Static task
static1
General
-
Target
Install_02026.exe
-
Size
67.3MB
-
MD5
f30e3772d07d18c14715e75a592a2cf9
-
SHA1
b9a3310281f66c4bbd93c0a0886a82b343e56fa7
-
SHA256
07c36563d57f52e4f94d94a64da9f5137567b36f574cb6d20f93a3c17b1fb455
-
SHA512
088fabf1562e63dfc17e523ff447379b15a3ff58d57ee26d093f2fa5ea3839aee194dbe220c7b0be36dce8026c50c580ea85ecf8914f210cac2a479929bc9b31
-
SSDEEP
196608:VQFgLRKHqT3OgmAC6WtaqyF6tkcEERPUwxHB1cJ6TywN36X8psOaJDz4:VQFgvT3OoCcgtekPbxU2ywqJ51z4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Install_02026.exe
Files
-
Install_02026.exe.exe windows:6 windows x86 arch:x86
5988e6058399342b7bab73e1fe4adf61
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
RaiseException
GetCPInfo
SetUnhandledExceptionFilter
GetTempPathW
ExitProcess
GetTempPathA
FreeLibrary
Sleep
SetFilePointerEx
GetStringTypeW
ReadFile
HeapAlloc
HeapReAlloc
CreateThread
CreateEventA
SetLastError
RtlUnwind
GetModuleFileNameA
ReleaseSRWLockExclusive
GetCommandLineW
CreateDirectoryW
InitializeCriticalSectionEx
CreateFileA
GetFileSize
VirtualAlloc
GetProcAddress
TlsGetValue
GetStartupInfoW
VirtualFree
InitializeCriticalSectionAndSpinCount
CreateSemaphoreA
GetCurrentDirectoryW
FindNextFileW
AcquireSRWLockExclusive
LeaveCriticalSection
GetFileType
WaitForSingleObject
TlsSetValue
FindFirstFileExA
GetConsoleCP
InitializeSListHead
FindNextFileA
FormatMessageA
GetStdHandle
SetCurrentDirectoryA
GetVersionExA
MoveFileExW
DeleteFileW
FindFirstFileW
AreFileApisANSI
GetCurrentProcessId
CreateDirectoryA
FindFirstFileA
InitializeCriticalSection
IsProcessorFeaturePresent
GetConsoleMode
SetFilePointer
RemoveDirectoryA
FreeLibraryAndExitThread
GetLastError
CreateProcessA
MultiByteToWideChar
GetModuleHandleW
GetFileAttributesW
RemoveDirectoryW
TlsFree
HeapSize
GetOEMCP
HeapFree
IsValidCodePage
ReleaseSemaphore
GetCommandLineA
GetFileInformationByHandle
GetCurrentProcess
LocalFree
TerminateProcess
WriteConsoleW
CreateFileW
WideCharToMultiByte
GetModuleHandleExW
FormatMessageW
EnterCriticalSection
SetStdHandle
CloseHandle
GlobalMemoryStatus
GetCurrentThreadId
FindClose
GetTickCount64
DeleteFileA
GetTickCount
SetFileAttributesA
SetEvent
UnhandledExceptionFilter
SetFileAttributesW
SetCurrentDirectoryW
TlsAlloc
GetEnvironmentStringsW
LCMapStringW
GetModuleHandleA
EncodePointer
LoadLibraryExW
IsBadReadPtr
ExitThread
GetProcessAffinityMask
LoadLibraryA
QueryPerformanceCounter
GetModuleFileNameW
SetFileTime
GetSystemInfo
GetProcessHeap
GetTempFileNameW
TryAcquireSRWLockExclusive
IsDebuggerPresent
ResetEvent
GetSystemDirectoryW
WriteFile
GetVersion
QueryPerformanceFrequency
GetCurrentDirectoryA
GetACP
WakeAllConditionVariable
FlushFileBuffers
GetSystemTimeAsFileTime
DeleteCriticalSection
LoadLibraryW
FreeEnvironmentStringsW
DecodePointer
SetEndOfFile
user32
ShowWindow
LoadStringA
SetWindowTextA
LoadStringW
PostMessageA
SetWindowTextW
DialogBoxParamW
LoadIconA
CharUpperW
EndDialog
KillTimer
CharUpperA
MessageBoxA
SendMessageA
SetTimer
GetDlgItem
SetWindowLongA
GetWindowLongA
DialogBoxParamA
MessageBoxW
DestroyWindow
shell32
ShellExecuteExA
oleaut32
VariantClear
SysAllocStringLen
SysStringLen
advapi32
CloseServiceHandle
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 570KB - Virtual size: 586KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ