Static task
static1
Behavioral task
behavioral1
Sample
LauncherPC_S0FT/Set-up.exe
Resource
win7-20240221-en
General
-
Target
LauncherPC_S0FT.zip
-
Size
125.1MB
-
MD5
aab9d836e40219979272748e8b2c1021
-
SHA1
14c4d1f1d76986f3d1d1f8eccf30872393408e4c
-
SHA256
617fb3247090ea06850a68b7b287ef8f3f856859828c4009ea33bf9375575372
-
SHA512
62580aa0d7e7bc2021d21767d064deb2849adab11b1a691f52ebbb37873c5082c60003e6f2701c4dd427adb439af5a675e06f207c5c76ad116272f8b765000d5
-
SSDEEP
3145728:z8zevpmRpbeDA7d9E0+yHKgSxaLS2UbtvMYJ3p/NPaa:zbvpmRpbd7dznHKgSxx2gtvMYJ5/NPaa
Malware Config
Signatures
Files
-
LauncherPC_S0FT.zip.zip
-
LauncherPC_S0FT/Set-up.exe.exe windows:5 windows x86 arch:x86
67aaaa04b312a9ce545979257372c04c
Code Sign
11:7f:03:55:15:52:a9:bd:47:6d:6d:63:6c:a0:81:5eCertificate
IssuerCN=HDD Verbatim Digital EVO-II 5Tb HDWG460EZSTA N300 (4096rpm) 4036Mb 0.5 RtlNot Before22/01/2023, 17:37Not After23/01/2033, 17:37SubjectCN=HDD Verbatim Digital EVO-II 5Tb HDWG460EZSTA N300 (4096rpm) 4036Mb 0.5 Rtl39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03/05/2023, 00:00Not After02/08/2034, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
41:2e:99:8a:40:b8:f2:5a:f4:51:6b:71:2e:c4:cd:63:e2:46:01:a8:73:c5:ed:88:11:d7:e0:58:86:e1:30:f0Signer
Actual PE Digest41:2e:99:8a:40:b8:f2:5a:f4:51:6b:71:2e:c4:cd:63:e2:46:01:a8:73:c5:ed:88:11:d7:e0:58:86:e1:30:f0Digest Algorithmsha256PE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
ord155
msvcrt
strlen
kernel32
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharToOemA
advapi32
RegGetValueA
ole32
CoCreateInstance
oleaut32
SysFreeString
Sections
.text Size: - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tar0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tar1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tar2 Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ