setup[.]exe | Triage™

General

Target
setup.exe
Size 246KB
Sample230325-c7khmach6t
SHA256 1e7e5648d41a883afc03b1565cb5f7c5712b49562bf64ddd25787c6cb3fa4389
MD5 c6dcf1137c239b05a6ea09f138961cad
SHA1 e49a91a70d5cf831719a6fcd38f21f611930f03a
SHA512 17908f8868baf300cb3154d958c3216c40f896a4869a78e2bf30068a3c47400359afc6eb6f4c5a465643f504d01c20ac9d1734197a818aa6544a649e8c0eb5da
SSDEEP 3072:9WdZzhoXOLgdDAgTn/QfWuDHUUgELdSeViiYch50r5cvd0WNObVq:INcTbS3LdSeVBYc7Cmd0j
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 246KB

setup.exe

IMPHASH 7b85b4007e97101d5d345ff9023ba03d
SHA256 1e7e5648d41a883afc03b1565cb5f7c5712b49562bf64ddd25787c6cb3fa4389
MD5 c6dcf1137c239b05a6ea09f138961cad
SHA1 e49a91a70d5cf831719a6fcd38f21f611930f03a
SHA512 17908f8868baf300cb3154d958c3216c40f896a4869a78e2bf30068a3c47400359afc6eb6f4c5a465643f504d01c20ac9d1734197a818aa6544a649e8c0eb5da
SSDEEP 3072:9WdZzhoXOLgdDAgTn/QfWuDHUUgELdSeViiYch50r5cvd0WNObVq:INcTbS3LdSeVBYc7Cmd0j
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16693

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA CreateMutexW EnumCalendarInfoA GetStringTypeA GlobalCompact _llseek BuildCommDCBAndTimeoutsA VerSetConditionMask GetConsoleAliasA WriteConsoleInputA GetModuleHandleW EnumTimeFormatsW InitializeCriticalSection LoadLibraryW GetFileAttributesA TransactNamedPipe WritePrivateProfileSectionW TerminateProcess IsDBCSLeadByte lstrcmpW GlobalUnlock DeactivateActCtx SetCurrentDirectoryA SetLastError GetProcAddress PeekConsoleInputW GetFirmwareEnvironmentVariableW SearchPathA ResetEvent OpenWaitableTimerA GetProcessId LocalAlloc SetCalendarInfoW FindFirstVolumeMountPointW GlobalGetAtomNameW AddAtomA WaitForMultipleObjects EnumResourceTypesW GetPrivateProfileSectionNamesA FindNextFileA FreeEnvironmentStringsW GetCPInfoExA GetWindowsDirectoryW DeleteFileW EnumCalendarInfoExA CopyFileExA SetStdHandle WriteConsoleW GetLastError MoveFileA WideCharToMultiByte HeapAlloc DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy EnterCriticalSection LeaveCriticalSection GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW FatalAppExitA HeapFree Sleep IsProcessorFeaturePresent GetLocaleInfoW SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale RtlUnwind HeapReAlloc HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle CreateFileW

user32

LoadMenuW

Sharing