clicker-windows-x64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
clicker-windows-x64.exe
Size 9.7MB
Sample261023-mk249sdt2n
SHA256 1a530759242149ef0ec62206e87e12cfd01c086eda3910fbb7cbbf4baed0bf9c
MD5 9d5b5ddf89599dba75044c74c3b48c3d
SHA1 3abb136911510dc7af47b41224a9096ed486fdc8
SHA512 8abd0fea3a3aa75a87dd29f255a59c48cd9d7cbbb4076328c5844de5c009ccede5fcaadeb980cbaa3366ab49a235780102c3f49b8588fe54080785a595efb8fe
SSDEEP 98304:KwsAH67x5fv+8utFTS9XjkP0DEzkvK3JyPXvTNVuZxAD+7Pw9Pw:EK+fm8mpoaJxjAD+UB
TLSH
T18CA64B15BA9BA9EDD15AC470834A5A776E2234CB0B36B9FB41C442383F69BE01F3C715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
clicker-windows-x64.exe

File Explorer

clicker-windows-x64.exe

.exe 9.7MB

clicker-windows-x64.exe

IMPHASH 3090849f1148c9a554b09e0e3f1b5fff
SHA256 1a530759242149ef0ec62206e87e12cfd01c086eda3910fbb7cbbf4baed0bf9c
MD5 9d5b5ddf89599dba75044c74c3b48c3d
SHA1 3abb136911510dc7af47b41224a9096ed486fdc8
SHA512 8abd0fea3a3aa75a87dd29f255a59c48cd9d7cbbb4076328c5844de5c009ccede5fcaadeb980cbaa3366ab49a235780102c3f49b8588fe54080785a595efb8fe
SSDEEP 98304:KwsAH67x5fv+8utFTS9XjkP0DEzkvK3JyPXvTNVuZxAD+7Pw9Pw:EK+fm8mpoaJxjAD+UB
TLSH
T18CA64B15BA9BA9EDD15AC470834A5A776E2234CB0B36B9FB41C442383F69BE01F3C715
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7671100

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

clicker.pdb

bcryptprimitives

ProcessPrng

user32

EnableMenuItem SetMenuDefaultItem TrackPopupMenu GetActiveWindow SetWindowLongPtrW RegisterRawInputDevices TranslateMessage GetWindowPlacement DispatchMessageW PeekMessageW GetWindowThreadProcessId GetKeyboardLayout VkKeyScanExW MapVirtualKeyExW GetAsyncKeyState DefWindowProcW RegisterHotKey CreateIcon DestroyIcon SetWindowPos PostMessageW GetSystemMenu CreateWindowExA SendMessageW GetForegroundWindow IsIconic SetWindowPlacement DestroyCursor GetWindowRect SystemParametersInfoA RegisterWindowMessageA GetRawInputData GetWindowLongW GetMenu AdjustWindowRectEx GetSystemMetrics GetKeyboardState GetKeyState IsProcessDPIAware SetWindowDisplayAffinity ShowWindow SetWindowLongW ReleaseCapture SetCapture TrackMouseEvent GetCursorPos GetClipCursor ClipCursor ShowCursor ToUnicodeEx IsWindowVisible GetClientRect LoadCursorW DefWindowProcA SetCursor SetForegroundWindow DestroyWindow CreateWindowExW MapVirtualKeyW MsgWaitForMultipleObjectsEx SendInput UnregisterHotKey SetWindowTextW GetWindowLongPtrW FlashWindowEx OpenClipboard ValidateRect MonitorFromPoint RegisterClassExW InvalidateRgn GetMonitorInfoW ChangeDisplaySettingsExW MonitorFromWindow ClientToScreen CloseTouchInputHandle GetTouchInputInfo MonitorFromRect ScreenToClient RedrawWindow SetClipboardData EmptyClipboard RegisterTouchWindow GetClipboardData RegisterClassExA ReleaseDC GetDC CloseClipboard RegisterClassW

kernel32

GetLastError LoadLibraryExA SetLastError GetProcessHeap CloseHandle GlobalFree HeapFree HeapAlloc FormatMessageW DuplicateHandle GetProcAddress FreeLibrary InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter CreateEventA GetSystemTimeAsFileTime GlobalAlloc GlobalUnlock GlobalSize GlobalLock IsProcessorFeaturePresent RemoveVectoredExceptionHandler SleepEx WriteFileEx ReadFileEx CreateThread GetFileAttributesW FreeEnvironmentStringsW GetEnvironmentStringsW CreateProcessW GetWindowsDirectoryW GetModuleFileNameW GetSystemDirectoryW CompareStringOrdinal FindNextFileW SetFileInformationByHandle CreateFileW GetFullPathNameW GetFileInformationByHandleEx GetFileInformationByHandle GetEnvironmentVariableW WriteConsoleW MultiByteToWideChar WaitForSingleObject GetConsoleOutputCP GetConsoleMode GetStdHandle ReleaseMutex CreateMutexA GetCurrentProcessId lstrlenW LoadLibraryA WaitForSingleObjectEx GetCurrentDirectoryW RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RegisterWaitForSingleObject GetModuleHandleW GetModuleHandleA Sleep VirtualProtect GetCurrentProcess MapViewOfFile CreateFileMappingW GetUserPreferredUILanguages FindClose FindFirstFileExW UnmapViewOfFile WideCharToMultiByte LoadLibraryExW SetThreadErrorMode PostQueuedCompletionStatus CreateIoCompletionPort UnregisterWait GetQueuedCompletionStatusEx QueryPerformanceFrequency GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler SetWaitableTimer CreateWaitableTimerExW SwitchToThread QueryPerformanceCounter GetCurrentThreadId HeapReAlloc GetSystemInfo

ntdll

NtOpenFile NtWriteFile NtCreateNamedPipeFile RtlNtStatusToDosError

oleaut32

SysFreeString SysStringLen GetErrorInfo

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

shlwapi

AssocQueryStringW

shell32

DragQueryFileW DragFinish

gdi32

DeleteDC SelectObject CreateDIBSection BitBlt DeleteObject ChoosePixelFormat CreateCompatibleDC SetPixelFormat GetDeviceCaps CreateRectRgn SwapBuffers DescribePixelFormat GetPixelFormat

advapi32

RegCloseKey RevertToSelf RegOpenKeyExW RegQueryValueExW ImpersonateAnonymousToken

ole32

CoUninitialize CoInitializeEx OleInitialize RevokeDragDrop RegisterDragDrop CoCreateInstance

opengl32

wglGetCurrentContext wglMakeCurrent wglCreateContext wglGetProcAddress wglDeleteContext

d3dcompiler_47

D3DCompile

uxtheme

SetWindowTheme

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute

imm32

ImmReleaseContext ImmAssociateContextEx ImmGetContext ImmGetCompositionStringW

vcruntime140

__CxxFrameHandler3 memcpy memcmp memset __current_exception_context __current_exception __C_specific_handler _CxxThrowException memmove

api-ms-win-crt-math-l1-1-0

ceil pow trunc atan2 _hypotf fmaf fmodf exp2 truncf tan powf round ceilf sinf cosf floorf exp2f acosf __setusermatherr sin roundf tanf fmod acos cos floor

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _exit exit strerror _initialize_onexit_table _register_onexit_function _crt_atexit _initterm terminate _initterm_e _get_initial_narrow_environment _seh_filter_exe _set_app_type _configure_narrow_argv _initialize_narrow_environment

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free