Behavioral task
behavioral1
Sample
setup-x86_64.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
setup-x86_64.exe
Resource
win10v2004-20240802-en
General
-
Target
setup-x86_64.exe
-
Size
1.3MB
-
MD5
a667fc9d471dd1bd0cd7a9ad9408024c
-
SHA1
382bfd2c2988773f53219843e59d43dfa13fa248
-
SHA256
e7815d360ab098fdd1f03f10f43f363c73a632e8866e304c72573cf1e6a0dec8
-
SHA512
085defb2be45ac527617496779f1d440dc3b5777f08c2deed7597e1aeacc3b5c3d1e5047523b7505195ee8f8a48dec3c3107d9197ffd9833e00d22c81cfc22ec
-
SSDEEP
24576:SPvoqk8pn/tbnLIbiDWszqosSt9FJ/CmtiF5GrY4WqRtiQou:Qi8pl4biRePOLw5GgC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource setup-x86_64.exe
Files
-
setup-x86_64.exe.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE