slutware-latest[.]setup[.]exe

General

Target
slutware-latest.setup.exe
Size 224.9MB
Sample260527-e3bq2ae17n
SHA256 20d54b8ede434d118d2dc5e6b09b86afddcebcfc626f00ec1dd9e075000367e7
MD5 bf7834bcc30ed159d5fc19ede9987266
SHA1 f371b1e5db9c7a817928588efe21ed157a574fb2
SHA512 d2573857b67221ce19c904df6474363647e7d54d8a113c928624318916f23adbfa304be13e7d04b4fa3ef9287cc6c1edab5b551e18a108a5b172804c507bf35b
SSDEEP 6291456:Bd73QAqdg40mflPkGTznFXEk6dz79nyja5IFaIOEX9m:DQndg4JsGTzFXa9nSI4
TLSH
T1AAB8332556EE407CC50328B4F5A15A24E2F97896F2B619E084D7D7B034AFEECCD90F1A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
slutware-latest.setup.exe

File Explorer

slutware-latest.setup.exe

.exe 224.9MB

slutware-latest.setup.exe

IMPHASH e6f4169f2a5c3a8f93171d9f593bd22a
SHA256 20d54b8ede434d118d2dc5e6b09b86afddcebcfc626f00ec1dd9e075000367e7
MD5 bf7834bcc30ed159d5fc19ede9987266
SHA1 f371b1e5db9c7a817928588efe21ed157a574fb2
SHA512 d2573857b67221ce19c904df6474363647e7d54d8a113c928624318916f23adbfa304be13e7d04b4fa3ef9287cc6c1edab5b551e18a108a5b172804c507bf35b
SSDEEP 6291456:Bd73QAqdg40mflPkGTznFXEk6dz79nyja5IFaIOEX9m:DQndg4JsGTzFXa9nSI4
TLSH
T1AAB8332556EE407CC50328B4F5A15A24E2F97896F2B619E084D7D7B034AFEECCD90F1A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

43868

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\Setup.pdb

kernel32

LoadResource FindResourceW lstrlenW GetProcAddress GetModuleHandleW DeleteCriticalSection GetTempPathW GetLastError GetTempFileNameW MoveFileW WaitForSingleObject GetExitCodeProcess CloseHandle DeleteFileW GetModuleFileNameW GetCurrentProcess LoadLibraryW FreeLibrary InitializeCriticalSectionEx GetFileAttributesW CreateFileW SetFilePointer ReadFile VerSetConditionMask GetCurrentDirectoryW MultiByteToWideChar LocalFileTimeToFileTime WideCharToMultiByte CreateDirectoryW WriteFile SetFileTime FreeResource SizeofResource LockResource CreateProcessW GetSystemDirectoryW SetDefaultDllDirectories GetCurrentThreadId DecodePointer RaiseException LeaveCriticalSection EnterCriticalSection lstrcmpiW LoadLibraryExW GetConsoleMode GetConsoleCP SystemTimeToFileTime VerifyVersionInfoW GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA IsDebuggerPresent OutputDebugStringW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetStdHandle HeapFree HeapAlloc GetFileType CompareStringW LCMapStringW HeapSize HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle GetStringTypeW GetFileSizeEx SetFilePointerEx FlushFileBuffers WriteConsoleW

shlwapi

PathIsUNCW

comctl32

InitCommonControlsEx

Sharing