Static task
static1
Behavioral task
behavioral1
Sample
Micro-Tech Setup 26.0.10080.0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Micro-Tech Setup 26.0.10080.0.exe
Resource
win10v2004-20221111-en
General
-
Target
Micro-Tech Setup 26.0.10080.0.exe
-
Size
645.7MB
-
MD5
3c6925c9419fc14dad332a3ad1db736d
-
SHA1
dc7ad28bbea71718ff8185bebe6deab097971050
-
SHA256
38cf84ed6f88f914e0c2267c8d245ca2d1164f50c0dfd577c25d529cc523e192
-
SHA512
f6bd1c91a093901966e133ee2858b58e499c0ae574aff40c59a64b517139ce7214320e025533f5a22a3480b6ec043a503750caed949550af7e9cd8452298ce3e
-
SSDEEP
12582912:xdgHyl54dSdhtS+73UjKaLtR2SbkxX529tDDgT4j3hctIu1+sW0fHH:x2Hyl54dSr73UjXtR2mkxX5GoQL0+l0/
Malware Config
Signatures
Files
-
Micro-Tech Setup 26.0.10080.0.exe.exe windows x86
ea40bc9b5f5f78ecfd8e03e07fdf20f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesW
SetFileAttributesW
SetCurrentDirectoryW
CreateFileW
lstrlenA
lstrcmpiA
lstrcpyW
CloseHandle
GetShortPathNameW
GetFileSize
GlobalAlloc
ReadFile
lstrcpyA
SetFilePointer
WriteFile
GlobalFree
GetModuleHandleW
LoadLibraryW
GetProcAddress
FreeLibrary
GetEnvironmentVariableW
GetLastError
GetDiskFreeSpaceW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetCurrentProcess
GetTempPathW
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
CreateDirectoryW
FindFirstFileW
FindClose
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
CompareFileTime
DeleteFileW
FindNextFileW
RemoveDirectoryW
GetModuleFileNameW
GetCurrentDirectoryW
CreateFileA
GetFileTime
SetFileTime
GetVersionExA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
OutputDebugStringA
UnhandledExceptionFilter
VirtualAlloc
VirtualQuery
ExitProcess
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleOutputCP
SetStdHandle
MultiByteToWideChar
WideCharToMultiByte
DeleteFileA
LoadLibraryA
RaiseException
user32
SetFocus
GetWindowTextW
ShowWindow
MessageBoxW
CharNextA
wsprintfA
ExitWindowsEx
CharPrevW
SendMessageW
PostMessageW
LoadStringW
shell32
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
comctl32
ord17
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
ole32
CoTaskMemFree
CoInitialize
CoUninitialize
advapi32
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ