setup[.]exe | Triage™

General

Target
setup.exe
Size 251KB
Sample230321-chvbjaad5s
SHA256 0458746488bfc7b98664fe384e53bbde97024537aaf97e96b6851f95e5a5d706
MD5 9f4cafcfeecb46ebe2eacdf524924dfe
SHA1 a074c48136ea48542d6ae059f5864479ceb09d32
SHA512 914b6eb87bd9379ca1081ae3381562bb67090a58c18bf4c6a1ab0edd9db72b0e6b667ccac2a05e47f9e2f38c8838570bddbb8767a231f71d091b6c1350a044dc
SSDEEP 3072:3bhrk2yzQeW9kMGaEIjEJR92NpoJ+4YoYOCtKvkHdVLo8tAICc3I7qZ:lkxA9GacQNpWNY1Olc2ICc3
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 251KB

setup.exe

IMPHASH ac12c624d35aba3a43856b090f9333e4
SHA256 0458746488bfc7b98664fe384e53bbde97024537aaf97e96b6851f95e5a5d706
MD5 9f4cafcfeecb46ebe2eacdf524924dfe
SHA1 a074c48136ea48542d6ae059f5864479ceb09d32
SHA512 914b6eb87bd9379ca1081ae3381562bb67090a58c18bf4c6a1ab0edd9db72b0e6b667ccac2a05e47f9e2f38c8838570bddbb8767a231f71d091b6c1350a044dc
SSDEEP 3072:3bhrk2yzQeW9kMGaEIjEJR92NpoJ+4YoYOCtKvkHdVLo8tAICc3I7qZ:lkxA9GacQNpWNY1Olc2ICc3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12033

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PulseEvent FindFirstFileW EnumCalendarInfoA GetConsoleAliasExesA _llseek BuildCommDCBAndTimeoutsA GetConsoleAliasA GetCurrentProcess WritePrivateProfileSectionA SetDefaultCommConfigW InterlockedCompareExchange GetModuleHandleW EnumCalendarInfoExW GetWindowsDirectoryA EnumTimeFormatsA WriteFileGather EnumResourceTypesA ActivateActCtx GetFirmwareEnvironmentVariableA LoadLibraryW ReadConsoleInputA GetFileAttributesW TerminateProcess IsDBCSLeadByte lstrcmpW GlobalUnlock RaiseException SetCurrentDirectoryA SetLastError GetProcAddress EnterCriticalSection GlobalGetAtomNameA GlobalFree OpenWaitableTimerA LocalAlloc AddAtomW WaitForMultipleObjects FindNextFileA FindFirstVolumeMountPointA GetCPInfoExA SetCalendarInfoA ReadConsoleInputW DeleteFileW DeleteFileA GetLastError GetCommandLineA HeapSetInformation GetStartupInfoW LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW HeapSize CloseHandle CreateFileW

user32

LoadMenuA

Sharing