C:\Users\удача\Desktop\StubClear\Release\BigProject.pdb
Static task
static1
1 signatures
General
-
Target
lnstaller.exe
-
Size
135.8MB
-
MD5
46691f3058127da306de0dff1d759450
-
SHA1
5bcea5cc930896c5ba01004d51e58b671a65ba42
-
SHA256
80ee0ce07c40de78a47bc5ac775cd92b1f51d115ec9545963b38ee10c89d05d9
-
SHA512
b7dc22476a87d32a86990493087af606b1ce9b7ba9b2b71f7ee2350203c78646a4a4bef7c3aa8a32d94f947a0564150da1e96654e46348dc084eeaa54a02fbbd
-
SSDEEP
12288:u2/Xv6TAEKfc+lJ8QGgVINXYPe7R4Yn0/DPXu9ElFFEGMG1zq0OiK+G:ZXv6UEX+4QzVINXYPh7ZzqBn
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource lnstaller.exe
Files
-
lnstaller.exe.exe windows:6 windows x86 arch:x86
b87fc3874fae7c2c4ec39758e7ba8890
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
K32EnumProcessModulesEx
CreateFileW
K32EnumProcessModules
K32EnumProcesses
LoadLibraryA
GetProcAddress
FreeLibrary
OpenProcess
GetCurrentProcessId
GetCurrentProcess
CloseHandle
K32GetModuleBaseNameW
HeapSize
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetFileType
HeapAlloc
HeapFree
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
TerminateProcess
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
WriteConsoleW
comdlg32
CommDlgExtendedError
PrintDlgA
ChooseFontA
ReplaceTextW
ReplaceTextA
FindTextW
FindTextA
ChooseColorW
ChooseColorA
GetFileTitleW
GetFileTitleA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
rpcrt4
UuidToStringW
RpcEpRegisterNoReplaceA
RpcMgmtWaitServerListen
RpcMgmtStopServerListening
UuidFromStringA
UuidToStringA
RpcBindingFree
RpcBindingFromStringBindingA
RpcBindingReset
RpcStringBindingComposeA
RpcStringFreeA
RpcStringFreeW
RpcServerListen
RpcServerRegisterIf
RpcServerUseProtseqEpA
UuidCreate
wintrust
WTHelperProvDataFromStateData
WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
version
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoSizeExW
VerQueryValueW
shlwapi
PathRemoveFileSpecA
PathAppendA
PathFileExistsA
PathFindFileNameA
PathIsURLA
PathAddBackslashA
Sections
.text Size: 390KB - Virtual size: 390KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 399KB - Virtual size: 407KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ