NoNameMacroV1[.]0[.]5[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
NoNameMacroV1.0.5.exe
Size 35.7MB
Sample261012-tc28mact7w
SHA256 b82bdc150309773b39d2ae0d4d7f4d8bd1a6a78695166b9245d9ca5efee34ba1
MD5 86dddbf9438c6129047afbd676b44ffc
SHA1 e15d69b3b24bed63acd7b519f1fcecb33433f49f
SHA512 e94694fea4c9785eb86114cf4bf5e60af2c3244c0282aea054e2c94b34b8878758a46084b679d20c0c317a6ea8d104f2bc4904be02aa104835ed9657bea1a295
SSDEEP 393216:VZY2a7uci5iLhiOtxI1DsrjyKz4ZvbpiGqCYZA8LjKA23AUn:VZY2eAgZLjKA2
TLSH
T11E872A0223788051E6A1C7BDBC65938ADE72B809771366F3146DC54DBB97EA253FF208
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NoNameMacroV1.0.5.exe

File Explorer

NoNameMacroV1.0.5.exe

.exe 35.7MB

NoNameMacroV1.0.5.exe

IMPHASH 67e50e90bb4bcfb02acfb84c1051c525
SHA256 b82bdc150309773b39d2ae0d4d7f4d8bd1a6a78695166b9245d9ca5efee34ba1
MD5 86dddbf9438c6129047afbd676b44ffc
SHA1 e15d69b3b24bed63acd7b519f1fcecb33433f49f
SHA512 e94694fea4c9785eb86114cf4bf5e60af2c3244c0282aea054e2c94b34b8878758a46084b679d20c0c317a6ea8d104f2bc4904be02aa104835ed9657bea1a295
SSDEEP 393216:VZY2a7uci5iLhiOtxI1DsrjyKz4ZvbpiGqCYZA8LjKA23AUn:VZY2eAgZLjKA2
TLSH
T11E872A0223788051E6A1C7BDBC65938ADE72B809771366F3146DC54DBB97EA253FF208
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26195880

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

GetDesktopWindow GetParent LoadCursorA SetWindowLongPtrW GetWindowLongPtrW GetMessageW GetWindowTextW SetFocus TranslateMessage DispatchMessageW PostMessageA DefWindowProcW PostQuitMessage CallWindowProcA RegisterClassW UnregisterClassW CreateWindowExW DestroyWindow GetWindowRect

python313

PyObject_GetBuffer PyBuffer_Release PyType_Ready PyObject_Str PyObject_RichCompare PyObject_RichCompareBool PyObject_SetAttrString PyObject_SetAttr PyObject_SelfIter PyObject_GenericSetAttr PyObject_IsTrue PyCallable_Check PyObject_ClearWeakRefs _Py_Dealloc PyObject_Realloc PyObject_Free PyObject_Init _PyObject_New _PyObject_GC_Resize PyObject_GC_Del PyByteArray_FromStringAndSize PyBytes_FromString _PyBytes_Resize PyUnicode_FromStringAndSize PyUnicode_FromEncodedObject PyUnicode_FromWideChar PyUnicode_AsWideCharString PyUnicode_FromOrdinal PyUnicode_DecodeUTF8 PyUnicode_Concat PyUnicode_FindChar PyUnicode_RichCompare PyUnicode_Format PyUnicode_AsUTF8 PyErr_SetObject PyErr_GivenExceptionMatches PyErr_ExceptionMatches PyErr_BadArgument PyErr_NoMemory PyOS_snprintf _Py_FatalErrorFunc PyLong_AsLong PyLong_AsLongAndOverflow PyLong_AsSsize_t PyLong_FromString PyLong_FromUnicodeObject _PyLong_New _PyLong_Copy PyFloat_FromString PyFloat_FromDouble PyComplex_FromDoubles PyTuple_New PyList_New PyList_Sort PyDict_New PyDict_GetItem PyDict_GetItemString PyDict_SetItemString PyCMethod_New PyModule_NewObject PyModule_GetName PyModule_GetFilenameObject PyModule_GetDef PyModule_GetState PyUnstable_Code_NewWithPosOnlyArgs PyCode_Addr2Line PyState_AddModule PyState_FindModule PyNumber_Negative PyErr_WarnEx PyArg_ParseTuple PyArg_ParseTupleAndKeywords PyArg_UnpackTuple Py_BuildValue PyModule_ExecDef PyModule_FromDefAndSpec2 PyErr_Print Py_CompileStringExFlags PyEval_EvalCodeEx PyEval_GetFuncName PyEval_RestoreThread _PyEval_EvalFrameDefault PySys_WriteStderr PyImport_ExecCodeModule PyImport_ExecCodeModuleEx PyImport_GetModuleDict PyImport_ImportModule PyImport_ImportFrozenModule PyObject_Call PyObject_CallFunctionObjArgs PyObject_CallMethodObjArgs PyObject_GetIter PyIter_Next PyIter_Send PyNumber_Add PyNumber_Subtract PyNumber_FloorDivide PyNumber_Float PyNumber_InPlaceAdd PyNumber_InPlaceLshift PyNumber_InPlaceOr PyNumber_ToBase PySequence_List PySequence_InPlaceConcat PyMapping_Check PyObject_LengthHint PyMarshal_ReadObjectFromString _PyErr_FormatFromCause _PyErr_SetString _PyUnicode_InternImmortal PyMem_GetAllocator _PySet_NextEntry Py_VerboseFlag _PyByteArray_empty_string PyExc_RecursionError PyExc_UnboundLocalError PyExc_ImportWarning PyDictKeys_Type PyDictValues_Type PyDictItems_Type PySet_Type PyModuleDef_Type PyFunction_Type PyMethod_Type PyCode_Type PyFrame_Type PyTraceBack_Type PyEllipsis_Type PyCallIter_Type PyGen_Type PyCoro_Type PyAsyncGen_Type Py_GenericAliasType PyImport_FrozenModules _PyRuntime _PyIntrinsics_UnaryFunctions PyErr_SetNone PyList_Size PyList_SetSlice PyDict_DelItemString PyStatus_Exception PyWideStringList_Append PyConfig_SetString PyConfig_SetArgv Py_SetProgramName Py_InitializeFromConfig Py_ExitStatusException PySys_SetArgv _PyConfig_InitCompatConfig Py_DebugFlag Py_InteractiveFlag Py_InspectFlag Py_OptimizeFlag Py_NoSiteFlag Py_BytesWarningFlag Py_FrozenFlag Py_IgnoreEnvironmentFlag Py_DontWriteBytecodeFlag Py_NoUserSiteDirectory Py_FileSystemDefaultEncoding Py_HasFileSystemDefaultEncoding Py_UTF8Mode PyMem_Free PyObject_DelItem PyLong_FromVoidPtr PyObject_DelAttr PyModule_GetDict PyObject_GetAttrString PySeqIter_Type PyModule_Type PyDict_Type PyList_Type PyTuple_Type PyExc_IOError PyExc_ValueError PyExc_IndexError PyExc_GeneratorExit PyExc_StopIteration PyExc_Exception PyExc_BaseException PyUnicode_Type PyLong_Type _PyThreadState_GetCurrent PyObject_IsSubclass PySequence_Contains PySequence_Tuple PySequence_Check PyNumber_Long PyNumber_AsSsize_t PyObject_SetItem PyEval_AcquireThread PyEval_SaveThread Py_MakePendingCalls Py_Exit PyErr_PrintEx Py_GenericAlias PySet_Contains PySet_Add PySet_New PyDict_DelItem PyLong_FromSsize_t PyErr_WriteUnraisable PyUnicode_Join PyUnicode_FromFormat _PyObject_FunctionStr PyObject_Repr PyType_IsSubtype PyCFunction_Type PyExc_TypeError PyExc_SystemError PyExc_AttributeError _Py_NoneStruct PyBaseObject_Type PyType_Type PyObject_IsInstance _PyDict_NewPresized PyDict_SetItem PyErr_Format _PyType_Lookup PyMem_Malloc PyExc_SyntaxError PyObject_GetAttr PyExc_ConnectionAbortedError PyExc_BlockingIOError PyExc_ConnectionError PyExc_MemoryError _Py_TrueStruct _Py_FalseStruct PySys_SetObject PySys_GetObject PyExc_ModuleNotFoundError PyExc_OverflowError PyExc_ChildProcessError PyExc_ProcessLookupError PyExc_PermissionError PyExc_ZeroDivisionError PyNumber_Positive PyExc_FileNotFoundError _Py_EllipsisObject PyComplex_Type PyExc_StopAsyncIteration PyExc_UnicodeEncodeError PyFrozenSet_Type PyByteArray_FromObject PyStructSequence_SetItem PyStructSequence_New PyNumber_Invert PyByteArray_Type PyExc_LookupError PyExc_EnvironmentError PyExc_UnicodeDecodeError PyExc_NameError PyStructSequence_InitType PyExc_OSError PyZip_Type PyMap_Type PyFilter_Type PyReversed_Type PyExc_UnicodeError PyExc_SystemExit PyExc_RuntimeError PyExc_KeyboardInterrupt PyExc_AssertionError PyObject_GetItem PyDict_MergeFromSeq2 PyDict_Merge PyCapsule_New PyUnicode_Find PyObject_Dir PySlice_Type PyMemoryView_Type PyRange_Type PyFloat_Type PyExc_NotImplementedError PyBytes_Type _Py_NotImplementedStruct PyBool_Type PyFrozenSet_New PyProperty_Type PyEnum_Type PyExc_KeyError _PyArg_NoKeywords PyUnicode_GetLength PyUnicode_Substring PyUnicode_FromString PyExc_ImportError PyThreadState_Get

kernel32

GetEnvironmentVariableW SetEnvironmentVariableW CreateFileW GetShortPathNameW CloseHandle GetLastError SetErrorMode GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameW GetModuleHandleA GetProcAddress LoadLibraryExW LoadResource LockResource FormatMessageA FindResourceA SetStdHandle SetDllDirectoryW SetConsoleCtrlHandler RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW

vcruntime140

__C_specific_handler memcpy __current_exception memset memcmp strrchr strchr __current_exception_context

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback terminate _cexit _exit _initterm_e _initterm _get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv abort _set_app_type _seh_filter_exe raise signal _c_exit __p___wargv __p___argc exit

api-ms-win-crt-string-l1-1-0

_wcsdup strcmp strcpy strlen strncpy strncmp wcsncmp wcscmp wcslen

api-ms-win-crt-heap-l1-1-0

free _set_new_mode malloc calloc

api-ms-win-crt-convert-l1-1-0

mbstowcs _wtoi

api-ms-win-crt-stdio-l1-1-0

puts __acrt_iob_func __stdio_common_vfprintf __stdio_common_vswscanf _set_fmode __p__commode __stdio_common_vsprintf

api-ms-win-crt-math-l1-1-0

__setusermatherr copysign

api-ms-win-crt-locale-l1-1-0

_configthreadlocale __initialize_lconv_for_unsigned_char