NewSetup[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NewSetup.exe
Size

311KB
MD5

ad06a439fc1dd90c4bb8e0462a9afb39
SHA1

ef0ad7d08436481d3c55a0e5ebdc254079c9c2e3
SHA256

eff1d82b53798e9ee0f1d694c716713184aba0b9cca19fd61af174475d2447d9
SHA512

9d35ff7a77ce27673d4d28c6590df58c85ecbc854af88be516ae1e3ad50f3e378fa774a4a5d96d4375a2f269e12b73af23458bf2d1141a4a314e1227c920ad1f
SSDEEP

6144:053TEWLFM+JjpIyCU15Z4OKhxXKVDc1q6FZ4EpwxlndGLA:qdZM+dpIyr+OKCa1q6MEpElg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NewSetup.exe

Files

NewSetup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\1xmd1cx2qr8c1k\obj\Re\ease\fsB.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ