install[.]exe | Triage™

General

Target
install.exe
Size 1.9MB
Sample230313-sy682aba36
SHA256 b5eade1204ad4fb6243fecccbee72abd2bcfeb9166596d9c9996e0000feb25c1
MD5 66bf3c102b942dcf11ef6fde325b0087
SHA1 a896064cf042f6659fc04b0aae3f71306c9b060a
SHA512 2774ca3d7f042de774d2f40972fc429cf8349366aabdd0a7c0a0c0ffbf70208d90547853dbbd6553592272a4ed12b1a3a9a2a906681ef229a0f4545d22ce3e3a
SSDEEP 49152:2z4bj3Op3BIHLtpYnUWyh/WbGkApj6u5a2C:2z4bbOp3BQt7fWbapjVC
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

install.exe

.exe 1.9MB

install.exe

IMPHASH 7746e555be95e38121d2991a62c207a1
SHA256 b5eade1204ad4fb6243fecccbee72abd2bcfeb9166596d9c9996e0000feb25c1
MD5 66bf3c102b942dcf11ef6fde325b0087
SHA1 a896064cf042f6659fc04b0aae3f71306c9b060a
SHA512 2774ca3d7f042de774d2f40972fc429cf8349366aabdd0a7c0a0c0ffbf70208d90547853dbbd6553592272a4ed12b1a3a9a2a906681ef229a0f4545d22ce3e3a
SSDEEP 49152:2z4bj3Op3BIHLtpYnUWyh/WbGkApj6u5a2C:2z4bbOp3BQt7fWbapjVC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21886

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CallNamedPipeW GetCommConfig GetDateFormatA GetEnvironmentStrings GlobalAlloc LoadLibraryW CreateEventA GetConsoleAliasExesLengthW GetStringTypeExW lstrcpynW EnumSystemCodePagesA GetFileAttributesW VerifyVersionInfoA LocalReAlloc GetBinaryTypeA MultiByteToWideChar GetConsoleAliasesW SetLastError GetProcAddress VirtualAlloc OpenJobObjectA SetTimerQueueTimer WriteConsoleA InterlockedExchangeAdd GetFileType CreateHardLinkW WriteProfileSectionW FindNextChangeNotification FindAtomA FoldStringA FreeEnvironmentStringsW GetStringTypeW EnumDateFormatsW GetWindowsDirectoryW GlobalAddAtomW OpenFileMappingA LCMapStringW FindResourceExW GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind GetLocaleInfoA WideCharToMultiByte GetModuleHandleA LCMapStringA GetStringTypeA

user32

ValidateRect GetMenuInfo

gdi32

GetGlyphIndicesA CreateDCA

Sharing