setup[.]exe | Triage™

General

Target
setup.exe
Size 180KB
Sample230321-bxd3esab9w
SHA256 29b8656da62ec521d4d578284483ce143119520ec6b7fec40b5ca82d3eaa564e
MD5 2894a3487ada14cc6395f03e99feac86
SHA1 43254e9b5fcb930fbdcf324510de230b0e457e25
SHA512 be6081463507bef8e33b8b8ff624fc161c6f96950c49e6d87880dc8cc0fe500f07243a2869a7423d360b25ae9723ae8c8846da824b3ee43b1d8a22c7dcb4e810
SSDEEP 3072:gqi32G+I0cozc+pRSv1gnKpvJXjW3JMUIYaBlZZZ:a32hTxRzQSJTNGZ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 180KB

setup.exe

IMPHASH c7e43254116cf1eb594def3fb89b8588
SHA256 29b8656da62ec521d4d578284483ce143119520ec6b7fec40b5ca82d3eaa564e
MD5 2894a3487ada14cc6395f03e99feac86
SHA1 43254e9b5fcb930fbdcf324510de230b0e457e25
SHA512 be6081463507bef8e33b8b8ff624fc161c6f96950c49e6d87880dc8cc0fe500f07243a2869a7423d360b25ae9723ae8c8846da824b3ee43b1d8a22c7dcb4e810
SSDEEP 3072:gqi32G+I0cozc+pRSv1gnKpvJXjW3JMUIYaBlZZZ:a32hTxRzQSJTNGZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12033

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileW EnumCalendarInfoA GetConsoleAliasExesA _llseek BuildCommDCBAndTimeoutsA GetCurrentProcess WritePrivateProfileSectionA SetDefaultCommConfigW InterlockedCompareExchange WriteConsoleInputA GetModuleHandleW EnumCalendarInfoExW GetWindowsDirectoryA EnumTimeFormatsA WriteFileGather EnumResourceTypesA ActivateActCtx LoadLibraryW TerminateThread GetFileAttributesA GetConsoleAliasW IsDBCSLeadByte lstrcmpW GlobalUnlock RaiseException SetCurrentDirectoryA SetLastError GetProcAddress GetFirmwareEnvironmentVariableW EnterCriticalSection GlobalFree ResetEvent OpenWaitableTimerA LocalAlloc AddAtomW GlobalGetAtomNameW WaitForMultipleObjects FindNextFileA FindFirstVolumeMountPointA GetCPInfoExA SetCalendarInfoA ReadConsoleInputW DeleteFileW DeleteFileA GetLastError GetCommandLineA HeapSetInformation GetStartupInfoW LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW HeapSize CloseHandle CreateFileW

user32

LoadMenuA

Sharing