BlazeMacro_v1[.]1[.]0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
BlazeMacro_v1.1.0.exe
Size 534KB
Sample260813-akpgysff65
SHA256 08dbe04a096cdfc73530431deb86aaf2dc635294b22e0c6cfb9531b0359963db
MD5 fb49d7c6da8423e15a44c7f180aaebbb
SHA1 dc33458c5afa059dda9f9f580faa85fa4a8c8034
SHA512 c41ec194fc4caed2492d6fc81cdd2ea0978812986c022094a948874321fb954f7aa5890350ca27283b2c7e47a61f50e9cd2c3cd801c0938aa67c0461b52343a3
SSDEEP 6144:AHaNExjsoXhv8lHVlF/qKHf+5OuRaxy5xJFyg1beXj6K6Amoau8ymCb9Jt/oV9pS:AHa6jrB8lVlQK/+l+F6DGRg8O
TLSH
T10DC4B02CBA27CFB2C3E654FA0D97CD0263E0774DB756B7CB9C2296A819118C5857328D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BlazeMacro_v1.1.0.exe

File Explorer

BlazeMacro_v1.1.0.exe

.exe 534KB

BlazeMacro_v1.1.0.exe

IMPHASH e9d0a4fcb66be360e6e323381a753cb8
SHA256 08dbe04a096cdfc73530431deb86aaf2dc635294b22e0c6cfb9531b0359963db
MD5 fb49d7c6da8423e15a44c7f180aaebbb
SHA1 dc33458c5afa059dda9f9f580faa85fa4a8c8034
SHA512 c41ec194fc4caed2492d6fc81cdd2ea0978812986c022094a948874321fb954f7aa5890350ca27283b2c7e47a61f50e9cd2c3cd801c0938aa67c0461b52343a3
SSDEEP 6144:AHaNExjsoXhv8lHVlF/qKHf+5OuRaxy5xJFyg1beXj6K6Amoau8ymCb9Jt/oV9pS:AHa6jrB8lVlQK/+l+F6DGRg8O
TLSH
T10DC4B02CBA27CFB2C3E654FA0D97CD0263E0774DB756B7CB9C2296A819118C5857328D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

55908

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\redst\source\repos\Blaze Macro\x64\Release\Blaze Macro.pdb

kernel32

TerminateThread LockResource QueryPerformanceFrequency DeleteFileA GlobalAlloc Process32FirstW CloseHandle GetSystemInfo WritePrivateProfileStringA CreateThread LoadResource FindResourceW Process32NextW GetCurrentProcessId GetModuleHandleW CreateDirectoryA GetPrivateProfileIntA QueryPerformanceCounter GlobalUnlock GetComputerNameA GetFileAttributesA GetStartupInfoW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetLastError CopyFileA Sleep MultiByteToWideChar CreateToolhelp32Snapshot OpenProcess ReleaseMutex GetVolumeInformationA CreateMutexA GetCurrentThread SetThreadPriority TerminateProcess SetProcessAffinityMask GetCurrentProcess SetPriorityClass SizeofResource GetModuleFileNameA GlobalLock SetThreadAffinityMask

user32

GetForegroundWindow MessageBoxA SetWindowTextA GetWindowTextA SetWindowsHookExA EmptyClipboard CallWindowProcA CloseClipboard DestroyIcon SetTimer DispatchMessageW OpenClipboard GetAsyncKeyState IsWindow ShowWindow TrackPopupMenu CreatePopupMenu GetSystemMetrics CallNextHookEx SendMessageW SetWindowRgn keybd_event SetWindowPos GetDC DestroyWindow GetWindowRect MapVirtualKeyW GetMessageW InvalidateRect DefWindowProcA DestroyMenu CreateWindowExA SetLayeredWindowAttributes SetFocus TranslateMessage LoadIconW LoadCursorW mouse_event SetCapture SetClipboardData AppendMenuA GetClientRect UpdateLayeredWindow UnregisterClassA DrawIconEx PostQuitMessage GetParent SetWindowLongPtrA RegisterClassExA UpdateWindow ReleaseCapture SetForegroundWindow LoadImageW UnhookWindowsHookEx ReleaseDC GetCursorPos BeginPaint EndPaint

gdi32

SelectObject BitBlt CreateDIBSection CreateCompatibleDC CreateRoundRectRgn AddFontMemResourceEx CreateFontA RemoveFontMemResourceEx SetTextColor SetBkMode SetBkColor DeleteObject CreateSolidBrush DeleteDC

advapi32

RegDeleteKeyA RegCreateKeyExA RegSetValueExA RegCloseKey

shell32

SHGetFolderPathA ShellExecuteA SHChangeNotify Shell_NotifyIconA

ole32

CoUninitialize CoInitialize CoCreateInstance

winmm

timeBeginPeriod timeEndPeriod

winhttp

WinHttpOpen WinHttpQueryHeaders WinHttpReadData WinHttpOpenRequest WinHttpCloseHandle WinHttpSendRequest WinHttpSetTimeouts WinHttpConnect WinHttpReceiveResponse

gdiplus

GdiplusStartup GdiplusShutdown GdipCreateStringFormat GdipDeleteFontFamily GdipResetClip GdipCreateFontFamilyFromName GdipCreateLineBrushI GdipSetClipRect GdipDeleteBrush GdipAlloc GdipDeletePath GdipSetSmoothingMode GdipCreatePath GdipSetStringFormatLineAlign GdipCreateFont GdipSetPenLineCap197819 GdipCreateSolidFill GdipFillPath GdipGraphicsClear GdipClosePathFigure GdipFree GdipCreateFromHDC GdipDrawString GdipSetTextRenderingHint GdipMeasureString GdipFillRectangleI GdipAddPathArc GdipDeleteGraphics GdipDrawPath GdipDeleteStringFormat GdipDeleteFont GdipDeletePen GdipCreatePen1 GdipNewPrivateFontCollection GdipSetStringFormatAlign GdipDeletePrivateFontCollection GdipPrivateAddMemoryFont GdipDrawLineI

vcruntime140

__current_exception_context __current_exception strstr strchr strrchr __C_specific_handler memset memcpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf __stdio_common_vsprintf fopen __stdio_common_vfprintf __p__commode _set_fmode fclose fgets

api-ms-win-crt-string-l1-1-0

_wcsicmp strncpy _stricmp strlen strcpy

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-runtime-l1-1-0

_c_exit _cexit _exit exit _initterm_e _initterm _get_narrow_winmain_command_line _initialize_narrow_environment _configure_narrow_argv _crt_atexit _set_app_type _seh_filter_exe _register_onexit_function _register_thread_local_exe_atexit_callback _initialize_onexit_table terminate

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free