setup[.]exe | Triage™

General

Target
setup.exe
Size 257KB
Sample230404-bxdrnacb87
SHA256 7435f660e40743693ff284299178d9bee52c9f9dbce2f1ca1bcc1f528ff47dc8
MD5 eedb87d566f8cad1f24f753c6342b2c0
SHA1 caf93fd32b3d4b114a0f2a0994aad81862d626dd
SHA512 efbb3c12c9e4e4bed99cd9181f7eeb30aa63593321d0744123150186e2f8db99caa0771c1299867a34b27ac90a078ec4cc7e86ee6084a19123e1e14e9b5ddd87
SSDEEP 6144:lBjhuXdBnZzf5XHWM2Z0N/3tteffM7lQMSGs:vjhQnZzRmfZ0N/iXM7lQMB
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 257KB

setup.exe

IMPHASH 398825ff21d4e599ae28a4c28c8dbaf0
SHA256 7435f660e40743693ff284299178d9bee52c9f9dbce2f1ca1bcc1f528ff47dc8
MD5 eedb87d566f8cad1f24f753c6342b2c0
SHA1 caf93fd32b3d4b114a0f2a0994aad81862d626dd
SHA512 efbb3c12c9e4e4bed99cd9181f7eeb30aa63593321d0744123150186e2f8db99caa0771c1299867a34b27ac90a078ec4cc7e86ee6084a19123e1e14e9b5ddd87
SSDEEP 6144:lBjhuXdBnZzf5XHWM2Z0N/3tteffM7lQMSGs:vjhQnZzRmfZ0N/iXM7lQMB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24423

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumberOfConsoleMouseButtons SetMailslotInfo CreateJobObjectW InterlockedCompareExchange FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesLengthA WaitNamedPipeW TlsSetValue FindResourceExA LoadLibraryW GetVersionExW DeleteVolumeMountPointW SetConsoleMode HeapValidate SetConsoleCursorPosition GetFileAttributesW GetModuleFileNameW GetStringTypeExA InterlockedFlushSList SetLastError BackupRead ReadConsoleA VirtualAlloc BeginUpdateResourceW RemoveDirectoryA SetStdHandle LocalAlloc WritePrivateProfileStringA WriteProfileSectionW AddAtomA FoldStringW EnumResourceTypesW GetModuleHandleA OpenEventW QueryPerformanceFrequency GetCPInfoExA LocalSize GetWindowsDirectoryW DeleteAtom AddConsoleAliasA DebugBreak EnumCalendarInfoExA DeleteFileA GetCommState MoveFileExW VerSetConditionMask CommConfigDialogA InterlockedIncrement GetProcAddress GetSystemDefaultLangID InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA RtlUnwind RaiseException ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapCreate VirtualFree HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetHandleCount GetFileType SetFilePointer GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharacterPlacementA SelectPalette GetTextExtentExPointA GetCharWidthI

advapi32

MapGenericMask GetEventLogInformation

Sharing