setup[.]exe | Triage™

General

Target
setup.exe
Size 249KB
Sample230320-nmp36afc5v
SHA256 5ae1550d982c796f470292df9afb34df4bdc216c1b09d0b33e99db048f6c908e
MD5 be44e7e27756712940e38a9b1b007362
SHA1 6f958629c18d5771d2d468eef40cba94fbae5af6
SHA512 f744d995bc44e08a85e7ddd93d8c006f3f3242c5be7fb42a00b9dac78c75fef08d7cd7c10f2a680e2cf7e7e372f9effd496e5231bf2e39f248ab7397f53a3da0
SSDEEP 3072:6DWhXbPX6uL3aRByJw9Rg2WqXBFS52h1B3KsgB5nbrOs+:DbX6uL3cKwRIu1B3Ksg7vOs+
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 249KB

setup.exe

IMPHASH a21ec357cc62e28162858acc2a2860a0
SHA256 5ae1550d982c796f470292df9afb34df4bdc216c1b09d0b33e99db048f6c908e
MD5 be44e7e27756712940e38a9b1b007362
SHA1 6f958629c18d5771d2d468eef40cba94fbae5af6
SHA512 f744d995bc44e08a85e7ddd93d8c006f3f3242c5be7fb42a00b9dac78c75fef08d7cd7c10f2a680e2cf7e7e372f9effd496e5231bf2e39f248ab7397f53a3da0
SSDEEP 3072:6DWhXbPX6uL3aRByJw9Rg2WqXBFS52h1B3KsgB5nbrOs+:DbX6uL3cKwRIu1B3Ksg7vOs+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20792

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDriveStringsW SetDefaultCommConfigW WaitForSingleObjectEx GetConsoleAliasesA LoadLibraryW _hread IsBadCodePtr FormatMessageW GetFileAttributesA GetExitCodeProcess FindNextVolumeW SetConsoleMode WritePrivateProfileSectionW GetCompressedFileSizeA GetConsoleAliasesW GetLastError ChangeTimerQueueTimer GetProcAddress EnumSystemCodePagesW CreateMemoryResourceNotification WriteConsoleA LocalAlloc CreateHardLinkW FoldStringA FreeEnvironmentStringsW GetFileInformationByHandle GlobalAddAtomW GlobalReAlloc InterlockedPushEntrySList CloseHandle CreateFileA HeapSize FlushFileBuffers lstrcpynA CallNamedPipeA VirtualAlloc GetProfileIntW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection HeapFree GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar HeapAlloc HeapReAlloc LoadLibraryA SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

ClientToScreen GetKeyState LoadMenuA MessageBoxIndirectA GetListBoxInfo CountClipboardFormats SetScrollInfo

gdi32

GetGlyphIndicesA

advapi32

RegOpenKeyA

Sharing