setup-1.5.zip
- SHA256 ea692f472d83dad2b4a58e1c22890265fc3abfe193dfa99368a19549896c58af
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
setup-1.5.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target setup-1.5.zip
- Size 2.3MB
- Sample260625-mt2vvsaz6v
- SHA256 ea692f472d83dad2b4a58e1c22890265fc3abfe193dfa99368a19549896c58af
- MD5 95bfdd5f0c977262c042dd7bcde28000
- SHA1 833d746cf655ed2bed99d975545a3a28881bc7be
- SHA512 555c94eb9ac5f99be854fdcc3128fe02b51a7434d985569bf1f211da8a1759f59c28b2728542b72cea8796221e37ec5359d3c0b7b95396846f0a02ac2bfe51a3
- SSDEEP 24576:tOmNi5/DJ6hzybfT/abb7raMboIES7dnpA4vOaMe/NQI21AuhKSXguQmu+K:smNi5/EhzyrcvuKom7dnf9MefWhKSX1K
- TLSH T129B5F0C78A861DC7CDC11838AC6B4F745A31C89AF816CA139B32A7BD9FC77948C1A54D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/setup-1.5.exe
File Explorer
-
setup-1.5.zip.zip 2.3MB
-
setup-1.5.exe.exe 788.0MB
setup-1.5.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 5d980a6b2ab38ad5d1e23f8592077d93305e4fcbaf82e2e325977ef48b98cb75
- MD5 29f64d98f72834f4b73d681ecccb864d
- SHA1 5408d72ca41e3342cc8e61edf96b83650e955dbf
- SHA512 bc9c59a9b189d5e0e417a0a01cea126d5ebd0a0706c3907309ff6cb13dca66e540e9713076c2b9da570b9e49509883882ddc4c2046a28cd20f7b4fccb401f4de
- SSDEEP 24576:02W3Vs3m4e+xeJDIEWiX9TMt9Q9j+otBclY3ilEEsWy3+SXtxzBele5rK2mM48Fl:02Wls24e9JsENBM+zqpa35436
- TLSH T13A89AE1B7C9048F9D8AA573998B661857B78BC050B7613CB2E94B3782F723D0BD79B04
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
0d:de:8a:a3:15:e8:3a:98:3b:66:3d:47:ef:e4:25:77:87:8e:98:70
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=pokerstars.com,O=s08SReTQO,L=lfGjkUPHj,ST=BJun3LY3,C=US
Chains
Jun 22, 2026
CN=pokerstars.com,O=s08SReTQO,L=lfGjkUPHj,ST=BJun3LY3,C=US
Subject
CN=pokerstars.com,O=s08SReTQO,L=lfGjkUPHj,ST=BJun3LY3,C=US
Serial Number
4b:c6:d3:2d:22:5d:16:de
Issuer
CN=pokerstars.com,O=s08SReTQO,L=lfGjkUPHj,ST=BJun3LY3,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Jun 24, 2026 - Jun 24, 2027
Minor OS version
1
Major OS version
6
Entry point
471744
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
803KB
Virtual Size
802KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
53KB
Virtual Size
346KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
110KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
177KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ