InfDefaultInstall.pdb
Static task
static1
Behavioral task
behavioral1
Sample
InfDefaultInstall.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
InfDefaultInstall.exe
Resource
win10v2004-20231215-en
General
-
Target
InfDefaultInstall.exe
-
Size
12KB
-
MD5
c1ef4e1dd590f518caed5f9e212392e3
-
SHA1
e2f0896744589ec0102e7b4a5f115feeb3867220
-
SHA256
80dceb781460ea34f719997635ca2620880ac9c74ae7aa82aebad3a6fbc24d7d
-
SHA512
79abab59006be555716a7194de623cb9df4a38955621a775be1246d23fd6afafbafe23fb35505ed153185b2494ada8eb556625a22371aef7157c9e6b1556c212
-
SSDEEP
192:vqMtt33FmJmksKVhHSY63lxgUix4sZKW/GWM:vqAV+mkdVhHYEx4oKW/GWM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource InfDefaultInstall.exe
Files
-
InfDefaultInstall.exe.exe windows:10 windows x86 arch:x86
f2f450ce56a210fae3c67af46756bf51
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LocalFree
GetNativeSystemInfo
GetLastError
FormatMessageW
GetCommandLineW
Sleep
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetLastError
msvcrt
_except_handler4_common
_controlfp
?terminate@@YAXXZ
_acmdln
_initterm
__setusermatherr
_ismbblead
__p__fmode
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
__p__commode
_XcptFilter
_vsnwprintf
memset
ext-ms-win-shell-shell32-l1-2-1
RestartDialogEx
shell32
CommandLineToArgvW
comctl32
TaskDialogIndirect
setupapi
SetupDiGetActualSectionToInstallW
InstallHinfSectionW
SetupOpenInfFileW
SetupFindFirstLineW
SetupCloseInfFile
newdev
DiInstallDriverW
drvstore
DriverPackageGetPropertyW
DriverPackageClose
DriverPackageOpenW
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ