UnityCrashHandler64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
UnityCrashHandler64.exe
Size 1.6MB
Sample260910-ln62ysap2t
SHA256 e004d65bc7b22a56631676d5bd8f343dd896bf0def81acf92d9d24fbb95d5e88
MD5 c01765e497f3cbddffaa5244f652e41f
SHA1 96cb7506ec5a32e875e3816ae7a63abb613db816
SHA512 00add9fcffeb6b4c6915d3a1c8c33ca5b0e09120e4f050b57b0b05c46a1d5872151058990eeb594e96af93020156f7f69dc1334d3ba9f53112400bed39750806
SSDEEP 24576:Fc+E59rRcdeeu4M2bnOciI9+NOJoxz/y/N9w/XY:Fc+m9rideeu4M2DYi+E
TLSH
T17F7538292E581DDCD426843ECB828A8FD2B1BC1A1F714BD717A17BA76E320D01E7B751
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

UnityCrashHandler64.exe

.exe 1.6MB

UnityCrashHandler64.exe

IMPHASH d68aa2ad46e2266404f4f8e944f5af41
SHA256 e004d65bc7b22a56631676d5bd8f343dd896bf0def81acf92d9d24fbb95d5e88
MD5 c01765e497f3cbddffaa5244f652e41f
SHA1 96cb7506ec5a32e875e3816ae7a63abb613db816
SHA512 00add9fcffeb6b4c6915d3a1c8c33ca5b0e09120e4f050b57b0b05c46a1d5872151058990eeb594e96af93020156f7f69dc1334d3ba9f53112400bed39750806
SSDEEP 24576:Fc+E59rRcdeeu4M2bnOciI9+NOJoxz/y/N9w/XY:Fc+m9rideeu4M2DYi+E
TLSH
T17F7538292E581DDCD426843ECB828A8FD2B1BC1A1F714BD717A17BA76E320D01E7B751
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

53:cc:eb:d1:16:3f:47:12:d9:4a:95:c1:93:07:cc:19:61:58:30:60:24:89:14:68:4d:a4:bc:78:e4:aa:38:9f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Aug 5, 2026

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

0b:12:24:60:a1:f7:9e:85:5e:1d:a9:a8:af:ca:9e:b2

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 15, 2026 - Jul 17, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

409748

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\build\output\unity\unity\artifacts\UnityCrashHandler\Win_x64_VS2022_VB_MT_nondev_i_m\UnityCrashHandler64.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle

user32

GetIconInfo SetWindowPos InflateRect CreateIconFromResourceEx LoadImageA SendMessageW SetWindowTextW AdjustWindowRect SendDlgItemMessageA GetDlgItem UnionRect EndDialog DialogBoxParamA OffsetRect SetForegroundWindow GetWindowLongA LookupIconIdFromDirectoryEx

kernel32

GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapQueryInformation HeapSize HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc ReadConsoleW GetModuleHandleExW ExitProcess GetConsoleMode GetConsoleOutputCP FileTimeToSystemTime SystemTimeToTzSpecificLocalTime PeekNamedPipe GetFileInformationByHandle GetDriveTypeW GetFileType SetStdHandle SetConsoleCtrlHandler InitializeCriticalSectionAndSpinCount RaiseException RtlPcToFileHeader RtlUnwindEx GetCPInfo DecodePointer EncodePointer CompareStringEx LCMapStringEx MultiByteToWideChar GetLastError QueryPerformanceFrequency QueryPerformanceCounter ReadFile GetFileSizeEx WriteFile SetEndOfFile WaitForSingleObject CreateFileW GetFileAttributesW GetCurrentThreadId ResumeThread CreateEventW FormatMessageW SetEvent WaitForSingleObjectEx TlsAlloc CloseHandle LoadLibraryW CreateThread SwitchToThread GetProcAddress SetFilePointerEx FreeLibrary TlsFree IsDebuggerPresent FlushFileBuffers GetCommandLineW GetCurrentProcess GetStdHandle TerminateProcess GetProcessId SetErrorMode GetTempPathW SetEnvironmentVariableW OpenProcess Sleep LoadLibraryA DeleteFileW MoveFileExW GetThreadId ReadProcessMemory CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime GetSystemTime CopyFileExW AllocConsole GetExitCodeProcess FindFirstFileW FindNextFileW SetFilePointer GetEnvironmentVariableW FindClose SetFileInformationByHandle GetCurrentProcessId SizeofResource EnterCriticalSection EnumResourceNamesA LeaveCriticalSection InitializeCriticalSection FindResourceA UnmapViewOfFile GetModuleHandleA GetExitCodeThread TerminateThread LockResource LoadResource CreateFileMappingA DeleteCriticalSection CreateEventA MapViewOfFile LoadLibraryExW CreateDirectoryW FindFirstFileExW TlsSetValue GetFullPathNameW RemoveDirectoryW SetFileTime GetModuleFileNameW SetFileAttributesW GetFileAttributesExW GetDiskFreeSpaceExW ReplaceFileW SystemTimeToFileTime GetModuleHandleW CopyFileW TlsGetValue GetTempFileNameW HeapFree Thread32Next Thread32First SuspendThread CreateToolhelp32Snapshot HeapAlloc GetCurrentDirectoryW LocalFree VerSetConditionMask GetProcessHeap VerifyVersionInfoW OpenThread GetModuleFileNameA SetWaitableTimer SetLastError RtlCaptureContext OutputDebugStringA RtlVirtualUnwind RtlLookupFunctionEntry GetEnvironmentVariableA GetCurrentDirectoryA GetFileAttributesA GetCurrentThread GetThreadContext SleepEx CreateWaitableTimerExW InitializeCriticalSectionEx GetStringTypeW TryAcquireSRWLockExclusive InitializeSListHead IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive GetTimeZoneInformation WriteConsoleW ReleaseSRWLockExclusive FreeEnvironmentStringsW WaitForMultipleObjectsEx RtlUnwind

dbghelp

ImageDirectoryEntryToDataEx SymLoadModuleEx SymRegisterFunctionEntryCallback64

shell32

SHCreateDirectoryExW SHFileOperationW SHGetKnownFolderPath CommandLineToArgvW

ole32

CoTaskMemFree CoCreateGuid CoInitializeEx

shlwapi

PathCanonicalizeW

psapi

GetProcessMemoryInfo GetModuleFileNameExW GetModuleFileNameExA

advapi32

GetUserNameA

wininet

HttpQueryInfoA InternetCrackUrlA HttpSendRequestA InternetCloseHandle InternetOpenA HttpOpenRequestA InternetConnectA

gdi32

GetObjectA

bcrypt

BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider BCryptDeriveKeyPBKDF2

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

Sharing

General

Malware Config

Signatures

File Explorer

UnityCrashHandler64.exe

api-ms-win-core-synch-l1-2-0

user32

kernel32

dbghelp

shell32

ole32

shlwapi

psapi

advapi32

wininet

gdi32

bcrypt

version

generic