BlazeMacro[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
BlazeMacro.exe
Size 530KB
Sample260622-e2q5bshw5z
SHA256 a80c78d48ebf1e16d477c6fb148f56446d9c510f8e842700cea504a539295f22
MD5 501f77455437f07082790c2261eae660
SHA1 bd16d7d69817f90c731fae9d4e2d9d6ab73decf3
SHA512 75f47c85fc1ade0f521137cdfd4ed8335c8292b6424cb074fdca6f01cebc2b1219c0aa1029650fe80fa3cd52801c0e3c20901bd7b050021349efeb7c551f46b7
SSDEEP 6144:fjjGC50mUINYghv8lHVlF/qKHf+5OuRaxy5xJFyg1beXj6K6Amoau8ymCb9Jt/oM:fjZ50mUIPB8lVlQK/+l+F6DGRg8O
TLSH
T146C4B02CFA27CFA3C3E614BA0D97CD0263E0B74DB756B7CF9C2296A859114C5856328D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BlazeMacro.exe

File Explorer

BlazeMacro.exe

.exe 530KB

BlazeMacro.exe

IMPHASH 60c94e3b5dadbebeeb289059d83577e7
SHA256 a80c78d48ebf1e16d477c6fb148f56446d9c510f8e842700cea504a539295f22
MD5 501f77455437f07082790c2261eae660
SHA1 bd16d7d69817f90c731fae9d4e2d9d6ab73decf3
SHA512 75f47c85fc1ade0f521137cdfd4ed8335c8292b6424cb074fdca6f01cebc2b1219c0aa1029650fe80fa3cd52801c0e3c20901bd7b050021349efeb7c551f46b7
SSDEEP 6144:fjjGC50mUINYghv8lHVlF/qKHf+5OuRaxy5xJFyg1beXj6K6Amoau8ymCb9Jt/oM:fjZ50mUIPB8lVlQK/+l+F6DGRg8O
TLSH
T146C4B02CFA27CFA3C3E614BA0D97CD0263E0B74DB756B7CF9C2296A859114C5856328D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

52452

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\redst\source\repos\Blaze Macro\x64\Release\Blaze Macro.pdb

kernel32

LockResource QueryPerformanceFrequency DeleteFileA GlobalAlloc Process32FirstW CloseHandle GetSystemInfo WritePrivateProfileStringA CreateThread LoadResource FindResourceW GetCurrentThread GetModuleHandleW CreateDirectoryA GetPrivateProfileIntA QueryPerformanceCounter GlobalUnlock GetComputerNameA Process32NextW GetStartupInfoW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId GetFileAttributesA GetLastError CopyFileA Sleep MultiByteToWideChar CreateToolhelp32Snapshot OpenProcess ReleaseMutex GetVolumeInformationA TerminateThread CreateMutexA SetThreadPriority SetProcessAffinityMask GetCurrentProcess SetPriorityClass SizeofResource GetModuleFileNameA GlobalLock SetThreadAffinityMask

user32

MessageBoxA SetWindowTextA GetWindowTextA SetWindowsHookExA EmptyClipboard CallWindowProcA CloseClipboard DestroyIcon SetTimer DispatchMessageW OpenClipboard GetAsyncKeyState IsWindow ShowWindow TrackPopupMenu CreatePopupMenu GetSystemMetrics CallNextHookEx SendMessageW SetWindowRgn keybd_event SetWindowPos GetDC DestroyWindow GetWindowRect MapVirtualKeyW GetMessageW InvalidateRect UnhookWindowsHookEx DefWindowProcA DestroyMenu CreateWindowExA SetLayeredWindowAttributes SetFocus TranslateMessage LoadIconW LoadCursorW mouse_event SetCapture SetClipboardData AppendMenuA GetClientRect UpdateLayeredWindow UnregisterClassA DrawIconEx PostQuitMessage GetParent SetWindowLongPtrA RegisterClassExA UpdateWindow ReleaseCapture SetForegroundWindow GetForegroundWindow EndPaint BeginPaint GetCursorPos ReleaseDC LoadImageW

gdi32

SelectObject BitBlt CreateDIBSection CreateCompatibleDC CreateRoundRectRgn AddFontMemResourceEx CreateFontA RemoveFontMemResourceEx SetTextColor SetBkMode SetBkColor DeleteObject CreateSolidBrush DeleteDC

advapi32

RegDeleteKeyA RegCreateKeyExA RegSetValueExA RegCloseKey

shell32

SHGetFolderPathA ShellExecuteA SHChangeNotify Shell_NotifyIconA

ole32

CoCreateInstance CoInitialize CoUninitialize

winmm

timeEndPeriod timeBeginPeriod

winhttp

WinHttpCloseHandle WinHttpSendRequest WinHttpConnect WinHttpReadData WinHttpQueryHeaders WinHttpOpen WinHttpReceiveResponse WinHttpOpenRequest

gdiplus

GdipPrivateAddMemoryFont GdipDeletePrivateFontCollection GdipSetStringFormatAlign GdipNewPrivateFontCollection GdipCreatePen1 GdipDeletePen GdipDeleteFont GdipDeleteStringFormat GdipDeleteGraphics GdipAddPathArc GdiplusStartup GdiplusShutdown GdipCreateStringFormat GdipDeleteFontFamily GdipResetClip GdipCreateFontFamilyFromName GdipCreateLineBrushI GdipSetClipRect GdipDeleteBrush GdipAlloc GdipDeletePath GdipSetSmoothingMode GdipCreatePath GdipSetStringFormatLineAlign GdipCreateFont GdipSetPenLineCap197819 GdipCreateSolidFill GdipFillPath GdipDrawLineI GdipGraphicsClear GdipClosePathFigure GdipFree GdipDrawPath GdipCreateFromHDC GdipSetTextRenderingHint GdipMeasureString GdipFillRectangleI GdipDrawString

vcruntime140

memset __current_exception_context __current_exception __C_specific_handler strrchr strchr strstr memcpy

api-ms-win-crt-stdio-l1-1-0

fclose __stdio_common_vfprintf _set_fmode fgets __p__commode fopen __stdio_common_vsprintf __stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

strcpy _wcsicmp strlen strncpy _stricmp

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _register_onexit_function _initialize_onexit_table _c_exit _seh_filter_exe _set_app_type _register_thread_local_exe_atexit_callback terminate _cexit _configure_narrow_argv _exit exit _initialize_narrow_environment _initterm_e _initterm _get_narrow_winmain_command_line

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode