madiumchecklater.zip
- SHA256 570c69bd4e813b8ad21a382c80f6738951443c56a293f79150a365d4e4cb3a97
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Installer-1.0.7.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
Installer-1.0.7.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target madiumchecklater.zip
- Size 9.7MB
- Sample260809-xpc12sxtcy
- SHA256 570c69bd4e813b8ad21a382c80f6738951443c56a293f79150a365d4e4cb3a97
- MD5 326a819afcf2020a8cee32ff7b1106b0
- SHA1 ebadd50d84c75d606afd681a79f0793d40859f3d
- SHA512 7b92f55a5e31e94ee99e3e199392badc56f36eb35f3b4c04e0057480d96e933e4b3ad57d03e6aced68cda9a0afde17a8568ea5af8e4fc199d2411b25d6981b19
- SSDEEP 196608:PK51f/s25rnLa8abcNhfbKqx+TKbSlfQ0Zb1mSzwbkd7X:Pi1f/F5fahbSStQYzwbkdT
- TLSH T1E2A6334777A723D090D48E5BBCC2220E36513C799CA4DF613B7CFEE51D690990EAA1AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Installer-1.0.7.exe
File Explorer
-
madiumchecklater.zip.zip 9.7MB
-
Installer-1.0.7.exe.exe 9.8MB
Installer-1.0.7.exe
- IMPHASH ba05043eefc1997d10bc26b9e9bbe77d
- SHA256 48f359326787a848b89d838a318d797c51fd7feeeee602fff5f46b9d3f7b53ce
- MD5 32e6c794181e84ec3ddb154ed5e65391
- SHA1 9a6f359a8ba80338cc83200e8b6b0b06a9d4e290
- SHA512 582171a6fa99246b4919f30c73e385aa26f55407dfab040188970aef9d7fb1ac12f1c3fd635efb8a5aebe484a0bc7c85be65a0ac2344ce8a95d4e1f64886425d
- SSDEEP 196608:/CIlL/mwLN9H3eeYbuN3VdC61kyGxyzriAZOLqJt6dl:awL/mINZePbtyviOt6d
- TLSH T182A6330377A623F5D076C93EEC92120D277278725F64EEEB1768EAB10E661C48E3E154
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
35984
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
ole32
CoTaskMemFree
CoCreateGuid
StringFromGUID2
setupapi
SetupIterateCabinetW
shell32
SHGetKnownFolderPath
kernel32
RaiseException
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
CreateFileW
WriteFile
GetTempPathW
CloseHandle
GetLastError
SetLastError
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetModuleHandleW
LoadResource
LockResource
SizeofResource
FindResourceW
LocalFree
FormatMessageW
FlushFileBuffers
HeapReAlloc
HeapSize
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFileInformationByHandle
CreateFile2
GetProcAddress
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetCPInfo
IsProcessorFeaturePresent
GetStdHandle
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
FreeLibrary
GetModuleHandleExW
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
VirtualProtect
LoadLibraryExW
LCMapStringW
GetProcessHeap
user32
MessageBoxW
Name
.text
Size
92KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9.6MB
Virtual Size
9.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=142, id=261, version=33145,
count=12, id=260, version=33145,
count=7, id=259, version=33145,
count=10, id=259, version=35721,
count=16, id=260, version=35721,
count=47, id=261, version=35721,
count=1, id=262, version=33145,
count=11, id=257, version=33145,
count=126, id=1, productName=Unmarked objects,
count=1, id=261, version=36252,
count=1, id=255, version=36252,
count=1, id=151,
count=1, id=258, version=36252,