Setup[.]exe | Triage

Sharing

General

Target

Setup.exe
Size

296KB
MD5

4fbc8b878d44721f4f838334ac218ca3
SHA1

ab1bbbc858c32c512f3670db42da607ff8f5d797
SHA256

9bed2d09b228519b7b0d423d96e05d45193b88f9669b3d7373ce92b8466ce072
SHA512

804ece432385d03e546d247afa9f60722458262461e669792f24bf23704779b241c2562792aeec0cf7d450d61a967515e712704f33ede2814004d97cc3adde89
SSDEEP

3072:B9UoZkSvCRLTcda4bl7gWz3vW/XhQMg2t6tqnJr:Be8kCCRLTcs4blxvWvhDGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Setup.exe

Files

Setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ