InterWinner8[.]10[.]4037[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
InterWinner8.10.4037.exe
Size 27.2MB
Sample260619-p9f97sf14p
SHA256 a99d03f0f96fb479b42f01a289413811e3c05090e3212f5bc1613d04f6fdfa67
MD5 892695e2a995022c2a9bf67a3d9d9b5a
SHA1 93bac93385da641b90f62d3f0dfdc98e9dd353dc
SHA512 77ee0813e0f1c6307f19a23a309974748f11154d0e60dc5d916fb20904e4b46c7d340a185aac7bd4dc73ce93465ede0c90ec9cf82895b9aba090fcc33276e78f
SSDEEP 786432:FY6L7CDsbL2aOySKqRXx4WFS/xOtPeVSItVqc:FY6vmsBOy9qRBjFS/xOtmVSIWc
TLSH
T1CA57337D65F1027EC3A38073C195B7722EEE6F6A29971407AF80E87699731E2670710B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
InterWinner8.10.4037.exe

File Explorer

InterWinner8.10.4037.exe

.exe 27.2MB

InterWinner8.10.4037.exe

IMPHASH a60dc5559e20666c347f8357ece6b73e
SHA256 a99d03f0f96fb479b42f01a289413811e3c05090e3212f5bc1613d04f6fdfa67
MD5 892695e2a995022c2a9bf67a3d9d9b5a
SHA1 93bac93385da641b90f62d3f0dfdc98e9dd353dc
SHA512 77ee0813e0f1c6307f19a23a309974748f11154d0e60dc5d916fb20904e4b46c7d340a185aac7bd4dc73ce93465ede0c90ec9cf82895b9aba090fcc33276e78f
SSDEEP 786432:FY6L7CDsbL2aOySKqRXx4WFS/xOtPeVSItVqc:FY6vmsBOy9qRBjFS/xOtmVSIWc
TLSH
T1CA57337D65F1027EC3A38073C195B7722EEE6F6A29971407AF80E87699731E2670710B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

79618

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount LocalFree FormatMessageA GetLastError CopyFileW GetModuleFileNameA GetPrivateProfileIntW GetDriveTypeA GetFullPathNameA GetCurrentDirectoryA CreateProcessA WaitForSingleObject SetEnvironmentVariableA CompareStringW CompareStringA GetLocaleInfoW SetConsoleCtrlHandler GetOEMCP GetACP GetUserDefaultLCID EnumSystemLocalesA IsValidCodePage IsValidLocale GetCPInfo InterlockedDecrement SetStdHandle GetStringTypeW GetExitCodeProcess IsBadCodePtr IsBadReadPtr IsBadWritePtr HeapReAlloc VirtualAlloc SetUnhandledExceptionFilter VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter TerminateProcess LCMapStringW LCMapStringA WideCharToMultiByte FatalAppExitA DeleteCriticalSection GetFileType GetStdHandle GetDiskFreeSpaceA WriteFile FlushFileBuffers WinExec GetTempPathA CreateFileA DeviceIoControl GetSystemDirectoryA GetVersionExA GetWindowsDirectoryA CreateFileW CopyFileA CloseHandle Sleep GetLocaleInfoA lstrcpyA GlobalAlloc GlobalLock GlobalFree GlobalUnlock LoadLibraryA GetProcAddress FreeLibrary MultiByteToWideChar SetHandleCount InitializeCriticalSection LeaveCriticalSection EnterCriticalSection TlsGetValue SetLastError TlsFree TlsAlloc GetStringTypeA WritePrivateProfileStringW lstrlenW GetCurrentProcess GetModuleHandleA SetThreadPriority SetPriorityClass GetPriorityClass GetThreadPriority GetCurrentThread QueryPerformanceCounter QueryPerformanceFrequency LocalHandle LocalAlloc GetPrivateProfileStringA lstrcatA GetPrivateProfileIntA CreateSemaphoreA UnlockFile ReadFile SetFilePointer LockFile GetFileSize SetEndOfFile lstrlenA GetComputerNameA CreateEventA GetOverlappedResult RtlUnwind GetFileAttributesW DeleteFileW InterlockedIncrement FindFirstFileA FindNextFileA FindClose FileTimeToSystemTime FileTimeToLocalFileTime SetEnvironmentVariableW GetCurrentDirectoryW SetCurrentDirectoryW CreateDirectoryW ResumeThread CreateThread TlsSetValue ExitThread RemoveDirectoryW GetStartupInfoA GetCommandLineA GetVersion ExitProcess RaiseException HeapFree HeapAlloc GetFileAttributesA GetTimeZoneInformation GetSystemTime GetLocalTime GetCurrentThreadId DeleteFileA

user32

IsDialogMessageW TranslateMessage DispatchMessageW SetActiveWindow GetPropA GetParent CreateDialogParamW SetWindowTextA SetPropA CharUpperA MessageBoxA DialogBoxParamW CallNextHookEx GetClientRect GetSystemMetrics GetWindowRect MoveWindow SetWindowsHookA UnhookWindowsHook CreateMenu CreatePopupMenu PeekMessageW TrackPopupMenu DestroyMenu PostMessageA IsWindow IsWindowVisible SetDlgItemTextW LoadCursorW SetCursor DestroyWindow EndDialog ShowWindow OpenClipboard GetClipboardData CloseClipboard SetWindowTextW wsprintfA EnableWindow UpdateWindow SendMessageW GetDlgItem AppendMenuW

gdi32

SetBkMode SetTextColor SetTextAlign TextOutW GetStockObject CreatePen SelectObject DeleteObject MoveToEx LineTo CreateFontW

advapi32

ControlService RegSetValueExW RegOpenKeyA RegQueryValueExA RegCloseKey OpenSCManagerA OpenServiceA GetUserNameA DeleteService CloseServiceHandle CreateServiceA StartServiceA ChangeServiceConfigA

ole32

CoUninitialize CoCreateInstance CoInitialize

oleaut32

SysAllocString SysFreeString VariantClear VariantInit CreateErrorInfo VariantChangeType SetErrorInfo GetErrorInfo

comctl32

ord17

winspool.drv

EnumPrintersA ClosePrinter SetPrinterA OpenPrinterA