install-marioforever-unimaker[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
install-marioforever-unimaker.exe
Size 12.1MB
Sample260827-jey9msgf53
SHA256 3d05408c6776d969bb8f435b758563263885323941ebdc1d59ddb94cad1ac700
MD5 587167dace886b5fb24939a5daacf939
SHA1 d90e3a0c1e0197a2fe31bfcc05ad9beead10a795
SHA512 8aa0fc96a0072bc2165d9e48840645f66a053a127969761b9c93eda034f7ff2709f3d46ce84466739c56845212980ae774222f8b3b27c0f867c8f09e904bc30a
SSDEEP 393216:seqMeOG7mFxC02SLp7BoAO3VwA8/z0pxxFpl/Y69J:saeOG7mnD/BBXA8/oVFf/tn
TLSH
T10ED6330D624BD2BBC85C28751C558F73233E7A3A076F5C52685CF6528A329DAF8352CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
install-marioforever-unimaker.exe

File Explorer

install-marioforever-unimaker.exe

.exe 12.1MB

install-marioforever-unimaker.exe

IMPHASH e45db0faa2d6ea8117244b8eeec66f7d
SHA256 3d05408c6776d969bb8f435b758563263885323941ebdc1d59ddb94cad1ac700
MD5 587167dace886b5fb24939a5daacf939
SHA1 d90e3a0c1e0197a2fe31bfcc05ad9beead10a795
SHA512 8aa0fc96a0072bc2165d9e48840645f66a053a127969761b9c93eda034f7ff2709f3d46ce84466739c56845212980ae774222f8b3b27c0f867c8f09e904bc30a
SSDEEP 393216:seqMeOG7mFxC02SLp7BoAO3VwA8/z0pxxFpl/Y69J:saeOG7mnD/BBXA8/oVFf/tn
TLSH
T10ED6330D624BD2BBC85C28751C558F73233E7A3A076F5C52685CF6528A329DAF8352CE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

112898

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameA GetVersionExA GetVersion CompareStringA GetTimeZoneInformation IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter GetStringTypeW GetStringTypeA GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter GetOEMCP GetACP GetCPInfo LCMapStringW LCMapStringA GetDriveTypeA HeapReAlloc VirtualAlloc VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA GetCommandLineA GetStartupInfoA FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileA RemoveDirectoryA MoveFileA RtlUnwind DeleteFileA SetEnvironmentVariableA CreateDirectoryA HeapFree HeapAlloc HeapCompact TerminateProcess ExitProcess GetFileAttributesA SetFileAttributesA GetCurrentProcess MoveFileExA GetModuleHandleA FormatMessageA CopyFileA SetFileTime OpenFile SetErrorMode GetPrivateProfileStringA WritePrivateProfileStringA GetTickCount GetFullPathNameA MultiByteToWideChar WideCharToMultiByte GetLocalTime GetTempPathA GetShortPathNameA GetExitCodeProcess CompareStringW GetCurrentDirectoryA SetCurrentDirectoryA CreateProcessA Sleep lstrcatA lstrlenA WinExec LoadLibraryA GetProcAddress FreeLibrary GetDiskFreeSpaceA GlobalAlloc GlobalLock GlobalUnlock GlobalFree CloseHandle SetFilePointer WriteFile ReadFile CreateFileA GetLastError FindFirstFileA FindClose GetWindowsDirectoryA IsBadWritePtr GetSystemDirectoryA

user32

ExitWindowsEx IsIconic PostQuitMessage DefWindowProcA DialogBoxParamA PostMessageA EndDialog CheckDlgButton SetTimer BringWindowToTop GetLastActivePopup FindWindowA RegisterClassA LoadCursorA SendMessageA GetWindow AdjustWindowRectEx LoadIconA GetSysColor ScreenToClient GetWindowRect GetDlgItem EndPaint BeginPaint GetClientRect FillRect DrawTextA GetSystemMetrics KillTimer SendDlgItemMessageA GetFocus GetDlgItemTextA IsClipboardFormatAvailable OpenClipboard GetClipboardData CloseClipboard IsDlgButtonChecked CheckRadioButton SetFocus GetParent UpdateWindow IsWindowVisible InvalidateRect CreateDialogParamA RedrawWindow PeekMessageA GetMessageA IsDialogMessageA TranslateMessage DispatchMessageA SetDlgItemTextA SetWindowTextA SetWindowPos ShowWindow DestroyWindow CreateWindowExA GetWindowLongA IsWindowEnabled CallWindowProcA ValidateRect SetWindowLongA GetClassNameA MessageBoxA EnableWindow wsprintfA

gdi32

DeleteDC GetDeviceCaps GetSystemPaletteEntries CreatePalette DeleteObject ExtTextOutA CreateFontIndirectA BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC RealizePalette SelectPalette CreateHalftonePalette CreateDIBPatternBrush CreateSolidBrush SetBrushOrgEx SetStretchBltMode StretchDIBits SetTextColor SetBkMode AddFontResourceA SetBkColor GetStockObject RemoveFontResourceA

comdlg32

GetOpenFileNameA

advapi32

RegDeleteKeyA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegCreateKeyExA RegCreateKeyA RegEnumKeyExA RegCloseKey RegDeleteValueA RegOpenKeyA RegSetValueExA RegQueryValueA RegOpenKeyExA RegQueryValueExA

shell32

DragQueryFileA DragFinish ShellExecuteA SHBrowseForFolderA SHGetSpecialFolderLocation SHGetPathFromIDListA SHGetMalloc DragAcceptFiles

ole32

CoGetMalloc CoCreateInstance OleInitialize OleUninitialize

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA VerFindFileA

comctl32

ord17