General

  • Target
    setupglx.exe
  • Size 2.7MB
  • Sample260710-gzedvsfx2v
  • SHA256 9c1c4b043577300a8ebd0b9840d887ac7e0dde4dcdb99e98ea19129e2646c501
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 2 IoCs

    Codesigned file was signed by an untrusted entity.

  • NSIS installer 1 IoCs

File Explorer

  • setupglx.exe
    .exe 2.7MB
  • $_3_
    .exe 1.8MB
  • $_4_
    33KB
  • $_5_
    .png 23KB
  • $_7_/index.7ze
    120KB
  • $_7_/installer/new.7ze
    867KB
  • $_7_/uninstaller/new.7ze
    905KB

setupglx.exe

  • IMPHASH ac906a057556b881e3a2dbe70f53cee4
  • SHA256 9c1c4b043577300a8ebd0b9840d887ac7e0dde4dcdb99e98ea19129e2646c501
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

  • NSIS installer

PE Signature issue

Digest
72:70:d4:eb:0e:d1:ee:87:4c:c1:29:6c:f5:f5:21:22:46:ee:ba:33
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Playtech PLC,O=Playtech PLC,L=Douglas,C=IM
Minor OS version
0
Major OS version
4
Entry point
17220
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED
PDB paths