setup[.]exe | Triage™

General

Target
setup.exe
Size 248KB
Sample230330-a73yvsad86
SHA256 c0963c6bcc7e76b68c50177807d843dcb43aa58b2ad67bb8d7d3689f4ee00143
MD5 61f9a1d18a0c61a1c2cb999c8b27f62e
SHA1 a18eb6ea843f780cd364844e553a6d7eba573ccb
SHA512 3e6cc267f773b69d2427c1b743cb994ac954162a999b303af0d6ee50d03f8341d8b36bcec57cf1e36529c98cbe90269de40c4bf0ad72a59705107637a457a27d
SSDEEP 3072:z3PSzkpQ0Y8XPD193LBWwl6Of1p1QRrllZZx2IurU/r0Ewt483Zph:GzkKuPD1JLBn6ONpgPxuG0E+3
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 248KB

setup.exe

IMPHASH 2d2bfb9c54ad9b595d71acc7d26596e7
SHA256 c0963c6bcc7e76b68c50177807d843dcb43aa58b2ad67bb8d7d3689f4ee00143
MD5 61f9a1d18a0c61a1c2cb999c8b27f62e
SHA1 a18eb6ea843f780cd364844e553a6d7eba573ccb
SHA512 3e6cc267f773b69d2427c1b743cb994ac954162a999b303af0d6ee50d03f8341d8b36bcec57cf1e36529c98cbe90269de40c4bf0ad72a59705107637a457a27d
SSDEEP 3072:z3PSzkpQ0Y8XPD193LBWwl6Of1p1QRrllZZx2IurU/r0Ewt483Zph:GzkKuPD1JLBn6ONpgPxuG0E+3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38191

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement MoveFileExW GetCommState WaitNamedPipeA SetDefaultCommConfigW AddConsoleAliasW GetSystemDefaultLCID GetConsoleTitleA EnumResourceTypesA TlsSetValue FindResourceExA LoadLibraryW DeleteVolumeMountPointW InterlockedPopEntrySList GetStringTypeExW SetConsoleMode GetModuleFileNameW GetConsoleAliasesW SetLastError SearchPathW VirtualAlloc SetStdHandle LoadLibraryA LocalAlloc SetCalendarInfoW WritePrivateProfileStringA OpenEventA BeginUpdateResourceA WriteProfileSectionW AddAtomA FoldStringA GetModuleHandleA FreeEnvironmentStringsW QueryPerformanceFrequency DeleteFileW DeleteAtom GetConsoleProcessList EnumCalendarInfoExA GetProcAddress CreateFileA WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CloseHandle

user32

GetCaretBlinkTime

gdi32

SelectPalette CreateCompatibleBitmap

Sharing