sv_D1_81host[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
sv_D1_81host.exe
Size 1.1MB
Sample261102-t5s6esdx3k
SHA256 e6a45968fddbd429131f0a8ed21bf3e5c2f55bf07585f6d77fa06aaa8eca624c
MD5 ad4621dad367c6eb4483a84073067157
SHA1 4216b2913e8c5b2ccc7a09efa4382b6e0ab1221b
SHA512 3bb6d5e00ed78083f5d532188103056beb5747d4975682ece38fa503c68551e8ce66f68653cc250fbe4470a80e5a929073829c98588463f1176382bda8e055be
SSDEEP 24576:BqOupurflSPvDCh0lhSMXlT3T9cvMVXdhuzfOUc2fq3zWiN3mr3x3q:scfCvDflMzWcq3z/N3mr3x3q
TLSH
T18235B010B4E1C072D4B80070626D776F693D1D64072819EBB7EC19BDAFF01E26AF6DA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sv_D1_81host.exe

File Explorer

sv_D1_81host.exe

.exe 1.1MB

sv_D1_81host.exe

IMPHASH aeb10ded9aab2ee5a8c5f0c39021c0ad
SHA256 e6a45968fddbd429131f0a8ed21bf3e5c2f55bf07585f6d77fa06aaa8eca624c
MD5 ad4621dad367c6eb4483a84073067157
SHA1 4216b2913e8c5b2ccc7a09efa4382b6e0ab1221b
SHA512 3bb6d5e00ed78083f5d532188103056beb5747d4975682ece38fa503c68551e8ce66f68653cc250fbe4470a80e5a929073829c98588463f1176382bda8e055be
SSDEEP 24576:BqOupurflSPvDCh0lhSMXlT3T9cvMVXdhuzfOUc2fq3zWiN3mr3x3q:scfCvDflMzWcq3z/N3mr3x3q
TLSH
T18235B010B4E1C072D4B80070626D776F693D1D64072819EBB7EC19BDAFF01E26AF6DA6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

229661

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\PC\Desktop\Client\Release\Increase.pdb

d3d9

Direct3DCreate9

kernel32

GetOEMCP MultiByteToWideChar GlobalLock WideCharToMultiByte GlobalUnlock GlobalAlloc GlobalFree QueryPerformanceFrequency QueryPerformanceCounter VirtualAllocEx WriteProcessMemory LoadLibraryA GetProcAddress CreateRemoteThread WaitForSingleObject VirtualFreeEx Sleep OpenProcess GetModuleHandleA GetCurrentProcess CloseHandle GetCurrentProcessId GetLastError WriteFile GetStdHandle GetConsoleMode CreateToolhelp32Snapshot Process32First GetCommandLineA GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc FlushFileBuffers LCMapStringW GetFileSizeEx GetConsoleOutputCP ReadConsoleW SetFilePointerEx GetFileType HeapFree HeapAlloc GetModuleFileNameW ExitProcess GetModuleHandleExW ReadFile LoadLibraryExW FreeLibrary GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle CreateFileW HeapSize SetEndOfFile Process32Next GetCurrentThreadId WriteConsoleW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetSystemTimeAsFileTime GetModuleHandleW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlUnwind RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree

user32

DispatchMessageA TranslateMessage PeekMessageA UnregisterClassA DestroyWindow UpdateWindow ShowWindow CreateWindowExA RegisterClassExA DefWindowProcA PostQuitMessage SetWindowPos GetWindowRect IsWindowUnicode ReleaseCapture SetCapture GetCapture TrackMouseEvent GetMessageExtraInfo GetClientRect ScreenToClient GetCursorPos OpenClipboard ClientToScreen GetForegroundWindow GetKeyState LoadCursorA SetCursor SetClipboardData EmptyClipboard CloseClipboard GetClipboardData SetCursorPos

advapi32

AdjustTokenPrivileges OpenProcessToken LookupPrivilegeValueA

imm32

ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext ImmGetContext