Static task
static1
Behavioral task
behavioral1
Sample
AppInstall_SoftInstall.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
AppInstall_SoftInstall.exe
Resource
win10v2004-20220812-en
General
-
Target
AppInstall_SoftInstall.exe
-
Size
353KB
-
MD5
d5050f140ba452350162bb29c5e0c760
-
SHA1
4f373d1c08f5a27f23cc5824a860e448f20d67c5
-
SHA256
4f34223fbeb0620f4b451301ab196077edfba40329499862e2c73078a0195f16
-
SHA512
06b8d8598ff0d6b568858fabb78bf4160183f8ba108a76b24849314d72d8fb23bdd1d8b67814f421fa25ead6160a995569bf95601638502a344551bf77ec71c5
-
SSDEEP
6144:pjrZ6Yh8gdIT2qmsHsnjUqcpWiWfnQgeC:pjrZ6Yh8gqTlsgqnihgeC
Malware Config
Signatures
Files
-
AppInstall_SoftInstall.exe.exe windows x86
e9abc30d90bf98cda808d4af2c7f13f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
HeapSize
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetProcessHeap
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
LCMapStringW
CompareStringW
HeapFree
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
WriteFile
GetStdHandle
RaiseException
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
RtlUnwind
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
CloseHandle
CreateFileW
WriteConsoleW
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
ExitProcess
HeapAlloc
DecodePointer
user32
DispatchMessageA
CheckMenuRadioItem
GetMessageA
GetSystemMenu
GetWindowRect
GetMenu
LoadCursorA
DestroyWindow
SetWindowPos
CheckRadioButton
SetActiveWindow
PostMessageA
EndDialog
GetSystemMetrics
CreatePopupMenu
DialogBoxParamA
GetWindowPlacement
DestroyCursor
TrackPopupMenu
wsprintfA
GetSubMenu
GetActiveWindow
OpenClipboard
TranslateAcceleratorA
GetDlgItemTextA
SetTimer
RedrawWindow
DestroyIcon
IsDialogMessageA
SetMenuItemInfoA
IsMenu
ClientToScreen
CloseClipboard
CallWindowProcA
DestroyAcceleratorTable
EmptyClipboard
GetWindowTextA
LoadAcceleratorsA
CharLowerBuffA
SetWindowPlacement
wvsprintfA
SetWindowTextA
MessageBoxA
GetSysColor
MoveWindow
EnumClipboardFormats
IsDlgButtonChecked
RegisterClassA
DestroyMenu
SetFocus
TranslateMessage
GetClipboardData
SendDlgItemMessageA
GetClassInfoA
SetDlgItemTextA
SendMessageA
SetClipboardData
SetCursor
CreateDialogParamA
LoadIconA
CharUpperA
AppendMenuA
RemoveMenu
CheckMenuItem
GetDlgItem
UnregisterClassA
KillTimer
CheckDlgButton
PostQuitMessage
GetSysColorBrush
EnableMenuItem
SetDlgItemInt
FindWindowA
InsertMenuItemA
InvalidateRect
DefDlgProcA
ChildWindowFromPoint
GetCursorPos
EnableWindow
GetWindowLongA
advapi32
OpenProcessToken
LookupPrivilegeValueA
GetUserNameA
RegOpenKeyExA
RegDeleteKeyA
RegSetValueA
RegCloseKey
AdjustTokenPrivileges
RegCreateKeyA
RegQueryValueExA
shell32
ShellExecuteW
Sections
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ