installer[.]exe | Triage™

General

Target
installer.exe
Size 299KB
Sample230317-dblaqadh87
SHA256 536e71d2d626e9236bd14ea6cc8a85d43aecaf1ef32dcfe470084697bf1e5ed0
MD5 6c1f75e3e766e2178a84c2d58e453a3b
SHA1 feb00b3345ee3e4a501890a423bd38fd92df6479
SHA512 335d33de1b1ee1d500b7e37b837ea8cdc5cea7e2e735cbfcf80c2c365a7b121cec3dd0896164eca4381b94deb9701bf4fd175fc8b9234586f6292f2b3202e355
SSDEEP 6144:H9TLv3sAivIo4uuz3O+3Q6MDUKpNXr7ZN6:HNL3shAo4h++bMJBr7Z
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

installer.exe

.exe 299KB

installer.exe

IMPHASH 02bcb533fc6eab16fabdf3b7ff49a9d9
SHA256 536e71d2d626e9236bd14ea6cc8a85d43aecaf1ef32dcfe470084697bf1e5ed0
MD5 6c1f75e3e766e2178a84c2d58e453a3b
SHA1 feb00b3345ee3e4a501890a423bd38fd92df6479
SHA512 335d33de1b1ee1d500b7e37b837ea8cdc5cea7e2e735cbfcf80c2c365a7b121cec3dd0896164eca4381b94deb9701bf4fd175fc8b9234586f6292f2b3202e355
SSDEEP 6144:H9TLv3sAivIo4uuz3O+3Q6MDUKpNXr7ZN6:HNL3shAo4h++bMJBr7Z
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19992

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateHardLinkA CallNamedPipeW GetCommConfig GetConsoleAliasesA GetWindowsDirectoryA FindResourceExA GlobalAlloc WideCharToMultiByte LoadLibraryW GetStringTypeExW GetExitCodeProcess lstrcpynW GetFileAttributesW LocalReAlloc WriteConsoleW GetBinaryTypeA SetLastError GetProcAddress VirtualAlloc FindCloseChangeNotification EnumSystemCodePagesW GetFileType CreateEventW EnumDateFormatsA FreeEnvironmentStringsW GetPrivateProfileSectionA GetStringTypeW FindAtomW DeleteTimerQueueTimer GlobalAddAtomW OpenFileMappingA LCMapStringW HeapSize OpenJobObjectA GetStartupInfoW HeapAlloc GetLastError HeapFree SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA

user32

CreateMDIWindowA LoadMenuW GetMenuInfo ValidateRect NotifyWinEvent

gdi32

GetGlyphIndicesA

advapi32

MapGenericMask

Sharing