setup[.]exe | Triage™

General

Target
setup.exe
Size 295KB
Sample230329-ccph4aed23
SHA256 7514c71c085913c6ae0c1d556cd4af423e238dca1ad13e0b820895af6a4a6a02
MD5 bcf3dd6c7fc056b5ab79eaac510a12fd
SHA1 2ee46fc24ab0b2baad4224ef034afac6eca0c006
SHA512 5142ba2acf90644d3d4584d59ae45712bc271d07a7799eedb8db1f020383775d1eb3005c0404de461c760b7384dae41b5273da6a81eafdcfa9fbf7bdebd641a7
SSDEEP 3072:rXd2H685mdnkcvFZX3BCIOM+DPYFLqvuIWRpGosXMmNR81VY2Avwpqlmc2toiDT9:LmYdnkg3BJdwXNNRwAvKbtDDT9
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 295KB

setup.exe

IMPHASH 57b2dce156c7f62e042880189e8dc326
SHA256 7514c71c085913c6ae0c1d556cd4af423e238dca1ad13e0b820895af6a4a6a02
MD5 bcf3dd6c7fc056b5ab79eaac510a12fd
SHA1 2ee46fc24ab0b2baad4224ef034afac6eca0c006
SHA512 5142ba2acf90644d3d4584d59ae45712bc271d07a7799eedb8db1f020383775d1eb3005c0404de461c760b7384dae41b5273da6a81eafdcfa9fbf7bdebd641a7
SSDEEP 3072:rXd2H685mdnkcvFZX3BCIOM+DPYFLqvuIWRpGosXMmNR81VY2Avwpqlmc2toiDT9:LmYdnkg3BJdwXNNRwAvKbtDDT9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16441

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA CreateMutexW WriteConsoleInputW EnumDateFormatsExW CopyFileExW EnumCalendarInfoW VerSetConditionMask GetConsoleAliasA GetEnvironmentStringsW GetModuleHandleExW WaitForSingleObject SetEvent _lclose GetProcessPriorityBoost GetModuleHandleW EnumCalendarInfoExW EnumResourceTypesA GlobalAlloc LoadLibraryW GetComputerNameExA SetMessageWaitingIndicator IsDBCSLeadByte lstrcmpW GetStdHandle SetLastError GetProcAddress GetFirmwareEnvironmentVariableW SearchPathA OpenMutexA OpenWaitableTimerW LocalAlloc SetCalendarInfoW BuildCommDCBAndTimeoutsW SetConsoleOutputCP WriteProfileSectionW AddAtomA GetPrivateProfileSectionNamesA FindFirstVolumeMountPointA ContinueDebugEvent FindNextFileW GetStringTypeW FatalAppExitA GetCurrentThreadId GetWindowsDirectoryW DeleteFileW IsValidLocale EnumSystemLocalesA GetLastError HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate HeapDestroy HeapFree HeapAlloc ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID GetLocaleInfoA DeleteFileA

user32

LoadMenuA

Sharing