Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20240508-en
General
-
Target
Setup.exe
-
Size
57.1MB
-
MD5
acbf79e3ac515d7bdf5eb0e39eec3e3f
-
SHA1
55de32af8bd18b874d7601201c5c4b8703a81aeb
-
SHA256
5588a4543a50d73c02ff046cf95b5e002ddc79bad07e97aefdaf1b405e67638d
-
SHA512
f2818ab55e6a8f3d8d1cb184d5c65f521f77b852893e0d941b74ae6f1c287e3c36db8d02b240acb979559069b3f1bc6f557acdbd0fde984f1d817b8d3b1ec058
-
SSDEEP
1572864:B3LbxftlJ6LPyiDNfYMWgekA+FE3ZlrAm:N9tlJuZDNfYMWgeuCZl8m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Setup.exe
Files
-
Setup.exe.exe windows:4 windows x86 arch:x86
f3383b658504cbf72b60880722caea8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
DeleteFileA
CloseHandle
WriteFile
lstrlenA
GetTempPathA
CreateFileA
SetFilePointer
GetModuleFileNameA
ExitProcess
lstrcpyA
ReadFile
GetLastError
GetFileAttributesA
GetCurrentProcess
GetExitCodeProcess
Sleep
lstrcatA
SetCurrentDirectoryA
CreateProcessA
GetVersionExA
GetFullPathNameA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
CreateDirectoryA
GetFileSize
GetDiskFreeSpaceA
WaitForSingleObject
user32
CreateDialogParamA
CharNextA
LoadStringA
MessageBoxA
DestroyWindow
wsprintfA
ExitWindowsEx
advapi32
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 820B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ