Setup7.0.zip
- SHA256 abdc12b4bb4b9a7309bc067be6b097a4e11b0dccbf19494edb971b510303c923
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Gdswt46g.dll
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Gdswt46g.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
gsdr3y4.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
gsdr3y4.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
setup7.0.exe
Resource
win7-20240708-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
setup7.0.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
21 signatures
150 seconds
General
- Target Setup7.0.zip
- Size 1.3MB
- Sample241110-a6rt7symcp
- SHA256 abdc12b4bb4b9a7309bc067be6b097a4e11b0dccbf19494edb971b510303c923
- MD5 caf07843d0eec5fd5d9b131256361752
- SHA1 1ce0acf5f2b521752440ce6d1c108a365a1dca50
- SHA512 b72e81797f4d3264b12675e2d35c56d76ec9110c3814776068d23a51c5de20ed3bd0dd414fb3f0564633b408dc040eaf8407c5e319df7014c9249e5fbaea2839
- SSDEEP 24576:kmmVkxtlqjBxiFJJ6VmNNvDcyxE1kzZefVInqEOOUy5d2DWu2vpL/tVH5fCA:kmms7WBx+JbNoyxmkzUtIDOOUyuR2h/t
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/setup7.0.exe
File Explorer
-
Setup7.0.zip.zip 1.3MB
-
Gdswt46g.DLL12B
-
Setup7.0/StatCache.db32B
-
Setup7.0/StatCache3.db32B
-
dh5FS464fd.ini213B
-
gsdr3y4.DLL128KB
-
setup7.0.exe.exe 1.7MB
Gdswt46g.DLL
- SHA256 472e48643c0b957bb7c612448330f07ce0cb71e14541c6b0b9ce789bc82e91da
- MD5 dc72bdebf3016a463eb4e209af1aefe1
- SHA1 9bde7acc8b748a89daee4d756fa57ce3007e82a9
- SHA512 de6999ebc8dd931a4417c6861e36127a6b7caca1543f1db94eb90c3624045ee57398d2fb1a4841e0647ac0191ab41a04d6dc8642c7f1b888743a03a985c65ea5
- MD5 SHA1 SHA512
Setup7.0/StatCache.db
- SHA256 6feaca71463ac85e0778ef25c5572c6ab6f04d02a2ce5fa513533933ae7c15ef
- MD5 1dd2d16062a18a70a3cf13fc6073c6ca
- SHA1 192efc58cbd5befcddce69a913ab9a69a9759af1
- SHA512 5f457fbcf37fe54ed2aa761e952d8783a4f138cc5fa2028bf99e8f08f76bacdf8557e1310b03e260982d2ecd99f7e7f9ec2716892fcbb9e72c1886f39e07f879
- MD5 SHA1 SHA512
Setup7.0/StatCache3.db
- SHA256 6a2147d62db884de9f43488c8ffb76648d5985c937fdf261617312df9c0eef58
- MD5 6ff7763ec692b79e38ad1cc00467b109
- SHA1 bf3b027a91fbf63da320da25de1a50bf38acf2a9
- SHA512 295616b279698edcb4aceb64bd7cfe870b748b4c3bdafa6a4c95b39bf15449b33ef5105ef6da5c8ca0b8006dedf4544e3fb6aa1f7bc66e74d5638006651fa20d
- MD5 SHA1 SHA512
dh5FS464fd.ini
- SHA256 c16d5f5b6e266ae6321451c7a8d547532cb65e30f089ab70072159b1047c5b02
- MD5 369c4e55c3bbd2fde0057a1001aab99b
- SHA1 c6576a7d886a0c7738b64808988102ae22d7b46e
- SHA512 d42f486318d50898cd6e516f01dcc08e9adc53ba9029e2bd7af263f526b41e7e955e7d33f90300a5c5fa392e5b7336c6e0bcea0169e7877808da63cfdd8cc54b
- MD5 SHA1 SHA512
gsdr3y4.DLL
- SHA256 563062fd6c6a2a84ebe6e35e9bb045ef1bc240cdcd20dc557c1957e80ccf932c
- MD5 d4a3019fba1509a1e1faf0115b512c84
- SHA1 cc85bc0017e4e20387c8dd0b1eaff31a5ddb473a
- SHA512 1505c567b1333a02eea5a5356ec0878c87461c22272ea693e651040df59f0677f784248f67c8d5f293be25b746596112bfed61921d6e640887f0955aab23776c
- SSDEEP 1536:cdZTYMYIKPRhJjRn4udcdugdKBH0g01+gZrxtQQzQeWV9JhtgTKzMyLL/gB:ai7ImJjeudccg00gA+AxtErtZvLjY
- MD5 SHA1 SHA512 SSDEEP
setup7.0.exe
- IMPHASH 0f602b167ea2edb2862b80167a856ba6
- SHA256 f585f729ebcdaf7a70e16690398cca0036d1dd4c398b4044004e7ab0ccc6bf56
- MD5 2c685fc5572fee6107d76c17fa873a45
- SHA1 05436164ce59ab80e0bcae7aa779b2426866446e
- SHA512 6bd9fbf04c75c0a6a07846233e5cb31f7f8373f3bd2fc62f70f27c34d37d640d80647ca980530ba99d77586a954c73899a257e1dc2e422279a0c46f69e2107e3
- SSDEEP 49152:Fbo95a6iGYqDAtQRcsZT6jgLUcSEubOJE5eo55iRQ6Uoy:SDAtQ+sZ2jgQc7Cwk55i3
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5280
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
CloseHandle
CreateFileW
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
FormatMessageA
GetCurrentProcess
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetThreadId
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MultiByteToWideChar
Process32First
Process32Next
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_onexit
_strlwr
abort
calloc
exit
fprintf
fputc
fputs
free
fwrite
getenv
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
realloc
signal
strchr
strcmp
strcpy_s
strerror
strlen
strncmp
strstr
strtoul
vfprintf
wcslen
_read
Name
.text
Size
272KB
Virtual Size
271KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
560B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ