setup[.]exe | Triage™

General

Target
setup.exe
Size 177KB
Sample230320-m188hsfa8v
SHA256 9c3ae890bb2057e818b265b858a8141bf6e2a105e2080c19e69c854494428929
MD5 82afb1705e6ea6440aa0dee85dac94a5
SHA1 5293bac788652bdc794b65cb4091934b6958a109
SHA512 7cd3c7e4fbc4566508ffea249fd0702e780d6b46a79774938fcd751435bfd261ae312b02739642701f9e0980040b90aaa82641e38fc2f153b0bc8b5a977381f9
SSDEEP 3072:8bPYLGr2T4svEblXzx2lJ4pi11S/FbgoluwOxf6sYtS:SYLAJpDMl51S/FbgoRsYt
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 177KB

setup.exe

IMPHASH 4daf380b7f4ab488bcb37b3003ecbd5e
SHA256 9c3ae890bb2057e818b265b858a8141bf6e2a105e2080c19e69c854494428929
MD5 82afb1705e6ea6440aa0dee85dac94a5
SHA1 5293bac788652bdc794b65cb4091934b6958a109
SHA512 7cd3c7e4fbc4566508ffea249fd0702e780d6b46a79774938fcd751435bfd261ae312b02739642701f9e0980040b90aaa82641e38fc2f153b0bc8b5a977381f9
SSDEEP 3072:8bPYLGr2T4svEblXzx2lJ4pi11S/FbgoluwOxf6sYtS:SYLAJpDMl51S/FbgoRsYt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12065

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PulseEvent SetDefaultCommConfigA FindFirstFileW EnumCalendarInfoA CopyFileExW _llseek GetConsoleAliasA GetCurrentProcess InterlockedCompareExchange GetWindowsDirectoryA EnumTimeFormatsA WriteFileGather EnumResourceTypesA ActivateActCtx GetFirmwareEnvironmentVariableA LoadLibraryW Sleep ReadConsoleInputA LeaveCriticalSection GetFileAttributesW WritePrivateProfileSectionW TerminateProcess IsDBCSLeadByte lstrcmpW GlobalUnlock RaiseException SetLastError GetProcAddress GlobalGetAtomNameA OpenWaitableTimerA LocalAlloc FindFirstVolumeMountPointW AddAtomA FindNextFileA GetModuleHandleA GetCPInfoExA SetCalendarInfoA DeleteFileW EnumCalendarInfoExA LocalFree GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW EnterCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapFree SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW HeapSize CloseHandle CreateFileW

user32

LoadMenuA

Sharing