Project Wixx[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Project Wixx.exe
Size 1.4MB
Sample261012-sblc2sby3v
SHA256 358493dd55ec9474f7d2559cc6bc6a9e23937b81ec43872d4559f7be0396c5c4
MD5 6807ba07481bd6951566bf8782c7ea82
SHA1 602ec2d11aa599205b5f60c06591122a4fa87fc5
SHA512 980c5308db0d1226ca4fd30399e0e8c53fe85f3f7bd18a12dc65cdec68ef99e9f6d16d42349118af7e7c47f6412ac0258318bdebf9b5df2f587d8113426a5fc4
SSDEEP 12288:zC9Q9on3LYk6gnYEZGagFrVi2n2hMtJJHe3bfEQnHYF:zHohyEAaiVi2nvJJHerLnH
TLSH
T16D651956A2A956E4C0BBC038D542961FFD6034AA433856FFB3C48AC46F927E4AF3D741
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Project Wixx.exe

File Explorer

Project Wixx.exe

.exe 1.4MB

Project Wixx.exe

IMPHASH 610cb966e664277b881d5460a1faf62e
SHA256 358493dd55ec9474f7d2559cc6bc6a9e23937b81ec43872d4559f7be0396c5c4
MD5 6807ba07481bd6951566bf8782c7ea82
SHA1 602ec2d11aa599205b5f60c06591122a4fa87fc5
SHA512 980c5308db0d1226ca4fd30399e0e8c53fe85f3f7bd18a12dc65cdec68ef99e9f6d16d42349118af7e7c47f6412ac0258318bdebf9b5df2f587d8113426a5fc4
SSDEEP 12288:zC9Q9on3LYk6gnYEZGagFrVi2n2hMtJJHe3bfEQnHYF:zHohyEAaiVi2nvJJHerLnH
TLSH
T16D651956A2A956E4C0BBC038D542961FFD6034AA433856FFB3C48AC46F927E4AF3D741
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

445004

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\A\Desktop\base\Project Wixx\x64\Release\Project Wixx.pdb

kernel32

LoadLibraryA QueryPerformanceFrequency FreeLibrary QueryPerformanceCounter Sleep GetLastError GetLocalTime Beep InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId GetModuleHandleA IsDebuggerPresent SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GlobalUnlock WideCharToMultiByte GetLocaleInfoA GlobalLock CloseHandle GlobalFree GlobalAlloc MultiByteToWideChar GetModuleHandleW GetProcAddress LoadLibraryW

user32

RegisterClassExA GetKeyState UnregisterClassA GetForegroundWindow DefWindowProcW PostQuitMessage UpdateWindow keybd_event GetSystemMetrics ShowWindow IsWindow GetAsyncKeyState DispatchMessageW CreateWindowExA SetLayeredWindowAttributes TranslateMessage DestroyWindow GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen TrackMouseEvent LoadCursorW SetCapture SetCursor GetClientRect PeekMessageA SetClipboardData GetClipboardData EmptyClipboard IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos OpenClipboard CloseClipboard GetKeyboardLayout

gdi32

GetStockObject

shell32

ShellExecuteW

msvcp140

?always_noconv@codecvt_base@std@@QEBA_NXZ ??7ios_base@std@@QEBA_NXZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Xlength_error@std@@YAXPEBD@Z ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?good@ios_base@std@@QEBA_NXZ _Query_perf_frequency ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Xbad_alloc@std@@YAXXZ ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z _Query_perf_counter ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

imm32

ImmGetContext ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

d3d11

D3D11CreateDeviceAndSwapChain

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler memset __current_exception_context __current_exception strchr __std_terminate __std_exception_copy __std_exception_destroy memchr memcmp memcpy memmove _CxxThrowException

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e exit _exit system __p___argc __p___argv _c_exit _set_app_type _seh_filter_exe _cexit terminate _configure_narrow_argv _invoke_watson _crt_atexit _register_onexit_function _get_initial_narrow_environment _initialize_onexit_table _initialize_narrow_environment _register_thread_local_exe_atexit_callback

api-ms-win-crt-string-l1-1-0

_wcsicmp strncpy strncmp strcmp

api-ms-win-crt-stdio-l1-1-0

fread __stdio_common_vsprintf __stdio_common_vfprintf fseek fclose fwrite __acrt_iob_func ftell __stdio_common_vsscanf fputc fgetc fflush __p__commode _get_stream_buffer_pointers _fseeki64 fsetpos ungetc setvbuf fgetpos fopen_s _set_fmode _wfopen

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

malloc free _callnewh _set_new_mode

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-filesystem-l1-1-0

_lock_file remove _unlock_file

api-ms-win-crt-math-l1-1-0

_dclass log logf pow powf _fdclass sinf acosf asin sqrt expf atan atan2 atan2f sqrtf ceilf fmodf cosf __setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale