blushie-setup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
blushie-setup.exe
Size 64.4MB
Sample261110-j35fkadh87
SHA256 9948cfbe54d048b8d5f3e306db9b9225ffd80632f46bb52d141724a9bf99dc1e
MD5 cd5f1083f44131edf365c14b46da0675
SHA1 db0e2689e8c64e54428b2a2cf98524101db60ff8
SHA512 ba189e0f262a645b9c6ecff4592cb06b5e1ad1ff14f3271b2a91faa20f077bccda02d2cf404aa2248543980ba71af50db62e6de2424a5078e79fc82f3d194f15
SSDEEP 1572864:ya4mHPGIEFCxhf3g3TR6RzG0VMCtF5Y5E4NG:yD2GIEIJQ3TRen3
TLSH
T14EE73353F2B946ECD1BAC070C2119A939AB7BC4D1577A2DF53D029242E7AEB12B3D704
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
blushie-setup.exe

File Explorer

blushie-setup.exe

.exe 64.4MB

blushie-setup.exe

IMPHASH 1bc45acf8b939c8225741f75854fbb39
SHA256 9948cfbe54d048b8d5f3e306db9b9225ffd80632f46bb52d141724a9bf99dc1e
MD5 cd5f1083f44131edf365c14b46da0675
SHA1 db0e2689e8c64e54428b2a2cf98524101db60ff8
SHA512 ba189e0f262a645b9c6ecff4592cb06b5e1ad1ff14f3271b2a91faa20f077bccda02d2cf404aa2248543980ba71af50db62e6de2424a5078e79fc82f3d194f15
SSDEEP 1572864:ya4mHPGIEFCxhf3g3TR6RzG0VMCtF5Y5E4NG:yD2GIEIJQ3TRen3
TLSH
T14EE73353F2B946ECD1BAC070C2119A939AB7BC4D1577A2DF53D029242E7AEB12B3D704
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

483648

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

blushie_setup.pdb

ntdll

RtlNtStatusToDosError NtCreateNamedPipeFile NtWriteFile NtReadFile NtOpenFile RtlGetVersion

kernel32

ExitProcess SetWaitableTimer GetModuleHandleA GetProcessIoCounters GetExitCodeProcess SleepEx WaitForSingleObject SwitchToThread GetModuleFileNameW GetProcAddress FormatMessageW HeapAlloc MultiByteToWideChar WideCharToMultiByte ReleaseMutex GetSystemDirectoryW GetCurrentProcessId lstrlenW GetWindowsDirectoryW OutputDebugStringA OutputDebugStringW LoadLibraryExW LoadLibraryA WaitForSingleObjectEx GetCurrentProcess FreeLibrary SetLastError HeapReAlloc GetCurrentThread DuplicateHandle WaitForMultipleObjects SetThreadStackGuarantee CompareStringOrdinal LCIDToLocaleName GetUserDefaultUILanguage LoadLibraryW GetModuleHandleW Sleep GetLastError CloseHandle LoadLibraryExA RtlLookupFunctionEntry ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime GetCurrentThreadId HeapFree GetProcessHeap RtlVirtualUnwind CreateMutexA RtlCaptureContext GetCurrentDirectoryW GetConsoleMode FindClose SetFileInformationByHandle GetFileInformationByHandleEx GetCommandLineW GetStdHandle GetConsoleOutputCP InitializeSListHead AddVectoredExceptionHandler SetUnhandledExceptionFilter GetEnvironmentVariableW GetFullPathNameW FindFirstFileExW CreateFileW SetFileTime GetFileInformationByHandle GetTempPathW DeleteFileW CreateThread WriteFileEx ReadFileEx QueryPerformanceCounter QueryPerformanceFrequency CreateWaitableTimerExW CreateEventW CancelIo GetOverlappedResult ReadFile GetEnvironmentStringsW FreeEnvironmentStringsW CreateProcessW GetFileAttributesW FindNextFileW WriteConsoleW

user32

ShowCursor GetActiveWindow GetKeyboardLayout MapVirtualKeyExW GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW SetWindowLongW EnableMenuItem GetSystemMenu GetClipCursor DestroyIcon AdjustWindowRectEx GetMenu ToUnicodeEx ReleaseDC GetWindowRect RegisterWindowMessageA TrackMouseEvent GetClientRect LoadCursorW ShowWindow EnumChildWindows DispatchMessageA GetMessageA IsProcessDPIAware GetDC GetKeyboardState InvalidateRgn SetWindowPos SystemParametersInfoA ValidateRect GetRawInputData SetCursor FillRect GetMonitorInfoW MonitorFromRect CloseTouchInputHandle GetTouchInputInfo SetCapture SystemParametersInfoW ClientToScreen GetWindowLongW ScreenToClient SetPropW GetAsyncKeyState GetWindow SetFocus RegisterTouchWindow GetSystemMetrics SetWindowDisplayAffinity SendMessageW DefWindowProcW IsIconic ReleaseCapture GetCursorPos GetKeyState MsgWaitForMultipleObjectsEx DispatchMessageW TranslateMessage PeekMessageW PostThreadMessageW ClipCursor DestroyWindow GetWindowLongPtrW RedrawWindow SendInput MapVirtualKeyW SetForegroundWindow MonitorFromWindow PostMessageW EnumDisplayMonitors MonitorFromPoint RegisterRawInputDevices GetMessageW SetWindowLongPtrW CreateWindowExW RegisterClassExW GetUpdateRect

oleaut32

GetErrorInfo SysFreeString SetErrorInfo SysStringLen

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

gdi32

CreateRectRgn CreateSolidBrush GetDeviceCaps DeleteObject

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow

ole32

RegisterDragDrop CoUninitialize CoCreateInstance RevokeDragDrop OleInitialize CoInitializeEx

imm32

ImmReleaseContext ImmGetCompositionStringW ImmGetContext

comctl32

RemoveWindowSubclass SetWindowSubclass DefSubclassProc

shlwapi

SHCreateMemStream

shell32

SHAppBarMessage DragFinish DragQueryFileW

advapi32

RegGetValueW RegOpenKeyExW RegQueryValueExW RegCloseKey EventRegister EventWriteTransfer EventUnregister EventSetInformation

combase

CoTaskMemFree CoTaskMemAlloc CoCreateFreeThreadedMarshaler

bcryptprimitives

ProcessPrng

vcruntime140

memcpy __CxxFrameHandler3 memcmp memset memmove wcsrchr __C_specific_handler __current_exception __current_exception_context __std_exception_copy __std_exception_destroy _CxxThrowException _purecall

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-math-l1-1-0

floor roundf trunc __setusermatherr round

api-ms-win-crt-string-l1-1-0

wcslen _wcsicmp wcscmp

api-ms-win-crt-convert-l1-1-0

_ultow_s wcstol _wtoi

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _exit _register_onexit_function _cexit _initterm_e __p___argc _initialize_onexit_table __p___argv _seh_filter_exe _set_app_type _c_exit _get_initial_narrow_environment _register_thread_local_exe_atexit_callback _initterm _crt_atexit exit terminate _configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

malloc _callnewh _set_new_mode free