setup[.]exe | Triage™

General

Target
setup.exe
Size 354KB
Sample230318-rpkg8sce38
SHA256 47c2e67226dd11c86f067265c60710b05a2d22dff4e815841a1138755c5b3bf9
MD5 67fb758c5d0e55986d16b544f2408df0
SHA1 1df3ff15a8dc39cd5e8662f48a1f048d26240a76
SHA512 e15ff27b1ac8d7bd9f378a1031635f2646794b0ee72f0e3ae31b91754f2911bffa7e5702016bf82eca8381b0f8cc3ce8499df1d71b7ae5efd51c82cca528f0cf
SSDEEP 6144:lJMlLOjaB9QRFnp/dTB/6ExXt192LWH+RURt:lJoMaLQRFp1NySXr9qI+Ot
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 354KB

setup.exe

IMPHASH 8b512f0a0b2cd54ff600ee8ace8b2bd0
SHA256 47c2e67226dd11c86f067265c60710b05a2d22dff4e815841a1138755c5b3bf9
MD5 67fb758c5d0e55986d16b544f2408df0
SHA1 1df3ff15a8dc39cd5e8662f48a1f048d26240a76
SHA512 e15ff27b1ac8d7bd9f378a1031635f2646794b0ee72f0e3ae31b91754f2911bffa7e5702016bf82eca8381b0f8cc3ce8499df1d71b7ae5efd51c82cca528f0cf
SSDEEP 6144:lJMlLOjaB9QRFnp/dTB/6ExXt192LWH+RURt:lJoMaLQRFp1NySXr9qI+Ot
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20616

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigW CreateHardLinkA GetConsoleAliasesA LoadLibraryW _hread IsBadCodePtr CreateEventA FormatMessageW GetStringTypeExW GetExitCodeProcess GetFileAttributesW WriteConsoleW WritePrivateProfileSectionW GetLogicalDriveStringsA ChangeTimerQueueTimer SetLastError GetProcAddress GlobalAddAtomA EnumSystemCodePagesW LocalAlloc FoldStringA FreeEnvironmentStringsW VirtualProtect GetWindowsDirectoryW GetFileInformationByHandle GlobalReAlloc InterlockedPushEntrySList LCMapStringW CloseHandle CreateFileA HeapSize lstrcpynA CallNamedPipeA VirtualAlloc GetVolumeNameForVolumeMountPointA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LoadLibraryA SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers RaiseException

user32

ClientToScreen LoadMenuA InvalidateRgn GetMenuInfo MessageBoxIndirectW CountClipboardFormats SetScrollInfo

gdi32

GetGlyphIndicesW

advapi32

RegOpenKeyA

Sharing