setup[.]exe | Triage™

General

Target
setup.exe
Size 297KB
Sample230330-r2eshsda88
SHA256 b702711a949a596fff343b6cfbaee3c0600e0e7feb2cf1bba8b663b926c94cf4
MD5 1b56ba80ed97b7c748e41e03bcf0fd61
SHA1 40fec612b50421a655390d21d672821f489c6576
SHA512 8e4a9307e12d521261a825007e01d4dd33844a1b116fec4d501eb525e70bfb5dee475f57d37b6f0fc01301f66a458284e87fbac6ba9cb33b601dce37532a3d50
SSDEEP 6144:cm5Za9waIPw55lJ3yWAaNBA3p3sjYh0N+nZCXzKe:c0Zlhw55bSaM3tWYhKE
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 297KB

setup.exe

IMPHASH 9fa9386b668592c6b6f4c3793199047d
SHA256 b702711a949a596fff343b6cfbaee3c0600e0e7feb2cf1bba8b663b926c94cf4
MD5 1b56ba80ed97b7c748e41e03bcf0fd61
SHA1 40fec612b50421a655390d21d672821f489c6576
SHA512 8e4a9307e12d521261a825007e01d4dd33844a1b116fec4d501eb525e70bfb5dee475f57d37b6f0fc01301f66a458284e87fbac6ba9cb33b601dce37532a3d50
SSDEEP 6144:cm5Za9waIPw55lJ3yWAaNBA3p3sjYh0N+nZCXzKe:c0Zlhw55bSaM3tWYhKE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16185

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocaleInfoA WritePrivateProfileStructA BuildCommDCBAndTimeoutsA LocalCompact EnumCalendarInfoW VerSetConditionMask SetDefaultCommConfigW GetModuleHandleExW WaitForSingleObject WriteConsoleInputA CallNamedPipeW _lclose GetCurrentThread SetProcessPriorityBoost GetEnvironmentStrings GlobalAlloc GetSystemDirectoryW GetFirmwareEnvironmentVariableA LoadLibraryW GetFileAttributesA TransactNamedPipe GetConsoleAliasW IsDBCSLeadByte CompareStringW GetDevicePowerState DeactivateActCtx lstrcmpA GetStdHandle SetLastError GetProcAddress ResetEvent OpenWaitableTimerA OpenMutexA CreateFileMappingA LocalAlloc FindFirstVolumeMountPointW WriteProfileSectionW AddAtomA EnumResourceTypesW FindNextFileA GetModuleHandleA ContinueDebugEvent CreateMutexA GetStringTypeW FatalAppExitA SetCalendarInfoA GetWindowsDirectoryW DeleteFileW EnumCalendarInfoExA CopyFileExA DeleteFileA EnumSystemLocalesA GetLocaleInfoA GetConsoleOutputCP GetPrivateProfileSectionNamesW GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer IsProcessorFeaturePresent HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID IsValidLocale

user32

LoadMenuA

advapi32

GetKernelObjectSecurity

Sharing