Setup[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Setup.exe
Size 2.4MB
Sample220516-24h8tscda8
SHA256 f29af82e03ef39291f1b183cab1fa06d12d17e8bd1f06a0de775e8dd4aac99da
MD5 bb51f08ae784788046ad1216d4e7ec98
SHA1 f76b796a7700d63637a07ef9a61ce6e1b2af652d
SHA512 79c3cdeaddbc47edfea920e09531fcbf53fa3b56663dc2301760ae5b22a9f69d3d6072d91e603e0e724c4b6c30b761bf3f8998d4bf1a70951ac74b2797c28e5c
SSDEEP 49152:bLUJZ28GlWX9JUaq5TBfmsXWz92JyZ4leULetdr6MfQykYtod:bIO8iWMayTsKfzMIykGod
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

Setup.exe

.exe 2.4MB

Setup.exe

IMPHASH 3905245de09d9e993faa8b831fa6d168
SHA256 f29af82e03ef39291f1b183cab1fa06d12d17e8bd1f06a0de775e8dd4aac99da
MD5 bb51f08ae784788046ad1216d4e7ec98
SHA1 f76b796a7700d63637a07ef9a61ce6e1b2af652d
SHA512 79c3cdeaddbc47edfea920e09531fcbf53fa3b56663dc2301760ae5b22a9f69d3d6072d91e603e0e724c4b6c30b761bf3f8998d4bf1a70951ac74b2797c28e5c
SSDEEP 49152:bLUJZ28GlWX9JUaq5TBfmsXWz92JyZ4leULetdr6MfQykYtod:bIO8iWMayTsKfzMIykGod
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

0d:d0:e5:60:a0:b0:c2:0c:1e:8b:00:62:90:14:2a:84:16:fd:44:13:32:c7:5e:b9:46:57:1e:eb:b1:9d:51:35

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

PE Signature issue

Digest

2a:3c:f3:af:51:7a:c2:62:36:07:9a:00:fe:49:d5:b5:0e:ba:b3:9c

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Subject

CN=RealDefense LLC,O=RealDefense LLC,L=Santa Monica,ST=California,C=US

Serial Number

02:ae:e5:ad:cd:9e:19:86:5b:10:8b:02:6e:32:7d:a2

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 27, 2020 - Mar 18, 2021

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=RealDefense LLC,O=RealDefense LLC,L=Santa Monica,ST=California,C=US

Serial Number

02:ae:e5:ad:cd:9e:19:86:5b:10:8b:02:6e:32:7d:a2

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 27, 2020 - Mar 18, 2021

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

Major OS version

Entry point

2269184

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Setup.exe

PE Signature issue

PE Signature issue

kernel32

user32

advapi32

shell32

comctl32

mscoree