rusty-autoclicker-windows[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
rusty-autoclicker-windows.exe
Size 9.1MB
Sample260813-lm6d2avyft
SHA256 17037586cb0c3305a6d749e43c676efa96b2809642f9d39d5f4fb1f5270f166b
MD5 d30015a3fb3eff9e886b4c274dda0f6f
SHA1 03685c4fb09ed2fbbcb6078cb16b77ec361d7a7a
SHA512 511927a81f4c041c388b7be4ddc0289f327c0a85f6a0558d25912d621e91dda6a5c729a78f00688b09916735b42e764fecb0648f941f28ca355ce4de11bb817e
SSDEEP 49152:7wuhXCnP/Tbq/ee6Mvkzz3HWP0uV7ZLhAAMAEetEXk7EQ4UvPx6m38/fkDpzcJTd:cvHqtsOHmEqhHNvHUrUbl
TLSH
T12AA63A03F25295ECC0AAC074D357A233FA32FC8A432576E75BD46E213E55F946A29B0D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rusty-autoclicker-windows.exe

File Explorer

rusty-autoclicker-windows.exe

.exe 9.1MB

rusty-autoclicker-windows.exe

IMPHASH 1567c9065a27ce25c6bd9bf490a46a96
SHA256 17037586cb0c3305a6d749e43c676efa96b2809642f9d39d5f4fb1f5270f166b
MD5 d30015a3fb3eff9e886b4c274dda0f6f
SHA1 03685c4fb09ed2fbbcb6078cb16b77ec361d7a7a
SHA512 511927a81f4c041c388b7be4ddc0289f327c0a85f6a0558d25912d621e91dda6a5c729a78f00688b09916735b42e764fecb0648f941f28ca355ce4de11bb817e
SSDEEP 49152:7wuhXCnP/Tbq/ee6Mvkzz3HWP0uV7ZLhAAMAEetEXk7EQ4UvPx6m38/fkDpzcJTd:cvHqtsOHmEqhHNvHUrUbl
TLSH
T12AA63A03F25295ECC0AAC074D357A233FA32FC8A432576E75BD46E213E55F946A29B0D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6320388

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

rusty_autoclicker.pdb

bcryptprimitives

ProcessPrng

user32

GetKeyState GetKeyboardState ReleaseCapture MapVirtualKeyExW GetKeyboardLayout SetWindowLongW EnableMenuItem GetSystemMenu ShowWindow ShowCursor ClipCursor GetClipCursor AdjustWindowRectEx GetMenu GetWindowLongW GetRawInputData MsgWaitForMultipleObjectsEx DestroyIcon DestroyCursor SetCapture TrackMouseEvent CreateWindowExA ToUnicodeEx ClientToScreen ScreenToClient SetCursor LoadCursorW ValidateRect MonitorFromRect GetForegroundWindow SetWindowPlacement GetWindowPlacement EnumDisplayMonitors FlashWindowEx SetWindowDisplayAffinity SetWindowTextW SetCursorPos GetWindowTextW GetWindowTextLengthW GetWindowRect CreateIcon SetForegroundWindow SendInput MapVirtualKeyW IsProcessDPIAware DestroyWindow TranslateMessage DispatchMessageW PeekMessageW SetWindowPos RegisterRawInputDevices CreateWindowExW IsIconic IsWindowVisible PostMessageW RegisterWindowMessageA CreateIconFromResourceEx SendMessageW GetSystemMetrics GetActiveWindow GetClientRect RemovePropW GetWindowLongPtrW SystemParametersInfoA GetDC CallWindowProcW SetWindowLongPtrW SetPropW GetPropW DefWindowProcW ChangeDisplaySettingsExW MonitorFromWindow RedrawWindow InvalidateRgn RegisterClassExW RegisterClassExA MessageBoxW GetAsyncKeyState GetCursorPos GetClassInfoExA MonitorFromPoint GetMonitorInfoW ReleaseDC DefWindowProcA GetTouchInputInfo SetClipboardData EmptyClipboard CloseTouchInputHandle RegisterTouchWindow OpenClipboard RegisterClipboardFormatW IsClipboardFormatAvailable GetClipboardData CloseClipboard

kernel32

RemoveVectoredExceptionHandler UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetLastError IsProcessorFeaturePresent FreeLibrary CloseHandle GetCurrentProcessId SetWaitableTimer GlobalFree CreateWaitableTimerExW SetLastError DuplicateHandle CreateThread CreateProcessW GetProcAddress GetModuleFileNameW CompareStringOrdinal lstrlenW LoadLibraryA ExitProcess CreateEventA QueryPerformanceCounter GetProcessHeap HeapFree HeapAlloc WaitForSingleObjectEx RtlLookupFunctionEntry GetCurrentProcess RtlCaptureContext GetModuleHandleA Sleep GetModuleHandleW FormatMessageW QueryPerformanceFrequency WideCharToMultiByte SleepEx CreateMutexA WaitForSingleObject RtlVirtualUnwind LoadLibraryExA ReleaseMutex SetThreadErrorMode LoadLibraryExW AddVectoredExceptionHandler SwitchToThread GetCurrentThreadId MultiByteToWideChar SetThreadStackGuarantee GetCurrentThread LocaleNameToLCID GetSystemTimeAsFileTime GetFileAttributesW HeapReAlloc GlobalUnlock GlobalLock GlobalSize GlobalAlloc GetCurrentDirectoryW GetStdHandle GetConsoleMode GetConsoleOutputCP GetWindowsDirectoryW GetSystemDirectoryW WriteConsoleW GetEnvironmentVariableW ReadFileEx WriteFileEx GetFullPathNameW CreateFileW SetFileTime SetFileInformationByHandle FindFirstFileExW FindClose GetFileInformationByHandle FreeEnvironmentStringsW GetFileInformationByHandleEx GetEnvironmentStringsW

oleaut32

GetErrorInfo VariantClear SysAllocStringLen SysStringLen SafeArrayCreateVector SetErrorInfo SysFreeString SafeArrayPutElement

combase

CoCreateFreeThreadedMarshaler

ole32

CoCreateInstance CoInitializeEx OleInitialize RegisterDragDrop RevokeDragDrop CoUninitialize

shlwapi

AssocQueryStringW

ntdll

NtCreateNamedPipeFile RtlNtStatusToDosError NtOpenFile NtWriteFile

shell32

DragFinish DragQueryFileW

uiautomationcore

UiaRaiseAutomationPropertyChangedEvent UiaReturnRawElementProvider UiaGetReservedMixedAttributeValue UiaHostProviderFromHwnd UiaGetReservedNotSupportedValue UiaRaiseAutomationEvent UiaLookupId

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

advapi32

RevertToSelf ImpersonateAnonymousToken

gdi32

SetPixelFormat GetPixelFormat DeleteObject SwapBuffers ChoosePixelFormat GetDeviceCaps CreateRectRgn DescribePixelFormat

opengl32

wglDeleteContext wglMakeCurrent wglGetCurrentContext wglGetProcAddress wglCreateContext

setupapi

SetupDiEnumDeviceInfo SetupDiGetClassDevsW SetupDiGetDeviceRegistryPropertyW SetupDiDestroyDeviceInfoList

imm32

ImmGetCompositionStringW ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow ImmAssociateContextEx ImmGetContext

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute

uxtheme

SetWindowTheme

vcruntime140

memset __current_exception __current_exception_context __C_specific_handler memcpy memcmp memmove __CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

tan log2 atan2 cbrt fma log trunc exp2f floor acosf truncf sinhf fmod cos sin expf ceilf cbrtf _hypotf atan2f cosf sinf fmodf floorf pow ceil _hypot roundf sinh tanf tanhf tanh acos asinf asin atanf atan asinh asinhf acoshf acosh log1pf log1p exp exp2 logf log2f fmaf coshf powf __setusermatherr cosh round

api-ms-win-crt-string-l1-1-0

strlen wcslen

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e exit _exit strerror _get_initial_narrow_environment __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _configure_narrow_argv _set_app_type __p___argc _initialize_onexit_table _register_onexit_function _crt_atexit terminate _seh_filter_exe _initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode