Behavioral task
behavioral1
Sample
AntiCrashSetup.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
AntiCrashSetup.exe
Resource
win10v2004-20240226-en
General
-
Target
AntiCrashSetup.exe
-
Size
1.7MB
-
MD5
b54bcfd861229cd92bdf73b186396ad6
-
SHA1
4ca19425742038e6cfb2b95d899bb711de3b35fc
-
SHA256
ba46dd77126d8169702552889481e495cd1dd0106d4c88f887cacb4b89dae340
-
SHA512
63043944c8558d1edd4d1150a241c04d231a340dee660186a829e708caf57c46bcad63d0aa76fad2df2c2c589b76407ece1b4fcd8a55eb6258b9b60fdf42f909
-
SSDEEP
49152:BRIg5ld0aYu1ZkVDH7rnLzNtUXDqR5B3GsvB35pF:Byg5MaYFVXzgzq12KbF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AntiCrashSetup.exe
Files
-
AntiCrashSetup.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE