General

  • Target

    lnstaller.zip

  • Size

    19.4MB

  • MD5

    89704266da46b924276763de7c5d827a

  • SHA1

    30368bb2cd5743c7324b1a63d28ba0424f697411

  • SHA256

    b37520119649e38255430a2981c4ba8997b3eb44a46e1c01bf17c5181f1bc922

  • SHA512

    3a182ea4cc04d243ab62cbffd86ed87c862a923a8685734f7b1af487be85c97383da0021da56c8f33ec096247f01d96b168c2819ee532e626c7f0b3c6f3412aa

  • SSDEEP

    393216:q82fT8J4oehIQflkL3i2atnywYgMQJVciIMN5E33/PhM4Ww:q82fQe7tNkjiltnmgMQJrv52nq4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • lnstaller.zip
    .zip
  • lnstaller/0FC343C0.dll
    .dll windows:10 windows x64 arch:x64

    482ab440211976ea17ec54e3ce97e53d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lnstaller/B7091C83.dll
    .dll windows:5 windows x86 arch:x86

    d811d71710ad58776155b7a8da1fa9db


    Code Sign

    Headers

    Imports

    Sections

  • lnstaller/CbsMsg.dll
    .dll windows:10 windows x64 arch:x64

    3a6fd3b46b76f3ce7178b2e11f50b05a


    Code Sign

    Headers

    Imports

    Sections

  • lnstaller/DICTS/mshwchtrIME.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • lnstaller/PresentationCore/PresentationCore.dll
    .dll windows:6 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • lnstaller/PresentationCore/System.Data.dll
    .dll windows:6 windows x86 arch:x86

    025065f1f653f3ecea3431275b0ac9ea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lnstaller/Setup.exe
    .exe .ps1 windows:4 windows x86 arch:x86 polyglot

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • lnstaller/mscorlib/SettingsHandlers_InputPersonalization.dll
    .dll windows:10 windows x64 arch:x64

    b1ed2f734ce31b7a7587324d68b842c5


    Headers

    Imports

    Exports

    Sections

  • lnstaller/mscorlib/SettingsHandlers_ManagePhone.dll
    .dll windows:10 windows x64 arch:x64

    d0cb94157f279cdb57d7e3c1d820c74a


    Headers

    Imports

    Exports

    Sections

  • lnstaller/mscorlib/SettingsHandlers_WorkAccess.dll
    .dll windows:10 windows x64 arch:x64

    f0058412f3431590bb1827e4300affd4


    Headers

    Imports

    Exports

    Sections

  • lnstaller/mscorlib/SettingsHandlers_nt.dll
    .dll windows:10 windows x64 arch:x64

    7ae06e70115094afbbb6316378531a7e


    Headers

    Imports

    Exports

    Sections

  • lnstaller/mscorlib/v4.0_4.0.0.0__b77a5c561934e089/mscorlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • lnstaller/mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normidna.nlp
  • lnstaller/mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normnfc.nlp
  • lnstaller/mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normnfd.nlp
  • lnstaller/mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normnfkc.nlp
  • lnstaller/mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normnfkd.nlp
  • lnstaller/mshwkorrIME.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • lnstaller/twain_32.dll
    .dll windows:10 windows x86 arch:x86

    316cd668ed705c998eae8d3bd7bd168f


    Headers

    Imports

    Exports

    Sections

  • lnstaller/wrpintapi.dll
    .dll windows:10 windows x64 arch:x64

    88d112d340f48a8e711dbb236eff1b92


    Headers

    Imports

    Exports

    Sections