Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230221-en
General
-
Target
setup.exe
-
Size
414KB
-
MD5
bbce0a78e1eaeb6b67ebbf0a61fdbe49
-
SHA1
5450ba8f72b6aa6c2e0a5f07566837e1bbe5a64e
-
SHA256
1e164ff1d0033430e6e3db9ae0af282bf83e5c6efcff31832c4851bffd51ac0e
-
SHA512
f6925e032a85446a659f360480f202eb41b7a7734aa6ddf9839930ec88e2fee79886276fe1478c8c533df0d6820c5a24da5831e42cd33e1089a2186b86d63d60
-
SSDEEP
12288:PzGFfn4yW7MLE/I1K1My2YdoFCyT+vmJyKCL:rGFwgoI1Py2AgT+vmJhCL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource setup.exe
Files
-
setup.exe.exe windows x64
55f3d8c5c8c898db9d2a013fda1b50c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetUserDefaultLCID
LoadLibraryW
DeleteCriticalSection
GetCurrentProcessId
GetModuleHandleW
GetTickCount
ReadFile
GetFileSizeEx
GetTempPathW
Sleep
SetEvent
GetVersionExA
GetEnvironmentStringsW
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
SetEndOfFile
ReadConsoleW
HeapSize
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
EnumSystemLocalesW
OutputDebugStringW
HeapReAlloc
GetFileType
HeapAlloc
HeapFree
GetModuleHandleExW
LoadLibraryExW
SetThreadLocale
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId
QueryPerformanceCounter
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCPInfo
DecodePointer
EncodePointer
GetStringTypeW
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
AttachConsole
OutputDebugStringA
WriteConsoleA
GetStdHandle
GetFileTime
MoveFileW
SetDllDirectoryW
MapViewOfFile
CopyFileW
FreeLibrary
CreateProcessW
GetFileSize
MoveFileExW
CreateFileMappingA
GetProcAddress
SetCurrentDirectoryW
GetCurrentDirectoryW
CloseHandle
DeleteFileW
GetFileAttributesExW
GetLastError
UnmapViewOfFile
GetFileAttributesW
CreateFileW
FindClose
GetModuleFileNameW
SetFileTime
RemoveDirectoryW
WriteFile
FindNextFileW
GetFullPathNameW
GetCommandLineW
GetSystemDirectoryW
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
GetCurrentProcess
EnterCriticalSection
SetLastError
RtlUnwindEx
FindFirstFileExW
WriteConsoleW
RtlPcToFileHeader
FindFirstFileW
IsValidLocale
CreateDirectoryW
user32
EndDialog
GetWindowPlacement
BeginDeferWindowPos
IsDialogMessageW
IsDialogMessageA
EndDeferWindowPos
DialogBoxParamW
GetWindowTextLengthW
GetMessageW
RegisterClassW
DeferWindowPos
CallWindowProcW
MonitorFromPoint
DispatchMessageA
DestroyWindow
IsWindowVisible
SetWindowPos
SetActiveWindow
SetWindowLongPtrW
CreateWindowExW
IsWindow
EnableWindow
LoadIconA
GetClassNameW
SendMessageA
CreateWindowExA
CreateDialogParamW
GetParent
PostQuitMessage
GetMessageA
LoadCursorA
DefWindowProcW
SetWindowTextA
SendMessageW
GetScrollInfo
GetWindowLongPtrW
TranslateAcceleratorA
GetDlgItemTextA
DispatchMessageW
SetTimer
GetMonitorInfoW
CallWindowProcA
PeekMessageW
GetWindowTextA
PostMessageW
AttachThreadInput
GetDlgItemTextW
SendDlgItemMessageW
MessageBoxA
MoveWindow
IsDlgButtonChecked
DefWindowProcA
SetFocus
BringWindowToTop
TranslateAcceleratorW
TranslateMessage
SendDlgItemMessageA
SetDlgItemTextA
GetDlgItemInt
SystemParametersInfoA
GetClientRect
GetDlgItem
PeekMessageA
GetWindowLongPtrA
KillTimer
CheckDlgButton
SetDlgItemInt
SetWindowLongPtrA
UpdateWindow
SetForegroundWindow
InvalidateRect
IsIconic
GetCursorPos
GetWindowTextW
GetWindowThreadProcessId
LoadStringW
GetForegroundWindow
GetWindow
GetWindowRect
MessageBoxW
PostMessageA
ScreenToClient
GetSystemMetrics
SetWindowTextW
ShowWindow
SetClassLongPtrA
SetDlgItemTextW
advapi32
GetTokenInformation
GetLengthSid
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken
GetSidSubAuthority
GetSidSubAuthorityCount
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptAcquireContextA
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegDeleteKeyW
RegCloseKey
AddAccessAllowedAce
ole32
CoInitialize
CoCreateInstance
CoUninitialize
Sections
.text Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ