setup[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 249KB
Sample230401-ccp5mafc28
SHA256 b6b7d973098b3f3d2f652cdae56c8b4f3f6380821b9f0056012c4969c93cce48
MD5 c927c39d18ec8f4485f14be6a8f40bee
SHA1 56c0cf9d022999902332b3211e91cd6f186fa2fe
SHA512 567d22b375c3e39298ea1a6c2f4705d8d6effdd07e0e4f9630fb2d68974763ee991a9e1d534d2415338cdd0ff3b1505831b74ba37e47bae082e5c30a4dd88392
SSDEEP 3072:45c4dFo7p8XS/hmcRTauGyOUJR7dj9RFvLmVqtCBg9NG6v:J4diWS/HlXl9/vyoJJ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 249KB

setup.exe

IMPHASH e5ec463dc19034b6761a0b4623ef91ea
SHA256 b6b7d973098b3f3d2f652cdae56c8b4f3f6380821b9f0056012c4969c93cce48
MD5 c927c39d18ec8f4485f14be6a8f40bee
SHA1 56c0cf9d022999902332b3211e91cd6f186fa2fe
SHA512 567d22b375c3e39298ea1a6c2f4705d8d6effdd07e0e4f9630fb2d68974763ee991a9e1d534d2415338cdd0ff3b1505831b74ba37e47bae082e5c30a4dd88392
SSDEEP 3072:45c4dFo7p8XS/hmcRTauGyOUJR7dj9RFvLmVqtCBg9NG6v:J4diWS/HlXl9/vyoJJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37984

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA InterlockedIncrement VerSetConditionMask MoveFileExW GetCommState WaitNamedPipeA SetDefaultCommConfigW EnumCalendarInfoExW ReadConsoleW SetHandleCount TlsSetValue LoadLibraryW SetConsoleMode HeapValidate SetConsoleCursorPosition EnumResourceLanguagesA GetStringTypeExA GetCPInfoExW SetLastError GetProcAddress VirtualAlloc SetStdHandle SearchPathA GetConsoleAliasExesLengthA InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA AddAtomW OpenEventA BeginUpdateResourceA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW QueryPerformanceFrequency GetWindowsDirectoryW DeleteFileW AddConsoleAliasA GetConsoleProcessList DebugBreak InterlockedPushEntrySList FindResourceExW LoadLibraryA GetSystemDefaultLangID CloseHandle CreateFileA WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW GetModuleHandleW ExitProcess WriteFile GetStdHandle HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

user32

GetCaretBlinkTime

gdi32

SelectPalette

advapi32

MapGenericMask

winhttp

WinHttpWriteData