UnityCrashHandler64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
UnityCrashHandler64.exe
Size 1.5MB
Sample261011-vpzhyadh85
SHA256 ad4b640150005f2441dd67948800cba3d23251bd6b91747f3d0af8123c77cdc5
MD5 748076684325bc85b3a61e64fcfba84a
SHA1 319ec93dd79140987f12fbaf86461784ec029b2b
SHA512 f9e464ce0bfdb6d746572aa8308f57ed54d55959d7a777ebd2d1f4029072b8d3d07b200d9a8df26721201ff5d9d7dfe0fd26fa81ad41c58d2e13a6292c0f79b8
SSDEEP 12288:2Oh73+POwRL8Zi+rfHfZ+rUoZ9KG0NpjUpw66Vtqxz/yasN9tC/XEKTH:zULui+rPy9X66Uoxz/y/N9w/X/z
TLSH
T15D7528292E541DCCC426843ECB83869FD2B1BD5A2F714B971BA17BA36E321D01E7B351
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

UnityCrashHandler64.exe

.exe 1.5MB

UnityCrashHandler64.exe

IMPHASH b078bdb9a18a838b033bcc33be714341
SHA256 ad4b640150005f2441dd67948800cba3d23251bd6b91747f3d0af8123c77cdc5
MD5 748076684325bc85b3a61e64fcfba84a
SHA1 319ec93dd79140987f12fbaf86461784ec029b2b
SHA512 f9e464ce0bfdb6d746572aa8308f57ed54d55959d7a777ebd2d1f4029072b8d3d07b200d9a8df26721201ff5d9d7dfe0fd26fa81ad41c58d2e13a6292c0f79b8
SSDEEP 12288:2Oh73+POwRL8Zi+rfHfZ+rUoZ9KG0NpjUpw66Vtqxz/yasN9tC/XEKTH:zULui+rPy9X66Uoxz/y/N9w/X/z
TLSH
T15D7528292E541DCCC426843ECB83869FD2B1BD5A2F714B971BA17BA36E321D01E7B351
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

7e:96:72:5f:fe:5f:02:4a:67:3b:33:dc:33:a4:bf:78:16:ba:00:25:30:bf:c0:34:06:eb:33:25:7b:03:94:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

May 6, 2025

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

03:e6:cb:30:35:09:9e:63:9e:f3:35:ea:cd:37:c0:1f

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 11, 2023 - Jun 8, 2026

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

349024

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\build\output\unity\unity\artifacts\UnityCrashHandler\Win_x64_VS2022_VB_nondev_m_m\UnityCrashHandler64.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress

user32

SetWindowPos SetForegroundWindow LookupIconIdFromDirectoryEx GetDlgItem SendDlgItemMessageA AdjustWindowRect GetWindowLongA DialogBoxParamA SetWindowTextW OffsetRect EndDialog SendMessageW UnionRect GetIconInfo LoadImageA CreateIconFromResourceEx InflateRect

kernel32

GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapQueryInformation HeapSize HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc SetConsoleCtrlHandler GetFileType SetStdHandle GetConsoleMode GetConsoleOutputCP GetModuleHandleExW ExitProcess InitializeCriticalSectionAndSpinCount RaiseException RtlPcToFileHeader RtlUnwindEx GetCPInfo CompareStringEx DecodePointer EncodePointer InitializeCriticalSectionEx LCMapStringEx TryAcquireSRWLockExclusive GetSystemTimeAsFileTime GetModuleFileNameA SetWaitableTimer SetLastError RtlCaptureContext GetCurrentProcess OutputDebugStringA RtlVirtualUnwind RtlLookupFunctionEntry GetEnvironmentVariableA SuspendThread GetCurrentDirectoryA ResumeThread MultiByteToWideChar GetLastError GetFileAttributesA GetCurrentThread LoadLibraryA WaitForSingleObjectEx CloseHandle LoadLibraryW GetThreadContext GetProcAddress ReadProcessMemory GetModuleHandleW FreeLibrary WideCharToMultiByte SleepEx CreateWaitableTimerExW OpenThread HeapFree Thread32Next Thread32First WaitForSingleObject GetCurrentThreadId CreateToolhelp32Snapshot FormatMessageW SetEnvironmentVariableW CreateThread HeapAlloc SwitchToThread LocalFree VerSetConditionMask GetCurrentProcessId GetProcessHeap VerifyVersionInfoW CreateEventW CreateDirectoryW ReadFile FindFirstFileW GetFileSizeEx FindFirstFileExW TlsSetValue GetFullPathNameW FindNextFileW WriteFile RemoveDirectoryW SetFileTime GetModuleFileNameW SetFilePointer SetEndOfFile FindClose CreateFileW GetFileAttributesW SetFileAttributesW GetFileAttributesExW GetDiskFreeSpaceExW DeleteFileW SetFilePointerEx MoveFileExW ReplaceFileW SystemTimeToFileTime CopyFileW TlsGetValue GetTempFileNameW GetSystemTime FlushFileBuffers GetStdHandle TerminateProcess GetProcessId GetTempPathW WaitForMultipleObjectsEx OpenProcess Sleep SetEvent GetThreadId GetFileSize CreateProcessW CopyFileExW AllocConsole GetExitCodeProcess SizeofResource EnterCriticalSection GetCommandLineW EnumResourceNamesA LeaveCriticalSection InitializeCriticalSection SetErrorMode FindResourceA GetModuleHandleA GetExitCodeThread TerminateThread LockResource LoadResource DeleteCriticalSection CreateEventA LoadLibraryExW TlsAlloc QueryPerformanceFrequency TlsFree QueryPerformanceCounter IsDebuggerPresent GetStringTypeW AreFileApisANSI GetLocaleInfoEx FormatMessageA InitializeSListHead IsProcessorFeaturePresent GetStartupInfoW WriteConsoleW SetUnhandledExceptionFilter UnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive FreeEnvironmentStringsW

dbghelp

SymLoadModuleEx SymRegisterFunctionEntryCallback64

shell32

SHGetKnownFolderPath SHCreateDirectoryExW CommandLineToArgvW SHFileOperationW

ole32

CoTaskMemFree CoInitializeEx CoCreateGuid

shlwapi

PathCanonicalizeW

psapi

GetModuleFileNameExW

advapi32

GetUserNameA

wininet

InternetConnectA HttpOpenRequestA InternetCrackUrlA InternetOpenA InternetCloseHandle HttpSendRequestA HttpQueryInfoA

gdi32

GetObjectA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

UnityCrashHandler64.exe

api-ms-win-core-synch-l1-2-0

user32

kernel32

dbghelp

shell32

ole32

shlwapi

psapi

advapi32

wininet

gdi32

version

generic