UnityCrashHandler64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
UnityCrashHandler64.exe
Size 1.1MB
Sample260916-wk6xwstdla
SHA256 a7bef35b7aacd1a8fb1b728acc123c0fc4a062e668a610aedebab2737da11cfd
MD5 6bbed9498cb9c558c5db50b97d47e763
SHA1 755906c0f4d23a7afc7d8fa498f357664d0bcc63
SHA512 10b91cc4011ffc93f76feef56688af8a655bcdb5a822e19c4d2cf11d509577deb4999abc61f301fe9116a19ff475ebb9f5db602e22b1e83231e451b8104c998c
SSDEEP 12288:7o4M8g5CFF3vK3YjRJKC1Zj4xl6PwsinRZw2mtxb4TRq7QsoPo4nacKylQfz2fzG:7o4fg5CFWYii0zRZw2mX0M/wnDKz+zA9
TLSH
T12F457C6A66A800E9D5779135C952490FE7F27C1907609BDF23A0B7A72F336E41E7E320
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

UnityCrashHandler64.exe

.exe 1.1MB

UnityCrashHandler64.exe

IMPHASH 7b3f6a90eb536eecf8860677e4cd17a0
SHA256 a7bef35b7aacd1a8fb1b728acc123c0fc4a062e668a610aedebab2737da11cfd
MD5 6bbed9498cb9c558c5db50b97d47e763
SHA1 755906c0f4d23a7afc7d8fa498f357664d0bcc63
SHA512 10b91cc4011ffc93f76feef56688af8a655bcdb5a822e19c4d2cf11d509577deb4999abc61f301fe9116a19ff475ebb9f5db602e22b1e83231e451b8104c998c
SSDEEP 12288:7o4M8g5CFF3vK3YjRJKC1Zj4xl6PwsinRZw2mtxb4TRq7QsoPo4nacKylQfz2fzG:7o4fg5CFWYii0zRZw2mX0M/wnDKz+zA9
TLSH
T12F457C6A66A800E9D5779135C952490FE7F27C1907609BDF23A0B7A72F336E41E7E320
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

a9:c5:61:f2:bb:d1:42:88:2e:66:f6:24:1e:01:76:d6:d7:fe:47:39:8e:e0:58:3f:0a:9f:57:f1:32:ef:05:48

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 30, 2025

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

03:e6:cb:30:35:09:9e:63:9e:f3:35:ea:cd:37:c0:1f

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 11, 2023 - Jun 8, 2026

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

305840

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\build\output\unity\unity\artifacts\UnityCrashHandler\Win64_VS2019_nondev_m_m\UnityCrashHandler64.pdb

user32

SetWindowPos SetForegroundWindow LookupIconIdFromDirectoryEx GetDlgItem SendDlgItemMessageA AdjustWindowRect GetWindowLongA DialogBoxParamA SetWindowTextW OffsetRect EndDialog SendMessageW UnionRect GetIconInfo LoadImageA CreateIconFromResourceEx InflateRect

kernel32

DuplicateHandle VirtualProtect GetVersionExW UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation SignalObjectAndWait CreateTimerQueue WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapQueryInformation HeapSize HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale FlsFree FlsSetValue FlsGetValue FlsAlloc FreeLibraryAndExitThread GetConsoleOutputCP GetConsoleMode SetConsoleCtrlHandler GetFileType SetStdHandle GetModuleHandleExW ExitProcess RtlPcToFileHeader InterlockedFlushSList SetWaitableTimer GetModuleHandleA GetLastError GetCurrentThread WaitForSingleObjectEx CloseHandle RaiseException GetProcAddress SleepEx GetThreadTimes CreateWaitableTimerExW OpenThread TryEnterCriticalSection EnterCriticalSection SetThreadPriority InitializeCriticalSectionAndSpinCount LeaveCriticalSection GetCurrentThreadId ResumeThread GetThreadPriority CreateThread SwitchToThread DeleteCriticalSection CreateDirectoryW ReadFile GetModuleFileNameA FindFirstFileW FindFirstFileExW TlsSetValue SetLastError RtlCaptureContext GetFullPathNameW FindNextFileW GetCurrentProcess WriteFile OutputDebugStringA RemoveDirectoryW RtlVirtualUnwind SetFileTime GetModuleFileNameW RtlLookupFunctionEntry SetFilePointer SetEndOfFile QueryDepthSList FindClose CreateFileW GetFileAttributesW SuspendThread GetCurrentDirectoryA SetFileAttributesW CreateEventW MultiByteToWideChar GetFileAttributesA GetFileAttributesExW GetDiskFreeSpaceExW LoadLibraryA DeleteFileW LoadLibraryW GetThreadContext SetFilePointerEx MoveFileExW ReplaceFileW ReadProcessMemory SystemTimeToFileTime FreeLibrary CopyFileW WideCharToMultiByte TlsGetValue GetTempFileNameW GetSystemTime FlushFileBuffers HeapFree Thread32Next Thread32First WaitForSingleObject CreateToolhelp32Snapshot FormatMessageW HeapAlloc LocalFree VerSetConditionMask GetCurrentProcessId GetProcessHeap GetModuleHandleW VerifyVersionInfoW GetSystemTimeAsFileTime GetStdHandle TerminateProcess GetProcessId GetTempPathW WaitForMultipleObjectsEx OpenProcess Sleep SetEvent GetThreadId GetFileSize CreateProcessW CopyFileExW AllocConsole GetExitCodeProcess SizeofResource GetCommandLineW EnumResourceNamesA InitializeCriticalSection SetErrorMode FindResourceA GetExitCodeThread TerminateThread LockResource LoadResource CreateEventA LoadLibraryExW GetFileSizeEx CreateSemaphoreExW VirtualFree ReleaseSemaphore VirtualAlloc TlsAlloc QueryPerformanceFrequency TlsFree QueryPerformanceCounter IsDebuggerPresent InterlockedPushEntrySList RtlUnwindEx GetLocaleInfoW LCMapStringW CompareStringW GetTickCount GetCPInfo DecodePointer EncodePointer GetStringTypeW InitializeSListHead IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter ResetEvent UnregisterWaitEx InterlockedPopEntrySList GetEnvironmentVariableA

dbghelp

SymRegisterFunctionEntryCallback64 SymLoadModuleEx

shell32

SHGetKnownFolderPath SHCreateDirectoryExW CommandLineToArgvW SHFileOperationW

ole32

CoTaskMemFree CoInitializeEx CoCreateGuid

shlwapi

PathCanonicalizeW

psapi

GetModuleFileNameExW

advapi32

GetUserNameA

wininet

InternetConnectA HttpSendRequestA InternetCloseHandle InternetOpenA InternetCrackUrlA HttpQueryInfoA HttpOpenRequestA

gdi32

GetObjectA

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

Name

.text

Size

582KB

Virtual Size

582KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

164KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

349KB

Virtual Size

349KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

UnityCrashHandler64.exe

user32

kernel32

dbghelp

shell32

ole32

shlwapi

psapi

advapi32

wininet

gdi32

version

generic