setup[.]exe | Triage™

General

Target
setup.exe
Size 1.9MB
Sample230322-bfhz2sga3w
SHA256 2f76513c2b7c8f967a70526fdcf1e5c7976a4a77496e81be277c71fbbfcc3f54
MD5 181cf5e5f39bbe387b3b985b826b16f1
SHA1 4de92a14f49359ed21c3ee0be536f3126eda37db
SHA512 56acae12a3af47a0ac9cf7261e5e51e4f34fb37fed8026f3694ab013eed3c5a5898733ab0d8dc99294af8b1cd80348f75efc262697b7ccea4c69188a9eb7b6b8
SSDEEP 49152:TkLM27jaMzaTnmg4Gd+cauh5ZvumK3GVtoxRTGs:TGM2GMuCg4h05ZvpILRL
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 1.9MB

setup.exe

IMPHASH a1987c4dfef703391c65547d45eb7acc
SHA256 2f76513c2b7c8f967a70526fdcf1e5c7976a4a77496e81be277c71fbbfcc3f54
MD5 181cf5e5f39bbe387b3b985b826b16f1
SHA1 4de92a14f49359ed21c3ee0be536f3126eda37db
SHA512 56acae12a3af47a0ac9cf7261e5e51e4f34fb37fed8026f3694ab013eed3c5a5898733ab0d8dc99294af8b1cd80348f75efc262697b7ccea4c69188a9eb7b6b8
SSDEEP 49152:TkLM27jaMzaTnmg4Gd+cauh5ZvumK3GVtoxRTGs:TGM2GMuCg4h05ZvpILRL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18767

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode lstrcpynA CallNamedPipeA GetLogicalDriveStringsW GlobalSize SetDefaultCommConfigW WaitForSingleObjectEx LoadLibraryW GetConsoleMode GetWriteWatch GetFileAttributesW GetCompressedFileSizeA GetConsoleAliasesW GetLastError ChangeTimerQueueTimer GetProcAddress VirtualAlloc FindVolumeClose CreateMemoryResourceNotification WriteConsoleA LocalAlloc CreateHardLinkW BeginUpdateResourceA FoldStringA FreeEnvironmentStringsW GlobalAddAtomW GetPrivateProfileSectionW InterlockedPushEntrySList FlushFileBuffers CloseHandle CreateFileA HeapSize EnumSystemCodePagesW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc MultiByteToWideChar RtlUnwind LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleHandleA RaiseException SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

ClientToScreen GetKeyState LoadMenuA MessageBoxIndirectA GetClassNameW GetListBoxInfo GetCaretPos SetScrollInfo

gdi32

GetCharWidthI

Sharing