Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10ltsc2021-20250207-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11-20250207-en
General
-
Target
Setup.exe
-
Size
2.0MB
-
MD5
67cace08257e46a6ab571d7b0b9b58cb
-
SHA1
a48fab567f9f8e821b45c00a841a6975acda7594
-
SHA256
603ad184c98b1612294dec25a58a9cbee036ea404618910592352d7e5becfeff
-
SHA512
efc1d582f73d050b117d96261ba7198ef3f941117395a9034ce147e1147aec7b814a6247d9f9fc5ac7122353f1d91da39e472269d898657e5a627636749ed8cf
-
SSDEEP
49152:t5ZPhtX6eO4UP84qPuIOV1NhmUabf+W7:tht/V44uFdGbf+W7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Setup.exe
Files
-
Setup.exe.exe windows:4 windows x86 arch:x86
Password: etffg
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ