setup[.]exe | Triage™

General

Target
setup.exe
Size 249KB
Sample230330-axcc6aad56
SHA256 01e45abb29d308bb9402e7a7509bbd39fcf51fae5962fb40fcd13a04b6a87afd
MD5 363fe2a2f81e70d676809132e83c5320
SHA1 1a969aee5858b4196d08c684abf983944c8b0fb3
SHA512 fa60fa073b43de831973daf14edb350100b989f994de340984bfcf045faa8207e36314283541edd6ab55f0fb6f29ad6e4c799586c1bf124f7019ec42fcbd4058
SSDEEP 3072:Ib7i8FXgN8XvlsEILOoPnhoDyfaOoPAZN3Egr7lee3CB4dw4xAr:G+853vlsRLO4hEUaOoPkrrHvS
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 249KB

setup.exe

IMPHASH fde2d3c5c6b5080c428e56f6f2289988
SHA256 01e45abb29d308bb9402e7a7509bbd39fcf51fae5962fb40fcd13a04b6a87afd
MD5 363fe2a2f81e70d676809132e83c5320
SHA1 1a969aee5858b4196d08c684abf983944c8b0fb3
SHA512 fa60fa073b43de831973daf14edb350100b989f994de340984bfcf045faa8207e36314283541edd6ab55f0fb6f29ad6e4c799586c1bf124f7019ec42fcbd4058
SSDEEP 3072:Ib7i8FXgN8XvlsEILOoPnhoDyfaOoPAZN3Egr7lee3CB4dw4xAr:G+853vlsRLO4hEUaOoPkrrHvS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37887

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA InterlockedIncrement VerSetConditionMask MoveFileExW GetCommState WaitNamedPipeA SetDefaultCommConfigW AddConsoleAliasW GetSystemDefaultLCID EnumCalendarInfoExW EnumResourceTypesA TlsSetValue LoadLibraryW DeleteVolumeMountPointW InterlockedPopEntrySList SetConsoleMode SetConsoleCursorPosition EnumResourceLanguagesA GetStringTypeExA GetCPInfoExW SetLastError GetProcAddress FindResourceExW SetStdHandle LoadLibraryA InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA AddAtomW OpenEventA BeginUpdateResourceA WriteProfileSectionW FoldStringW GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW QueryPerformanceFrequency DeleteFileW DeleteAtom GetConsoleProcessList DebugBreak SearchPathW VirtualAlloc WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW GetModuleHandleW ExitProcess WriteFile GetStdHandle HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

user32

GetCaretBlinkTime

gdi32

SelectPalette

advapi32

MapGenericMask

Sharing