setup[.]exe | Triage™

General

Target
setup.exe
Size 245KB
Sample230402-axdafsfa4w
SHA256 d9538bdde61c8a263a3b546a6479de1fe27b72c72fbbdf21265ec2081a8e605b
MD5 08b3cd4ff5de7c949d82a0eef9d312e3
SHA1 6f4c8ec82f55a76e910a6ad644b4ef1d07e2c702
SHA512 b48f95a590f292aaa34705c917b0b9e5c6c03d7f09eee10d85bd8964f8474a4ef053c3b01e7f711ad99acedc88ab08f53c4b93e15b526f034620bfe393068b8a
SSDEEP 3072:am+zUjSXFX1FPmZxm0W885KFHY6J4jQLzn7AaQQzPXOhU/1GHc2:f21TPmZtCLQbAaPehuG
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 245KB

setup.exe

IMPHASH 2131db44a5c98e05f373c247645871f9
SHA256 d9538bdde61c8a263a3b546a6479de1fe27b72c72fbbdf21265ec2081a8e605b
MD5 08b3cd4ff5de7c949d82a0eef9d312e3
SHA1 6f4c8ec82f55a76e910a6ad644b4ef1d07e2c702
SHA512 b48f95a590f292aaa34705c917b0b9e5c6c03d7f09eee10d85bd8964f8474a4ef053c3b01e7f711ad99acedc88ab08f53c4b93e15b526f034620bfe393068b8a
SSDEEP 3072:am+zUjSXFX1FPmZxm0W885KFHY6J4jQLzn7AaQQzPXOhU/1GHc2:f21TPmZtCLQbAaPehuG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16374

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateTimerQueue CreateMutexW SearchPathW lstrcmpA WriteConsoleInputW GetModuleHandleExA SetLocalTime _llseek CallNamedPipeA LocalCompact EnumCalendarInfoW SetDefaultCommConfigW GetEnvironmentStringsW InterlockedCompareExchange BackupSeek FindActCtxSectionStringA GetDriveTypeA GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW GetSystemDirectoryA CompareStringW GetDevicePowerState DeactivateActCtx GetConsoleOutputCP SetLastError GetProcAddress PulseEvent WriteProfileSectionA GetFirmwareEnvironmentVariableW ResetEvent OpenWaitableTimerA OpenMutexA LocalAlloc SetCalendarInfoW DnsHostnameToComputerNameA GetFileType BuildCommDCBAndTimeoutsW RemoveDirectoryW AddAtomA WaitForMultipleObjects EnumResourceTypesW GetPrivateProfileSectionNamesA FindNextFileA FindFirstVolumeMountPointA GetModuleHandleA SetLocaleInfoW ContinueDebugEvent GetStringTypeW GetCurrentThreadId GetWindowsDirectoryW DeleteFileW CopyFileExA EnumSystemLocalesA GetLocaleInfoA GetComputerNameExW GetDateFormatW GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree FatalAppExitA GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer IsProcessorFeaturePresent HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID IsValidLocale

user32

LoadMenuW

advapi32

ReportEventW

Sharing