setup[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 217KB
Sample230401-bv85safa66
SHA256 eb68008955ec7c622249003cd027637f905acbb708a07bfb30fc614989400203
MD5 3c3275f46cf246eccbbcfa6a9f3dd933
SHA1 b5df18909c4f170cdbf093f1050b60adf8e90a70
SHA512 9485fe87e3a9a18fb976060aedafb83af059f65698c307e22c74b3cfb24200c8c589b98751cef23d27390c5ffff37b1d78c737c0d6709e39201f4862464a747a
SSDEEP 3072:vDiyawkEvL7Jusb52y246xRSDl+Qd28AzfkZhFppwnT5gTORV1om+X:+4kEws3DMmdd+IZhFvwmTO/1orX
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 217KB

setup.exe

IMPHASH eea28e28e792e9e49297c6bbbc66047d
SHA256 eb68008955ec7c622249003cd027637f905acbb708a07bfb30fc614989400203
MD5 3c3275f46cf246eccbbcfa6a9f3dd933
SHA1 b5df18909c4f170cdbf093f1050b60adf8e90a70
SHA512 9485fe87e3a9a18fb976060aedafb83af059f65698c307e22c74b3cfb24200c8c589b98751cef23d27390c5ffff37b1d78c737c0d6709e39201f4862464a747a
SSDEEP 3072:vDiyawkEvL7Jusb52y246xRSDl+Qd28AzfkZhFppwnT5gTORV1om+X:+4kEws3DMmdd+IZhFvwmTO/1orX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24880

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState WaitNamedPipeA CreateJobObjectW EnumCalendarInfoExW GetConsoleAliasesLengthA ReadConsoleW SetHandleCount TlsSetValue LoadLibraryW GetVersionExW SetConsoleMode HeapValidate SetConsoleCursorPosition EnumResourceLanguagesA GetMailslotInfo GetStringTypeExA GetCPInfoExW SetLastError BackupRead GetProcAddress VirtualAlloc SetStdHandle SearchPathA LoadLibraryA MoveFileExW InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA AddAtomW OpenEventA BeginUpdateResourceA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW QueryPerformanceFrequency GetVersionExA GetWindowsDirectoryW AddConsoleAliasA GetConsoleProcessList DebugBreak InterlockedPushEntrySList CommConfigDialogW DeleteFileA VerSetConditionMask InterlockedIncrement FindResourceExW DeleteVolumeMountPointA GetSystemDefaultLangID CloseHandle CreateFileA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetCommandLineA GetStartupInfoA GetLastError HeapFree RtlUnwind RaiseException GetModuleHandleW ExitProcess WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

user32

GetCaretBlinkTime

gdi32

SelectPalette GetTextExtentExPointW GetCharacterPlacementA

advapi32

MapGenericMask GetEventLogInformation

ole32

OleQueryLinkFromData