RadioWidget_0[.]5[.]15_x64-portable[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
RadioWidget_0.5.15_x64-portable.exe
Size 5.7MB
Sample261113-eelakazv5q
SHA256 b0ef2a17fda3316dd1c035b3f6a20fda0006e1e3143d7f1d782975c7ad668a13
MD5 4ec70a8ca389555cc451eff87718c10f
SHA1 00396f1287ca6d9ba46110c3ce99263a73115e76
SHA512 b0749e74c5cf01f7565bcb6e2b6d94d9319d9b83d92ccea801758f44e5eba269dd12bd64dfd4187bcec0c0830df20e223397f7ae31436d9f7295e432d10ca9fa
SSDEEP 98304:G3sLEw8y8DRPUbaXq2aBipAgELfNZNuLn+lSN:7Ew8DXq2akirlZN4A
TLSH
T1C5567C03F2A291E9C05EC178D35AA233EB3278990A3075EF5BE45B213E66F506F1D758
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RadioWidget_0.5.15_x64-portable.exe

File Explorer

RadioWidget_0.5.15_x64-portable.exe

.exe 5.7MB

RadioWidget_0.5.15_x64-portable.exe

IMPHASH bcbe7ebd42c2603d9f25c09ef9b983be
SHA256 b0ef2a17fda3316dd1c035b3f6a20fda0006e1e3143d7f1d782975c7ad668a13
MD5 4ec70a8ca389555cc451eff87718c10f
SHA1 00396f1287ca6d9ba46110c3ce99263a73115e76
SHA512 b0749e74c5cf01f7565bcb6e2b6d94d9319d9b83d92ccea801758f44e5eba269dd12bd64dfd4187bcec0c0830df20e223397f7ae31436d9f7295e432d10ca9fa
SSDEEP 98304:G3sLEw8y8DRPUbaXq2aBipAgELfNZNuLn+lSN:7Ew8DXq2akirlZN4A
TLSH
T1C5567C03F2A291E9C05EC178D35AA233EB3278990A3075EF5BE45B213E66F506F1D758
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4009840

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

radio_widget.pdb

user32

MonitorFromPoint EnumDisplayMonitors AdjustWindowRect RedrawWindow PostMessageW GetWindowLongPtrW GetMessageW TranslateMessage DispatchMessageW DestroyWindow SetWindowLongPtrW DefWindowProcW PostThreadMessageW PeekMessageW MsgWaitForMultipleObjectsEx IsWindowVisible IsIconic GetWindowRect EnumWindows GetRawInputData ValidateRect GetUpdateRect MapVirtualKeyW GetSystemMetrics LoadImageW GetIconInfo DestroyIcon TranslateAcceleratorW UnregisterHotKey SendMessageW RegisterClassExW CreateWindowExW FindWindowW GetWindowThreadProcessId AllowSetForegroundWindow SendMessageTimeoutW RegisterClassW ChangeWindowMessageFilterEx SetWindowPos GetMessageA DispatchMessageA EnumChildWindows GetParent GetWindowLongW GetWindowTextLengthW GetAsyncKeyState RegisterHotKey SetMenuItemInfoW DrawMenuBar RemoveMenu DestroyMenu DestroyAcceleratorTable GetActiveWindow CreateAcceleratorTableW PostQuitMessage ShowWindow SystemParametersInfoA GetMenuItemInfoW GetMenuBarInfo GetClientRect MapWindowPoints OffsetRect GetWindowDC FillRect ReleaseDC DrawTextW CheckMenuItem SendInput VkKeyScanW InsertMenuW AppendMenuW GetDC DrawIconEx CreateMenu CreatePopupMenu EnableMenuItem SetMenu GetCursorPos ClientToScreen SetForegroundWindow TrackPopupMenu MonitorFromWindow IsProcessDPIAware RegisterWindowMessageA InvalidateRgn GetSystemMenu SetWindowLongW GetMenu AdjustWindowRectEx ChangeDisplaySettingsExW SetWindowPlacement GetWindowPlacement GetMonitorInfoW RegisterRawInputDevices ReleaseCapture SetWindowDisplayAffinity GetWindowTextW SetWindowTextW ShowCursor GetClipCursor ClipCursor GetKeyboardState MapVirtualKeyExW GetKeyboardLayout ToUnicodeEx SystemParametersInfoW SetPropW EnableWindow IsWindowEnabled FlashWindowEx GetForegroundWindow LoadCursorW SetCursor SetCursorPos InvalidateRect UpdateWindow RegisterTouchWindow GetKeyState ScreenToClient SetCapture GetTouchInputInfo CloseTouchInputHandle MonitorFromRect TrackMouseEvent CreateIcon FindWindowExW SetWindowRgn KillTimer SetTimer GetWindow SetFocus SetParent

bcryptprimitives

ProcessPrng

kernel32

IsThreadAFiber GetWindowsDirectoryW ReleaseMutex SleepEx FlsFree SwitchToThread GetSystemDirectoryW GetModuleHandleExW FlsSetValue LoadLibraryExW GetModuleHandleW GetSystemInfo MultiByteToWideChar OutputDebugStringW FormatMessageW WideCharToMultiByte CreateMutexW GetCurrentProcess WaitForSingleObjectEx FlsAlloc GetCurrentThreadId RtlLookupFunctionEntry InitializeSListHead GetSystemTimePreciseAsFileTime LoadLibraryW GetFinalPathNameByHandleW OutputDebugStringA OpenProcess GetModuleHandleA GetCurrentProcessId SetHandleInformation GetQueuedCompletionStatusEx PostQueuedCompletionStatus ReadFile GetOverlappedResult RtlUnwindEx CreateIoCompletionPort SetFileCompletionNotificationModes GetModuleFileNameW WriteFile CancelIoEx ExitProcess SleepConditionVariableSRW LoadLibraryA FreeLibrary LoadLibraryExA WaitForSingleObject CreateFileW SetNamedPipeHandleState QueryFullProcessImageNameW SetUnhandledExceptionFilter ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SetWaitableTimer DuplicateHandle CreateMutexA GetStdHandle GetConsoleMode GetConsoleOutputCP EncodePointer WriteConsoleW ReadFileEx WriteFileEx GetSystemTimeAsFileTime SetLastError lstrlenW CreateThread GetFullPathNameW FindFirstFileExW FindClose SetFileTime SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW CreateProcessW GetFileAttributesW Sleep GetTempPathW DeleteFileW CreateSymbolicLinkW CreateWaitableTimerExW HeapReAlloc GetProcAddress GetCurrentThread GetLastError SetFilePointerEx FindNextFileW SetFileAttributesW SetThreadStackGuarantee DeviceIoControl CompareStringOrdinal InitializeCriticalSectionEx LCIDToLocaleName SetEnvironmentVariableW AddVectoredExceptionHandler RtlCaptureContext RtlVirtualUnwind GetCurrentDirectoryW GetEnvironmentVariableW QueryPerformanceFrequency QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetCommandLineW HeapAlloc CloseHandle HeapFree GetProcessHeap GetUserDefaultUILanguage RtlPcToFileHeader RaiseException FlsGetValue DeleteCriticalSection

advapi32

EventRegister RegGetValueW EventUnregister EventWriteTransfer EventSetInformation RegOpenKeyExW RegCloseKey RegCreateKeyTransactedW RegCreateKeyExW RegOpenKeyTransactedW RegQueryValueExW RegSetValueExW RegDeleteValueW SystemFunction036

ntdll

RtlGetVersion RtlNtStatusToDosError NtCreateNamedPipeFile NtDeviceIoControlFile NtCancelIoFileEx NtCreateFile NtWriteFile NtReadFile NtOpenFile

dwmapi

DwmEnableBlurBehindWindow DwmGetWindowAttribute DwmSetWindowAttribute

comctl32

DefSubclassProc SetWindowSubclass TaskDialogIndirect RemoveWindowSubclass

oleaut32

SetErrorInfo SysFreeString SysStringLen GetErrorInfo

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

combase

CoTaskMemAlloc CoTaskMemFree CoIncrementMTAUsage CoCreateFreeThreadedMarshaler

ole32

OleInitialize CoInitializeEx CoCreateInstance RevokeDragDrop RegisterDragDrop CoUninitialize

shell32

DragFinish Shell_NotifyIconW ShellExecuteW SHGetKnownFolderPath SHGetStockIconInfo DragQueryFileW SHAppBarMessage Shell_NotifyIconGetRect SetCurrentProcessExplicitAppUserModelID

gdi32

SetTextColor CreateSolidBrush CreateRectRgn CreateDIBSection SelectObject DeleteDC GetDeviceCaps SetBkMode GetDIBits CreateCompatibleDC CombineRgn BitBlt DeleteObject

shlwapi

SHCreateMemStream

imm32

ImmGetCompositionStringW ImmReleaseContext ImmGetContext

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

crypt32

CertEnumCertificatesInStore CertAddCertificateContextToStore CertDuplicateCertificateChain CertSetCertificateContextProperty CertAddEncodedCertificateToStore CertFreeCertificateChainEngine CertCreateCertificateChainEngine CertOpenStore CertDuplicateCertificateContext CertVerifyCertificateChainPolicy CertGetCertificateChain CertFreeCertificateChain CertFreeCertificateContext CertCloseStore CertDuplicateStore

secur32

AcquireCredentialsHandleA EncryptMessage DecryptMessage FreeContextBuffer FreeCredentialsHandle QueryContextAttributesW AcceptSecurityContext InitializeSecurityContextW DeleteSecurityContext

ws2_32

WSAIoctl send getaddrinfo recv WSADuplicateSocketW WSAGetLastError getpeername WSASocketW getsockname shutdown listen bind WSARecv ioctlsocket connect freeaddrinfo setsockopt getsockopt WSASend select WSAStartup closesocket accept

bcrypt

BCryptGenRandom

api-ms-win-crt-math-l1-1-0

floor pow round __setusermatherr trunc roundf

api-ms-win-crt-string-l1-1-0

wcscmp _wcsicmp strcpy_s wcslen

api-ms-win-crt-convert-l1-1-0

wcstol _wtoi _ultow_s

api-ms-win-crt-runtime-l1-1-0

abort terminate _crt_atexit _register_onexit_function _initialize_onexit_table _seh_filter_exe _set_app_type _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _register_thread_local_exe_atexit_callback _initterm _initterm_e exit _exit _c_exit __p___argc __p___argv _cexit

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

calloc _callnewh malloc free _set_new_mode