Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20220812-en
General
-
Target
Use_55500_As_Passw0rd.rar
-
Size
4.1MB
-
MD5
fab26682ba1a848484d1b6ebda73106d
-
SHA1
c0f7c0704bf5fc937fba2048c6c45ad25a970fde
-
SHA256
4a09459d095915e4ea732d5fd9aa453e0a05603baa711696bcc9c9f479cbcecf
-
SHA512
abfe723376fd80e6068e16d5a1931143adf67743b75c08299b7c0891468578f90e02f01403079e1fad5e376d9224160fe92cc52a8d0bc91e57289c9ad59acd68
-
SSDEEP
98304:S4gq6GfAH3NqJseMsfLJk/PtYZPD4LUPw7HyFo:S4gq6G446ePLJk/6DpPwrN
Malware Config
Signatures
Files
-
Use_55500_As_Passw0rd.rar.rar
Password: 55500
-
Setup.exe.exe windows x86
Password: 55500
ba682b08474414ef441da52664156d0d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
ole32
CoCreateInstance
oleaut32
VariantInit
user32
GetProcessWindowStation
Sections
.MPRESS1 Size: 3.4MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE