setup[.]exe | Triage™

General

Target
setup.exe
Size 232KB
Sample230402-a4nd1afa61
SHA256 aec8b80ca4b56ac949515aebb55ebd384b18bf9371287948bc646bdafd12f2d5
MD5 088bda258f8e982ab30a5bca2831af40
SHA1 d18d650f6adf6833a1ffbcbbc9efbb7a15b0baf6
SHA512 ad9240d2232aa0075f00170e691cbd6a7c1656f1312764d9e3c2ed36de3edf92bf2622a3d102711524360f68efebe678b46bd521db40bcdb6820a473cbd93473
SSDEEP 3072:UbDQAh2J/mz8TbIN96A2FF6J+fVE/3XGFibh4wFknuaVNYKp+xQHca:IAJeoTbIYtzREVQ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 232KB

setup.exe

IMPHASH cbd684b5c2d7ad7fbf4a9d5a3ed4fb3e
SHA256 aec8b80ca4b56ac949515aebb55ebd384b18bf9371287948bc646bdafd12f2d5
MD5 088bda258f8e982ab30a5bca2831af40
SHA1 d18d650f6adf6833a1ffbcbbc9efbb7a15b0baf6
SHA512 ad9240d2232aa0075f00170e691cbd6a7c1656f1312764d9e3c2ed36de3edf92bf2622a3d102711524360f68efebe678b46bd521db40bcdb6820a473cbd93473
SSDEEP 3072:UbDQAh2J/mz8TbIN96A2FF6J+fVE/3XGFibh4wFknuaVNYKp+xQHca:IAJeoTbIYtzREVQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16306

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileSectionNamesW CreateTimerQueue CreateMutexW SearchPathW lstrcmpA EnumCalendarInfoA GetModuleHandleExA GetStringTypeA SetLocalTime BuildCommDCBAndTimeoutsA CallNamedPipeA LocalCompact EnumCalendarInfoW VerSetConditionMask SetDefaultCommConfigW InterlockedCompareExchange WriteConsoleInputA BackupSeek _lclose GetWindowsDirectoryA FindActCtxSectionStringA GetDriveTypeA GetEnvironmentStrings GlobalAlloc GetFirmwareEnvironmentVariableA LoadLibraryW GetFileAttributesA GetComputerNameExA TransactNamedPipe PulseEvent GetSystemDirectoryA CompareStringW GetDevicePowerState DeactivateActCtx GetConsoleOutputCP SetLastError GetProcAddress RemoveDirectoryA ResetEvent OpenWaitableTimerA OpenMutexA CreateFileMappingA LocalAlloc SetCalendarInfoW FindFirstVolumeMountPointW WriteProfileSectionW AddAtomA WaitForMultipleObjects EnumResourceTypesW FindNextFileA GetModuleHandleA SetLocaleInfoW WaitForDebugEvent GetCurrentThreadId DeleteFileW CopyFileExA EnumSystemLocalesA GetLocaleInfoA GetConsoleAliasW LocalUnlock GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree FatalAppExitA GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer IsProcessorFeaturePresent HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID IsValidLocale

user32

LoadMenuA

advapi32

ReportEventW

Sharing