Setup[.]exe | Triage

Sharing

General

Target

Setup.exe
Size

131KB
MD5

2dfce881ad2ca0ca30c5ed6a92230b3f
SHA1

c6792769d515fe768c4b81b123127cb0a08bd4ce
SHA256

230d14997dbfa46128e59c5e2b54f542adb297b1b034f740078fb8d8c03d3df8
SHA512

90c54deefd38e9c3c581bf504cc9db986526551690f983ff9d6a5caaa16d19d9d69143ab878a9cc95087851a26b537f3893f503b025d6024f4bcea58e18fc889
SSDEEP

3072:uTOaWIM8/sjX/6jrvDmCIsqIAOb84vOyHAqbsmghhL:NIM80jXSfbqG8QOCbsphL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Setup.exe

Files

Setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.iat
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE