ac8384171024315f161073bcf032e6358c9a1e0678190517e7520ba8be0ae684
- SHA256 ac8384171024315f161073bcf032e6358c9a1e0678190517e7520ba8be0ae684
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
instZIP.65763.x64.pc.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
instZIP.65763.x64.pc.exe
Resource
win11-20260130-en
windows11-21h2-x64
26 signatures
150 seconds
General
- Target ac8384171024315f161073bcf032e6358c9a1e0678190517e7520ba8be0ae684
- Size 8.2MB
- Sample260511-mn9crafv51
- SHA256 ac8384171024315f161073bcf032e6358c9a1e0678190517e7520ba8be0ae684
- MD5 63a3c19f1b60a69e476e66e6fca41366
- SHA1 863ca1e82b5b1f5ad887d8554a16ca0e2e8fa20f
- SHA512 f6c32864ca072e5583a12a7ee5fb769bb126da1077d858ee0f3cc974b3f7373a694e53af62656a2636f1b6e65a0a404841e3e427d2aeab90bd3a156b855ff806
- SSDEEP 196608:z+Z3Qsp4NeNtLSpydLpgY2RzMaOB+HNOeb4/nXX/Aw/5HK:z+Z3Qs+NitMydpgZZMaq+HwfnIyK
- TLSH T1D896334B94BDF91CF5E7C03BD472075B97A841352FEE62BBD09297E88E826D4B20448D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/instZIP.65763.x64.pc.exe
File Explorer
-
ac8384171024315f161073bcf032e6358c9a1e0678190517e7520ba8be0ae684.zip 8.2MB
-
instZIP.65763.x64.pc.exe.exe 68.4MB
instZIP.65763.x64.pc.exe
- IMPHASH e611cb40dae30a74fa3f15a0e816a66a
- SHA256 b6e63f12765b39ecbbb59f849fe85502625abc23169be98b17b83e5cc7bb4589
- MD5 f249e67b62a942c1edb8d9edf039a4a1
- SHA1 2041be48fe8e3fee33863d8fbf8bc77bfb7ad8a8
- SHA512 95575e3ea7a9c9fda9ba848fc7e6a684cc856e981375921021a0ae0270b79df088d6694ff0f8c33774686396b9d0eddbf01fe9238f53f2d5a6a3b4dfed12f99f
- SSDEEP 196608:N5l5dDJY98V2qPqT4K1GCeEFzfqbMx1LN4Z6UfMYrMJrUlLhAZiuwfcZM:N5PY9ratwATBLhRuwfcZM
- TLSH T14BF7944AB7068989E436927854979F50E336E9714BB1D37323B9372C5FEE34C8EE2094
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
91816
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
gdiplus
GdipDisposeImage
GdipCreateHBITMAPFromBitmap
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromStream
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
comdlg32
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
winmm
PlaySoundW
imm32
ImmGetDefaultIMEWnd
kernel32
LoadLibraryA
GetProcAddress
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpW
SetCurrentDirectoryW
GetSystemDirectoryW
DeleteFileW
lstrcpynW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
SetEnvironmentVariableA
CompareStringW
GetProcessHeap
SetEndOfFile
GetStringTypeW
SetFilePointer
WriteConsoleW
ReadFile
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
FlsAlloc
GetCurrentThreadId
SetLastError
FlsFree
FlsSetValue
FlsGetValue
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
GetVersion
HeapSetInformation
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WriteFile
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
RtlUnwindEx
ExitProcess
HeapSize
Sleep
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
FindResourceW
CloseHandle
lstrcpyW
GetLastError
CreateMutexW
lstrcmpiW
GetSystemDefaultLangID
GetEnvironmentVariableW
lstrlenW
GetModuleFileNameW
GetLocalTime
ExpandEnvironmentStringsA
EncodePointer
DecodePointer
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlPcToFileHeader
RaiseException
GetFileType
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapReAlloc
GetStartupInfoW
GetCommandLineW
FindFirstFileW
WideCharToMultiByte
GetACP
SetErrorMode
FindClose
GetCurrentProcess
FreeLibrary
SetCurrentDirectoryA
MultiByteToWideChar
lstrcatW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetTempPathW
CreateFileW
GetVersionExA
GetModuleHandleA
LoadLibraryW
GetSystemDirectoryA
GetModuleHandleW
GetVersionExW
GetLocaleInfoW
VirtualAlloc
HeapFree
user32
SetWindowTextW
TrackPopupMenuEx
EnableMenuItem
CreateIconIndirect
GetIconInfo
GetRawInputDeviceInfoW
GetRawInputDeviceList
LoadIconW
SetFocus
EndDialog
GetDlgItemInt
IsWindowEnabled
SetDlgItemInt
SystemParametersInfoW
GetWindowRect
GetDlgItem
EnableWindow
DefWindowProcW
PostQuitMessage
DestroyMenu
EndPaint
BeginPaint
ReleaseDC
GetDC
SetWindowPos
GetSystemMetrics
GetClassNameW
GetWindowTextW
KillTimer
PostMessageW
TrackPopupMenu
CheckMenuItem
ModifyMenuW
SetMenuDefaultItem
GetCursorPos
SetForegroundWindow
GetForegroundWindow
DestroyWindow
CreateDialogParamW
GetSubMenu
LoadMenuW
RegisterWindowMessageW
RegisterHotKey
UnregisterHotKey
UpdateWindow
GetWindowTextLengthW
SetLayeredWindowAttributes
CreateWindowExW
RegisterClassExW
LoadCursorW
DispatchMessageW
IsWindow
SendMessageA
EnumChildWindows
GetWindowLongA
CallWindowProcW
GetMonitorInfoW
EnumDisplayMonitors
GetWindowLongPtrW
SetWindowLongPtrW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DialogBoxIndirectParamW
GetParent
ScreenToClient
MonitorFromPoint
GetMonitorInfoA
GetClientRect
TranslateMessage
GetMessageW
DestroyIcon
CopyIcon
DialogBoxParamW
MessageBoxW
LoadImageW
SetTimer
MessageBeep
keybd_event
SendMessageW
GetKeyState
FindWindowW
GetDlgItemTextW
SetDlgItemTextW
wsprintfW
SendDlgItemMessageW
ShowWindow
gdi32
DeleteDC
CreateCompatibleDC
GetStockObject
GetObjectA
CreateFontIndirectA
GetDIBColorTable
DeleteObject
SetDIBits
SelectObject
SetBkColor
TextOutW
SetTextColor
GetDeviceCaps
GetDIBits
GetObjectW
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
shell32
Shell_NotifyIconW
DragFinish
DragQueryFileW
DragAcceptFiles
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ole32
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoCreateInstance
shlwapi
StrCmpNIW
Name
.text
Size
170KB
Virtual Size
169KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
68.1MB
Virtual Size
68.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=144, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=10, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=57, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=1, id=136, version=30729,
count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=344, id=1, productName=Unmarked objects,
count=15, id=175, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,