Static task
static1
Behavioral task
behavioral1
Sample
Install_0007.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Install_0007.exe
Resource
win10v2004-20240426-en
General
-
Target
Install_0007.exe
-
Size
37.5MB
-
MD5
e1b07111d364b557f502613e3c0e9564
-
SHA1
8f9a41bea4377398780fe35e553866fba7e77907
-
SHA256
45e2d4e071b2b312606bbee55c6f527674479c9007e0f43bfd28bf0d547372f9
-
SHA512
25159caab2c96fb6a8596068242cbec24efd9e3090d6664e1857c8fe79346de116ac67fa5779a0660d5c3b947612976de53f4cb57dd82164b60ebc54b42ddb93
-
SSDEEP
786432:i4O9FTmPF+Vh1v3P8u9t1N8drDk4uBF/z:JOP6PAVh1v3Pr9t1N8draBFL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Install_0007.exe
Files
-
Install_0007.exe.exe windows:6 windows x86 arch:x86
e8daf068770626a422139755b4f65210
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathCombineW
PathFileExistsW
kernel32
CreateEventA
GetConsoleMode
LeaveCriticalSection
FreeEnvironmentStringsW
SetFileTime
CreateDirectoryA
FlushFileBuffers
VirtualAlloc
GetSystemTimeAsFileTime
FormatMessageW
GetSystemDirectoryW
GetLocaleInfoW
GetFileSize
GetModuleHandleA
GetCurrentProcessId
IsDebuggerPresent
GetCurrentThreadId
HeapAlloc
HeapSize
GetFileInformationByHandle
EnumSystemLocalesW
SetFilePointer
IsValidLocale
DeleteFileA
WriteFile
MultiByteToWideChar
AreFileApisANSI
ExitThread
TlsSetValue
FindNextFileA
GlobalMemoryStatus
GetVersionExA
GetModuleFileNameA
GetEnvironmentStringsW
lstrlenW
SetEndOfFile
GetCurrentProcess
DecodePointer
GetProcAddress
GetStartupInfoW
CreateFileW
FindFirstFileA
RemoveDirectoryW
GetFileAttributesA
LoadLibraryA
RtlUnwind
GetFileType
GetUserDefaultLCID
lstrcatW
LoadLibraryW
IsValidCodePage
GetStdHandle
FreeLibrary
DeleteFileW
FindFirstFileExW
SetEvent
WaitForSingleObject
HeapFree
SetLastError
VirtualFree
InitializeCriticalSectionEx
EnterCriticalSection
EncodePointer
SetFileAttributesW
WriteConsoleW
InitializeCriticalSection
CreateDirectoryW
GetProcessHeap
GetCurrentDirectoryW
CreateFileA
RaiseException
QueryPerformanceCounter
GetNativeSystemInfo
RemoveDirectoryA
FormatMessageA
GetTickCount64
FindNextFileW
CreateSemaphoreA
WideCharToMultiByte
LCMapStringEx
CloseHandle
CreateThread
GetSystemWow64DirectoryW
GetCurrentDirectoryA
DeleteCriticalSection
ResetEvent
TlsGetValue
InitializeSListHead
GetTickCount
LocalFree
SetFilePointerEx
FindFirstFileW
GetTempPathW
TlsFree
IsBadReadPtr
ReleaseSemaphore
VirtualProtect
InitializeCriticalSectionAndSpinCount
GetACP
GetTempPathA
GetLastError
ExitProcess
GetFileAttributesW
GetCommandLineA
UnhandledExceptionFilter
GetSystemInfo
GetOEMCP
GetCommandLineW
GetModuleHandleW
FreeLibraryAndExitThread
Sleep
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
SetFileAttributesA
GetConsoleOutputCP
GetCPInfo
FindClose
SetStdHandle
TlsAlloc
GetStringTypeW
LoadLibraryExW
LCMapStringW
GetModuleHandleExW
ReadFile
GetProcessAffinityMask
TerminateProcess
GetModuleFileNameW
HeapReAlloc
user32
GetWindowLongA
DialogBoxParamA
LoadStringA
EndDialog
SetWindowLongA
SetTimer
CharUpperA
ShowWindow
SetWindowTextA
SendMessageA
PostMessageA
SetWindowTextW
GetDlgItem
LoadStringW
LoadIconA
KillTimer
DialogBoxParamW
DestroyWindow
MessageBoxW
CharUpperW
shell32
SHGetSpecialFolderPathW
oleaut32
SysAllocStringLen
SysStringLen
VariantClear
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
ole32
CoInitialize
CoCreateInstance
CoUninitialize
Sections
.text Size: 917KB - Virtual size: 917KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ