InfDefaultInstall[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

InfDefaultInstall.exe
Size

11KB
MD5

89218df55881b8aeff5bcd0c09b4a1ab
SHA1

4dd2b8be7687a1f17790d7880765e6a47d8b7ed6
SHA256

0b63d3764337e6898e35481aaa2ffa0f5f5b802f2ea7cc202126550b44528859
SHA512

e50233c4c29697c2761d1a4af9603ff600591dc2f3aca324a6e8832f0ec8593b56be66a729baddf32b257369605eb8fde431696e9e12d5f108f196ebbda34b8a
SSDEEP

192:TS/by2Zb+WPl8Dqz4zczpNsuzVoobDfO8DPL7pemOMsNW/GWU:e/by2J+xuz4ArsQVVDtDPL7Ee2W/GWU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
InfDefaultInstall.exe

Files

InfDefaultInstall.exe
.exe windows:6 windows x64

1495d72a0dde4117b290b451bae3d4dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLastError
LocalFree
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
FormatMessageW
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
GetSystemTimeAsFileTime
GetCommandLineW
TerminateProcess

msvcrt

_XcptFilter
_amsg_exit
_acmdln
_fmode
_vsnwprintf
_commode
__getmainargs
__set_app_type
?terminate@@YAXXZ
__C_specific_handler
_initterm
__setusermatherr
_ismbblead
_cexit
_exit
exit

ntdll

RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry

comctl32

ord344

setupapi

InstallHinfSectionW
SetupFindFirstLineW
SetupDiGetActualSectionToInstallW
SetupCloseInfFile
SetupOpenInfFileW

newdev

DiInstallDriverW

shell32

ord730
CommandLineToArgvW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1495d72a0dde4117b290b451bae3d4dd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ntdll

comctl32

setupapi

newdev

shell32

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 216B

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 36B

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 216B

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 36B