Static task
static1
General
-
Target
Setup-732661.zip
-
Size
26.2MB
-
MD5
a1bb96b2e64c1892b36597ef63c3424c
-
SHA1
18bac79b86291b337ccb850712f34742c5590cb4
-
SHA256
f2602f5ae3e98f82d04e55612775bee5bc9c48b16c4627cfed27dad4f3ce3b3d
-
SHA512
6394e88773b0d67bef7870300e2f37e644862de5640ac3a20326a258861c9903e0cce39481b3db36ddc4b29652c31a66cd3365dfa8c888e7e7a121f601a3d57d
-
SSDEEP
786432:6MebXFihgh4+Q1Amm/XwxYH7jDe6nzuKU:DezSwtQaA0ZuKU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Install_2023.exe
Files
-
Setup-732661.zip.zip
-
Install_2023.exe.exe windows:6 windows x86 arch:x86
e8daf068770626a422139755b4f65210
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathCombineW
PathFileExistsW
kernel32
CreateEventA
GetConsoleMode
LeaveCriticalSection
FreeEnvironmentStringsW
SetFileTime
CreateDirectoryA
FlushFileBuffers
VirtualAlloc
GetSystemTimeAsFileTime
FormatMessageW
GetSystemDirectoryW
GetLocaleInfoW
GetFileSize
GetModuleHandleA
GetCurrentProcessId
IsDebuggerPresent
GetCurrentThreadId
HeapAlloc
HeapSize
GetFileInformationByHandle
EnumSystemLocalesW
SetFilePointer
IsValidLocale
DeleteFileA
WriteFile
MultiByteToWideChar
AreFileApisANSI
ExitThread
TlsSetValue
FindNextFileA
GlobalMemoryStatus
GetVersionExA
GetModuleFileNameA
GetEnvironmentStringsW
lstrlenW
SetEndOfFile
GetCurrentProcess
DecodePointer
GetProcAddress
GetStartupInfoW
CreateFileW
FindFirstFileA
RemoveDirectoryW
GetFileAttributesA
LoadLibraryA
RtlUnwind
GetFileType
GetUserDefaultLCID
lstrcatW
LoadLibraryW
IsValidCodePage
GetStdHandle
FreeLibrary
DeleteFileW
FindFirstFileExW
SetEvent
WaitForSingleObject
HeapFree
SetLastError
VirtualFree
InitializeCriticalSectionEx
EnterCriticalSection
EncodePointer
SetFileAttributesW
WriteConsoleW
InitializeCriticalSection
CreateDirectoryW
GetProcessHeap
GetCurrentDirectoryW
CreateFileA
RaiseException
QueryPerformanceCounter
GetNativeSystemInfo
RemoveDirectoryA
FormatMessageA
GetTickCount64
FindNextFileW
CreateSemaphoreA
WideCharToMultiByte
LCMapStringEx
CloseHandle
CreateThread
GetSystemWow64DirectoryW
GetCurrentDirectoryA
DeleteCriticalSection
ResetEvent
TlsGetValue
InitializeSListHead
GetTickCount
LocalFree
SetFilePointerEx
FindFirstFileW
GetTempPathW
TlsFree
IsBadReadPtr
ReleaseSemaphore
VirtualProtect
InitializeCriticalSectionAndSpinCount
GetACP
GetTempPathA
GetLastError
ExitProcess
GetFileAttributesW
GetCommandLineA
UnhandledExceptionFilter
GetSystemInfo
GetOEMCP
GetCommandLineW
GetModuleHandleW
FreeLibraryAndExitThread
Sleep
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
SetFileAttributesA
GetConsoleOutputCP
GetCPInfo
FindClose
SetStdHandle
TlsAlloc
GetStringTypeW
LoadLibraryExW
LCMapStringW
GetModuleHandleExW
ReadFile
GetProcessAffinityMask
TerminateProcess
GetModuleFileNameW
HeapReAlloc
user32
GetWindowLongA
DialogBoxParamA
LoadStringA
EndDialog
SetWindowLongA
SetTimer
CharUpperA
ShowWindow
SetWindowTextA
SendMessageA
PostMessageA
SetWindowTextW
GetDlgItem
LoadStringW
LoadIconA
KillTimer
DialogBoxParamW
DestroyWindow
MessageBoxW
CharUpperW
shell32
SHGetSpecialFolderPathW
oleaut32
SysAllocStringLen
SysStringLen
VariantClear
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
ole32
CoInitialize
CoCreateInstance
CoUninitialize
Sections
.text Size: 917KB - Virtual size: 917KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ