StartSetup_20221[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

StartSetup_20221.exe
Size

18.9MB
MD5

a2639cd758e257eee230a1b5a5e7ca99
SHA1

c5d3b9ac835ac57e91e48dede052fee3c2ae7ccf
SHA256

3bddd99c3a635820aad4f37a5d29f1d4aadf79074442473d50f4992e86fa6a29
SHA512

f24e8de91e221ae0214c34c4b7fdd34a83a1527eb25203dc8320be112d9a33c958370a46b562e21760d8c576e264ea5173d44de61832c945ea975fb9ab419ea4
SSDEEP

393216:k70sggdKTyaU+xCIJsJbMMrTyz/w01UpKVqnxQqKd:nsnK0ZbTHyz/6bxQ7d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
StartSetup_20221.exe

Files

StartSetup_20221.exe
.exe windows:5 windows x86

43e128541977d91674a572c3cc322374

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

winmm

timeGetTime

comctl32

ImageList_GetImageCount
ImageList_EndDrag
ImageList_GetIcon
ImageList_GetDragImage
ImageList_Add
ImageList_Write
FlatSB_SetScrollInfo
ImageList_Read
ImageList_DrawEx
ImageList_GetIconSize
ImageList_Destroy
ImageList_GetBkColor
ImageList_DragMove
ImageList_DragEnter
FlatSB_GetScrollPos
ImageList_DragLeave
ImageList_SetBkColor
ImageList_SetImageCount
ImageList_BeginDrag
ImageList_SetIconSize
ImageList_DrawIndirect
ImageList_Create
ImageList_DragShowNolock
InitializeFlatSB
FlatSB_GetScrollInfo
FlatSB_SetScrollProp
ImageList_Remove
ImageList_Draw
_TrackMouseEvent
FlatSB_SetScrollPos

shell32

SHGetFolderPathW
ShellExecuteExW
Shell_NotifyIconW
ShellExecuteW

user32

HideCaret
DestroyMenu
MapVirtualKeyW
CopyImage
WindowFromPoint
SetClassLongW
ClientToScreen
LoadKeyboardLayoutW
DrawFrameControl
DefMDIChildProcW
GetCursor
InsertMenuW
SetWindowTextW
EmptyClipboard
CharLowerBuffW
KillTimer
EnumWindows
SetActiveWindow
SetWindowPos
GetKeyboardLayoutList
GetMenuItemID
LoadBitmapW
SendMessageW
GetSysColorBrush
SetWindowsHookExW
MonitorFromWindow
LoadCursorW
DeleteMenu
ShowWindow
IsDialogMessageA
DestroyWindow
MessageBeep
CharNextW
SetFocus
DefWindowProcW
EnumDisplayMonitors
EnumThreadWindows
SetWindowRgn
MapWindowPoints
GetClassInfoExW
RemoveMenu
EnableWindow
IsIconic
InflateRect
RegisterClassW
IsDialogMessageW
GetMessageExtraInfo
GetWindowPlacement
WaitMessage
GetMenuItemCount
RemovePropW
CreateIcon
IsClipboardFormatAvailable
SetWindowLongW
SendMessageA
CharUpperBuffW
GetWindowThreadProcessId
IsZoomed
GetWindowTextW
GetKeyboardState
OpenClipboard
UpdateWindow
GetForegroundWindow
IsWindow
GetClassNameW
CheckMenuItem
SystemParametersInfoW
SetTimer
SetScrollInfo
PeekMessageA
GetKeyNameTextW
ShowScrollBar
ActivateKeyboardLayout
GetMenuState
IsChild
OffsetRect
GetScrollInfo
CreateIconIndirect
GetDlgItem
SetMenuItemInfoW
CreatePopupMenu
UnregisterClassW
GetIconInfo
DestroyIcon
FindWindowW
PtInRect
SetCursorPos
EnableScrollBar
DrawFocusRect
GetSubMenu
GetMenuItemInfoW
PostMessageW
GetPropW
TrackPopupMenu
CloseClipboard
ShowCaret
EndMenu
DispatchMessageA
PostQuitMessage
GetWindow
CallWindowProcW
EnableMenuItem
SetWindowPlacement
GetLastActivePopup
EndPaint
GetTopWindow
DrawMenuBar
UnhookWindowsHookEx
InvalidateRect
GetMessagePos
ReleaseCapture
GetComboBoxInfo
GetMonitorInfoW
GetDesktopWindow
FrameRect
LoadStringW
TranslateMDISysAccel
FindWindowExW
GetSysColor
GetActiveWindow
DrawEdge
MsgWaitForMultipleObjects
GetClientRect
DrawIconEx
GetMenuStringW
SetPropW
BeginPaint
CallNextHookEx
ShowOwnedPopups
CreateMenu
EnumChildWindows
DefFrameProcW
GetMenuItemRect
AdjustWindowRectEx
SetMenu
SetCapture
GetScrollRange
GetCursorPos
GetClassInfoW
GetSystemMenu
GetSystemMetrics
GetClipboardData
SetClipboardData
DrawTextExW
IsRectEmpty
RegisterWindowMessageW
DrawTextW
FillRect
MessageBoxW
GetFocus
LoadIconW
GetParent
SetForegroundWindow
ScreenToClient
GetWindowRect
SetCursor
CharLowerW
GetKeyboardLayout
GetMenu
GetDlgCtrlID
EnumClipboardFormats
SetScrollPos
SetScrollRange
RegisterClipboardFormatW
GetDC
ReleaseDC
SetRect
RedrawWindow
GetCapture
GetDCEx
GetScrollPos
DrawIcon
SetParent
IsWindowVisible
ScrollWindow
IsWindowUnicode
DispatchMessageW
MsgWaitForMultipleObjectsEx
IsWindowEnabled
GetKeyState
MonitorFromPoint
GetWindowDC
TranslateMessage
GetKeyboardLayoutNameW
CreateWindowExW
SwitchToThisWindow
CharUpperW
GetWindowLongW
DestroyCursor
InsertMenuItemW
PeekMessageW
GetClassLongW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

oleaut32

SysFreeString
SafeArrayGetLBound
VariantClear
SafeArrayGetUBound
SafeArrayPtrOfIndex
VariantChangeType
VariantInit
SysAllocStringLen
VariantCopy
SafeArrayCreate
GetErrorInfo
SysReAllocStringLen

advapi32

OpenServiceW
GetUserNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumValueW
RegCloseKey
OpenProcessToken
OpenSCManagerA
QueryServiceStatus
RegFlushKey

netapi32

NetApiBufferFree
NetWkstaGetInfo

msvcrt

memcpy
memset

winhttp

WinHttpAddRequestHeaders
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetCredentials
WinHttpConnect
WinHttpGetProxyForUrl
WinHttpReadData
WinHttpQueryAuthSchemes
WinHttpWriteData
WinHttpQueryDataAvailable
WinHttpSendRequest
WinHttpQueryHeaders
WinHttpOpen
WinHttpReceiveResponse
WinHttpSetOption
WinHttpQueryOption
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpCloseHandle
WinHttpSetStatusCallback

kernel32

IsDebuggerPresent
CloseHandle
GlobalAlloc
QueryPerformanceFrequency
GetCurrentProcess
LocalAlloc
GlobalFree
VerifyVersionInfoW
LocalFree
LoadLibraryA
GetThreadPriority
TlsGetValue
LoadLibraryW
ExitProcess
ExitThread
GlobalSize
HeapDestroy
SwitchToThread
GetTickCount
ReadFile
GetVersion
SetLastError
FindNextFileW
GetCurrentThread
GetLocalTime
GetCommandLineW
VirtualAlloc
LockResource
GetStartupInfoW
QueryPerformanceCounter
HeapCreate
WideCharToMultiByte
SetEvent
EnumResourceNamesW
FindFirstFileW
GlobalFindAtomW
InitializeCriticalSection
UnhandledExceptionFilter
EnumCalendarInfoW
GetCPInfoExW
GetSystemInfo
GetUserDefaultUILanguage
VirtualProtect
FreeLibrary
K32EnumProcessModulesEx
GetStdHandle
CompareStringW
CreateThread
LCMapStringW
LoadResource
WriteFile
TlsSetValue
GlobalHandle
MulDiv
GetVersionExW
FindClose
FreeResource
EnterCriticalSection
SetThreadPriority
Sleep
SetErrorMode
ResetEvent
GetModuleHandleW
TerminateThread
CreateEventW
GlobalUnlock
VerSetConditionMask
GetLastError
RtlUnwind
VirtualQuery
MultiByteToWideChar
CreateDirectoryW
GetModuleFileNameW
IsValidLocale
FormatMessageW
SizeofResource
GlobalLock
GlobalAddAtomW
GetCurrentThreadId
GetProcAddress
HeapFree
SetFilePointer
LeaveCriticalSection
DeleteCriticalSection
MoveFileW
CreateMutexW
CreateFileW
GetDiskFreeSpaceW
GlobalDeleteAtom
SetThreadLocale
lstrlenW
GetDriveTypeW
GetACP
FindResourceW
GetLocaleInfoW
CreateProcessW
GetDateFormatW
GetFileSizeEx
GetCurrentProcessId
WaitForMultipleObjectsEx
ResumeThread
GetCPInfo
VirtualFree
DeviceIoControl
SuspendThread
LoadLibraryExW
GetExitCodeThread
WaitForSingleObject
SetEndOfFile
FileTimeToSystemTime
GetFileAttributesW
RaiseException
GetThreadLocale
GetTimeZoneInformation
GetFullPathNameW
HeapAlloc
GetSystemDefaultUILanguage
VirtualQueryEx

ole32

CoTaskMemAlloc
CoUninitialize
CoCreateInstance
OleInitialize
IsEqualGUID
CoTaskMemFree
OleUninitialize
CoInitialize

gdi32

GetTextMetricsW
ExcludeClipRect
RectVisible
RestoreDC
GetBrushOrgEx
SetWinMetaFileBits
SetBrushOrgEx
GetPixel
PolyBezier
SetGraphicsMode
GetEnhMetaFileHeader
GetTextExtentPoint32W
CreateCompatibleBitmap
PolyBezierTo
SelectPalette
CreateBitmap
SetDCPenColor
AngleArc
GetEnhMetaFilePaletteEntries
GetEnhMetaFileBits
SetEnhMetaFileBits
DeleteDC
GetPaletteEntries
Chord
SetStretchBltMode
CreateFontIndirectW
SetBkColor
ArcTo
GetNearestPaletteIndex
PlayEnhMetaFile
SetRectRgn
Pie
MaskBlt
GetStretchBltMode
SetTextColor
GetRgnBox
CreatePalette
SetROP2
GetSystemPaletteEntries
UnrealizeObject
CreateRectRgn
ExtFloodFill
BitBlt
SetDIBits
PatBlt
CreateHalftonePalette
GetWinMetaFileBits
MoveToEx
GetWindowOrgEx
CreateDIBSection
SelectObject
SaveDC
GetEnhMetaFileDescriptionW
Polyline
Ellipse
IntersectClipRect
StretchBlt
GetCurrentPositionEx
EnumFontFamiliesExW
GetDIBColorTable
DeleteObject
SetPixel
SetWindowOrgEx
CombineRgn
GetDeviceCaps
RealizePalette
GetDIBits
LineTo
GetViewportOrgEx
ExtTextOutW
GetTextColor
GetStockObject
CreateDIBitmap
CreateBrushIndirect
GetClipBox
GdiFlush
CreatePenIndirect
Polygon
Arc
Rectangle
SetWorldTransform
CopyEnhMetaFileW
GetObjectW
GetCurrentObject
CreateRoundRectRgn
SetDIBColorTable
DeleteEnhMetaFile
ExtCreateRegion
FrameRgn
RoundRect
SetBkMode
SetViewportOrgEx
GetBitmapBits
CreateSolidBrush
CreateCompatibleDC
GetTextExtentPointW
GetBkMode

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 497KB - Virtual size: 497KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 105KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 88B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 438KB - Virtual size: 438KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43e128541977d91674a572c3cc322374

Headers

File Characteristics

Imports

winmm

comctl32

shell32

user32

version

oleaut32

advapi32

netapi32

msvcrt

winhttp

kernel32

ole32

gdi32

Exports

Exports

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.itext Size: 9KB - Virtual size: 8KB

.data Size: 497KB - Virtual size: 497KB

.bss Size: - Virtual size: 105KB

.idata Size: 13KB - Virtual size: 13KB

.didata Size: 4KB - Virtual size: 3KB

.edata Size: 512B - Virtual size: 149B

.tls Size: - Virtual size: 88B

.rdata Size: 512B - Virtual size: 93B

.reloc Size: 260KB - Virtual size: 260KB

.rsrc Size: 438KB - Virtual size: 438KB

.text
Size: 2.7MB - Virtual size: 2.7MB

.itext
Size: 9KB - Virtual size: 8KB

.data
Size: 497KB - Virtual size: 497KB

.bss
Size: - Virtual size: 105KB

.idata
Size: 13KB - Virtual size: 13KB

.didata
Size: 4KB - Virtual size: 3KB

.edata
Size: 512B - Virtual size: 149B

.tls
Size: - Virtual size: 88B

.rdata
Size: 512B - Virtual size: 93B

.reloc
Size: 260KB - Virtual size: 260KB

.rsrc
Size: 438KB - Virtual size: 438KB