setup[.]exe | Triage™

General

Target
setup.exe
Size 259KB
Sample230401-bwt29afa69
SHA256 ff00e0c288012862ba485bffd216e52b4d4e0627c207d429f7bc4e4343dc6df8
MD5 e92395871eaaf64fa9a5c1fa8aa2d022
SHA1 1ef50733fb7cd13df8b8cc821528ae177149d9ff
SHA512 61bc198ec2c413b28698090437f78b687455144881c7844bdaa2d0df3f222e419b8ec5c09408a4c87afc9147f4b9858e9faefac58518fdc7054a45b8b544b184
SSDEEP 3072:vKyq8qW66dR8pElP6kaRL/4ty097ZD3KFcwdxTrdW5cRsPt:C38j16n9A57ZDyh5hRSt
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 259KB

setup.exe

IMPHASH ad9446880bab3cbe9ca834419019c81a
SHA256 ff00e0c288012862ba485bffd216e52b4d4e0627c207d429f7bc4e4343dc6df8
MD5 e92395871eaaf64fa9a5c1fa8aa2d022
SHA1 1ef50733fb7cd13df8b8cc821528ae177149d9ff
SHA512 61bc198ec2c413b28698090437f78b687455144881c7844bdaa2d0df3f222e419b8ec5c09408a4c87afc9147f4b9858e9faefac58518fdc7054a45b8b544b184
SSDEEP 3072:vKyq8qW66dR8pElP6kaRL/4ty097ZD3KFcwdxTrdW5cRsPt:C38j16n9A57ZDyh5hRSt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24752

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement VerSetConditionMask MoveFileExW GetCommState WaitNamedPipeA CreateJobObjectW EnumCalendarInfoExW GetConsoleAliasesLengthA ReadConsoleW SetHandleCount TlsSetValue LoadLibraryW GetVersionExW SetConsoleMode HeapValidate SetConsoleCursorPosition EnumResourceLanguagesA GetMailslotInfo GetStringTypeExA GetCPInfoExW SetLastError BackupRead GetProcAddress VirtualAlloc SetStdHandle SearchPathA DeleteVolumeMountPointA InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA AddAtomW OpenEventA BeginUpdateResourceA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW QueryPerformanceFrequency GetVersionExA GetWindowsDirectoryW AddConsoleAliasA GetConsoleProcessList DebugBreak InterlockedPushEntrySList CommConfigDialogW DeleteFileA FindResourceExW LoadLibraryA GetSystemDefaultLangID InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetCommandLineA GetStartupInfoA GetLastError HeapFree RtlUnwind RaiseException GetModuleHandleW ExitProcess WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

user32

GetCaretBlinkTime

gdi32

SelectPalette

advapi32

MapGenericMask

Sharing