Installer-1.0.9.rar
- SHA256 1ed41f61b04abf15ef34910853c1bcabd1ca65c483df5a6fd6fca2ede26014e3
Overview
overview
3Static
static
3Installer-1.0.9.rar
ubuntu-22.04-amd64
Installer-1.0.9.rar
debian-9-armhf
Installer-1.0.9.rar
debian-9-mips
Installer-1.0.9.rar
debian-9-mipsel
Installer-1.0.9.exe
ubuntu-22.04-amd64
Installer-1.0.9.exe
debian-9-armhf
Installer-1.0.9.exe
debian-9-mips
Installer-1.0.9.exe
debian-9-mipsel
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Installer-1.0.9.rar
Resource
ubuntu2204-amd64-20260513-en
ubuntu-22.04-amd64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
Installer-1.0.9.rar
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
Installer-1.0.9.rar
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
Installer-1.0.9.rar
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
Installer-1.0.9.exe
Resource
ubuntu2204-amd64-20260513-en
ubuntu-22.04-amd64
0 signatures
900 seconds
Behavioral task
behavioral6
Sample
Installer-1.0.9.exe
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
900 seconds
Behavioral task
behavioral7
Sample
Installer-1.0.9.exe
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
900 seconds
Behavioral task
behavioral8
Sample
Installer-1.0.9.exe
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
900 seconds
General
- Target Installer-1.0.9.rar
- Size 9.7MB
- Sample260827-dbvt6adj4s
- SHA256 1ed41f61b04abf15ef34910853c1bcabd1ca65c483df5a6fd6fca2ede26014e3
- MD5 fb7b06aef53d9dca68ae098ed40406c9
- SHA1 287d11a5b893e230d4f092340c7a503d3bf0b4c0
- SHA512 d202a24ab501eb9c7a3786b33be23f230a2855f94305b6448b9ea4ea15aee4992af3d5eb9ea3146c7f0df51e55b5cc7c4024c5a33b880ef2f94a5f5725ff3478
- SSDEEP 196608:CgJvp7m8tnIaewuc7qbHezX9BsOtFAayABrNv9ftIoPLt8c4rl:COpKYewuchzXnsGATerXioPLOxl
- TLSH T1A8A633E227166A2130332CF90FCA9C3D574311128956ECA45FE79BDA18A34D5E7F4E2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Installer-1.0.9.exe
File Explorer
-
Installer-1.0.9.rar.rar 9.7MB
-
Installer-1.0.9.exe.exe 9.8MB
Installer-1.0.9.exe
- IMPHASH 99186799183134845e3e1dd8f17e7a37
- SHA256 6c1bfdb571e85b8a1e0566f008f9eef8dab6baa4088a48d3b9c7ea9c7e9bfd9a
- MD5 f3c25a3f9f0298df7f616425569f29eb
- SHA1 3b104a986f9b54b5afad33a1e2dd6e11126cdcfa
- SHA512 467cd145d72728f79c130a337562b9d6a8f426a3b631a19a773071309783b560db7226bcf519cdfda1a84598ca21e52f4769f05c0e6ec254ab691bb35109e807
- SSDEEP 196608:okEbIPQNfiDq3tdrsGj4CH4k4TL1JNRX/XURvSyGZ1GihcwFNdjO6:tY1wW3tOGcm4kGLDNtkRvAEip/
- TLSH T187A633C355F90AF2F06EC23D4EEA5181D736B8B62715C6C3A2A018335F226F45E6B197
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
34420
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
ole32
CoTaskMemFree
CoCreateGuid
StringFromGUID2
setupapi
SetupIterateCabinetW
shell32
SHGetKnownFolderPath
kernel32
GetSystemTimeAsFileTime
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
CreateFileW
WriteFile
GetTempPathW
CloseHandle
GetLastError
SetLastError
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetModuleHandleW
LoadResource
LockResource
SizeofResource
FindResourceW
LocalFree
FormatMessageW
FlushFileBuffers
HeapReAlloc
HeapSize
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFileInformationByHandle
GetProcAddress
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetCPInfo
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
LCMapStringW
GetProcessHeap
user32
MessageBoxW
Name
.text
Size
89KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9.6MB
Virtual Size
9.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=142, id=261, version=33145,
count=12, id=260, version=33145,
count=8, id=259, version=33145,
count=9, id=259, version=35207,
count=16, id=260, version=35207,
count=47, id=261, version=35207,
count=1, id=262, version=33145,
count=11, id=257, version=33145,
count=130, id=1, productName=Unmarked objects,
count=1, id=261, version=35228,
count=1, id=255, version=35228,
count=1, id=151,
count=1, id=258, version=35228,