Static task
static1
Behavioral task
behavioral1
Sample
auxsetup.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
auxsetup.exe
Resource
win10v2004-20230915-en
General
-
Target
auxsetup.exe
-
Size
68KB
-
MD5
19953bd572242cff2fd44a488c364a64
-
SHA1
35363bde3d083afa9efeb320ee12e990d46b27cd
-
SHA256
10bf784fdd5176d43d65297121449fce9caed536936cb36df4a842509a30e3db
-
SHA512
1d3e4efce3528ad97f8098eda5415503d6b2c02702c17742e3fefcc0e46269f7d42e7cf0fb457edf0f2fb3f507ece25a14296d05dbc2dfe72297fd0abfd2592d
-
SSDEEP
1536:E+tKWJMB6rYzqcTNbldljskUIkMJM54dtFhnCy:EaKdXllLJM54dt6y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource auxsetup.exe
Files
-
auxsetup.exe.exe windows:4 windows x86
2710d61398df754a051cc1694b6a509f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerInstallFileA
kernel32
FlushFileBuffers
CloseHandle
CreateFileA
HeapSize
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteConsoleW
GetConsoleOutputCP
GetWindowsDirectoryA
GetModuleFileNameA
FormatMessageA
GetLastError
GetFullPathNameA
DeleteFileA
GetLocaleInfoA
SetHandleCount
WriteConsoleA
SetStdHandle
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
user32
GetMessageA
DispatchMessageA
TranslateMessage
LoadIconA
LoadCursorA
RegisterClassA
CreateDialogParamA
ShowWindow
UpdateWindow
DefWindowProcA
DialogBoxParamA
DestroyWindow
PostQuitMessage
SetDlgItemTextA
EndDialog
GetDlgItem
MessageBoxA
SendMessageA
SetWindowTextA
advapi32
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegSetValueExA
shell32
ShellExecuteA
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ