mini_installer_patch_3stage.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0b86f12af60bd740746a05f7ee638660N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0b86f12af60bd740746a05f7ee638660N.exe
Resource
win10v2004-20240709-en
General
-
Target
0b86f12af60bd740746a05f7ee638660N.exe
-
Size
914KB
-
MD5
0b86f12af60bd740746a05f7ee638660
-
SHA1
68a3f1db600c93b485ea6d2e891b0f880c7d7167
-
SHA256
5ec3787f06dbfe83058abee4fd96cee02e985d7a8034432b5781c57e7fdf8195
-
SHA512
54c80065b0ae0f6f7984e28f61402dfc125b39198ecefb814f2ff347712c8089713bdd654061d1b3fb3dedd353e9aa5e5ca2e89d433abb32160cedf9b708019d
-
SSDEEP
3072:yusb8cn+Ng8o2oW+DNdPcnRUcsrYiCpHVa46w+pqdCCit:yuM38HoZ3xrMjSvhCi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b86f12af60bd740746a05f7ee638660N.exe
Files
-
0b86f12af60bd740746a05f7ee638660N.exe.exe windows:4 windows x86 arch:x86
97c84e275e3d60a5007b71caf69b1f34
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
kernel32
LocalFree
lstrcmpiW
LockResource
SizeofResource
LoadResource
FindResourceW
GetCommandLineW
HeapAlloc
GetProcessHeap
HeapFree
WideCharToMultiByte
MultiByteToWideChar
ReadFile
WriteFile
CloseHandle
SetFilePointer
CreateFileW
SetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetProcAddress
LoadLibraryExW
ExpandEnvironmentStringsW
lstrlenW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
RemoveDirectoryW
DeleteFileW
CreateDirectoryW
GetTickCount
FindClose
FindNextFileW
FindFirstFileW
GetModuleFileNameW
MoveFileExW
GetLastError
EnumResourceNamesW
GetTempPathW
FindFirstFileExW
SetProcessWorkingSetSize
GetCurrentProcess
ExitProcess
GetModuleHandleW
shell32
CommandLineToArgvW
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 888KB - Virtual size: 887KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ