setup[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 179KB
Sample230321-cfj3sagd58
SHA256 5db892a52fbebbf0298d3b5b2cf0c3ed7f9612a9d337c56bb168be336d28cadb
MD5 2a7aaf0b7ed9af90a111dd74ad9aa1ad
SHA1 562c4849728b795a971d755e0c1af872c73aaaed
SHA512 9c82ee89b74fde9924225d59e7603d5c0cfa4e79120cc55d5c500df3396ab1caf101b8077d1c436545ef0034d9e151f100bef9831a206e21a1b99099a97bfef9
SSDEEP 3072:bwevYpKTDMDU0fuuE46lC4PQyfHU6Ig4cjnjFRpbll/XbqefxlS3ETgmBN8vqI5L:sevY8m/u3wB4HzlrzPOefxoEBK7
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 179KB

setup.exe

IMPHASH f214c5f744673db93dec4b219265fbc2
SHA256 5db892a52fbebbf0298d3b5b2cf0c3ed7f9612a9d337c56bb168be336d28cadb
MD5 2a7aaf0b7ed9af90a111dd74ad9aa1ad
SHA1 562c4849728b795a971d755e0c1af872c73aaaed
SHA512 9c82ee89b74fde9924225d59e7603d5c0cfa4e79120cc55d5c500df3396ab1caf101b8077d1c436545ef0034d9e151f100bef9831a206e21a1b99099a97bfef9
SSDEEP 3072:bwevYpKTDMDU0fuuE46lC4PQyfHU6Ig4cjnjFRpbll/XbqefxlS3ETgmBN8vqI5L:sevY8m/u3wB4HzlrzPOefxoEBK7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20807

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError CloseHandle IsBadStringPtrA IsBadCodePtr GetModuleHandleA GetQueuedCompletionStatus FlushFileBuffers HeapSize WriteConsoleW SetStdHandle RtlUnwind IsBadReadPtr VirtualQuery GetSystemInfo CreateIoCompletionPort HeapDestroy GetProcessHeap HeapCreate ExitProcess GetTickCount lstrlenA HeapReAlloc HeapFree HeapAlloc InterlockedIncrement LoadLibraryW OutputDebugStringW LoadLibraryExW LCMapStringEx GetStringTypeW GetCommandLineA IsDebuggerPresent EncodePointer DecodePointer IsProcessorFeaturePresent SetLastError InterlockedDecrement GetCurrentThreadId IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar GetModuleHandleExW GetProcAddress GetStdHandle WriteFile GetModuleFileNameW GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection InitOnceExecuteOnce GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetModuleHandleW EnterCriticalSection LeaveCriticalSection GetConsoleCP GetConsoleMode SetFilePointerEx Sleep CreateFileW

user32

DrawTextW TranslateMessage GetMessageW DispatchMessageW

gdi32

CreateCompatibleDC SelectPalette CreatePen DeleteObject SetROP2 BitBlt CreateRectRgn PathToRegion CreateCompatibleBitmap CreateBitmap DeleteDC

advapi32

GetUserNameW IsTextUnicode

shell32

CommandLineToArgvW SHGetFolderPathW SHGetSpecialFolderPathW

ole32

CoUninitialize CoInitialize CoTaskMemFree CoCreateInstance

shlwapi

PathCompactPathExW PathMakeSystemFolderW

winmm

PlaySoundW waveOutGetNumDevs