Setup[.]exe | Triage™

Resubmissions

09/07/2026, 13:53

260709-q7frbsbw5p8

09/07/2026, 13:12

260709-qfgvbacs318

Sharing

Copy URL Twitter E-mail

General

Target
Setup.exe
Size 250KB
Sample260709-qfgvbacs31
SHA256 8f44b0c05a2d9f7bb4fe14dab9866bca8768f7fc4e412c0331c222007aa849bd
MD5 fd956132bffc2e822ed659e2047ef4de
SHA1 f5749862588cc930a7beb457114966e1a8df778e
SHA512 d7aba07e83694de5a30ddbe6bdd11832770a6779a4ac1753d4375b5ab980dce95f485ca2e1286340d96040d41a79780da1cd34f569d06fed60be4f7ec80e95f1
SSDEEP 3072:N9INdIYvVWf6kS+gMgfc1PO2xGTE9yUnJiGFXSiLARvd2qdFVLHCWYBRmKobQ+2V:4FWf6kSdCOLE9yUnJfNS5toav207+L
TLSH
T178446B0A77A40CF8E9B7C23DC9564A05EAB2BC560761E7DF03A0425B5F276E09D3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Setup.exe

File Explorer

Setup.exe

.exe 250KB

Setup.exe

IMPHASH be3cfde56d5b29587447e2d4362effec
SHA256 8f44b0c05a2d9f7bb4fe14dab9866bca8768f7fc4e412c0331c222007aa849bd
MD5 fd956132bffc2e822ed659e2047ef4de
SHA1 f5749862588cc930a7beb457114966e1a8df778e
SHA512 d7aba07e83694de5a30ddbe6bdd11832770a6779a4ac1753d4375b5ab980dce95f485ca2e1286340d96040d41a79780da1cd34f569d06fed60be4f7ec80e95f1
SSDEEP 3072:N9INdIYvVWf6kS+gMgfc1PO2xGTE9yUnJiGFXSiLARvd2qdFVLHCWYBRmKobQ+2V:4FWf6kSdCOLE9yUnJfNS5toav207+L
TLSH
T178446B0A77A40CF8E9B7C23DC9564A05EAB2BC560761E7DF03A0425B5F276E09D3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

59288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

A:\CODE\Game\ProjectLoader\x64\Release\Setup.pdb

kernel32

FindClose CreateFileW GetFileAttributesW MultiByteToWideChar GetLastError DeleteFileW CloseHandle LocalFree GetFileSize GetModuleHandleW WideCharToMultiByte VirtualFree VirtualAlloc Sleep GetCurrentProcessId SetFilePointer HeapFree SetLastError LoadLibraryA GetNativeSystemInfo LoadLibraryW HeapAlloc GetProcAddress GetProcessHeap FreeLibrary IsBadReadPtr GetCommandLineW ReadFile GetCurrentProcess WriteConsoleW HeapSize SetStdHandle GetModuleFileNameW WriteFile FindNextFileW FindFirstFileExW VirtualProtect CreateDirectoryW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage ReadConsoleW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW FlsFree FlsSetValue FormatMessageA GetStringTypeW GetCurrentDirectoryW GetLocaleInfoEx LCMapStringEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer GetCPInfo IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TerminateProcess RtlUnwindEx RtlPcToFileHeader RaiseException InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW RtlUnwind ExitProcess GetModuleHandleExW GetStdHandle GetFileSizeEx SetFilePointerEx GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapReAlloc FlsAlloc FlsGetValue SetEndOfFile

user32

MessageBoxA

shell32

CommandLineToArgvW

ntdll

RtlCaptureContext RtlVirtualUnwind RtlLookupFunctionEntry

wininet

InternetOpenUrlW InternetReadFile InternetCloseHandle InternetOpenW

Name

.text

Size

161KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Setup.exe

kernel32

user32

shell32

ntdll

wininet

generic