DeskAura_Portable[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
DeskAura_Portable.exe
Size 10.1MB
Sample261104-yk2paaft6m
SHA256 a15f40960eccfece5972f218c7d8933f1c4b91fa81749c74d90d2ffc58cd5e7b
MD5 132eacbb1077a469b4e9d8078abf79ed
SHA1 a5b87ceb090dedf8eeaac9cc244e53816f3b4cf9
SHA512 4daa0cae6e5ae92df17f54a4779b8a99dcb1fd2858d46969fbbb50300e53d122cc036e69ca3c73aa8336d2e95c8da4d0474efd39eff37db052d04d03866b00af
SSDEEP 98304:fbS2qUCyG13alqtjRS88exWifFs/4luLl+WvuZNg5UsRcVPx:fG2q2xlqtjRnfF9lmlWZNg5RmZ
TLSH
T1D9B6F7257A5B996CD05BC474834B8A660D7070CB0B35B9FF548896382FAEBF42F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DeskAura_Portable.exe

File Explorer

DeskAura_Portable.exe

.exe 10.1MB

DeskAura_Portable.exe

IMPHASH 61bc6f7e4dc3da57c73ce7c6f3d00117
SHA256 a15f40960eccfece5972f218c7d8933f1c4b91fa81749c74d90d2ffc58cd5e7b
MD5 132eacbb1077a469b4e9d8078abf79ed
SHA1 a5b87ceb090dedf8eeaac9cc244e53816f3b4cf9
SHA512 4daa0cae6e5ae92df17f54a4779b8a99dcb1fd2858d46969fbbb50300e53d122cc036e69ca3c73aa8336d2e95c8da4d0474efd39eff37db052d04d03866b00af
SSDEEP 98304:fbS2qUCyG13alqtjRS88exWifFs/4luLl+WvuZNg5UsRcVPx:fG2q2xlqtjRnfF9lmlWZNg5RmZ
TLSH
T1D9B6F7257A5B996CD05BC474834B8A660D7070CB0B35B9FF548896382FAEBF42F38359
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6673584

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

deskaura.pdb

bcryptprimitives

ProcessPrng

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW RegGetValueW RegDeleteValueW RegSetValueExW EventUnregister EventWriteTransfer RegCreateKeyExW EventSetInformation EventRegister

ntdll

NtWriteFile RtlGetVersion NtCreateNamedPipeFile NtOpenFile RtlNtStatusToDosError NtReadFile

kernel32

RtlPcToFileHeader RaiseException EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree FindNextFileW RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext TerminateProcess GetSystemInfo QueryPerformanceCounter GetSystemTimePreciseAsFileTime WriteFileEx CreateProcessW GetWindowsDirectoryW IsProcessorFeaturePresent lstrlenW GetSystemDirectoryW CompareStringOrdinal FreeEnvironmentStringsW SleepEx InitializeSListHead ReadFileEx CreateThread SetWaitableTimer GetCurrentThreadId GetConsoleOutputCP GetStdHandle WriteConsoleW MultiByteToWideChar IsDebuggerPresent QueryPerformanceFrequency GetSystemTimeAsFileTime GetTempPathW GetFullPathNameW SetEnvironmentVariableW FindClose LCIDToLocaleName SwitchToThread GetFileInformationByHandleEx GetFinalPathNameByHandleW CreateDirectoryW GetCommandLineW SleepConditionVariableSRW WakeAllConditionVariable GetEnvironmentStringsW GetCurrentDirectoryW LoadLibraryW OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetLastError GetProcessHeap HeapFree LoadLibraryExW UnhandledExceptionFilter FreeLibrary SetLastError GetCurrentThread SetThreadStackGuarantee SetUnhandledExceptionFilter AddVectoredExceptionHandler LoadLibraryA AcquireSRWLockExclusive DuplicateHandle SetFileTime SetFileInformationByHandle ReleaseMutex CreateMutexA GetCurrentProcessId WaitForSingleObjectEx WideCharToMultiByte GetCurrentProcess HeapReAlloc WaitForSingleObject GetEnvironmentVariableW GetModuleHandleW CreateFileW GetUserDefaultUILanguage ExitProcess RtlUnwindEx GetTickCount LoadLibraryExA ReleaseSRWLockExclusive HeapAlloc GetModuleHandleA Sleep GetProcAddress CloseHandle FormatMessageW DeleteCriticalSection GetFileAttributesW GetFileInformationByHandle GetConsoleMode FindFirstFileExW CreateWaitableTimerExW InitializeCriticalSectionAndSpinCount

user32

PostQuitMessage GetLastInputInfo CheckMenuItem CreateAcceleratorTableW RemoveMenu CreatePopupMenu GetForegroundWindow CreateMenu GetDesktopWindow SetMenu SetMenuItemInfoW AppendMenuW DrawMenuBar InsertMenuW DrawIconEx GetMenuItemInfoW GetShellWindow GetWindowRect MonitorFromWindow GetMonitorInfoW FindWindowW ShowWindow SetForegroundWindow DestroyWindow TranslateAcceleratorW DestroyAcceleratorTable SetTimer KillTimer TrackPopupMenu ChangeWindowMessageFilterEx RegisterClassW AdjustWindowRect RedrawWindow IsIconic GetMenuBarInfo CreateIcon GetAsyncKeyState GetKeyboardState GetKeyState MapVirtualKeyExW GetKeyboardLayout ToUnicodeEx RegisterTouchWindow GetRawInputData SystemParametersInfoA SetPropW SetWindowTextW GetWindowTextW DestroyMenu SendInput GetMenu IsWindowVisible EnumDisplayMonitors MonitorFromPoint SetWindowDisplayAffinity SetWindowLongW EnableMenuItem GetSystemMenu ClipCursor GetClipCursor ShowCursor RegisterClassExW RegisterRawInputDevices AdjustWindowRectEx CreateWindowExW ClientToScreen ReleaseCapture SetCapture MsgWaitForMultipleObjectsEx GetSystemMetrics SetWindowPos RegisterWindowMessageA SetParent MapWindowPoints GetWindow SetFocus ReleaseDC GetDC IsProcessDPIAware InvalidateRgn SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW SetWindowRgn EnableWindow IsWindowEnabled GetWindowDC GetIconInfo LoadImageW DestroyIcon OffsetRect EnumChildWindows DispatchMessageA GetMessageA LoadCursorW GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW GetUpdateRect MapVirtualKeyW ValidateRect GetCursorPos SystemParametersInfoW SetCursor MonitorFromRect CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent FillRect GetClientRect GetWindowLongW ScreenToClient DrawTextW FlashWindowEx DefWindowProcW PostThreadMessageW PeekMessageW DispatchMessageW TranslateMessage GetMessageW VkKeyScanW SendMessageW SetCursorPos PostMessageW GetActiveWindow UpdateWindow InvalidateRect GetWindowTextLengthW

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

ole32

CoInitializeEx RevokeDragDrop CoCreateInstance RegisterDragDrop CoUninitialize OleInitialize

gdi32

GetDIBits DeleteObject CreateSolidBrush CreateCompatibleDC CombineRgn CreateRectRgn SelectObject BitBlt DeleteDC SetTextColor SetBkMode GetDeviceCaps CreateDIBSection

dwmapi

DwmEnableBlurBehindWindow DwmGetWindowAttribute DwmSetWindowAttribute

shell32

SHGetKnownFolderPath DragFinish Shell_NotifyIconGetRect DragQueryFileW Shell_NotifyIconW SHAppBarMessage ShellExecuteW SHGetStockIconInfo

comctl32

SetWindowSubclass RemoveWindowSubclass TaskDialogIndirect DefSubclassProc

shlwapi

SHCreateMemStream

combase

CoTaskMemFree CoTaskMemAlloc CoCreateFreeThreadedMarshaler

imm32

ImmGetCompositionStringW ImmReleaseContext ImmGetContext

oleaut32

SysStringLen SetErrorInfo GetErrorInfo SysFreeString

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

api-ms-win-crt-math-l1-1-0

pow __setusermatherr roundf trunc floor round

api-ms-win-crt-string-l1-1-0

wcsncmp wcscmp strlen strcmp wcslen _wcsicmp strcpy_s

api-ms-win-crt-convert-l1-1-0

_ultow_s _wtoi wcstol

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode calloc free _callnewh

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _cexit abort _configure_narrow_argv terminate _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e _register_thread_local_exe_atexit_callback _c_exit exit __p___argv __p___argc _exit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale