Glasscase-2[.]4[.]0-portable-x64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Glasscase-2.4.0-portable-x64.exe
Size 8.9MB
Sample261107-3vs74sgs8t
SHA256 de7fcdca95d223a3fc3d6f5076d2b905c483a7daf474d3142e1ed68c53c1a1b7
MD5 61fb4d1e64d8802c89dcfbe6b5cfb02e
SHA1 265d62bcd27566dc9405dcdbbf6e6a1e50641c3e
SHA512 024870390cb4484768efed30febd2bc967cc99838d406ca730d192da86fe2e8a96c0f32c5e193a2517134f5ea36e5eee8c4f1dd7edd39b141fa67584064d5881
SSDEEP 98304:vChWcePkkN6nUu/xiwTJRcFTOpb0VP/p7vgmygH6o660:KgHc8epb0d/p7v0gH6o6Z
TLSH
T1FE96CB19B494561DD8B48C4F017AE3AB14EDE8CDDAE8063867CE07941BF24C61EF53BA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Glasscase-2.4.0-portable-x64.exe

File Explorer

Glasscase-2.4.0-portable-x64.exe

.exe 8.9MB

Glasscase-2.4.0-portable-x64.exe

IMPHASH 256847db5d206486fb1f6fed06b892ae
SHA256 de7fcdca95d223a3fc3d6f5076d2b905c483a7daf474d3142e1ed68c53c1a1b7
MD5 61fb4d1e64d8802c89dcfbe6b5cfb02e
SHA1 265d62bcd27566dc9405dcdbbf6e6a1e50641c3e
SHA512 024870390cb4484768efed30febd2bc967cc99838d406ca730d192da86fe2e8a96c0f32c5e193a2517134f5ea36e5eee8c4f1dd7edd39b141fa67584064d5881
SSDEEP 98304:vChWcePkkN6nUu/xiwTJRcFTOpb0VP/p7vgmygH6o660:KgHc8epb0d/p7v0gH6o6Z
TLSH
T1FE96CB19B494561DD8B48C4F017AE3AB14EDE8CDDAE8063867CE07941BF24C61EF53BA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

comctl32

InitCommonControlsEx

gdi32

CreateFontW CreateSolidBrush SetBkMode SetTextColor

kernel32

CloseHandle CreateFileW CreateProcessW CreateThread DeleteCriticalSection EnterCriticalSection FindResourceW GetEnvironmentVariableW GetLastError GetModuleHandleW GetStartupInfoW InitializeCriticalSection LeaveCriticalSection LoadResource LockResource SetUnhandledExceptionFilter SizeofResource Sleep TlsGetValue VirtualProtect VirtualQuery WaitForSingleObject WriteFile lstrcatW

msvcrt

__C_specific_handler __iob_func __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _commode _fmode _initterm _onexit _wcmdln abort calloc exit fprintf free fwrite malloc memcpy signal strlen strncmp vfprintf wcslen

shell32

SHCreateDirectoryExW

user32

AdjustWindowRectEx CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW FillRect GetClientRect GetMessageW GetSystemMetrics KillTimer LoadCursorW LoadImageW PostQuitMessage RegisterClassExW SendMessageW SetTimer SetWindowPos SetWindowTextW ShowWindow TranslateMessage UpdateWindow wsprintfW

Name

.text

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

540B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

336B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8.8MB

Virtual Size

8.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

116B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Glasscase-2.4.0-portable-x64.exe

comctl32

gdi32

kernel32

msvcrt

shell32

user32

generic