spencer-macro-utilities-3[.]3[.]1-windows-amd64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
spencer-macro-utilities-3.3.1-windows-amd64.exe
Size 6.3MB
Sample260924-shpdaaws3j
SHA256 16a393a0a7744e039ff2a8651ee51b65f98c35610df03c114425d515167117e3
MD5 5fde06b3aa88bdd01d448c6ec1361c94
SHA1 fff3c8bb9f99ded5bd2157400aecfa002f2b6a46
SHA512 f4a5b4dd62b6a5a0ed3837a3b8fe015bc77e5efed06766c9b337829e5979e0d3223b4f6f15e977537c3bb56a4f1d8b3d5c692e48a7257f62efc1ea8f3c116af6
SSDEEP 98304:/lhFrs4NhCt+jZEb7Ad3onVpXyu37a4zw0YK:3Jd2t+jZEb7Ad3onVYuBcU
TLSH
T10F6606C9B26538B8DC678C798F565506A671FE0403E1DADF0290F7671AE2BF0397A630
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

spencer-macro-utilities-3.3.1-windows-amd64.exe

.exe 6.3MB

spencer-macro-utilities-3.3.1-windows-amd64.exe

IMPHASH fd6f756b87aadde314a0b64dac1fdb3b
SHA256 16a393a0a7744e039ff2a8651ee51b65f98c35610df03c114425d515167117e3
MD5 5fde06b3aa88bdd01d448c6ec1361c94
SHA1 fff3c8bb9f99ded5bd2157400aecfa002f2b6a46
SHA512 f4a5b4dd62b6a5a0ed3837a3b8fe015bc77e5efed06766c9b337829e5979e0d3223b4f6f15e977537c3bb56a4f1d8b3d5c692e48a7257f62efc1ea8f3c116af6
SSDEEP 98304:/lhFrs4NhCt+jZEb7Ad3onVpXyu37a4zw0YK:3Jd2t+jZEb7Ad3onVYuBcU
TLSH
T10F6606C9B26538B8DC678C798F565506A671FE0403E1DADF0290F7671AE2BF0397A630
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

81:0f:e6:f7:77:77:67:d7:0c:1b:fa:90:a6:b6:62:d0:72:24:9a:04:5a:0d:9a:c4:c8:f7:c8:5a:79:78:16:30

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=SignPath Foundation,O=SignPath Foundation,L=Lewes,ST=Delaware,C=US

Chains

Aug 14, 2026

CN=SignPath Foundation,O=SignPath Foundation,L=Lewes,ST=Delaware,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2020 - Mar 18, 2045

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=SignPath Foundation,O=SignPath Foundation,L=Lewes,ST=Delaware,C=US

Serial Number

09:52:82:50:0e:6d:27:ae:07:63:1b:a1

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 11, 2025 - Sep 7, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

3443360

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

opengl32

glPixelStorei glTexParameteri glTexImage2D glViewport glDeleteTextures glBindTexture glClearColor glClear glGenTextures

user32

SetForegroundWindow GetWindowRect SetCursorPos SendInput EnumWindows CloseClipboard GetWindow GetMessageW GetForegroundWindow SetClipboardData IsWindowVisible SetWindowPos OpenClipboard ShowWindow GetSystemMetrics VkKeyScanExW GetKeyboardLayout EmptyClipboard GetClipboardData GetCursorPos TranslateMessage GetQueueStatus CreateIconFromResource SetParent SetWindowLongW PtInRect IntersectRect ClipCursor GetClipCursor GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId RemovePropW SetActiveWindow EnableWindow GetFocus GetClipboardFormatNameA FlashWindowEx SetLayeredWindowAttributes AttachThreadInput CreateIconFromResourceEx DestroyCursor LoadCursorW ReleaseCapture SetCapture EnumDisplayMonitors EnumDisplayDevicesW EnumDisplaySettingsW ChangeDisplaySettingsExW ToUnicode GetKeyboardState SetWindowRgn IsClipboardFormatAvailable EnumClipboardFormats RegisterClipboardFormatW GetClipboardSequenceNumber SystemParametersInfoW SystemParametersInfoA DrawTextW SetFocus GetDlgItem EndDialog DialogBoxIndirectParamW GetDesktopWindow RegisterRawInputDevices GetRawInputData IsWindow CreateIconIndirect SetPropW RegisterClassW SetWindowLongPtrW GetWindowLongPtrW SetMenuItemInfoW GetMenuItemInfoW TrackPopupMenu DeleteMenu InsertMenuW EnableMenuItem CheckMenuItem DestroyMenu CreatePopupMenu RegisterWindowMessageW CreateWindowExA RegisterClassExA UnregisterClassA UnregisterDeviceNotification RegisterDeviceNotificationW GetRawInputDeviceList GetRawInputBuffer GetRawInputDeviceInfoA GetMonitorInfoW MonitorFromWindow DestroyIcon LoadIconW GetWindowLongW SetRectEmpty SetWindowTextW ScreenToClient ClientToScreen SetCursor AdjustWindowRectEx GetClientRect GetPropW ValidateRect GetUpdateRect EndPaint BeginPaint GetMenu KillTimer SetTimer MsgWaitForMultipleObjects MapVirtualKeyW GetKeyState IsZoomed IsIconic GetWindowPlacement GetClassInfoExW UnregisterClassW CallWindowProcW PostMessageW SendMessageW GetMessageExtraInfo GetMessageTime GetMessagePos TrackMouseEvent RegisterWindowMessageA GetDoubleClickTime MessageBoxA FillRect UpdateLayeredWindow DestroyWindow CreateWindowExW RegisterClassExW DefWindowProcW GetAncestor GetMonitorInfoA MonitorFromPoint EnumDisplaySettingsA CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW ReleaseDC GetDC MapVirtualKeyExW MapVirtualKeyA GetKeyNameTextA GetAsyncKeyState PostThreadMessageW PeekMessageW DispatchMessageW

comdlg32

GetOpenFileNameW CommDlgExtendedError

gdi32

CreateFontIndirectW BitBlt CreateCompatibleDC DeleteDC DeleteObject GetDeviceCaps SelectObject CreateDIBSection GetICMProfileW GetPixelFormat GetDIBits CreateFontA CreateCompatibleBitmap CreateRectRgn CombineRgn SwapBuffers SetPixelFormat DescribePixelFormat ChoosePixelFormat GetTextMetricsW CreateDCW SetPixel CreateBitmap TextOutA SetTextColor SetBkMode RemoveFontMemResourceEx AddFontMemResourceEx GetTextExtentPoint32A CreateSolidBrush

shell32

SHGetFolderPathA DragQueryFileW DragFinish Shell_NotifyIconW CommandLineToArgvW ShellExecuteExW SHBrowseForFolderW SHGetFolderPathW DragAcceptFiles SHGetPathFromIDListW ShellExecuteW

ole32

RevokeDragDrop RegisterDragDrop CoCreateInstance ReleaseStgMedium CoInitializeEx CoUninitialize OleUninitialize OleInitialize CLSIDFromString PropVariantClear CoTaskMemFree

oleaut32

SysFreeString

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey FreeSid CheckTokenMembership AllocateAndInitializeSid

winmm

timeGetDevCaps timeBeginPeriod timeEndPeriod

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

setupapi

CM_Get_Parent CM_Get_Device_IDA SetupDiGetDeviceRegistryPropertyW SetupDiGetClassDevsA SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetDeviceInstanceIdA CM_Locate_DevNodeA

iphlpapi

GetExtendedUdpTable

imm32

ImmGetCandidateListW ImmSetCompositionStringW ImmGetCompositionStringW ImmAssociateContext ImmGetIMEFileNameA ImmSetCompositionWindow ImmReleaseContext ImmGetCompositionFontW ImmNotifyIME ImmGetContext ImmSetCandidateWindow

wininet

InternetOpenUrlW InternetCloseHandle InternetOpenW InternetReadFile InternetSetOptionW HttpQueryInfoW

wintrust

WinVerifyTrust

crypt32

CryptQueryObject CryptMsgGetParam CertCloseStore CertFindCertificateInStore CertFreeCertificateContext CertGetCertificateContextProperty CryptMsgClose

dwmapi

DwmSetWindowAttribute

kernel32

CopyFile2 AreFileApisANSI CreateFile2 SetFileInformationByHandle GetFinalPathNameByHandleW GetFileInformationByHandle FindFirstFileW SetCurrentDirectoryW GetLocaleInfoEx InitializeSListHead GetCurrentProcessId GetStartupInfoW SetUnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetLocaleInfoA GetSystemPowerStatus GetModuleHandleExW CompareStringA GlobalSize MulDiv GenerateConsoleCtrlEvent SetNamedPipeHandleState CreatePipe SetHandleInformation DuplicateHandle CopyFileExW RemoveDirectoryW GetLogicalDrives GetFileAttributesExW GetCurrentDirectoryW TlsFree TlsSetValue TlsGetValue TlsAlloc GetFileTime FormatMessageA LocalFree LoadLibraryExW HeapAlloc GetCommandLineW VerifyVersionInfoW FormatMessageW CancelIo GetOverlappedResult DeviceIoControl VerSetConditionMask GetProcessHeap HeapFree EnumResourceNamesW IsWow64Process GetTickCount CreateFileA LoadLibraryW QueryPerformanceFrequency QueryPerformanceCounter SetThreadExecutionState GetLocaleInfoW SystemTimeToFileTime FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetSystemTimeAsFileTime SetThreadPriority CreateThread RemoveVectoredExceptionHandler AddVectoredExceptionHandler RaiseException GetSystemInfo GetSystemTimePreciseAsFileTime TerminateProcess ExitProcess CreateSemaphoreW WaitForSingleObjectEx ReleaseSemaphore DeleteCriticalSection TryEnterCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection SetLastError SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetConsoleMode AttachConsole OutputDebugStringW GetStdHandle SetErrorMode SetFilePointerEx SetFilePointer TryAcquireSRWLockExclusive SwitchToThread GetExitCodeThread ReleaseSRWLockShared AcquireSRWLockShared WakeConditionVariable GetStringTypeW InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx CompareStringEx GetCPInfo RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader FlsAlloc FlsGetValue FlsSetValue FlsFree RtlUnwind ExitThread FreeLibraryAndExitThread GetDriveTypeW PeekNamedPipe IsProcessorFeaturePresent SetConsoleCtrlHandler ReadFile GetFileType GetFileSizeEx GetEnvironmentVariableA GetLogicalDriveStringsA GetVolumeInformationW GetFullPathNameW FindNextFileW FindFirstFileExW FindClose CreateDirectoryW Process32NextW Process32FirstW CreateToolhelp32Snapshot GetModuleHandleA FindResourceA CreateProcessW GetExitCodeProcess GetFileAttributesA GetCurrentThreadId GetTempPathW WriteFile DeleteFileW CreateWaitableTimerW WaitForMultipleObjects Sleep RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter VirtualProtect GetDateFormatW CreateWaitableTimerExW SetWaitableTimer CreateEventW WaitForSingleObject ResetEvent SetEvent MoveFileExW FlushFileBuffers CreateFileW SetProcessInformation GetCurrentProcess GetLastError GetLocalTime OpenProcess GetThreadTimes GetCurrentThread GetProcessTimes GetFileInformationByHandleEx WriteConsoleW GetTimeFormatW CompareStringW LCMapStringW HeapSize IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleOutputCP ReadConsoleW HeapReAlloc GetTimeZoneInformation CloseHandle OutputDebugStringA CompareFileTime GetModuleFileNameW FindResourceW SizeofResource LockResource LoadResource GetModuleHandleW SetStdHandle IsValidCodePage GetACP GetOEMCP GetCommandLineA SetEnvironmentVariableW SetEndOfFile GlobalMemoryStatusEx LoadLibraryA GetProcAddress GlobalAlloc GlobalUnlock GlobalLock GlobalFree MultiByteToWideChar WideCharToMultiByte FreeLibrary

Name

.text

Size

3.6MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

922KB

Virtual Size

922KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

75KB

Virtual Size

109KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

176KB

Virtual Size

175KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

spencer-macro-utilities-3.3.1-windows-amd64.exe

opengl32

user32

comdlg32

gdi32

shell32

ole32

oleaut32

advapi32

winmm

version

setupapi

iphlpapi

imm32

wininet

wintrust

crypt32

dwmapi

kernel32

generic