The setup exe (Setup Launcher Unicode) SoftTruck File Malware Analysis

The setup.exe (Setup Launcher Unicode) File Analysis

Updated 1 day ago

Checked by Malware Check

setup.exe

Hash Type	Value	Action
MD5	92f812ed307ce0145daa7d0f48bb6b1e
SHA1	43d62f45b94706d643a59f9be02b11f0747eac49
SHA256	d01f9981dd87faed197504d6fd39fb53b0962c09df462169a98cf17b5221d32b
SHA512	72fa51f68145fb58a27147b8c94d91004e07816073ef4f811eb93bf7113905f1f5706ffb7bb4edbb0f4da00eb840a63cbec06011f60b57c29272d78257ce1cdb
ImpHash	62c62c4f0cbff3f5300c1f4f9c4854ea

Hash Type

Value

Action

MD5

92f812ed307ce0145daa7d0f48bb6b1e

SHA1

43d62f45b94706d643a59f9be02b11f0747eac49

SHA256

d01f9981dd87faed197504d6fd39fb53b0962c09df462169a98cf17b5221d32b

SHA512

72fa51f68145fb58a27147b8c94d91004e07816073ef4f811eb93bf7113905f1f5706ffb7bb4edbb0f4da00eb840a63cbec06011f60b57c29272d78257ce1cdb

ImpHash

62c62c4f0cbff3f5300c1f4f9c4854ea

PE Analysis

Basic Information

▼

Icon	Hash: 0994d4ac1fb53dafefe9f7e2d809d2c5 Fuzzy: 08fe358a3171e11e38736224bc9dd862 dHash: 554d79355d61634d
Image Base	`0x00400000`
Entry Point	`0x004580fc`
Compilation Time	2017-07-27 13:47:44
Checksum	0x022188b5 (Actual: 0x022188b5)
OS Version	5.1
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
PDB Path	`C:\CodeBases\isdev\redist\Language Independent\i386\setup.pdb`
Digital Signature	Chain verification from CN=Softtruck, O=Softtruck, STREET=1238 Acappella Lane, L=Apollo Beach, ST=Florida, 2.5.4.17=33572, C=US (serial:170858385262896091547284924626689384010, sha1:47c6caf4ea33c8dc575dbd715e2e0869718d6562) failed: The path could not be validated because the end-entity certificate expired 2021-11-13 23:59:59Z
Imports	9 libraries COMCTL32, KERNEL32, USER32, GDI32, ADVAPI32, SHELL32, ole32, OLEAUT32, RPCRT4
Exports	0 functions
Resources	75 Resources
Sections	4 Sections

Version Information

▼

CompanyName	SoftTruck
FileDescription	Setup Launcher Unicode
FileVersion	10.01.02
InternalName	Setup
LegalCopyright	Copyright (c) 2015 Flexera Software LLC. All Rights Reserved.
OriginalFilename	InstallShield Setup.exe
ProductName	CargoWiz
ProductVersion	10.01.02
Internal Build Number	176888
ISInternalVersion	22.0.401
ISInternalDescription	Setup Launcher Unicode
Translation	0x0409 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	738,421 bytes	738,816 bytes	6.59 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`5B2F045D5298322BA6727DE76D54B0D9`
`.rdata`	`0x000b6000`	222,826 bytes	223,232 bytes	5.10 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`C10B8E7E278C76B696DDBEBA1E500F3C`
`.data`	`0x000ed000`	35,896 bytes	10,240 bytes	4.45 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`DBD6C9B063D673C81C5BD4D8A1B9D07E`
`.rsrc`	`0x000f6000`	343,408 bytes	343,552 bytes	6.73 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7AC7F760B05580A8366A51C3621F4B19`

Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 75 (339,523 bytes)

Resource Type	Count	Total Size	Percentage
GIF	2	44,681 bytes	13.2%
PNG	2	27,062 bytes	8%
RT_BITMAP	6	208,296 bytes	61.3%
RT_ICON	11	26,552 bytes	7.8%
RT_DIALOG	23	9,914 bytes	2.9%
RT_STRING	25	19,588 bytes	5.8%
RT_GROUP_ICON	3	172 bytes	0.1%
RT_VERSION	1	1,044 bytes	0.3%
RT_MANIFEST	2	2,214 bytes	0.7%

Certificate Chain Analysis

▼

Certificate Information

Product	CargoWiz
Description	Setup Launcher Unicode
File Version	10.01.02
Original Name	InstallShield Setup.exe
Verification Status	A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Signers	Softtruck; COMODO RSA Code Signing CA; Sectigo (formerly Comodo CA)
Internal Name	Setup
Copyright	Copyright (c) 2015 Flexera Software LLC. All Rights Reserved.

Certificate Chain Summary

Softtruck #1 Primary

Validity Period: 2018-11-14 00:00:00 → 2021-11-13 23:59:59

Signature Algorithm: sha256RSA

Serial Number: 80 8A 20 C7 68 CF 95 DE EB 18 74 1C 37 20 DE 4A

COMODO RSA Certification Authority #2 Chain

Validity Period: 2010-01-19 00:00:00 → 2038-01-18 23:59:59

Signature Algorithm: sha384RSA

Serial Number: 4C AA F9 CA DB 63 6F E0 1F F7 4E D8 5B 03 86 9D

COMODO RSA Code Signing CA #3 Chain

Validity Period: 2013-05-09 00:00:00 → 2028-05-08 23:59:59

Signature Algorithm: sha384RSA

Serial Number: 2E 7C 87 CC 0E 93 4A 52 FE 94 FD 1C B7 CD 34 AF

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

Chain verification from CN=Softtruck, O=Softtruck, STREET=1238 Acappella Lane, L=Apollo Beach, ST=Florida, 2.5.4.17=33572, C=US (serial:170858385262896091547284924626689384010, sha1:47c6caf4ea33c8dc575dbd715e2e0869718d6562) failed: The path could not be validated because the end-entity certificate expired 2021-11-13 23:59:59Z

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	setup.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.218.174
Database Version	2025-06-16 13:00:21 UTC

The setup.exe (Setup Launcher Unicode) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification