setup[.]exe | Triage™

General

Target
setup.exe
Size 177KB
Sample230320-m7zyesdb39
SHA256 ca43a6c62b35d7d86ff1e340a10a12cdb3b3cd83ba92cd3fd5f9ab905cb47bda
MD5 11e52498e0b0da938b961e9216d1d16b
SHA1 26e65846c813fef84c33a9d4484bb6d3ad2e5e9a
SHA512 a42c897ad63013e67a614ebdb31cf04ba4558da955cf205e495cc5f625bb1929a153a0c6ad39819e272b2c4d5a370b7fbdf2a34b61b343df40b16773c8ff9a85
SSDEEP 3072:LiAl2RsQMTtzRR2xOPn+7JrpBew+mX/ssfB29:4RBWd+NeKXNfM
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 177KB

setup.exe

IMPHASH 0c16d61a145a6038e0c4acd3e1db8764
SHA256 ca43a6c62b35d7d86ff1e340a10a12cdb3b3cd83ba92cd3fd5f9ab905cb47bda
MD5 11e52498e0b0da938b961e9216d1d16b
SHA1 26e65846c813fef84c33a9d4484bb6d3ad2e5e9a
SHA512 a42c897ad63013e67a614ebdb31cf04ba4558da955cf205e495cc5f625bb1929a153a0c6ad39819e272b2c4d5a370b7fbdf2a34b61b343df40b16773c8ff9a85
SSDEEP 3072:LiAl2RsQMTtzRR2xOPn+7JrpBew+mX/ssfB29:4RBWd+NeKXNfM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12049

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PulseEvent SetDefaultCommConfigA FindFirstFileW EnumCalendarInfoA _llseek GetConsoleAliasA GetCurrentProcess InterlockedCompareExchange SleepEx GetWindowsDirectoryA EnumTimeFormatsW WriteFileGather EnumResourceTypesA ActivateActCtx GlobalAlloc GetFirmwareEnvironmentVariableA LoadLibraryW Sleep ReadConsoleInputA LeaveCriticalSection GetFileAttributesW WritePrivateProfileSectionW TerminateProcess IsDBCSLeadByte lstrcmpW GlobalUnlock RaiseException SetLastError GetProcAddress GlobalGetAtomNameA OpenWaitableTimerA AddAtomA FindFirstVolumeMountPointA GetModuleHandleA FindNextFileW GetShortPathNameW GetCPInfoExA SetCalendarInfoA ReadConsoleInputW DeleteFileW EnumCalendarInfoExA LocalFree CopyFileExA GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW EnterCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapFree SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW HeapSize CloseHandle CreateFileW

user32

LoadMenuA

Sharing