VanishSetup (2)[.]exe

General

Target
VanishSetup (2).exe
Size 155.6MB
Sample260904-efjs5adb87
SHA256 f8a4f2a9e3ebf0b1cfd7a79bf215e45358f883927411411ead67a9b930946d05
MD5 d8c4cc0a50106baaf3c74dd3f321748d
SHA1 ac729b2e45852f1656b3a080cb378cbd5fb62137
SHA512 93623b61b7f82f876cbe82c304368ce25ac43c4247600ca0f31cc7be4424b890573d12e4df799ec4c379fc80b0ef3df1a0f7457559b09ac03848cf960ea0fef2
SSDEEP 3145728:wvQZi/ylYVyZix94NR1nA/DA0Dncj9Ywlzt2Wa1M31x:woZfYVyZ4IyDdz+Zpm1+/
TLSH
T1F878337D0A16CD0BC325EDB1A6A44F1079DA7C2026D1F9B1F1660BF5F8B6AC797093A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VanishSetup (2).exe

File Explorer

VanishSetup (2).exe

.exe 155.6MB

VanishSetup (2).exe

IMPHASH e6f4169f2a5c3a8f93171d9f593bd22a
SHA256 f8a4f2a9e3ebf0b1cfd7a79bf215e45358f883927411411ead67a9b930946d05
MD5 d8c4cc0a50106baaf3c74dd3f321748d
SHA1 ac729b2e45852f1656b3a080cb378cbd5fb62137
SHA512 93623b61b7f82f876cbe82c304368ce25ac43c4247600ca0f31cc7be4424b890573d12e4df799ec4c379fc80b0ef3df1a0f7457559b09ac03848cf960ea0fef2
SSDEEP 3145728:wvQZi/ylYVyZix94NR1nA/DA0Dncj9Ywlzt2Wa1M31x:woZfYVyZ4IyDdz+Zpm1+/
TLSH
T1F878337D0A16CD0BC325EDB1A6A44F1079DA7C2026D1F9B1F1660BF5F8B6AC797093A0
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

43868

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\Setup.pdb

kernel32

LoadResource FindResourceW lstrlenW GetProcAddress GetModuleHandleW DeleteCriticalSection GetTempPathW GetLastError GetTempFileNameW MoveFileW WaitForSingleObject GetExitCodeProcess CloseHandle DeleteFileW GetModuleFileNameW GetCurrentProcess LoadLibraryW FreeLibrary InitializeCriticalSectionEx GetFileAttributesW CreateFileW SetFilePointer ReadFile VerSetConditionMask GetCurrentDirectoryW MultiByteToWideChar LocalFileTimeToFileTime WideCharToMultiByte CreateDirectoryW WriteFile SetFileTime FreeResource SizeofResource LockResource CreateProcessW GetSystemDirectoryW SetDefaultDllDirectories GetCurrentThreadId DecodePointer RaiseException LeaveCriticalSection EnterCriticalSection lstrcmpiW LoadLibraryExW GetConsoleMode GetConsoleCP SystemTimeToFileTime VerifyVersionInfoW GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA IsDebuggerPresent OutputDebugStringW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetStdHandle HeapFree HeapAlloc GetFileType CompareStringW LCMapStringW HeapSize HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle GetStringTypeW GetFileSizeEx SetFilePointerEx FlushFileBuffers WriteConsoleW

shlwapi

PathIsUNCW

comctl32

InitCommonControlsEx

Resubmissions

Sharing