Static task
static1
Behavioral task
behavioral1
Sample
install.exe
Resource
win7-20230703-en
General
-
Target
install.exe
-
Size
4.8MB
-
MD5
254d39f183ccaea7672ccde64758ccdc
-
SHA1
0469ab1efe8fd5b1b8cc88139842916eafc76d88
-
SHA256
84a521dfd6629f41d90ff0fc91edffa8e8d656b95e9d0f565a1855c19f659f4f
-
SHA512
2329b6dca1cd4e2bbd32aa416377889ad4673a2c9ae7cd6bc2f7d07ae3695f543278b8ec3bd7819bab3828eae4cbf33dd78fc87b6de3b9e70247e2ade28e6f27
-
SSDEEP
49152:UB9vtJ5HFC/0GL2DKDYRqsMoqzWFE8xE6QfH+X:ULlJ5HgLw8YRHMoqzOE8xE6QfeX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource install.exe
Files
-
install.exe.exe windows x86
0c1f3d6c7af483b3294e288dd191e400
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoGetApartmentType
CoGetObjectContext
gdi32
CreateSolidBrush
CreatePen
SetTextColor
TextOutW
SelectObject
CreateCompatibleDC
DeleteDC
DeleteObject
LineTo
user32
UpdateWindow
InvalidateRect
SetClassLongW
GetClassLongW
LoadIconW
LoadCursorW
GetWindowTextLengthW
GetWindowTextW
BeginPaint
GetDC
ReleaseDC
EndPaint
IsZoomed
IsDialogMessageW
IsIconic
IsWindowVisible
SendMessageA
MoveWindow
ShowWindow
DestroyWindow
RegisterClassExW
CreateWindowExW
DispatchMessageA
TranslateMessage
PeekMessageA
kernel32
HeapSize
HeapFree
HeapAlloc
HeapReAlloc
DecodePointer
EncodePointer
GetCommandLineA
GetCommandLineW
ExitProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidLocale
IsValidCodePage
GetLastError
SetLastError
CloseHandle
IsBadReadPtr
Sleep
WideCharToMultiByte
CompareStringEx
MultiByteToWideChar
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 640KB - Virtual size: 640KB
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1024B
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ