setup[.]exe | Triage™

General

Target
setup.exe
Size 178KB
Sample230320-m7ex9adb34
SHA256 914d0d01e6902bc028bf07ab052222a76888a09b20ec45d0b112a138411b8ecc
MD5 0648524a157abd65c69d0bf9a6997c6e
SHA1 93b71ce1e2d0008237bfa91a74bbd740bbc6c47e
SHA512 58f1a642412da7d9ee8dec046b78d34c1faaf0b5b01bf7fe281621103deb86e10a00b0e00708549319a8637a19a817eeb88b8b510ab0faa8440880bf490c1fae
SSDEEP 3072:YkVBmO9FJcBzEh3ze9wpBuT2tqbM42N305cVkpR4RVmB:NmCF1h3zeGHuT24oB3YRaR
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 178KB

setup.exe

IMPHASH 0c16d61a145a6038e0c4acd3e1db8764
SHA256 914d0d01e6902bc028bf07ab052222a76888a09b20ec45d0b112a138411b8ecc
MD5 0648524a157abd65c69d0bf9a6997c6e
SHA1 93b71ce1e2d0008237bfa91a74bbd740bbc6c47e
SHA512 58f1a642412da7d9ee8dec046b78d34c1faaf0b5b01bf7fe281621103deb86e10a00b0e00708549319a8637a19a817eeb88b8b510ab0faa8440880bf490c1fae
SSDEEP 3072:YkVBmO9FJcBzEh3ze9wpBuT2tqbM42N305cVkpR4RVmB:NmCF1h3zeGHuT24oB3YRaR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12049

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PulseEvent SetDefaultCommConfigA FindFirstFileW EnumCalendarInfoA _llseek GetConsoleAliasA GetCurrentProcess InterlockedCompareExchange SleepEx GetWindowsDirectoryA EnumTimeFormatsW WriteFileGather EnumResourceTypesA ActivateActCtx GlobalAlloc GetFirmwareEnvironmentVariableA LoadLibraryW Sleep ReadConsoleInputA LeaveCriticalSection GetFileAttributesW WritePrivateProfileSectionW TerminateProcess IsDBCSLeadByte lstrcmpW GlobalUnlock RaiseException SetLastError GetProcAddress GlobalGetAtomNameA OpenWaitableTimerA AddAtomA FindFirstVolumeMountPointA GetModuleHandleA FindNextFileW GetShortPathNameW GetCPInfoExA SetCalendarInfoA ReadConsoleInputW DeleteFileW EnumCalendarInfoExA LocalFree CopyFileExA GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW EnterCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapFree SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW HeapSize CloseHandle CreateFileW

user32

LoadMenuA

Sharing