install_q0[.]3[.]13[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
install_q0.3.13.exe
Size 24.9MB
Sample260827-bf8kpsycmc
SHA256 f08db7c83551ffc187ab7eb7eba321af5d5d94fdb39da16fe9224315b7ce1597
MD5 4bb2068a9f43e4aa9f7db454b32353eb
SHA1 68851e40626c0dd6b0f592b590f1ef0c7a356472
SHA512 87016dd2cb15adc465a638e3035a4cac8d3807723e7e8f69ebb51fb64c1cfc7ea81af147540f02ab2ed16e5aa14af7ebaf684bd92a2d52568ec231ef59289a2a
SSDEEP 98304:Dml9Jq0CNN6Q9jGBSQYnURuFOQhFyXjrqNEOHp:DmlObfoeO0yTrqNEOHp
TLSH
T177479256BA418CD7F4445630CCA787E063B1FCB66EA4431F31A5732DAFBE2840EEA594
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
install_q0.3.13.exe

File Explorer

install_q0.3.13.exe

.exe 24.9MB

install_q0.3.13.exe

IMPHASH 461926f212e0446fd2ef1c1bca2468e6
SHA256 f08db7c83551ffc187ab7eb7eba321af5d5d94fdb39da16fe9224315b7ce1597
MD5 4bb2068a9f43e4aa9f7db454b32353eb
SHA1 68851e40626c0dd6b0f592b590f1ef0c7a356472
SHA512 87016dd2cb15adc465a638e3035a4cac8d3807723e7e8f69ebb51fb64c1cfc7ea81af147540f02ab2ed16e5aa14af7ebaf684bd92a2d52568ec231ef59289a2a
SSDEEP 98304:Dml9Jq0CNN6Q9jGBSQYnURuFOQhFyXjrqNEOHp:DmlObfoeO0yTrqNEOHp
TLSH
T177479256BA418CD7F4445630CCA787E063B1FCB66EA4431F31A5732DAFBE2840EEA594
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

37096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

setupapi

SetupDiDestroyDeviceInfoList CM_Get_Device_ID_ExA SetupDiEnumDeviceInfo SetupDiGetDeviceInfoListDetailA SetupDiGetClassDevsExA SetupDiGetDeviceInstallParamsA SetupDiCallClassInstaller SetupDiSetClassInstallParamsA SetupDiGetDeviceRegistryPropertyA

comctl32

PropertySheetA CreatePropertySheetPageA

gdi32

GetDeviceCaps CreateFontIndirectA

difxapi

DriverPackageUninstallA

kernel32

HeapSize FormatMessageA GetLastError GetSystemInfo GetProcAddress GetModuleHandleA GetVersionExA CloseHandle CreateFileA LocalAlloc LocalFree WideCharToMultiByte LockResource LoadResource FindResourceExA DeleteFileA SetFileAttributesA GetFileAttributesA GetFullPathNameA FindClose FindFirstFileA lstrcpyA lstrcatA GetSystemDirectoryA CopyFileA GetCurrentProcess WinExec GetWindowsDirectoryA GetModuleFileNameA CreateThread ReadFile HeapReAlloc GetConsoleMode GetConsoleCP SetFilePointer GetLocaleInfoA GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount LoadLibraryA EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter DeleteCriticalSection GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA RtlUnwindEx LCMapStringW MultiByteToWideChar LCMapStringA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers Sleep HeapFree HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapSetInformation HeapCreate GetModuleHandleW ExitProcess WriteFile GetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree SetLastError VirtualAlloc FlsAlloc

user32

GetWindowLongPtrA SetWindowLongPtrA GetDlgItem SendMessageA SendDlgItemMessageA GetParent GetWindowRect SetWindowPos DialogBoxParamA GetMessageA TranslateMessage EnableWindow LoadIconA LoadCursorA RegisterClassA DefWindowProcA PostMessageA PostQuitMessage GetSystemMetrics CreateWindowExA ShowWindow UpdateWindow ExitWindowsEx MessageBoxA CheckDlgButton IsDlgButtonChecked CheckRadioButton SetWindowTextA EndDialog SetClassLongPtrA ReleaseDC GetDC SystemParametersInfoA DispatchMessageA

advapi32

RegCloseKey RegSetValueExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges OpenSCManagerA CloseServiceHandle RegOpenKeyExA RegQueryValueExA