Setup1234[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Setup1234.exe
Size

236KB
MD5

c42c4ca7198620f45aeb43134316b966
SHA1

d0a162a472ea61f2f17cc932910399eb2e070a26
SHA256

6d36a09962d62d807896ac96563085698c35a99b8ab45e4ecaf1868c80ad8841
SHA512

5d105a73c62b09b438c81c4c0d531b2cbc7c50299618378ec0a5d64e34f40b6a24aaf1e4f57e58205be4493642ecbdbe96c9e85c3b07f1afc93ebeb51239dcf2
SSDEEP

6144:8QhZjPOOBfHDWto+FZwAh3qzaarXK76/BJ+XVupky1:XhZjPOO1atoGZja06/mXVupky1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Setup1234.exe

Files

Setup1234.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 902B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ