setup[.]exe | Triage™

General

Target
setup.exe
Size 291KB
Sample230320-np1mnsfc7s
SHA256 327cadba2fad2913e5fcaba43bb26a14e2d4a49ca679bf449cd317797792845b
MD5 80945b6890a6028979543a53d4634b8f
SHA1 7ea497ce5676ede7c12adda837b78bb7646983bb
SHA512 c0ccead1fe212dd742d5cef1f9afd72be24b17bd81fe1ff7d218907d44604bc333df0ad34fad3a716822e6d28d367b598fde4ae44785ac19180435e770353d38
SSDEEP 3072:M32XmnRLo6BYqljvMQYfvkX/QEHmVqC/aRM1t7luJcxu65n/zJhMI:8nRLoWlAQXQEGAQ+2umxN/dhMI
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 291KB

setup.exe

IMPHASH c901cf1b33a79cac7fcfec57ffb66976
SHA256 327cadba2fad2913e5fcaba43bb26a14e2d4a49ca679bf449cd317797792845b
MD5 80945b6890a6028979543a53d4634b8f
SHA1 7ea497ce5676ede7c12adda837b78bb7646983bb
SHA512 c0ccead1fe212dd742d5cef1f9afd72be24b17bd81fe1ff7d218907d44604bc333df0ad34fad3a716822e6d28d367b598fde4ae44785ac19180435e770353d38
SSDEEP 3072:M32XmnRLo6BYqljvMQYfvkX/QEHmVqC/aRM1t7luJcxu65n/zJhMI:8nRLoWlAQXQEGAQ+2umxN/dhMI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20680

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDriveStringsW SetDefaultCommConfigW WaitForSingleObjectEx GetConsoleAliasesA LoadLibraryW _hread IsBadCodePtr CreateEventA FormatMessageW GetFileAttributesA GetExitCodeProcess SetConsoleMode WritePrivateProfileSectionW GetLastError ChangeTimerQueueTimer GetProcAddress VirtualAlloc GlobalAddAtomA CreateMemoryResourceNotification WriteConsoleA LocalAlloc CreateHardLinkW FoldStringA FreeEnvironmentStringsW GetFileInformationByHandle FindNextVolumeA GlobalReAlloc InterlockedPushEntrySList CloseHandle CreateFileA HeapSize FlushFileBuffers lstrcpynA CallNamedPipeA EnumSystemCodePagesW GetProfileIntW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection HeapFree GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar HeapAlloc HeapReAlloc LoadLibraryA SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

ClientToScreen GetKeyState LoadMenuA MessageBoxIndirectA GetListBoxInfo CountClipboardFormats SetScrollInfo

gdi32

GetGlyphIndicesA

advapi32

RegOpenKeyA

Sharing