Static task
static1
Behavioral task
behavioral1
Sample
1718821613.976287_setup (2).exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral2
Sample
1718821613.976287_setup (2).exe
Resource
win11-20240508-en
General
-
Target
1718821613.976287_setup (2).exe
-
Size
12.6MB
-
MD5
dddae2b25f60e6331ab468bb5d9daf65
-
SHA1
93b425a91af75bdad1e27b08cd821b0123c9e61b
-
SHA256
ff89b26b08534382d19d9c99b8023467c007eda8c8a82cd728fb24634d99bb58
-
SHA512
d25580cb033c0cc1a68b1ab49166c8d6c0c6387ad690a92ff43e4ca1baf317e2ff68dd05d8f1c14e54cbedad9198cd51932aca7c7b05afe92eb1de6e3b4893c3
-
SSDEEP
393216:nxF2TkLoD4NFAKgkhC1LxRdYUmRMGhw4:qTkLoDO0PL/d5mK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1718821613.976287_setup (2).exe
Files
-
1718821613.976287_setup (2).exe.exe windows:6 windows x64 arch:x64
448b6888b26145ced7ce018aab459303
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
GetCursorPos
advapi32
RegCloseKey
shell32
SHGetFolderPathA
ole32
CoCreateInstance
oleaut32
VariantClear
Sections
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmpGYcB Size: - Virtual size: 7.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmpGYcB Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmpGYcB Size: 12.4MB - Virtual size: 12.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ