setup[.]exe | Triage™

General

Target
setup.exe
Size 257KB
Sample230404-bxdrnaea41
SHA256 447102cbda0f30fdb352c94f4809d1301287bf232298760e7471dcfb718364ec
MD5 2738ae4d00769e05e7dee2ce3a97e502
SHA1 0656c139b158d62007c43b5bf53ea948ac99d5fd
SHA512 030b3651aa1d78b0f3a82181b5a7e5fcd414f413eca622e75d8e7e6ac26f8971b60f0f12d99373352fe20fad22d4ab8a7cff3bbc01ffba095b72e6d35114542b
SSDEEP 6144:yvQHfoig6jUGHYfka4PA15GufcwbROZq+/ERtZ1:mQHfoipbKrTGVwbRV+kz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 257KB

setup.exe

IMPHASH 398825ff21d4e599ae28a4c28c8dbaf0
SHA256 447102cbda0f30fdb352c94f4809d1301287bf232298760e7471dcfb718364ec
MD5 2738ae4d00769e05e7dee2ce3a97e502
SHA1 0656c139b158d62007c43b5bf53ea948ac99d5fd
SHA512 030b3651aa1d78b0f3a82181b5a7e5fcd414f413eca622e75d8e7e6ac26f8971b60f0f12d99373352fe20fad22d4ab8a7cff3bbc01ffba095b72e6d35114542b
SSDEEP 6144:yvQHfoig6jUGHYfka4PA15GufcwbROZq+/ERtZ1:mQHfoipbKrTGVwbRV+kz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24423

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumberOfConsoleMouseButtons SetMailslotInfo CreateJobObjectW InterlockedCompareExchange FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesLengthA WaitNamedPipeW TlsSetValue FindResourceExA LoadLibraryW GetVersionExW DeleteVolumeMountPointW SetConsoleMode HeapValidate SetConsoleCursorPosition GetFileAttributesW GetModuleFileNameW GetStringTypeExA InterlockedFlushSList SetLastError BackupRead ReadConsoleA VirtualAlloc BeginUpdateResourceW RemoveDirectoryA SetStdHandle LocalAlloc WritePrivateProfileStringA WriteProfileSectionW AddAtomA FoldStringW EnumResourceTypesW GetModuleHandleA OpenEventW QueryPerformanceFrequency GetCPInfoExA LocalSize GetWindowsDirectoryW DeleteAtom AddConsoleAliasA DebugBreak EnumCalendarInfoExA DeleteFileA GetCommState MoveFileExW VerSetConditionMask CommConfigDialogA InterlockedIncrement GetProcAddress GetSystemDefaultLangID InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA RtlUnwind RaiseException ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapCreate VirtualFree HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetHandleCount GetFileType SetFilePointer GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharacterPlacementA SelectPalette GetTextExtentExPointA GetCharWidthI

advapi32

MapGenericMask GetEventLogInformation

Sharing