SINIX_Setup[.]exe | Triage™

General

Target
SINIX_Setup.exe
Size 425KB
Sample260825-wt5fesdk7v
SHA256 ec2db64c31faaaf10cbf2db48b5bc35265276768e7905a78b3b550fa9f8da3ef
MD5 0382381886acc220e12c6fbadd11f521
SHA1 f5eb0bb45ff9a26eddc9fbd80349622951bbd8fb
SHA512 ebafa2115670b30cb7dbc6112815d69784a7c49c07786589e4cd9d6ffaf72a273fcb4689c60ffacc07e8f4e9d4c2c01acd835a20e1465647cf115a41a5f23b6d
SSDEEP 6144:F+K9dXyx43Irml9/fU45KNPoZn7URWB9X5kvV/0vdTyeryHbaNUG:FNXyEf97UG9X5Tv4moa7
TLSH
T1D3945D107941D036E5B3087789FE8E7E5A2DBC910B5469CBA3841EFE8F349D0BB3564A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SINIX_Setup.exe

File Explorer

SINIX_Setup.exe

.exe 425KB

SINIX_Setup.exe

IMPHASH a63c7feb95f5bbb8d79f81f1cd43373d
SHA256 ec2db64c31faaaf10cbf2db48b5bc35265276768e7905a78b3b550fa9f8da3ef
MD5 0382381886acc220e12c6fbadd11f521
SHA1 f5eb0bb45ff9a26eddc9fbd80349622951bbd8fb
SHA512 ebafa2115670b30cb7dbc6112815d69784a7c49c07786589e4cd9d6ffaf72a273fcb4689c60ffacc07e8f4e9d4c2c01acd835a20e1465647cf115a41a5f23b6d
SSDEEP 6144:F+K9dXyx43Irml9/fU45KNPoZn7URWB9X5kvV/0vdTyeryHbaNUG:FNXyEf97UG9X5Tv4moa7
TLSH
T1D3945D107941D036E5B3087789FE8E7E5A2DBC910B5469CBA3841EFE8F349D0BB3564A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

32800

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

ShowWindow

shell32

ShellExecuteA

advapi32

RegSetValueExA RegOpenKeyExA RegCloseKey

kernel32

CreateFileW HeapSize WriteConsoleW TerminateProcess GetTempPathA GetModuleFileNameA GetConsoleWindow EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetProcessHeap RaiseException RtlUnwind GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess SetEndOfFile FreeLibrary GetModuleHandleExW GetProcAddress GetCommandLineA GetCommandLineW HeapFree IsDebuggerPresent UnhandledExceptionFilter HeapAlloc VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW IsValidCodePage GetACP GetOEMCP HeapReAlloc FindClose FindFirstFileExW FindNextFileW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle

Resubmissions

Sharing