setup[.]exe | Triage™

General

Target
setup.exe
Size 297KB
Sample230331-byjdjahe7s
SHA256 b1c5d2eadbb2936f8b9644a5a4e24b5c54b163f0f2d6817c60edb3e5a73c6dc6
MD5 774d9b0e9a37531882c9e6413de30388
SHA1 07332f7f13ea21f62e3c18c90802632e51f7d754
SHA512 6b0f0b650820a3a1cb79abc37864e14597185b625545b0dd411b1a80c346348e51b6cee66042f77f7acbd63d1eef46dab42dc91b18c053b144efdf95fe040ffc
SSDEEP 6144:+1RcRDsIvSzXCeypRjhEodAnTx+RoCJGvikkzg5pHBVw:UcRgIvSzXCeyPhEoetBCJWikkzg5pHBV
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 297KB

setup.exe

IMPHASH 95bc20777b27de7eca3c1140e79c380b
SHA256 b1c5d2eadbb2936f8b9644a5a4e24b5c54b163f0f2d6817c60edb3e5a73c6dc6
MD5 774d9b0e9a37531882c9e6413de30388
SHA1 07332f7f13ea21f62e3c18c90802632e51f7d754
SHA512 6b0f0b650820a3a1cb79abc37864e14597185b625545b0dd411b1a80c346348e51b6cee66042f77f7acbd63d1eef46dab42dc91b18c053b144efdf95fe040ffc
SSDEEP 6144:+1RcRDsIvSzXCeypRjhEodAnTx+RoCJGvikkzg5pHBVw:UcRgIvSzXCeyPhEoetBCJWikkzg5pHBV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16165

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpA SetLocaleInfoA EnumCalendarInfoA BuildCommDCBAndTimeoutsA CallNamedPipeA LocalCompact EnumCalendarInfoW GetConsoleAliasA SetDefaultCommConfigW GetModuleHandleExW WaitForSingleObject InterlockedCompareExchange WriteConsoleInputA BackupSeek _lclose GetCurrentThread GetWindowsDirectoryA FindActCtxSectionStringA SetProcessPriorityBoost GetDriveTypeA GetEnvironmentStrings GlobalAlloc GetSystemDirectoryW GetFirmwareEnvironmentVariableA LoadLibraryW GetFileAttributesA TransactNamedPipe CreateTimerQueue CompareStringW GetDevicePowerState DeactivateActCtx GetConsoleOutputCP GetStdHandle SetLastError GetProcAddress ResetEvent OpenWaitableTimerA OpenMutexA CreateFileMappingA LocalAlloc SetCalendarInfoW FindFirstVolumeMountPointW WriteProfileSectionW AddAtomA EnumResourceTypesW FindNextFileA GetModuleHandleA CreateMutexA GetStringTypeW WaitForDebugEvent FatalAppExitA DeleteFileW CopyFileExA IsValidLocale EnumSystemLocalesA IsDBCSLeadByte GetPrivateProfileSectionNamesW GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer IsProcessorFeaturePresent HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID GetLocaleInfoA DeleteFileA

user32

LoadMenuA

advapi32

GetKernelObjectSecurity

Sharing