setup[.]exe | Triage™

General

Target
setup.exe
Size 305KB
Sample230331-bv8t1she5v
SHA256 bbefa1382f83a5df3c19bb217489d08c2747a03f0676821b73798b573128138f
MD5 5fd41ef42ac35559f639aac9f750f6ab
SHA1 8c713945defb974ea24e5d231aec422321bae94c
SHA512 b95c815b0978df55c2e167b178bc9e3e39dc637943461bfe3c67c55791362f66b85769052b553764c2d4b132e13418ae89f834876dc89effeba8c9262dba8fa2
SSDEEP 3072:2pp6yLn9AibdhTSj7a3joOgQHbDhQD6Vqd6AgXLv82bVq46ZinJnv/Gm0Su95wsV:2XDewY7aNlQIqW8effBX0/bMBJEf
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 305KB

setup.exe

IMPHASH fdd32452fd7f5c1d64dea3b8261b2bbc
SHA256 bbefa1382f83a5df3c19bb217489d08c2747a03f0676821b73798b573128138f
MD5 5fd41ef42ac35559f639aac9f750f6ab
SHA1 8c713945defb974ea24e5d231aec422321bae94c
SHA512 b95c815b0978df55c2e167b178bc9e3e39dc637943461bfe3c67c55791362f66b85769052b553764c2d4b132e13418ae89f834876dc89effeba8c9262dba8fa2
SSDEEP 3072:2pp6yLn9AibdhTSj7a3joOgQHbDhQD6Vqd6AgXLv82bVq46ZinJnv/Gm0Su95wsV:2XDewY7aNlQIqW8effBX0/bMBJEf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16107

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileSectionNamesW CreateTimerQueue CreateMutexW lstrcmpA SetLocaleInfoA EnumCalendarInfoA GetModuleHandleExA BuildCommDCBAndTimeoutsA CallNamedPipeA LocalCompact EnumCalendarInfoW SetDefaultCommConfigW InterlockedCompareExchange WriteConsoleInputA BackupSeek _lclose GetWindowsDirectoryA FindActCtxSectionStringA SetProcessPriorityBoost GetDriveTypeA GetEnvironmentStrings GlobalAlloc GetSystemDirectoryW GetFirmwareEnvironmentVariableA LoadLibraryW GetFileAttributesA TransactNamedPipe GetConsoleAliasW PulseEvent CompareStringW GetDevicePowerState DeactivateActCtx GetConsoleOutputCP GetStdHandle SetLastError GetProcAddress ResetEvent OpenWaitableTimerA OpenMutexA CreateFileMappingA LocalAlloc SetCalendarInfoW FindFirstVolumeMountPointW WriteProfileSectionW AddAtomA WaitForMultipleObjects EnumResourceTypesW FindNextFileA GetModuleHandleA GetStringTypeW WaitForDebugEvent GetCurrentThreadId DeleteFileW CopyFileExA IsValidLocale EnumSystemLocalesA IsDBCSLeadByte LocalUnlock GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetLastError InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree FatalAppExitA GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer IsProcessorFeaturePresent HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID GetLocaleInfoA DeleteFileA

user32

LoadMenuA

advapi32

ReportEventW

Sharing