setup[.]exe | Triage™

General

Target
setup.exe
Size 304KB
Sample230331-bxd3esgb67
SHA256 46a7eb96c41d62ee330d147c1b9e9672b5c341abb88d49b11a7aee7732a374eb
MD5 4aaafed46391c66cf2159f5a0ee79675
SHA1 e102bbf8ccf91fb809c325750c77e96a57648aff
SHA512 dc6b3f0a60969d2ae12d2977e303045e5338025fd33ba43f9bf2c8e9e7b775ecdffcb375f26e45e5503efc3e4a328e21844a1eb0571216e79b2ac8076076b527
SSDEEP 3072:JnWKcSozW78PIw4nvSzib6SEZta3tJcbklAX4j3Pxg2XkweYL0oJs2EdIDZnXwSa:vUeRw4nvSzwI4TPlkQL7J0GpXnv7of
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 304KB

setup.exe

IMPHASH 95bc20777b27de7eca3c1140e79c380b
SHA256 46a7eb96c41d62ee330d147c1b9e9672b5c341abb88d49b11a7aee7732a374eb
MD5 4aaafed46391c66cf2159f5a0ee79675
SHA1 e102bbf8ccf91fb809c325750c77e96a57648aff
SHA512 dc6b3f0a60969d2ae12d2977e303045e5338025fd33ba43f9bf2c8e9e7b775ecdffcb375f26e45e5503efc3e4a328e21844a1eb0571216e79b2ac8076076b527
SSDEEP 3072:JnWKcSozW78PIw4nvSzib6SEZta3tJcbklAX4j3Pxg2XkweYL0oJs2EdIDZnXwSa:vUeRw4nvSzwI4TPlkQL7J0GpXnv7of
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16165

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpA SetLocaleInfoA EnumCalendarInfoA BuildCommDCBAndTimeoutsA CallNamedPipeA LocalCompact EnumCalendarInfoW GetConsoleAliasA SetDefaultCommConfigW GetModuleHandleExW WaitForSingleObject InterlockedCompareExchange WriteConsoleInputA BackupSeek _lclose GetCurrentThread GetWindowsDirectoryA FindActCtxSectionStringA SetProcessPriorityBoost GetDriveTypeA GetEnvironmentStrings GlobalAlloc GetSystemDirectoryW GetFirmwareEnvironmentVariableA LoadLibraryW GetFileAttributesA TransactNamedPipe CreateTimerQueue CompareStringW GetDevicePowerState DeactivateActCtx GetConsoleOutputCP GetStdHandle SetLastError GetProcAddress ResetEvent OpenWaitableTimerA OpenMutexA CreateFileMappingA LocalAlloc SetCalendarInfoW FindFirstVolumeMountPointW WriteProfileSectionW AddAtomA EnumResourceTypesW FindNextFileA GetModuleHandleA CreateMutexA GetStringTypeW WaitForDebugEvent FatalAppExitA DeleteFileW CopyFileExA IsValidLocale EnumSystemLocalesA IsDBCSLeadByte GetPrivateProfileSectionNamesW GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer IsProcessorFeaturePresent HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID GetLocaleInfoA DeleteFileA

user32

LoadMenuA

advapi32

GetKernelObjectSecurity

Sharing