setup[.]exe | Triage™

General

Target
setup.exe
Size 247KB
Sample230316-sdaz4abd38
SHA256 e58e023032ae186acf32d80de52ae9878769f04f77ae6a3f8c28d549ad8e027f
MD5 8374f85cf3cca6916e44b45536072775
SHA1 54aefaee41b14aaf6495f23bffdfe17fd0ef782f
SHA512 1ff1c072c79b175fb7d985392ffe7df54564b4668cc6dadf2e1942432889a1d0ee74e27d6c051861b7c87c2bcd2d56341914b5506b007b7c8143687b3d57c78b
SSDEEP 6144:ZecS7yC2tktjMD59qevFXrrKprUe0En0f2:ZecS7yC2tkxMV1PU90s
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 247KB

setup.exe

IMPHASH 3d4265d5adaad9bd3260c1c59ebef1c7
SHA256 e58e023032ae186acf32d80de52ae9878769f04f77ae6a3f8c28d549ad8e027f
MD5 8374f85cf3cca6916e44b45536072775
SHA1 54aefaee41b14aaf6495f23bffdfe17fd0ef782f
SHA512 1ff1c072c79b175fb7d985392ffe7df54564b4668cc6dadf2e1942432889a1d0ee74e27d6c051861b7c87c2bcd2d56341914b5506b007b7c8143687b3d57c78b
SSDEEP 6144:ZecS7yC2tktjMD59qevFXrrKprUe0En0f2:ZecS7yC2tkxMV1PU90s
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12145

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoW GetConsoleAliasA SetDefaultCommConfigW InterlockedCompareExchange SleepEx GetWindowsDirectoryA EnumTimeFormatsW ActivateActCtx GlobalAlloc GetSystemDirectoryW GetFirmwareEnvironmentVariableA LoadLibraryW TerminateThread CopyFileW ReadFileScatter CreateEventA LeaveCriticalSection GetFileAttributesW WritePrivateProfileSectionW GlobalUnlock _llseek SetLastError GetProcAddress OpenWaitableTimerA SetCalendarInfoW GlobalGetAtomNameW AddAtomA EnumResourceTypesW FindFirstVolumeMountPointA GetModuleHandleA FindNextFileW GetConsoleCursorInfo GetShortPathNameW GetCPInfoExA ReadConsoleInputW LocalSize EnumCalendarInfoExA LocalFree lstrcmpA CopyFileExW RaiseException PulseEvent GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW EnterCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW HeapSize CloseHandle CreateFileW

user32

LoadMenuA

gdi32

GetTextFaceA

advapi32

LookupAccountSidW

Sharing