Setup (1)[.]rar | Triage™

General

Target
Setup (1).rar
Size 3.4MB
Sample261003-lpp5tsxtcv
SHA256 7780ae388da6518d361479f074ae313669521b24f0dc8ecb7bcb5e75c23fb3d3
MD5 7d7007a1ef911d49c706c48b79a182af
SHA1 b3065e0f256b1864040027b6c6894b46b98a6450
SHA512 b461824a0491e40254fce9f4fbfe4176164f3731e24cbde82334918dbccf3bf2542ce5a9853c85b387d4a841e29c1cf02d9ecb802217fec269ace08be3efe816
SSDEEP 98304:i2O0vK1hnhEGvEouqzJ8nU0VVAMJxjpN2coqxdm:L8yoannDxjpblS
TLSH
T1BDF533879F78C9E8DE529F12FA1DA85B08C17EED5B3C54CC0582909CFAB1D969210EDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/Setup.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Setup.exe

SHA256 7780ae388da6518d361479f074ae313669521b24f0dc8ecb7bcb5e75c23fb3d3
MD5 7d7007a1ef911d49c706c48b79a182af
SHA1 b3065e0f256b1864040027b6c6894b46b98a6450
SHA512 b461824a0491e40254fce9f4fbfe4176164f3731e24cbde82334918dbccf3bf2542ce5a9853c85b387d4a841e29c1cf02d9ecb802217fec269ace08be3efe816
SSDEEP 98304:i2O0vK1hnhEGvEouqzJ8nU0VVAMJxjpN2coqxdm:L8yoannDxjpblS
TLSH
T1BDF533879F78C9E8DE529F12FA1DA85B08C17EED5B3C54CC0582909CFAB1D969210EDC
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123

SHA256 b0b4acf402fd57f83ec79b3e6a82df47c67a73216570c063ca6563c2769dd6aa
MD5 105c932b97d4cf11bafc7863b3171bfd
SHA1 11be59dd6ccf4bd30857dc96447f345891bb20c4
SHA512 ffb4b36088153ac34bb947845754f721bafaff171b73f2e5d644c7068916022e607af844acd924b7b4b52028f5c586e165fde5a55a1a21858fc7163a861e3aaa
SSDEEP 98304:UkG6DYhEu5NlXHviOtAgwD0B0EsZq58P4JJ19TeUaKGJ7:Ue8GurlXvmdbuJ19naz
TLSH
T1B4F533BC7329BE2BD1FE5B3A6DE0445791702CAA3C5A7737F1DA2016C84A128B746353
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12929152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths