setup[.]exe | Triage™

General

Target
setup.exe
Size 250KB
Sample230328-bl84esaa71
SHA256 4e5f3fb701c0ba7a67dfbe0f1578fd497769f2d3397cc6310a444e9e0740afb6
MD5 04e32b3bd11f6233afb0e106da867aa8
SHA1 c4750a98073df743fe04bf542df0faee2bdea4c5
SHA512 233f6d94ab81501e652cc6dd326f61416b37429b068dd0105951c8f8f01e61f57f27b20492309858e188d8cb639e34fecc0e0b9880bd846e3e5fac4420356c16
SSDEEP 3072:nVuaHyfVd/lxLLqfe5FRPN4pdWBVAyeO3jBJr2GOOIpzjdwj5Ev/Hc:oOyfJxLeEidnGOTFjb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 250KB

setup.exe

IMPHASH 908502d3241a04cd06b259e5c173a60f
SHA256 4e5f3fb701c0ba7a67dfbe0f1578fd497769f2d3397cc6310a444e9e0740afb6
MD5 04e32b3bd11f6233afb0e106da867aa8
SHA1 c4750a98073df743fe04bf542df0faee2bdea4c5
SHA512 233f6d94ab81501e652cc6dd326f61416b37429b068dd0105951c8f8f01e61f57f27b20492309858e188d8cb639e34fecc0e0b9880bd846e3e5fac4420356c16
SSDEEP 3072:nVuaHyfVd/lxLLqfe5FRPN4pdWBVAyeO3jBJr2GOOIpzjdwj5Ev/Hc:oOyfJxLeEidnGOTFjb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

33828

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState GlobalSize SetDefaultCommConfigW GetProfileStringW SetComputerNameW AddConsoleAliasW WaitForSingleObjectEx GetCompressedFileSizeW WaitNamedPipeW CreateActCtxW EnumResourceTypesA SetHandleCount TlsSetValue FindResourceExA VirtualFreeEx LoadLibraryW DeleteVolumeMountPointW InterlockedPopEntrySList GetStringTypeExW EnumSystemCodePagesA SetConsoleMode GetFileAttributesW IsBadStringPtrA WritePrivateProfileStringW GetConsoleAliasesW SetLastError VirtualQuery GetProcAddress VirtualAlloc BeginUpdateResourceW SetStdHandle SearchPathA SetThreadPriorityBoost LoadLibraryA LocalAlloc CreateHardLinkW AddAtomW OpenEventA WriteProfileSectionW FoldStringA GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW GetConsoleTitleW WaitForDebugEvent QueryPerformanceFrequency SetCalendarInfoA DeleteFileW EnumCalendarInfoExA FindNextVolumeA MoveFileExA ReadConsoleOutputCharacterA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo GetModuleHandleW ExitProcess WriteFile GetStdHandle HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

user32

GetCaretBlinkTime

gdi32

CreateCompatibleBitmap SelectPalette GetBoundsRect

Sharing