UserBenchmarkInstaller[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
UserBenchmarkInstaller.exe
Size 509KB
Sample261001-wbbqdstcmb
SHA256 ed3a4d2c00348ee99205c7d2f1c69405b0ab046ce10566c7d74ba0e190b75ed6
MD5 6123f0433fd8fa2f07d22fc2a6e7f82e
SHA1 c7d39c3b092f9e4baa81e69023a468a7f8694c02
SHA512 abefd2be86c40578eaad0f2bb1ff0174e901d7c8d13f3553325cceb19961ae7ab1906e84eb59f3b58e946af913545f555deae7db0cbd2c18cbe14734d1bd0b48
SSDEEP 6144:Sa9CzHZ74rMvRKtwws2w/VgRSkZ9sI0mVQ9KnruyFAvFv3ohG9+LSsOaWt:Sa9CzHZ75vo+eWgqbmidv3o9SwWt
TLSH
T152B46D5663A804F4E1B79138C9634606EB72BC5107B1D79F03A8F77A2F336915E3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UserBenchmarkInstaller.exe

File Explorer

UserBenchmarkInstaller.exe

.exe 509KB

UserBenchmarkInstaller.exe

IMPHASH cf5f7bedd05d3ef79ed36f562e96433d
SHA256 ed3a4d2c00348ee99205c7d2f1c69405b0ab046ce10566c7d74ba0e190b75ed6
MD5 6123f0433fd8fa2f07d22fc2a6e7f82e
SHA1 c7d39c3b092f9e4baa81e69023a468a7f8694c02
SHA512 abefd2be86c40578eaad0f2bb1ff0174e901d7c8d13f3553325cceb19961ae7ab1906e84eb59f3b58e946af913545f555deae7db0cbd2c18cbe14734d1bd0b48
SSDEEP 6144:Sa9CzHZ74rMvRKtwws2w/VgRSkZ9sI0mVQ9KnruyFAvFv3ohG9+LSsOaWt:Sa9CzHZ75vo+eWgqbmidv3o9SwWt
TLSH
T152B46D5663A804F4E1B79138C9634606EB72BC5107B1D79F03A8F77A2F336915E3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

163028

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\PROGS\mydev\UBMGPUBench\x64\Release\UserBenchmarkInstaller.pdb

kernel32

GetFileAttributesW GetFileAttributesExW GetFileSizeEx SystemTimeToTzSpecificLocalTime GetUserDefaultLCID RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW WriteConsoleW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP IsValidCodePage GetTimeZoneInformation EnumSystemLocalesW IsValidLocale LCMapStringW SetErrorMode ReadConsoleW GetConsoleMode GetConsoleOutputCP GetFileType ExitProcess GetStdHandle HeapQueryInformation GetCommandLineW GetCommandLineA RtlPcToFileHeader RtlUnwindEx GetCPInfo GetStringTypeW LCMapStringEx AreFileApisANSI GetTempPathW SetFilePointerEx FindNextFileW FindFirstFileExW OutputDebugStringW FileTimeToSystemTime GetCurrentProcess WriteFile SetEndOfFile FileTimeToLocalFileTime ReadFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers FindFirstFileW FindClose CreateFileW DeleteFileW GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection FormatMessageW CompareStringW GlobalFindAtomW GetSystemDirectoryW EncodePointer MulDiv GetCurrentProcessId GlobalAddAtomW CreateEventW CloseHandle GlobalFree GlobalUnlock WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW GetProcAddress lstrcmpW lstrcmpA GlobalDeleteAtom GlobalLock GlobalAlloc FindResourceW SizeofResource LockResource LoadResource LoadLibraryExW FreeLibrary GetVersionExW GetCurrentThreadId GetCurrentThread QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW LoadLibraryW GetModuleHandleExW GetModuleFileNameW InitializeCriticalSectionAndSpinCount SetLastError OutputDebugStringA GetACP WideCharToMultiByte MultiByteToWideChar LocalFree GetModuleHandleW FormatMessageA GetProcessHeap DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize InitializeCriticalSectionEx LeaveCriticalSection RtlUnwind EnterCriticalSection HeapFree

user32

GetTopWindow GetClassNameW GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW PtInRect MapWindowPoints AdjustWindowRectEx GetWindowRect GetWindowTextW RemovePropW GetPropW SetPropW GetScrollPos RedrawWindow SetForegroundWindow GetForegroundWindow UpdateWindow GetMenuItemCount GetMenuItemID GetSubMenu SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPos IsChild IsMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW CopyRect UnregisterClassW LoadIconW IsIconic SendMessageW GetSysColor ScreenToClient ClientToScreen EndPaint BeginPaint ReleaseDC GetDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW WinHelpW MonitorFromWindow GetMonitorInfoW ShowWindow GetWindow GetSystemMetrics GetClientRect DrawIcon SetTimer EnableWindow PeekMessageW TranslateMessage DispatchMessageW MessageBoxA KillTimer SendDlgItemMessageA SetRectEmpty OffsetRect GetParent PostMessageW PostQuitMessage IsWindow DestroyWindow CreateDialogIndirectParamW EndDialog GetDlgItem GetNextDlgTabItem GetActiveWindow IsWindowEnabled SetActiveWindow GetWindowLongW GetDesktopWindow GetFocus CheckMenuItem EnableMenuItem SetMenuItemBitmaps GetMenuCheckMarkDimensions SetWindowTextW IsDialogMessageW LoadCursorW RealChildWindowFromPoint InvalidateRect GetSysColorBrush CharUpperW DestroyMenu SetMenuItemInfoW LoadBitmapW GetMessageW IsWindowVisible GetKeyState ValidateRect GetCursorPos SetWindowsHookExW CallNextHookEx SetCursor UnhookWindowsHookEx GetLastActivePopup GetWindowThreadProcessId MessageBoxW

gdi32

GetDeviceCaps GetStockObject PtVisible RectVisible RestoreDC SaveDC SelectObject SetBkColor SetMapMode SetTextColor GetObjectW TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx OffsetViewportOrgEx ScaleViewportExtEx ScaleWindowExtEx GetClipBox Escape DeleteObject DeleteDC CreateBitmap

winspool.drv

OpenPrinterW ClosePrinter DocumentPropertiesW

advapi32

RegEnumValueW RegQueryValueW RegEnumKeyW RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey

shell32

ShellExecuteW ShellExecuteA

shlwapi

PathIsUNCW PathFindFileNameW PathFindExtensionW PathStripToRootW

ole32

CoTaskMemFree CoInitialize CoCreateInstance CoUninitialize CoCreateGuid

oleaut32

SysFreeString VariantChangeType VariantClear VariantInit SysAllocString

wininet

InternetOpenW InternetSetOptionW InternetConnectW HttpOpenRequestW HttpSendRequestW HttpQueryInfoW InternetReadFile InternetCloseHandle

oleacc

LresultFromObject CreateStdAccessibleObject

Name

.text

Size

307KB

Virtual Size

307KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

133KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

UserBenchmarkInstaller.exe

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

wininet

oleacc

generic