Clipback-0[.]5[.]5-portable[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Clipback-0.5.5-portable.exe
Size 15.3MB
Sample261029-3wvsbsfx4w
SHA256 7979cddc91bd7f144961897410cf04456b6a78405b3b6d0c1cda7a5bccaa01b0
MD5 fe7017f6889f8db18cf9dfc5191f6e6d
SHA1 0b7adbe19e92027b4dca1f2f75536b7db9f1afdc
SHA512 2f807bfee9a75b5934d95957645f1575ba8ad18fa94f03e39511a5751f5b80eb7d5e6f4f8ffd4d1fd110873cf5d8600f5d78d17b7d85f338c22853e7bc72c741
SSDEEP 98304:AnIoTe79QNtX/9BW9hi2AaYT/mx3V+lOgc7fYy/jBoRr2bldh6Hx5+KOVkKZNl+q:AnXiuNt1I4bzAwAjBE2b8qCKZNuYcod
TLSH
T1B1F61811BA6B98ACD55BC87083478A634E2130DB1A36B9FF45C442393F7DBF06B39658
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Clipback-0.5.5-portable.exe

File Explorer

Clipback-0.5.5-portable.exe

.exe 15.3MB

Clipback-0.5.5-portable.exe

IMPHASH 36d70b16e85d92e285805740a09ff257
SHA256 7979cddc91bd7f144961897410cf04456b6a78405b3b6d0c1cda7a5bccaa01b0
MD5 fe7017f6889f8db18cf9dfc5191f6e6d
SHA1 0b7adbe19e92027b4dca1f2f75536b7db9f1afdc
SHA512 2f807bfee9a75b5934d95957645f1575ba8ad18fa94f03e39511a5751f5b80eb7d5e6f4f8ffd4d1fd110873cf5d8600f5d78d17b7d85f338c22853e7bc72c741
SSDEEP 98304:AnIoTe79QNtX/9BW9hi2AaYT/mx3V+lOgc7fYy/jBoRr2bldh6Hx5+KOVkKZNl+q:AnXiuNt1I4bzAwAjBE2b8qCKZNuYcod
TLSH
T1B1F61811BA6B98ACD55BC87083478A634E2130DB1A36B9FF45C442393F7DBF06B39658
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11787248

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

clipback.pdb

bcryptprimitives

ProcessPrng

kernel32

HeapFree GetUserDefaultUILanguage LCIDToLocaleName HeapAlloc CloseHandle GetLastError Sleep GetProcAddress GetModuleHandleA SetThreadStackGuarantee GetCurrentThread HeapReAlloc GetProcessHeap GetModuleHandleW ReleaseSRWLockExclusive lstrlenW SwitchToThread GetCurrentThreadId WaitForMultipleObjects GetExitCodeProcess AcquireSRWLockExclusive LoadLibraryA WakeAllConditionVariable SleepConditionVariableSRW ReleaseMutex GetCommandLineW FreeEnvironmentStringsW GetEnvironmentStringsW GetEnvironmentVariableW GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext SetEnvironmentVariableW AddVectoredExceptionHandler OpenProcess GetSystemTimes GetSystemTimeAsFileTime IsDebuggerPresent Process32NextW Process32FirstW CreateToolhelp32Snapshot IsProcessorFeaturePresent TerminateProcess QueryPerformanceFrequency DeleteCriticalSection RtlPcToFileHeader GlobalFree CreateSymbolicLinkW MoveFileExW GetFinalPathNameByHandleW RaiseException GlobalUnlock DeleteFileW RemoveDirectoryW GetTempPathW GetFileAttributesW CreateProcessW CancelIo CreateDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle FindFirstFileExW SetFileInformationByHandle SetFileTime GetFullPathNameW GlobalLock WriteFileEx RtlLookupFunctionEntry SetLastError WaitForSingleObjectEx GetCurrentProcess WideCharToMultiByte FormatMessageW MultiByteToWideChar FlsAlloc GetModuleHandleExW FlsFree FlsSetValue IsThreadAFiber ReadFileEx SleepEx SetHandleInformation ExitProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW GetModuleFileNameW DuplicateHandle WriteConsoleW GlobalAlloc GetConsoleOutputCP GetConsoleMode GetStdHandle CreateMutexA GetCurrentProcessId EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree CreateFileW GlobalMemoryStatusEx InitializeSListHead LoadLibraryW UnhandledExceptionFilter GetSystemTimePreciseAsFileTime CancelIoEx WriteFile SetFileCompletionNotificationModes WaitForSingleObject CreateIoCompletionPort SetWaitableTimer SetUnhandledExceptionFilter GetSystemInfo InitializeCriticalSectionAndSpinCount PostQueuedCompletionStatus GetQueuedCompletionStatusEx CreateEventW QueryDosDeviceW CreateMutexW SetFileAttributesW LoadLibraryExA FreeLibrary GetOverlappedResult SetFilePointerEx CopyFileExW GetDiskFreeSpaceExW OutputDebugStringA OutputDebugStringW LoadLibraryExW FindNextFileW GetLocalTime FindClose CreateThread RtlUnwindEx CreateWaitableTimerExW DeviceIoControl QueryPerformanceCounter ReadFile

advapi32

RegGetValueW EventSetInformation EventWriteTransfer SystemFunction036 RegCloseKey RegCreateKeyTransactedW RegCreateKeyExW RegOpenKeyTransactedW RegOpenKeyExW RegQueryValueExW EventUnregister RegSetValueExW RegDeleteValueW EventRegister

ntdll

NtWriteFile NtOpenFile NtQuerySystemInformation RtlNtStatusToDosError RtlGetVersion NtReadFile NtCreateNamedPipeFile NtCreateFile NtCancelIoFileEx NtDeviceIoControlFile

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute DwmGetWindowAttribute

oleaut32

VariantClear SetErrorInfo SysStringLen GetErrorInfo SysFreeString

user32

CreateMenu CreatePopupMenu DrawIconEx SetMenuItemInfoW EnableMenuItem InsertMenuW VkKeyScanW CheckMenuItem DrawTextW GetWindowDC OffsetRect MapWindowPoints GetMenuBarInfo TranslateMessage DispatchMessageW PostThreadMessageW ChangeDisplaySettingsExW SetWindowPlacement GetWindowPlacement DestroyWindow PostQuitMessage TrackMouseEvent CreateAcceleratorTableW SystemParametersInfoA ShowWindow ShutdownBlockReasonCreate ShutdownBlockReasonDestroy OpenInputDesktop CloseDesktop DestroyMenu AppendMenuW TrackPopupMenu IsProcessDPIAware RegisterClassW GetDpiForSystem LoadCursorW RegisterWindowMessageA GetWindowTextLengthW GetSystemMenu SetWindowLongW SetWindowTextW GetDC UpdateLayeredWindow RemoveMenu ShowCursor GetClipCursor ClipCursor GetKeyboardState GetKeyState MapVirtualKeyExW GetKeyboardLayout DestroyAcceleratorTable ReleaseDC RegisterHotKey GetAsyncKeyState OpenClipboard EmptyClipboard SetClipboardData CloseClipboard GetMonitorInfoW GetMessageW MsgWaitForMultipleObjectsEx GetTouchInputInfo SystemParametersInfoW ToUnicodeEx GetMenu SetPropW CreateIcon AdjustWindowRect SetCapture FindWindowExW GetWindowTextW GetParent SendMessageTimeoutW AllowSetForegroundWindow GetWindowThreadProcessId FindWindowW ReleaseCapture FillRect UnregisterHotKey GetWindowLongW SetParent SetWindowRgn ScreenToClient KillTimer SetWindowLongPtrW SetTimer PeekMessageW RegisterTouchWindow SetWindowDisplayAffinity DefWindowProcW CreateIconIndirect GetMessageA CreateWindowExW AdjustWindowRectEx RegisterClassExW UpdateWindow InvalidateRect DispatchMessageA SetCursorPos SendInput MapVirtualKeyW SetForegroundWindow GetForegroundWindow InvalidateRgn SetWindowPos GetWindowRect GetClientRect FlashWindowEx SetCursor GetActiveWindow ClientToScreen IsWindowEnabled EnableWindow GetWindowLongPtrW MonitorFromWindow IsIconic IsWindowVisible RegisterRawInputDevices EnumDisplayMonitors MonitorFromPoint SendMessageW RedrawWindow GetCursorPos PostMessageW EnumDisplaySettingsW DestroyIcon MonitorFromRect GetIconInfo LoadImageW CloseTouchInputHandle GetSystemMetrics GetWindow TranslateAcceleratorW GetUpdateRect ValidateRect GetRawInputData DrawMenuBar SetMenu GetMenuItemInfoW ChangeWindowMessageFilterEx EnumChildWindows SetFocus

gdi32

GetObjectW GetDeviceCaps SetTextColor SetBkMode CreateDIBSection CreateCompatibleDC SelectObject CreateRectRgn CombineRgn GetDIBits DeleteObject BitBlt DeleteDC CreateSolidBrush CreateBitmap

ole32

RevokeDragDrop CoCreateInstance OleInitialize CoUninitialize CoInitializeEx PropVariantClear RegisterDragDrop DoDragDrop

imm32

ImmReleaseContext ImmGetCompositionStringW ImmGetContext

shell32

SHFileOperationW DragFinish SHGetKnownFolderPath SHGetStockIconInfo Shell_NotifyIconW DragQueryFileW SHOpenFolderAndSelectItems SHCreateShellItemArrayFromIDLists Shell_NotifyIconGetRect ILCreateFromPathW ShellExecuteExW SHCreateItemFromParsingName ILFree ExtractIconExW ShellExecuteW SHDefExtractIconW SHAppBarMessage

combase

CoTaskMemFree CoTaskMemAlloc CoCreateFreeThreadedMarshaler

comctl32

DefSubclassProc RemoveWindowSubclass SetWindowSubclass TaskDialogIndirect

shlwapi

SHCreateMemStream

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor

propsys

PropVariantToBSTR

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

ws2_32

ioctlsocket WSAGetLastError WSAIoctl bind WSASocketW getsockopt closesocket recv WSAStartup WSACleanup getpeername setsockopt getaddrinfo connect WSASend shutdown send freeaddrinfo getsockname

crypt32

CertVerifyCertificateChainPolicy CertGetCertificateChain CertSetCertificateContextProperty CertOpenStore CertCloseStore CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertAddEncodedCertificateToStore CertFreeCertificateContext CertFreeCertificateChain

bcrypt

BCryptGenRandom

winmm

timeBeginPeriod timeEndPeriod PlaySoundW

dxgi

CreateDXGIFactory1

pdh

PdhAddEnglishCounterW PdhCloseQuery PdhOpenQueryW PdhGetFormattedCounterArrayW PdhCollectQueryData

mfplat

MFCreateMemoryBuffer MFStartup MFShutdown MFCreateDXGISurfaceBuffer MFCreateAttributes MFTEnumEx MFCreateDXGIDeviceManager MFCreateMediaType MFCreateSample

d3d11

D3D11CreateDevice

mmdevapi

ActivateAudioInterfaceAsync

d3dcompiler_47

D3DCompile

mfreadwrite

MFCreateSourceReaderFromURL

windowscodecs

WICConvertBitmapSource

api-ms-win-crt-math-l1-1-0

roundf round log10f floor log2 ceil pow ceilf sinf trunc tanhf expf powf __setusermatherr

api-ms-win-crt-string-l1-1-0

_wcsicmp wcscmp strcpy_s strcmp strlen wcslen wcsncmp

api-ms-win-crt-convert-l1-1-0

wcstol _wtoi _ultow_s

api-ms-win-crt-runtime-l1-1-0

_initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv exit _exit _set_app_type _seh_filter_exe __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback abort _initialize_onexit_table _register_onexit_function _crt_atexit terminate

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free malloc _callnewh calloc