utau0419cInstaller[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
utau0419cInstaller.exe
Size 6.5MB
Sample260629-2vrhvahs2w
SHA256 144b853bd7066a736ef8347118cf82c18b7a5be313f7edf66571e5d9816828ad
MD5 b3fbd653a84017e567d7cfc7c9d14456
SHA1 a39e627f0d243b21b7f14764f99f8898b2c13f5b
SHA512 76ac4e098dbf36c6dbf217621bfa66e359a21af23ddaaa9c9bde1addcfc7268e2a350f9d27ea63d0dd961eac0d64d589cc88c1ce5ab3503ced465849ae593bb2
SSDEEP 196608:oLq1m36iIMa4PU+9zz+9HIedVRMrzwK5TPRga:owC6i7akFiqMVarz5T
TLSH
T14A66338BD5C16AABE294E73C80E62BD771F8B4D428487EE667949149894E3D0F33730D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
utau0419cInstaller.exe

File Explorer

utau0419cInstaller.exe

.exe 6.5MB

utau0419cInstaller.exe

IMPHASH d287b46f6436ae965f0f1af9da8d89c9
SHA256 144b853bd7066a736ef8347118cf82c18b7a5be313f7edf66571e5d9816828ad
MD5 b3fbd653a84017e567d7cfc7c9d14456
SHA1 a39e627f0d243b21b7f14764f99f8898b2c13f5b
SHA512 76ac4e098dbf36c6dbf217621bfa66e359a21af23ddaaa9c9bde1addcfc7268e2a350f9d27ea63d0dd961eac0d64d589cc88c1ce5ab3503ced465849ae593bb2
SSDEEP 196608:oLq1m36iIMa4PU+9zz+9HIedVRMrzwK5TPRga:owC6i7akFiqMVarz5T
TLSH
T14A66338BD5C16AABE294E73C80E62BD771F8B4D428487EE667949149894E3D0F33730D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10301

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey AllocateAndInitializeSid EqualSid GetTokenInformation OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA FreeSid RegDeleteValueA RegOpenKeyExA RegSetValueExA RegQueryValueExA RegCreateKeyExA RegQueryInfoKeyA

kernel32

LocalAlloc GetLastError GetCurrentProcess LoadLibraryA CloseHandle LocalFree GetFileAttributesA GetPrivateProfileStringA GetPrivateProfileIntA lstrlenA lstrcmpiA lstrcatA GetShortPathNameA GetSystemDirectoryA RemoveDirectoryA lstrcpyA FindNextFileA DeleteFileA SetFileAttributesA lstrcmpA FindFirstFileA _lclose _llseek _lopen WritePrivateProfileStringA GetWindowsDirectoryA GetModuleFileNameA FindClose GlobalFree GlobalUnlock GlobalLock GlobalAlloc IsDBCSLeadByte ExitProcess GetProcAddress GetStartupInfoA GetCommandLineA LoadResource FindResourceA CreateMutexA SetEvent CreateEventA SetCurrentDirectoryA CreateThread ResetEvent TerminateThread FreeLibrary FormatMessageA GetExitCodeProcess WaitForSingleObject CreateProcessA GetTempPathA FreeResource LockResource SizeofResource CreateFileA ReadFile WriteFile SetFilePointer SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime GetTempFileNameA GetSystemInfo GetDriveTypeA lstrcpynA GetVolumeInformationA GetCurrentDirectoryA LoadLibraryExA GetModuleHandleA CreateDirectoryA ExpandEnvironmentStringsA GetVersionExA GetDiskFreeSpaceA MulDiv

gdi32

GetDeviceCaps

user32

wsprintfA ExitWindowsEx CharNextA CharUpperA EndDialog GetDesktopWindow CharPrevA GetWindowLongA CallWindowProcA GetDlgItem SetForegroundWindow SetWindowTextA SendDlgItemMessageA SetWindowLongA EnableWindow SendMessageA LoadStringA MsgWaitForMultipleObjects PeekMessageA MessageBoxA SetWindowPos ReleaseDC GetDC GetWindowRect ShowWindow DialogBoxIndirectParamA SetDlgItemTextA MessageBeep GetDlgItemTextA DispatchMessageA

comctl32

ord17

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA