install_v6[.]1[.]0[.]08[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
install_v6.1.0.08.exe
Size 37.1MB
Sample260819-e83rpsdn9t
SHA256 9cc4c6b0f959a85b2997922417c68088b947d974cedf3da6a9b9338226fd1f04
MD5 69eef609c1e8ee01f4f363b6975f436b
SHA1 96713078023e27c5bf44099012ce40e909d96711
SHA512 b66057f13bb1b67dc3cba52c13046d1f6414b58065d01bb8efc360013df106cc4679fc82f50ae558a0fb7d85e4557b1d3d9313a1452e2e59cf421344b021edd6
SSDEEP 98304:AdfQLPfkSBqtiEPFNPLgBDoD2dT1FbsnbX7QfM3rzOHX:AdqUSBqtiEPFNPL12VQbXEfM3rzOHX
TLSH
T1CE87B4177609DDD6F039A63488BA0F90E325ECB195B0872762A4322D9FFF38D5F66604
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
install_v6.1.0.08.exe

File Explorer

install_v6.1.0.08.exe

.exe 37.1MB

install_v6.1.0.08.exe

IMPHASH 461926f212e0446fd2ef1c1bca2468e6
SHA256 9cc4c6b0f959a85b2997922417c68088b947d974cedf3da6a9b9338226fd1f04
MD5 69eef609c1e8ee01f4f363b6975f436b
SHA1 96713078023e27c5bf44099012ce40e909d96711
SHA512 b66057f13bb1b67dc3cba52c13046d1f6414b58065d01bb8efc360013df106cc4679fc82f50ae558a0fb7d85e4557b1d3d9313a1452e2e59cf421344b021edd6
SSDEEP 98304:AdfQLPfkSBqtiEPFNPLgBDoD2dT1FbsnbX7QfM3rzOHX:AdqUSBqtiEPFNPL12VQbXEfM3rzOHX
TLSH
T1CE87B4177609DDD6F039A63488BA0F90E325ECB195B0872762A4322D9FFF38D5F66604
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33000

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

setupapi

SetupDiDestroyDeviceInfoList CM_Get_Device_ID_ExA SetupDiEnumDeviceInfo SetupDiGetDeviceInfoListDetailA SetupDiGetClassDevsExA SetupDiGetDeviceInstallParamsA SetupDiCallClassInstaller SetupDiSetClassInstallParamsA SetupDiGetDeviceRegistryPropertyA

comctl32

PropertySheetA CreatePropertySheetPageA

gdi32

GetDeviceCaps CreateFontIndirectA

difxapi

DriverPackageUninstallA

kernel32

HeapSize FormatMessageA GetLastError GetSystemInfo GetProcAddress GetModuleHandleA GetVersionExA CloseHandle CreateFileA LocalAlloc LocalFree WideCharToMultiByte LockResource LoadResource FindResourceExA DeleteFileA SetFileAttributesA GetFileAttributesA GetFullPathNameA FindClose FindFirstFileA lstrcpyA lstrcatA GetSystemDirectoryA CopyFileA GetCurrentProcess WinExec GetWindowsDirectoryA GetModuleFileNameA CreateThread ReadFile HeapReAlloc GetConsoleMode GetConsoleCP SetFilePointer GetLocaleInfoA GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount LoadLibraryA EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter DeleteCriticalSection GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA RtlUnwindEx LCMapStringW MultiByteToWideChar LCMapStringA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers Sleep HeapFree HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapSetInformation HeapCreate GetModuleHandleW ExitProcess WriteFile GetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree SetLastError VirtualAlloc FlsAlloc

user32

GetWindowLongPtrA SetWindowLongPtrA GetDlgItem SendMessageA SendDlgItemMessageA GetParent GetWindowRect SetWindowPos DialogBoxParamA GetMessageA TranslateMessage EnableWindow LoadIconA LoadCursorA RegisterClassA DefWindowProcA PostMessageA PostQuitMessage GetSystemMetrics CreateWindowExA ShowWindow UpdateWindow ExitWindowsEx MessageBoxA CheckDlgButton IsDlgButtonChecked CheckRadioButton SetWindowTextA EndDialog SetClassLongPtrA ReleaseDC GetDC SystemParametersInfoA DispatchMessageA

advapi32

RegCloseKey RegSetValueExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges OpenSCManagerA CloseServiceHandle RegOpenKeyExA RegQueryValueExA