setup[.]exe | Triage™

General

Target
setup.exe
Size 397KB
Sample230402-bedc6sdg67
SHA256 c3584cdcbcf8a2bdf6a1dece0ab69208e4dceedd7b8be43072f1c65a68e13417
MD5 532793f823b8be1c25057beb31637a3a
SHA1 f53ff0f7c34c09b80eb57ce92304344f5a227b78
SHA512 22e3431ceb6355c4a527f4572a8984c09521db67373b60a85bcbbb70b42f21b7f83479f9b76e3d1cf784bf5274bdcc741c347cc1ec49a569a53280867deabcf7
SSDEEP 6144:wcC2pso8Gjn5djAOHK+GtkbnSbnD96Xi6ik:wJ2pso8GVJAOHXzaD9ui6ik
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 397KB

setup.exe

IMPHASH 5ca6a4f926acaf79e41109061c7e5b6c
SHA256 c3584cdcbcf8a2bdf6a1dece0ab69208e4dceedd7b8be43072f1c65a68e13417
MD5 532793f823b8be1c25057beb31637a3a
SHA1 f53ff0f7c34c09b80eb57ce92304344f5a227b78
SHA512 22e3431ceb6355c4a527f4572a8984c09521db67373b60a85bcbbb70b42f21b7f83479f9b76e3d1cf784bf5274bdcc741c347cc1ec49a569a53280867deabcf7
SSDEEP 6144:wcC2pso8Gjn5djAOHK+GtkbnSbnD96Xi6ik:wJ2pso8GVJAOHXzaD9ui6ik
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16613

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateTimerQueue CreateMutexW SearchPathW lstrcmpA WriteConsoleInputW GetModuleHandleExA SetLocalTime _llseek CallNamedPipeA LocalCompact EnumCalendarInfoW SetDefaultCommConfigW GetEnvironmentStringsW InterlockedCompareExchange BackupSeek FindActCtxSectionStringA GetDriveTypeA GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW GetSystemDirectoryA CompareStringW GetDevicePowerState DeactivateActCtx GetConsoleOutputCP SetLastError GetProcAddress PulseEvent WriteProfileSectionA GetFirmwareEnvironmentVariableW ResetEvent OpenWaitableTimerA OpenMutexA LocalAlloc SetCalendarInfoW DnsHostnameToComputerNameA GetFileType BuildCommDCBAndTimeoutsW RemoveDirectoryW AddAtomA WaitForMultipleObjects EnumResourceTypesW GetPrivateProfileSectionNamesA FindNextFileA FindFirstVolumeMountPointA GetModuleHandleA SetLocaleInfoW ContinueDebugEvent GetStringTypeW GetCurrentThreadId GetWindowsDirectoryW DeleteFileW CopyFileExA IsValidLocale EnumSystemLocalesA GetComputerNameExW GetDateFormatW GetLastError HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW HeapCreate HeapDestroy EnterCriticalSection LeaveCriticalSection DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep FatalAppExitA GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapAlloc HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer IsProcessorFeaturePresent HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID GetLocaleInfoA DeleteFileA

user32

LoadMenuW

advapi32

ReportEventW

Sharing