TraceX-1[.]1[.]7[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
TraceX-1.1.7.zip
Size 2.8MB
Sample260824-snbdlsv1cs
SHA256 543bba8043d981409a2c361fdbced8a1efceb2b84175af80f69d6611d6b2ae33
MD5 9d01fa2d2f3fcded80f0455b0a02e168
SHA1 4fa1c3223f8c9904ea4a0613cdd7bd6570032a72
SHA512 49186df717a14612fe0fd682f397f1864863b06a382d934d4516bcd2fe5d1868f88a5795d878329dedda97bcdfad3137999344e7e220285cb67df7ea4552705a
SSDEEP 49152:ayf/Ykj2KWD6yIqy/DGTA67X8rYn0VwqaxtHFAvT+IU6MJ:1YPK06yIqyrJ6LOYKw/tHF0TrIJ
TLSH
T100D5334F557A20B74FCF9A8D06CBF3A862F02894A6F2442952B0FD4B46979D1106FFC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TraceX.exe

File Explorer

TraceX-1.1.7.zip

.zip 2.8MB
TraceX.exe

.exe 5.7MB

TraceX-1.1.7.zip

SHA256 543bba8043d981409a2c361fdbced8a1efceb2b84175af80f69d6611d6b2ae33
MD5 9d01fa2d2f3fcded80f0455b0a02e168
SHA1 4fa1c3223f8c9904ea4a0613cdd7bd6570032a72
SHA512 49186df717a14612fe0fd682f397f1864863b06a382d934d4516bcd2fe5d1868f88a5795d878329dedda97bcdfad3137999344e7e220285cb67df7ea4552705a
SSDEEP 49152:ayf/Ykj2KWD6yIqy/DGTA67X8rYn0VwqaxtHFAvT+IU6MJ:1YPK06yIqyrJ6LOYKw/tHF0TrIJ
TLSH
T100D5334F557A20B74FCF9A8D06CBF3A862F02894A6F2442952B0FD4B46979D1106FFC9
MD5 SHA1 SHA512 SSDEEP TLSH

TraceX.exe

IMPHASH 5c1d18bdb34c61039984ca27c1b844c0
SHA256 f474d2a28cae8545b2b3015e4a737c244ef70726fab3e4620c7b8cfdb45e8a93
MD5 8fc24ba2ed51fe0e83240684884f3d76
SHA1 957df59eb86340ec8fc6edc4878ddc1acf853813
SHA512 165b3292c7c4ae4710e40082d950302221f510493abc476f42e3a6e301c5cfbc212d4df6b21481af5beaf38848c9dc47d6e19d2192f9c4b4e932cf7644293e29
SSDEEP 49152:DY05y8Dl3DdPjan0hT774wdQOsP3xA0E1m0Azw/rc/YVuL/cYfHXxr1Opqj9bVr2:DYY7AOsJiqYAZfIqbFnn+
TLSH
T129569E07F79182ECC05EC0748356A233AB63F8890736B3EB6B844A216F56BA05F5D75D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2698040

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

TraceX.pdb

kernel32

HeapFree HeapReAlloc GetFileAttributesW GlobalLock GlobalUnlock CreateProcessW CancelIo CreateEventW CreateDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle FindClose IsDebuggerPresent FindFirstFileExW SetFileInformationByHandle SetFileTime GetFullPathNameW CreateThread SetHandleInformation ReadFileEx SleepEx WriteFileEx WaitForSingleObject ReleaseMutex CreateMutexA WaitForSingleObjectEx DuplicateHandle GetTempPathW GetModuleHandleA AddVectoredExceptionHandler CreateFileW Sleep CancelIoEx SetFileCompletionNotificationModes CreateIoCompletionPort GetQueuedCompletionStatusEx GetFinalPathNameByHandleW SetLastError IsProcessorFeaturePresent ReadFile PostQueuedCompletionStatus LoadLibraryExW WriteFile GetOverlappedResult GetSystemTimeAsFileTime InitializeSListHead UnhandledExceptionFilter GetProcessHeap FreeLibrary Process32NextW SetThreadErrorMode GetProcAddress CreateWaitableTimerExW SetWaitableTimer GlobalFree FindNextFileW GetExitCodeProcess TerminateProcess WaitForMultipleObjects SwitchToThread GetModuleFileNameW Process32FirstW CreateToolhelp32Snapshot GetThreadContext CheckRemoteDebuggerPresent GetCurrentThreadId GetLastError GetCurrentThread SetThreadStackGuarantee GetWindowsDirectoryW SetUnhandledExceptionFilter GetSystemDirectoryW CompareStringOrdinal FreeEnvironmentStringsW GetEnvironmentStringsW DeleteFileW GetCurrentProcess GetSystemTimePreciseAsFileTime QueryPerformanceCounter GlobalSize WideCharToMultiByte GetModuleHandleW MultiByteToWideChar GlobalAlloc QueryPerformanceFrequency GetEnvironmentVariableW FormatMessageW GetCurrentProcessId DeviceIoControl HeapAlloc CloseHandle LoadLibraryW WriteConsoleW GetConsoleOutputCP GetConsoleMode GetStdHandle RtlCaptureContext RtlLookupFunctionEntry LoadLibraryA lstrlenW RtlVirtualUnwind GetCurrentDirectoryW

advapi32

RegCloseKey RevertToSelf SystemFunction036 ImpersonateAnonymousToken RegEnumKeyExW RegQueryValueExW RegOpenKeyExW RegSetValueExW RegDeleteValueW

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

ws2_32

WSACleanup WSAStartup WSASend bind setsockopt getsockopt send ioctlsocket WSASocketW closesocket recv WSAIoctl getpeername shutdown getaddrinfo connect getsockname WSAGetLastError freeaddrinfo

ntdll

NtQueryInformationProcess NtCancelIoFileEx RtlNtStatusToDosError NtOpenFile NtDeviceIoControlFile NtCreateFile NtWriteFile NtReadFile NtCreateNamedPipeFile

bcryptprimitives

ProcessPrng

user32

ShowWindow GetSystemMenu EnableMenuItem SetWindowLongW ChangeDisplaySettingsExW GetMessageW SetWindowPlacement KillTimer SetCapture RegisterWindowMessageA GetClipCursor ClipCursor GetWindowRect ShowCursor GetWindowLongW AdjustWindowRectEx DestroyIcon MapVirtualKeyExW ToUnicodeEx GetMonitorInfoW SetCursor IsIconic SendInput SetForegroundWindow EnumDisplayMonitors SystemParametersInfoA GetClassInfoExW LoadCursorW GetClassNameW SetTimer GetCursorPos MonitorFromRect TranslateMessage GetWindowPlacement ReleaseCapture CloseTouchInputHandle GetTouchInputInfo GetKeyboardLayout SetClipboardData DispatchMessageW DestroyWindow ScreenToClient RegisterRawInputDevices GetMenu TrackMouseEvent IsProcessDPIAware GetKeyState GetAsyncKeyState SetWindowLongPtrW MonitorFromWindow GetKeyboardState GetRawInputData ValidateRect RegisterTouchWindow DefWindowProcW InvalidateRgn SetWindowPos GetClientRect RedrawWindow CreateWindowExW RegisterClassExW ReleaseDC CreateIcon GetDC GetWindowLongPtrW PostMessageW SetWindowDisplayAffinity GetForegroundWindow SetWindowTextW SetCursorPos ClientToScreen CreateIconFromResourceEx SendMessageW GetSystemMetrics GetActiveWindow MonitorFromPoint GetWindowTextLengthW CloseClipboard OpenClipboard GetWindowTextW EmptyClipboard FlashWindowEx PeekMessageW GetClipboardData IsClipboardFormatAvailable MapVirtualKeyW

opengl32

wglDeleteContext wglCreateContext wglShareLists wglMakeCurrent wglGetCurrentDC wglGetCurrentContext wglGetProcAddress

gdi32

ChoosePixelFormat DescribePixelFormat DeleteObject GetDeviceCaps CreateRectRgn SetPixelFormat SwapBuffers

dwmapi

DwmEnableBlurBehindWindow

ole32

CoUninitialize CoInitializeEx RevokeDragDrop OleInitialize RegisterDragDrop CoCreateInstance

imm32

ImmSetCandidateWindow ImmGetContext ImmAssociateContextEx ImmSetCompositionWindow ImmReleaseContext ImmGetCompositionStringW

shlwapi

AssocQueryStringW

bcrypt

BCryptGenRandom

iphlpapi

GetIfTable2 FreeMibTable

shell32

DragQueryFileW DragFinish

uxtheme

SetWindowTheme

vcruntime140

memcpy __C_specific_handler memcmp memset memmove __CxxFrameHandler3 __current_exception __current_exception_context

api-ms-win-crt-math-l1-1-0

floorf __setusermatherr exp2f cbrtf roundf powf ceilf acosf round fmaxf sinf cosf floor trunc expf _hypotf atan2f fmod fminf

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _crt_atexit _register_thread_local_exe_atexit_callback _register_onexit_function _c_exit strerror _seh_filter_exe _set_app_type _cexit _configure_narrow_argv __p___argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit terminate __p___argc

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free