install reqs[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
install reqs.exe
Size 115KB
Sample260808-jvvldssgnd
SHA256 bb159cbfa636d7ee930ef96ef6df70998bc5b83ba3750a4147b9026ca7c1b0a4
MD5 36c2da79cd3cf3ee90e372fbf408a0e2
SHA1 61c8dd3a6cd829fc8455d119878b1a75a504b653
SHA512 807859c3cb28dc55ed03ee25c8d59b72a100f2500b1beae4753d3336e9e8d4250f4c837b83c924e06f09240aae004dac66c65fa3596e8cfdf55adfaf28e92974
SSDEEP 1536:SLdFY1G+NyhpNTDlXFNHLqz+3V6296FKACBSFOzmcE2amRbDdIQk0V:Q4cjPDlHLqU1gKAmSFOzJEe5
TLSH
T11AC3A694BEB54DD6E921633D86EBD117773CFAD042134B07AA347A326B13E927CD8202
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
install reqs.exe

File Explorer

install reqs.exe

.exe 115KB

install reqs.exe

IMPHASH 77da1ce12590b86a6c70f6e4205e7e44
SHA256 bb159cbfa636d7ee930ef96ef6df70998bc5b83ba3750a4147b9026ca7c1b0a4
MD5 36c2da79cd3cf3ee90e372fbf408a0e2
SHA1 61c8dd3a6cd829fc8455d119878b1a75a504b653
SHA512 807859c3cb28dc55ed03ee25c8d59b72a100f2500b1beae4753d3336e9e8d4250f4c837b83c924e06f09240aae004dac66c65fa3596e8cfdf55adfaf28e92974
SSDEEP 1536:SLdFY1G+NyhpNTDlXFNHLqz+3V6296FKACBSFOzmcE2amRbDdIQk0V:Q4cjPDlHLqU1gKAmSFOzJEe5
TLSH
T11AC3A694BEB54DD6E921633D86EBD117773CFAD042134B07AA347A326B13E927CD8202
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4123

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

GetTokenInformation OpenProcessToken

comctl32

InitCommonControlsEx

gdi32

CreateFontW CreateSolidBrush DeleteObject SetBkColor SetBkMode SetTextColor

kernel32

CloseHandle CreateThread DeleteCriticalSection EnterCriticalSection ExitProcess FreeLibrary GetCurrentProcess GetLastError GetModuleFileNameW GetModuleHandleA GetProcAddress GetStartupInfoA GetTempPathW InitializeCriticalSection IsDBCSLeadByte LeaveCriticalSection LoadLibraryA SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery WaitForSingleObject

api-ms-win-crt-convert-l1-1-0

mbrtowc

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale localeconv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memcpy

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p__acmdln _cexit _configure_narrow_argv _crt_atexit _errno _exit _initialize_narrow_environment _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit signal strerror

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf fflush fputwc setvbuf

api-ms-win-crt-string-l1-1-0

strlen strncmp strnlen wcslen wcsnlen

shell32

ShellExecuteExW ShellExecuteW

urlmon

URLDownloadToFileW

user32

BeginPaint CreateWindowExW DefWindowProcA DestroyWindow DispatchMessageA EndPaint FillRect GetClientRect GetDlgCtrlID GetMessageA GetSystemMetrics LoadCursorA PostMessageA PostQuitMessage RegisterClassExW SendMessageA SetLayeredWindowAttributes SetWindowTextW ShowWindow TranslateMessage UpdateWindow

Name

.text

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

688B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

1012B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

1024B

Virtual Size

883B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

1024B

Virtual Size

1008B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

512B

Virtual Size

146B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/91

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/107

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/123

Size

512B

Virtual Size

74B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

install reqs.exe

advapi32

comctl32

gdi32

kernel32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

shell32

urlmon

user32

generic