Analyzing...

File Name: setup_eac_pv.exe

SHA1: 8af07437424b145e7b4c3bd07c64168628d9d1d9

MD5: f3d4dba40ffba6fffc87d7310aaef92c

First Seen Date: 2019-10-22 04:08:38.999681 ( 2019-10-22 04:08:38.999681 )

Number of Clients Seen: 6

Last Analysis Date: 2019-10-22 04:08:38.999681 ( 2019-10-22 04:08:38.999681 )

Human Expert Analysis Result: No human expert analysis verdict given to this sample yet.

Analysis Summary

Analysis Type	Date	Verdict
Signature Based Detection	2019-10-22 04:08:38.999681	Clean
Static Analysis Overall Verdict	2019-10-22 04:08:38.999681	No Threat Found
Dynamic Analysis Overall Verdict	2019-10-22 04:08:38.999681	No Threat Found
Precise Detectors Overall Verdict	2019-10-22 04:08:38.999681	No Match

Static Analysis

Static Analysis Overall Verdict	Result
No Threat Found

Detector	Result
Optional Header LoaderFlags field is valued illegal	Clean
Non-ascii or empty section names detected	Suspicious
Illegal size of optional Header	Clean
Packer detection on signature database	Unknown
Based on the sections entropy check! file is possibly packed	Suspicious
Timestamp value suspicious	Clean
Header Checksum is zero!	Clean
Enrty point is outside the 1st(.code) section! Binary is possibly packed	Clean
Optional Header NumberOfRvaAndSizes field is valued illegal	Clean
Anti-vm present	Clean
The Size Of Raw data is valued illegal! Binary might crash your disassembler/debugger	Clean
TLS callback functions array detected	Clean

Dynamic Analysis

Dynamic Analysis Overall Verdict	Result
No Threat Found

Suspicious Behaviors
Opens a file in a system directory
Has no visible windows

Behavioral Information

LoadLibrary

C:\Windows\system32\lpk.dll

COMCTL32.dll

USER32.dll

ADVAPI32.dll

comctl32.dll

UxTheme.dll

C:\Windows\system32\ole32.dll

C:\Windows\syswow64\MSCTF.dll

OLEAUT32.DLL

IMM32.dll

ReadFile

C:\Users\win7\AppData\Local\Temp\516db\setup_eac_pv.exe

C:\Windows\Fonts\staticcache.dat

OpenMutex

Local\MSCTF.Asm.MutexDefault1

WriteFile

C:\Users\Public\EACWork\ScaleMP2017M.txt

C:\Users\Public\EACWork\ScaleMP2018F.txt

C:\Users\Public\EACWork\CPLI_YC167.csv

C:\Users\Public\EACWork\ScaleMP2015F.txt

C:\Users\Public\EACWork\ScaleMP2015M.txt

C:\Users\Public\EACWork\ScaleMP2017F.txt

C:\Users\Public\EACWork\build_a_custom_table.xlsm

C:\Users\Public\EACWork\Pub2010.xlsx

C:\Users\Public\EACWork\Pub2010.csv

C:\Users\Public\EACWork\ScaleMP2014M.txt

C:\Users\Public\EACWork\TRates30.csv

C:\Users\Public\EACWork\PLT.xlsx

C:\Users\Public\EACWork\PLTAlt2.csv

C:\Users\Public\EACWork\ScaleBB2DF.txt

C:\Users\Public\EACWork\TRates10.csv

C:\Users\Public\EACWork\ScaleBB2DM.txt

C:\Users\Public\EACWork\ScaleMP2018M.txt

C:\Users\Public\EACWork\CPLI_Above_Median_YC168.csv

C:\Users\Public\EACWork\ScaleMP2016F.txt

C:\Users\Public\EACWork\ScaleCPMBF.txt

C:\Users\Public\eac_pv.xlam

C:\Users\Public\EACWork\SupportPV2.xlsx

C:\Users\Public\EACWork\ScaleCPMBM.txt

C:\Users\Public\EACWork\PLT.csv

C:\Users\Public\EACWork\TRates5.csv

C:\Users\Public\EACWork\ScaleMP2014F.txt

C:\Users\Public\EACWork\Method.xlsx

C:\Users\Public\EACWork\Audit.xlsx

C:\Users\Public\EACWork\TRates1.csv

C:\Users\Public\EACWork\SupportPV.xlsx

C:\Users\Public\EACWork\ScaleMP2016M.txt

C:\Users\Public\EACWork\recent_corporate_bond_yield_curve_spot_rates.xls

C:\Users\Public\EACWork\SegRates.txt

C:\Users\Public\EACWork\Scales2d.xlsx

C:\Users\Public\EACWork\FMT120.csv

QueryFilePath

C:\Users\win7\AppData\Local\Temp\516db\setup_eac_pv.exe

C:\Windows\syswow64\MSCTF.dll

C:\Windows\syswow64\USER32.dll

OpenRegistryKey

\REGISTRY\MACHINE\SOFTWARE\M

\REGISTRY\MACHINE\SOFTWARE\Microsoft

Precise Detectors Analysis Results

Detector Name	Date	Verdict	Reason
Static Precise PUA Detector 1	2019-10-22 04:08:34.141897	No Match	NotDetected
Static Precise PUA Detector 4	2019-10-22 04:08:34.234349	No Match	NotDetected
Static Precise NI Detector 3	2019-10-22 04:08:34.141388	No Match	NotDetected
Static Precise PUA Detector 5	2019-10-22 04:08:34.180782	No Match	NotDetected
Static Precise Trojan Detector 1	2019-10-22 04:08:34.253869	No Match	NotDetected
Static Precise Trojan Detector 3	2019-10-22 04:08:34.249212	No Match	NotDetected
Static Precise PUA Detector 6	2019-10-22 04:08:34.235398	No Match	NotDetected
Static Precise Trojan Detector 12	2019-10-22 04:08:34.248114	No Match	NotDetected
Static Precise Virus Detector 1	2019-10-22 04:08:34.296916	No Match	NotDetected
Static Precise Virus Detector 2	2019-10-22 04:08:34.304585	No Match	NotDetected
Static Precise Trojan Detector 13	2019-10-22 04:08:34.321480	No Match	NotDetected
Static Precise PUA Detector 2	2019-10-22 04:08:34.318352	No Match	NotDetected