i2pinstall_2[.]13[.]0_windows (1)[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
i2pinstall_2.13.0_windows (1).exe
Size 26.4MB
Sample260806-qvb8dascph
SHA256 d83528db40421800d0c2f3e787da1e614540d282cf385deb16b45cce1f943c6c
MD5 48e622cccfba4cb840bbbe65d437c57d
SHA1 8d22e9a101e809a3127521b5fdce20ae4085cdfa
SHA512 c2582e311f0e4a536eef4d331a77588ca04c7bfb481d500c99b1c7df0bfdbea4d7c63de52831cdd298e98c4ba51413c4d03e26d739f85bab1687f23da2c4686a
SSDEEP 786432:eXP9AK73de7WLblCL1Sun1mi55MpcPKej8Z9DIEKIikUK:aFAK73uWW1WA5MA5gPIPkF
TLSH
T18057331D71CFC16ACE547E3888C222B4E07D8E2F46E0A92716CF7A5B6E59A04EC1477D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
i2pinstall_2.13.0_windows (1).exe

File Explorer

i2pinstall_2.13.0_windows (1).exe

.exe 26.4MB

i2pinstall_2.13.0_windows (1).exe

IMPHASH a63d48c3ce8aa43e0eb4aa1523dfe1e0
SHA256 d83528db40421800d0c2f3e787da1e614540d282cf385deb16b45cce1f943c6c
MD5 48e622cccfba4cb840bbbe65d437c57d
SHA1 8d22e9a101e809a3127521b5fdce20ae4085cdfa
SHA512 c2582e311f0e4a536eef4d331a77588ca04c7bfb481d500c99b1c7df0bfdbea4d7c63de52831cdd298e98c4ba51413c4d03e26d739f85bab1687f23da2c4686a
SSDEEP 786432:eXP9AK73de7WLblCL1Sun1mi55MpcPKej8Z9DIEKIikUK:aFAK73uWW1WA5MA5gPIPkF
TLSH
T18057331D71CFC16ACE547E3888C222B4E07D8E2F46E0A92716CF7A5B6E59A04EC1477D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

78420

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

KillTimer SendMessageA GetDlgItem SetTimer DialogBoxParamW DialogBoxParamA SetWindowLongA GetWindowLongA SetWindowTextW SetWindowTextA LoadStringW LoadStringA CharUpperW CharUpperA DestroyWindow EndDialog PostMessageA ShowWindow MessageBoxW

oleaut32

VariantClear SysAllocString

shell32

ShellExecuteExA

comctl32

ord17

kernel32

GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA InterlockedIncrement InterlockedDecrement GetProcAddress GetOEMCP GetACP IsBadCodePtr IsBadReadPtr GetFileType SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter HeapSize GetCurrentProcess TerminateProcess IsBadWritePtr HeapReAlloc HeapCreate HeapDestroy GetEnvironmentVariableA SetUnhandledExceptionFilter GetCPInfo WaitForSingleObject CloseHandle CreateProcessA SetCurrentDirectoryA GetCommandLineW GetVersionExA lstrlenA LeaveCriticalSection EnterCriticalSection DeleteCriticalSection MultiByteToWideChar WideCharToMultiByte GetLastError LoadLibraryA AreFileApisANSI GetModuleFileNameA GetModuleFileNameW LocalFree FormatMessageA FormatMessageW GetWindowsDirectoryA SetFileTime CreateFileW SetLastError SetFileAttributesA RemoveDirectoryA SetFileAttributesW RemoveDirectoryW CreateDirectoryA CreateDirectoryW DeleteFileA DeleteFileW GetFullPathNameA GetFullPathNameW GetCurrentDirectoryA GetTempPathA GetTempFileNameA FindClose FindFirstFileA FindFirstFileW FindNextFileA CreateFileA GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile GetStdHandle WaitForMultipleObjects Sleep VirtualAlloc VirtualFree CreateEventA SetEvent ResetEvent InitializeCriticalSection RtlUnwind RaiseException HeapAlloc HeapFree CreateThread GetCurrentThreadId TlsSetValue TlsGetValue ExitThread GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess TlsAlloc