setup[.]exe | Triage™

General

Target
setup.exe
Size 248KB
Sample230320-nbehaafb5w
SHA256 a2d9ed63fed7a0a411b099619447945b8bbf284f1b63b8c982fcf22ea6c3356e
MD5 e210ca294d81d4caef437de591379f92
SHA1 45ba0dd35df78ac9286a78364a761cd4e22e5f0e
SHA512 074e25263c42f3bd11f60df1207595db427b9162c3051431041513cc226f722693c6888126ea9977b10d3570bcfd0eb41e57fd2f17112b87d46c4b51bfb9c6e9
SSDEEP 3072:TDGhbwXcwLXmX2Bne+l9shWHBzyYYx7dre+5nbrVcU:swXcwLXAineqwWHWdreAvVcU
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 248KB

setup.exe

IMPHASH a21ec357cc62e28162858acc2a2860a0
SHA256 a2d9ed63fed7a0a411b099619447945b8bbf284f1b63b8c982fcf22ea6c3356e
MD5 e210ca294d81d4caef437de591379f92
SHA1 45ba0dd35df78ac9286a78364a761cd4e22e5f0e
SHA512 074e25263c42f3bd11f60df1207595db427b9162c3051431041513cc226f722693c6888126ea9977b10d3570bcfd0eb41e57fd2f17112b87d46c4b51bfb9c6e9
SSDEEP 3072:TDGhbwXcwLXmX2Bne+l9shWHBzyYYx7dre+5nbrVcU:swXcwLXAineqwWHWdreAvVcU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20792

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDriveStringsW SetDefaultCommConfigW WaitForSingleObjectEx GetConsoleAliasesA LoadLibraryW _hread IsBadCodePtr FormatMessageW GetFileAttributesA GetExitCodeProcess FindNextVolumeW SetConsoleMode WritePrivateProfileSectionW GetCompressedFileSizeA GetConsoleAliasesW GetLastError ChangeTimerQueueTimer GetProcAddress EnumSystemCodePagesW CreateMemoryResourceNotification WriteConsoleA LocalAlloc CreateHardLinkW FoldStringA FreeEnvironmentStringsW GetFileInformationByHandle GlobalAddAtomW GlobalReAlloc InterlockedPushEntrySList CloseHandle CreateFileA HeapSize FlushFileBuffers lstrcpynA CallNamedPipeA VirtualAlloc GetProfileIntW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection HeapFree GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar HeapAlloc HeapReAlloc LoadLibraryA SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

ClientToScreen GetKeyState LoadMenuA MessageBoxIndirectA GetListBoxInfo CountClipboardFormats SetScrollInfo

gdi32

GetGlyphIndicesA

advapi32

RegOpenKeyA

Sharing