setup[.]exe | Triage™

General

Target
setup.exe
Size 275KB
Sample230327-bsdk4aah86
SHA256 ff2349d0baa3d38b56f1251ad1299c07d9ebf947a38c6bce1122482ed4aa48c7
MD5 2144c8e0d1460cdf01d0987db923b51b
SHA1 e6deda28bc839e84ded290581e5a53c69b2be2b7
SHA512 aec9bcbbe7d4b88ffc755fc71dd25976cebe0190d8d43ed32209bf60d0e140218a23468879b9d819d1bbc2fa255b1d3e705fad2f502153480cae76ccf18463a1
SSDEEP 6144:6BTRXMOh6XFaUYsljv013RoSdl/mNN4T:6TRXNh6XFNYs5v013eSdYN
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 275KB

setup.exe

IMPHASH 59edcf4038e73a659a2ff6e04ad467ac
SHA256 ff2349d0baa3d38b56f1251ad1299c07d9ebf947a38c6bce1122482ed4aa48c7
MD5 2144c8e0d1460cdf01d0987db923b51b
SHA1 e6deda28bc839e84ded290581e5a53c69b2be2b7
SHA512 aec9bcbbe7d4b88ffc755fc71dd25976cebe0190d8d43ed32209bf60d0e140218a23468879b9d819d1bbc2fa255b1d3e705fad2f502153480cae76ccf18463a1
SSDEEP 6144:6BTRXMOh6XFaUYsljv013RoSdl/mNN4T:6TRXNh6XFNYs5v013eSdYN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17721

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileSectionNamesW CreateMutexW SearchPathW EnumCalendarInfoA EnumDateFormatsExW CopyFileExW _llseek BuildCommDCBAndTimeoutsA VerSetConditionMask SetDefaultCommConfigW GetModuleHandleExW WaitForSingleObject WriteConsoleInputA SetEvent GetProcessPriorityBoost GetModuleHandleW EnumTimeFormatsW EnumResourceTypesA GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW TerminateProcess lstrcmpW GlobalUnlock IsDBCSLeadByteEx SetLastError GetProcAddress GetComputerNameExW GetFirmwareEnvironmentVariableW OpenMutexA OpenWaitableTimerW LocalAlloc FindFirstVolumeMountPointW AddAtomW SetCurrentDirectoryW AddAtomA FindNextFileA FreeEnvironmentStringsW FindNextFileW GetStringTypeW PeekConsoleInputA GetCurrentThreadId GetCPInfoExA SetCalendarInfoA GetWindowsDirectoryW EnumCalendarInfoExA GetConsoleSelectionInfo DeleteFileA EnumSystemLocalesA GetLocaleInfoA GetLastError WideCharToMultiByte MoveFileA HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection HeapCreate HeapDestroy HeapFree HeapAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar FatalAppExitA Sleep GetLocaleInfoW RaiseException RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID IsValidLocale

user32

LoadMenuA

Sharing