setupsoft[.]exe | Triage™

General

Target
setupsoft.exe
Size 276KB
Sample230303-bsdabsfc4y
SHA256 c77c2a169abc41f1f7afd50c62fcd1e3b3a3998edf4ff21b1dbcb9e2412cc363
MD5 ff87ee322890d662cabd69a777361c49
SHA1 03034be07490405bcbae845b706a11cd24997dbb
SHA512 c53b5b4860453fd192ea77fc1d4f3e7c90e9eed836dd3bae2bb85d7317411be150362aa4d29ace8d1e5261f4f5babc7a9501ba6e96dc041ae805f73858b9f39f
SSDEEP 3072:FynGlhEu9LqTXFPY7wekUaCNTo0CkBXfmcsntKHDc0WVxmBMVCNM/Y/DnUU:symu9LqpPcpo8v364HQuBMCgan
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setupsoft.exe

.exe 276KB

setupsoft.exe

IMPHASH 7d1287ebaf72365e39814fe87a9e44ad
SHA256 c77c2a169abc41f1f7afd50c62fcd1e3b3a3998edf4ff21b1dbcb9e2412cc363
MD5 ff87ee322890d662cabd69a777361c49
SHA1 03034be07490405bcbae845b706a11cd24997dbb
SHA512 c53b5b4860453fd192ea77fc1d4f3e7c90e9eed836dd3bae2bb85d7317411be150362aa4d29ace8d1e5261f4f5babc7a9501ba6e96dc041ae805f73858b9f39f
SSDEEP 3072:FynGlhEu9LqTXFPY7wekUaCNTo0CkBXfmcsntKHDc0WVxmBMVCNM/Y/DnUU:symu9LqpPcpo8v364HQuBMCgan
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17859

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceExW GetConsoleAliasExesLengthA GlobalAddAtomA GetModuleHandleW UnlockFileEx GetConsoleAliasesA SetHandleCount GlobalAlloc FormatMessageW GetStringTypeExW GetFileAttributesW GetBinaryTypeA EnumSystemLocalesA SetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA InterlockedExchangeAdd GetFileType WriteProfileSectionW OpenJobObjectW FindAtomA FoldStringA EnumDateFormatsA GetModuleHandleA FreeEnvironmentStringsW GetStringTypeW OpenEventW GetWindowsDirectoryW WriteConsoleW GetConsoleOutputCP LocalUnlock MultiByteToWideChar GetStartupInfoW EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetLastError Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA HeapAlloc HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle SetEndOfFile GetProcessHeap ReadFile RaiseException HeapSize

user32

LoadMenuW RedrawWindow CharLowerBuffA DestroyAcceleratorTable

gdi32

GetTextExtentPointI

Sharing