setup[.]exe | Triage™

General

Target
setup.exe
Size 3.1MB
Sample261107-ncpdwacw4k
SHA256 d04dce5f6c2ac14c1b3b4c96c0b7f0243fec53479c7df557b13ea8f47c654ecd
MD5 823d168e13f2ac97714ef56a87d4f2bf
SHA1 362980ac0c78030180a791bda7397c6f5fd6761f
SHA512 509f6b42fa8272da9981d7aac4207a78df9bf5aab58626ff3aebf8dcbb0b94b6476bd4159ab0b90ebdd1b864225212fbb725cc2d1faa251e7cc66767f404ee08
SSDEEP 49152:j1swThBCreKWehiRjZlIck6diItEs5wBDXTXiWI77gIbPLYhk4MiGaXZBn/N4eW:j1LMNJSlIRGaawl3+7LLYzMiGapt/q
TLSH
T117E533D16149DF87C322BBFDE9B8B1B501EB154EFB05A7D29AB065B0EB62C4C530C1A1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setup.exe

SHA256 d04dce5f6c2ac14c1b3b4c96c0b7f0243fec53479c7df557b13ea8f47c654ecd
MD5 823d168e13f2ac97714ef56a87d4f2bf
SHA1 362980ac0c78030180a791bda7397c6f5fd6761f
SHA512 509f6b42fa8272da9981d7aac4207a78df9bf5aab58626ff3aebf8dcbb0b94b6476bd4159ab0b90ebdd1b864225212fbb725cc2d1faa251e7cc66767f404ee08
SSDEEP 49152:j1swThBCreKWehiRjZlIck6diItEs5wBDXTXiWI77gIbPLYhk4MiGaXZBn/N4eW:j1LMNJSlIRGaawl3+7LLYzMiGapt/q
TLSH
T117E533D16149DF87C322BBFDE9B8B1B501EB154EFB05A7D29AB065B0EB62C4C530C1A1
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12108576

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths