ins_setup.0.13.zip
- SHA256 24d89585b285caabfaa441b547e4c53143bb40fb439b665f645ecfcef05e9e68
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ins_setup.0.13.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
34 signatures
150 seconds
Behavioral task
behavioral2
Sample
ins_setup.0.13.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
17 signatures
150 seconds
General
- Target ins_setup.0.13.zip
- Size 7.0MB
- Sample261107-qf7qqsfa63
- SHA256 24d89585b285caabfaa441b547e4c53143bb40fb439b665f645ecfcef05e9e68
- MD5 a693e3e47a4edef2fc6fd5c619f989d9
- SHA1 81c71bd73656a181478c207ae8b515ea9b28f5e3
- SHA512 a80fbf7a6f60e791197a98ae6ae6ec58fac9fe71084ed1c6899fca527d2e39323dc70e3f29ad842f5550d5a260ec891ec7cc8b9fd79fcdf8bbb7567d9cecd00e
- SSDEEP 196608:r/lg9TbJ+YcrTSRzybJWfhoIzfbDICRq1inFqaU21uwnEsmS3aYw7:J43gYQ0xZoIzfbUeqyI+Esc
- TLSH T1187633A5B4765A3249D773893EF5BB8E9380E2A19903D07CFA5002C1689BFD3D7F1621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ins_setup.0.13.exe
File Explorer
-
ins_setup.0.13.zip.zip 7.0MB
-
ins_setup.0.13.exe.exe 35.7MB
ins_setup.0.13.exe
- IMPHASH 20abbe0f6ab059ea4a375bcb6b8a717b
- SHA256 2b7c750585ed9df05ec94a0df77f78e336cab4e5f2dc939b7743cfa511272f8a
- MD5 22af564aa802516e52f568bc2207702a
- SHA1 68ec2f510edb39db9061d98a1f381d5883e2dde5
- SHA512 3a5836643c764561eb43e55c053b84f3e673eb41c7dba5f2f66ce91952eebc15ca6a4a1f425e63e82be9611931a5e3e93c24cee9ab2a313bf9c2d9190ecb2437
- SSDEEP 98304:OFoG4QOye2FHAQfMArIeBTg07h27e09X6rS+BVcruRYk7VCXWxq:OMQh3fMArbdq
- TLSH T1AC870C427742D962D8540A7B8C9ADBC82371FD8AEE06630738C6772F2EB66C7DD03495
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
39104
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetCommandLineW
GetTempPathW
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
SetEvent
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExA
LoadLibraryA
LoadLibraryW
LocalFree
WriteConsoleW
CreateFileW
CloseHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
EncodePointer
LCMapStringEx
GetCPInfo
IsDebuggerPresent
OutputDebugStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
HeapFree
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapAlloc
HeapReAlloc
GetFileType
HeapSize
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
VirtualAlloc
user32
PostThreadMessageW
shell32
ShellExecuteW
ole32
CoCreateInstance
CoReleaseServerProcess
CoInitialize
CoAddRefServerProcess
CoUninitialize
Name
.text
Size
122KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
35.4MB
Virtual Size
35.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
130KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=26213,
count=155, id=261, version=26213,
count=1, productName=Unmarked objects (old),
count=18, id=260, version=33030,
count=18, id=259, version=33030,
count=82, id=261, version=33030,
count=17, id=260, version=26213,
count=11, id=257, version=26213,
count=106, id=1, productName=Unmarked objects,
count=2, id=261, version=33133,
count=1, id=255, version=33133,
count=1, id=151,
count=1, id=258, version=33133,