setup[.]exe | Triage

General

Target

setup.exe
Size

260KB
MD5

5fe3f636d30e1c6691a96a12f5887537
SHA1

3262659c06314951148c4c5c3884442f1bae03e3
SHA256

374dc94b0a36fb0b9065875a751de6222d885f0e22aab649d8e8bad98bd66bfd
SHA512

e1bd30b5fb044ec9a5df274aa5e3a4ee4087b13f7778825c81915bf10dd7fbdffcefa06069a87fb431a68001d8d3e1fd56a842609b37e1b281a2f2157baf2b31
SSDEEP

3072:YOreiBlpwsLoMBa+dy6gwFGXbi6xV6PKB6RvjR1Rnv/VtWWhPvHHh+YUyLjcrYd+:YOreiqsLoUgyF6xIPiwRPvHHhzjLtdC

Score

N/A

Malware Config

Signatures

Files

setup.exe
.exe windows x86

537b4a76cd6140a39ddb6a15925a0d1d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
FreeConsole
ResetEvent
SetEvent
UnlockFile
CreateFiberEx
LockFile
ConvertThreadToFiber
SetFilePointer
EncodePointer
GlobalUnfix
GetCurrentProcessId
AssignProcessToJobObject
GetFileInformationByHandle
CreateEventW
GetLastError
CreateFileW
GetCurrentProcess
GetCommandLineA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 178KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

537b4a76cd6140a39ddb6a15925a0d1d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 66KB - Virtual size: 66KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 178KB - Virtual size: 181KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 66KB - Virtual size: 66KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 178KB - Virtual size: 181KB

.rsrc
Size: 1KB - Virtual size: 1KB