setup[.]exe | Triage™

General

Target
setup.exe
Size 246KB
Sample230325-c2fbqaaf99
SHA256 ebaf6abc3a0081c2e84e2c344d5dd99d4f4311e579685941e675c075cb87c484
MD5 d027b058d588f568019aad5cb6ab72c4
SHA1 b5327f95d13d3d04120929f41102d1971d77c99f
SHA512 ca1099912a1e7ea079cd931650a106da665ef802b3d69ac0d950da45a9f3908a0bbea68d4de6d3b326d1dc9b894d2c4c97cd163f73ee2e32e1ff4636f23835d9
SSDEEP 3072:0vX2I+zBvXZKed3ggT5snfCDQDwpFCmCYtSpRtR6BSB0hMlwY+A6h2yxx95WNObN:/I2zErzvHOhfY+PEa95j
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 246KB

setup.exe

IMPHASH 4fc712efe0d5d011b63626c597ebe2a6
SHA256 ebaf6abc3a0081c2e84e2c344d5dd99d4f4311e579685941e675c075cb87c484
MD5 d027b058d588f568019aad5cb6ab72c4
SHA1 b5327f95d13d3d04120929f41102d1971d77c99f
SHA512 ca1099912a1e7ea079cd931650a106da665ef802b3d69ac0d950da45a9f3908a0bbea68d4de6d3b326d1dc9b894d2c4c97cd163f73ee2e32e1ff4636f23835d9
SSDEEP 3072:0vX2I+zBvXZKed3ggT5snfCDQDwpFCmCYtSpRtR6BSB0hMlwY+A6h2yxx95WNObN:/I2zErzvHOhfY+PEa95j
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16693

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA CreateMutexW GetStringTypeA GlobalCompact _llseek BuildCommDCBAndTimeoutsA EnumCalendarInfoW VerSetConditionMask GetConsoleAliasA GetCurrentActCtx WriteConsoleInputA SetEvent GetModuleHandleW EnumTimeFormatsW InitializeCriticalSection LoadLibraryW GetFileAttributesA TransactNamedPipe WritePrivateProfileSectionW TerminateProcess IsDBCSLeadByte lstrcmpW GlobalUnlock SetCurrentDirectoryA GetCPInfoExW SetLastError GetProcAddress PeekConsoleInputW GetFirmwareEnvironmentVariableW SearchPathA OpenWaitableTimerA GetProcessId LocalAlloc SetCalendarInfoW FindFirstVolumeMountPointW GlobalGetAtomNameW AddAtomA WaitForMultipleObjects EnumResourceTypesW GetPrivateProfileSectionNamesA FindNextFileA FreeEnvironmentStringsW GetWindowsDirectoryW DeleteFileW EnumCalendarInfoExA CopyFileExA SetStdHandle WriteConsoleW GetLastError MoveFileA WideCharToMultiByte HeapAlloc DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy EnterCriticalSection LeaveCriticalSection GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW FatalAppExitA HeapFree Sleep IsProcessorFeaturePresent GetLocaleInfoW SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale RtlUnwind HeapReAlloc HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle CreateFileW

user32

LoadMenuW

Sharing