C4PRsetup[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

C4PRsetup.exe
Size

1.6MB
MD5

158d7142f370164e068507ede1ec0521
SHA1

7338276fbdf3d149133592c8b3396d1e4622dd81
SHA256

f6f4e981ab7c6c38bfe5e757a3346411a9768556a613deafc713e4d78e4ec89a
SHA512

d4d56a2ca6afe2c45520479219a166eaa25e78a39614f1e7b94b22e46d098632320d6aa722f0d0bf41acf4b8f48f25c2dc6819a3bf5d7f2299d7b72c5bf107fb
SSDEEP

24576:xlLOP5FO7UEqhmavSa57Sve1jg/gZ3xQzAEC3ThOZd9q2ONN8jGPCbHBsz1su6Dm:emrPDPvo2ONN8jGPCbHBUHO8QZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
C4PRsetup.exe

Files

C4PRsetup.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ