setup[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 218KB
Sample230402-a6evmsfa7w
SHA256 3e2a098995005be31fb1c2add68d5371c7e8cdfc0906e77f77b2526766b1a772
MD5 d46bfe4c28ea8f730a1121e5a1d879f2
SHA1 ee3621586e90d8776dcd352fdae32355a6615ead
SHA512 33364c5a17cab12da5cac9cedd0191cba00808af8bf4d5934499a433bdc7e23e0df39ee77516cc7fe2fb81c1506f14b6f2082c9691a0a70bac83599c78e5aa53
SSDEEP 3072:hWwyj0OLNtamEPrWv/+mGGbLhKzlx/33lQj5g6Cox:naD5tv/+mRKZx/lB67
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 218KB

setup.exe

IMPHASH 724f7af50306908b18449bf42724cf5d
SHA256 3e2a098995005be31fb1c2add68d5371c7e8cdfc0906e77f77b2526766b1a772
MD5 d46bfe4c28ea8f730a1121e5a1d879f2
SHA1 ee3621586e90d8776dcd352fdae32355a6615ead
SHA512 33364c5a17cab12da5cac9cedd0191cba00808af8bf4d5934499a433bdc7e23e0df39ee77516cc7fe2fb81c1506f14b6f2082c9691a0a70bac83599c78e5aa53
SSDEEP 3072:hWwyj0OLNtamEPrWv/+mGGbLhKzlx/33lQj5g6Cox:naD5tv/+mRKZx/lB67
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24928

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState WaitNamedPipeA CreateJobObjectW EnumCalendarInfoExW GetConsoleAliasesLengthA ReadConsoleW SetHandleCount TlsSetValue LoadLibraryW GetVersionExW GetStringTypeExW SetConsoleMode HeapValidate SetConsoleCursorPosition EnumResourceLanguagesA GetMailslotInfo GetCPInfoExW SetLastError BackupRead GetProcAddress VirtualAlloc BeginUpdateResourceW SetStdHandle SearchPathA MoveFileExW InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA AddAtomW OpenEventA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW QueryPerformanceFrequency GetVersionExA GetWindowsDirectoryW AddConsoleAliasA GetConsoleProcessList DebugBreak InterlockedPushEntrySList CommConfigDialogW DeleteFileA VerSetConditionMask InterlockedIncrement FindResourceExW DeleteVolumeMountPointA LoadLibraryA GetSystemDefaultLangID CloseHandle CreateFileA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetCommandLineA GetStartupInfoA GetLastError HeapFree RtlUnwind RaiseException GetModuleHandleW ExitProcess WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

user32

GetCaretBlinkTime

gdi32

SelectPalette GetTextExtentExPointW GetCharacterPlacementA

advapi32

MapGenericMask GetEventLogInformation

ole32

OleQueryLinkFromData