General
-
Target
setup.dat
-
Size
1.8MB
-
MD5
edb1c88486cfed32ce0fb64a9ca8973d
-
SHA1
19658e645841d24a99a887766f6344f56d0a295c
-
SHA256
999cc73de86dd2e8e851ffafd557b64fff45e294ad373864c0e5148386350cde
-
SHA512
9c5ab0accca0f4518afa7d22ac798aacf1488cbe2b1437ac602f94ad433fc11e4bec07a497adc64a1c23e97dbbc0966ddabd95b2fbd9e832334f6115d290e083
-
SSDEEP
24576:VEgW6snlAQB4jEIE0ck8CVmia+UeUrQ5Sd+O9TZl1t4ixs93nQJ/HxGD5H/7se0q:St+QBTdMUipUE5olwiSm/i5H/b0Y7F
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
setup.dat.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE