General

Malware Config

Signatures

Files

• NewSetup.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Code Sign

  54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

  Certificate

  Issuer

  CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

  Not Before

  16-04-2020 18:36

  Not After

  16-04-2045 18:44

  Subject

  CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:01:0e:5d:84:bb:11:2d:ca:fc:03:e7:00:00:00:01:0e:5d

  Certificate

  Issuer

  CN=Microsoft ID Verified CS AOC CA 01,O=Microsoft Corporation,C=US

  Not Before

  04-06-2024 17:01

  Not After

  07-06-2024 17:01

  Subject

  CN=GitHub\, Inc.,O=GitHub\, Inc.,L=San Francisco,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  33:00:01:0e:5d:84:bb:11:2d:ca:fc:03:e7:00:00:00:01:0e:5d

  Certificate

  Issuer

  CN=Microsoft ID Verified CS AOC CA 01,O=Microsoft Corporation,C=US

  Not Before

  04-06-2024 17:01

  Not After

  07-06-2024 17:01

  Subject

  CN=GitHub\, Inc.,O=GitHub\, Inc.,L=San Francisco,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  33:00:00:00:07:37:8c:5b:a1:d9:5b:8c:d4:00:00:00:00:00:07

  Certificate

  Issuer

  CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

  Not Before

  13-04-2021 17:31

  Not After

  13-04-2026 17:31

  Subject

  CN=Microsoft ID Verified CS AOC CA 01,O=Microsoft Corporation,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

  Certificate

  Issuer

  CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

  Not Before

  01-04-2021 20:05

  Not After

  01-04-2036 20:15

  Subject

  CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

  Certificate

  Issuer

  CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

  Not Before

  19-11-2020 20:32

  Not After

  19-11-2035 20:42

  Subject

  CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:35:09:05:b5:b2:e7:84:ef:0c:00:00:00:00:00:35

  Certificate

  Issuer

  CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

  Not Before

  15-02-2024 20:35

  Not After

  15-02-2025 20:35

  Subject

  CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  74:6f:0d:85:f8:e7:48:c2:b0:53:0c:7f:77:b4:19:25:c6:87:27:f2:46:07:11:9e:19:d4:ba:6a:fb:46:20:b5

  Signer

  Actual PE Digest

  74:6f:0d:85:f8:e7:48:c2:b0:53:0c:7f:77:b4:19:25:c6:87:27:f2:46:07:11:9e:19:d4:ba:6a:fb:46:20:b5

  Digest Algorithm

  sha256

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  NewSetup_configuration.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 4.0MB - Virtual size: 4.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 488B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ