setup[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 250KB
Sample230401-chal5agf3t
SHA256 e948d819098a535a287e480031682ef52dfd0a3b4d53778b49d73f362409c8aa
MD5 9940c2ab467873062bae14960469b7dd
SHA1 8a253e9de5d2daa699f0d7e0673d2f6dc480b4a0
SHA512 2ad6a4a99c7b05212e64c843027f946cd59ee26f02cc1b0e4655d9ecf88b7de70ffe9557291cbedd6d2a4f90b5e830e7ad91d4758aaf80128ee243930c66b6b9
SSDEEP 3072:wGA/Fn5TF+pt8XcfsRmXBOXRMN2iYWdrZr8Cr/+Sl73Mq4KvKKKFpxwH+v:whB5T0Acfmh6fYjK//3MfKKee
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 250KB

setup.exe

IMPHASH 2e270ba28469f92e174c2fa22258ae6d
SHA256 e948d819098a535a287e480031682ef52dfd0a3b4d53778b49d73f362409c8aa
MD5 9940c2ab467873062bae14960469b7dd
SHA1 8a253e9de5d2daa699f0d7e0673d2f6dc480b4a0
SHA512 2ad6a4a99c7b05212e64c843027f946cd59ee26f02cc1b0e4655d9ecf88b7de70ffe9557291cbedd6d2a4f90b5e830e7ad91d4758aaf80128ee243930c66b6b9
SSDEEP 3072:wGA/Fn5TF+pt8XcfsRmXBOXRMN2iYWdrZr8Cr/+Sl73Mq4KvKKKFpxwH+v:whB5T0Acfmh6fYjK//3MfKKee
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37984

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerSetConditionMask MoveFileExW GetCommState WaitNamedPipeA SetDefaultCommConfigW AddConsoleAliasW GetSystemDefaultLCID EnumCalendarInfoExW TlsSetValue LoadLibraryW DeleteVolumeMountPointW InterlockedPopEntrySList SetConsoleMode SetConsoleCursorPosition EnumResourceLanguagesA GetStringTypeExA GetCPInfoExW SetLastError GetProcAddress VirtualAlloc SetStdHandle InterlockedIncrement LoadLibraryA InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA AddAtomW OpenEventA BeginUpdateResourceA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW QueryPerformanceFrequency DeleteFileW DeleteAtom GetConsoleProcessList DebugBreak FindResourceExW GetConsoleAliasExesLengthA SearchPathA CloseHandle CreateFileA WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW GetModuleHandleW ExitProcess WriteFile GetStdHandle HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetHandleCount GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

user32

GetCaretBlinkTime

gdi32

SelectPalette

advapi32

MapGenericMask

winhttp

WinHttpWriteData