InvioFE114[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
InvioFE114.exe
Size 177KB
Sample260910-ajvmksvsfz
SHA256 a811365d1d049694986e4685f485b44a726202291a1a24b209c9dad4ec11274c
MD5 fa2c40bea82d9e033081c045d9301226
SHA1 62365c9d6f3328eab0b06ccb16231e8e51fde64f
SHA512 77bdb2ae81abb2f579ef8bb14105071b872a5ad4bb75963c8194d5dc46a4d3e590e75d38ad8e141c6f11302304aea5052500f6335f22f58dd903e7249f1f5b64
SSDEEP 3072:VMEMvxdknmg1tDbuLB+5xGT21JqaEvNPB+OM8ylv6y0rPUX0FwI1dxrI/25RO:VME1nmg1tDbJ5621YNPIOM8ylvObZFL8
TLSH
T17E04E015B7C584F2E4814B70587C6372D63AFF01AB70E28E879A4D5F6C30612BA1AF67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
InvioFE114.exe

File Explorer

InvioFE114.exe

.exe 177KB

InvioFE114.exe

IMPHASH a6d1f237a38b6e7d3a48b606fa0d7939
SHA256 a811365d1d049694986e4685f485b44a726202291a1a24b209c9dad4ec11274c
MD5 fa2c40bea82d9e033081c045d9301226
SHA1 62365c9d6f3328eab0b06ccb16231e8e51fde64f
SHA512 77bdb2ae81abb2f579ef8bb14105071b872a5ad4bb75963c8194d5dc46a4d3e590e75d38ad8e141c6f11302304aea5052500f6335f22f58dd903e7249f1f5b64
SSDEEP 3072:VMEMvxdknmg1tDbuLB+5xGT21JqaEvNPB+OM8ylv6y0rPUX0FwI1dxrI/25RO:VME1nmg1tDbJ5621YNPIOM8ylvObZFL8
TLSH
T17E04E015B7C584F2E4814B70587C6372D63AFF01AB70E28E879A4D5F6C30612BA1AF67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA SetFileSecurityA SetFileSecurityW

kernel32

CloseHandle CompareStringA CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW DeleteFileA DeleteFileW DosDateTimeToFileTime ExitProcess ExpandEnvironmentStringsA FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindResourceA FreeLibrary GetCPInfo GetCommandLineA GetCurrentDirectoryA GetCurrentProcess GetDateFormatA GetFileAttributesA GetFileAttributesW GetFileType GetFullPathNameA GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetNumberFormatA GetProcAddress GetProcessHeap GetStdHandle GetTempPathA GetTickCount GetTimeFormatA GetVersionExA GlobalAlloc HeapAlloc HeapFree HeapReAlloc IsDBCSLeadByte LoadLibraryA LocalFileTimeToFileTime MoveFileA MoveFileExA MultiByteToWideChar ReadFile SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetFileAttributesA SetFileAttributesW SetFilePointer SetFileTime SetLastError Sleep SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpiA lstrlenA

comctl32

ord17

comdlg32

CommDlgExtendedError GetOpenFileNameA

gdi32

DeleteObject

shell32

SHBrowseForFolderA SHChangeNotify SHFileOperationA SHGetFileInfoA SHGetMalloc SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA

user32

CharToOemBuffA CharUpperA CopyRect CreateWindowExA DefWindowProcA DestroyIcon DestroyWindow DialogBoxParamA DispatchMessageA EnableWindow EndDialog FindWindowExA GetClassNameA GetClientRect GetDlgItem GetDlgItemTextA GetMessageA GetParent GetSysColor GetSystemMetrics GetWindow GetWindowLongA GetWindowRect GetWindowTextA IsWindow IsWindowVisible LoadBitmapA LoadCursorA LoadIconA LoadStringA MapWindowPoints MessageBoxA OemToCharA OemToCharBuffA PeekMessageA PostMessageA RegisterClassExA SendDlgItemMessageA SendMessageA SetDlgItemTextA SetFocus SetMenu SetWindowLongA SetWindowPos SetWindowTextA ShowWindow TranslateMessage UpdateWindow WaitForInputIdle wsprintfA wvsprintfA

ole32

CLSIDFromString CoCreateInstance CreateStreamOnHGlobal OleInitialize OleUninitialize