The setup exe (Скуби Ду! Зловещий замок Setup) IgroMir File Malware Analysis

The setup.exe (Скуби-Ду! Зловещий замок Setup) File Analysis

Updated 7 months ago

Checked by Malware Check

setup.exe

Hash Type	Value	Action
MD5	2f57f45feb2c4e0f1c33b2df1f6a440b
SHA1	d7d9b74e6492b54ce48e88adf1f04c771b36a898
SHA256	dc045a3b99cb15be67ff8383981c0b4382ce544d927274bc170f2e7db2a18c76
SHA512	fa40aef1ce9ce1328c4199a6c8e047f049e5396e2f0c02e0929a3a5ace167b3d64ab3c41aa04c730a1ef17ff51773182539ed89d3542a850253f46d75984a397
ImpHash	884310b1928934402ea6fec1dbd3cf5e

Hash Type

Value

Action

MD5

2f57f45feb2c4e0f1c33b2df1f6a440b

SHA1

d7d9b74e6492b54ce48e88adf1f04c771b36a898

SHA256

dc045a3b99cb15be67ff8383981c0b4382ce544d927274bc170f2e7db2a18c76

SHA512

fa40aef1ce9ce1328c4199a6c8e047f049e5396e2f0c02e0929a3a5ace167b3d64ab3c41aa04c730a1ef17ff51773182539ed89d3542a850253f46d75984a397

ImpHash

884310b1928934402ea6fec1dbd3cf5e

PE Analysis

Basic Information

▼

Icon	Hash: 30adcb5c0b2e3c35eaec2c110733c9f8 Fuzzy: c98f96d6ffe5af8d4eb0870c1dc20826 dHash: 92e0b496a6cada72
Image Base	`0x00400000`
Entry Point	`0x00409b60`
Compilation Time	1992-06-19 22:22:17
Checksum	0x00000000 (Actual: 0x000e744e)
OS Version	1.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	5 libraries kernel32, user32, oleaut32, advapi32, comctl32
Exports	0 functions
Resources	14 Resources
Sections	8 Sections

Version Information

▼

Comments	This installation was built with Inno Setup.
CompanyName	IgroMir
FileDescription	Скуби-Ду! Зловещий замок Setup
FileVersion
LegalCopyright
ProductName	Скуби-Ду! Зловещий замок
ProductVersion
Translation	0x0000 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`CODE`	`0x00001000`	37,504 bytes	37,888 bytes	6.54 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`EF0E400DE834C254EF1E0F3B1B6ACBB1`
`DATA`	`0x0000b000`	588 bytes	1,024 bytes	2.74 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`0AA31F826DBC484669C6EBB85FF30132`
`BSS`	`0x0000c000`	3,660 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x0000d000`	2,384 bytes	2,560 bytes	4.43 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BB5485BF968B970E5EA81292AF2ACDBA`
`.tls`	`0x0000e000`	8 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x0000f000`	24 bytes	512 bytes	0.20 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`9BA824905BF9C7922B6FC87A38B74366`
`.reloc`	`0x00010000`	2,224 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`D41D8CD98F00B204E9800998ECF8427E`
`.rsrc`	`0x00011000`	11,264 bytes	11,264 bytes	4.50 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`0C62002F6FA84E475FD1BCBF36F191B1`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 14 (10,040 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	4	4,640 bytes	46.2%
RT_STRING	6	2,710 bytes	27%
RT_RCDATA	1	44 bytes	0.4%
RT_GROUP_ICON	1	62 bytes	0.6%
RT_VERSION	1	1,208 bytes	12%
RT_MANIFEST	1	1,376 bytes	13.7%

Certificate Chain Analysis

▼

Certificate Information

Product	Скуби-Ду! Зловещий замок
Description	Скуби-Ду! Зловещий замок Setup

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	setup.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.215.174
Database Version	2025-04-23 01:03:30 UTC

The setup.exe (Скуби-Ду! Зловещий замок Setup) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification