Static task
static1
Behavioral task
behavioral1
Sample
Setup_Win_30-01-2023_19-39-33.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Setup_Win_30-01-2023_19-39-33.exe
Resource
win10v2004-20221111-en
General
-
Target
Setup_Win_30-01-2023_19-39-36.zip
-
Size
762KB
-
MD5
2d43767909a6204a72bd791368908f27
-
SHA1
5bf461db22a087dced7b3f4577b0180b7fa8ec2b
-
SHA256
f564bf0fb0f89ff014faf854c597eb96103e13b79600826d6112d082b9e6d263
-
SHA512
2fe53bae1fd742f36275505ff996c4f5e4506cfcd05051f62406b5e317a478d56cda84164a2c314cbbefff34dfbf8fc6558c2f8e1ae56c1473e7aca90cdf1971
-
SSDEEP
1536:qMgtLzMkG1uzlDfFhJnT1MFa7NrJFAAscohumgNqK4Y:QVwdEZDdbakch1gNIY
Malware Config
Signatures
Files
-
Setup_Win_30-01-2023_19-39-36.zip.zip
-
Setup_Win_30-01-2023_19-39-33.exe.exe windows x64
29e864ceeed4763638faaa819e2aa8a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
comctl32
InitCommonControlsEx
kernel32
Sleep
GlobalFree
ReadFile
GlobalAlloc
GetMailslotInfo
CreateEventA
CreateMutexA
CreateThread
GetVersionExA
GetComputerNameA
FlushFileBuffers
CreateFileA
LocalUnlock
CreateMailslotA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
MultiByteToWideChar
HeapSize
LocalLock
LocalAlloc
GetEnvironmentVariableA
LocalFree
GetLastError
CloseHandle
HeapReAlloc
GetOEMCP
GetACP
HeapFree
HeapAlloc
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapSetInformation
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RaiseException
RtlPcToFileHeader
RtlVirtualUnwind
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
user32
LoadMenuA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
DefFrameProcA
MessageBoxA
MessageBoxW
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassExA
GetParent
GetSubMenu
SendMessageA
EnableMenuItem
DrawMenuBar
GetClientRect
MoveWindow
DefMDIChildProcA
GetWindowLongA
gdi32
GetStockObject
advapi32
CloseServiceHandle
OpenSCManagerA
EnumServicesStatusA
OpenServiceA
QueryServiceConfigA
shell32
Shell_NotifyIconA
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ