Installer (freecheat).zip
- SHA256 2ee2fb2b1b18df1b23cde01a3033f72d83a19c0ae001fffb620e4df3c7635176
Password
freecheat
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Installer.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
20 signatures
150 seconds
General
- Target Installer (freecheat).zip
- Size 1.2MB
- Sample241007-gbwm8ssfle
- SHA256 2ee2fb2b1b18df1b23cde01a3033f72d83a19c0ae001fffb620e4df3c7635176
- MD5 7eff93a264d473ccd058708980f2cbd8
- SHA1 b1f18eee6ff8d90e77ca82b1125a983f4536d87b
- SHA512 4ad23d47e2107ce59dc1b29d565a5be42ad451f3bebb10715e25fcf50c22200dd11418e47c73b2c9f2d728a7d578c952954268abf7d45f18b92f1b981a19ae08
- SSDEEP 24576:faYa1clbAfnVcEW4QBvd13cTgm9IVuHHrGdSuX6OwW7hNqO7TNFSVZ/UaL:fa4bM24QpsTgmmgLjuXFl3z0Z/RL
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Installer.exe
File Explorer
-
Installer (freecheat).zip.zip 1.2MB
-
Installer.exe.exe 1.7MB
Installer.exe
- IMPHASH 0f602b167ea2edb2862b80167a856ba6
- SHA256 b6fc4396c055aeed4c4065e7ade2b90a0fab6721d4854951888dd64777549fd2
- MD5 15cde13181a78c9ffd71504cdfcf0505
- SHA1 e44462ae824d859f1a8652c58fb801b61af88345
- SHA512 d611344eae2eae6852878948d11bf49667f3c7b528c7c7ed52ab775c4b3176c8572eac0c17edf22cb5259c613555b867dc4bb2482c298bdc672343f2a5b8d709
- SSDEEP 49152:3bo95a6iGYUTsq9oeXBUPC23lyTTolbNeOt:AXoGBmGoE8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
freecheat
Minor OS version
0
Major OS version
4
Entry point
5280
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
CloseHandle
CreateFileW
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
FormatMessageA
GetCurrentProcess
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetThreadId
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MultiByteToWideChar
Process32First
Process32Next
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_onexit
_strlwr
abort
calloc
exit
fprintf
fputc
fputs
free
fwrite
getenv
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
realloc
signal
strchr
strcmp
strcpy_s
strerror
strlen
strncmp
strstr
strtoul
vfprintf
wcslen
_read
Name
.text
Size
272KB
Virtual Size
271KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
560B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ