setup[.]exe | Triage™

General

Target
setup.exe
Size 249KB
Sample230320-npf82adc57
SHA256 e7a74e351e3011aab2b81ea087afc0beaae8bf3be30596b6a0a157ac0e078288
MD5 0f3b96ab01bae6211eb51eee7ee58725
SHA1 8b474867d88f36557da76d907f59208466a03287
SHA512 73f648c132a0ad8c7def05aad4f8414657e063d8771bc683b21017403459eb5b594624881ab60670d2f5168af563ea7b8a5494ef8a31e94f353cf11d4345fbd7
SSDEEP 3072:nDSCDXwLvmuwphfb7fR/3W2WmnHsH/WqR+XYRG53bryINe:DDXwLv+RPpmOqRIlvyINe
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 249KB

setup.exe

IMPHASH ae82d5b35631960d283d8dec4bb8f292
SHA256 e7a74e351e3011aab2b81ea087afc0beaae8bf3be30596b6a0a157ac0e078288
MD5 0f3b96ab01bae6211eb51eee7ee58725
SHA1 8b474867d88f36557da76d907f59208466a03287
SHA512 73f648c132a0ad8c7def05aad4f8414657e063d8771bc683b21017403459eb5b594624881ab60670d2f5168af563ea7b8a5494ef8a31e94f353cf11d4345fbd7
SSDEEP 3072:nDSCDXwLvmuwphfb7fR/3W2WmnHsH/WqR+XYRG53bryINe:DDXwLv+RPpmOqRIlvyINe
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20776

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDriveStringsW SetDefaultCommConfigW WaitForSingleObjectEx GetConsoleAliasesA LoadLibraryW _hread IsBadCodePtr FormatMessageW GetFileAttributesA GetExitCodeProcess SetConsoleMode WritePrivateProfileSectionW GetCompressedFileSizeA GetConsoleAliasesW GetLastError ChangeTimerQueueTimer GetProcAddress VirtualAlloc CreateMemoryResourceNotification WriteConsoleA LocalAlloc CreateHardLinkW FoldStringA FreeEnvironmentStringsW GetFileInformationByHandle GlobalAddAtomW FindNextVolumeA GlobalReAlloc InterlockedPushEntrySList CloseHandle CreateFileA HeapSize FlushFileBuffers lstrcpynA CallNamedPipeA EnumSystemCodePagesW GetProfileIntW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection HeapFree GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar HeapAlloc HeapReAlloc LoadLibraryA SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

ClientToScreen GetKeyState LoadMenuA MessageBoxIndirectA GetListBoxInfo CountClipboardFormats SetScrollInfo

gdi32

GetGlyphIndicesA

advapi32

RegOpenKeyA

Sharing