Install_02026[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Install_02026.exe
Size

67.3MB
MD5

853ed376cab4cfde8f97b08eac1aeee0
SHA1

cc0b84ec6ec98d4d42eac73085fed35e878a3ac9
SHA256

5461287349ce031c1a71229157b48da857cfe9f72393053b037ca8f8fb35457f
SHA512

dd8c536f06800e4282c32b94f89d5c674a6aa368978d355fa1d3f2265946637f6f24c106794f5816b96d231caaf342a435efcf06e35e335418ccc49a6dd3e78e
SSDEEP

196608:aQFgLRKHqT3OgmAC6WtaqyF6tkcEERPUwxHB1cJ6TywN36X8psOaJDzu:aQFgvT3OoCcgtekPbxU2ywqJ51zu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Install_02026.exe

Files

Install_02026.exe
.exe windows:6 windows x86 arch:x86

5988e6058399342b7bab73e1fe4adf61

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
RaiseException
GetCPInfo
SetUnhandledExceptionFilter
GetTempPathW
ExitProcess
GetTempPathA
FreeLibrary
Sleep
SetFilePointerEx
GetStringTypeW
ReadFile
HeapAlloc
HeapReAlloc
CreateThread
CreateEventA
SetLastError
RtlUnwind
GetModuleFileNameA
ReleaseSRWLockExclusive
GetCommandLineW
CreateDirectoryW
InitializeCriticalSectionEx
CreateFileA
GetFileSize
VirtualAlloc
GetProcAddress
TlsGetValue
GetStartupInfoW
VirtualFree
InitializeCriticalSectionAndSpinCount
CreateSemaphoreA
GetCurrentDirectoryW
FindNextFileW
AcquireSRWLockExclusive
LeaveCriticalSection
GetFileType
WaitForSingleObject
TlsSetValue
FindFirstFileExA
GetConsoleCP
InitializeSListHead
FindNextFileA
FormatMessageA
GetStdHandle
SetCurrentDirectoryA
GetVersionExA
MoveFileExW
DeleteFileW
FindFirstFileW
AreFileApisANSI
GetCurrentProcessId
CreateDirectoryA
FindFirstFileA
InitializeCriticalSection
IsProcessorFeaturePresent
GetConsoleMode
SetFilePointer
RemoveDirectoryA
FreeLibraryAndExitThread
GetLastError
CreateProcessA
MultiByteToWideChar
GetModuleHandleW
GetFileAttributesW
RemoveDirectoryW
TlsFree
HeapSize
GetOEMCP
HeapFree
IsValidCodePage
ReleaseSemaphore
GetCommandLineA
GetFileInformationByHandle
GetCurrentProcess
LocalFree
TerminateProcess
WriteConsoleW
CreateFileW
WideCharToMultiByte
GetModuleHandleExW
FormatMessageW
EnterCriticalSection
SetStdHandle
CloseHandle
GlobalMemoryStatus
GetCurrentThreadId
FindClose
GetTickCount64
DeleteFileA
GetTickCount
SetFileAttributesA
SetEvent
UnhandledExceptionFilter
SetFileAttributesW
SetCurrentDirectoryW
TlsAlloc
GetEnvironmentStringsW
LCMapStringW
GetModuleHandleA
EncodePointer
LoadLibraryExW
IsBadReadPtr
ExitThread
GetProcessAffinityMask
LoadLibraryA
QueryPerformanceCounter
GetModuleFileNameW
SetFileTime
GetSystemInfo
GetProcessHeap
GetTempFileNameW
TryAcquireSRWLockExclusive
IsDebuggerPresent
ResetEvent
GetSystemDirectoryW
WriteFile
GetVersion
QueryPerformanceFrequency
GetCurrentDirectoryA
GetACP
WakeAllConditionVariable
FlushFileBuffers
GetSystemTimeAsFileTime
DeleteCriticalSection
LoadLibraryW
FreeEnvironmentStringsW
DecodePointer
SetEndOfFile

user32

ShowWindow
LoadStringA
SetWindowTextA
LoadStringW
PostMessageA
SetWindowTextW
DialogBoxParamW
LoadIconA
CharUpperW
EndDialog
KillTimer
CharUpperA
MessageBoxA
SendMessageA
SetTimer
GetDlgItem
SetWindowLongA
GetWindowLongA
DialogBoxParamA
MessageBoxW
DestroyWindow

shell32

ShellExecuteExA

oleaut32

VariantClear
SysAllocStringLen
SysStringLen

advapi32

CloseServiceHandle

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 570KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5988e6058399342b7bab73e1fe4adf61

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

oleaut32

advapi32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 71KB - Virtual size: 70KB

.data Size: 570KB - Virtual size: 586KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 22KB - Virtual size: 22KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 71KB - Virtual size: 70KB

.data
Size: 570KB - Virtual size: 586KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 22KB - Virtual size: 22KB