Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
langs/Hungarian.ps1
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
langs/Hungarian.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
langs/Korean.ps1
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
langs/Korean.ps1
Resource
win10v2004-20220812-en
General
-
Target
Pass_1234_SetupFile.zip
-
Size
6.6MB
-
MD5
58fd9ee51acce5bf93fcd1843e2a5f50
-
SHA1
f83c1604f88e7d8198894cc7de67aa3b0b3992b6
-
SHA256
6bff808ede3ce8a1e176db5f02083b25825e62b079a917aafaa5ac89b4192c1b
-
SHA512
f54f705cd25fd343e103e5ed8e81af76368c75ab39ccde484f088bcef8dd78c3b8138beeee258e8cfcad5320e2c516304d5e92d0c04d234412a43a80546087a9
-
SSDEEP
196608:YLQTV93PKEk5UI0YQd/jkhKkQiHmnCQik3CEYv:YefLY3epuKvLSp
Malware Config
Signatures
Files
-
Pass_1234_SetupFile.zip.zip
Password: 1234
-
Setup.exe.exe windows x86
Password: 1234
3e3d633779e35448851e7a9ca7e72522
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
ole32
CoInitialize
Sections
.MPRESS1 Size: 4.5MB - Virtual size: 11.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
fonts/BOD_BLAI.TTF
-
fonts/BOD_I.TTF
-
fonts/CALISTB.TTF
-
fonts/CALISTBI.TTF
-
fonts/CENTAUR.TTF
-
fonts/Cabana-Regular.ttf
-
fonts/bold_0.ttf
-
fonts/browa.ttf
-
fonts/browau.ttf
-
fonts/browauz.ttf
-
fonts/browaz.ttf
-
fonts/deathrattlebb_reg.ttf
-
langs/Croatian.ini
-
langs/Czech.ini
-
langs/Danish.ini
-
langs/English.ini
-
langs/Finnish.ini
-
langs/Hebrew.ini
-
langs/Hungarian.ini.ps1
-
langs/Indonesian.ini
-
langs/Japanese.ini
-
langs/Kazakh.ini
-
langs/Korean.ini.ps1
-
langs/Kurdish.ini
-
langs/Lithuanian.ini
-
langs/Norwegian.ini
-
langs/SimpChinese.ini
-
langs/Sinhala.ini
-
langs/Slovak.ini
-
langs/Swedish.ini
-
langs/Thai.ini
-
langs/TradChinese.ini
-
langs/Ukrainian.ini
-
langs/Uyghur.ini
-
langs/UyghurLatin.ini
-
langs/Uzbek.ini
-
langs/Vietnamese.ini