setup[.]exe | Triage™

General

Target
setup.exe
Size 178KB
Sample230321-cbjw8aac9s
SHA256 d8f2dc4cefb85694d686f72056cb8ad7f00bf39de2a545478e2b36f15d2f5ddc
MD5 0dc82954201970479ce7248911a2ac14
SHA1 e57db31a85811db6531e05ddeaccc56e11534945
SHA512 9660b69e018769e733602894795b76ef2c8aae3c6f8126cbbc603d37d694e0e092950af2c54805f40d0c867afaf9dccd66fdaf38ce6b005b633c97a676b842f4
SSDEEP 3072:E0I+VUzA7IfN+5ouiUOxAGh8T4VdWW82l4/4:6WUkdouuOGhx822
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 178KB

setup.exe

IMPHASH b6299cf22bb1b2b906c76a98a991dd84
SHA256 d8f2dc4cefb85694d686f72056cb8ad7f00bf39de2a545478e2b36f15d2f5ddc
MD5 0dc82954201970479ce7248911a2ac14
SHA1 e57db31a85811db6531e05ddeaccc56e11534945
SHA512 9660b69e018769e733602894795b76ef2c8aae3c6f8126cbbc603d37d694e0e092950af2c54805f40d0c867afaf9dccd66fdaf38ce6b005b633c97a676b842f4
SSDEEP 3072:E0I+VUzA7IfN+5ouiUOxAGh8T4VdWW82l4/4:6WUkdouuOGhx822
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12081

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PulseEvent SetDefaultCommConfigA FindFirstFileW EnumCalendarInfoA CopyFileExW GetConsoleAliasExesA _llseek BuildCommDCBAndTimeoutsA GetConsoleAliasA GetCurrentProcess InterlockedCompareExchange GetWindowsDirectoryA EnumTimeFormatsA WriteFileGather EnumResourceTypesA ActivateActCtx GetFirmwareEnvironmentVariableA LoadLibraryW Sleep ReadConsoleInputA GetFileAttributesW WritePrivateProfileSectionW TerminateProcess IsDBCSLeadByte lstrcmpW GlobalUnlock RaiseException SetCurrentDirectoryA SetLastError GetProcAddress EnterCriticalSection GlobalGetAtomNameA GlobalFree OpenWaitableTimerA LocalAlloc FindFirstVolumeMountPointW AddAtomA FindNextFileA GetModuleHandleA GetCPInfoExA SetCalendarInfoA DeleteFileW EnumCalendarInfoExA GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapFree SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW HeapSize CloseHandle CreateFileW

user32

LoadMenuA

Sharing