Static task
static1
Behavioral task
behavioral1
Sample
Install_0007.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Install_0007.exe
Resource
win10v2004-20240508-en
General
-
Target
Install_0007.exe
-
Size
37.6MB
-
MD5
312f4dd3e351415c2a8fd3c97eba6180
-
SHA1
c9027aaa444b7d87e8b799893987690e30297b3e
-
SHA256
9f0685c8219b92f255e562810c7541fcd28340b6adba460fb2466e8c1393e634
-
SHA512
ef88c674b81827957f63a8e443e22d057ada197f7f9a1a4061ed0ab744d538aba764b972b37b8c3f2b271692dfcf55cfbbb80fc008d51faa5b5887b24fac90ea
-
SSDEEP
786432:i4O9FTo05zlve+Ln3PPkbsWUWHAHt2VBpem0Czgfsb:JOP5he+L/sgWrU2g9Czgfm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Install_0007.exe
Files
-
Install_0007.exe.exe windows:6 windows x86 arch:x86
e8daf068770626a422139755b4f65210
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathCombineW
PathFileExistsW
kernel32
CreateEventA
GetConsoleMode
LeaveCriticalSection
FreeEnvironmentStringsW
SetFileTime
CreateDirectoryA
FlushFileBuffers
VirtualAlloc
GetSystemTimeAsFileTime
FormatMessageW
GetSystemDirectoryW
GetLocaleInfoW
GetFileSize
GetModuleHandleA
GetCurrentProcessId
IsDebuggerPresent
GetCurrentThreadId
HeapAlloc
HeapSize
GetFileInformationByHandle
EnumSystemLocalesW
SetFilePointer
IsValidLocale
DeleteFileA
WriteFile
MultiByteToWideChar
AreFileApisANSI
ExitThread
TlsSetValue
FindNextFileA
GlobalMemoryStatus
GetVersionExA
GetModuleFileNameA
GetEnvironmentStringsW
lstrlenW
SetEndOfFile
GetCurrentProcess
DecodePointer
GetProcAddress
GetStartupInfoW
CreateFileW
FindFirstFileA
RemoveDirectoryW
GetFileAttributesA
LoadLibraryA
RtlUnwind
GetFileType
GetUserDefaultLCID
lstrcatW
LoadLibraryW
IsValidCodePage
GetStdHandle
FreeLibrary
DeleteFileW
FindFirstFileExW
SetEvent
WaitForSingleObject
HeapFree
SetLastError
VirtualFree
InitializeCriticalSectionEx
EnterCriticalSection
EncodePointer
SetFileAttributesW
WriteConsoleW
InitializeCriticalSection
CreateDirectoryW
GetProcessHeap
GetCurrentDirectoryW
CreateFileA
RaiseException
QueryPerformanceCounter
GetNativeSystemInfo
RemoveDirectoryA
FormatMessageA
GetTickCount64
FindNextFileW
CreateSemaphoreA
WideCharToMultiByte
LCMapStringEx
CloseHandle
CreateThread
GetSystemWow64DirectoryW
GetCurrentDirectoryA
DeleteCriticalSection
ResetEvent
TlsGetValue
InitializeSListHead
GetTickCount
LocalFree
SetFilePointerEx
FindFirstFileW
GetTempPathW
TlsFree
IsBadReadPtr
ReleaseSemaphore
VirtualProtect
InitializeCriticalSectionAndSpinCount
GetACP
GetTempPathA
GetLastError
ExitProcess
GetFileAttributesW
GetCommandLineA
UnhandledExceptionFilter
GetSystemInfo
GetOEMCP
GetCommandLineW
GetModuleHandleW
FreeLibraryAndExitThread
Sleep
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
SetFileAttributesA
GetConsoleOutputCP
GetCPInfo
FindClose
SetStdHandle
TlsAlloc
GetStringTypeW
LoadLibraryExW
LCMapStringW
GetModuleHandleExW
ReadFile
GetProcessAffinityMask
TerminateProcess
GetModuleFileNameW
HeapReAlloc
user32
GetWindowLongA
DialogBoxParamA
LoadStringA
EndDialog
SetWindowLongA
SetTimer
CharUpperA
ShowWindow
SetWindowTextA
SendMessageA
PostMessageA
SetWindowTextW
GetDlgItem
LoadStringW
LoadIconA
KillTimer
DialogBoxParamW
DestroyWindow
MessageBoxW
CharUpperW
shell32
SHGetSpecialFolderPathW
oleaut32
SysAllocStringLen
SysStringLen
VariantClear
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
ole32
CoInitialize
CoCreateInstance
CoUninitialize
Sections
.text Size: 917KB - Virtual size: 917KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ