setup[.]exe | Triage™

General

Target
setup.exe
Size 218KB
Sample230401-b74qtsfb75
SHA256 6616b82058fb4019108217ce2c96cf5b0e06b9cd5cccaeff07b9104212f6adcf
MD5 f5055234941fc06d5ab44a4d7f0143f7
SHA1 88a0f1a6758260d5136b2ba7e8cf9d48b9d801bc
SHA512 694c3ae085e7885babc3ae97c0376f2f8679050d0d19bd6b0477593d307ff907a4d1c49236a4961932a339e1b14eb536df8a979880997c2e1c4a1db35f277bd3
SSDEEP 3072:Auy+8p9tmIX+bXoTogGN+Y3/c+XfMuF9HGopALv+Yw5sMHIW:Nz8vthiXoTo9Nh/csfM6vKWuMoW
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 218KB

setup.exe

IMPHASH 1de37b80b44b4ba8316caf174d735200
SHA256 6616b82058fb4019108217ce2c96cf5b0e06b9cd5cccaeff07b9104212f6adcf
MD5 f5055234941fc06d5ab44a4d7f0143f7
SHA1 88a0f1a6758260d5136b2ba7e8cf9d48b9d801bc
SHA512 694c3ae085e7885babc3ae97c0376f2f8679050d0d19bd6b0477593d307ff907a4d1c49236a4961932a339e1b14eb536df8a979880997c2e1c4a1db35f277bd3
SSDEEP 3072:Auy+8p9tmIX+bXoTogGN+Y3/c+XfMuF9HGopALv+Yw5sMHIW:Nz8vthiXoTo9Nh/csfM6vKWuMoW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24784

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA InterlockedIncrement VerSetConditionMask MoveFileExW GetCommState WaitNamedPipeA SetDefaultCommConfigW CreateJobObjectW EnumCalendarInfoExW ReadConsoleW SetHandleCount TlsSetValue LoadLibraryW GetVersionExW SetConsoleMode HeapValidate SetConsoleCursorPosition EnumResourceLanguagesA GetMailslotInfo GetStringTypeExA GetCPInfoExW SetLastError BackupRead GetProcAddress VirtualAlloc SetStdHandle GetConsoleAliasExesLengthA LoadLibraryA InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA AddAtomW OpenEventA BeginUpdateResourceA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW QueryPerformanceFrequency GetVersionExA GetWindowsDirectoryW AddConsoleAliasA GetConsoleProcessList DebugBreak InterlockedPushEntrySList DeleteFileA FindResourceExW SearchPathA GetSystemDefaultLangID InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetCommandLineA GetStartupInfoA GetLastError HeapFree RtlUnwind RaiseException GetModuleHandleW ExitProcess WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

user32

GetCaretBlinkTime

gdi32

SelectPalette

advapi32

MapGenericMask

Sharing