Static task
static1
Behavioral task
behavioral1
Sample
SetupWin25-01-202303-07-46.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
SetupWin25-01-202303-07-46.exe
Resource
win10v2004-20221111-en
General
-
Target
SetupWin25-01-202303-07-46.exe
-
Size
334KB
-
MD5
123880e9b951c081dff5fdd1d3cfe87c
-
SHA1
352f59974b8aad0639a7cf7bb4dd5ce261f171b2
-
SHA256
b41f6bc6c4c05806d1b9e79dd7b361d425902a9c3a3ea92b9ded8b0b0a76f3af
-
SHA512
24e261f6762dc9467e938efa5fe31aa888b875c0757c686fa976694a926d443fcf2d9d644edf177a0ce4ada90a87ec0a66b0286ad73e62d62250bc368818419c
-
SSDEEP
6144:AAHUFNIhsCZaNuaG8Hya5EDZObAnvx7LzKJk3Y1e5KRXmQzFtYVS:xUFUvxaZnaD7+JZCS
Malware Config
Signatures
Files
-
SetupWin25-01-202303-07-46.exe.exe windows x64
6e34f235de42d6bbfa98671aa88e0e47
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
CreateFileA
RtlLookupFunctionEntry
RtlUnwindEx
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
RaiseException
RtlPcToFileHeader
GetDateFormatA
GetTimeFormatA
HeapReAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapSize
ExitProcess
GetACP
FlsGetValue
SetFilePointer
FlsFree
FlsAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
LCMapStringA
LCMapStringW
RtlVirtualUnwind
GetStringTypeA
GetStringTypeW
HeapSetInformation
HeapCreate
GetStdHandle
GetTimeZoneInformation
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
WriteFile
ReadFile
GetThreadLocale
GetOEMCP
GetCPInfo
GetLocaleInfoA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
GetModuleFileNameA
GlobalFlags
lstrcmpA
GlobalAlloc
FormatMessageA
LocalFree
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetLastError
lstrcmpW
GetModuleHandleA
GetVersionExA
GlobalLock
GlobalUnlock
GlobalFree
CompareStringW
CompareStringA
GetVersion
GetLastError
MultiByteToWideChar
CreateThread
Sleep
GetFileAttributesA
SetCurrentDirectoryA
SetFileAttributesA
DeleteFileA
FindNextFileA
FindClose
RemoveDirectoryA
LoadLibraryA
MulDiv
GetProcAddress
FreeLibrary
FindFirstFileA
WideCharToMultiByte
lstrlenA
GetPrivateProfileStringA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
FindResourceA
LoadResource
LockResource
SizeofResource
FlsSetValue
user32
ValidateRect
GetWindowThreadProcessId
GetSysColorBrush
DestroyMenu
UnregisterClassA
SetWindowTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
GetFocus
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
GetWindowLongPtrA
SetWindowLongPtrA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
ReleaseDC
GetKeyState
SetForegroundWindow
GetMenu
PostMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
IsWindow
GetWindowLongA
IsWindowEnabled
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
GetDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
MapWindowPoints
GetSystemMetrics
KillTimer
GetDlgItem
BeginPaint
LoadStringA
EndPaint
MoveWindow
GetWindowRect
CreateDialogParamA
DefWindowProcA
GetParent
DestroyWindow
SetFocus
PostQuitMessage
SetDlgItemTextA
GetWindowDC
GetClientRect
DrawTextA
DrawEdge
CreateWindowExA
ShowWindow
SendMessageA
UpdateWindow
SetTimer
MessageBoxA
MessageBoxW
EnableWindow
gdi32
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
OffsetViewportOrgEx
DeleteObject
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
SetTextColor
SetBkMode
CreateFontA
SetMapMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
GetClipBox
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 202KB - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ