SetupFile-68989.zip
- SHA256 ef3f82ab769f9fc17877df59566e5349bf4b1e30ca25960d38330d6752797ba3
Behavioral task
behavioral1
Sample
SetupFile-68989.zip
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
SetupFile-68989.zip
Resource
win11ltsc2024-20260709-en
| resource | yara_rule |
|---|---|
| static1/unpack002/res/bin/arc/arc-tiny.linux.sfx | upx |
| static1/unpack002/res/bin/arc/freearc-tiny.sfx | upx |
| static1/unpack002/res/bin/arc/freearc.sfx | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Application_1451.exe |
| unpack002/$PLUGINSDIR/INetC.dll |
| unpack002/$PLUGINSDIR/System.dll |
| unpack002/$PLUGINSDIR/UserInfo.dll |
| unpack002/$PLUGINSDIR/nsDialogs.dll |
| unpack002/$PLUGINSDIR/nsProcess.dll |
| unpack002/Zippex.exe |
| unpack002/dragdropfilesdll.dll |
| unpack002/pea.exe |
| unpack002/res/bin/7z/7z.dll |
| unpack002/res/bin/7z/7z.exe |
| unpack002/res/bin/7z/7z.sfx |
| unpack002/res/bin/7z/7zCon.sfx |
| unpack002/res/bin/7z/Codecs/brotli.dll |
| unpack002/res/bin/7z/Codecs/flzma2.dll |
| unpack002/res/bin/7z/Codecs/lizard.dll |
| unpack002/res/bin/7z/Codecs/lz4.dll |
| unpack002/res/bin/7z/Codecs/lz5.dll |
| unpack002/res/bin/7z/Codecs/zstd.dll |
| unpack002/res/bin/Configure Zippex.exe |
| unpack002/res/bin/arc/Arc.exe |
| unpack002/res/bin/arc/arc-tiny.sfx |
| unpack002/res/bin/arc/facompress.dll |
| unpack002/res/bin/arc/facompress_mt.dll |
| unpack002/res/bin/arc/freearc-installer.sfx |
| unpack002/res/bin/arc/freearc-tiny.sfx |
| unpack002/res/bin/arc/freearc.sfx |
| unpack002/res/bin/brotli/brotli.exe |
| unpack002/res/bin/lpaq/lpaq8.exe |
| unpack002/res/bin/quad/bcm.exe |
| unpack002/res/bin/zpaq/zpaq.exe |
| unpack002/res/bin/zstd/zstd.exe |
| unpack002/res/share/icons/zippex_seven.icl |
Inno Setup installer
| resource | yara_rule |
|---|---|
| static1/unpack002/res/bin/Configure Zippex.exe | innosetup |
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=163, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=9, id=257, version=33145,
count=93, id=1, productName=Unmarked objects,
count=2, id=261, version=35228,
count=1, id=260, version=35228,
count=1, id=256, version=35228,
count=1, id=255, version=35228,
count=1, id=258, version=35228,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=21, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=56, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=259, version=33145,
count=139, id=261, version=33145,
count=19, id=260, version=33145,
count=22, id=259, version=35207,
count=17, id=260, version=35207,
count=36, id=261, version=35207,
count=5, id=257, version=33145,
count=122, id=1, productName=Unmarked objects,
count=8, id=261, version=35225,
count=1, id=256, version=35225,
count=1, id=255, version=35225,
count=1, id=258, version=35225,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=11, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=106, id=1, productName=Unmarked objects,
count=234, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=41, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=10, id=260, version=35222,
count=8, id=259, productName=VS2019 v16.8.4 build 29336, version=29336,
count=1, id=122, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=124, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=120, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=11, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=155, id=1, productName=Unmarked objects,
count=79, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=260, version=35222,
count=15, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=2, id=259, productName=VS2019 v16.8.4 build 29336, version=29336,
count=1, id=124, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=120, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=259, version=30795,
count=142, id=261, version=30795,
count=46, id=261, version=30034,
count=18, id=260, version=30034,
count=9, id=259, version=30034,
count=12, id=260, version=30795,
count=1, id=262, version=30795,
count=13, id=257, version=30795,
count=215, id=1, productName=Unmarked objects,
count=125, id=265, version=30158,
count=4, id=259, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=259, version=30795,
count=146, id=261, version=30795,
count=46, id=261, version=30034,
count=18, id=260, version=30034,
count=9, id=259, version=30034,
count=11, id=260, version=30795,
count=7, id=257, version=30795,
count=149, id=1, productName=Unmarked objects,
count=115, id=265, version=30158,
count=4, id=259, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=259, version=30795,
count=136, id=261, version=30795,
count=33, id=261, version=30034,
count=14, id=260, version=30034,
count=9, id=259, version=30034,
count=12, id=260, version=30795,
count=5, id=257, version=30795,
count=110, id=1, productName=Unmarked objects,
count=43, id=265, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=259, version=30795,
count=161, id=261, version=30795,
count=33, id=261, version=30034,
count=15, id=260, version=30034,
count=9, id=259, version=30034,
count=11, id=260, version=30795,
count=5, id=257, version=30795,
count=133, id=1, productName=Unmarked objects,
count=36, id=265, version=30158,
count=3, id=259, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=259, version=30795,
count=136, id=261, version=30795,
count=33, id=261, version=30034,
count=14, id=260, version=30034,
count=9, id=259, version=30034,
count=11, id=260, version=30795,
count=5, id=257, version=30795,
count=110, id=1, productName=Unmarked objects,
count=32, id=265, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=259, version=30795,
count=136, id=261, version=30795,
count=33, id=261, version=30034,
count=14, id=260, version=30034,
count=9, id=259, version=30034,
count=11, id=260, version=30795,
count=5, id=257, version=30795,
count=110, id=1, productName=Unmarked objects,
count=18, id=265, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=259, version=30795,
count=136, id=261, version=30795,
count=33, id=261, version=30034,
count=14, id=260, version=30034,
count=9, id=259, version=30034,
count=11, id=260, version=30795,
count=5, id=257, version=30795,
count=110, id=1, productName=Unmarked objects,
count=18, id=265, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=259, version=30795,
count=136, id=261, version=30795,
count=33, id=261, version=30034,
count=14, id=260, version=30034,
count=9, id=259, version=30034,
count=11, id=260, version=30795,
count=5, id=257, version=30795,
count=114, id=1, productName=Unmarked objects,
count=44, id=265, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
Inno Setup is an open-source installation builder for Windows applications.
Inno Setup installer
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=152, version=20115,
count=3, id=125, productName=VS2005 build 50727, version=50727,
count=38, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=122, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=121, id=1, productName=Unmarked objects,
count=28, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=20, productName=Unmarked objects (old),
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=152, version=20115,
count=3, id=125, productName=VS2005 build 50727, version=50727,
count=38, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=121, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=121, id=1, productName=Unmarked objects,
count=28, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=15, productName=Unmarked objects (old),
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=35207,
count=4, id=259, version=35207,
count=10, id=260, version=35207,
count=20, id=261, version=35207,
count=2, id=257, version=33145,
count=80, id=1, productName=Unmarked objects,
count=36, id=260, version=35219,
count=1, id=255, version=35219,
count=1, id=258, version=35219,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=81, id=1, productName=Unmarked objects,
count=2, id=149, productName=VS2008 build 21022, version=21022,
count=32, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=127, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=11, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=11, productName=Unmarked objects (old),
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=10, version=8799,