MiddleMouseButtonIsOpenKey[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
MiddleMouseButtonIsOpenKey.exe
Size 8.4MB
Sample261030-wxyr2sfb89
SHA256 bb56d343c79057adb3e835587a884122c7440b909746a86bf4782d556ecf0653
MD5 c541a8526ebc556b1d5b71d4931c9477
SHA1 7e8ea1b4cc3ea7c74715b877d16be0a83fb9e9f9
SHA512 dbe8a3c14536e6d8aa5cc8aeed018adb37d6e415720d14e352b0adb22feabdb3de1186e1f9efec9b8d977e8cb510cb2bb48be436f0ac85bb2cfc637774ef586e
SSDEEP 98304:qhODkVSW73XlCvL/Qz0X1EmRthx4hB2SgwOfQ9hXQAOssS:6Gqx3XlCyMimILPgwDm
TLSH
T14C96E065639CAF6DE12AA035C6829253A7F37C052332DFAB56D00F935E4F560FA1A70C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MiddleMouseButtonIsOpenKey.exe

File Explorer

MiddleMouseButtonIsOpenKey.exe

.exe 8.4MB

MiddleMouseButtonIsOpenKey.exe

IMPHASH 4854ba9c9c2af21cd435775d88870599
SHA256 bb56d343c79057adb3e835587a884122c7440b909746a86bf4782d556ecf0653
MD5 c541a8526ebc556b1d5b71d4931c9477
SHA1 7e8ea1b4cc3ea7c74715b877d16be0a83fb9e9f9
SHA512 dbe8a3c14536e6d8aa5cc8aeed018adb37d6e415720d14e352b0adb22feabdb3de1186e1f9efec9b8d977e8cb510cb2bb48be436f0ac85bb2cfc637774ef586e
SSDEEP 98304:qhODkVSW73XlCvL/Qz0X1EmRthx4hB2SgwOfQ9hXQAOssS:6Gqx3XlCyMimILPgwDm
TLSH
T14C96E065639CAF6DE12AA035C6829253A7F37C052332DFAB56D00F935E4F560FA1A70C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4318256

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetComputerNameA SetUnhandledExceptionFilter GetExitCodeProcess GetModuleFileNameA DeleteFileA GetTickCount64 AcquireSRWLockShared ReleaseSRWLockShared InitOnceBeginInitialize InitOnceComplete InitializeSListHead LocalFree GetCurrentThreadId GetCurrentProcessId GetModuleHandleW GetStartupInfoW IsDebuggerPresent SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive IsProcessorFeaturePresent UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext CreateWaitableTimerExW AddVectoredExceptionHandler CreateThread CloseHandle Sleep MultiByteToWideChar Module32First WaitForSingleObject SetErrorMode Module32Next GetModuleFileNameW TerminateProcess GetCurrentProcess SetWaitableTimer QueryPerformanceCounter FreeLibrary GetProcAddress QueryPerformanceFrequency GetLastError LoadLibraryA GetLocaleInfoA GetModuleHandleA GlobalUnlock WideCharToMultiByte GlobalLock GlobalFree GlobalAlloc GetSystemTimeAsFileTime

user32

CloseClipboard SetCursorPos ReleaseCapture GetCursorPos ReleaseDC OpenClipboard SetClipboardData MapVirtualKeyW DispatchMessageA GetWindowRect DestroyWindow IsWindowVisible SetWindowPos EnumDisplayMonitors GetSystemMetrics GetKeyboardState ShowWindow IsWindow GetAsyncKeyState GetCursorInfo MapWindowPoints GetRawInputData GetMonitorInfoA MoveWindow DefWindowProcA CreateWindowExA TranslateMessage ToUnicode PeekMessageA UpdateLayeredWindow GetWindowLongPtrA DrawIconEx PostQuitMessage SetWindowLongPtrA FindWindowA RegisterClassExA UpdateWindow SetForegroundWindow GetKeyState GetMessageExtraInfo LoadCursorA EmptyClipboard IsWindowUnicode GetClipboardData GetDC MonitorFromWindow ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCapture SetCursor GetClientRect

gdi32

SelectObject CreateDIBSection CreateCompatibleDC GetStockObject DeleteDC GetPixel

advapi32

LookupPrivilegeValueA GetUserNameA RegCloseKey RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegDeleteValueW RegQueryValueExW AdjustTokenPrivileges GetTokenInformation OpenProcessToken ConvertSidToStringSidA

shell32

ShellExecuteA

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

d3dcompiler_47

D3DCompile

dwmapi

DwmUpdateThumbnailProperties DwmRegisterThumbnail DwmUnregisterThumbnail

msvcp140

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?good@ios_base@std@@QEBA_NXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?uncaught_exceptions@std@@YAHXZ ?_Xbad_function_call@std@@YAXXZ _Cnd_broadcast _Mtx_trylock _Cnd_signal _Query_perf_frequency ?_Throw_Cpp_error@std@@YAXH@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Random_device@std@@YAIXZ ?_Xlength_error@std@@YAXPEBD@Z _Mtx_lock _Cnd_do_broadcast_at_thread_exit _Cnd_wait _Thrd_id _Query_perf_counter _Thrd_detach _Thrd_join _Mtx_unlock

d3d11

D3D11CreateDeviceAndSwapChain

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memchr memcmp memcpy memmove memset _CxxThrowException __current_exception_context __current_exception wcsrchr wcsstr __std_exception_copy __std_exception_destroy __C_specific_handler strstr __std_terminate

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s _set_fmode __stdio_common_vsscanf __p__commode __stdio_common_vfprintf fread fgets fopen_s __stdio_common_vsprintf _wfopen fwrite fseek fclose fflush __acrt_iob_func ftell

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

isxdigit strcmp tolower strncmp _stricmp strncpy_s strncpy

api-ms-win-crt-heap-l1-1-0

_set_new_mode _callnewh malloc realloc free

api-ms-win-crt-convert-l1-1-0

strtol mbstowcs atof atoll

api-ms-win-crt-runtime-l1-1-0

_beginthreadex _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit _cexit _seh_filter_exe _set_app_type _errno _get_narrow_winmain_command_line _initterm _initterm_e exit _exit terminate _c_exit _register_thread_local_exe_atexit_callback _configure_narrow_argv _invoke_watson abort

api-ms-win-crt-time-l1-1-0

_localtime64_s _time64 strftime

api-ms-win-crt-math-l1-1-0

roundf sqrtf _fdclass sinf powf __setusermatherr fmodf floorf acosf expf ldexp cosf ceilf pow atan2f

api-ms-win-crt-locale-l1-1-0

_configthreadlocale