BlurAutoClicker[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
BlurAutoClicker.exe
Size 13.8MB
Sample260722-chrkmsxcph
SHA256 133c1a9ad80b7e35127ed6a771141982e1d2f5c0a5948ca0246a6231d6c1eabe
MD5 b7dadd0b32c6015a790dc442fd104cae
SHA1 70b255a3b141ef4e4c6fddad3360a8086320fc37
SHA512 c8d840792a8ad9b9fbebc541c4688d204e49035ff4e216f38d95adc45b33184a81ed88cab5a7a7c7c9276003a3f7cf88f44ff4a5b10edf74238c313e473c9409
SSDEEP 98304:y7yHGkH1SDQwYdVNm30W5Q/bRK0Wu++5naPBpfrGquO/aSj829U+Zri+mKs+G6Nb:skH1SDQwYdVNm30Wwb3cPD7aW9Uw+Y
TLSH
T157E618116A5B99ACD0DAC8F082464A735D2130EB0A36B9BF45C461F83F6EFF06B39355
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BlurAutoClicker.exe

File Explorer

BlurAutoClicker.exe

.exe 13.8MB

BlurAutoClicker.exe

IMPHASH 246d975361f1719396d748128fbb0ff2
SHA256 133c1a9ad80b7e35127ed6a771141982e1d2f5c0a5948ca0246a6231d6c1eabe
MD5 b7dadd0b32c6015a790dc442fd104cae
SHA1 70b255a3b141ef4e4c6fddad3360a8086320fc37
SHA512 c8d840792a8ad9b9fbebc541c4688d204e49035ff4e216f38d95adc45b33184a81ed88cab5a7a7c7c9276003a3f7cf88f44ff4a5b10edf74238c313e473c9409
SSDEEP 98304:y7yHGkH1SDQwYdVNm30W5Q/bRK0Wu++5naPBpfrGquO/aSj829U+Zri+mKs+G6Nb:skH1SDQwYdVNm30Wwb3cPD7aW9Uw+Y
TLSH
T157E618116A5B99ACD0DAC8F082464A735D2130EB0A36B9BF45C461F83F6EFF06B39355
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9825904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

BlurAutoClicker.pdb

bcryptprimitives

ProcessPrng

kernel32

FlsAlloc GetSystemTimeAsFileTime GetModuleHandleW FlsGetValue FlsSetValue FlsFree GetCurrentThreadId SleepConditionVariableSRW EncodePointer SwitchToThread HeapReAlloc GetUserDefaultUILanguage LoadLibraryA LCIDToLocaleName GetModuleHandleA WakeAllConditionVariable Sleep SetEnvironmentVariableW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW LoadLibraryW AddVectoredExceptionHandler FreeEnvironmentStringsW GetEnvironmentStringsW RtlVirtualUnwind RtlCaptureContext QueryPerformanceCounter QueryPerformanceFrequency GetProcAddress lstrlenW InitializeSListHead CompareStringOrdinal WaitForSingleObject SleepEx SetLastError SetUnhandledExceptionFilter SetHandleInformation RtlLookupFunctionEntry GetSystemDirectoryW GetWindowsDirectoryW GetCurrentProcess DuplicateHandle SetThreadStackGuarantee ExitProcess GetSystemInfo WideCharToMultiByte GetSystemTimePreciseAsFileTime ReleaseMutex GetModuleFileNameW MultiByteToWideChar SetWaitableTimer RaiseException FindNextFileW GetTempPathW GetFileAttributesW CreateWaitableTimerExW GetConsoleOutputCP GetConsoleMode WriteConsoleW DeviceIoControl DeleteFileW CreateSymbolicLinkW GetFinalPathNameByHandleW CreateMutexA FindFirstFileExW CreateDirectoryW GetStdHandle LoadLibraryExA CreateProcessW GetFileInformationByHandleEx QueryThreadCycleTime GetFileInformationByHandle SetFileInformationByHandle SetFileTime GetCurrentThread GetCurrentProcessId GetFullPathNameW WriteFileEx ReadFileEx RtlUnwindEx FormatMessageW DeleteCriticalSection GetLastError CreateFileW InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InitOnceExecuteOnce TlsAlloc TlsGetValue TlsSetValue OutputDebugStringA OutputDebugStringW LoadLibraryExW FreeLibrary InitializeCriticalSectionEx HeapAlloc CloseHandle RtlPcToFileHeader HeapFree CreateThread FindClose GetProcessHeap WaitForSingleObjectEx CancelIoEx SetFileCompletionNotificationModes CreateIoCompletionPort GetQueuedCompletionStatusEx WriteFile ReadFile PostQueuedCompletionStatus GetOverlappedResult

advapi32

EventUnregister SystemFunction036 EventRegister EventWriteTransfer EventSetInformation RegQueryValueExW RegOpenKeyExW RegSetValueExW RegCloseKey RegDeleteValueW RegGetValueW

oleaut32

SetErrorInfo SysStringLen GetErrorInfo SysFreeString

ntdll

NtCreateNamedPipeFile NtWriteFile NtCancelIoFileEx NtOpenFile NtDeviceIoControlFile NtSetTimerResolution NtCreateFile RtlNtStatusToDosError RtlGetVersion NtReadFile

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

user32

GetWindowTextW GetWindowTextLengthW GetMenu RegisterWindowMessageA MapVirtualKeyExW GetKeyboardLayout ToUnicodeEx GetSystemMenu ClipCursor GetClipCursor SetWindowTextW TranslateMessage DispatchMessageA MsgWaitForMultipleObjectsEx EnumChildWindows GetKeyboardState SetWindowRgn FindWindowExW GetParent SendMessageW RegisterClassExW GetMessageA ShowCursor DestroyMenu RemoveMenu DestroyIcon CreateIcon EnableMenuItem CheckMenuItem CreatePopupMenu CreateMenu SetMenu DrawMenuBar SetMenuItemInfoW DrawIconEx AppendMenuW InsertMenuW GetClientRect RegisterRawInputDevices SystemParametersInfoA IsProcessDPIAware GetDC TrackPopupMenu SetWindowPos DrawTextW ReleaseDC GetWindowDC OffsetRect MapWindowPoints GetMenuBarInfo CreateAcceleratorTableW DestroyAcceleratorTable GetWindowLongPtrW GetKeyState GetDoubleClickTime SetWindowLongW CallNextHookEx TranslateAcceleratorW CreateWindowExW RegisterClassW ChangeWindowMessageFilterEx GetMenuItemInfoW AdjustWindowRect SetPropW GetForegroundWindow SetParent KillTimer SetWindowDisplayAffinity SendInput SetForegroundWindow RegisterTouchWindow IsWindow AdjustWindowRectEx FlashWindowEx GetActiveWindow UpdateWindow InvalidateRect SetCursorPos SetTimer GetWindowRect InvalidateRgn GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW GetUpdateRect MapVirtualKeyW ValidateRect GetRawInputData SetCursor LoadCursorW SetFocus CloseTouchInputHandle GetTouchInputInfo DestroyWindow TrackMouseEvent SetCapture SystemParametersInfoW ReleaseCapture FillRect GetSystemMetrics GetMonitorInfoW MonitorFromRect ClientToScreen GetWindowLongW ScreenToClient PostQuitMessage DefWindowProcW SetWindowLongPtrW PostThreadMessageW DispatchMessageW PostMessageW GetMessageW UnhookWindowsHookEx GetAsyncKeyState PeekMessageW SetWindowsHookExW ShowWindow GetWindow IsWindowEnabled EnableWindow MonitorFromPoint EnumDisplayMonitors MonitorFromWindow IsIconic IsWindowVisible RedrawWindow GetCursorPos

comctl32

RemoveWindowSubclass DefSubclassProc TaskDialogIndirect SetWindowSubclass

ole32

RegisterDragDrop CoCreateFreeThreadedMarshaler OleInitialize CoInitialize CoUninitialize CoCreateInstance CoInitializeEx RevokeDragDrop CoTaskMemFree CoTaskMemAlloc

shell32

SHGetKnownFolderPath Shell_NotifyIconGetRect SHAppBarMessage ShellExecuteExW Shell_NotifyIconW SHOpenFolderAndSelectItems ILFree DragQueryFileW DragFinish ShellExecuteW ILCreateFromPathW

gdi32

CreateSolidBrush BitBlt CombineRgn CreateRectRgn DeleteDC SelectObject CreateDIBSection CreateCompatibleDC GetDeviceCaps SetTextColor SetBkMode DeleteObject

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute DwmEnableBlurBehindWindow

shlwapi

SHCreateMemStream

bcrypt

BCryptGenRandom

ws2_32

freeaddrinfo WSACleanup WSAStartup getpeername getsockname getaddrinfo connect ioctlsocket WSASocketW shutdown send WSASend recv bind setsockopt closesocket WSAIoctl getsockopt WSAGetLastError

crypt32

CertVerifyCertificateChainPolicy CertOpenStore CertFreeCertificateChain CertSetCertificateContextProperty CertCloseStore CertCreateCertificateChainEngine CertFreeCertificateContext CertGetCertificateChain CertFreeCertificateChainEngine CertAddEncodedCertificateToStore

api-ms-win-crt-math-l1-1-0

cos trunc log roundf pow sin round _hypot floor __setusermatherr

api-ms-win-crt-string-l1-1-0

_wcsicmp strlen strcpy_s strcmp wcslen wcscmp

api-ms-win-crt-runtime-l1-1-0

_initterm_e _configure_narrow_argv exit abort _exit _set_app_type _get_initial_narrow_environment __p___argc _initterm _seh_filter_exe __p___argv _wassert _cexit terminate _c_exit _register_thread_local_exe_atexit_callback _errno _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _crt_atexit

api-ms-win-crt-convert-l1-1-0

_ultow_s wcstol _wtoi strtol

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-stdio-l1-1-0

fwrite fflush _setmode fread __p__commode _fileno __stdio_common_vfprintf _set_fmode fseek __stdio_common_vsprintf fopen __acrt_iob_func fgets ftell ferror feof fclose __stdio_common_vsscanf

api-ms-win-crt-heap-l1-1-0

malloc free realloc calloc _callnewh _set_new_mode

api-ms-win-crt-utility-l1-1-0

bsearch

api-ms-win-crt-locale-l1-1-0

_configthreadlocale