutputCP GetConsoleCP WaitForMultipleObjects ReleaseMutex InterlockedExchange CreateThread CreateMutexW GetFileAttributesW GetModuleFileNameW GetModuleHandleExW SwitchToThread InterlockedCompareExchange SetEvent CreateProcessW WaitForSingleObject ExitProcess GetCurrentProcessId GetModuleFileNameA DebugBreak IsDebuggerPresent SetConsoleWindowInfo GetFileType DeleteCriticalSection DecodePointer ResetEvent RaiseException CloseHandle GetLastError CreateEventW GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetStdHandle GetEnvironmentStringsW SetLastError

user32

DestroyIcon GetPropA RemovePropA GetDC ReleaseDC CallWindowProcW wsprintfW MessageBeep GetWindowRect SetWindowPos IntersectRect GetMonitorInfoW MonitorFromRect EnumWindows GetWindowLongW GetWindowThreadProcessId GetUserObjectInformationW GetProcessWindowStation wsprintfA MessageBoxA AllowSetForegroundWindow

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey CryptGenRandom

gdi32

GetDeviceCaps DeleteDC

Name

.text

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

928KB

Virtual Size

928KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

38KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

153B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

604KB

Virtual Size

604KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

hutepkeazyauxbqsiykw.dll.exe

kernel32

user32

advapi32

gdi32

generic