setup[.]exe | Triage™

General

Target
setup.exe
Size 212KB
Sample221127-d5cknsff65
SHA256 d0d72bb86445f46afd1cff56e317543011d1d4a4b6ba18791b63b26a7282af7c
MD5 9a753beb650c0d6827e05507349d5e2c
SHA1 3d2ff8f05f38d4ed25ceb0acdaccb7a77947553a
SHA512 c644e9d0ce686916012f69bfa206de460454a7f3edb923893e625d200a3a3701ac33bc2bdcd2602ff247475de55c043a9a7226cb64000a8a107afdea12d053fa
SSDEEP 6144:C0ZHhsUGfobUee60OB8coWdGe7/M7tp6:bzGfobUeY4hoWj7/M7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

setup.exe

.exe 212KB

setup.exe

IMPHASH 3f7efe3b4d94e5183ceea7403176c7cf
SHA256 d0d72bb86445f46afd1cff56e317543011d1d4a4b6ba18791b63b26a7282af7c
MD5 9a753beb650c0d6827e05507349d5e2c
SHA1 3d2ff8f05f38d4ed25ceb0acdaccb7a77947553a
SHA512 c644e9d0ce686916012f69bfa206de460454a7f3edb923893e625d200a3a3701ac33bc2bdcd2602ff247475de55c043a9a7226cb64000a8a107afdea12d053fa
SSDEEP 6144:C0ZHhsUGfobUee60OB8coWdGe7/M7tp6:bzGfobUeY4hoWj7/M7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19059

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeConsole Sleep MultiByteToWideChar GetModuleHandleA GetProcAddress GetCommandLineA SetUnhandledExceptionFilter GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapAlloc RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount VirtualAlloc HeapReAlloc RtlUnwind HeapSize LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

comdlg32

GetOpenFileNameA GetSaveFileNameA

advapi32

RegQueryValueExA RegCreateKeyA RegSetValueA GetUserNameA RegCloseKey RegOpenKeyExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegDeleteKeyA

Sharing