setup[.]exe | Triage™

General

Target
setup.exe
Size 246KB
Sample230325-c5xp6sch41
SHA256 f6318ccf8d9a1882dbee3624343f7232350d1d48284a6aac81241ef8edda2a03
MD5 31971487f54aa25815fcf5b448b29830
SHA1 3f260481194254fb978b6ac9d910ae43bb0d112f
SHA512 13daf9d397c1dc54acc8a14a19015360717d8f991832a73d92e01a8bfd34edadf369772400f0dada20d502d80f5ad2584414760e26fbacd4bcbb53c8668d2692
SSDEEP 3072:av1uzBarc6edobcTShNXuDcyOqmgxSTleuDX+SJA0YhaAe1dudOiIVWNObVr:JotoarqmgxslDM04aAe1qOiIVj
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 246KB

setup.exe

IMPHASH 7b85b4007e97101d5d345ff9023ba03d
SHA256 f6318ccf8d9a1882dbee3624343f7232350d1d48284a6aac81241ef8edda2a03
MD5 31971487f54aa25815fcf5b448b29830
SHA1 3f260481194254fb978b6ac9d910ae43bb0d112f
SHA512 13daf9d397c1dc54acc8a14a19015360717d8f991832a73d92e01a8bfd34edadf369772400f0dada20d502d80f5ad2584414760e26fbacd4bcbb53c8668d2692
SSDEEP 3072:av1uzBarc6edobcTShNXuDcyOqmgxSTleuDX+SJA0YhaAe1dudOiIVWNObVr:JotoarqmgxslDM04aAe1qOiIVj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16693

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA CreateMutexW EnumCalendarInfoA GetStringTypeA GlobalCompact _llseek BuildCommDCBAndTimeoutsA VerSetConditionMask GetConsoleAliasA WriteConsoleInputA GetModuleHandleW EnumTimeFormatsW InitializeCriticalSection LoadLibraryW GetFileAttributesA TransactNamedPipe WritePrivateProfileSectionW TerminateProcess IsDBCSLeadByte lstrcmpW GlobalUnlock DeactivateActCtx SetCurrentDirectoryA SetLastError GetProcAddress PeekConsoleInputW GetFirmwareEnvironmentVariableW SearchPathA ResetEvent OpenWaitableTimerA GetProcessId LocalAlloc SetCalendarInfoW FindFirstVolumeMountPointW GlobalGetAtomNameW AddAtomA WaitForMultipleObjects EnumResourceTypesW GetPrivateProfileSectionNamesA FindNextFileA FreeEnvironmentStringsW GetCPInfoExA GetWindowsDirectoryW DeleteFileW EnumCalendarInfoExA CopyFileExA SetStdHandle WriteConsoleW GetLastError MoveFileA WideCharToMultiByte HeapAlloc DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy EnterCriticalSection LeaveCriticalSection GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW FatalAppExitA HeapFree Sleep IsProcessorFeaturePresent GetLocaleInfoW SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale RtlUnwind HeapReAlloc HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle CreateFileW

user32

LoadMenuW

Sharing