setup[.]exe | Triage™

General

Target
setup.exe
Size 317KB
Sample230402-bfjatafb41
SHA256 1682a7f8f229e62c379fca3c6c989c748aef985e51fc6bcf76d06bde9b0484cf
MD5 7fb1a9aff7e9f22621eedcf7ab334a88
SHA1 a323bdc552e2c0fe4b0417c933031450bb2c206f
SHA512 55ff1a83a7df7a7c35fcb2891aabc3112ab6086da8b0c9eed2167a9364a3535646217ec6bb48eccaeeb254b40dfaa6b9590f90e24f01637246abbbca760ea1d0
SSDEEP 3072:cJdnwLsGs4XabZo4LumHWJT65JHppb+L6oHOnkuMFG5lbxmVOR6/SJ1qkEPQ2sPV:TF1EZo4L/rpb+Ls7lGORaSJ4I9lQn1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 317KB

setup.exe

IMPHASH 2131db44a5c98e05f373c247645871f9
SHA256 1682a7f8f229e62c379fca3c6c989c748aef985e51fc6bcf76d06bde9b0484cf
MD5 7fb1a9aff7e9f22621eedcf7ab334a88
SHA1 a323bdc552e2c0fe4b0417c933031450bb2c206f
SHA512 55ff1a83a7df7a7c35fcb2891aabc3112ab6086da8b0c9eed2167a9364a3535646217ec6bb48eccaeeb254b40dfaa6b9590f90e24f01637246abbbca760ea1d0
SSDEEP 3072:cJdnwLsGs4XabZo4LumHWJT65JHppb+L6oHOnkuMFG5lbxmVOR6/SJ1qkEPQ2sPV:TF1EZo4L/rpb+Ls7lGORaSJ4I9lQn1
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16390

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateTimerQueue CreateMutexW SearchPathW lstrcmpA WriteConsoleInputW GetModuleHandleExA SetLocalTime _llseek CallNamedPipeA LocalCompact EnumCalendarInfoW SetDefaultCommConfigW GetEnvironmentStringsW InterlockedCompareExchange BackupSeek FindActCtxSectionStringA GetDriveTypeA GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW GetSystemDirectoryA CompareStringW GetDevicePowerState DeactivateActCtx GetConsoleOutputCP SetLastError GetProcAddress PulseEvent WriteProfileSectionA GetFirmwareEnvironmentVariableW ResetEvent OpenWaitableTimerA OpenMutexA LocalAlloc SetCalendarInfoW DnsHostnameToComputerNameA GetFileType BuildCommDCBAndTimeoutsW RemoveDirectoryW AddAtomA WaitForMultipleObjects EnumResourceTypesW GetPrivateProfileSectionNamesA FindNextFileA FindFirstVolumeMountPointA GetModuleHandleA SetLocaleInfoW ContinueDebugEvent GetStringTypeW GetCurrentThreadId GetWindowsDirectoryW DeleteFileW CopyFileExA EnumSystemLocalesA GetLocaleInfoA GetComputerNameExW GetDateFormatW GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree FatalAppExitA GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer IsProcessorFeaturePresent HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID IsValidLocale

user32

LoadMenuW

advapi32

ReportEventW

Sharing