setup[.]exe | Triage™

General

Target
setup.exe
Size 371KB
Sample230316-seflzabd44
SHA256 b4c8fc082585c01b0ff64a7088e77ead33433f1a34251aef7f228d86b615b821
MD5 dd24a099d558e19a5c739666e4bc966e
SHA1 a16f8f201ae838a06812ddf691d80bb5bc894f02
SHA512 100feb712ff28060379fd02ca4ace82a4ca2718132650a3d27b18a3e47fe5c7a959d2e303b6e3bcec8f9ffac98282baf8bc9f2c4f6e7289bdd3880dc956b5d8f
SSDEEP 6144:616mQGLjnPv7AXdP39CAhF5HnVY4joH128Gizb15WEz/Z8qTmu+2OH:6EmQG/nPv7EYAhF9SxPzbTvkL2
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 371KB

setup.exe

IMPHASH 77aaa713a53932c956fea0415526b103
SHA256 b4c8fc082585c01b0ff64a7088e77ead33433f1a34251aef7f228d86b615b821
MD5 dd24a099d558e19a5c739666e4bc966e
SHA1 a16f8f201ae838a06812ddf691d80bb5bc894f02
SHA512 100feb712ff28060379fd02ca4ace82a4ca2718132650a3d27b18a3e47fe5c7a959d2e303b6e3bcec8f9ffac98282baf8bc9f2c4f6e7289bdd3880dc956b5d8f
SSDEEP 6144:616mQGLjnPv7AXdP39CAhF5HnVY4joH128Gizb15WEz/Z8qTmu+2OH:6EmQG/nPv7EYAhF9SxPzbTvkL2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20834

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CallNamedPipeW FreeEnvironmentStringsA GetConsoleAliasesA GetWindowsDirectoryA LoadLibraryW GetStringTypeExW GetExitCodeProcess lstrcpynW GetFileAttributesW LocalReAlloc WriteConsoleW GetBinaryTypeW MultiByteToWideChar SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW OpenJobObjectA LocalAlloc GetFileType CreateHardLinkW CreateEventW GetStringTypeW EnumDateFormatsW FindAtomW DeleteTimerQueueTimer GlobalAddAtomW GetPrivateProfileSectionW OpenFileMappingA LCMapStringW FlushFileBuffers CloseHandle CreateFileA GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA GetStringTypeA GetLocaleInfoA

user32

NotifyWinEvent InvalidateRgn CreateMDIWindowA LoadMenuW GetMenuInfo ScreenToClient

gdi32

GetGlyphIndicesA

Sharing