Behavioral task
behavioral1
Sample
SETUP.exe
Resource
win11-20240611-en
General
-
Target
SETUP.EXE
-
Size
521KB
-
MD5
d07e741faa0fe7330d8bd12c3fc32091
-
SHA1
fc977d88e231f58499aa68e1744b6c27a17be0f8
-
SHA256
47cda4dcb21910ed8a3772c3607996c0ec3287a467818cf69a0f5d99caf44c93
-
SHA512
7059aef848f5b538e0acce68e242b47ec0400a06d4827af7e31f8aa8fb021b707f5a2392554a203a6051dafb1adec86dda5f528ae052cc8e2fb16d205f6c557a
-
SSDEEP
12288:LIu23Bd/8rgj1Wg9m3ogypKx4ZHMFujEZnrvKK0P8K:BgXEcZrNKgMgjEZriPb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SETUP.EXE
Files
-
SETUP.EXE.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 104KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE