Static task
static1
Behavioral task
behavioral1
Sample
Set-up.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Set-up.exe
Resource
win10v2004-20220901-en
General
-
Target
Set-upModified.7z
-
Size
5.4MB
-
MD5
474b564cca12d55a1e1c0b6a30848eac
-
SHA1
dd77dd6200cc9d2a4595822b7ca2322843198d83
-
SHA256
3fcbafe4ca8852e92484957453bea5eb4ba4ffc81ad3108933e2d5e0ab9a79ba
-
SHA512
6f0c29d35aeaa2fc0f2fd32597aef32d11f92bab98cdeed2c0ae1c3b955f33d4796ddfde541e333b8fb2c5883074b37e86fefd5bdede61b45b71cc3341bfa0fd
-
SSDEEP
98304:ON4PCgfuu7J0DKfn/7k0QnY4cPZfTjf/h2gU2H8T50AxiX66QVWlr2:ON4PFf9J+Kf/k1gXf/Q50AxBCi
Malware Config
Signatures
Files
-
Set-upModified.7z.7z
-
Set-up.exe.exe windows x64
a134c70472750a73bd9faac2db8b0d3a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
WriteProcessMemory
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 450KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kbt0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kbt1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kbt2 Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ