setup[.]exe | Triage™

General

Target
setup.exe
Size 346KB
Sample230326-bny18sfa35
SHA256 e131641d24a0f1cd82af1a2d7b68bf9f11022fbcd79986f939b083574945003c
MD5 44c5171c7eab781f1c3c4441b1673d7f
SHA1 c8c9fe0aebc6ffb675da0934ede7f140a75feef8
SHA512 8262e24f6d9bf4a5840e0f3eecfc696ace7ed45084282dacea6344fea41971aaff3ea845a44dbf603b720376783971bf35985cc0e14da7a2fcf5214576c44a43
SSDEEP 6144:+FpPXW3uYXCLNviT2POrI+oPcdp/9FoRenqTfz:+Fpu3dXCLN6CiRoPcdtKz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 346KB

setup.exe

IMPHASH 5bf64f0a1a526a4cdb08b53a545d3838
SHA256 e131641d24a0f1cd82af1a2d7b68bf9f11022fbcd79986f939b083574945003c
MD5 44c5171c7eab781f1c3c4441b1673d7f
SHA1 c8c9fe0aebc6ffb675da0934ede7f140a75feef8
SHA512 8262e24f6d9bf4a5840e0f3eecfc696ace7ed45084282dacea6344fea41971aaff3ea845a44dbf603b720376783971bf35985cc0e14da7a2fcf5214576c44a43
SSDEEP 6144:+FpPXW3uYXCLNviT2POrI+oPcdp/9FoRenqTfz:+Fpu3dXCLN6CiRoPcdtKz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18066

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileSectionNamesW CreateMutexW SearchPathW EnumCalendarInfoA CopyFileExW _llseek VerSetConditionMask GetCurrentActCtx SetDefaultCommConfigW GetModuleHandleExW WaitForSingleObject WriteConsoleInputA SetEvent GetProcessPriorityBoost GetModuleHandleW EnumTimeFormatsW EnumResourceTypesA GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW TerminateProcess lstrcmpW GlobalUnlock OpenMutexW IsDBCSLeadByteEx SetLastError GetProcAddress GetComputerNameExW GetFirmwareEnvironmentVariableW OpenWaitableTimerW LocalAlloc BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW AddAtomW SetCurrentDirectoryW AddAtomA FindNextFileA FreeEnvironmentStringsW FindNextFileW GetStringTypeW PeekConsoleInputA GetCurrentThreadId GetCPInfoExA SetCalendarInfoA GetWindowsDirectoryW EnumCalendarInfoExA GetConsoleSelectionInfo DeleteFileA SetStdHandle WriteConsoleW GetLastError WideCharToMultiByte MoveFileA HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection HeapCreate HeapDestroy HeapFree HeapAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar FatalAppExitA Sleep GetLocaleInfoW RaiseException GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer HeapSize CloseHandle CreateFileW

user32

LoadMenuA

Sharing