Setup[.]exe | Triage

Sharing

General

Target

Setup.exe
Size

131KB
MD5

abf2df1aba1a934b229a5c6c26954414
SHA1

18ee222087a4f65366a24df3998f17e760ad7aa2
SHA256

29c88d185c4c1bee7944a0dc0a53bb5809eba3691b147a8361300b5a2572e350
SHA512

ec19194c5ee91d59c3681f50ffd0b7a8afe1dd65b835418f136e9b4185465b16bb286ed60d77f816421c4d4af80806576dbce351a224975e63ed1ce10cdb280d
SSDEEP

3072:/dK22H8N0c2rPy+nm493gs39GgFNTIGHSxYld4RTV82Sq0:168mPD93ga7yeSgq0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Setup.exe

Files

Setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.css
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE