setup[.]exe | Triage™

General

Target
setup.exe
Size 293KB
Sample230329-b3h9bsec56
SHA256 668b3ed6f31fce4a65e5bf64bc17a92e1d9b40e8de7627508036cf6e111070bc
MD5 80de2350870cc82e277f9b19c71e398d
SHA1 cfafa1f2789b494c86d329370e28d7c29773600d
SHA512 299d16184a5821405ab66a785a59a558effa5af23596dc5853926763fedd0421a0a012121b5e8790a1a0d309cf1c78ccd3480e218ceb4259a65c0d3a345e8db1
SSDEEP 3072:iEJ/+k9A2BOlMG9qx494GRs1nhCmPQUJo7u9uG77u4Qc78ToWvQfo:/XtBuV9qDHRo2uuu4QcN
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 293KB

setup.exe

IMPHASH 25babacd02a2b569479e22be1b5bfe7e
SHA256 668b3ed6f31fce4a65e5bf64bc17a92e1d9b40e8de7627508036cf6e111070bc
MD5 80de2350870cc82e277f9b19c71e398d
SHA1 cfafa1f2789b494c86d329370e28d7c29773600d
SHA512 299d16184a5821405ab66a785a59a558effa5af23596dc5853926763fedd0421a0a012121b5e8790a1a0d309cf1c78ccd3480e218ceb4259a65c0d3a345e8db1
SSDEEP 3072:iEJ/+k9A2BOlMG9qx494GRs1nhCmPQUJo7u9uG77u4Qc78ToWvQfo:/XtBuV9qDHRo2uuu4QcN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16729

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA WriteConsoleInputW WritePrivateProfileStructA EnumDateFormatsExW CopyFileExW BuildCommDCBAndTimeoutsA EnumCalendarInfoW VerSetConditionMask GetEnvironmentStringsW GetModuleHandleExW WaitForSingleObject _lclose GetCurrentThread EnumCalendarInfoExW EnumResourceTypesA SetProcessPriorityBoost GlobalAlloc LoadLibraryW GetFileAttributesA GetComputerNameExA TransactNamedPipe GetConsoleAliasW SetMessageWaitingIndicator IsDBCSLeadByte lstrcmpW DeactivateActCtx GetStdHandle OpenMutexW SetLastError GetProcAddress GetFirmwareEnvironmentVariableW SearchPathA ResetEvent OpenWaitableTimerW SetCalendarInfoW SetConsoleOutputCP WriteProfileSectionW AddAtomA GetPrivateProfileSectionNamesA FindFirstVolumeMountPointA GetModuleHandleA ContinueDebugEvent CreateMutexA FindNextFileW GetStringTypeW FatalAppExitA GetWindowsDirectoryW DeleteFileW IsValidLocale EnumSystemLocalesA GetLastError HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate HeapDestroy HeapFree HeapAlloc GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID GetLocaleInfoA DeleteFileA

user32

LoadMenuA

Sharing