miside-Setup-1[.]0[.]1[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
miside-Setup-1.0.1.exe
Size 2.6MB
Sample261102-h263bs1xct
SHA256 569bfaf3ff7433bc237730a047482748e13ed04ff65a9db145b1bb7228dadf22
MD5 ca78f2dd08d3ac7c56514affeb244a13
SHA1 c9b40ad29cca13a8cee767a57081f449835c10ff
SHA512 7011cb4af9b0d4dfc693c9b54ebbe04235c19eef089e71a2c60c9cbd03b39ee1171bc813cd57209dce677444f81cc2c6183ee5efd5027ff072a023bcabce857b
SSDEEP 49152:ZdgcyeVdE+dAwHj2h2Gan7lgsgrFffMg5vK2fvOZH9irQN46Xle4mSzMg5vK2fvu:ZuIW6g5vqZHNPXoSgg5vqZRtPXoS
TLSH
T1BBC59D52E26D62A9D00FC03D9661DD7FE72379CD81247C7A139046EB2A9A9C03F2DBD1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
miside-Setup-1.0.1.exe

File Explorer

miside-Setup-1.0.1.exe

.exe 2.6MB

miside-Setup-1.0.1.exe

IMPHASH bed9919f47d7e5d587a3ce315d48d176
SHA256 569bfaf3ff7433bc237730a047482748e13ed04ff65a9db145b1bb7228dadf22
MD5 ca78f2dd08d3ac7c56514affeb244a13
SHA1 c9b40ad29cca13a8cee767a57081f449835c10ff
SHA512 7011cb4af9b0d4dfc693c9b54ebbe04235c19eef089e71a2c60c9cbd03b39ee1171bc813cd57209dce677444f81cc2c6183ee5efd5027ff072a023bcabce857b
SSDEEP 49152:ZdgcyeVdE+dAwHj2h2Gan7lgsgrFffMg5vK2fvOZH9irQN46Xle4mSzMg5vK2fvu:ZuIW6g5vqZHNPXoSgg5vqZRtPXoS
TLSH
T1BBC59D52E26D62A9D00FC03D9661DD7FE72379CD81247C7A139046EB2A9A9C03F2DBD1
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

AddVectoredExceptionHandler CompareStringOrdinal CreateDirectoryW CreateFileMappingA CreateFileW CreateProcessW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DeleteCriticalSection DeleteFileW EnterCriticalSection FindClose FindFirstFileExW FlsAlloc FlsFree FlsSetValue FreeEnvironmentStringsW GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetStdHandle GetSystemDirectoryW GetTempPathW GetWindowsDirectoryW HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitializeCriticalSection IsThreadAFiber LeaveCriticalSection MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFileEx RemoveDirectoryW RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetFileInformationByHandle SetFileTime SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualProtect VirtualQuery WaitForSingleObject WriteConsoleW WriteFileEx __C_specific_handler CloseHandle DuplicateHandle GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetProcAddress LoadLibraryExA SetLastError FormatMessageW GetProcessHeap HeapAlloc HeapFree

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _exit _fmode _initterm _onexit abort calloc exit fprintf free fwrite malloc memcmp memcpy memmove memset signal strlen strncmp vfprintf wcslen

ntdll

NtCreateNamedPipeFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

advapi32

RegCloseKey RegCreateKeyExW RegDeleteTreeW RegSetValueExW

d2d1

D2D1CreateFactory

dwmapi

DwmFlush DwmSetWindowAttribute

dwrite

DWriteCreateFactory

ole32

CoCreateInstance CoInitializeEx CoTaskMemFree

oleaut32

GetErrorInfo SysFreeString SysStringLen

shell32

SHBrowseForFolderW SHGetKnownFolderPath SHGetPathFromIDListW

user32

AnimateWindow BeginPaint CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EndPaint GetClientRect GetDpiForSystem GetDpiForWindow GetMessageW GetSystemMetrics GetWindowLongPtrW LoadCursorW LoadIconW PeekMessageW PostQuitMessage RegisterClassW ScreenToClient SetCursor SetProcessDpiAwarenessContext SetWindowLongPtrW ShowWindow TrackMouseEvent TranslateMessage UpdateWindow

Name

.text

Size

314KB

Virtual Size

314KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

132KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

924B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

miside-Setup-1.0.1.exe

kernel32

msvcrt

ntdll

api-ms-win-core-synch-l1-2-0

advapi32

d2d1

dwmapi

dwrite

ole32

oleaut32

shell32

user32

generic