a8aacd48f930a07b0851ee7763e8b6543bcbc5643c5f640f62a7a39a1cb44b6b
- SHA256 a8aacd48f930a07b0851ee7763e8b6543bcbc5643c5f640f62a7a39a1cb44b6b
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
appnstaller.5.3.07.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
29 signatures
150 seconds
Behavioral task
behavioral2
Sample
appnstaller.5.3.07.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
15 signatures
150 seconds
General
- Target a8aacd48f930a07b0851ee7763e8b6543bcbc5643c5f640f62a7a39a1cb44b6b
- Size 3.4MB
- Sample261008-1vdrbavtev
- SHA256 a8aacd48f930a07b0851ee7763e8b6543bcbc5643c5f640f62a7a39a1cb44b6b
- MD5 67685aab06458bfe5e29c79fbd6e1ccb
- SHA1 802a4e1f3bdcfdd9fc1bfa4b38c6a4cca50c1ec4
- SHA512 bbc4faf43849abe1afa9e9b97343e920a8035f3d28a3b917004a242e18131f541dcb3da94f6a5e0a8eee3d23d9700e5d126e6a3c6365fd828424dca8d4f58f90
- SSDEEP 98304:J4SPXPZXEBWEgNfw/CIzWSqooQT/HSskLkL2fcpOwzf/p7:WSPXadgRoCIzWSBrXv2EYwzp
- TLSH T153F533DD9130ED95F674873895752FD6EF3A906B5E43DA1FC083E20E4B0B2E2224C91A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/appnstaller.5.3.07.exe
File Explorer
-
a8aacd48f930a07b0851ee7763e8b6543bcbc5643c5f640f62a7a39a1cb44b6b.zip 3.4MB
-
appnstaller.5.3.07.exe.exe 31.8MB
appnstaller.5.3.07.exe
- IMPHASH 26f935865eba0923e01e5dc5bec4d5a0
- SHA256 faeb345da97b17812feb979b9c0fc2d28f7cb15acd04c7fd79706524ad66f27a
- MD5 0551ce93a3c4214adecf77d56c869827
- SHA1 69d0424240cf55b9cfb4f0aa5def08039457cad0
- SHA512 6b095c81077b8b6b91b825f4144d4d09474d45af812ff5787f7837be4f93d64fd2076fb7d4852eb205f78864c67082ddd764aac176140c6c27e105ad9b566242
- SSDEEP 98304:MrLI1oWL50E5AF3EJeqliffMeDK/9m2g1iQfMJPPK6nAwTYkrhRqlNvREqE6rn0X:x50kACE2+fMeDKVm2G5fMJPPz
- TLSH T1E0771857F7418DD3F855523488D68BD063B2FCB58A61872722A8B339BFFE2881ED1494
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
79836
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
gdiplus
GdipDisposeImage
GdipCreateFromHDC
GdipAlloc
GdiplusStartup
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateBitmapFromStream
GdiplusShutdown
GdipFree
GdipCloneImage
kernel32
EnterCriticalSection
DeleteCriticalSection
TlsGetValue
QueryPerformanceCounter
WaitForSingleObject
GetTickCount
TlsSetValue
WideCharToMultiByte
Sleep
QueryPerformanceFrequency
TlsAlloc
CloseHandle
TlsFree
CreateThread
MultiByteToWideChar
lstrlenW
OutputDebugStringA
CreateFileW
GetLocalTime
GetCurrentThreadId
WriteFile
GetLastError
CreateMutexW
OpenProcess
GetExitCodeProcess
K32GetProcessImageFileNameW
K32EnumProcesses
GetModuleHandleW
GetCurrentProcessId
K32EnumProcessModules
K32GetModuleBaseNameA
TerminateProcess
MapViewOfFile
UnmapViewOfFile
FreeLibrary
HeapAlloc
SetDllDirectoryW
HeapFree
SetEvent
GetProcessHeap
LoadLibraryW
TerminateThread
GetProcAddress
GetExitCodeThread
CreateEventW
OpenFileMappingW
OpenEventW
FindResourceW
LoadResource
CreateProcessW
LeaveCriticalSection
GlobalAlloc
SizeofResource
GlobalUnlock
GlobalFree
CreateFileMappingW
LockResource
GetFullPathNameW
PeekNamedPipe
GetFileType
GetFileInformationByHandle
HeapSize
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
RtlUnwindEx
GetStartupInfoW
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleExW
ExitProcess
SetLastError
RaiseException
RtlPcToFileHeader
GetModuleFileNameW
GetStdHandle
IsProcessorFeaturePresent
IsDebuggerPresent
GetCommandLineA
FileTimeToSystemTime
GetDriveTypeW
FindFirstFileExW
FindClose
FileTimeToLocalFileTime
LoadLibraryExW
ExitThread
DecodePointer
EncodePointer
GetCurrentDirectoryW
GetModuleFileNameA
InitializeCriticalSection
GetConsoleMode
GetConsoleCP
SetFilePointerEx
HeapReAlloc
GetFileAttributesExW
SetStdHandle
GetTimeZoneInformation
SetEndOfFile
ReadFile
ReadConsoleW
WriteConsoleW
FlushFileBuffers
SetEnvironmentVariableW
GlobalLock
SetEnvironmentVariableA
GetSystemTimeAsFileTime
GetEnvironmentStringsW
LCMapStringW
CompareStringW
OutputDebugStringW
VirtualAlloc
user32
EndPaint
SetWindowRgn
TrackMouseEvent
LoadCursorW
FindWindowW
BeginPaint
SetLayeredWindowAttributes
CloseWindow
UpdateWindow
SendInput
SystemParametersInfoW
wsprintfW
UnregisterClassW
DestroyWindow
PeekMessageW
ShowWindow
CreateWindowExW
RegisterClassExW
DisplayConfigGetDeviceInfo
DefWindowProcW
SetTimer
KillTimer
PostMessageW
GetMessageW
CallNextHookEx
GetIconInfo
TranslateMessage
GetCursorInfo
PostThreadMessageW
SetWindowsHookExW
UnhookWindowsHookEx
DispatchMessageW
EnumDisplayMonitors
EnumDisplayDevicesW
ChangeDisplaySettingsExW
QueryDisplayConfig
GetSystemMetrics
GetDisplayConfigBufferSizes
GetMonitorInfoW
EnumDisplaySettingsW
PostQuitMessage
gdi32
CreateSolidBrush
DeleteDC
GetDIBits
DeleteObject
CreateCompatibleDC
CreateRoundRectRgn
advapi32
RegGetValueW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
shell32
ShellExecuteW
ole32
CoInitialize
CoCreateInstance
PropVariantClear
CoTaskMemFree
CoUninitialize
CreateStreamOnHGlobal
wlanapi
WlanEnumInterfaces
WlanFreeMemory
WlanCloseHandle
WlanOpenHandle
Name
.text
Size
203KB
Virtual Size
203KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
RT_CODE
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
90KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
31.3MB
Virtual Size
31.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
188KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=158, version=20921,
count=36, productName=Unmarked objects (old),
count=60, id=207, version=50929,
count=156, id=206, version=50929,
count=10, id=205, version=50929,
count=1, id=189, version=30716,
count=19, id=185, version=30716,
count=225, id=1, productName=Unmarked objects,
count=9, id=211, version=60610,
count=1, id=201, productName=VS2012 UPD3 build 60610, version=60610,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD3 build 60610, version=60610,