VisualCppRedist_AIO_x86_x64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
VisualCppRedist_AIO_x86_x64.exe
Size 27.6MB
Sample240224-qtfjeada84
SHA256 68ab06ae1d19045d1ea9ec87fe67c2102c8b09aca2c7ff3de897aebe7fe80f11
MD5 d1899aea6e78fbff0563c7001f2a60f1
SHA1 6cf5ba822d4646ffa72805872c56087ebbc132c9
SHA512 c68489c5aba8b04490920791030e80056ca213d2dcd3fc8ffcbc5b89db58fc3aec06994a3f8ff7017e7ddafd1d665969bfb7a534a7e7b028771b9c046ad3b4c1
SSDEEP 786432:Yu6L5wHk/+1neYo7XDbTWX9GdJnQhGkF/ovDHHeuS68fAv:YlLAk/+1npo7TM9GdJQSnoA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VisualCppRedist_AIO_x86_x64.exe

File Explorer

VisualCppRedist_AIO_x86_x64.exe

.exe 27.6MB

VisualCppRedist_AIO_x86_x64.exe

IMPHASH 524711ec9c5a149fe3bf3479d0b505b6
SHA256 68ab06ae1d19045d1ea9ec87fe67c2102c8b09aca2c7ff3de897aebe7fe80f11
MD5 d1899aea6e78fbff0563c7001f2a60f1
SHA1 6cf5ba822d4646ffa72805872c56087ebbc132c9
SHA512 c68489c5aba8b04490920791030e80056ca213d2dcd3fc8ffcbc5b89db58fc3aec06994a3f8ff7017e7ddafd1d665969bfb7a534a7e7b028771b9c046ad3b4c1
SSDEEP 786432:Yu6L5wHk/+1neYo7XDbTWX9GdJnQhGkF/ovDHHeuS68fAv:YlLAk/+1npo7TM9GdJQSnoA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97583

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

shell32

ShellExecuteExW ShellExecuteW SHGetMalloc SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHGetSpecialFolderPathW

gdi32

CreateCompatibleDC CreateFontIndirectW DeleteObject DeleteDC GetCurrentObject StretchBlt GetDeviceCaps CreateCompatibleBitmap SelectObject SetStretchBltMode GetObjectW

advapi32

FreeSid AllocateAndInitializeSid CheckTokenMembership

user32

GetWindowRect SetWindowPos GetWindowLongW GetMessageW DispatchMessageW KillTimer GetDesktopWindow SendMessageW EndDialog ShowWindow BringWindowToTop wsprintfW MessageBoxW CreateWindowExW ScreenToClient GetParent CopyImage ReleaseDC GetWindowDC CharUpperW GetClassNameA wsprintfA GetWindowTextW GetWindowTextLengthW SetWindowTextW GetSysColor DestroyWindow MessageBoxA GetKeyState GetDlgItem GetClientRect SetWindowLongW UnhookWindowsHookEx SetFocus GetSystemMetrics SystemParametersInfoW DrawTextW GetDC ClientToScreen GetWindow DialogBoxIndirectParamW DrawIconEx CallWindowProcW DefWindowProcW CallNextHookEx PtInRect SetWindowsHookExW LoadImageW LoadIconW MessageBeep EnableWindow IsWindow EnableMenuItem GetSystemMenu CreateWindowExA wvsprintfW GetMenu SetTimer

ole32

CreateStreamOnHGlobal CoCreateInstance CoInitialize

oleaut32

SysAllocStringLen VariantClear SysFreeString OleLoadPicture SysAllocString

kernel32

SetFileTime SetEndOfFile GetFileInformationByHandle VirtualFree GetModuleHandleA WaitForMultipleObjects VirtualAlloc ReadFile SetFilePointer GetFileSize LeaveCriticalSection EnterCriticalSection DeleteCriticalSection FormatMessageW lstrcpyW LocalFree IsBadReadPtr SuspendThread TerminateThread GetSystemDirectoryW GetCurrentThreadId InitializeCriticalSection ResetEvent SetEvent CreateEventW GetVersionExW GetModuleFileNameW GetCurrentProcess SetProcessWorkingSetSize SetEnvironmentVariableW GetDriveTypeW CreateFileW LoadLibraryA SetThreadLocale GetSystemTimeAsFileTime ExpandEnvironmentStringsW CompareFileTime WideCharToMultiByte GetTempPathW GetCurrentDirectoryW FindFirstFileW lstrcmpW DeleteFileW FindNextFileW FindClose RemoveDirectoryW SetCurrentDirectoryW GetEnvironmentVariableW lstrcmpiW GetLocaleInfoW MultiByteToWideChar GetUserDefaultUILanguage GetSystemDefaultUILanguage GetSystemDefaultLCID lstrcmpiA GlobalAlloc GlobalFree MulDiv FindResourceExA SizeofResource LoadResource LockResource GetProcAddress GetModuleHandleW GetStdHandle WriteFile lstrlenA CreateDirectoryW GetFileAttributesW lstrlenW GetLocalTime SystemTimeToFileTime CreateThread GetExitCodeThread Sleep SetFileAttributesW ExitProcess lstrcatW CloseHandle WaitForSingleObject GetExitCodeProcess GetQueuedCompletionStatus SetInformationJobObject CreateIoCompletionPort AssignProcessToJobObject ResumeThread CreateJobObjectW GetLastError CreateProcessW GetStartupInfoW GetCommandLineW SetLastError GetDiskFreeSpaceExW GetStartupInfoA

msvcrt

memset _wtol _purecall memcmp ??2@YAPAXI@Z _wcsnicmp memmove _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ _onexit __dllonexit malloc free wcsstr _CxxThrowException wcscmp _beginthreadex _EH_prolog ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z strncmp wcsncmp wcsncpy strncpy memcpy ??3@YAXPAX@Z