setup[.]exe | Triage™

General

Target
setup.exe
Size 187KB
Sample230315-d7l7wsdc2t
SHA256 1fbfb3292abf8b73b26c30b6bb2d629e58a82da751c701acb4fee78d47675d06
MD5 39da06c38fe534616633d6c6d95102fe
SHA1 6191dae1071ad99bc85fead5e4255aa97d437f5f
SHA512 db6d9be8eeaf778e07c040da25498636c584222393d246dcaf6847bd3beabcacf5ba1a926cc0938b204a4bc51a5a23e1e2bb809c94663c9f06f11c1896fe6edf
SSDEEP 3072:a8guTa8g5M+3pUu5FIrvy7ydzvqDazZni8:guTadRUuTAvR1qD6
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 187KB

setup.exe

IMPHASH 11d51d37617e55d90ea2ab5d83a2aa08
SHA256 1fbfb3292abf8b73b26c30b6bb2d629e58a82da751c701acb4fee78d47675d06
MD5 39da06c38fe534616633d6c6d95102fe
SHA1 6191dae1071ad99bc85fead5e4255aa97d437f5f
SHA512 db6d9be8eeaf778e07c040da25498636c584222393d246dcaf6847bd3beabcacf5ba1a926cc0938b204a4bc51a5a23e1e2bb809c94663c9f06f11c1896fe6edf
SSDEEP 3072:a8guTa8g5M+3pUu5FIrvy7ydzvqDazZni8:guTadRUuTAvR1qD6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12323

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PulseEvent lstrcmpA FindFirstFileW _llseek EnumCalendarInfoW SetDefaultCommConfigW GlobalLock InterlockedCompareExchange SleepEx GetModuleHandleW EnumCalendarInfoExW GetWindowsDirectoryA EnumTimeFormatsA WriteFileGather EnumResourceTypesA GlobalAlloc GetSystemDirectoryW AddRefActCtx CopyFileW LeaveCriticalSection GetConsoleAliasW GetFileAttributesW WritePrivateProfileSectionW RaiseException GetCPInfoExW SetLastError GetProcAddress GetFirmwareEnvironmentVariableW LoadLibraryA OpenWaitableTimerW FindFirstVolumeMountPointW GetExitCodeThread AddAtomW CreateEventW FindNextFileW GetShortPathNameW SetCalendarInfoA ReadConsoleInputW LocalSize CopyFileExA CreateFileW GetLastError MoveFileA DeleteFileA HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc EnterCriticalSection DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess HeapCreate HeapFree ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind LoadLibraryW GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer IsProcessorFeaturePresent HeapSize CloseHandle WriteConsoleW SetStdHandle

user32

LoadMenuW

winhttp

WinHttpSetOption

Sharing