Setup[.]exe | Triage

Reason

scan timeout

General

Target

Setup.exe
Size

686.5MB
MD5

1665819338394b6761fb0dea78b3172a
SHA1

2a368d795e08bb83d3ff435926c46eed55b88be4
SHA256

01cc44ca120e4851b05877818d9af14c34f766d2e0e34eb110faa49dd5fa23fe
SHA512

cc55b9ce083a17276e30290cb93cd1cb93c3e75e3da65027877adde498f4b11de81dfed7e0448db1e35aaf8c4433fb6376faa4c84a0d99228d8f9f9128435cc5
SSDEEP

12288:AuRGryK74tFp0c4zQ7M703xkh0gz8geSE2:ABryDv/w03xalzl3

Score

N/A

Malware Config

Signatures

Files

Setup.exe
.exe windows x86

78406245c7e6a8c2d3a42aedee3d19c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
VirtualFree
VirtualAlloc
lstrlenA
lstrcmpA
CloseHandle
HeapAlloc
Sleep
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetLastError
SetEvent
EncodePointer
GetThreadTimes
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
RaiseException
GetModuleHandleExW
GetStdHandle
WriteFile
ExitProcess
LCMapStringW
GetFileType
SetFilePointerEx
GetProcessHeap
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
DecodePointer
CreateFileW
WriteConsoleW

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

UzTa3qr
Size: 350KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

Files

78406245c7e6a8c2d3a42aedee3d19c3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 3KB - Virtual size: 6KB

.gfids Size: 512B - Virtual size: 348B

.rsrc Size: 178KB - Virtual size: 178KB

.reloc Size: 5KB - Virtual size: 4KB

UzTa3qr Size: 350KB - Virtual size: 352KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 3KB - Virtual size: 6KB

.gfids
Size: 512B - Virtual size: 348B

.rsrc
Size: 178KB - Virtual size: 178KB

.reloc
Size: 5KB - Virtual size: 4KB

UzTa3qr
Size: 350KB - Virtual size: 352KB