gpt4all-installer-win64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

gpt4all-installer-win64.exe
Size

38.1MB
MD5

5385723e812cf044dc1b3ec69bb429e5
SHA1

969f6b106ca0776f66df84fc09e61ef270bd37c8
SHA256

4d330992d2003bdd78cb186af7cf69936f85d8b55eff3d43e9e978aa30793425
SHA512

098d4008908d8704199b76cacab30eef9b225a526de5cfc26808589a58ff5654ce883e08aa938c501712c9690c1e2408d19bc5c7cbf14e271fef451391927e25
SSDEEP

393216:n04PacRg2VJjiiGN9XyuL0q/VzaN+3dJigBv+5cNZYGBPwYR7k2hjFE40Yp/oJs0:n0l5/XXvCwBl7hFfpNSX2/C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gpt4all-installer-win64.exe

Files

gpt4all-installer-win64.exe
.exe windows x64

400521e46e2cee712b47b570c76068c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

uxtheme

GetThemePartSize
GetThemeColor
GetThemeInt
GetThemeEnumValue
GetThemeMargins
OpenThemeData
GetThemeTransitionDuration
CloseThemeData
ord47
GetThemeBackgroundRegion
IsThemeBackgroundPartiallyTransparent
GetThemeBool
GetThemePropertyOrigin
DrawThemeTextEx
SetWindowThemeAttribute
GetThemeSysFont
SetWindowTheme
IsThemeActive
IsAppThemed
GetCurrentThemeName
DrawThemeBackground

dwmapi

DwmExtendFrameIntoClientArea
DwmDefWindowProc
DwmSetWindowAttribute
DwmIsCompositionEnabled
DwmGetWindowAttribute
DwmEnableBlurBehindWindow

gdi32

GetBitmapBits
GetObjectW
CreateFontIndirectW
EnumFontFamiliesExW
GetFontData
GetStockObject
AddFontResourceExW
RemoveFontResourceExW
AddFontMemResourceEx
RemoveFontMemResourceEx
GetTextMetricsW
GetTextFaceW
GetCharABCWidthsW
GetCharABCWidthsFloatW
GetGlyphOutlineW
GetOutlineTextMetricsW
GetCharABCWidthsI
SetGraphicsMode
SetTextAlign
GetPixelFormat
ExtTextOutW
DescribePixelFormat
SetPixelFormat
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDeviceCaps
GetDIBits
SelectObject
CreateFontIndirectA
CreateSolidBrush
GetTextExtentPoint32W
Rectangle
SetBkMode
SetTextColor
TextOutW
GetRegionData
CombineRgn
CreateRectRgn
SwapBuffers
ChoosePixelFormat
CreateBitmap
CreateDCW
SetLayout
OffsetRgn
GdiFlush
CreateDIBSection
SelectClipRgn
SetWorldTransform

oleaut32

SysFreeString
SysAllocString
SafeArrayCreateVector
SafeArrayPutElement

imm32

ImmGetVirtualKey
ImmGetDefaultIMEWnd
ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmAssociateContextEx
ImmGetCompositionStringW
ImmGetOpenStatus
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow

iphlpapi

ConvertInterfaceLuidToNameW
ConvertInterfaceNameToLuidW
GetAdaptersAddresses
ConvertInterfaceLuidToGuid
ConvertInterfaceIndexToLuid
ConvertInterfaceLuidToIndex

crypt32

CertEnumCertificatesInStore
CertOpenSystemStoreW
CertFindCertificateInStore
CertCloseStore
CertCreateCertificateContext
CertFreeCertificateContext
CertAddCertificateContextToStore
CertGetCertificateChain
CertFreeCertificateChain
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertOpenStore

user32

UnregisterDeviceNotification
RegisterDeviceNotificationW
CharNextExA
MsgWaitForMultipleObjectsEx
GetQueueStatus
DispatchMessageW
TranslateMessage
PostThreadMessageW
MapVirtualKeyA
GetSystemMetrics
GetDC
VkKeyScanW
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxW
DrawIconEx
ChangeWindowMessageFilterEx
RealGetWindowClassW
CloseTouchInputHandle
GetTouchInputInfo
GetAsyncKeyState
GetMessageExtraInfo
TrackMouseEvent
GetClipboardFormatNameW
GetCursorInfo
GetIconInfo
CreateIconIndirect
CreateCursor
LoadCursorW
GetCursor
EnumDisplayDevicesW
TrackPopupMenuEx
MapVirtualKeyW
ToUnicode
ToAscii
IsZoomed
PeekMessageW
FindWindowA
SetCaretPos
ShowCaret
HideCaret
DestroyCaret
CreateCaret
IsWindowEnabled
RegisterWindowMessageW
GetKeyboardLayout
RegisterClipboardFormatW
ChangeClipboardChain
SetClipboardViewer
IsHungAppWindow
LoadIconW
GetMonitorInfoW
MonitorFromWindow
SetMenuItemInfoW
GetMenuItemInfoW
TrackPopupMenu
RemoveMenu
ModifyMenuW
AppendMenuW
InsertMenuW
DestroyMenu
CreatePopupMenu
CreateMenu
DrawMenuBar
SetMenu
LoadImageW
VkKeyScanA
ChildWindowFromPointEx
WindowFromPoint
RegisterClassExW
GetClassInfoW
UnregisterClassW
UnregisterPowerSettingNotification
RegisterPowerSettingNotification
GetKeyboardLayoutList
GetAncestor
MonitorFromPoint
DestroyIcon
DestroyCursor
SetParent
GetParent
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
ScreenToClient
ClientToScreen
SetCursor
AdjustWindowRectEx
GetWindowRect
SetWindowRgn
GetUpdateRect
SetForegroundWindow
GetForegroundWindow
EnableMenuItem
GetSystemMenu
GetMenu
ReleaseCapture
SetCapture
GetCapture
IsTouchWindow
UnregisterTouchWindow
RegisterTouchWindow
SetFocus
IsIconic
SetWindowPlacement
GetWindowPlacement
MoveWindow
FlashWindowEx
SetLayeredWindowAttributes
UpdateLayeredWindow
IsChild
AttachThreadInput
SendMessageW
UpdateLayeredWindowIndirect
MessageBeep
IsWindow
GetDoubleClickTime
GetDesktopWindow
GetSysColor
SystemParametersInfoW
FindWindowExA
SystemParametersInfoA
SetWindowLongPtrA
GetClientRect
GetWindowTextW
SetWindowTextW
InvalidateRect
EndPaint
BeginPaint
IsWindowVisible
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
EnumDisplayMonitors
GetTopWindow
GetCursorPos
SetCursorPos
GetWindowTextA
ReleaseDC
GetKeyState
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
SendInput
OpenClipboard
GetGUIThreadInfo
SetCaretBlinkTime
GetCaretBlinkTime
GetWindowLongPtrA
GetClassNameA
EnumChildWindows
KillTimer
SetTimer
CreateWindowExA
GetWindow
keybd_event
SetKeyboardState
GetKeyboardState
GetFocus
SendMessageA
RegisterWindowMessageA
SendMessageTimeoutW
GetWindowThreadProcessId
EnumWindows
PostMessageW
GetSysColorBrush

ws2_32

WSASend
WSACleanup
WSASetLastError
getaddrinfo
WSASendTo
ntohl
gethostbyname
accept
bind
closesocket
connect
ioctlsocket
getpeername
getsockname
getsockopt
htonl
gethostname
WSAAsyncSelect
htons
listen
ntohs
recv
select
send
setsockopt
socket
WSAStartup
WSAGetLastError
WSARecvFrom
freeaddrinfo
getnameinfo
__WSAFDIsSet
WSAAccept
WSAConnect
WSAHtonl
WSAIoctl
WSANtohl
WSANtohs
WSARecv
WSASocketW

advapi32

CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
ReportEventW
RegisterEventSourceW
DeregisterEventSource
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl
GetTokenInformation
GetLengthSid
AddAccessAllowedAce
RegNotifyChangeKeyValue
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
LookupPrivilegeValueW
PrivilegeCheck
AdjustTokenPrivileges
OpenProcessToken
RegFlushKey
SystemFunction036
GetSidSubAuthority
GetSidSubAuthorityCount
AccessCheck
CopySid
DuplicateToken
MapGenericMask
LookupAccountSidW
GetEffectiveRightsFromAclW
GetNamedSecurityInfoW
BuildTrusteeWithSidW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW

mpr

WNetGetUniversalNameA

userenv

GetUserProfileDirectoryW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

netapi32

NetShareEnum
NetApiBufferFree

kernel32

EncodePointer
DecodePointer
RtlPcToFileHeader
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
GetStringTypeW
Process32FirstW
CreateMutexW
ReleaseMutex
FindNextChangeNotification
FindFirstChangeNotificationW
FindCloseChangeNotification
LCMapStringW
CompareStringW
GetUserGeoID
GetGeoInfoW
FindFirstFileExW
SetFilePointerEx
GetFileInformationByHandleEx
FileTimeToSystemTime
TzSpecificLocalTimeToSystemTime
MoveFileExW
MoveFileW
CopyFileW
RemoveDirectoryW
GetLogicalDrives
DeleteFileW
SetCurrentDirectoryW
WriteFileEx
SleepEx
CancelIoEx
InitializeSListHead
RegisterWaitForSingleObject
UnregisterWaitEx
GetUserPreferredUILanguages
GetUserDefaultLCID
GetCurrencyFormatW
GetTimeFormatW
GetDateFormatW
GetSystemDirectoryW
GetModuleFileNameW
GetTickCount64
QueryPerformanceFrequency
GetProcessId
WaitForSingleObjectEx
ResumeThread
TerminateThread
GetThreadPriority
SetThreadPriority
GetCurrentThread
SwitchToThread
DuplicateHandle
GetLocalTime
GetStartupInfoW
CompareStringEx
IsProcessorFeaturePresent
GetNativeSystemInfo
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
ConvertThreadToFiber
ConvertFiberToThread
GetSystemTimeAsFileTime
QueryPerformanceCounter
CreateFiber
DeleteFiber
SwitchToFiber
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetModuleHandleExW
SystemTimeToFileTime
GetSystemTime
SetLastError
SetEvent
CreateNamedPipeW
ConnectNamedPipe
WaitNamedPipeW
DisconnectNamedPipe
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ExitProcess
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
RtlDeleteFunctionTable
RtlAddFunctionTable
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
GetConsoleWindow
LocalAlloc
GetVolumeInformationW
GetUserDefaultLangID
GlobalSize
GetLocaleInfoW
CheckRemoteDebuggerPresent
ExpandEnvironmentStringsW
WTSGetActiveConsoleSessionId
GetModuleHandleW
lstrcmpW
GetTickCount
GetCurrentThreadId
SetUnhandledExceptionFilter
RaiseException
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
CreateThread
WaitForMultipleObjects
CreatePipe
OutputDebugStringW
CompareFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetProcessTimes
FormatMessageA
SetHandleInformation
LoadLibraryExW
FreeLibrary
LoadLibraryA
GetModuleHandleA
OutputDebugStringA
GetStdHandle
Sleep
SetEnvironmentVariableW
GetExitCodeProcess
PeekNamedPipe
GetFullPathNameW
GetProcessHeap
HeapFree
HeapAlloc
GetOEMCP
GetACP
IsValidCodePage
WideCharToMultiByte
MultiByteToWideChar
GetTempPathW
VirtualFree
VirtualAlloc
CreateEventW
ResetEvent
CancelIo
GetOverlappedResult
ReadFile
GetVolumePathNameW
GetDiskFreeSpaceW
FindNextFileW
LoadLibraryW
GetProcAddress
SetFileTime
SetFilePointer
SetFileAttributesW
SetEndOfFile
GetFileType
GetFileInformationByHandle
GetFileAttributesW
FindFirstFileW
FindClose
CreateDirectoryW
GetCurrentDirectoryW
DeviceIoControl
WriteFile
UnlockFile
LockFile
FlushFileBuffers
CreateFileW
GetThreadTimes
FreeLibraryAndExitThread
RtlUnwindEx
RtlUnwind
SetStdHandle
SetConsoleCtrlHandler
SystemTimeToTzSpecificLocalTime
GetCommandLineA
ExitThread
GetConsoleOutputCP
IsValidLocale
EnumSystemLocalesW
HeapReAlloc
GetFileSizeEx
HeapSize
WriteConsoleW
ReadFileEx
CreateToolhelp32Snapshot
TerminateProcess
WaitForSingleObject
SetErrorMode
GetVolumePathNamesForVolumeNameW
GetDriveTypeW
GetDriveTypeA
GetDiskFreeSpaceExA
FindVolumeClose
FindNextVolumeW
FindFirstVolumeW
FreeConsole
GetConsoleProcessList
GetCommandLineW
CloseHandle
GetLastError
GetCurrentProcess
CreateProcessW
LocalFree
FormatMessageW
GetFileAttributesExW
GetLongPathNameW
GetShortPathNameW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
GetEnvironmentVariableW
OpenProcess
GetLogicalDriveStringsA
Process32NextW

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleInitialize
OleUninitialize
OleSetClipboard
OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
ReleaseStgMedium
CoGetMalloc
CoCreateGuid
CoTaskMemFree
StringFromGUID2

shell32

SHGetFolderPathW
ShellExecuteW
SHCreateItemFromIDList
SHGetFolderLocation
SHGetMalloc
SHGetPathFromIDListW
SHGetKnownFolderIDList
SHBrowseForFolderW
Shell_NotifyIconW
Shell_NotifyIconGetRect
ord155
SHParseDisplayName
SHGetKnownFolderPath
SHFileOperationW
SHChangeNotify
CommandLineToArgvW
SHGetFileInfoW
SHGetStockIconInfo
ShellExecuteExW
ord727
SHCreateItemFromParsingName

winmm

timeKillEvent
PlaySoundW
timeSetEvent

bcrypt

BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptSetProperty
BCryptCloseAlgorithmProvider
BCryptGenerateSymmetricKey
BCryptGenRandom
BCryptFinishHash
BCryptHashData
BCryptEncrypt
BCryptDestroyKey
BCryptCreateHash
BCryptDeriveKeyPBKDF2

Exports

Exports

registercoco
squishqtwrapper_init

Sections

.text
Size: 25.8MB - Virtual size: 25.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 612KB - Virtual size: 780KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtmetad
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtmimed
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

400521e46e2cee712b47b570c76068c3

Headers

DLL Characteristics

File Characteristics

Imports

wtsapi32

uxtheme

dwmapi

gdi32

oleaut32

imm32

iphlpapi

crypt32

user32

ws2_32

advapi32

mpr

userenv

version

netapi32

kernel32

ole32

shell32

winmm

bcrypt

Exports

Exports

Sections

.text Size: 25.8MB - Virtual size: 25.8MB

.rdata Size: 9.7MB - Virtual size: 9.7MB

.data Size: 612KB - Virtual size: 780KB

.pdata Size: 1.3MB - Virtual size: 1.3MB

.qtmetad Size: 1024B - Virtual size: 672B

.qtmimed Size: 315KB - Virtual size: 315KB

_RDATA Size: 512B - Virtual size: 148B

.rsrc Size: 101KB - Virtual size: 101KB

.reloc Size: 217KB - Virtual size: 216KB

.text
Size: 25.8MB - Virtual size: 25.8MB

.rdata
Size: 9.7MB - Virtual size: 9.7MB

.data
Size: 612KB - Virtual size: 780KB

.pdata
Size: 1.3MB - Virtual size: 1.3MB

.qtmetad
Size: 1024B - Virtual size: 672B

.qtmimed
Size: 315KB - Virtual size: 315KB

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 101KB - Virtual size: 101KB

.reloc
Size: 217KB - Virtual size: 216KB