setup[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 217KB
Sample230401-bsyw2afa48
SHA256 abbf99f9a1827660194f02485a1d1e9fd7f4eecff8021c7c56d4e8e2619e1061
MD5 02abb21888be25dd60807492d9db52e5
SHA1 c105036d7e6f25a4827e5ac40a68ca904b2eedf9
SHA512 be14647bfce46a3fb374b0905d3578fcb8d908c7f241e1474ddd0130a79b8a60b49fb19f24959ea4ba97f735bf21492aef20dbf0cc4df95de49b96ecbeeb6c37
SSDEEP 3072:ZLNyFFKsI1N32s7kFjVkJN5q6lpq22NHK2bj5gPI9+tQk/ii:X+K7GdRVYNFlWNq26PI9+tQkKi
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 217KB

setup.exe

IMPHASH 724f7af50306908b18449bf42724cf5d
SHA256 abbf99f9a1827660194f02485a1d1e9fd7f4eecff8021c7c56d4e8e2619e1061
MD5 02abb21888be25dd60807492d9db52e5
SHA1 c105036d7e6f25a4827e5ac40a68ca904b2eedf9
SHA512 be14647bfce46a3fb374b0905d3578fcb8d908c7f241e1474ddd0130a79b8a60b49fb19f24959ea4ba97f735bf21492aef20dbf0cc4df95de49b96ecbeeb6c37
SSDEEP 3072:ZLNyFFKsI1N32s7kFjVkJN5q6lpq22NHK2bj5gPI9+tQk/ii:X+K7GdRVYNFlWNq26PI9+tQkKi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24928

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState WaitNamedPipeA CreateJobObjectW EnumCalendarInfoExW GetConsoleAliasesLengthA ReadConsoleW SetHandleCount TlsSetValue LoadLibraryW GetVersionExW GetStringTypeExW SetConsoleMode HeapValidate SetConsoleCursorPosition EnumResourceLanguagesA GetMailslotInfo GetCPInfoExW SetLastError BackupRead GetProcAddress VirtualAlloc BeginUpdateResourceW SetStdHandle SearchPathA MoveFileExW InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA AddAtomW OpenEventA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW QueryPerformanceFrequency GetVersionExA GetWindowsDirectoryW AddConsoleAliasA GetConsoleProcessList DebugBreak InterlockedPushEntrySList CommConfigDialogW DeleteFileA VerSetConditionMask InterlockedIncrement FindResourceExW DeleteVolumeMountPointA LoadLibraryA GetSystemDefaultLangID CloseHandle CreateFileA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetCommandLineA GetStartupInfoA GetLastError HeapFree RtlUnwind RaiseException GetModuleHandleW ExitProcess WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

user32

GetCaretBlinkTime

gdi32

SelectPalette GetTextExtentExPointW GetCharacterPlacementA

advapi32

MapGenericMask GetEventLogInformation

ole32

OleQueryLinkFromData