setup[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

setup.exe
Size

5.1MB
MD5

cd3693838f4e0641dcd39947eed72fb6
SHA1

c0a45f5e27687d4ea832daafce3c379e4873b883
SHA256

69f7de81e9c3d858af8e95156d2c66cf1f34c9836886c842b4c10b0b6deb9a6c
SHA512

1430309a6d1229dd15452fc365e2eb59d09b04049e6c864882ed3ddd1cff9657aad9285bff154d2aa5d0d022432943736ba96529a44e60e0a51c13b049b5ce67
SSDEEP

49152:rRg1EZPn2f9k/sHkvi8CyK79VRt9/PN7cIZ4hSs+BuWj5LMBMBpPyn:YEZPn2bbtZRVRD/PNPKhSsSu69B

Score

N/A

Malware Config

Signatures

Files

setup.exe
.exe windows x86

5bb3ece62e65f84ea34304b865ac86ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msacm32

acmStreamSize
acmStreamClose
acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmStreamOpen

winmm

mixerGetControlDetailsA
mixerGetNumDevs
mixerGetLineInfoW
timeBeginPeriod
mixerSetControlDetails
mixerGetDevCapsA
mixerClose
mixerGetLineInfoA
mixerGetLineControlsA
timeEndPeriod
mixerOpen
timeGetTime

msimg32

AlphaBlend

shlwapi

PathStripToRootA
PathRemoveFileSpecA
PathFileExistsA

kernel32

ReadConsoleW
GetConsoleMode
SizeofResource
BeginUpdateResourceA
FindResourceA
GetModuleHandleA
LockResource
LoadResource
UpdateResourceA
EndUpdateResourceA
WriteFile
GetFullPathNameA
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetLastError
CreateFileA
CloseHandle
CreateThread
GetTempFileNameA
DeleteFileA
ExitProcess
LoadLibraryA
GetProcAddress
ReadFile
GetModuleFileNameA
SetHandleInformation
CreatePipe
GetTempPathA
LocalFree
CreateProcessA
GetDiskFreeSpaceExA
FormatMessageA
WaitForMultipleObjects
DeviceIoControl
VirtualLock
GetExitCodeThread
CreateFileMappingA
AreFileApisANSI
ResumeThread
TlsFree
GetVersion
TlsAlloc
SetThreadAffinityMask
GetCurrentThreadId
DeleteCriticalSection
QueryPerformanceFrequency
EnterCriticalSection
GetFileSize
SetFilePointer
TlsGetValue
MapViewOfFile
UnmapViewOfFile
FreeLibrary
QueryPerformanceCounter
SetEvent
WaitForSingleObjectEx
GetTickCount
FlushFileBuffers
InitializeCriticalSection
TlsSetValue
WideCharToMultiByte
LoadLibraryW
Sleep
CreateEventA
LeaveCriticalSection
CreateFileW
MultiByteToWideChar
SetThreadPriority
VirtualUnlock
FreeLibraryAndExitThread
QueueUserAPC
GetModuleHandleW
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
SetThreadExecutionState
VerSetConditionMask
FormatMessageW
GetConsoleCP
SetFilePointerEx
OutputDebugStringW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapAlloc
HeapFree
HeapReAlloc
WriteConsoleW
GetModuleHandleExW
GetModuleFileNameW
GetFileType
GetStdHandle
LoadLibraryExW
RaiseException
RtlUnwind
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
InitializeCriticalSectionAndSpinCount
SetLastError
GetCPInfo
DecodePointer
EncodePointer
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetFileSizeEx
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
GetCurrentThread

user32

RegisterDeviceNotificationW
UnregisterDeviceNotification
ToUnicode
MapVirtualKeyW
ChangeDisplaySettingsExW
EnumDisplaySettingsW
EnumDisplaySettingsExW
EnumDisplayDevicesW
EnumDisplayMonitors
GetRawInputDeviceList
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetRawInputDeviceInfoA
RemovePropW
GetPropW
SetPropW
RedrawWindow
SetForegroundWindow
ReleaseCapture
SetCapture
GetAsyncKeyState
GetKeyState
EmptyClipboard
GetClipboardData
CloseClipboard
OpenClipboard
IsZoomed
BringWindowToTop
RegisterRawInputDevices
GetRawInputData
GetMonitorInfoW
SystemParametersInfoW
LoadImageW
DestroyIcon
LoadCursorW
SetWindowLongW
GetWindowLongW
PtInRect
SetRect
ClipCursor
SetClipboardData
GetClientRect
WindowFromPoint
IsIconic
IsWindowVisible
SetWindowPos
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
UnregisterClassW
DefWindowProcW
GetMessageTime
PeekMessageW
DispatchMessageW
TrackMouseEvent
GetDesktopWindow
MonitorFromWindow
AdjustWindowRectEx
DispatchMessageA
LoadCursorA
GetDC
GetSystemMetrics
GetActiveWindow
RegisterClassA
DefWindowProcA
CreateWindowExA
SetFocus
TranslateMessage
SendDlgItemMessageA
SendMessageA
PeekMessageA
PostQuitMessage
ReleaseDC
BeginPaint
EndPaint
EnableWindow
MessageBoxA

gdi32

SelectObject
CreateDCW
GetDeviceCaps
CreateCompatibleDC
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
SwapBuffers
CreateDIBitmap
DeleteDC
DeleteObject
SetDeviceGammaRamp
GetObjectA
CreateFontA
CreateRectRgn

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

shell32

ord165
ShellExecuteA
SHBrowseForFolderA
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW
SHGetFolderPathA
SHGetPathFromIDListA

ole32

CoUninitialize
CoCreateInstance
CoTaskMemFree
PropVariantClear
CLSIDFromString
CoInitialize

Sections

.text
Size: 581KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5bb3ece62e65f84ea34304b865ac86ff

Headers

DLL Characteristics

File Characteristics

Imports

msacm32

winmm

msimg32

shlwapi

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 581KB - Virtual size: 580KB

.rdata Size: 4.0MB - Virtual size: 4.0MB

.data Size: 136KB - Virtual size: 148KB

.rsrc Size: 340KB - Virtual size: 340KB

.reloc Size: 25KB - Virtual size: 25KB

.text
Size: 581KB - Virtual size: 580KB

.rdata
Size: 4.0MB - Virtual size: 4.0MB

.data
Size: 136KB - Virtual size: 148KB

.rsrc
Size: 340KB - Virtual size: 340KB

.reloc
Size: 25KB - Virtual size: 25KB