SC7109714[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SC7109714.exe
Size 308KB
Sample230512-k2qrfseg21
SHA256 b5083c2bb6ce06175d3455c77a514d9fd48150aaf8c6fe6159c33f46b0a5b11e
MD5 c9b4677c8e47918dd28c633540ffd0d6
SHA1 f1a522492605360440aebf9d2f889f4b07a984a5
SHA512 e2f3d9b71852522776219fdded8fa6b7617664b644bb92586d2f559e09974af5c9be86469fecbe9a045971674e80eeecc2375e1720b5c1d482275d3a4930b9c9
SSDEEP 6144:fDpoe8dhzfwRiQ8RwwDtcNitg4XEwvXpiGCCdf4Az:uzIADtcNittEwfEPAz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SC7109714.exe

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

SC7109714.exe

.exe 308KB

SC7109714.exe

IMPHASH 59a4a44a250c4cf4f2d9de2b3fe5d95f
SHA256 b5083c2bb6ce06175d3455c77a514d9fd48150aaf8c6fe6159c33f46b0a5b11e
MD5 c9b4677c8e47918dd28c633540ffd0d6
SHA1 f1a522492605360440aebf9d2f889f4b07a984a5
SHA512 e2f3d9b71852522776219fdded8fa6b7617664b644bb92586d2f559e09974af5c9be86469fecbe9a045971674e80eeecc2375e1720b5c1d482275d3a4930b9c9
SSDEEP 6144:fDpoe8dhzfwRiQ8RwwDtcNitg4XEwvXpiGCCdf4Az:uzIADtcNittEwfEPAz
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

12823

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA SearchPathA GetShortPathNameA CreateFileA GetFileSize GetModuleFileNameA ReadFile GetCurrentProcess CopyFileA ExitProcess SetEnvironmentVariableA Sleep CloseHandle GetCommandLineA SetErrorMode LoadLibraryA lstrlenA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA lstrcpyA lstrcatA GetSystemDirectoryA GetVersion GetProcAddress GlobalAlloc CompareFileTime SetFileTime ExpandEnvironmentStringsA lstrcmpiA lstrcmpA WaitForSingleObject GlobalFree GetExitCodeProcess GetModuleHandleA GetTempPathA GetWindowsDirectoryA LoadLibraryExA FindFirstFileA FindNextFileA DeleteFileA SetFilePointer WriteFile FindClose WritePrivateProfileStringA MultiByteToWideChar MulDiv GetPrivateProfileStringA FreeLibrary

user32

CreateWindowExA EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard GetDC SystemParametersInfoA RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer GetDlgItem wsprintfA SetForegroundWindow ShowWindow IsWindow LoadImageA SetWindowLongA SetClipboardData EmptyClipboard OpenClipboard EndPaint PostQuitMessage FindWindowExA SendMessageTimeoutA SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegCloseKey RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegEnumValueA RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA