setup[.]exe | Triage™

General

Target
setup.exe
Size 320KB
Sample230322-bax7sadh93
SHA256 23488255342c1cb2d2b0c3abf96df717e4e6403768c36f2c9c44fc9cb70fee1b
MD5 dad11829d5dc7eaaffba76a0cec749c2
SHA1 57abf55a6811571e654054c01a0cc945fe095016
SHA512 f2ad22de37a3647ce9b9cc45a34c9691b4ebf9dbbfc01938aab4b54c0d54ae96c2dcd93e3d0515d1cb487197d7408b1431bc464f2d7f0b58edcf749aa9bf4529
SSDEEP 6144:2rWKL+VhtCq4amGGGGG+pqKPcTZI94WvlQ:2rWKiXtCq4fOTZBWK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 320KB

setup.exe

IMPHASH a1987c4dfef703391c65547d45eb7acc
SHA256 23488255342c1cb2d2b0c3abf96df717e4e6403768c36f2c9c44fc9cb70fee1b
MD5 dad11829d5dc7eaaffba76a0cec749c2
SHA1 57abf55a6811571e654054c01a0cc945fe095016
SHA512 f2ad22de37a3647ce9b9cc45a34c9691b4ebf9dbbfc01938aab4b54c0d54ae96c2dcd93e3d0515d1cb487197d7408b1431bc464f2d7f0b58edcf749aa9bf4529
SSDEEP 6144:2rWKL+VhtCq4amGGGGG+pqKPcTZI94WvlQ:2rWKiXtCq4fOTZBWK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18767

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode lstrcpynA CallNamedPipeA GetLogicalDriveStringsW GlobalSize SetDefaultCommConfigW WaitForSingleObjectEx LoadLibraryW GetConsoleMode GetWriteWatch GetFileAttributesW GetCompressedFileSizeA GetConsoleAliasesW GetLastError ChangeTimerQueueTimer GetProcAddress VirtualAlloc FindVolumeClose CreateMemoryResourceNotification WriteConsoleA LocalAlloc CreateHardLinkW BeginUpdateResourceA FoldStringA FreeEnvironmentStringsW GlobalAddAtomW GetPrivateProfileSectionW InterlockedPushEntrySList FlushFileBuffers CloseHandle CreateFileA HeapSize EnumSystemCodePagesW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc MultiByteToWideChar RtlUnwind LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleHandleA RaiseException SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

ClientToScreen GetKeyState LoadMenuA MessageBoxIndirectA GetClassNameW GetListBoxInfo GetCaretPos SetScrollInfo

gdi32

GetCharWidthI

Sharing