Setup[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Setup.exe
Size

931KB
MD5

399973755c876a73760ebeddabb2c914
SHA1

6c560b0c676690018a854b4df3383853d9a706fa
SHA256

b1fed25e8ac7ae8d9427c17d9bc5a48bf71ba7f48a6b7eda8a75ff4dddb94bbb
SHA512

c121b71164a8370a034a470eaae47f4468e261b195a61bcc3ec2f1a7d533f1dbcebe515ae72e1c387fb04f4de556b49afa387c1531a4854e78402f260fd92902
SSDEEP

24576:SqPLeIdib9acevg/eW7HGmDELr/ZjzK3Ipsx61o:vSIq9acevKermK/Zju3K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Setup.exe

Files

Setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\a\Reloaded-II\Reloaded-II\source\Reloaded.Mod.Installer\obj\Debug\net472\Setup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 845KB - Virtual size: 844KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ