c:\xampp\htdocs\Aspire\files\ebay22_HXZLQamZQIUyGlbV\HXZLQamZQIUyGlbV.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20240903-en
General
-
Target
Setup.exe
-
Size
2.5MB
-
MD5
567d3e1a12c51c3fdeeabd8190c121f2
-
SHA1
c3b3f202e44fd79f08409dd9c36307d4a4fcff1e
-
SHA256
44b0198f89b06283a6383adf6b581efe1f28c948b099c0d9cdab9f9068a3c8db
-
SHA512
7d0964f0dd322ee2fd3085a4dcec495197726a8a819e19c2651b72994774cf3d475d46cecc12dc336bed34902d0475e0e20b2596012387351c785719be8a98b8
-
SSDEEP
3072:FpWz3jKwH4GW9zubqCuhEFT6PwDCLq9jg7/XjA28HKSXPKHSEVKjIyDG4QXeaAs:zW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Setup.exe
Files
-
Setup.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ