General
-
Target
Setup.exe
-
Size
1.6MB
-
MD5
68e5870d52f48370c7fbdec9a4b1d78e
-
SHA1
14580df2a7d995c7ef515f009cc93867a0c5603b
-
SHA256
c7120aabf04bbb5b9b8d7007972657997c12f82efaee174c25b3204da535b622
-
SHA512
40ee19d650d74ebd1b3e5f2007fa3ea2dcb3fa21415670adffb3952a3b8de881c84fc469fc7ed2eed8079dda1d8daf3fe81effba03f1e8887bd446da9bfe1a8b
-
SSDEEP
24576:KrnTI0/wMmCobASnuDiF2/TGBNMEnAsFjSguhiZgQPm3Aa0CTObnd0SHHH3LudQZ:KrD/mCoDnuD9LSOgAoWTAgGtdznBZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Setup.exe
Files
-
Setup.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 400KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 213KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE