Static task
static1
Behavioral task
behavioral1
Sample
SetupMEXX.exe
Resource
win7-20220414-en
General
-
Target
SetupMEXX.exekrrkxmlj
-
Size
389KB
-
MD5
64995dce861629cf99e780127ecd8ecc
-
SHA1
4fef627927ceee28b897341eb1733542f790d37f
-
SHA256
7abfc11ccb4d2c9a84b3fcd2f92ff0db421d38073a34838f193af6d76a0497e7
-
SHA512
7c21036bbcc4176858d78ef9422b06274494446dc12973769fb04cbf2c75c9e2d6f89933fe83264908344d54b5d32f5f21b254fc140595565af2246b110f08a3
-
SSDEEP
6144:jSdPRis/nchYdhQ8dSVMnYuecDWRD6khAdsN2tvHCZ7z0MMQJHN:mtIecS3Q8dSVeeCWRDjhktZHM7z0MZ
Malware Config
Signatures
Files
-
SetupMEXX.exekrrkxmlj.exe windows x86
8aa5d6264da1e437be4b2f2dccc9a830
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugBreakProcess
FindFirstChangeNotificationW
GetNamedPipeHandleStateW
CreateIoCompletionPort
FillConsoleOutputCharacterW
DisableThreadLibraryCalls
TerminateProcess
GetProcessId
VerifyVersionInfoW
EnumDateFormatsW
FindNextFileW
CopyFileExA
BuildCommDCBAndTimeoutsA
VirtualUnlock
WriteProfileStringW
VerifyVersionInfoA
SetProcessPriorityBoost
GetDriveTypeW
FindFirstChangeNotificationA
GetFileType
DeleteFileA
FindNextVolumeMountPointA
OutputDebugStringA
ResetWriteWatch
WriteConsoleInputA
WriteConsoleInputW
GetConsoleTitleW
SetComputerNameExW
GetTimeZoneInformation
LoadLibraryA
GetSystemDirectoryA
GetDriveTypeA
GetShortPathNameW
ActivateActCtx
GetProfileSectionA
DeleteFileW
GetCommandLineW
InterlockedIncrement
AddRefActCtx
FindResourceA
FormatMessageA
GetModuleFileNameW
CreateJobObjectW
InitializeCriticalSection
SetFirmwareEnvironmentVariableW
GetDllDirectoryW
GetExitCodeThread
WritePrivateProfileStringW
GetConsoleAliasesLengthW
WriteProfileSectionW
AddAtomA
InterlockedDecrement
GetVersionExA
HeapSize
_hwrite
GetStartupInfoA
DisconnectNamedPipe
GetCPInfoExW
GetSystemWow64DirectoryW
SetLastError
GetPrivateProfileIntA
GetConsoleAliasExesW
DebugBreak
EndUpdateResourceW
GetLastError
InterlockedExchangeAdd
GetStringTypeExW
DeleteVolumeMountPointA
OpenFileMappingA
SetDefaultCommConfigW
VirtualAlloc
lstrcpyA
TerminateThread
GetACP
_lwrite
GetQueuedCompletionStatus
GetNamedPipeHandleStateA
GetDiskFreeSpaceExW
RemoveVectoredExceptionHandler
WriteConsoleW
VirtualProtect
ReadConsoleOutputW
SetThreadContext
BuildCommDCBA
ReleaseActCtx
GetHandleInformation
WritePrivateProfileSectionW
TryEnterCriticalSection
OpenWaitableTimerW
CopyFileW
GetVolumePathNameW
SetConsoleMode
HeapSetInformation
SetComputerNameA
FindNextFileA
SetEvent
UnlockFileEx
GetProcAddress
DeleteTimerQueueTimer
MoveFileA
GlobalAlloc
SetCommMask
SetFileShortNameA
FreeEnvironmentStringsW
GetProfileStringA
GetConsoleTitleA
SetComputerNameW
GetConsoleAliasesW
CreateMailslotA
EnumDateFormatsA
SetConsoleOutputCP
MoveFileWithProgressW
GetFileInformationByHandle
SetLocalTime
FoldStringW
CallNamedPipeA
GetConsoleAliasExesLengthW
GetCurrentActCtx
OpenSemaphoreW
GetModuleHandleExA
LoadLibraryW
WriteConsoleOutputCharacterW
GetFileAttributesA
GetTickCount
GetConsoleAliasesLengthA
LocalUnlock
GetFileTime
EnumResourceNamesW
OpenFileMappingW
UnhandledExceptionFilter
GetCompressedFileSizeW
GetThreadPriority
ReadConsoleA
AssignProcessToJobObject
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
WideCharToMultiByte
GetCommandLineA
HeapValidate
IsBadReadPtr
SetUnhandledExceptionFilter
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleA
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetOEMCP
GetCPInfo
IsValidCodePage
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapReAlloc
FlushFileBuffers
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
CreateFileA
CloseHandle
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 173KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pipita Size: 512B - Virtual size: 75B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fayex Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ