setup[.]exe | Triage™

General

Target
setup.exe
Size 363KB
Sample230323-bndqascf23
SHA256 b3c38d2db008a9f4d300d49f6d2d572a49ca2ed74fb61443f1c78dc8aa79a437
MD5 18a26b80d2a132512ec6b66c1e12a048
SHA1 92523bbfdf3b01510e9d079f18bdcc8137024443
SHA512 1542601124a02c6ecabd496e971732eca419bce9e66fdf05aef4c01b3ebe227154dea6143196d7c9cf789481947b78e500dd624d2d94074091f3cff3a36320d6
SSDEEP 3072:QgrEaPOFiOAJtLnDYybyWNt9V/nt+EvKaNGLjQrIRpMqJ7:+W2yeeYEyaNsEypM
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 363KB

setup.exe

IMPHASH cd10f4930e443428517f91868d83e9a6
SHA256 b3c38d2db008a9f4d300d49f6d2d572a49ca2ed74fb61443f1c78dc8aa79a437
MD5 18a26b80d2a132512ec6b66c1e12a048
SHA1 92523bbfdf3b01510e9d079f18bdcc8137024443
SHA512 1542601124a02c6ecabd496e971732eca419bce9e66fdf05aef4c01b3ebe227154dea6143196d7c9cf789481947b78e500dd624d2d94074091f3cff3a36320d6
SSDEEP 3072:QgrEaPOFiOAJtLnDYybyWNt9V/nt+EvKaNGLjQrIRpMqJ7:+W2yeeYEyaNsEypM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16695

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA GlobalCompact _llseek VerSetConditionMask GetConsoleAliasA WritePrivateProfileSectionA SetDefaultCommConfigW InterlockedCompareExchange WriteConsoleInputA BackupSeek FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW EnumTimeFormatsA EnumResourceTypesA ActivateActCtx GlobalAlloc LoadLibraryW TerminateThread ReadConsoleInputA GetSystemWindowsDirectoryA GetFileAttributesA IsDBCSLeadByte lstrcmpW GlobalUnlock FindFirstFileA SetLastError GetProcAddress GetFirmwareEnvironmentVariableW EnterCriticalSection ResetEvent OpenWaitableTimerA GetProcessId LocalAlloc SetCalendarInfoW BuildCommDCBAndTimeoutsW SetCurrentDirectoryW GlobalGetAtomNameW AddAtomA WaitForMultipleObjects FindNextFileA FindFirstVolumeMountPointA GetCPInfoExA DeleteFileW CopyFileExA CloseHandle HeapSize GetLastError WideCharToMultiByte DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW FatalAppExitA HeapFree Sleep IsProcessorFeaturePresent GetLocaleInfoW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetConsoleCtrlHandler FreeLibrary InterlockedExchange HeapAlloc HeapReAlloc WriteConsoleW CreateFileW

user32

LoadMenuA

Sharing