Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20220812-en
General
-
Target
Use_1234_As_Passw0rdd.rar
-
Size
1.3MB
-
MD5
59d95d66cfe71f93cd3113feb17cd4a5
-
SHA1
193ccc477ddae254f3648a8c7ab172d181f60724
-
SHA256
380bbb66ea5ea8af49ce5c2305fb7a28baef073a1cf0a3a11fcfbdbd81b12b53
-
SHA512
71f2c465cdc9bfcc88b3d87a842995e27348651b43db17791a82ee397e4c0c24f5adb303f50ced34b05c4338a6a46d73030e818f245c66ce55bdba2d131520ae
-
SSDEEP
24576:2pYrE2YIqKaJ5aDIQ64sjwFsSTZ7u+z3AF+5vik7QabeXwx84VMT2Bd1nZ7nCp:2mrYo8MDINRqxz383kdbeU8NTQZ7m
Malware Config
Signatures
Files
-
Use_1234_As_Passw0rdd.rar.rar
Password: 1234
-
Setup.exe.exe windows x64
Password: 1234
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
langs/Croatian.ini
-
langs/Danish.ini
-
langs/English.ini
-
langs/Finnish.ini
-
langs/Hebrew.ini
-
langs/Hungarian.ini.ps1
-
langs/Indonesian.ini
-
langs/Japanese.ini
-
langs/Kazakh.ini
-
langs/Korean.ini.ps1
-
langs/Kurdish.ini
-
langs/Norwegian.ini
-
langs/SimpChinese.ini
-
langs/Sinhala.ini
-
langs/Slovak.ini
-
langs/Swedish.ini
-
langs/Thai.ini
-
langs/TradChinese.ini
-
langs/Ukrainian.ini
-
langs/UyghurLatin.ini
-
langs/Uzbek.ini
-
langs/Vietnamese.ini