setup[.]exe | Triage™

General

Target
setup.exe
Size 419KB
Sample230322-by4pgaeb64
SHA256 4bed42a91c0bea778b8cd2a60e68b8fb0982006a2640781f3fea2c81798fcca1
MD5 1dc54f7e2fe1e126dad15767658a1951
SHA1 1737399ab29d8a0d8c959ad70bd071ad2fcbfb9a
SHA512 01400b910fd19ef1411e06d62d4368fb7f1d9673740b122bc46f42b89534426f75d40106e15b3aa4a193b55faaabbc7e8a645b95829701267613f0d944286fd2
SSDEEP 6144:QnbPLRmEKfNxLXxLPCp0lVD5OUqc6PucWHogWq:KbP1mEANFXh0UqcNcWhW
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 419KB

setup.exe

IMPHASH abf9812c144b37aad537ff6f220c83df
SHA256 4bed42a91c0bea778b8cd2a60e68b8fb0982006a2640781f3fea2c81798fcca1
MD5 1dc54f7e2fe1e126dad15767658a1951
SHA1 1737399ab29d8a0d8c959ad70bd071ad2fcbfb9a
SHA512 01400b910fd19ef1411e06d62d4368fb7f1d9673740b122bc46f42b89534426f75d40106e15b3aa4a193b55faaabbc7e8a645b95829701267613f0d944286fd2
SSDEEP 6144:QnbPLRmEKfNxLXxLPCp0lVD5OUqc6PucWHogWq:KbP1mEANFXh0UqcNcWhW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

35017

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindVolumeClose lstrcpynA WaitNamedPipeA GetLogicalDriveStringsW GlobalSize CreateHardLinkA WaitForSingleObjectEx GetConsoleAliasesA GetCompressedFileSizeW LoadLibraryW GetConsoleMode InterlockedPopEntrySList GetWriteWatch GetFileAttributesW WritePrivateProfileStringW GetConsoleAliasesW GetLastError GetProcAddress EnumSystemCodePagesW CreateMemoryResourceNotification GetNumaHighestNodeNumber WriteConsoleA LocalAlloc BeginUpdateResourceA FoldStringA FreeEnvironmentStringsW DeleteTimerQueueTimer GlobalAddAtomW FlushFileBuffers CloseHandle CreateFileA WriteConsoleW GetConsoleOutputCP SetStdHandle GetModuleHandleA VirtualAlloc SetDefaultCommConfigA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree MultiByteToWideChar TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetLocaleInfoW

user32

ClientToScreen LoadMenuA MessageBoxIndirectA GetKBCodePage GetListBoxInfo GetCaretPos SetScrollInfo GetShellWindow

gdi32

GetCharWidthI

Sharing