setup[.]exe | Triage™

General

Target
setup.exe
Size 252KB
Sample230323-b2d8zsef6x
SHA256 6bd9c5b9182a7d21f7d3bdf98af653a0bfd2fc18215fc3c671c494c729af2a64
MD5 0b68b7ee0c59ddf1779559dedcd660b0
SHA1 0f3e519225357d2a241a68ed0d32a7720520c3cb
SHA512 0743d4c582bc1a912c198074a9ebdfb23994cd556565cb27957107f07bd03235dc9f5a579718f192984097eb36145daaf28b9229a3330077bd5ce7e65cfd49b7
SSDEEP 3072:wcDLSw+CeMh+ucYULd7bcm1uOAApXfj2AivYlbX2Y+EZge2CP1Y5hPA82MG:PuZfYULd3Z15fWYlbX2Y+OgeziY8
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 252KB

setup.exe

IMPHASH a4559d1602669b68de352c9c26c5d967
SHA256 6bd9c5b9182a7d21f7d3bdf98af653a0bfd2fc18215fc3c671c494c729af2a64
MD5 0b68b7ee0c59ddf1779559dedcd660b0
SHA1 0f3e519225357d2a241a68ed0d32a7720520c3cb
SHA512 0743d4c582bc1a912c198074a9ebdfb23994cd556565cb27957107f07bd03235dc9f5a579718f192984097eb36145daaf28b9229a3330077bd5ce7e65cfd49b7
SSDEEP 3072:wcDLSw+CeMh+ucYULd7bcm1uOAApXfj2AivYlbX2Y+EZge2CP1Y5hPA82MG:PuZfYULd3Z15fWYlbX2Y+OgeziY8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

35673

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA GetCommState WaitNamedPipeA GetLogicalDriveStringsW GlobalSize CreateHardLinkA WaitForSingleObjectEx ReadConsoleW EnumResourceTypesA SetHandleCount LoadLibraryW GetConsoleMode InterlockedPopEntrySList GetWriteWatch GetFileAttributesW WriteConsoleW GetModuleFileNameW GetCompressedFileSizeA CreateActCtxA WritePrivateProfileStringW GetConsoleAliasesW GetStdHandle SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW EnumSystemCodePagesW CreateMemoryResourceNotification FindResourceExW GetNumaHighestNodeNumber LoadLibraryA LocalAlloc DnsHostnameToComputerNameA WriteProfileSectionW FoldStringA GetModuleHandleA GetCommTimeouts FreeEnvironmentStringsW GetConsoleTitleW GetShortPathNameW DeleteTimerQueueTimer GlobalAddAtomW DebugBreak ReadConsoleOutputCharacterW EnumCalendarInfoExA DeleteFileA FlushFileBuffers CloseHandle CreateFileA GetConsoleOutputCP WriteConsoleA SetStdHandle GetLocaleInfoW GetConsoleCP lstrcpynA IsBadStringPtrW FindVolumeClose SearchPathA SetDefaultCommConfigA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo GetModuleHandleW ExitProcess WriteFile GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer

user32

RealChildWindowFromPoint ScreenToClient GetKeyNameTextA LoadMenuA MessageBoxIndirectA GetDC GetKBCodePage GetScrollInfo SetMenuDefaultItem GetShellWindow

gdi32

GetCharABCWidthsA CreateDiscardableBitmap GetCharWidthI

advapi32

GetEventLogInformation

Sharing