c72aa542bb2ab960968808643ddf19a8a3460a0b4fc3fa1183a7a88343932f8e
- SHA256 c72aa542bb2ab960968808643ddf19a8a3460a0b4fc3fa1183a7a88343932f8e
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11-20260130-en
windows11-21h2-x64
17 signatures
150 seconds
General
- Target c72aa542bb2ab960968808643ddf19a8a3460a0b4fc3fa1183a7a88343932f8e
- Size 2.4MB
- Sample260509-d4d24sat3v
- SHA256 c72aa542bb2ab960968808643ddf19a8a3460a0b4fc3fa1183a7a88343932f8e
- MD5 28dcbcb68f2e47a7bba9d47c5f86d3ae
- SHA1 2e0c37080486052ac1b4a33d0ba6432d4c76f1f7
- SHA512 b3ad2f08ac77de5d3f4cf1a5ef0bf03161fdb1d2501dd4f5cadc77487d521e0a759923bbc8f43abea8506e1d45f0322da195808631506e678e8d094ee2a6c99e
- SSDEEP 49152:rYTuz9WvrKLke42lvjKEH4fueT/5EWRWs8y59jZP:rYTO9WDuZ9H3eTUsF5Bx
- TLSH T14FC5340A89AFCCD2DD2179B1019EA70A7E7D1104471FBDCB5B9AE1F24333B91E927642
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Setup.exe
File Explorer
-
c72aa542bb2ab960968808643ddf19a8a3460a0b4fc3fa1183a7a88343932f8e.zip 2.4MB
-
Setup.exe.exe 752.3MB
Setup.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 0fdf28371735a3dce97a8c7d401dd316ec803efd173e3b79100bd7472efadb78
- MD5 60b52504739e9958d4a0f487195ae254
- SHA1 f3b9ec56792c3b84eb9ec829cd42cdb711acd2a6
- SHA512 6dcc141fd7f17ac6a983a6ee3c2bef6c162233e3f7c949cd8f88d8865b4c3c00757d4919b148f0c9554b2f6653abb5ee52f08ddf1d0c06aa5bd2746fafb63169
- SSDEEP 49152:5GdkAGe3/mYh759Zm5oy3duuhxQzmN/fKgWXSxH0APnTcwZS:5iWm/Lhitxx8mN/igWXy/7U
- TLSH T166897C13793940E4D5E1D139CA337263AE26B889973837D31AE19D602F363C05E79B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
da:d0:38:53:a5:52:d2:af:86:23:42:a5:e8:9f:b6:5e:14:2d:91:a4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=freecodecamp.org
Chains
May 8, 2026
CN=freecodecamp.org
Subject
CN=freecodecamp.org
Serial Number
da:41:94:8f:ab:dc:aa:3c:0e:1d:5d:63:c5:ba:54:2c
Issuer
CN=WE1
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Apr 20, 2026 - Jul 19, 2026
Minor OS version
1
Major OS version
6
Entry point
446656
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4.4MB
Virtual Size
4.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
320KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
189KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ