Install_0007[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Install_0007.exe
Size 37.5MB
Sample240603-llwhfaac6x
SHA256 55b3df9026eaafdec872aa5d86074fd26cb2066dc049b1b3812996d9554aee6e
MD5 ccb728606a201b93d605e8fad53a9e11
SHA1 023d0589874541033ada8e01fdcffd455f674bd0
SHA512 cd5da61e57871fd5e4082e9d22c40802cf05f7db828cf9c51d3d08e37816ae10eaced29fc2727ac8706ba5b276348d363658050b39f55efd03618b34242a1e61
SSDEEP 786432:g4O9FTysg+6AaEpmSqz1oRQfx022R1dTFn/tQUZdKJc7tJG3:fOPuosSqZHNgzdZKJH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Install_0007.exe

File Explorer

Install_0007.exe

.exe 37.5MB

Install_0007.exe

IMPHASH e8daf068770626a422139755b4f65210
SHA256 55b3df9026eaafdec872aa5d86074fd26cb2066dc049b1b3812996d9554aee6e
MD5 ccb728606a201b93d605e8fad53a9e11
SHA1 023d0589874541033ada8e01fdcffd455f674bd0
SHA512 cd5da61e57871fd5e4082e9d22c40802cf05f7db828cf9c51d3d08e37816ae10eaced29fc2727ac8706ba5b276348d363658050b39f55efd03618b34242a1e61
SSDEEP 786432:g4O9FTysg+6AaEpmSqz1oRQfx022R1dTFn/tQUZdKJc7tJG3:fOPuosSqZHNgzdZKJH
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

849596

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathCombineW PathFileExistsW

kernel32

CreateEventA GetConsoleMode LeaveCriticalSection FreeEnvironmentStringsW SetFileTime CreateDirectoryA FlushFileBuffers VirtualAlloc GetSystemTimeAsFileTime FormatMessageW GetSystemDirectoryW GetLocaleInfoW GetFileSize GetModuleHandleA GetCurrentProcessId IsDebuggerPresent GetCurrentThreadId HeapAlloc HeapSize GetFileInformationByHandle EnumSystemLocalesW SetFilePointer IsValidLocale DeleteFileA WriteFile MultiByteToWideChar AreFileApisANSI ExitThread TlsSetValue FindNextFileA GlobalMemoryStatus GetVersionExA GetModuleFileNameA GetEnvironmentStringsW lstrlenW SetEndOfFile GetCurrentProcess DecodePointer GetProcAddress GetStartupInfoW CreateFileW FindFirstFileA RemoveDirectoryW GetFileAttributesA LoadLibraryA RtlUnwind GetFileType GetUserDefaultLCID lstrcatW LoadLibraryW IsValidCodePage GetStdHandle FreeLibrary DeleteFileW FindFirstFileExW SetEvent WaitForSingleObject HeapFree SetLastError VirtualFree InitializeCriticalSectionEx EnterCriticalSection EncodePointer SetFileAttributesW WriteConsoleW InitializeCriticalSection CreateDirectoryW GetProcessHeap GetCurrentDirectoryW CreateFileA RaiseException QueryPerformanceCounter GetNativeSystemInfo RemoveDirectoryA FormatMessageA GetTickCount64 FindNextFileW CreateSemaphoreA WideCharToMultiByte LCMapStringEx CloseHandle CreateThread GetSystemWow64DirectoryW GetCurrentDirectoryA DeleteCriticalSection ResetEvent TlsGetValue InitializeSListHead GetTickCount LocalFree SetFilePointerEx FindFirstFileW GetTempPathW TlsFree IsBadReadPtr ReleaseSemaphore VirtualProtect InitializeCriticalSectionAndSpinCount GetACP GetTempPathA GetLastError ExitProcess GetFileAttributesW GetCommandLineA UnhandledExceptionFilter GetSystemInfo GetOEMCP GetCommandLineW GetModuleHandleW FreeLibraryAndExitThread Sleep IsProcessorFeaturePresent SetUnhandledExceptionFilter SetFileAttributesA GetConsoleOutputCP GetCPInfo FindClose SetStdHandle TlsAlloc GetStringTypeW LoadLibraryExW LCMapStringW GetModuleHandleExW ReadFile GetProcessAffinityMask TerminateProcess GetModuleFileNameW HeapReAlloc

user32

GetWindowLongA DialogBoxParamA LoadStringA EndDialog SetWindowLongA SetTimer CharUpperA ShowWindow SetWindowTextA SendMessageA PostMessageA SetWindowTextW GetDlgItem LoadStringW LoadIconA KillTimer DialogBoxParamW DestroyWindow MessageBoxW CharUpperW

shell32

SHGetSpecialFolderPathW

oleaut32

SysAllocStringLen SysStringLen VariantClear

advapi32

RegCreateKeyExW RegOpenKeyExW RegSetValueExW RegCloseKey

ole32

CoInitialize CoCreateInstance CoUninitialize