General

  • Target
    vpsetup.exe
  • Size 8.5MB
  • Sample260814-c1lr4sshme
  • SHA256 bd3f2933ad2912b9f77b2500a40eac1b5796df786cf7b7987573a1df870ba11e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • vpsetup.exe
    .exe 8.5MB

vpsetup.exe

  • IMPHASH dfc6dbbcea4beda15dcbddfb77d26fc5
  • SHA256 bd3f2933ad2912b9f77b2500a40eac1b5796df786cf7b7987573a1df870ba11e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
52:91:3e:17:74:03:6f:15:58:03:7e:e9:a9:cf:45:80:34:11:15:71:94:dc:34:76:4e:0b:4c:c9:66:d6:c8:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=4489370,CN=NCH Software\, Inc.,O=NCH Software\, Inc.,L=Greenwood Village,ST=Colorado,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
1
Major OS version
5
Entry point
4742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths