instapp.a.1.10.zip
- SHA256 cd8f61a955dbd0827a9a0f0cf1314855f984f5517154272f656c00cfeffdf94f
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
instapp.a.1.10.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
instapp.a.1.10.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
17 signatures
150 seconds
General
- Target instapp.a.1.10.zip
- Size 3.8MB
- Sample260928-pllvsatcph
- SHA256 cd8f61a955dbd0827a9a0f0cf1314855f984f5517154272f656c00cfeffdf94f
- MD5 d6fb1a6b125d667fd7d4815cb1a63234
- SHA1 f1ae6f8c0ad1bd7738f1a44cc400ba840f276ccd
- SHA512 b144ee47f353388dc7916bcd5d58c677664ef5aa5465d05e330861b793f2d7cfcc277372ae48440081fe1b90585a1212421606fe1e90fe12e7de4f16c33c8bb2
- SSDEEP 98304:ECf8FqYe9zeAz+02ua2uWnTAWuFY9bmjtTBKdGVmBdiS6TR9h:Eiom9zeA4b2ruFebQtYmmB0T/h
- TLSH T1FF0633131D66CC22F9D2573CAFD915163FB02B957B2E6A5304D7BA0B0889FE498C1D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/instapp.a.1.10.exe
File Explorer
-
instapp.a.1.10.zip.zip 3.8MB
-
instapp.a.1.10.exe.exe 36.4MB
instapp.a.1.10.exe
- IMPHASH 134463e32c3cbe702e5ab6a4147754d9
- SHA256 0010fbfe82e4ab59bcf5ae6d708d651d9fa7540f8de0f32ba2ad2527b47680d4
- MD5 da5976a23d436953564451ee0b2280a0
- SHA1 7287b7fe8ff8386e8b22651b0a31571e4e1600d2
- SHA512 406e0d53a30fd4de939a9964724dd0e45d63b6378caf0db84bdbe1b0389a6a12af4a8a4cdf5503ae4d8cd98adcc3129ddc93407f88134340bb0ee8e1fe668332
- SSDEEP 98304:X8KAut6aEbMVTuQ2dCka+4Z7eSv5ogcPESa5OY/Y8onv:MKACqATn2s6SWg5cnv
- TLSH T11D870946BB00DD83F5829134A8E6DF806B32FC728BB09B5336D96F1A2F5F1588DE1495
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
49600
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteConsoleA
CreateFileA
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetConsoleOutputCP
LCMapStringA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
LoadLibraryA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
WriteConsoleW
SetEndOfFile
LCMapStringW
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameW
GetStartupInfoA
GetFileType
SetHandleCount
FlsAlloc
GetCurrentThreadId
FlsFree
TlsFree
WriteFile
ReadFile
GetCurrentProcess
Sleep
FormatMessageW
SetLastError
GetLocalTime
CreateMutexW
GetVersionExW
GetLastError
CloseHandle
GetLocaleInfoW
FindResourceExW
FindResourceW
LoadResource
FlsSetValue
FlsGetValue
GetOEMCP
GetACP
LockResource
SizeofResource
GetCurrentProcessId
GetCPInfo
RtlVirtualUnwind
GetModuleFileNameA
GetStdHandle
ExitProcess
GetModuleHandleA
GetProcAddress
HeapCreate
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
GetStartupInfoW
VirtualAlloc
user32
GetWindowRect
ShowWindow
MapWindowPoints
GetSysColorBrush
FillRect
EnumChildWindows
SetWindowLongPtrW
EnableWindow
wsprintfW
SendMessageW
GetParent
InvalidateRect
GetDlgItem
SendDlgItemMessageW
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
IsDlgButtonChecked
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
LoadImageW
GetSystemMetrics
EndDialog
UnregisterClassA
BeginPaint
DrawTextW
EndPaint
DefWindowProcW
MessageBoxW
LoadBitmapW
DialogBoxParamW
gdi32
GetStockObject
SetBkMode
SetTextColor
DeleteObject
CreateCompatibleDC
GetObjectW
SelectObject
BitBlt
DeleteDC
winspool.drv
ClosePrinter
DocumentPropertiesW
PrinterProperties
OpenPrinterW
GetFormW
DeviceCapabilitiesW
DeleteFormW
AddFormW
GetPrinterW
EnumFormsW
SetPrinterW
comdlg32
GetOpenFileNameW
advapi32
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
shell32
SHGetMalloc
SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW
comctl32
CreatePropertySheetPageW
PropertySheetW
ShowProperties
Name
.text
Size
131KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
36.2MB
Virtual Size
36.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=133, id=109, productName=VS2005 build 50727, version=50727,
count=10, id=125, productName=VS2005 build 50727, version=50727,
count=21, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=210, id=1, productName=Unmarked objects,
count=64, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,