setup[.]exe | Triage™

General

Target
setup.exe
Size 249KB
Sample230320-naaspsfb41
SHA256 9677d7b71fd5ec5f25de3aa4fd698655d237ef7e1a58a382e1eb5051483ea7e9
MD5 0eb2c650d6f5e5c50adbb7331bd0bf1e
SHA1 841ca1071414c8f8ed174a9f16bebcc5662f933e
SHA512 b3654614fba6711c0a7de70764845d7df434c3bf2dae20c16d40af89d64b3c0e74649ab2acce18a9199a487c7d3a49af72532275abcadaf9cca881751a34fb8c
SSDEEP 3072:XmD8hRdXYL0DNyXmLndO9qKJuDLDfb+DyjvKq4hCRilZ53brDZj:X3dXYL0pHTdO12Dz+izilTvDZj
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 249KB

setup.exe

IMPHASH a21ec357cc62e28162858acc2a2860a0
SHA256 9677d7b71fd5ec5f25de3aa4fd698655d237ef7e1a58a382e1eb5051483ea7e9
MD5 0eb2c650d6f5e5c50adbb7331bd0bf1e
SHA1 841ca1071414c8f8ed174a9f16bebcc5662f933e
SHA512 b3654614fba6711c0a7de70764845d7df434c3bf2dae20c16d40af89d64b3c0e74649ab2acce18a9199a487c7d3a49af72532275abcadaf9cca881751a34fb8c
SSDEEP 3072:XmD8hRdXYL0DNyXmLndO9qKJuDLDfb+DyjvKq4hCRilZ53brDZj:X3dXYL0pHTdO12Dz+izilTvDZj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20776

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDriveStringsW SetDefaultCommConfigW WaitForSingleObjectEx GetConsoleAliasesA LoadLibraryW _hread IsBadCodePtr FormatMessageW GetFileAttributesA GetExitCodeProcess FindNextVolumeW SetConsoleMode WritePrivateProfileSectionW GetCompressedFileSizeA GetConsoleAliasesW GetLastError ChangeTimerQueueTimer GetProcAddress EnumSystemCodePagesW CreateMemoryResourceNotification WriteConsoleA LocalAlloc CreateHardLinkW FoldStringA FreeEnvironmentStringsW GetFileInformationByHandle GlobalAddAtomW GlobalReAlloc InterlockedPushEntrySList CloseHandle CreateFileA HeapSize FlushFileBuffers lstrcpynA CallNamedPipeA VirtualAlloc GetProfileIntW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection HeapFree GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar HeapAlloc HeapReAlloc LoadLibraryA SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

ClientToScreen GetKeyState LoadMenuA MessageBoxIndirectA GetListBoxInfo CountClipboardFormats SetScrollInfo

gdi32

GetGlyphIndicesA

advapi32

RegOpenKeyA

Sharing