WinCounterReportsSetup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
WinCounterReportsSetup.exe
Size 5.9MB
Sample261002-phgrnatt2q
SHA256 79912fbd8b35fcd959de79bf1fe1a7ee3ca0cf5dfe9c5acf584ea3e995ffc633
MD5 3bf52a2386ca756ee120077b997e3c18
SHA1 173c90be2b60eddfb3e313fbb6913161de976b53
SHA512 b30f1c8c3695ce76d27b370a806851572ee6fbfe375bd9ddbdd44c5a1e0f2dfcdd62afa3ac97f6ea2e5fb3d04621f90613175d6a23eeb8542984e526c48a3afb
SSDEEP 98304:VwHyF1IBgpmIzn4yK1Lu4G5bzkiPblQMWsEpuWkG7aYb66TcXxFAcnLilNFzr:yHC1I6vn4l16LRzPxQLRSG7aYG6T4iP9
TLSH
T185563352BBD900B5F9EEC23008D81B92C529EF657D6095CCBB567A2D0DE0152EE09CBF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WinCounterReportsSetup.exe

File Explorer

WinCounterReportsSetup.exe

.exe 5.9MB

WinCounterReportsSetup.exe

IMPHASH bc5ce990cf54f8d435a68eb97512f73e
SHA256 79912fbd8b35fcd959de79bf1fe1a7ee3ca0cf5dfe9c5acf584ea3e995ffc633
MD5 3bf52a2386ca756ee120077b997e3c18
SHA1 173c90be2b60eddfb3e313fbb6913161de976b53
SHA512 b30f1c8c3695ce76d27b370a806851572ee6fbfe375bd9ddbdd44c5a1e0f2dfcdd62afa3ac97f6ea2e5fb3d04621f90613175d6a23eeb8542984e526c48a3afb
SSDEEP 98304:VwHyF1IBgpmIzn4yK1Lu4G5bzkiPblQMWsEpuWkG7aYb66TcXxFAcnLilNFzr:yHC1I6vn4l16LRzPxQLRSG7aYG6T4iP9
TLSH
T185563352BBD900B5F9EEC23008D81B92C529EF657D6095CCBB567A2D0DE0152EE09CBF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA SetFileSecurityA SetFileSecurityW

kernel32

CloseHandle CompareStringA CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW DeleteFileA DeleteFileW DosDateTimeToFileTime ExitProcess ExpandEnvironmentStringsA FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindResourceA FreeLibrary GetCPInfo GetCommandLineA GetCurrentDirectoryA GetCurrentProcess GetDateFormatA GetFileAttributesA GetFileAttributesW GetFileType GetFullPathNameA GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetNumberFormatA GetProcAddress GetProcessHeap GetStdHandle GetTempPathA GetTickCount GetTimeFormatA GetVersionExA GlobalAlloc HeapAlloc HeapFree HeapReAlloc IsDBCSLeadByte LoadLibraryA LocalFileTimeToFileTime MoveFileA MoveFileExA MultiByteToWideChar ReadFile SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetFileAttributesA SetFileAttributesW SetFilePointer SetFileTime SetLastError Sleep SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpiA lstrlenA

comctl32

ord17

comdlg32

CommDlgExtendedError GetOpenFileNameA GetSaveFileNameA

gdi32

DeleteObject

shell32

SHBrowseForFolderA SHChangeNotify SHFileOperationA SHGetFileInfoA SHGetMalloc SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA

user32

CharToOemA CharToOemBuffA CharUpperA CopyRect CreateWindowExA DefWindowProcA DestroyIcon DestroyWindow DialogBoxParamA DispatchMessageA EnableWindow EndDialog FindWindowExA GetClassNameA GetClientRect GetDlgItem GetDlgItemTextA GetMessageA GetParent GetSysColor GetSystemMetrics GetWindow GetWindowLongA GetWindowRect GetWindowTextA IsWindow IsWindowVisible LoadBitmapA LoadCursorA LoadIconA LoadStringA MapWindowPoints MessageBoxA OemToCharA OemToCharBuffA PeekMessageA PostMessageA RegisterClassExA SendDlgItemMessageA SendMessageA SetDlgItemTextA SetFocus SetMenu SetWindowLongA SetWindowPos SetWindowTextA ShowWindow TranslateMessage UpdateWindow WaitForInputIdle wsprintfA wvsprintfA

ole32

CLSIDFromString CoCreateInstance CreateStreamOnHGlobal OleInitialize OleUninitialize