setup[.]exe | Triage

Sharing

General

Target

setup.exe
Size

15KB
MD5

e4e38781db53ff12f77c7191a3c90740
SHA1

3abc99b80084d1a3d461c770427c09bd7694002a
SHA256

efe2a228bdf1e6adf4bcb788a1c4bf39093a749572572f248fb7b1fee21dc7b7
SHA512

435e37d4be316cf92fe687687c7087d3820bdc2f2011c23dbb0422a4ad62c3592fae3c5b694b9fccdf344e1c758df33a925671f2296f707adf77be9d548ee40a
SSDEEP

384:FLYEr1e9R56oNzdaLi13hPLTuk1sICJbt5j8KoQrJHIT44:FThYR59mWIA0Ik4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setup.exe

Files

setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ