Behavioral task
behavioral1
Sample
setup-x86_64.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
setup-x86_64.exe
Resource
win10v2004-20240226-en
General
-
Target
setup-x86_64.exe
-
Size
1.3MB
-
MD5
15b60523e4bd3a52fb0617eb8c6a9859
-
SHA1
30cad5e946a181d48ab880d5d13d6fd0a7de3e58
-
SHA256
9aeacdcf8ff71e2d1a1f9b4685eac12c4de4bb312d44ddac2c7b226f5952bfde
-
SHA512
dad4fef03bd8ce946915119b763d784a8c7d6927a5aa96d45ba6729fedaf6756b5aee1a610b5100e94232bb21edcc9cc421a88bbb2a09cdf1b09f13571434528
-
SSDEEP
24576:le6lGQd9MZ3zJQ78ca+2IPqL4uFJZsJTzZAKIZZK51NmhX+S4u:zGQ/h4ePqLn5WzZAKIKXN6/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource setup-x86_64.exe
Files
-
setup-x86_64.exe.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE