setup[.]exe | Triage™

General

Target
setup.exe
Size 248KB
Sample230320-ndpq2afb7v
SHA256 7fe8549bdd03b859a894da8128e004c7d01edbb7d2281b38481caa6e8ad92ef2
MD5 5dd0f7d7c9121442faaef8d965ddd54f
SHA1 f2e97b41ab5e65243861a2aff8e81b2e926c586f
SHA512 8273b5ef1b49278b9c7407e997517e1d0a5fcb505c3aa371a0e9f10a72cd105f3e03878091f37fde8fb18fa5fe5c41743c2f627969f7ae896b13e6bf38ebd54d
SSDEEP 3072:eDAhv3XsLb+Hm15HeDy0mejpQ2/ciTY653briyiQ:B3XsLb2mhejqAciTYcviyP
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 248KB

setup.exe

IMPHASH a21ec357cc62e28162858acc2a2860a0
SHA256 7fe8549bdd03b859a894da8128e004c7d01edbb7d2281b38481caa6e8ad92ef2
MD5 5dd0f7d7c9121442faaef8d965ddd54f
SHA1 f2e97b41ab5e65243861a2aff8e81b2e926c586f
SHA512 8273b5ef1b49278b9c7407e997517e1d0a5fcb505c3aa371a0e9f10a72cd105f3e03878091f37fde8fb18fa5fe5c41743c2f627969f7ae896b13e6bf38ebd54d
SSDEEP 3072:eDAhv3XsLb+Hm15HeDy0mejpQ2/ciTY653briyiQ:B3XsLb2mhejqAciTYcviyP
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20776

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDriveStringsW SetDefaultCommConfigW WaitForSingleObjectEx GetConsoleAliasesA LoadLibraryW _hread IsBadCodePtr FormatMessageW GetFileAttributesA GetExitCodeProcess FindNextVolumeW SetConsoleMode WritePrivateProfileSectionW GetCompressedFileSizeA GetConsoleAliasesW GetLastError ChangeTimerQueueTimer GetProcAddress EnumSystemCodePagesW CreateMemoryResourceNotification WriteConsoleA LocalAlloc CreateHardLinkW FoldStringA FreeEnvironmentStringsW GetFileInformationByHandle GlobalAddAtomW GlobalReAlloc InterlockedPushEntrySList CloseHandle CreateFileA HeapSize FlushFileBuffers lstrcpynA CallNamedPipeA VirtualAlloc GetProfileIntW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection HeapFree GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar HeapAlloc HeapReAlloc LoadLibraryA SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

ClientToScreen GetKeyState LoadMenuA MessageBoxIndirectA GetListBoxInfo CountClipboardFormats SetScrollInfo

gdi32

GetGlyphIndicesA

advapi32

RegOpenKeyA

Sharing