Installer-1[.]0[.]7[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Installer-1.0.7.exe
Size 9.8MB
Sample260809-n9dnmszzft
SHA256 48f359326787a848b89d838a318d797c51fd7feeeee602fff5f46b9d3f7b53ce
MD5 32e6c794181e84ec3ddb154ed5e65391
SHA1 9a6f359a8ba80338cc83200e8b6b0b06a9d4e290
SHA512 582171a6fa99246b4919f30c73e385aa26f55407dfab040188970aef9d7fb1ac12f1c3fd635efb8a5aebe484a0bc7c85be65a0ac2344ce8a95d4e1f64886425d
SSDEEP 196608:/CIlL/mwLN9H3eeYbuN3VdC61kyGxyzriAZOLqJt6dl:awL/mINZePbtyviOt6d
TLSH
T182A6330377A623F5D076C93EEC92120D277278725F64EEEB1768EAB10E661C48E3E154
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Installer-1.0.7.exe

File Explorer

Installer-1.0.7.exe

.exe 9.8MB

Installer-1.0.7.exe

IMPHASH ba05043eefc1997d10bc26b9e9bbe77d
SHA256 48f359326787a848b89d838a318d797c51fd7feeeee602fff5f46b9d3f7b53ce
MD5 32e6c794181e84ec3ddb154ed5e65391
SHA1 9a6f359a8ba80338cc83200e8b6b0b06a9d4e290
SHA512 582171a6fa99246b4919f30c73e385aa26f55407dfab040188970aef9d7fb1ac12f1c3fd635efb8a5aebe484a0bc7c85be65a0ac2344ce8a95d4e1f64886425d
SSDEEP 196608:/CIlL/mwLN9H3eeYbuN3VdC61kyGxyzriAZOLqJt6dl:awL/mINZePbtyviOt6d
TLSH
T182A6330377A623F5D076C93EEC92120D277278725F64EEEB1768EAB10E661C48E3E154
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

35984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ole32

CoTaskMemFree CoCreateGuid StringFromGUID2

setupapi

SetupIterateCabinetW

shell32

SHGetKnownFolderPath

kernel32

RaiseException WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP CreateFileW WriteFile GetTempPathW CloseHandle GetLastError SetLastError WaitForSingleObject GetExitCodeProcess CreateProcessW GetModuleHandleW LoadResource LockResource SizeofResource FindResourceW LocalFree FormatMessageW FlushFileBuffers HeapReAlloc HeapSize FormatMessageA GetLocaleInfoEx CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle CreateFile2 GetProcAddress GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW RtlPcToFileHeader RtlLookupFunctionEntry RtlUnwindEx FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetCPInfo IsProcessorFeaturePresent GetStdHandle GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree GetStringTypeW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType VirtualProtect LoadLibraryExW LCMapStringW GetProcessHeap

user32

MessageBoxW

Name

.text

Size

92KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9.6MB

Virtual Size

9.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Installer-1.0.7.exe

ole32

setupapi

shell32

kernel32

user32

generic