Installer-1.0.6.zip
- SHA256 834f2cc69e6248f3fa0544a3ae6548453998d74fc25188ffaaf702417b5957ea
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Installer-1.0.6.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Installer-1.0.6.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Installer-1.0.6.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
8 signatures
150 seconds
General
- Target Installer-1.0.6.zip
- Size 11.9MB
- Sample260804-tjsb1assby
- SHA256 834f2cc69e6248f3fa0544a3ae6548453998d74fc25188ffaaf702417b5957ea
- MD5 bf3c2fe3f9cdacc82e94528abbcb338d
- SHA1 61dd46c7cd01c541ce4dafdf0493d5fcfeedbc9e
- SHA512 1aabcb8434c5acef4c30ef2d5080d9fbdd487711e6b962d1147fa08649050cd81c5530cb6000c1208f194f912f16c1b99a1f40b30fba6b06d467b0f664b37959
- SSDEEP 196608:QWnHIXxdEKz0p1QAQdgL9l3FIxpiMXSwupIivuW7xwPe0ZmVKO08VMZjxHbs9djT:THIArMgv+2MCLuivvxSe/0+MZto9djpB
- TLSH T165C6333290BAA8367FADA2B77220F150C457D35E791BC3EE350E6CA1446B9DD0F06A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Installer-1.0.6.exe
File Explorer
-
Installer-1.0.6.zip.zip 11.9MB
-
Installer-1.0.6.exe.exe 12.0MB
Installer-1.0.6.exe
- IMPHASH 9da7080b9b697496fd4f41997e8bd436
- SHA256 37bf42ea69b77a3d13426f3c271bd51e0f32d58a0ad6d05b3fe90f66605837bf
- MD5 82834a737ed33e0357711784d973255e
- SHA1 f7c90d63e77ea58bad7fbebe88a451d9f6c03031
- SHA512 19743f246415d57c578d15bb5f22548bb2f164f3be57e42bb7c0f8de0c0871e947554bab7384c6b3e52cf834a1db0f9143db190c58c232069e67db74fe632a6f
- SSDEEP 393216:+b27r5L0PrKAdEVoALL3sAW0YmmccyTxhAN+x:+bc5L0jbdEVoALQAW9F6
- TLSH T112C6332351FA6836FAB89372B171D2818966B167372BC3FF2649C86508139DC1F36B17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
4864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
wextract.pdb
advapi32
GetTokenInformation
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyA
FreeSid
OpenProcessToken
RegSetValueExA
RegCreateKeyExA
LookupPrivilegeValueA
AllocateAndInitializeSid
RegQueryValueExA
EqualSid
RegCloseKey
AdjustTokenPrivileges
EventUnregister
EventRegister
EventWriteTransfer
kernel32
_lopen
_llseek
CompareStringA
GetLastError
GetFileAttributesA
GetSystemDirectoryA
LoadLibraryA
DeleteFileA
GlobalAlloc
GlobalFree
CloseHandle
WritePrivateProfileStringA
IsDBCSLeadByte
GetWindowsDirectoryA
SetFileAttributesA
GetProcAddress
GlobalLock
LocalFree
RemoveDirectoryA
FreeLibrary
_lclose
CreateDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GlobalUnlock
ReadFile
SizeofResource
WriteFile
GetModuleHandleExW
GetDriveTypeA
GetShortPathNameA
lstrcmpA
SetFilePointer
FindResourceA
CreateMutexA
GetVolumeInformationA
WaitForSingleObject
GetCurrentDirectoryA
FreeResource
ExpandEnvironmentStringsA
SetCurrentDirectoryA
GetTempPathA
LocalFileTimeToFileTime
CreateFileA
SetEvent
TerminateThread
GetVersionExA
LockResource
GetSystemInfo
CreateThread
ResetEvent
LoadResource
ExitProcess
GetModuleHandleW
CreateProcessA
FormatMessageA
GetTempFileNameA
DosDateTimeToFileTime
CreateEventA
LoadLibraryExW
GetExitCodeProcess
MulDiv
LocalAlloc
SetFileTime
GetDiskFreeSpaceA
EnumResourceLanguagesA
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStartupInfoW
Sleep
FindClose
FindNextFileA
GetCurrentProcess
FindFirstFileA
GetVersion
GetModuleFileNameA
LoadLibraryExA
gdi32
GetDeviceCaps
user32
MsgWaitForMultipleObjects
SetWindowPos
GetDC
GetWindowRect
DispatchMessageA
ShowWindow
DialogBoxIndirectParamA
GetDesktopWindow
CharUpperA
SetDlgItemTextA
ExitWindowsEx
MessageBeep
EndDialog
CharPrevA
LoadStringA
CharNextA
EnableWindow
ReleaseDC
SetForegroundWindow
SetWindowLongPtrA
GetWindowLongPtrA
PeekMessageA
GetDlgItem
SendMessageA
SendDlgItemMessageA
MessageBoxA
SetWindowTextA
CallWindowProcA
GetSystemMetrics
GetDlgItemTextA
msvcrt
_fmode
_commode
?terminate@@YAXXZ
_acmdln
memset
__C_specific_handler
_initterm
__setusermatherr
_ismbblead
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
memcpy_s
_vsnprintf
memcpy
comctl32
ord17
cabinet
ord20
ord23
ord22
ord21
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
Name
.text
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
fothk
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
11.9MB
Virtual Size
11.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
172B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=261, version=33145,
count=1, productName=Unmarked objects (old),
count=4, id=259, version=33145,
count=20, id=260, version=33145,
count=17, id=257, version=33145,
count=167, id=1, productName=Unmarked objects,
count=10, id=264, version=33145,
count=1, id=255, version=33145,
count=1, id=258, version=33145,