Behavioral task
behavioral1
Sample
HLSLoginscreenSetup.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
HLSLoginscreenSetup.exe
Resource
win10v2004-20230831-en
General
-
Target
cc260ba4fcbd2ec3851eaa4c1a60c28d1f3dda75f34daf849f9a86198b1b95e1
-
Size
689KB
-
MD5
1d9c6b2854c8825380b33a13d07a741e
-
SHA1
5e6f03f768394f0aeb426cb445efb94b1ad3b902
-
SHA256
cc260ba4fcbd2ec3851eaa4c1a60c28d1f3dda75f34daf849f9a86198b1b95e1
-
SHA512
ef6194c8e98d8fd179bbff131e4211fc5363e73ebe1744b5d86e9c1b8faf8f87cfc77ebe39e32e1af3701306f72a17825d26951228297e212bff98be58347c37
-
SSDEEP
12288:WfAZIyfnIhzWctJex+R7JeVHPWrCn93wUxUFysMhdJhv3K3rF7OEIBK/mve7vX3w:+AMXe87sRPiC93wUxNbQZOnAvA
Malware Config
Signatures
-
resource yara_rule static1/unpack001/HLSLoginscreenSetup.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HLSLoginscreenSetup.exe
Files
-
cc260ba4fcbd2ec3851eaa4c1a60c28d1f3dda75f34daf849f9a86198b1b95e1.zip
-
HLSLoginscreenSetup.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE