setup16.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3af276f9b218aac5a2677ab99a51f4b0.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3af276f9b218aac5a2677ab99a51f4b0.exe
Resource
win10v2004-20240704-en
General
-
Target
3af276f9b218aac5a2677ab99a51f4b0.exe
-
Size
165KB
-
MD5
3af276f9b218aac5a2677ab99a51f4b0
-
SHA1
65a81de3b3adae9f8332c7b6b61e15980b592862
-
SHA256
bdfc42b396bc3b425e7a288d5cc805b27192d5acd282a1d87155585207dbdb48
-
SHA512
2ff946326605fb7744c85d5d64ca7c623654bd5cab3eedcd1b09f073c03e5252c27a29638279382b45b7d0ef764a4f4b88c46d0873439710722a9332d8f4a050
-
SSDEEP
3072:bMaRYFWHPlKRbSguJi6XsYCmoRpihpmoggIGXBJq1c0W7FbO:LsWgzqqihpmzkq+q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3af276f9b218aac5a2677ab99a51f4b0.exe
Files
-
3af276f9b218aac5a2677ab99a51f4b0.exe.exe windows:6 windows x86 arch:x86
8481e83b7d7bc67fc195ff0836dbf1e7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegOpenKeyExA
RegCreateKeyA
RegSetValueA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
kernel32
_llseek
GetDiskFreeSpaceExA
_lopen
LocalFree
WinExec
GetPrivateProfileStringA
GetSystemInfo
LocalUnlock
LocalLock
SetErrorMode
_lwrite
LocalAlloc
SetFileAttributesA
GetDriveTypeA
_lread
GlobalCompact
GetWindowsDirectoryA
GetPrivateProfileIntA
GetVersion
GetModuleFileNameA
_lclose
LocalReAlloc
ExitProcess
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
OpenFile
lstrcmpiA
lstrlenA
IsDBCSLeadByte
UnhandledExceptionFilter
gdi32
GetTextExtentPointA
SetBkMode
user32
CreateWindowExA
RegisterClassA
CharPrevA
PostMessageA
IsWindow
DestroyWindow
SendMessageA
SetWindowPos
DrawTextA
UpdateWindow
GetSystemMetrics
GetClientRect
BeginPaint
DefWindowProcA
KillTimer
ShowWindow
GetMessageA
SetTimer
DispatchMessageA
TranslateMessage
OemToCharBuffA
CharToOemA
CharUpperA
LoadStringA
PeekMessageA
FindWindowA
CharNextA
MessageBoxA
EndPaint
msvcrt
rename
_splitpath_s
_rmdir
atoi
toupper
strstr
strchr
memset
_chdrive
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_controlfp
_mkdir
_access
_chdir
fopen
fclose
remove
_tempnam
_mktemp
_ltoa
_itoa
_stat
_chmod
_open
_lseek
_close
_unlink
_write
_read
malloc
_vsnprintf
__getmainargs
free
cabinet
ord22
ord20
ord23
lz32
LZClose
LZOpenFileA
LZCopy
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ