setup[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

setup.exe
Size

6.2MB
MD5

35de64960b71d3edf87c0b6d0c73719f
SHA1

d9e8d75b6d2407b268a9565d47fbbc41f6823748
SHA256

f546ad7823af81a13d4110dd0ef7529bc491ce02da7057cfd4d8ab11e90b0bfe
SHA512

481f422decc49a4f1dc206e3a67e098419a164f855ad4d8197f1693144ae1f3c8502678e04cdc13b743a087f1f097dc5e3ee3907275b4244a01250f85c0a1b0e
SSDEEP

98304:GvccAZPL4N3WlkqL6w9twz+IaZ7AMjwEQ6PCKYEQJpM3OotT1gFlfn2sLmS5MN:GvtAZj41WJ6pzqZjwT6p14pwOYT+9pml

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setup.exe

Files

setup.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 548B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ