VisualCppRedist_AIO_x86_x64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
VisualCppRedist_AIO_x86_x64.exe
Size 30.1MB
Sample260910-pm1ekashnb
SHA256 3c188e4651bcc07df2bdb06d69585158797b1bafb91557b09217621628cd5b23
MD5 1a7523d92b573859df4cbe8e75509b9e
SHA1 65b0ccf1fe1f23c4a0557b8a30251cc7e70a1f73
SHA512 f7c684c00265402876a4159869774096090c7482358fa1882a50468c89483c9a30066667418d510dcc5b9780fbdfd1bcc6672f92ec53cb933c0b36292c6ec40b
SSDEEP 786432:4JVdGL3z5NXeyQIwJtNYUJwif0nOJa9WEWRIOG5B7DVGLhYNBFv3cnZCa:gjOLXelIMjJwi0wMVW6n7ShYWCa
TLSH
T10E6733B51858C4B8E7E0B1F00807F5E1769AF9BCE9C5CC46B1F4BC99A19E4618FE612C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VisualCppRedist_AIO_x86_x64.exe

File Explorer

VisualCppRedist_AIO_x86_x64.exe

.exe 30.1MB

VisualCppRedist_AIO_x86_x64.exe

IMPHASH 524711ec9c5a149fe3bf3479d0b505b6
SHA256 3c188e4651bcc07df2bdb06d69585158797b1bafb91557b09217621628cd5b23
MD5 1a7523d92b573859df4cbe8e75509b9e
SHA1 65b0ccf1fe1f23c4a0557b8a30251cc7e70a1f73
SHA512 f7c684c00265402876a4159869774096090c7482358fa1882a50468c89483c9a30066667418d510dcc5b9780fbdfd1bcc6672f92ec53cb933c0b36292c6ec40b
SSDEEP 786432:4JVdGL3z5NXeyQIwJtNYUJwif0nOJa9WEWRIOG5B7DVGLhYNBFv3cnZCa:gjOLXelIMjJwi0wMVW6n7ShYWCa
TLSH
T10E6733B51858C4B8E7E0B1F00807F5E1769AF9BCE9C5CC46B1F4BC99A19E4618FE612C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97583

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

shell32

ShellExecuteExW ShellExecuteW SHGetMalloc SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHGetSpecialFolderPathW

gdi32

CreateCompatibleDC CreateFontIndirectW DeleteObject DeleteDC GetCurrentObject StretchBlt GetDeviceCaps CreateCompatibleBitmap SelectObject SetStretchBltMode GetObjectW

advapi32

FreeSid AllocateAndInitializeSid CheckTokenMembership

user32

GetWindowRect SetWindowPos GetWindowLongW GetMessageW DispatchMessageW KillTimer GetDesktopWindow SendMessageW EndDialog ShowWindow BringWindowToTop wsprintfW MessageBoxW CreateWindowExW ScreenToClient GetParent CopyImage ReleaseDC GetWindowDC CharUpperW GetClassNameA wsprintfA GetWindowTextW GetWindowTextLengthW SetWindowTextW GetSysColor DestroyWindow MessageBoxA GetKeyState GetDlgItem GetClientRect SetWindowLongW UnhookWindowsHookEx SetFocus GetSystemMetrics SystemParametersInfoW DrawTextW GetDC ClientToScreen GetWindow DialogBoxIndirectParamW DrawIconEx CallWindowProcW DefWindowProcW CallNextHookEx PtInRect SetWindowsHookExW LoadImageW LoadIconW MessageBeep EnableWindow IsWindow EnableMenuItem GetSystemMenu CreateWindowExA wvsprintfW GetMenu SetTimer

ole32

CreateStreamOnHGlobal CoCreateInstance CoInitialize

oleaut32

SysAllocStringLen VariantClear SysFreeString OleLoadPicture SysAllocString

kernel32

SetFileTime SetEndOfFile GetFileInformationByHandle VirtualFree GetModuleHandleA WaitForMultipleObjects VirtualAlloc ReadFile SetFilePointer GetFileSize LeaveCriticalSection EnterCriticalSection DeleteCriticalSection FormatMessageW lstrcpyW LocalFree IsBadReadPtr SuspendThread TerminateThread GetSystemDirectoryW GetCurrentThreadId InitializeCriticalSection ResetEvent SetEvent CreateEventW GetVersionExW GetModuleFileNameW GetCurrentProcess SetProcessWorkingSetSize SetEnvironmentVariableW GetDriveTypeW CreateFileW LoadLibraryA SetThreadLocale GetSystemTimeAsFileTime ExpandEnvironmentStringsW CompareFileTime WideCharToMultiByte GetTempPathW GetCurrentDirectoryW FindFirstFileW lstrcmpW DeleteFileW FindNextFileW FindClose RemoveDirectoryW SetCurrentDirectoryW GetEnvironmentVariableW lstrcmpiW GetLocaleInfoW MultiByteToWideChar GetUserDefaultUILanguage GetSystemDefaultUILanguage GetSystemDefaultLCID lstrcmpiA GlobalAlloc GlobalFree MulDiv FindResourceExA SizeofResource LoadResource LockResource GetProcAddress GetModuleHandleW GetStdHandle WriteFile lstrlenA CreateDirectoryW GetFileAttributesW lstrlenW GetLocalTime SystemTimeToFileTime CreateThread GetExitCodeThread Sleep SetFileAttributesW ExitProcess lstrcatW CloseHandle WaitForSingleObject GetExitCodeProcess GetQueuedCompletionStatus SetInformationJobObject CreateIoCompletionPort AssignProcessToJobObject ResumeThread CreateJobObjectW GetLastError CreateProcessW GetStartupInfoW GetCommandLineW SetLastError GetDiskFreeSpaceExW GetStartupInfoA

msvcrt

memset _wtol _purecall memcmp ??2@YAPAXI@Z _wcsnicmp memmove _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ _onexit __dllonexit malloc free wcsstr _CxxThrowException wcscmp _beginthreadex _EH_prolog ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z strncmp wcsncmp wcsncpy strncpy memcpy ??3@YAXPAX@Z