MadiumInstaller[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
MadiumInstaller.exe
Size 204KB
Sample260818-x9vrlayfqa
SHA256 4ccd3c14651d1842b201c02084730fcc3b674758a75754c4c69bf64f1a7cda4b
MD5 7c786540ea668f83551dbc27c021afc1
SHA1 d15ba52aea36aecf441cd6f70600dec57ff1197a
SHA512 d3519b21f19c51d65be4b12ce6cb4dc2314e5a239a56b23bb9fc46b117c81430969da89d3e13021577081f4bb5585701ff81891a72cc4700418601ec53673083
SSDEEP 6144:OwhojjTxItRyKO/XL5n6XD+vpFtO5r1DZQ80sEC:4T55n6XajtO5rBZQvi
TLSH
T178248E1BF79410F9E167C57CCE928A41EB72B896076197CF0B500BB60F27AD85E3AB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MadiumInstaller.exe

File Explorer

MadiumInstaller.exe

.exe 204KB

MadiumInstaller.exe

IMPHASH 44eff9ccf9ffd2353c68cc268aecbe09
SHA256 4ccd3c14651d1842b201c02084730fcc3b674758a75754c4c69bf64f1a7cda4b
MD5 7c786540ea668f83551dbc27c021afc1
SHA1 d15ba52aea36aecf441cd6f70600dec57ff1197a
SHA512 d3519b21f19c51d65be4b12ce6cb4dc2314e5a239a56b23bb9fc46b117c81430969da89d3e13021577081f4bb5585701ff81891a72cc4700418601ec53673083
SSDEEP 6144:OwhojjTxItRyKO/XL5n6XD+vpFtO5r1DZQ80sEC:4T55n6XajtO5rBZQvi
TLSH
T178248E1BF79410F9E167C57CCE928A41EB72B896076197CF0B500BB60F27AD85E3AB11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

88916

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

ord413 ord412 ord410

dwmapi

DwmSetWindowAttribute DwmExtendFrameIntoClientArea

ole32

CoCreateInstance CoInitializeEx CoTaskMemFree CoUninitialize

shell32

SHCreateItemFromParsingName CommandLineToArgvW ShellExecuteExW SetCurrentProcessExplicitAppUserModelID SHGetKnownFolderPath ShellExecuteW

flutter_windows

FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef FlutterDesktopMessengerSetCallback FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopViewControllerHandleTopLevelWindowProc FlutterDesktopViewControllerForceRedraw FlutterDesktopViewControllerGetView FlutterDesktopViewControllerDestroy FlutterDesktopMessengerLock FlutterDesktopEngineSetNextFrameCallback FlutterDesktopEngineGetMessenger FlutterDesktopEngineGetPluginRegistrar FlutterDesktopEngineReloadSystemFonts FlutterDesktopEngineDestroy FlutterDesktopEngineCreate FlutterDesktopGetDpiForMonitor FlutterDesktopResyncOutputStreams FlutterDesktopViewGetHWND FlutterDesktopMessengerUnlock FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopPluginRegistrarSetDestructionHandler FlutterDesktopPluginRegistrarGetView FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopViewControllerCreate

kernel32

QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetFileInformationByHandleEx InitializeSListHead AreFileApisANSI GetFileAttributesExW FindFirstFileW FindClose CreateFileW GetLocaleInfoEx FormatMessageA GetStartupInfoW GetSystemTimeAsFileTime GetCurrentThreadId GetProcessHeap HeapFree LoadLibraryA DeleteFileW GetDiskFreeSpaceExW CloseHandle GetLastError WaitForSingleObject GetCurrentProcessId GetExitCodeProcess GetProcessId OpenProcess GetSystemDirectoryW MultiByteToWideChar WideCharToMultiByte IsDebuggerPresent CreateMutexW AttachConsole GetCommandLineW LocalFree AllocConsole FreeLibrary GetModuleHandleW GetProcAddress

user32

UnhookWindowsHookEx MonitorFromWindow GetMonitorInfoW SetWindowsHookExW ScreenToClient GetCursorPos MonitorFromPoint LoadImageW LoadCursorW SetParent GetClientRect SetFocus BringWindowToTop SetWindowTextW DestroyWindow CreateWindowExW UnregisterClassW SetPropW RegisterClassW PostQuitMessage DefWindowProcW SendMessageW FindWindowW SetForegroundWindow ShowWindow DispatchMessageW TranslateMessage GetMessageW SetWindowLongPtrW GetWindowLongPtrW SetWindowPos GetSystemMetrics ReleaseCapture MoveWindow IsZoomed

advapi32

RegGetValueW

msvcp140

?sync_with_stdio@ios_base@std@@SA_N_N@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?width@ios_base@std@@QEBA_JXZ ?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?width@ios_base@std@@QEAA_J_J@Z ?flags@ios_base@std@@QEBAHXZ ?good@ios_base@std@@QEBA_NXZ ?_Xbad_function_call@std@@YAXXZ ?_Winerror_map@std@@YAHH@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__std_terminate memcmp memcpy memmove memset __std_type_info_compare __current_exception __current_exception_context __std_exception_copy __std_exception_destroy _CxxThrowException __C_specific_handler

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _register_onexit_function _seh_filter_exe _set_app_type abort _initialize_wide_environment _get_wide_winmain_command_line _initterm _initterm_e exit _exit _initialize_onexit_table _cexit _c_exit _register_thread_local_exe_atexit_callback _invoke_watson _configure_wide_argv terminate

api-ms-win-crt-heap-l1-1-0

_set_new_mode _callnewh malloc free

api-ms-win-crt-string-l1-1-0

wcsnlen wcslen wcscmp strlen

api-ms-win-crt-stdio-l1-1-0

_fileno __acrt_iob_func freopen_s _dup2 _set_fmode __p__commode

api-ms-win-crt-math-l1-1-0

ceil __setusermatherr

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale