Static task
static1
Behavioral task
behavioral1
Sample
MachineSetup.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
MachineSetup.exe
Resource
win10v2004-20231020-en
General
-
Target
bc8574fd7fc55b50b1e69db7c695c8d075330641483fd76334e1e224fbd7d5ae.zip.zip
-
Size
1.5MB
-
MD5
eab6a82e212758af9518b398df95e844
-
SHA1
84d7a374ce12a09ea37ea52f7320f9ec08fa1a20
-
SHA256
03d2665e62efa7dae8f93d77c3c097c12419041f79436309f9a2b3ad09354105
-
SHA512
a5f109b2c5aec7b3ce0922c5b9038b4543f0f1ee64f96ee9c9e60e81a20fcedb6df8126bbdf9b18a8541d72e14e3e1b36fcd9b815733f1df5475e0f3761d9568
-
SSDEEP
24576:2IlE2MKBdhcSMYYqTiN4dY0eeXk2RaLyMZSOZGJv9rcOcJtJc2Njx+P:HlE3EdaSveydYb18bMjiVrFcJjcOjEP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/MachineSetup.exe
Files
-
bc8574fd7fc55b50b1e69db7c695c8d075330641483fd76334e1e224fbd7d5ae.zip.zip.zip
Password: infected
-
bc8574fd7fc55b50b1e69db7c695c8d075330641483fd76334e1e224fbd7d5ae.zip.zip
-
MachineSetup.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ