Behavioral task
behavioral1
Sample
lsetup.exe
Resource
win7-20231215-en
General
-
Target
492c10b47d08992c30cd6789f80f675a
-
Size
1.1MB
-
MD5
492c10b47d08992c30cd6789f80f675a
-
SHA1
7a7ad024e841beb53d3ae268eda6f77aaf240b4f
-
SHA256
41165a7dad417347e995b21b210e8363b3d1fc2a75a1d2cbe660636a90e51499
-
SHA512
947dd4a30208fb782e4f7afbb79c41f0cd805bd4dce6173879c0cd32d9c099d06105464703196615fd26b6fadb6009e79e5bc91acf2631b5833a78dd20b9e707
-
SSDEEP
24576:AqWZlObi55KwxJxopbuAD5Ou2d4a79hC46SwCpAPea06:ANMbi5KWJypbuAD8Xdr9hCB/CWPG6
Malware Config
Signatures
-
resource yara_rule static1/unpack001/lsetup.exe aspack_v212_v242 -
resource yara_rule static1/unpack001/lsetup.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/lsetup.exe
Files
-
492c10b47d08992c30cd6789f80f675a.rar
-
lsetup.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.guruX Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
下载说明.htm.html .js polyglot