Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20220812-en
General
-
Target
Setup.exe
-
Size
304.4MB
-
MD5
0a2a57716603697bf34d899ae66d5e12
-
SHA1
ae52608e5fb40784647f245fdf8b4038ff7a3ec5
-
SHA256
cea6a65de6dd5d008f5faefcbee129e789e3604ddf8dee5f45507ef6e24e48ca
-
SHA512
7f54984aa947147252650d348a955651e7f0ee3a6ef37101fe81472747c6ad72bf58dedf0c581724b39f3a71987ae18fa5756226c110494560e7ea3bf375a71c
-
SSDEEP
98304:nHQQoS4LmfXlgxEkwqsBF7g+T52fSR5UDjLe7Q:wQptqTKT0u5SH
Malware Config
Signatures
Files
-
Setup.exe.exe windows x86
da632712d5c4dea729db1c34d89d62c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
memset
kernel32
_llseek
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.hqlk1 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xytw3 Size: 876KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kbbgl Size: 300.0MB - Virtual size: 300.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ