Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20230220-en
General
-
Target
Setup.rar
-
Size
17.0MB
-
MD5
ed64bc7f9ee07eb25827b38294d739a9
-
SHA1
167e31c049e121489a19ef2b04ca9673da3642c7
-
SHA256
4d9031edc11a86a49a86b2b0d312ad028e030fe054877fc4ee9c8fd6322ada6f
-
SHA512
63cb7e25a912963798c82dda76179d596cf4f1609d191e081da0f0422c3ac8f1bcf76ecd05f66e5dc4d53d335719977fad999d56cc2eebf4d4dd71be5fab6026
-
SSDEEP
393216:ua1tfIABLK+9P/MdjUJ5oS2cPEx0K6XzailAIMli2WZxrr70j1dcup:vtvBn9P0dj2WS2iDSlihrYj1Zp
Malware Config
Signatures
Files
-
Setup.rar.rar
Password: 2022
-
Data/Debug/Addition.dll
-
Data/Debug/Autoupdater.ini
-
Data/Debug/Cracker.dll
-
Data/Debug/DebugPPF.tmp
-
Data/Debug/DebugPPT.tmp
-
Data/Debug/Helper.dll
-
Data/Debug/Management.log
-
Data/Debug/Resource.dll
-
Data/Debug/main.ini
-
Data/KathaVenge/darkieAlbynRants/akkaPiccageGametic.xml.xml
-
Data/KathaVenge/darkieAlbynRants/alar/carpiAbaculi.xml.xml
-
Data/KathaVenge/darkieAlbynRants/alar/haggisEdictal.xml.xml
-
Data/KathaVenge/darkieAlbynRants/alar/rebeg.xml.xml
-
Data/KathaVenge/darkieAlbynRants/boikoDacryaDeare.xml.xml
-
Data/KathaVenge/darkieAlbynRants/divisi/calycesTeco.xml.xml
-
Data/KathaVenge/darkieAlbynRants/divisi/fixedlyBrodderTelford.xml.xml
-
Data/KathaVenge/darkieAlbynRants/divisi/infightSlidden.xml.xml
-
Data/KathaVenge/darkieAlbynRants/dosing.xml.xml
-
Data/KathaVenge/darkieAlbynRants/durrasKnaveSull/birchesBodikinOaken.xml.xml
-
Data/KathaVenge/darkieAlbynRants/durrasKnaveSull/chanty.xml.xml
-
Data/KathaVenge/darkieAlbynRants/durrasKnaveSull/faucesYaksZelotic.xml.xml
-
Data/KathaVenge/darkieAlbynRants/durrasKnaveSull/labrysJitiAlgate.xml.xml
-
Data/KathaVenge/darkieAlbynRants/durrasKnaveSull/manorsEggnog.xml.xml
-
Data/KathaVenge/darkieAlbynRants/durrasKnaveSull/palki.xml.xml
-
Data/KathaVenge/darkieAlbynRants/durrasKnaveSull/whereatRaunchyOtc.xml.xml
-
Data/KathaVenge/darkieAlbynRants/ensafeDoyenneWhiled/dawenSling.xml.xml
-
Data/KathaVenge/darkieAlbynRants/ensafeDoyenneWhiled/docentsTuantKrona.xml.xml
-
Data/KathaVenge/darkieAlbynRants/greablyClines.xml.xml
-
Data/KathaVenge/darkieAlbynRants/ihram.xml.xml
-
Data/KathaVenge/darkieAlbynRants/knutIsmailiProteus.xml.xml
-
Data/KathaVenge/darkieAlbynRants/nichingHousesKaifs.xml.xml .wsf
-
Data/KathaVenge/darkieAlbynRants/pheneYorubaScarola.xml.xml
-
Data/KathaVenge/darkieAlbynRants/wanyoro.xml.xml
-
Data/KathaVenge/hissers.xml.xml
-
Data/KathaVenge/skyjackHyaenic.xml.xml
-
Data/Language.pimx
-
Data/Main.ini
-
Data/Packaged/Main.ini.xml
-
Data/Packaged/Resource.dll.zip
Password: 2022
-
placeholder.txt
-
Data/Packaged/Utils.dll.xml
-
Data/fillip.xml.xml
-
Data/keyBatussi/cep.xml.xml
-
Data/keyBatussi/indy.xml.xml
-
Data/keyBatussi/jabulDusun.xml.xml
-
Data/keyBatussi/lasUndateWindigo.xml.xml
-
Data/keyBatussi/pisacha.xml.xml
-
Data/keyBatussi/royaleSalmi.xml.xml
-
Data/keyBatussi/trabucoHutreImpark/kilnrib.xml.xml
-
Data/keyBatussi/trabucoHutreImpark/roarerDentist.xml.xml
-
Data/keyBatussi/trabucoHutreImpark/unmews.xml.xml
-
Data/keyBatussi/zonulasFroryWastabl/chiasmTripped.xml.xml
-
Data/keyBatussi/zonulasFroryWastabl/noseMeiosis.xml.xml
-
Data/noahic.xml.xml
-
Data/skybaldMenukiNovate/alkoranCouhage.xml.xml
-
Data/skybaldMenukiNovate/ammines.xml.xml
-
Data/skybaldMenukiNovate/disco.xml.xml
-
Data/skybaldMenukiNovate/fname/garotesDictum.xml.xml
-
Data/skybaldMenukiNovate/fname/hurries.xml.xml
-
Data/skybaldMenukiNovate/fname/reburst.xml.xml
-
Data/skybaldMenukiNovate/fname/sepoys.xml.xml
-
Data/skybaldMenukiNovate/fname/squaredRikshaw.xml.xml
-
Data/skybaldMenukiNovate/fname/trompleTolueneDewax.xml.xml
-
Data/skybaldMenukiNovate/goiterHayrick.xml.xml
-
Data/skybaldMenukiNovate/trilithMassedEmeril.xml.xml
-
Data/unannexFulfil.xml.xml
-
Data/unboat.xml.xml
-
Data/unhairyCorneinEmbulk.xml.xml
-
Data/upfoldsClagged.xml.xml
-
Data/yoginAbaft/densestPleurae/conkingWantage.xml.xml
-
Data/yoginAbaft/densestPleurae/habaera.xml.xml
-
Data/yoginAbaft/densestPleurae/hebamic.xml.xml
-
Data/yoginAbaft/densestPleurae/laithEuterpe.xml.xml
-
Data/yoginAbaft/kaurySkivvyZits/ahurewaWrinklyMorn.xml.xml
-
Data/yoginAbaft/kaurySkivvyZits/bigateIberisShrivel.xml.xml
-
Data/yoginAbaft/kaurySkivvyZits/centerTayerHumpies.xml.xml
-
Data/yoginAbaft/kaurySkivvyZits/darnexShipletLibber.xml.xml
-
Data/yoginAbaft/kaurySkivvyZits/enforthBeclout.xml.xml
-
Data/yoginAbaft/kaurySkivvyZits/junciteFools.xml.xml
-
Data/yoginAbaft/kaurySkivvyZits/plebby.xml.xml
-
Data/yoginAbaft/kaurySkivvyZits/serailsRetenue.xml.xml
-
Data/yoginAbaft/orellinFictiveMincers.xml.xml
-
Data/yoginAbaft/vealierWangleGenii/brominsSubers.xml.xml
-
Data/yoginAbaft/vealierWangleGenii/capa.xml.xml
-
Data/yoginAbaft/vealierWangleGenii/dented.xml.xml
-
Data/yoginAbaft/vealierWangleGenii/emergesMarchenOrchard.xml.xml
-
Data/yoginAbaft/vealierWangleGenii/foamyHeartedRede.xml.xml
-
Data/yoginAbaft/vealierWangleGenii/trescheMurrina.xml.xml
-
Setup.exe.exe windows x86
Password: 2022
ad26d911dbdd51cc6cadfdd1d464e0f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
ReleaseDC
advapi32
GetCurrentHwProfileA
crypt32
CryptProtectData
Sections
.MPRESS1 Size: 3.0MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 253KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE