Static task
static1
General
-
Target
setup.exe
-
Size
100KB
-
MD5
86a32420822001437892b20c7390ce48
-
SHA1
a15440c37935728c2ca06287616685e229690045
-
SHA256
285affb35e3bdd990555cd58c08960a1b7f128fbe0154e64c4854e9f5d29fef5
-
SHA512
870279734605913bd76d27ddd119d2e752479ba041e6238793fdf29c9093c38ddd529ec85b2c2b4371103fa44a5bfb75455099f4996ee5e9ada78f1072cb2787
-
SSDEEP
1536:POwCaKI6ErDdZt1RLxGGTTjAiIAZCmDUS1tboTia:PJ36adZt1RhNrfD/1tboTi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource setup.exe
Files
-
setup.exe.exe windows:4 windows x86 arch:x86
d1f93ee5e22b6fcbeb4f432227d5af54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetLastError
GetLogicalDriveStringsA
MultiByteToWideChar
GetDiskFreeSpaceA
GetProcAddress
LoadLibraryA
GetVersionExA
OpenMutexA
GetDriveTypeA
GetEnvironmentVariableA
GetTempFileNameA
CreateProcessA
WritePrivateProfileStringA
GetCommandLineA
CreateDirectoryA
RemoveDirectoryA
GetVolumeInformationA
lstrcmpA
GetLogicalDrives
FindFirstFileA
FindNextFileA
FindClose
GetFileSize
CreateFileA
GetFileInformationByHandle
SetFileTime
ReadFile
GetFileAttributesA
WideCharToMultiByte
FreeLibrary
DeleteFileA
GetCurrentThreadId
LCMapStringW
LCMapStringA
SetEndOfFile
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
CreateThread
TlsAlloc
TlsSetValue
HeapFree
IsBadWritePtr
VirtualAlloc
WaitForSingleObject
SetFileAttributesA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
VirtualFree
HeapCreate
GetWindowsDirectoryA
WinExec
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFilePointer
WriteFile
CloseHandle
CreateMutexA
ReleaseMutex
GetExitCodeProcess
GetExitCodeThread
OutputDebugStringA
GetCurrentThread
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapReAlloc
HeapDestroy
RtlUnwind
ExitProcess
GetVersion
user32
DispatchMessageA
ChangeDisplaySettingsA
TranslateMessage
SendMessageA
PostMessageA
ScreenToClient
RedrawWindow
LoadCursorA
ValidateRgn
ValidateRect
DrawTextA
InvalidateRect
CreateWindowExA
GetSystemMetrics
RegisterClassA
LoadImageA
UpdateWindow
SetForegroundWindow
ShowWindow
ReleaseDC
SetWindowTextA
SetWindowRgn
GetDC
SetWindowPos
SetCursor
SendDlgItemMessageA
GetMessageA
SetCapture
SetDlgItemTextA
wsprintfA
FindWindowA
SetFocus
MoveWindow
GetWindowDC
GetWindowRect
CloseWindow
DialogBoxParamA
GetDlgItemTextA
EndDialog
GetDlgItem
DestroyWindow
GetUpdateRect
GetWindowLongA
GetCursor
SetWindowLongA
SetActiveWindow
DefWindowProcA
IntersectRect
GetUpdateRgn
PostQuitMessage
ReleaseCapture
gdi32
OffsetRgn
SetTextColor
SetBkMode
CombineRgn
CreateRectRgn
BitBlt
SelectClipRgn
DeleteObject
RemoveFontResourceA
DeleteDC
SelectObject
GetPixel
GetObjectA
CreateCompatibleDC
CreateFontIndirectA
AddFontResourceA
PtInRegion
GetTextExtentPoint32A
GetTextExtentExPointA
comctl32
ord17
advapi32
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegEnumValueA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
shell32
SHBrowseForFolderA
ShellExecuteA
SHGetFileInfoA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
ole32
CoInitialize
CoCreateInstance
CoUninitialize
version
VerInstallFileA
VerFindFileA
msvfw32
ICInfo
ICOpen
ICClose
ICGetInfo
Sections
.text Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ