Overview

overview

7

Static

static

3

revosetup.exe

windows10-2004-x64

7

revosetup.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    revosetup.exe
  • Size 11.3MB
  • Sample260925-wsdajsty3q
  • SHA256 4104dac4bad8d3d547d56240c9362ac06f25f7ae9fb96d2b3673260e7c0a0da3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
installer

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

    installer

File Explorer

  • revosetup.exe
    .exe 11.3MB

revosetup.exe

  • IMPHASH 20dd26497880c05caed9305b3c8b9109
  • SHA256 4104dac4bad8d3d547d56240c9362ac06f25f7ae9fb96d2b3673260e7c0a0da3
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

  • Inno Setup is an open-source installation builder for Windows applications.

    Inno Setup installer

    installer

PE Signature issue

Digest
b9:6f:bf:b3:ce:26:2b:bc:3d:9b:ec:2c:d1:9a:4e:15:be:e5:0b:7d:05:aa:44:23:fb:11:90:75:ca:d0:71:c7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=200204019,CN=VS REVO GROUP OOD,O=VS REVO GROUP OOD,L=Ruse,C=BG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024247
Chains

Jan 1, 0001

PE Signature issue

Digest
22:65:e1:92:21:e2:4d:21:7e:93:be:e0:5c:8d:ff:a4:5e:54:ac:9b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=200204019,CN=VS REVO GROUP OOD,O=VS REVO GROUP OOD,L=Ruse,C=BG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024247
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
5
Entry point
71708
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths