Setup[.]exe | Triage

Sharing

General

Target

Setup.exe
Size

104KB
MD5

3833a188c2cab1520b8ebfe7e97a20e4
SHA1

6298af39d3b5a70ce5503acf978a50103446b98e
SHA256

4a2869c24da8ddbed2b0fea6f610f47c19a19c40a650c83fa20bfdf22b178998
SHA512

7ff60a3e1cb3c84f6d8ae98bea5ef75c5ef73fb25dfed907fda69d5a73f46587a7053d5b2cb4304c3fa94d47fdd30466acf53eb32e1c0cc148c6fdcdc8f75327
SSDEEP

1536:4yU/NUCdSXXHNeg3JCs/ThPehhhbSlB8wPe08Y/IuA4ENr4xNoO8zWx:TU/NU6KNt/ThW8PHt/IuA9B4xNo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Setup.exe

Files

Setup.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ