anytoiso_setup[.]exe

General

Target
anytoiso_setup.exe
Size 13.4MB
Sample240218-p76gbaag76
SHA256 10c72764f6d4d5b571a45cf42034cbb6eaf7c2921bec1f8b52c3540d596c3987
MD5 490128ad8c2fe36a4b3430860e61fe30
SHA1 14bd1aa15559ac295d37ba47aa4d612e256fe85b
SHA512 730dd70af95f731ed6772eeaeadc3d36a9374ea637d9c40029ceefecd0d1ef72aba61a300e025bb01129e98b3cbf9678f35285b90926ad8a9bbdf468f74994ed
SSDEEP 393216:Bveof0+px5NtgmmehrhTDbTBUJEGkbMAZ7K47:B3pxOmme//y+bhp7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
anytoiso_setup.exe

File Explorer

anytoiso_setup.exe

.exe 13.4MB

anytoiso_setup.exe

IMPHASH 1ee3b0da38e7b7c567f93f357ca3751c
SHA256 10c72764f6d4d5b571a45cf42034cbb6eaf7c2921bec1f8b52c3540d596c3987
MD5 490128ad8c2fe36a4b3430860e61fe30
SHA1 14bd1aa15559ac295d37ba47aa4d612e256fe85b
SHA512 730dd70af95f731ed6772eeaeadc3d36a9374ea637d9c40029ceefecd0d1ef72aba61a300e025bb01129e98b3cbf9678f35285b90926ad8a9bbdf468f74994ed
SSDEEP 393216:Bveof0+px5NtgmmehrhTDbTBUJEGkbMAZ7K47:B3pxOmme//y+bhp7
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

Acernplify2

Minor OS version

0

Major OS version

6

Entry point

1204424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\JobRelease\win\Release\stubs\x86\ExternalUi.pdb

kernel32

CreateFileW CloseHandle WriteFile DeleteFileW HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap RemoveDirectoryW GetTempPathW GetTempFileNameW CreateDirectoryW MoveFileW GetLastError SizeofResource LockResource LoadResource FindResourceW FindResourceExW EnterCriticalSection LeaveCriticalSection GetModuleFileNameW DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetCurrentThreadId RaiseException SetLastError GlobalUnlock GlobalLock GlobalAlloc MulDiv lstrcmpW CreateEventW SetEvent InitializeCriticalSection lstrcpynW WaitForSingleObject CreateThread GetProcAddress LoadLibraryExW DecodePointer Sleep GetDiskFreeSpaceExW GetExitCodeThread GetCurrentProcessId FreeLibrary GetSystemDirectoryW lstrlenW VerifyVersionInfoW VerSetConditionMask lstrcmpiW GetModuleHandleW LoadLibraryW GetDriveTypeW CompareStringW FindFirstFileW FindNextFileW GetLogicalDriveStringsW GetFileSize GetFileAttributesW GetShortPathNameW SetFileAttributesW GetFileTime CopyFileW ReadFile SetFilePointer SystemTimeToFileTime FindClose MultiByteToWideChar WideCharToMultiByte GetCurrentProcess GetSystemInfo WaitForMultipleObjects ReadConsoleW VirtualProtect VirtualQuery LoadLibraryExA GetStringTypeW SetUnhandledExceptionFilter FileTimeToSystemTime GetEnvironmentVariableW GetEnvironmentStringsW FormatMessageW LocalFree InitializeCriticalSectionEx LoadLibraryA GetModuleFileNameA GetFullPathNameW GetCurrentThread GetConsoleOutputCP FlushFileBuffers SetConsoleTextAttribute GetStdHandle GetConsoleScreenBufferInfo OutputDebugStringW CreateProcessW GetExitCodeProcess GetTickCount GetCommandLineW SetCurrentDirectoryW SetEndOfFile EnumResourceLanguagesW GetLocaleInfoW GetSystemDefaultLangID GetUserDefaultLangID GetWindowsDirectoryW GetSystemTime GetDateFormatW GetTimeFormatW CreateToolhelp32Snapshot Process32FirstW Process32NextW ResetEvent GlobalFree GetPrivateProfileStringW GetPrivateProfileSectionNamesW WritePrivateProfileStringW GetLocalTime CreateNamedPipeW ConnectNamedPipe Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection IsWow64Process TerminateThread LocalAlloc CompareFileTime CopyFileExW OpenEventW PeekNamedPipe IsDebuggerPresent EncodePointer InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree QueryPerformanceCounter QueryPerformanceFrequency LCMapStringEx GetSystemTimeAsFileTime CompareStringEx GetCPInfo WaitForSingleObjectEx UnhandledExceptionFilter TerminateProcess GetStartupInfoW RtlUnwind TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetFileType GetTimeZoneInformation LCMapStringW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleMode IsValidCodePage GetACP GetOEMCP GetFileSizeEx SetFilePointerEx FindFirstFileExW GetCommandLineA FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle WriteConsoleW

Sharing