General

  • Target

    Setup.exe

  • Size

    866KB

  • MD5

    4625f69b1be6f7d738a4df335c6ca306

  • SHA1

    52125696d6846193d9e8275568ad0965d040c06a

  • SHA256

    929804f60f8f3a0b0d7862cd91eb6be0a2ba694c4a28e3f9fa2d65ff171469a6

  • SHA512

    863bc0a02a4b94b64fa1a305f9d9ecf8bcacc961578430b922196b9fce30823a3a07442cf968176b0e291f5abc7170f9f9dab37e7988daeb99c4c9b1a7ad4ab7

  • SSDEEP

    24576:Zg8AiKw1LbXu9Z5aHrS0tBF9doVhjY1fOm0w3Q6l6v3:ZgBW56T8BR2fU12EQnv3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    c05041e01f84e1ccca9c4451f3b6a383


    Headers

    Imports

    Sections

  • $TEMP/Adequate
  • $TEMP/American
  • $TEMP/Amino
  • $TEMP/Ate
  • $TEMP/Beatles
  • $TEMP/Canon
  • $TEMP/Competing
  • $TEMP/Convicted
  • $TEMP/Corner
  • $TEMP/Ct
  • $TEMP/Depending
  • $TEMP/Dicks
  • $TEMP/Drill
  • $TEMP/Ebony
  • $TEMP/Fold
  • $TEMP/Gradually
  • $TEMP/Identification
  • $TEMP/Incest
  • $TEMP/Johnny
  • $TEMP/Mariah
  • $TEMP/Maternity
  • $TEMP/Moldova
  • $TEMP/Offers
  • $TEMP/Organisation
  • $TEMP/Oxygen
  • $TEMP/Pdas
  • $TEMP/Porn
  • $TEMP/Portfolio
  • $TEMP/Qualify
  • $TEMP/Regarded
  • $TEMP/Retrieval
  • $TEMP/Scsi
  • $TEMP/Translated
  • $TEMP/Username
  • $TEMP/Walter
  • $TEMP/Yellow