Setup[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Setup.exe
Size

931KB
MD5

f13b753fedceb29308d16795e5724e32
SHA1

fc9eba137d95dbdd98fd31d6ba3ef2fb4a27ca51
SHA256

95611d16f0b7edd46d4f9c221efe54e7d28a9369772e184931d8ba0cb0914756
SHA512

6e071ff4c1ebd2428a6694e6a857de642994adbdb2153be538fd982e2a263da73937bd265a491e28f5b292606e093aa454755942f4390d8e2a2b5d6534086926
SSDEEP

24576:GqPLeIdib9accvg/eW7HGmDELr/ZjzK3IpscJ1x:TSIq9accvKermK/Zju3K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Setup.exe

Files

Setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\a\Reloaded-II\Reloaded-II\source\Reloaded.Mod.Installer\obj\Debug\net472\Setup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 844KB - Virtual size: 844KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ