setup[.]exe | Triage™

General

Target
setup.exe
Size 273KB
Sample230326-bhs8sseh87
SHA256 a1409f24e40fb5a5f190d68d237cfa5bb343e3796902dd09a5cce202a681f2c8
MD5 5d94d7efb94c90808f3d17e4665c7734
SHA1 b33c42a804ed9208ee457ea466119b8fa8b0e24d
SHA512 c44cc01c9e9fb627e717075e852c41892ea8b248c729ee5d7fbdc9a5435d8999ef1b97f7c77ed5a421134328a7eeca7fc0e49b4aa2acdd0ab00acc5fa9d64c39
SSDEEP 3072:Cm8s08r4RtqubALv2po58+SMprhseGzPFQt8zd6U5OrpNCJQN0fm2Rh:SttqKe58+uxQyB6cOuTfz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 273KB

setup.exe

IMPHASH 4ab2a4d536313c74a2690207bf67c9d3
SHA256 a1409f24e40fb5a5f190d68d237cfa5bb343e3796902dd09a5cce202a681f2c8
MD5 5d94d7efb94c90808f3d17e4665c7734
SHA1 b33c42a804ed9208ee457ea466119b8fa8b0e24d
SHA512 c44cc01c9e9fb627e717075e852c41892ea8b248c729ee5d7fbdc9a5435d8999ef1b97f7c77ed5a421134328a7eeca7fc0e49b4aa2acdd0ab00acc5fa9d64c39
SSDEEP 3072:Cm8s08r4RtqubALv2po58+SMprhseGzPFQt8zd6U5OrpNCJQN0fm2Rh:SttqKe58+uxQyB6cOuTfz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17534

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileSectionNamesW CreateMutexW SearchPathW CopyFileExW GetStringTypeA _llseek BuildCommDCBAndTimeoutsA EnumCalendarInfoW VerSetConditionMask GetCurrentActCtx SetDefaultCommConfigW WaitForSingleObject WriteConsoleInputA SetEvent GetProcessPriorityBoost GetModuleHandleW EnumTimeFormatsW EnumResourceTypesA InitializeCriticalSection GlobalAlloc GetFirmwareEnvironmentVariableA LoadLibraryW GetFileAttributesA GetConsoleAliasW WritePrivateProfileSectionW TerminateProcess lstrcmpW GlobalUnlock OpenMutexW IsDBCSLeadByteEx SetLastError GetProcAddress OpenWaitableTimerW LocalAlloc FindFirstVolumeMountPointW AddAtomW SetCurrentDirectoryW GlobalGetAtomNameW AddAtomA FindNextFileA FreeEnvironmentStringsW FindNextFileW PeekConsoleInputA GetCPInfoExA SetCalendarInfoA GetWindowsDirectoryW DeleteFileW EnumCalendarInfoExA GetConsoleSelectionInfo SetStdHandle WriteConsoleW GetLastError MoveFileA HeapAlloc DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW Sleep HeapFree RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapSize HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle CreateFileW

user32

LoadMenuA

Sharing