setup[.]exe | Triage™

General

Target
setup.exe
Size 354KB
Sample230319-q2dpsage79
SHA256 4248d58d86cfd2a671e4323f57993f95e193c94d8c33ccb7219800bacefa95a6
MD5 029df110444ab7746911e96d1febee72
SHA1 26e77a415e8daea0008f8fc48de5591ed69e5a8c
SHA512 38b91ecd85efd99f7d45ed46fb6a8c310ed3e4468ebf2ec406025921fba82005a646c9ff04b3ef759ba089ad0e855deaf6950c5a02c82b95fceb4945d40904e7
SSDEEP 6144:Bu3LdQxK9Gf0mKGFIZzL/v2XxmXtYXOy5yeirYI/E:Bu3WaM0mJSYz5jYE
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 354KB

setup.exe

IMPHASH d5555405ac36a198d312d7dfaf56a1ed
SHA256 4248d58d86cfd2a671e4323f57993f95e193c94d8c33ccb7219800bacefa95a6
MD5 029df110444ab7746911e96d1febee72
SHA1 26e77a415e8daea0008f8fc48de5591ed69e5a8c
SHA512 38b91ecd85efd99f7d45ed46fb6a8c310ed3e4468ebf2ec406025921fba82005a646c9ff04b3ef759ba089ad0e855deaf6950c5a02c82b95fceb4945d40904e7
SSDEEP 6144:Bu3LdQxK9Gf0mKGFIZzL/v2XxmXtYXOy5yeirYI/E:Bu3WaM0mJSYz5jYE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20408

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDriveStringsW SetDefaultCommConfigW CreateHardLinkA GetConsoleAliasesA LoadLibraryW _hread IsBadCodePtr CreateEventA FormatMessageW GetFileAttributesA GetExitCodeProcess SetConsoleMode WritePrivateProfileSectionW ChangeTimerQueueTimer SetLastError GetProcAddress VirtualAlloc GlobalAddAtomA WriteConsoleA LocalAlloc FoldStringA FreeEnvironmentStringsW VirtualProtect GetWindowsDirectoryW GetFileInformationByHandle GlobalReAlloc InterlockedPushEntrySList LCMapStringW CloseHandle CreateFileA HeapSize FlushFileBuffers lstrcpynA CallNamedPipeA EnumSystemCodePagesW GetVolumeNameForVolumeMountPointA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError HeapFree GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar HeapAlloc HeapReAlloc LoadLibraryA SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

ClientToScreen LoadMenuA InvalidateRgn MessageBoxIndirectA GetMenuInfo CountClipboardFormats SetScrollInfo

gdi32

GetGlyphIndicesW

advapi32

RegOpenKeyA

Sharing