setup[.]exe | Triage™

General

Target
setup.exe
Size 226KB
Sample230331-bjd59shd8v
SHA256 ed12be618473902b7d05aec6def6e02a1aaee7e9b2f21866d2a3104c16a2832c
MD5 2ccf3a050a103a30e35b1479014fbc1b
SHA1 c3b01d11c40422de2e925a2060d05b55760e4c05
SHA512 7984a899b5c73ae6f53928504cfd531f2b4b6a13133a715d055f716ecf64b316bbe3d0caa0bafcd0358d0c17f5fed7fe8d4845701f88c783d0233b67f014977d
SSDEEP 3072:upiFFpG3Wq+WJYd9TBbkLEKpQA0fC+I+xkD9fS/f9G3AZqaTrKfFue4hsU3Z8s0:uYY3WPiYdIl0fa++FS/f9EgqanF/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 226KB

setup.exe

IMPHASH 09829a76b54b4835c677dc6fac4ef621
SHA256 ed12be618473902b7d05aec6def6e02a1aaee7e9b2f21866d2a3104c16a2832c
MD5 2ccf3a050a103a30e35b1479014fbc1b
SHA1 c3b01d11c40422de2e925a2060d05b55760e4c05
SHA512 7984a899b5c73ae6f53928504cfd531f2b4b6a13133a715d055f716ecf64b316bbe3d0caa0bafcd0358d0c17f5fed7fe8d4845701f88c783d0233b67f014977d
SSDEEP 3072:upiFFpG3Wq+WJYd9TBbkLEKpQA0fC+I+xkD9fS/f9G3AZqaTrKfFue4hsU3Z8s0:uYY3WPiYdIl0fa++FS/f9EgqanF/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16303

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpA SetLocaleInfoA WritePrivateProfileStructA EnumDateFormatsExW BuildCommDCBAndTimeoutsA LocalCompact EnumCalendarInfoW VerSetConditionMask GetModuleHandleExW WaitForSingleObject WriteConsoleInputA CallNamedPipeW _lclose GetCurrentThread EnumResourceTypesA SetProcessPriorityBoost GetEnvironmentStrings GlobalAlloc GetSystemDirectoryW GetFirmwareEnvironmentVariableA LoadLibraryW GetFileAttributesA GetComputerNameExA TransactNamedPipe GetConsoleAliasW SetMessageWaitingIndicator IsDBCSLeadByte SetDefaultCommConfigA DeactivateActCtx GetStdHandle OpenMutexW SetLastError GetProcAddress SearchPathA ResetEvent OpenWaitableTimerA CreateFileMappingA SetConsoleOutputCP WriteProfileSectionW AddAtomA FindFirstVolumeMountPointA GetModuleHandleA ContinueDebugEvent CreateMutexA FindNextFileW GetStringTypeW FatalAppExitA SetCalendarInfoA GetWindowsDirectoryW DeleteFileW EnumCalendarInfoExA CopyFileExA IsValidLocale EnumSystemLocalesA CompareStringW GetPrivateProfileSectionNamesW GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer IsProcessorFeaturePresent HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID GetLocaleInfoA DeleteFileA

user32

LoadMenuA

advapi32

GetKernelObjectSecurity

Sharing