setup[.]exe | Triage™

General

Target
setup.exe
Size 250KB
Sample230330-a6dbtaca71
SHA256 4d2d7253f92fabcfd3adc2b0f112f8ddde14c0e94b88c603fe332b2e5d77cd00
MD5 639376664335231a89d68e63a091cf23
SHA1 591946aa4917051b89305b73a981489fe3c43b47
SHA512 aedac85f02b76cf5afe7784e3d5668fa821bb87c3c5f6fed73779090dbc865ad72f1b6588afee397ab28c84366da7eaa220977c2faab3cc597009d16b1b3a44d
SSDEEP 3072:F9NHUpV5g8XLj5bzLXG5FEELTPvaI4nh1/wbsHEvDxdoegx4cj:ZHUj9Lj53LXKzYnToIH4xdc
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 250KB

setup.exe

IMPHASH 6d0731e3d08b444b0205bbdbcc6792ca
SHA256 4d2d7253f92fabcfd3adc2b0f112f8ddde14c0e94b88c603fe332b2e5d77cd00
MD5 639376664335231a89d68e63a091cf23
SHA1 591946aa4917051b89305b73a981489fe3c43b47
SHA512 aedac85f02b76cf5afe7784e3d5668fa821bb87c3c5f6fed73779090dbc865ad72f1b6588afee397ab28c84366da7eaa220977c2faab3cc597009d16b1b3a44d
SSDEEP 3072:F9NHUpV5g8XLj5bzLXG5FEELTPvaI4nh1/wbsHEvDxdoegx4cj:ZHUj9Lj53LXKzYnToIH4xdc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38223

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA InterlockedIncrement MoveFileExW GetCommState WaitNamedPipeA SetDefaultCommConfigW AddConsoleAliasW GetSystemDefaultLCID GetConsoleTitleA EnumResourceTypesA TlsSetValue FindResourceExA LoadLibraryW DeleteVolumeMountPointW InterlockedPopEntrySList GetStringTypeExW SetConsoleMode GetModuleFileNameW GetConsoleAliasesW SetLastError SearchPathW VirtualAlloc SetStdHandle LoadLibraryA LocalAlloc SetCalendarInfoW WritePrivateProfileStringA OpenEventA BeginUpdateResourceA WriteProfileSectionW AddAtomA FoldStringA GetModuleHandleA FreeEnvironmentStringsW OpenEventW QueryPerformanceFrequency DeleteFileW DeleteAtom GetConsoleProcessList EnumCalendarInfoExA GetProcAddress CreateFileA WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CloseHandle

user32

GetCaretBlinkTime

gdi32

SelectPalette CreateCompatibleBitmap

Sharing