Static task
static1
General
-
Target
SETUP.EXE
-
Size
212KB
-
MD5
0188ba6666a7782e05534399d712de4b
-
SHA1
8ec88af69f41f2c1ddfbbca8e40bd2fcfe3042d3
-
SHA256
54ae5f0657b5cd20b1c184ebfede1f0fcaa42d15a7d3c7878d492e95c6cad54c
-
SHA512
0792f4bf73a6056a6b83b505cb9f746050331038baee8d0bd6a1e70a98d193f3bf7acf9fc8010579ab19de41a1a3295ab752f7ea4df2be719ed9c1f6a07903ce
-
SSDEEP
3072:8I2HkXM+eIGj1NtU1dwbofU7EuZgTzlYeQ4kpTofLvo86wBhe1f:8I2HuJGxPUtfQESyz5VB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SETUP.EXE
Files
-
SETUP.EXE.exe windows:4 windows x86 arch:x86
2680c68d0adfad0b2c049b12efb03a45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInfo
SetupDiRemoveDevice
SetupCloseInfFile
SetupGetIntField
SetupGetStringFieldA
SetupFindFirstLineA
SetupOpenInfFileA
cfgmgr32
CM_Locate_DevNodeA
CM_Reenumerate_DevNode
kernel32
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
FormatMessageA
SetErrorMode
HeapAlloc
GetStartupInfoA
TerminateProcess
RaiseException
HeapReAlloc
RtlUnwind
HeapFree
ExitProcess
HeapDestroy
HeapCreate
GetFileSize
HeapSize
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetACP
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileTime
GetCPInfo
GetFileAttributesA
GetOEMCP
WritePrivateProfileStringA
SizeofResource
GetProcessVersion
GlobalFlags
TlsSetValue
TlsGetValue
LocalReAlloc
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
VirtualFree
VirtualAlloc
DeleteCriticalSection
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
CreateDirectoryA
FindFirstFileA
DeleteFileA
FindNextFileA
GetVersionExA
SetFileAttributesA
CopyFileA
GetWindowsDirectoryA
GetCurrentDirectoryA
Sleep
GetCommandLineA
TlsFree
GlobalHandle
TlsAlloc
GetProfileStringA
InitializeCriticalSection
LocalFree
LocalAlloc
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindClose
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrlenA
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetStringTypeA
GetTimeZoneInformation
SetUnhandledExceptionFilter
user32
InvalidateRect
RegisterClipboardFormatA
PostThreadMessageA
LoadCursorA
CharUpperA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
LoadStringA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
SetRect
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
CreateWindowExA
GetClassLongA
CopyAcceleratorTableA
CharNextA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
CopyRect
GetDC
ReleaseDC
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
MessageBeep
GetNextDlgGroupItem
GetTopWindow
InflateRect
ValidateRect
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
IsWindowEnabled
IsWindowVisible
GetDlgCtrlID
FindWindowExA
GetWindowTextA
TranslateMessage
PeekMessageA
DispatchMessageA
wsprintfA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
LoadIconA
GetSysColorBrush
PtInRect
GetClassNameA
GetDesktopWindow
SetPropA
UnhookWindowsHookEx
DefWindowProcA
GetWindowTextLengthA
ScreenToClient
DrawFocusRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
gdi32
SetTextColor
DeleteDC
SetBkColor
GetObjectA
SaveDC
RestoreDC
PatBlt
SelectObject
GetStockObject
GetClipBox
CreateBitmap
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
CreateDIBitmap
CreateCompatibleDC
BitBlt
GetTextExtentPointA
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
SetViewportExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
SetMapMode
SetViewportOrgEx
SetBkMode
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
comctl32
ord17
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
olepro32
ord253
oleaut32
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
Sections
.text Size: 140KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ