Setup_20221[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Setup_20221.exe
Size

18.2MB
MD5

f57a38b6fc7882e7cbf14e18644cf642
SHA1

160bf5e6a422c8f0160d6a8b01481ec95403e612
SHA256

a5236cda891f78b0e9857a94eb501d911aa6f690c3f38de5e997b739937725b0
SHA512

e3db675396640df17ae860867e9eac190e539b15f0da519fb2d0d3670b708c4b6a866fd277a03e0e8e200e82d1bd8d5e606f5714a5bbafdcc5db6068089d9fb0
SSDEEP

393216:1GeMwBd1vvhMFTudI8YjtNahHA0tcH+Y56scN9/5Bz2G:AeM21Wu0jCNA0tcH+XD/5Zt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Setup_20221.exe

Files

Setup_20221.exe
.exe windows x86

6bb37dee9483805cded2a4422a7e708f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

winmm

timeGetTime

comctl32

ImageList_GetDragImage
ImageList_EndDrag
FlatSB_SetScrollInfo
ImageList_Add
ImageList_Read
InitializeFlatSB
ImageList_DragMove
ImageList_DrawIndirect
ImageList_GetBkColor
ImageList_SetIconSize
ImageList_Write
FlatSB_SetScrollProp
ImageList_SetBkColor
ImageList_DragShowNolock
ImageList_Destroy
FlatSB_GetScrollInfo
ImageList_DrawEx
ImageList_GetImageCount
ImageList_Draw
ImageList_GetIconSize
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
_TrackMouseEvent
ImageList_GetIcon
ImageList_Create
ImageList_Remove
ImageList_DragEnter
ImageList_BeginDrag
ImageList_DragLeave

shell32

ShellExecuteExW
SHGetFolderPathW
ShellExecuteW
Shell_NotifyIconW

user32

GetSystemMetrics
GetIconInfo
LoadBitmapW
FrameRect
CheckMenuItem
EnumDisplayMonitors
EndMenu
GetCursor
CharUpperBuffW
GetClassInfoW
SetFocus
GetMonitorInfoW
InsertMenuW
SetWindowsHookExW
SetScrollRange
SetWindowPos
GetWindow
IsWindowEnabled
ReleaseCapture
GetLastActivePopup
UnhookWindowsHookEx
GetWindowPlacement
RemovePropW
GetWindowLongW
SetWindowPlacement
SendMessageW
GetKeyboardState
EnableScrollBar
GetMenuItemID
GetMenuState
GetDCEx
SetTimer
SetParent
SetMenuItemInfoW
SetMenu
SetCapture
RegisterClipboardFormatW
GetDesktopWindow
SetForegroundWindow
IsWindow
IsZoomed
RegisterClassW
MsgWaitForMultipleObjectsEx
IsWindowUnicode
IsIconic
WaitMessage
MsgWaitForMultipleObjects
DestroyWindow
GetWindowDC
GetWindowTextW
SetRect
GetClientRect
IsDialogMessageW
SetActiveWindow
SwitchToThisWindow
GetMenuStringW
InvalidateRect
SetScrollInfo
GetDC
MapWindowPoints
GetWindowThreadProcessId
GetPropW
ClientToScreen
LoadKeyboardLayoutW
GetKeyState
RegisterWindowMessageW
RedrawWindow
SystemParametersInfoW
GetSysColorBrush
DrawMenuBar
ShowCaret
TranslateMessage
EnableMenuItem
EnumChildWindows
DestroyCursor
UpdateWindow
PeekMessageA
AdjustWindowRectEx
HideCaret
DrawTextExW
MessageBoxW
GetScrollPos
SetCursor
GetClassNameW
ReleaseDC
EnumWindows
DestroyIcon
ShowOwnedPopups
CallNextHookEx
IsDialogMessageA
DrawIcon
LoadCursorW
PeekMessageW
GetFocus
DrawEdge
SetCursorPos
CharLowerW
KillTimer
MapVirtualKeyW
DispatchMessageW
FindWindowW
BeginPaint
GetClipboardData
DeleteMenu
DefWindowProcW
IsClipboardFormatAvailable
FillRect
CharNextW
TranslateMDISysAccel
EndPaint
GetKeyNameTextW
InsertMenuItemW
SendMessageA
DrawIconEx
SetWindowTextW
GetMenu
MonitorFromWindow
ScreenToClient
GetKeyboardLayout
GetActiveWindow
DefMDIChildProcW
CreatePopupMenu
GetMenuItemInfoW
SetClassLongW
FindWindowExW
GetSysColor
GetMessageExtraInfo
CharLowerBuffW
DestroyMenu
GetForegroundWindow
IsChild
ActivateKeyboardLayout
GetDlgCtrlID
GetKeyboardLayoutList
DrawTextW
ScrollWindow
EnumClipboardFormats
GetSubMenu
GetMessagePos
SetPropW
CreateMenu
PostQuitMessage
ShowWindow
LoadIconW
GetTopWindow
PostMessageW
CreateIcon
GetCapture
DispatchMessageA
GetScrollRange
DrawFrameControl
GetCursorPos
CreateIconIndirect
GetParent
CharUpperW
UnregisterClassW
SetWindowRgn
EnableWindow
LoadStringW
DefFrameProcW
WindowFromPoint
GetClassLongW
ShowScrollBar
GetKeyboardLayoutNameW
EnumThreadWindows
TrackPopupMenu
RemoveMenu
GetWindowRect
CallWindowProcW
GetSystemMenu
GetMenuItemCount
SetWindowLongW
MonitorFromPoint
DrawFocusRect
MessageBeep
GetScrollInfo
IsWindowVisible
SetScrollPos
CopyImage
CreateWindowExW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

oleaut32

SafeArrayCreate
SafeArrayGetUBound
VariantInit
GetErrorInfo
VariantClear
VariantCopy
SafeArrayPtrOfIndex
SysAllocStringLen
VariantChangeType
SysReAllocStringLen
SafeArrayGetLBound
SysFreeString

advapi32

RegFlushKey
OpenSCManagerW
RegEnumKeyExW
GetUserNameW
AdjustTokenPrivileges
OpenProcessToken
OpenServiceW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
LookupPrivilegeValueW
RegEnumValueW
QueryServiceStatus

netapi32

NetApiBufferFree
NetWkstaGetInfo

msvcrt

memcpy

winhttp

WinHttpConnect
WinHttpSendRequest
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpQueryHeaders
WinHttpSetStatusCallback
WinHttpWriteData
WinHttpQueryAuthSchemes
WinHttpQueryDataAvailable
WinHttpAddRequestHeaders
WinHttpSetTimeouts
WinHttpReceiveResponse
WinHttpReadData
WinHttpSetOption
WinHttpSetCredentials
WinHttpGetIEProxyConfigForCurrentUser
WinHttpOpenRequest
WinHttpQueryOption
WinHttpCloseHandle

kernel32

GetCurrentProcessId
GlobalFindAtomW
QueryPerformanceFrequency
HeapCreate
GlobalSize
VirtualQuery
IsDebuggerPresent
MulDiv
GlobalDeleteAtom
GetComputerNameW
IsValidLocale
RaiseException
LoadLibraryA
EnterCriticalSection
SetEndOfFile
SwitchToThread
GetStdHandle
FindClose
GetEnvironmentVariableW
LoadResource
GetUserDefaultUILanguage
GetFullPathNameW
GetDriveTypeW
GetThreadPriority
FindFirstFileW
GetCurrentThread
SetThreadPriority
WaitForSingleObject
CompareStringW
RtlUnwind
GetVersionExW
GlobalAddAtomW
Sleep
FreeResource
FormatMessageW
SuspendThread
InitializeCriticalSection
GetTickCount
SetErrorMode
GetStartupInfoW
SetLastError
lstrlenW
ResetEvent
FileTimeToSystemTime
EnumCalendarInfoW
GetModuleFileNameW
ExitThread
VirtualAlloc
GetThreadLocale
WriteFile
GetCurrentThreadId
TlsGetValue
FindNextFileW
HeapFree
GetProcAddress
EnumResourceNamesW
WaitForMultipleObjectsEx
GetVersion
GetModuleHandleW
WideCharToMultiByte
DeleteCriticalSection
GetFileSize
LoadLibraryExW
QueryPerformanceCounter
LocalFree
DeviceIoControl
GetExitCodeThread
VirtualQueryEx
ExitProcess
VirtualFree
GetCPInfoExW
GetLocalTime
CreateEventW
UnhandledExceptionFilter
LocalAlloc
GetCPInfo
CreateMutexW
VerifyVersionInfoW
FindResourceW
GetACP
GetLastError
GetDiskFreeSpaceW
GlobalHandle
CreateFileW
GetLocaleInfoW
TlsSetValue
SetThreadLocale
SizeofResource
GetFileAttributesW
GetTempPathW
VirtualProtect
GetCommandLineW
GlobalUnlock
GlobalLock
SetFilePointer
HeapDestroy
HeapAlloc
GetCurrentProcess
ResumeThread
TerminateThread
LockResource
LeaveCriticalSection
CreateThread
VerSetConditionMask
MultiByteToWideChar
GlobalAlloc
ReadFile
FreeLibrary
MoveFileW
GetTimeZoneInformation
SetEvent
GetDateFormatW
GetSystemInfo
CloseHandle
GlobalFree
LCMapStringW
LoadLibraryW
CreateDirectoryW
GetSystemDefaultUILanguage

ole32

OleUninitialize
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
OleInitialize
IsEqualGUID

gdi32

CopyEnhMetaFileW
SetViewportOrgEx
GetPaletteEntries
CreateBrushIndirect
SetBkColor
GetWindowOrgEx
ExtFloodFill
DeleteObject
AngleArc
BitBlt
GetCurrentPositionEx
CreateDIBitmap
PlayEnhMetaFile
GetEnhMetaFileDescriptionW
Rectangle
GetEnhMetaFileHeader
SetEnhMetaFileBits
StretchBlt
CreateHalftonePalette
GdiFlush
CreatePenIndirect
Polygon
UnrealizeObject
SetWindowOrgEx
GetEnhMetaFilePaletteEntries
SelectPalette
SetDIBits
GetClipBox
DeleteEnhMetaFile
Ellipse
GetPixel
GetDIBColorTable
ExcludeClipRect
ArcTo
GetTextMetricsW
MaskBlt
CreateCompatibleDC
SaveDC
GetTextExtentPoint32W
GetObjectW
GetDIBits
LineTo
GetBrushOrgEx
SetTextColor
SelectObject
ExtTextOutW
GetStretchBltMode
Pie
Arc
Chord
RealizePalette
RectVisible
CreateRectRgn
SetDIBColorTable
CreateBitmap
PolyBezier
CreateSolidBrush
CreatePalette
GetWinMetaFileBits
FrameRgn
CreateFontIndirectW
GetDeviceCaps
SetPixel
GetStockObject
GetBitmapBits
SetRectRgn
DeleteDC
CreateCompatibleBitmap
SetBrushOrgEx
GetNearestPaletteIndex
SetROP2
GetTextExtentPointW
IntersectClipRect
SetStretchBltMode
SetWinMetaFileBits
GetEnhMetaFileBits
GetRgnBox
Polyline
SetBkMode
EnumFontFamiliesExW
GetSystemPaletteEntries
RoundRect
MoveToEx
CreateDIBSection
RestoreDC
PatBlt
PolyBezierTo

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 27KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 88B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6bb37dee9483805cded2a4422a7e708f

Headers

File Characteristics

Imports

winmm

comctl32

shell32

user32

version

oleaut32

advapi32

netapi32

msvcrt

winhttp

kernel32

ole32

gdi32

Exports

Exports

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.itext Size: 10KB - Virtual size: 9KB

.data Size: 100KB - Virtual size: 99KB

.bss Size: - Virtual size: 27KB

.idata Size: 13KB - Virtual size: 12KB

.didata Size: 3KB - Virtual size: 3KB

.edata Size: 512B - Virtual size: 149B

.tls Size: - Virtual size: 88B

.rdata Size: 512B - Virtual size: 93B

.reloc Size: 272KB - Virtual size: 272KB

.rsrc Size: 132KB - Virtual size: 132KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.itext
Size: 10KB - Virtual size: 9KB

.data
Size: 100KB - Virtual size: 99KB

.bss
Size: - Virtual size: 27KB

.idata
Size: 13KB - Virtual size: 12KB

.didata
Size: 3KB - Virtual size: 3KB

.edata
Size: 512B - Virtual size: 149B

.tls
Size: - Virtual size: 88B

.rdata
Size: 512B - Virtual size: 93B

.reloc
Size: 272KB - Virtual size: 272KB

.rsrc
Size: 132KB - Virtual size: 132KB