setup[.]exe | Triage™

General

Target
setup.exe
Size 44KB
Sample261011-3gm4yabc65
SHA256 da14487a40009ea319c375f2e08ec1711aa0461133c535779d68921433e4747a
MD5 576efd8e836f8276cc4d89678ad95234
SHA1 9f9b64a58c7e50da694da3a7e764b4ccdb7f78d9
SHA512 5903b18c9ca6b4166baae430a4c00f326afda85b9df6c618fa60fcf9d6465970a838cd8da7421ad2499d430d27aafc850c8f066d1ae55e3b79a9a348a9a5c4f4
SSDEEP 768:HeeTWWG2nwrQAi01RdzhDVpEN2F4bpfxNOfjIPx2DlNTOMs8NgZCmHw4ZYQJr2J:+klGCA3BVYlxNgDlRj10bZYQ
TLSH
T14F239E027355C2F8C81BE470CE99518BD2BAF4C158B141AF4BF2AE979FA36205D38F65
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setup.exe

File Explorer

setup.exe

.exe 44KB

setup.exe

SHA256 da14487a40009ea319c375f2e08ec1711aa0461133c535779d68921433e4747a
MD5 576efd8e836f8276cc4d89678ad95234
SHA1 9f9b64a58c7e50da694da3a7e764b4ccdb7f78d9
SHA512 5903b18c9ca6b4166baae430a4c00f326afda85b9df6c618fa60fcf9d6465970a838cd8da7421ad2499d430d27aafc850c8f066d1ae55e3b79a9a348a9a5c4f4
SSDEEP 768:HeeTWWG2nwrQAi01RdzhDVpEN2F4bpfxNOfjIPx2DlNTOMs8NgZCmHw4ZYQJr2J:+klGCA3BVYlxNgDlRj10bZYQ
TLSH
T14F239E027355C2F8C81BE470CE99518BD2BAF4C158B141AF4BF2AE979FA36205D38F65
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

33696

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

setup.exe

generic