THUGProSetup[.]exe | Triage

Sharing

General

Target

THUGProSetup.exe
Size

599KB
MD5

f108ad491d65a33b3e4c589d7a9bd810
SHA1

7c222f889350eb07bb746d3891c08a7398884623
SHA256

82ea5130da1ddcd9f8038aafdf0d61c95847b31b1956deed46f0e9853215800a
SHA512

0cecc84701883bfaf1fa3514f72e104d24df8918a23b3af4c8a8065f9b2bdc076885de43db743e860501b546b2babf87e71f1a9309069cd2d330e614d8cba152
SSDEEP

12288:5K/jnU/22a8T85hK/jnU/22a8T85dK/jnU/22a8T85Y:5g7z5hg7z5dg7z5Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
THUGProSetup.exe

Files

THUGProSetup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Repos\thugpro_installer\THUGProSetup\WindowsFormsApplication1\obj\Release\THUGProSetup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 416KB - Virtual size: 415KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ