Static task
static1
General
-
Target
Setupprogram_01234.exe
-
Size
26.1MB
-
MD5
2b286ea9656a98e6802b855b0d4ef741
-
SHA1
080abd9b313f61404419761129c4ccbd450597cb
-
SHA256
eb8056d0f70c0105c5eab5eb2c9ea09e8f348f03e89de338ce61ac416b6a4da1
-
SHA512
c94198250adc144882a52fad2a63a4e44a507ff782570ff557f96208961670477397dd02835a186e36ed7e72558798f16cc188c1208d0054247ef3a703a15e0d
-
SSDEEP
786432:DVow/rMocDzV9W8k4jLmCqilqOvEVCip88rA:HY9W8/LmCqgIVC688rA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Setupprogram_01234.exe
Files
-
Setupprogram_01234.exe.exe windows:6 windows x86 arch:x86
9acb9c28ef53ff89bf9c2e4f4f75a7e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
GetModuleHandleExW
VirtualProtect
MoveFileW
SetUnhandledExceptionFilter
GlobalFree
TryEnterCriticalSection
EncodePointer
GetNumaHighestNodeNumber
GetFullPathNameW
LCMapStringW
CreateTimerQueueTimer
SetFileTime
GetSystemTimeAsFileTime
GetThreadPriority
QueryDepthSList
WaitForMultipleObjects
GetTimeZoneInformation
GetProcAddress
AcquireSRWLockExclusive
GetLogicalDriveStringsW
MultiByteToWideChar
CompareFileTime
GetCommandLineW
FindFirstFileExW
FreeLibraryAndExitThread
ReleaseSemaphore
GetTickCount
HeapFree
GetLocaleInfoW
GetTimeFormatW
SetFilePointerEx
EnumSystemLocalesW
lstrcatA
HeapSize
IsValidLocale
GetFileInformationByHandle
CreateTimerQueue
UnhandledExceptionFilter
WriteConsoleW
TlsFree
ChangeTimerQueueTimer
InitializeSListHead
CreateEventW
LocalFree
Sleep
GlobalMemoryStatus
GetProcessAffinityMask
IsValidCodePage
LeaveCriticalSection
VerSetConditionMask
SetPriorityClass
GetFileAttributesExW
GetConsoleOutputCP
GlobalAlloc
GetStartupInfoW
GetCurrentProcess
GetEnvironmentVariableA
GetUserDefaultLCID
GetSystemDirectoryW
SetEvent
VerifyVersionInfoW
IsProcessorFeaturePresent
VirtualAlloc
SetEnvironmentVariableW
SignalObjectAndWait
GetSystemInfo
GetOEMCP
GetThreadTimes
GetFileSize
FlushFileBuffers
LoadLibraryExW
GetCurrentThread
DuplicateHandle
FormatMessageW
GlobalLock
FindFirstFileW
WaitForSingleObjectEx
WaitForSingleObject
TlsSetValue
InterlockedFlushSList
GetVersion
GetModuleHandleA
SystemTimeToTzSpecificLocalTime
InterlockedPopEntrySList
GetProcessHeap
GetCurrentThreadId
GetACP
GetLastError
VirtualFree
SetLastError
GetDriveTypeW
GetFileType
CreateThread
SetFileAttributesW
GetLogicalProcessorInformation
GetCurrentDirectoryW
GetModuleHandleW
ExitThread
PeekNamedPipe
GetEnvironmentStringsW
WriteFile
SetThreadAffinityMask
EnterCriticalSection
DecodePointer
GetCPInfo
TlsAlloc
CreateFileW
DeleteTimerQueueTimer
ReadConsoleW
WideCharToMultiByte
UnregisterWaitEx
LoadLibraryW
ReadFile
SetStdHandle
CreateSemaphoreW
SetFilePointer
InitializeCriticalSection
GetCurrentProcessId
ResetEvent
RemoveDirectoryW
FindNextFileW
FileTimeToLocalFileTime
FreeLibrary
QueryPerformanceFrequency
GetFileSizeEx
FileTimeToSystemTime
GetStdHandle
GetCommandLineA
SwitchToThread
SleepEx
DeleteCriticalSection
TerminateProcess
InitializeCriticalSectionEx
GetStringTypeW
GlobalUnlock
CreateDirectoryW
IsDebuggerPresent
GetVersionExW
RegisterWaitForSingleObject
ReleaseSRWLockExclusive
RtlUnwind
MoveFileExW
RaiseException
FreeEnvironmentStringsW
CompareStringW
GetDateFormatW
SetEndOfFile
TlsGetValue
FindClose
SetThreadPriority
InterlockedPushEntrySList
ExitProcess
lstrlenA
InitializeCriticalSectionAndSpinCount
HeapReAlloc
GetTickCount64
UnregisterWait
GetConsoleMode
GetFileAttributesW
QueryPerformanceCounter
CloseHandle
GetModuleFileNameW
HeapAlloc
user32
SetFocus
MessageBoxW
EndDialog
CharUpperW
GetKeyState
SetTimer
SetDlgItemTextW
MapDialogRect
SetClipboardData
PostMessageW
DialogBoxParamW
MonitorFromWindow
SystemParametersInfoW
GetMonitorInfoA
CheckDlgButton
KillTimer
LoadCursorW
GetWindowLongW
GetWindowTextW
SendMessageW
InvalidateRect
SetWindowLongW
IsDlgButtonChecked
SetCursor
GetFocus
GetWindowRect
SetWindowTextW
ShowWindow
OpenClipboard
CloseClipboard
GetDlgItem
LoadIconW
MoveWindow
ScreenToClient
GetWindowTextLengthW
EnableWindow
MessageBoxA
EmptyClipboard
GetParent
LoadStringW
wsprintfA
advapi32
CryptReleaseContext
CryptAcquireContextW
CryptDestroyKey
CloseServiceHandle
CryptHashData
CryptCreateHash
CryptEncrypt
CryptDestroyHash
CryptGetHashParam
CryptImportKey
shell32
SHGetSpecialFolderPathW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ole32
CoUninitialize
OleInitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
oleaut32
SysAllocString
SysFreeString
VariantClear
SysAllocStringLen
SysStringLen
bcrypt
BCryptGenRandom
crypt32
CertFreeCertificateChain
CertCloseStore
CertFreeCertificateChainEngine
CryptQueryObject
CertOpenStore
CertFindExtension
CertFreeCertificateContext
CertGetNameStringW
PFXImportCertStore
CertAddCertificateContextToStore
CertFindCertificateInStore
CryptDecodeObjectEx
CertGetCertificateChain
CertCreateCertificateChainEngine
CertEnumCertificatesInStore
CryptStringToBinaryW
wldap32
ord73
ord301
ord147
ord133
ord79
ord142
ord167
ord127
ord145
ord219
ord46
ord14
ord216
ord208
ord41
ord117
ord26
ord27
ws2_32
recvfrom
sendto
getpeername
ioctlsocket
gethostname
WSACreateEvent
WSAIoctl
getsockopt
send
WSAEventSelect
freeaddrinfo
WSAWaitForMultipleEvents
socket
WSAResetEvent
WSAEnumNetworkEvents
closesocket
WSAGetLastError
ntohs
WSASetLastError
WSAStartup
WSACleanup
htons
setsockopt
getaddrinfo
__WSAFDIsSet
select
accept
bind
connect
getsockname
htonl
listen
recv
WSACloseEvent
Sections
.text Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 275KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ