setup[.]exe | Triage™

General

Target
setup.exe
Size 305KB
Sample230331-bwtfqagb65
SHA256 6334e7eae17935ebe9297b9f7eb3049f56fa8d120e4e2bd64863b061f1e73894
MD5 4499d37024680616fa1e6302f0a18e0d
SHA1 5526c8fb7c0331c1e4c4e75b8b96f5d7b0484391
SHA512 f90d68595cc09dce88c1f7e8380b14127ae2d99a2c2583c085e758509d00b996ee2934a8dedf3581f1b2df695b33ef61d786da6b94a6875d9b3f9c339a70f5d9
SSDEEP 6144:WQkTiymvSz078AoK6YRXJpbHV/gzKhexf:ZkTFmvSzaLD6YpJ1Voug
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 305KB

setup.exe

IMPHASH 95bc20777b27de7eca3c1140e79c380b
SHA256 6334e7eae17935ebe9297b9f7eb3049f56fa8d120e4e2bd64863b061f1e73894
MD5 4499d37024680616fa1e6302f0a18e0d
SHA1 5526c8fb7c0331c1e4c4e75b8b96f5d7b0484391
SHA512 f90d68595cc09dce88c1f7e8380b14127ae2d99a2c2583c085e758509d00b996ee2934a8dedf3581f1b2df695b33ef61d786da6b94a6875d9b3f9c339a70f5d9
SSDEEP 6144:WQkTiymvSz078AoK6YRXJpbHV/gzKhexf:ZkTFmvSzaLD6YpJ1Voug
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16165

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpA SetLocaleInfoA EnumCalendarInfoA BuildCommDCBAndTimeoutsA CallNamedPipeA LocalCompact EnumCalendarInfoW GetConsoleAliasA SetDefaultCommConfigW GetModuleHandleExW WaitForSingleObject InterlockedCompareExchange WriteConsoleInputA BackupSeek _lclose GetCurrentThread GetWindowsDirectoryA FindActCtxSectionStringA SetProcessPriorityBoost GetDriveTypeA GetEnvironmentStrings GlobalAlloc GetSystemDirectoryW GetFirmwareEnvironmentVariableA LoadLibraryW GetFileAttributesA TransactNamedPipe CreateTimerQueue CompareStringW GetDevicePowerState DeactivateActCtx GetConsoleOutputCP GetStdHandle SetLastError GetProcAddress ResetEvent OpenWaitableTimerA OpenMutexA CreateFileMappingA LocalAlloc SetCalendarInfoW FindFirstVolumeMountPointW WriteProfileSectionW AddAtomA EnumResourceTypesW FindNextFileA GetModuleHandleA CreateMutexA GetStringTypeW WaitForDebugEvent FatalAppExitA DeleteFileW CopyFileExA IsValidLocale EnumSystemLocalesA IsDBCSLeadByte GetPrivateProfileSectionNamesW GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer IsProcessorFeaturePresent HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID GetLocaleInfoA DeleteFileA

user32

LoadMenuA

advapi32

GetKernelObjectSecurity

Sharing