sync-installer-5[.]0[.]18[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

sync-installer-5.0.18.exe
Size

54.4MB
MD5

54273b76e7efb0455d207c1bd111501c
SHA1

fd75330725f326276a5058b0c7665e4923dd8384
SHA256

10e44518e31bbd9dc070c1e53072c5eeddbfb3ea06feb0710cebf365d595c8ac
SHA512

bd11d611c8f4fadc514b23894e3d3a4380c07cb9199bf946f54fed43dd5554e7485c68372ff11d6179cd0c738e979d51c15496fe102d3a982ec58b74fb0bea0f
SSDEEP

1572864:x7g27HORAyyhNd6g8Q8Bo5nZ0lD9cQDkIzcyiZ:xsIqAyK7LWoIAdgchZ

Score

1^/10

Malware Config

Signatures

Files

sync-installer-5.0.18.exe
.exe windows:6 windows x86 arch:x86

Password: infected

5c9a225811c4884976fd5d86acdba58f

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

de:0a:25:31:a6:a7:2b:c5:c3:6d:91:d6:e7:4b:4a:f2
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

29-07-2022 00:00

Not After

28-07-2025 23:59

Subject

SERIALNUMBER=18610160,CN=Sync.com Inc.,O=Sync.com Inc.,ST=Ontario,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13074f6e746172696f,1.3.6.1.4.1.311.60.2.1.3=#13024341

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15-01-2024 00:00

Not After

14-04-2035 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22-03-2021 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

43:27:d7:98:40:97:4b:5b:b7:63:51:8f:84:7b:c3:05:5f:dc:c9:df:86:d8:50:62:b6:af:74:e5:e5:df:7b:61
Signer

Actual PE Digest

43:27:d7:98:40:97:4b:5b:b7:63:51:8f:84:7b:c3:05:5f:dc:c9:df:86:d8:50:62:b6:af:74:e5:e5:df:7b:61

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\wsl_devel\obj\win32\installer\sync-installer.exe.pdb

Imports

shell32

ShellExecuteExW
SHChangeNotify
SHGetFolderPathW
DragQueryPoint
DragFinish
SHFileOperationW
ord6
SHGetFileInfoW
ExtractIconExW
ExtractIconW
CommandLineToArgvW
DragAcceptFiles
DragQueryFileW

kernel32

EnumSystemLocalesW
GetTimeFormatW
SetConsoleCtrlHandler
GetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
GetFileSizeEx
GetOEMCP
InterlockedPushEntrySList
RtlUnwind
VirtualQuery
HeapFree
HeapAlloc
InterlockedFlushSList
LoadLibraryExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
FindFirstFileExW
GetCommandLineA
GetModuleHandleExW
ExitThread
FreeLibraryAndExitThread
GetFullPathNameW
CreateDirectoryW
RemoveDirectoryW
GetDateFormatW
SetFileAttributesW
SetFilePointerEx
GetConsoleOutputCP
ReadConsoleW
HeapReAlloc
InitializeSListHead
GetConsoleMode
SetStdHandle
MoveFileExW
LoadLibraryW
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleW
FreeLibrary
GetProcessId
GetCurrentProcess
CloseHandle
GetShortPathNameW
DeleteFileW
GetTimeZoneInformation
GetFileAttributesExW
FindNextFileW
GetStdHandle
FreeConsole
AttachConsole
WriteConsoleA
WriteConsoleW
FillConsoleOutputCharacterW
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
ReadConsoleOutputCharacterA
MulDiv
GetLastError
SetLastError
ExitProcess
GetCurrentThreadId
GetCommandLineW
LocalFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GlobalAlloc
GlobalUnlock
GlobalLock
HeapSize
GetProcessHeap
GlobalSize
GlobalFree
SetErrorMode
MultiByteToWideChar
WideCharToMultiByte
TryEnterCriticalSection
ReleaseSemaphore
ReleaseMutex
WaitForSingleObject
CreateMutexW
Sleep
CreateSemaphoreW
SetThreadPriority
TerminateThread
GetExitCodeThread
SuspendThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetThreadContext
GetSystemInfo
GetProcessAffinityMask
SetProcessAffinityMask
FormatMessageW
SetCurrentDirectoryW
CreateFileW
GetFileAttributesW
GetFileType
GetWindowsDirectoryW
CopyFileW
ReadFile
WriteFile
SetHandleInformation
CreatePipe
SetNamedPipeHandleState
PeekNamedPipe
SetEvent
CreateEventW
WaitForMultipleObjects
GetExitCodeProcess
CreateThread
CreateProcessW
EnumResourceNamesW
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
FindClose
FindFirstFileW
GetFileSize
GetFileTime
GetLongPathNameW
GetTempFileNameW
SetFileTime
GetTempPathW
GetEnvironmentVariableW
GetDiskFreeSpaceExW
IsDebuggerPresent
GetCurrentProcessId
TerminateProcess
OpenProcess
GetVersionExW
GetModuleFileNameW
GlobalMemoryStatus
GetProfileStringW
GetComputerNameW
IsValidCodePage
GetCPInfo
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OutputDebugStringW
GetACP
GetLocaleInfoW
IsValidLocale
GetThreadLocale
SetThreadLocale
GetUserDefaultLCID
QueryPerformanceCounter
QueryPerformanceFrequency
GetDriveTypeW
GetLogicalDriveStringsW
GetCurrentThread
GetStartupInfoW
RaiseException
IsBadReadPtr
IsBadStringPtrA
VerSetConditionMask
GetProcessTimes
GetModuleHandleA
VerifyVersionInfoW
K32EnumProcesses
K32GetProcessImageFileNameW
FormatMessageA
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
SwitchToThread
GetTickCount
CompareStringW
LCMapStringW
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
FlushFileBuffers

msi

ord70

user32

SetActiveWindow
RegisterClassW
UnregisterClassW
GetKeyState
MessageBoxW
GetProcessDefaultLayout
LoadCursorW
TranslateMessage
DispatchMessageW
PeekMessageW
RegisterHotKey
UnregisterHotKey
GetMessagePos
GetMessageTime
SendMessageW
DefWindowProcW
PostQuitMessage
CallWindowProcW
CreateWindowExW
IsWindow
DestroyWindow
ShowWindow
AnimateWindow
MoveWindow
SetWindowPos
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
SetFocus
GetActiveWindow
GetFocus
GetAsyncKeyState
VkKeyScanW
MapVirtualKeyW
GetCapture
SetCapture
ReleaseCapture
EnableWindow
IsWindowEnabled
GetSystemMetrics
GetMenuItemCount
TrackPopupMenu
GetMenuItemInfoW
UpdateWindow
GetDC
ReleaseDC
GetUpdateRgn
InvalidateRect
RedrawWindow
ScrollWindow
EnableScrollBar
SetWindowTextW
GetClientRect
GetWindowRect
SetCursorPos
SetCursor
GetCursorPos
ClientToScreen
ScreenToClient
MapWindowPoints
WindowFromPoint
ChildWindowFromPointEx
GetSysColor
FillRect
InflateRect
PtInRect
GetWindowLongW
SetWindowLongW
GetParent
SetParent
GetWindow
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
IsDialogMessageW
SetScrollInfo
GetScrollInfo
SystemParametersInfoW
CreateDialogParamW
GetDlgItem
SetWindowRgn
GetWindowPlacement
SetWindowPlacement
SetLayeredWindowAttributes
FlashWindowEx
IsIconic
IsZoomed
BringWindowToTop
GetDialogBaseUnits
DrawMenuBar
GetSystemMenu
EnableMenuItem
FindWindowExW
EndDialog
MsgWaitForMultipleObjects
EnumChildWindows
LoadBitmapW
LoadIconW
LoadImageW
GetIconInfo
DestroyIcon
DrawTextW
DrawFocusRect
CreateIconIndirect
DrawStateW
SetRectEmpty
CopyRect
OffsetRect
GetWindowTextW
GetWindowTextLengthW
MessageBeep
GetClassNameW
GetMessageW
PostThreadMessageW
ValidateRect
DrawFrameControl
DrawIconEx
LoadCursorFromFileW
DestroyCursor
LoadAcceleratorsW
CreateAcceleratorTableW
DestroyAcceleratorTable
TranslateAcceleratorW
GetDoubleClickTime
ValidateRgn
UnionRect
IsRectEmpty
GetMenuState
CreateMenu
CreatePopupMenu
DestroyMenu
GetSubMenu
InsertMenuW
AppendMenuW
ModifyMenuW
RemoveMenu
SetMenuInfo
InsertMenuItemW
SetMenuItemInfoW
GetWindowDC
BeginPaint
EndPaint
GetComboBoxInfo
IsMenu
keybd_event
HideCaret
ShowCaret
PostMessageW
ChildWindowFromPoint
CreateIconFromResourceEx
DrawEdge
CheckMenuItem
GetMenuItemID
GetSysColorBrush
SetRect
CheckMenuRadioItem
RegisterClipboardFormatW
GetClipboardFormatNameW
GetDesktopWindow
RegisterWindowMessageW
SetMenu
ChangeDisplaySettingsExW
EnumDisplaySettingsW
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
EnumDisplayMonitors
OpenClipboard
CloseClipboard
EnumClipboardFormats
EmptyClipboard
IsClipboardFormatAvailable
GetClassInfoW
wsprintfW
WaitForInputIdle
ExitWindowsEx
SetTimer
KillTimer
DdeInitializeW
DdeUninitialize
DdeConnect
DdeDisconnect
DdePostAdvise
DdeNameService
DdeClientTransaction
DdeCreateDataHandle
DdeGetData
DdeFreeDataHandle
DdeGetLastError
DdeCreateStringHandleW
DdeQueryStringW
DdeFreeStringHandle
CreateDialogIndirectParamW
SetForegroundWindow
AllowSetForegroundWindow
EnumWindows
GetWindowThreadProcessId

oleacc

LresultFromObject

uxtheme

GetThemePartSize
GetCurrentThemeName
IsThemePartDefined
SetWindowTheme
GetThemeSysFont
GetThemeFont
IsAppThemed
IsThemeActive
GetThemeMargins
DrawThemeParentBackground
GetThemeColor
IsThemeBackgroundPartiallyTransparent
GetThemeBackgroundContentRect
DrawThemeBackground
CloseThemeData
OpenThemeData
GetThemeInt
GetThemeSysColor
GetThemeBackgroundExtent

urlmon

URLDownloadToFileW

msimg32

AlphaBlend
GradientFill

gdi32

PlayEnhMetaFile
GetWinMetaFileBits
GetEnhMetaFileHeader
GetEnhMetaFileW
DeleteEnhMetaFile
SetWinMetaFileBits
CreateEnhMetaFileW
CopyEnhMetaFileW
CloseEnhMetaFile
SetMetaFileBitsEx
GetMetaFileBitsEx
GetSystemPaletteEntries
EndPage
CreateRectRgn
ExcludeClipRect
RealizePalette
SelectObject
SelectPalette
GetTextMetricsW
SetBrushOrgEx
GdiFlush
StartPage
EndDoc
StartDocW
CreateDCW
SetAbortProc
ExtCreateRegion
GetRegionData
OffsetRgn
DeleteObject
GetObjectW
EnumFontFamiliesExW
GetDIBColorTable
SetBkColor
SetBkMode
SetTextColor
BitBlt
CreateBitmap
CreateBitmapIndirect
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
CreatePen
CreateSolidBrush
ExtFloodFill
GetPixel
GetDeviceCaps
LineTo
MoveToEx
CreateFontIndirectW
GetOutlineTextMetricsW
AddFontResourceExW
Arc
Ellipse
GetBkColor
GetClipBox
GetObjectType
GetStockObject
MaskBlt
Pie
PolyPolygon
Rectangle
RoundRect
SelectClipRgn
ExtSelectClipRgn
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPixel
SetPolyFillMode
StretchBlt
StretchDIBits
SetROP2
SetStretchBltMode
GetWorldTransform
SetWorldTransform
ModifyWorldTransform
ExtTextOutW
Polygon
Polyline
PolyBezier
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
CombineRgn
EqualRgn
GetRgnBox
PtInRegion
RectInRegion
CreatePolygonRgn
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetTextExtentPoint32W
CreateHatchBrush
CreatePatternBrush
CreateRectRgnIndirect
GetCharABCWidthsW
GetTextExtentExPointW
CreateICW
ExtCreatePen
CreateDIBitmap
GetDIBits
CreateDIBSection

rpcrt4

UuidCreate
UuidToStringW
UuidFromStringW
RpcStringFreeW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

advapi32

RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
LookupPrivilegeValueA
GetUserNameW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegSetValueExW
RegCloseKey
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW

comdlg32

CommDlgExtendedError
PrintDlgW
PageSetupDlgW
GetOpenFileNameW
GetSaveFileNameW
ChooseFontW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

comctl32

ord17
ord16
ImageList_Create
ImageList_Destroy
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_GetIcon
ImageList_Remove
ImageList_Add
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_Replace
ImageList_Draw
ImageList_SetBkColor

ole32

OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
CoTaskMemFree
CoLockObjectExternal
OleUninitialize
OleInitialize
ReleaseStgMedium
CoTaskMemAlloc
RevokeDragDrop
RegisterDragDrop
PropVariantClear
CoCreateInstance

shlwapi

SHAutoComplete
AssocQueryStringW
PathFindFileNameW

rstrtmgr

RmRegisterResources
RmGetList
RmStartSession
RmEndSession
RmShutdown
RmRestart

Sections

.text
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 782B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47.6MB - Virtual size: 47.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 503KB - Virtual size: 502KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

5c9a225811c4884976fd5d86acdba58f

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate

Extended Key Usages

Key Usages

de:0a:25:31:a6:a7:2b:c5:c3:6d:91:d6:e7:4b:4a:f2Certificate

Extended Key Usages

Key Usages

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89Certificate

Extended Key Usages

Key Usages

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3fCertificate

Extended Key Usages

Key Usages

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68Certificate

Extended Key Usages

Key Usages

43:27:d7:98:40:97:4b:5b:b7:63:51:8f:84:7b:c3:05:5f:dc:c9:df:86:d8:50:62:b6:af:74:e5:e5:df:7b:61Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shell32

kernel32

msi

user32

oleacc

uxtheme

urlmon

msimg32

gdi32

rpcrt4

version

advapi32

comdlg32

winspool.drv

comctl32

ole32

shlwapi

rstrtmgr

Sections

.text Size: 4.7MB - Virtual size: 4.7MB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 62KB - Virtual size: 285KB

.idata Size: 19KB - Virtual size: 19KB

.tls Size: 1024B - Virtual size: 782B

.00cfg Size: 512B - Virtual size: 265B

.rsrc Size: 47.6MB - Virtual size: 47.6MB

.reloc Size: 503KB - Virtual size: 502KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

de:0a:25:31:a6:a7:2b:c5:c3:6d:91:d6:e7:4b:4a:f2
Certificate

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

43:27:d7:98:40:97:4b:5b:b7:63:51:8f:84:7b:c3:05:5f:dc:c9:df:86:d8:50:62:b6:af:74:e5:e5:df:7b:61
Signer

.text
Size: 4.7MB - Virtual size: 4.7MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 62KB - Virtual size: 285KB

.idata
Size: 19KB - Virtual size: 19KB

.tls
Size: 1024B - Virtual size: 782B

.00cfg
Size: 512B - Virtual size: 265B

.rsrc
Size: 47.6MB - Virtual size: 47.6MB

.reloc
Size: 503KB - Virtual size: 502KB