Wynntils[.]Mod[.]Installer-1[.]4[.]1[.]exe

Resubmissions

21-02-2024 17:30

240221-v3arqscb9t 7

21-02-2024 17:27

240221-v1wlescb5y 7

Sharing

Copy URL

Twitter E-mail

General

Target

Wynntils.Mod.Installer-1.4.1.exe
Size

79.2MB
MD5

05195aa42a52658e1358ee87c71adde3
SHA1

cf25e3e6704314dbd47f6fe4c4f4459214b70eb4
SHA256

78330d547c0466f8a4c4ef26200315a188054fa86c7bc459feb9c5ad2b450b80
SHA512

fbc58e91c1478b5fe0369126974f9351bd7c7503b6801f6497f6651c649b0f8b48359300b30351141a79d2218c35d20327314153cb12219666c9bac4da45fd24
SSDEEP

1572864:FXMrfx66weJbgq2Mt8NrC0rUdEXdH0krPF6cn088d7:FXMrfx66weJbgOt8N+AUuNUoPVt8d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Wynntils.Mod.Installer-1.4.1.exe

Files

Wynntils.Mod.Installer-1.4.1.exe
.exe windows:6 windows x64 arch:x64

864058cc98d8e0b4a84222f4218de7c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

msiwrapper.pdb

Imports

shlwapi

PathIsDirectoryEmptyW

shell32

CommandLineToArgvW

kernel32

LCMapStringW
SetEndOfFile
WriteConsoleW
HeapSize
CloseHandle
GetLastError
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetProcessId
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
LoadResource
LockResource
SizeofResource
FindResourceW
FreeLibrary
GetModuleHandleExW
GetProcAddress
LoadLibraryW
LocalFree
FormatMessageW
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
SetFileAttributesW
SetLastError
GetTickCount
CopyFileW
MoveFileExW
GetCommandLineW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetTempPathW
GetSystemDirectoryW
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
RtlUnwind
GetLocaleInfoW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetProcessHeap
RtlPcToFileHeader
RaiseException
RtlUnwindEx
LoadLibraryExW
GetFullPathNameW
GetDriveTypeW
GetStdHandle
WriteFile
ExitProcess
HeapAlloc
HeapFree
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
GetCurrentDirectoryW
HeapReAlloc
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle

Sections

.text
Size: 330KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 78.8MB - Virtual size: 78.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

864058cc98d8e0b4a84222f4218de7c0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

shell32

kernel32

Sections

.text Size: 330KB - Virtual size: 329KB

.rdata Size: 111KB - Virtual size: 111KB

.data Size: 6KB - Virtual size: 12KB

.pdata Size: 24KB - Virtual size: 23KB

_RDATA Size: 512B - Virtual size: 148B

.rsrc Size: 78.8MB - Virtual size: 78.8MB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 330KB - Virtual size: 329KB

.rdata
Size: 111KB - Virtual size: 111KB

.data
Size: 6KB - Virtual size: 12KB

.pdata
Size: 24KB - Virtual size: 23KB

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 78.8MB - Virtual size: 78.8MB

.reloc
Size: 4KB - Virtual size: 3KB