The setup exe File Malware Analysis

Technical Analysis

File Name	setup.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows, RAR self-extracting archive
Scanner Version	1.0.229.174
Database Version	2025-12-01 19:00:35 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	bcdd8da242ac5be6d2a7d86a13be812f
SHA1	8f516dec702165e3eb2182c6d78702c893e7ec66
SHA256	85309b4a5739a95743a0db87a17a9458f14d84ab2cce2ee46ffd0c63c6e1de7f
SHA512	14468b192ca695fef5d2a1d3a774913d464fd1062ff3edd096c9e2f70954f3a23887560d44075dd880ef68e8f7552970e2c162e55e50378c4bd9fa77bb37b770
ImpHash	3c98c11017e670673be70ad841ea9c37

PE Analysis

Basic Information

▼

Icon	Hash: 653467ef90383349a83a26366f5b31f1 Fuzzy: 8f0beee590cacea33f891b6034200e68 dHash: c08f0f6d790f80b3
Image Base	`0x00400000`
Entry Point	`0x0040ac87`
Compilation Time	2012-06-09 13:19:49
Checksum	0x00000000 (Actual: 0x0025d79b)
OS Version	5.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows, RAR self-extracting archive`
PDB Path	`d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	10 libraries COMCTL32, SHLWAPI, KERNEL32, USER32, GDI32, COMDLG32, ADVAPI32, SHELL32, ole32, OLEAUT32
Exports	0 functions
Resources	16 Resources
Sections	5 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	74,526 bytes	74,752 bytes	6.56 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`A8692F5BA740240EF0F9A827376F76F9`
`.rdata`	`0x00014000`	7,445 bytes	7,680 bytes	4.99 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D4F36ACCFFDE0BF520F52486679CCF0D`
`.data`	`0x00016000`	96,036 bytes	512 bytes	3.55 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`B6C7EDB5B7FEC47A37A622CC5D71F3F4`
`.CRT`	`0x0002e000`	32 bytes	512 bytes	0.39 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`439411041EE0B8261668525C5C132CD9`
`.rsrc`	`0x0002f000`	95,664 bytes	95,744 bytes	4.55 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`9213437E878401E511F5D208AF0CF327`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 16 (94,582 bytes)

Resource Type	Count	Total Size	Percentage
RT_BITMAP	1	19,240 bytes	20.3%
RT_ICON	1	67,624 bytes	71.5%
RT_DIALOG	6	2,916 bytes	3.1%
RT_STRING	6	3,318 bytes	3.5%
RT_GROUP_ICON	1	20 bytes	0%
RT_MANIFEST	1	1,464 bytes	1.5%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The setup.exe File Analysis