install[.]exe | Triage™

General

Target
install.exe
Size 3.8MB
Sample221114-jrjdysff87
SHA256 99574d9f64bd750fd89fedefe1dce8bbbd81eeaf740140f7887e92aaf5fea53b
MD5 14ae061d2f3d893b73f816233f833e1c
SHA1 91815c95027572a773b3966156d96f43eef17483
SHA512 0f586abd6931d1747b2db4555449b82ff1888b6320401b12aa25774c52464e945c00738fbcd993ebab4b99c0287015671bf7d3eaaa698a3b54275b2046497e11
SSDEEP 6144:V/yF3ZHXX5kCoW10AKurlQ9oLbf8NNG8lHdUNVJQJw:wTXX2NW1VK469KT8S89eJQ2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

install.exe

.exe 3.8MB

install.exe

IMPHASH cd68ba0e8c55078b98e564da87223802
SHA256 99574d9f64bd750fd89fedefe1dce8bbbd81eeaf740140f7887e92aaf5fea53b
MD5 14ae061d2f3d893b73f816233f833e1c
SHA1 91815c95027572a773b3966156d96f43eef17483
SHA512 0f586abd6931d1747b2db4555449b82ff1888b6320401b12aa25774c52464e945c00738fbcd993ebab4b99c0287015671bf7d3eaaa698a3b54275b2046497e11
SSDEEP 6144:V/yF3ZHXX5kCoW10AKurlQ9oLbf8NNG8lHdUNVJQJw:wTXX2NW1VK469KT8S89eJQ2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30816

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetModuleFileNameW OutputDebugStringA CopyFileW DeleteFileW MoveFileExW GetLastError FormatMessageW GetCommandLineW OutputDebugStringW LocalFree FlushFileBuffers RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree HeapAlloc GetCommandLineA GetVersionExA GetProcessHeap GetStartupInfoA GetModuleHandleA GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapDestroy HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapSize LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSection LoadLibraryA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle

advapi32

RegCloseKey RegOpenKeyExW RegCreateKeyExW OpenServiceW DeleteService OpenSCManagerW CreateServiceW CloseServiceHandle RegCreateKeyW RegQueryValueExW RegSetValueExW RegDeleteValueW

shell32

CommandLineToArgvW SHGetFolderPathW

Sharing