Static task
static1
Behavioral task
behavioral1
Sample
lnstaIIer .x64.exe
Resource
win7-20220812-en
General
-
Target
lnstaIIer .x64.exe
-
Size
5.8MB
-
MD5
2c97fecf8c25eb347068ee42a17523ef
-
SHA1
99149d57750981e01ad2ae96425492c63109f150
-
SHA256
30eb1174412010512f13dd33bbad41e759c75f3f9cc96146ab2661bd723b246f
-
SHA512
5c5aaad60520221f1b001d8fb547a611a86506abbb4c50ff58245f5eed3b45ee875dcccfcf2e33fd14cc224103b5cc4d7b07554531a479082936ac1b9610f207
-
SSDEEP
98304:ngGuFERs6w1NdI5smvhwCDsQsMsv3LU+cG/CdL6S4rr832ddu+U28J/1f:gtFERytM3JDsQ7sfXczMNru3JNf
Malware Config
Signatures
Files
-
lnstaIIer .x64.exe.exe windows x86
dafdbbc6109353a89cfda1e51dd5d507
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
shell32
ShellExecuteA
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.KBE0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.KBE1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.KBE2 Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ