Setup[.]zip | Triage

Resubmissions

22/10/2023, 12:07

231022-panv1agb8t 7

Sharing

Copy URL Twitter E-mail

General

Target

Setup.zip
Size

6.4MB
MD5

041c5058aee2d2bf85283528464ac5f4
SHA1

9090a78fdb2756540239ebf5631bf3e5261ec236
SHA256

b9c676064ebadee4e879064de994ba2ef131841fa118a6a01f55c6b3b8074e6b
SHA512

7294acc24d30ccd1b7dc82c7b9811b76af571d07ddb38d2240575c0354ce9d033180e4d01d684a12e6aef94886e3bf05677d1574a1742c4a3c4c710fb320ecf9
SSDEEP

98304:sDGoH2a6bcZ7Kk+g+JOxa1zgkVH/8nokZZRSTa+lWldNkMw2RbHDc2IJT0c:yH20NKkw1gMH0nZbRSO+lWzKMhRbHDmL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Setup.exe

Files

Setup.zip
.zip
Setup.exe
.exe windows:6 windows x86

9b6f3f808f78d81fe0f909afd50d547c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32NextW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

msvcrt

memset

Sections

.text
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

[0]
Size: 740.1MB - Virtual size: 740.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.#Y,
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.XE|
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Jc[
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ