setup[.]exe | Triage™

General

Target
setup.exe
Size 248KB
Sample230330-a3333aca7t
SHA256 9d56e843128da207aa63bacbd04b94c2928e2d409b0fd153e9715a4122cb7233
MD5 da34ecc235609a0f0401882a9815e0a7
SHA1 765d2708d9a916955af9c25642c8c64b29529ddd
SHA512 26faa52f09b38969c9bbb029b20dce2b3cff06f2af55e394be92fa469af9a85a7beb27cfc217de6963884fd7ee111415417d01edf2cd7ea0aecbccb151988635
SSDEEP 3072:HL9at9KJ8Xg2MX1Le64xgFUuywMNXq/x1kT5GSieluziI/Od4p7EnFUx:Bavhg2MFLe69FUDtNqxK617UFU
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 248KB

setup.exe

IMPHASH 2872f2807be0ca81e71b7944856cdb17
SHA256 9d56e843128da207aa63bacbd04b94c2928e2d409b0fd153e9715a4122cb7233
MD5 da34ecc235609a0f0401882a9815e0a7
SHA1 765d2708d9a916955af9c25642c8c64b29529ddd
SHA512 26faa52f09b38969c9bbb029b20dce2b3cff06f2af55e394be92fa469af9a85a7beb27cfc217de6963884fd7ee111415417d01edf2cd7ea0aecbccb151988635
SSDEEP 3072:HL9at9KJ8Xg2MX1Le64xgFUuywMNXq/x1kT5GSieluziI/Od4p7EnFUx:Bavhg2MFLe69FUDtNqxK617UFU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37823

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceExW GetConsoleAliasExesLengthA InterlockedIncrement MoveFileExW GetCommState WaitNamedPipeA SetDefaultCommConfigW AddConsoleAliasW GetSystemDefaultLCID EnumResourceTypesA TlsSetValue LoadLibraryW DeleteVolumeMountPointW InterlockedPopEntrySList GetStringTypeExW SetConsoleMode GetModuleFileNameW SetLastError GetProcAddress SearchPathW SetStdHandle LoadLibraryA LocalAlloc SetCalendarInfoW WritePrivateProfileStringA AddAtomW OpenEventA BeginUpdateResourceA WriteProfileSectionW FoldStringA GetModuleHandleA FreeEnvironmentStringsW QueryPerformanceFrequency DeleteFileW DeleteAtom GetConsoleProcessList EnumCalendarInfoExA VirtualAlloc WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

user32

GetCaretBlinkTime

gdi32

SelectPalette

Sharing