Static task
static1
Behavioral task
behavioral1
Sample
install.exe
Resource
win7-20230703-en
General
-
Target
install.exe
-
Size
350.0MB
-
MD5
f6048f639aea3ce031514a14b8c5dc45
-
SHA1
a54bb10e967a03a0b3e95b97d1e1bbe80136d933
-
SHA256
9e0f37e0b8137564653b6afbee91cc42cd845339d956425d6532e5c6fb9e7d0f
-
SHA512
a7d9c52a37f2e2ce5b1a45fa4ad380d0653d9e0fd30345889024961a4f6362ebe91c2f3c308d4eecaae7270a7357fde4a6c79ae8cfe6a08be458aaee595c4b8b
-
SSDEEP
49152:UB9vtJ5HFC/0GL2DKDYRqsMoqzWFE8xE6QfH+X:ULlJ5HgLw8YRHMoqzOE8xE6QfeX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource install.exe
Files
-
install.exe.exe windows x86
0c1f3d6c7af483b3294e288dd191e400
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoGetApartmentType
CoGetObjectContext
gdi32
CreateSolidBrush
CreatePen
SetTextColor
TextOutW
SelectObject
CreateCompatibleDC
DeleteDC
DeleteObject
LineTo
user32
UpdateWindow
InvalidateRect
SetClassLongW
GetClassLongW
LoadIconW
LoadCursorW
GetWindowTextLengthW
GetWindowTextW
BeginPaint
GetDC
ReleaseDC
EndPaint
IsZoomed
IsDialogMessageW
IsIconic
IsWindowVisible
SendMessageA
MoveWindow
ShowWindow
DestroyWindow
RegisterClassExW
CreateWindowExW
DispatchMessageA
TranslateMessage
PeekMessageA
kernel32
HeapSize
HeapFree
HeapAlloc
HeapReAlloc
DecodePointer
EncodePointer
GetCommandLineA
GetCommandLineW
ExitProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidLocale
IsValidCodePage
GetLastError
SetLastError
CloseHandle
IsBadReadPtr
Sleep
WideCharToMultiByte
CompareStringEx
MultiByteToWideChar
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 640KB - Virtual size: 640KB
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1024B
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ