setup[.]exe | Triage™

General

Target
setup.exe
Size 360KB
Sample230323-bmtp5aee7v
SHA256 18f8dd5c8fffc77a808cea5c6e7e7aa922360a64b768b9fbcd4a4c51e4851da1
MD5 9d228b3473942173a21dd33fc1632c31
SHA1 9ae0f74e5e82e0d0f9dff79a9ecb3cfa081d3e8f
SHA512 2d4a9861cb89a9c3d8e59f95bcfd57e735535f18d863865866bb19280310374d50b6845c262ed7b2379d67f21af9563b4385d90dbca0cd9c03a72d4a3fb4d9d3
SSDEEP 3072:Judo8yK7PYV2wZM2j3Y33QVxmuTeZoCUOuA2TVlE4btUk/X8QxRV:JuoF833CYuvCUOuRtUIx
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 360KB

setup.exe

IMPHASH 05d87b5aa905cc75972feaf183240d59
SHA256 18f8dd5c8fffc77a808cea5c6e7e7aa922360a64b768b9fbcd4a4c51e4851da1
MD5 9d228b3473942173a21dd33fc1632c31
SHA1 9ae0f74e5e82e0d0f9dff79a9ecb3cfa081d3e8f
SHA512 2d4a9861cb89a9c3d8e59f95bcfd57e735535f18d863865866bb19280310374d50b6845c262ed7b2379d67f21af9563b4385d90dbca0cd9c03a72d4a3fb4d9d3
SSDEEP 3072:Judo8yK7PYV2wZM2j3Y33QVxmuTeZoCUOuA2TVlE4btUk/X8QxRV:JuoF833CYuvCUOuRtUIx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16695

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA GlobalCompact _llseek VerSetConditionMask GetConsoleAliasA WritePrivateProfileSectionA SetDefaultCommConfigW InterlockedCompareExchange WriteConsoleInputA BackupSeek GetModuleHandleW EnumCalendarInfoExW EnumTimeFormatsA EnumResourceTypesA ActivateActCtx GlobalAlloc LoadLibraryW TerminateThread ReadConsoleInputA GetSystemWindowsDirectoryA GetFileAttributesA IsDBCSLeadByte lstrcmpW GlobalUnlock FindFirstFileA SetLastError GetProcAddress GetFirmwareEnvironmentVariableW EnterCriticalSection ResetEvent OpenWaitableTimerA GetProcessId LocalAlloc SetCalendarInfoW BuildCommDCBAndTimeoutsW SetCurrentDirectoryW GlobalGetAtomNameW AddAtomA WaitForMultipleObjects FindNextFileA FindFirstVolumeMountPointA FreeEnvironmentStringsW GetCPInfoExA DeleteFileW CopyFileExA CloseHandle HeapSize GetLastError WideCharToMultiByte DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW FatalAppExitA HeapFree Sleep IsProcessorFeaturePresent GetLocaleInfoW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetConsoleCtrlHandler FreeLibrary InterlockedExchange HeapAlloc HeapReAlloc WriteConsoleW CreateFileW

user32

LoadMenuW

Sharing