General

  • Target
    st-setup-1.8.30.exe
  • Size 10.6MB
  • Sample260718-vjvb2abw3w
  • SHA256 41ec92bc311daf40b22b2497d044b12d9ba0266da84d8581255d7cc9e059135f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • st-setup-1.8.30.exe
    .exe 10.6MB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • $PLUGINSDIR/modern-wizard.bmp
    150KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 10KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • Core.dll
    .dll 657KB
  • Qt5Core.dll
    .dll 5.7MB
  • Qt5Gui.dll
    .dll 6.7MB
  • Qt5Network.dll
    .dll 1.3MB
  • Qt5Svg.dll
    .dll 322KB
  • Qt5Widgets.dll
    .dll 5.2MB
  • SteamTools.exe
    .exe 1.7MB
  • imageformats/qico.dll
    .dll 37KB
  • msvcp140.dll
    .dll 612KB
  • msvcp140_1.dll
    .dll 30KB
  • platforms/qwindows.dll
    .dll 1.4MB
  • vcruntime140.dll
    .dll 83KB
  • vcruntime140_1.dll
    .dll 43KB

st-setup-1.8.30.exe

  • IMPHASH f0703cab8d307b776fa8cd2e2c969230
  • SHA256 41ec92bc311daf40b22b2497d044b12d9ba0266da84d8581255d7cc9e059135f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bd:09:0d:8b:61:fd:de:79:80:3e:c5:58:ad:03:da:e9:18:b0:2f:2d:8f:c9:3e:8a:91:22:c1:62:b3:1e:5c:e8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91430103MADWKFRYXD,CN=NewWnight Global Tech Co.\, Ltd,O=NewWnight Global Tech Co.\, Ltd,L=Changsha,ST=Hunan,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13084368616e67736861,1.3.6.1.4.1.311.60.2.1.2=#130548756e616e,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
1
Major OS version
5
Entry point
17920
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths