install_n8[.]1[.]03[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
install_n8.1.03.exe
Size 34.5MB
Sample260822-n4ad2aytes
SHA256 496f3cba557efd0d708b008b906c45b985b996905b2f8eb922a23b892b57cfdf
MD5 c4ed4c72d4e1cdfabeade9a6021d3ac9
SHA1 fe8a9be873800aab5c0e4b5999a2104ae92202dd
SHA512 f508a3e7f3673b58aef6ae4538571e481418e49411f82e0ee717a5675c0e25e7e828c2f059557bf4df5a7a34dd9719f7e1d6f88d5e84a838f76f3ab654e9860e
SSDEEP 98304:ul8fnkArAA9OnOjiHfmmLT7izWWiVfG6slKNNhzLqOHo:ulCkdAO3fmm/7iCHmKfhuOHo
TLSH
T1DF879352B6829DC3F8014635C8978BE023B2ECB4CA65871B27B8B72E7FBF2845DD5151
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
install_n8.1.03.exe

File Explorer

install_n8.1.03.exe

.exe 34.5MB

install_n8.1.03.exe

IMPHASH 461926f212e0446fd2ef1c1bca2468e6
SHA256 496f3cba557efd0d708b008b906c45b985b996905b2f8eb922a23b892b57cfdf
MD5 c4ed4c72d4e1cdfabeade9a6021d3ac9
SHA1 fe8a9be873800aab5c0e4b5999a2104ae92202dd
SHA512 f508a3e7f3673b58aef6ae4538571e481418e49411f82e0ee717a5675c0e25e7e828c2f059557bf4df5a7a34dd9719f7e1d6f88d5e84a838f76f3ab654e9860e
SSDEEP 98304:ul8fnkArAA9OnOjiHfmmLT7izWWiVfG6slKNNhzLqOHo:ulCkdAO3fmm/7iCHmKfhuOHo
TLSH
T1DF879352B6829DC3F8014635C8978BE023B2ECB4CA65871B27B8B72E7FBF2845DD5151
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

37096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

setupapi

SetupDiDestroyDeviceInfoList CM_Get_Device_ID_ExA SetupDiEnumDeviceInfo SetupDiGetDeviceInfoListDetailA SetupDiGetClassDevsExA SetupDiGetDeviceInstallParamsA SetupDiCallClassInstaller SetupDiSetClassInstallParamsA SetupDiGetDeviceRegistryPropertyA

comctl32

PropertySheetA CreatePropertySheetPageA

gdi32

GetDeviceCaps CreateFontIndirectA

difxapi

DriverPackageUninstallA

kernel32

HeapSize FormatMessageA GetLastError GetSystemInfo GetProcAddress GetModuleHandleA GetVersionExA CloseHandle CreateFileA LocalAlloc LocalFree WideCharToMultiByte LockResource LoadResource FindResourceExA DeleteFileA SetFileAttributesA GetFileAttributesA GetFullPathNameA FindClose FindFirstFileA lstrcpyA lstrcatA GetSystemDirectoryA CopyFileA GetCurrentProcess WinExec GetWindowsDirectoryA GetModuleFileNameA CreateThread ReadFile HeapReAlloc GetConsoleMode GetConsoleCP SetFilePointer GetLocaleInfoA GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount LoadLibraryA EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter DeleteCriticalSection GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA RtlUnwindEx LCMapStringW MultiByteToWideChar LCMapStringA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers Sleep HeapFree HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapSetInformation HeapCreate GetModuleHandleW ExitProcess WriteFile GetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree SetLastError VirtualAlloc FlsAlloc

user32

GetWindowLongPtrA SetWindowLongPtrA GetDlgItem SendMessageA SendDlgItemMessageA GetParent GetWindowRect SetWindowPos DialogBoxParamA GetMessageA TranslateMessage EnableWindow LoadIconA LoadCursorA RegisterClassA DefWindowProcA PostMessageA PostQuitMessage GetSystemMetrics CreateWindowExA ShowWindow UpdateWindow ExitWindowsEx MessageBoxA CheckDlgButton IsDlgButtonChecked CheckRadioButton SetWindowTextA EndDialog SetClassLongPtrA ReleaseDC GetDC SystemParametersInfoA DispatchMessageA

advapi32

RegCloseKey RegSetValueExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges OpenSCManagerA CloseServiceHandle RegOpenKeyExA RegQueryValueExA