dialog
initDialog
show
Static task
static1
Behavioral task
behavioral1
Sample
5438fc72599780bfe9b69d20345706d403088e71f4e84b794636762cff8fbc8bN.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
5438fc72599780bfe9b69d20345706d403088e71f4e84b794636762cff8fbc8bN.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
VirtualFDD.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
VirtualFDD.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
uninst.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
uninst.exe
Resource
win10v2004-20241007-en
Target
5438fc72599780bfe9b69d20345706d403088e71f4e84b794636762cff8fbc8bN
Size
622KB
MD5
d667193e604a0f89841ffe8c6f33dd60
SHA1
5d3cfaefda3b57fe6692d9a0d880b4bb9df86bd9
SHA256
5438fc72599780bfe9b69d20345706d403088e71f4e84b794636762cff8fbc8b
SHA512
157b7ac80553a14f38fc8b1feed47b189f5ac5e0d6a0bed40f762c574bb79a10c562a29bfb039c7f30bc70e14206fb26d92dad769dfaa989f76b4907369e0953
SSDEEP
12288:TEVEAogrdi0BMP9BK3nNSIOqRltCPadQqrB7gD92rJQhYHXejWC+Qe3BjvrEH7h:sdL1t3cIOqgPaPaIWhYHXej7orEH7h
Checks for missing Authenticode signature.
| resource |
|---|
| 5438fc72599780bfe9b69d20345706d403088e71f4e84b794636762cff8fbc8bN |
| unpack001/$PLUGINSDIR/InstallOptions.dll |
| unpack001/VirtualFDD.exe |
| unpack001/uninst.exe |
| resource | yara_rule |
|---|---|
| sample | nsis_installer_1 |
| static1/unpack001/uninst.exe | nsis_installer_1 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CloseHandle
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
lstrcmpiA
ExitProcess
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
MulDiv
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
CopyFileA
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EndDialog
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
TrackPopupMenu
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetForegroundWindow
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
MultiByteToWideChar
GlobalAlloc
GetDlgCtrlID
GetClientRect
SetWindowRgn
MapWindowPoints
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadIconA
SetTextColor
GetObjectA
SelectObject
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
dialog
initDialog
show
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LockFile
UnlockFile
DuplicateHandle
GetVolumeInformationA
GetShortPathNameA
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
VirtualQuery
ExitThread
CreateThread
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
HeapSize
HeapDestroy
HeapCreate
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
GetThreadLocale
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
Sleep
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetProfileIntA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
GetFileAttributesA
SuspendThread
ResumeThread
SetThreadPriority
GetModuleFileNameW
CopyFileA
FormatMessageA
LocalFree
MulDiv
GetPrivateProfileStringA
GetPrivateProfileIntA
FreeResource
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetCurrentProcessId
GlobalGetAtomNameA
GlobalAddAtomA
LoadLibraryW
FreeLibrary
DeviceIoControl
GetLogicalDrives
GetDriveTypeW
DosDateTimeToFileTime
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
FileTimeToDosDateTime
RaiseException
InterlockedIncrement
InterlockedDecrement
GetStdHandle
ResetEvent
SetEvent
CreateEventA
VirtualFree
VirtualAlloc
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GlobalSize
WritePrivateProfileStringA
GetNumberFormatA
GetVersionExA
GetSystemDirectoryA
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateMutexA
GetLocalTime
SystemTimeToFileTime
GetCurrentProcess
GetStringTypeExA
lstrlenA
CompareStringW
CompareStringA
lstrlenW
GetVersion
MultiByteToWideChar
InterlockedExchange
lstrcpyA
lstrcmpiA
GetTempPathA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
MoveFileA
RemoveDirectoryA
FindNextFileA
GetFileSize
GetFileInformationByHandle
SetFileTime
GetCurrentDirectoryA
WaitForSingleObject
lstrcmpA
GetTickCount
CreateDirectoryA
GetLastError
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
FlushFileBuffers
SetEndOfFile
SetFileAttributesA
DeleteFileA
GetModuleFileNameA
FindFirstFileA
FindClose
CreateFileA
ReadFile
WriteFile
CloseHandle
IsValidCodePage
SetFilePointer
FillRect
IsZoomed
WindowFromPoint
KillTimer
SetRect
IsRectEmpty
IsClipboardFormatAvailable
GetMenuItemInfoA
GetMessageA
ValidateRect
GetMenuStringA
InsertMenuA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetForegroundWindow
GetClassInfoExA
RegisterClassA
DeferWindowPos
SetWindowPlacement
TabbedTextOutA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
LoadCursorA
DestroyCursor
BeginDeferWindowPos
EndDeferWindowPos
SetCursorPos
SetScrollPos
GetScrollPos
IsChild
SetCapture
ReleaseDC
GetDC
InflateRect
PtInRect
RegisterWindowMessageA
UnpackDDElParam
ReuseDDElParam
DestroyMenu
GetClassNameA
GetSysColor
WinHelpA
GetClientRect
SendMessageA
EnableWindow
PostQuitMessage
PeekMessageA
MessageBoxA
SetFocus
IsWindowEnabled
EqualRect
GetDlgItem
GetKeyState
GetDlgCtrlID
SetCursor
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
IsWindowVisible
InvalidateRect
InsertMenuItemA
CreatePopupMenu
GetClassInfoA
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
GetLastActivePopup
SetMenu
GetDesktopWindow
GetWindow
ShowWindow
AdjustWindowRectEx
RedrawWindow
SetWindowPos
GetWindowLongA
SetWindowLongA
IsWindow
TranslateAcceleratorA
TranslateMDISysAccel
DrawTextA
DrawTextExA
PostThreadMessageA
GetDCEx
UnregisterClassA
FindWindowA
SetParent
GetActiveWindow
DrawMenuBar
DeleteMenu
GetSysColorBrush
ShowOwnedPopups
UnionRect
EndPaint
BeginPaint
GetWindowDC
DefWindowProcA
GrayStringA
LoadIconA
GetSubMenu
LoadMenuA
PostMessageA
GetWindowRect
LockWindowUpdate
SetTimer
DispatchMessageA
TranslateMessage
GetFocus
ClientToScreen
ScreenToClient
GetCursorPos
IsIconic
BringWindowToTop
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
RegisterClipboardFormatA
CharUpperA
ExitWindowsEx
UpdateWindow
DestroyIcon
DefFrameProcA
GetMenu
DefMDIChildProcA
GetMenuItemID
GetMenuItemCount
GetParent
CreateWindowExA
DestroyWindow
CreateSolidBrush
GetStockObject
SetRectRgn
CombineRgn
CreatePatternBrush
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
GetPixel
CreateRectRgn
SelectClipRgn
CreateCompatibleBitmap
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
StretchDIBits
DeleteDC
CreateFontA
GetCharWidthA
DeleteObject
GetTextMetricsA
GetBkColor
GetTextExtentPoint32A
ExtTextOutA
BitBlt
CreateFontIndirectA
CreateRectRgnIndirect
CopyMetaFileA
GetDeviceCaps
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
SelectObject
PatBlt
CreateCompatibleDC
GetFileTitleA
DocumentPropertiesA
OpenPrinterA
ClosePrinter
CryptDeriveKey
RegQueryValueA
RegEnumKeyA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegOpenKeyA
RegSetValueA
CryptVerifySignatureA
CryptSignHashA
CryptImportKey
CryptDecrypt
CryptDestroyKey
RegCloseKey
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextA
RegDeleteKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
ExtractIconA
SHGetFileInfoA
ShellExecuteExA
SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA
ShellExecuteA
DragFinish
DragQueryFileA
SHChangeNotify
InitCommonControlsEx
PathMatchSpecA
PathRemoveExtensionA
PathAppendA
PathRemoveFileSpecA
PathFileExistsA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
ord8
CreateStreamOnHGlobal
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
DoDragDrop
RevokeDragDrop
CoLockObjectExternal
OleGetClipboard
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoRegisterMessageFilter
RegisterDragDrop
CoRevokeClassObject
SysFreeString
VarBstrFromDate
SystemTimeToVariantTime
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CloseHandle
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
lstrcmpiA
ExitProcess
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
MulDiv
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
CopyFileA
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EndDialog
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
TrackPopupMenu
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetForegroundWindow
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ