setup[.]exe | Triage

Sharing

General

Target

setup.exe
Size

428KB
MD5

d64645b99c9f536087c225dc0fa6e83a
SHA1

354f88382e742f13d68a86e42ca7e5d0eaa063c4
SHA256

a352660a1287c6e1bb8600797e82f62f38992896e6b71e4c2e1fc6d15e4eeafc
SHA512

b78959058df42684af04bcc16856be5ba00e789290b4c62cdf342270e530e45630a4ed7819b5ff552563cde4af37c7277a0f57fa0b6dd68bceba2d9a54929625
SSDEEP

12288:wPUtsLE5PwxJ5HHfKtcUStGu64dO2PwxJ:wPpLE5PwxJ5HHfKtcUStGu64d7PwxJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setup.exe

Files

setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Yerong\Documents\Projects\OfficeTool.CS.MYCODES\OfficeTool.CS.MYCODES\obj\x86\Release\Office Installer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 359KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ