blender-launcher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

blender-launcher.exe
Size

1.0MB
MD5

ada265067aa8ed005d1c6b735f37bcab
SHA1

fc4ac38d538a214f630911469d3574e12cfea4b3
SHA256

7bb1fe97b8e4a4bad1a27d3b5279a985427d4e540d8b4449da75343730deed3f
SHA512

d0db09c3524bf0ae7df05182f2611ce66106a2648d7b6b3d5f2a7595a0117e831fbce02f5e8c3bc7f7da514048b929bc3ed2620419ff92f354b33d479539ac6f
SSDEEP

3072:Lude2fzv3EwpZqS5t+L33yzwWVXzh47YIsa:g51V6sa

Score

1^/10

Malware Config

Signatures

Files

blender-launcher.exe
.exe windows x64

768e434526166f04d8dd6e3e79409738

Code Sign

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11/09/2018, 09:26

Not After

11/09/2023, 09:26

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

43:7f:f9:cb:5a:26:48:eb:52:2c:a1:0e:08:7b:4a:b4
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

11/11/2020, 13:33

Not After

11/11/2023, 13:33

Subject

CN=Stichting Blender Foundation,O=Stichting Blender Foundation,L=Amsterdam,ST=Noord-Holland,C=NL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24/06/2016, 20:44

Not After

24/06/2031, 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11/09/2018, 09:26

Not After

11/09/2023, 09:26

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:1c:bc:8c:5c:3e:5f:6f:24:fd:3a:4f:e4:88:d6:28
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

10/09/2021, 16:35

Not After

08/09/2031, 16:35

Subject

CN=SSL.com Timestamping Unit 2021,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a7:b1:e8:92:ee:21:2e:01:02:0f:c0:5c:e3:73:60:68:41:ef:93:9e:a6:69:8a:73:50:4d:7e:c3:67:b6:2a:ff
Signer

Actual PE Digest

a7:b1:e8:92:ee:21:2e:01:02:0f:c0:5c:e3:73:60:68:41:ef:93:9e:a6:69:8a:73:50:4d:7e:c3:67:b6:2a:ff

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Stichting Blender Foundation,O=Stichting Blender Foundation,L=Amsterdam,ST=Noord-Holland,C=NL

05/10/2022, 01:00
Valid: true

Chain 1

CN=Stichting Blender Foundation,O=Stichting Blender Foundation,L=Amsterdam,ST=Noord-Holland,C=NL

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Chain 2

CN=Stichting Blender Foundation,O=Stichting Blender Foundation,L=Amsterdam,ST=Noord-Holland,C=NL

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

api-ms-win-core-path-l1-1-0

PathCchCombine
PathCchRemoveFileSpec

kernel32

GetModuleHandleW
RtlLookupFunctionEntry
GetStartupInfoW
CloseHandle
GetLastError
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetModuleFileNameW
lstrlenW
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
RtlCaptureContext
QueryPerformanceCounter
GetCurrentProcessId
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId

shell32

CommandLineToArgvW

vcruntime140

memset
__current_exception
__C_specific_handler
__current_exception_context

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__p__commode
_set_fmode

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_crt_atexit
terminate
_cexit
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_initialize_onexit_table
_set_app_type
_c_exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

768e434526166f04d8dd6e3e79409738

Code Sign

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1cCertificate

Key Usages

43:7f:f9:cb:5a:26:48:eb:52:2c:a1:0e:08:7b:4a:b4Certificate

Extended Key Usages

Key Usages

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1cCertificate

Key Usages

5f:1c:bc:8c:5c:3e:5f:6f:24:fd:3a:4f:e4:88:d6:28Certificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

a7:b1:e8:92:ee:21:2e:01:02:0f:c0:5c:e3:73:60:68:41:ef:93:9e:a6:69:8a:73:50:4d:7e:c3:67:b6:2a:ffSigner

Signature Validations

Verification

05/10/2022, 01:00 Valid: true

Chain 1

Chain 2

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-core-path-l1-1-0

kernel32

shell32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 456B

.rsrc Size: 1.0MB - Virtual size: 1.0MB

.reloc Size: 512B - Virtual size: 44B

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

43:7f:f9:cb:5a:26:48:eb:52:2c:a1:0e:08:7b:4a:b4
Certificate

64:33:51:d3:c7:38:9f:08
Certificate

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

5f:1c:bc:8c:5c:3e:5f:6f:24:fd:3a:4f:e4:88:d6:28
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

a7:b1:e8:92:ee:21:2e:01:02:0f:c0:5c:e3:73:60:68:41:ef:93:9e:a6:69:8a:73:50:4d:7e:c3:67:b6:2a:ff
Signer

05/10/2022, 01:00
Valid: true

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 456B

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

.reloc
Size: 512B - Virtual size: 44B