setup[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 218KB
Sample230402-a7hmxsfa8t
SHA256 3839360d8e8a552ce9feb89f88bc276c85bfeb16b6a4a6021786e4a0ccf8dde1
MD5 9565c4e50403f986850f3ac801c689e7
SHA1 3549fd573035fd54230821ff5bdb946d30dd4ae3
SHA512 53757379ebf287f80e05708e089847318557c7cf47018f1ec229de16681148ef5f98d94352b08884298cf986bc07ebb1c40fc9b32595f527c000145bcc356a39
SSDEEP 3072:1QYiyN9drOpNNkXDZ0SdaSkvIt3MnBx0OnOpCFM+m/XbVwj5gruLarg:1eCdyy07SnyBxuonm/LVhKkg
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 218KB

setup.exe

IMPHASH 724f7af50306908b18449bf42724cf5d
SHA256 3839360d8e8a552ce9feb89f88bc276c85bfeb16b6a4a6021786e4a0ccf8dde1
MD5 9565c4e50403f986850f3ac801c689e7
SHA1 3549fd573035fd54230821ff5bdb946d30dd4ae3
SHA512 53757379ebf287f80e05708e089847318557c7cf47018f1ec229de16681148ef5f98d94352b08884298cf986bc07ebb1c40fc9b32595f527c000145bcc356a39
SSDEEP 3072:1QYiyN9drOpNNkXDZ0SdaSkvIt3MnBx0OnOpCFM+m/XbVwj5gruLarg:1eCdyy07SnyBxuonm/LVhKkg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24928

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState WaitNamedPipeA CreateJobObjectW EnumCalendarInfoExW GetConsoleAliasesLengthA ReadConsoleW SetHandleCount TlsSetValue LoadLibraryW GetVersionExW GetStringTypeExW SetConsoleMode HeapValidate SetConsoleCursorPosition EnumResourceLanguagesA GetMailslotInfo GetCPInfoExW SetLastError BackupRead GetProcAddress VirtualAlloc BeginUpdateResourceW SetStdHandle SearchPathA MoveFileExW InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA AddAtomW OpenEventA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW QueryPerformanceFrequency GetVersionExA GetWindowsDirectoryW AddConsoleAliasA GetConsoleProcessList DebugBreak InterlockedPushEntrySList CommConfigDialogW DeleteFileA VerSetConditionMask InterlockedIncrement FindResourceExW DeleteVolumeMountPointA LoadLibraryA GetSystemDefaultLangID CloseHandle CreateFileA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetCommandLineA GetStartupInfoA GetLastError HeapFree RtlUnwind RaiseException GetModuleHandleW ExitProcess WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

user32

GetCaretBlinkTime

gdi32

SelectPalette GetTextExtentExPointW GetCharacterPlacementA

advapi32

MapGenericMask GetEventLogInformation

ole32

OleQueryLinkFromData