Setup[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

Setup.exe
Size

1006KB
MD5

556f8368b0adbf6f4a547eb2af242f93
SHA1

eb2f8e06c0f32ef22b60e439a54c934432d15415
SHA256

71cab0db3c492c830b4af57c7dc479ac75489362c967ae55393a27d00d82043f
SHA512

3cecd063ebf1201859ef2bc23e7d6c4088bcff90214bba9bc14fd5c30f0e364001c10b217f9c5d380c5da4acd185ab11c8a7fe93acbdf4be4c88d3539ebc329b
SSDEEP

12288:OWYCX1zgwrZi970wRp10LhM7QkzIe8XsLTSqGBQ34GgT:OXqVrZv2skH88PEQIJ

Score

N/A

Malware Config

Signatures

Files

Setup.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:5d:8f:14:a8:21:47:64:17:22:d4:fa:fc:66:bc:80
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/01/2019, 00:00

Not After

08/02/2022, 12:00

Subject

CN=GitHub\, Inc.,O=GitHub\, Inc.,L=San Francisco,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ab:18:d7:26:28:8b:af:5c:0d:95:d6:88:87:57:44:9e:3c:0d:27:75:c6:be:29:17:f7:cb:ff:5d:fc:d4:9d:31
Signer

Actual PE Digest

ab:18:d7:26:28:8b:af:5c:0d:95:d6:88:87:57:44:9e:3c:0d:27:75:c6:be:29:17:f7:cb:ff:5d:fc:d4:9d:31

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=GitHub\, Inc.,O=GitHub\, Inc.,L=San Francisco,ST=California,C=US

09/02/2021, 08:38
Valid: true

Chain 1

CN=GitHub\, Inc.,O=GitHub\, Inc.,L=San Francisco,ST=California,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 542KB - Virtual size: 541KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 455KB - Virtual size: 455KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:5d:8f:14:a8:21:47:64:17:22:d4:fa:fc:66:bc:80Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

ab:18:d7:26:28:8b:af:5c:0d:95:d6:88:87:57:44:9e:3c:0d:27:75:c6:be:29:17:f7:cb:ff:5d:fc:d4:9d:31Signer

Signature Validations

Verification

09/02/2021, 08:38 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 542KB - Virtual size: 541KB

.sdata Size: 512B - Virtual size: 488B

.rsrc Size: 455KB - Virtual size: 455KB

.reloc Size: 512B - Virtual size: 12B

04:5d:8f:14:a8:21:47:64:17:22:d4:fa:fc:66:bc:80
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

ab:18:d7:26:28:8b:af:5c:0d:95:d6:88:87:57:44:9e:3c:0d:27:75:c6:be:29:17:f7:cb:ff:5d:fc:d4:9d:31
Signer

09/02/2021, 08:38
Valid: true

.text
Size: 542KB - Virtual size: 541KB

.sdata
Size: 512B - Virtual size: 488B

.rsrc
Size: 455KB - Virtual size: 455KB

.reloc
Size: 512B - Virtual size: 12B