Static task
static1
Behavioral task
behavioral1
Sample
installbin.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
installbin.exe
Resource
win10v2004-20230220-en
General
-
Target
installbin.exe
-
Size
3.3MB
-
MD5
78c1669e495e948b3ef079228436bc9e
-
SHA1
7bdf451198a558b2af5e2c8041bb6b4494466e50
-
SHA256
781f68d825451ab56dab7a8d2900bb455ce23b11433d1b3971a44d3e78da6045
-
SHA512
7b2b5d8aab3c1981124bcd0d90c35d1a7ca70e19f1ce6d2c05b0898f270608f3b31f7c9a21a3d174d3c887200f77a9339cde4f2505e52435ab4477a1d32a8cc3
-
SSDEEP
98304:WLBmtlPkOimLDNmtvUwUgrvucABf/u/lFy1:WLBmtl8UsBUXcABHuH6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource installbin.exe
Files
-
installbin.exe.exe windows x86
c8a3b09e92b084787f4de2f6e696e1bd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassLongW
SetClassLongW
EndPaint
GetDC
BeginPaint
ReleaseDC
ShowWindow
MoveWindow
DestroyWindow
GetActiveWindow
LoadCursorW
LoadIconW
InvalidateRect
UpdateWindow
DispatchMessageA
CreateWindowExW
TranslateMessage
PeekMessageA
RegisterClassExW
IsIconic
IsDialogMessageW
IsZoomed
IsWindowVisible
MessageBoxW
MessageBoxA
ole32
CoGetApartmentType
CoGetObjectContext
kernel32
WriteConsoleW
GetStdHandle
GetConsoleMode
ReadConsoleW
IsValidLocale
IsValidCodePage
CloseHandle
ExitThread
CreateThread
GetLastError
SetLastError
HeapSize
HeapFree
HeapAlloc
HeapReAlloc
IsBadReadPtr
GetCommandLineW
GetCommandLineA
ExitProcess
TlsSetValue
TlsFree
TlsGetValue
TlsAlloc
DecodePointer
EncodePointer
MultiByteToWideChar
CompareStringEx
WideCharToMultiByte
gdi32
SelectObject
CreateCompatibleDC
DeleteObject
DeleteDC
CreatePen
CreateSolidBrush
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 640KB - Virtual size: 640KB
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1024B
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ