setup[.]exe | Triage™

General

Target
setup.exe
Size 257KB
Sample230404-byjdjacb95
SHA256 8404cb4a740d169256e49e3a22b2af1a61b2606e71cdca4f39deeccd5d461c91
MD5 fd9277c7cb81691b9b997c4f2b0f9203
SHA1 84bf887ea4b5782996e43b6038df4572b579b45e
SHA512 983e2dc788707fc159bfd9da2b78239f1520aeeaf5d1bafc536b64f9ba52f85a6b45ca7ca2074320e4b006de402b28deefa5dfab7f2877947a4e446904759379
SSDEEP 6144:hLhdrUs8fFSIdkZXL4sNqE+Y3ORwmwU1kUjbmj:RhdNNz1DqEV37mhbmj
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 257KB

setup.exe

IMPHASH e29976161a141f5f92fe5bca09916305
SHA256 8404cb4a740d169256e49e3a22b2af1a61b2606e71cdca4f39deeccd5d461c91
MD5 fd9277c7cb81691b9b997c4f2b0f9203
SHA1 84bf887ea4b5782996e43b6038df4572b579b45e
SHA512 983e2dc788707fc159bfd9da2b78239f1520aeeaf5d1bafc536b64f9ba52f85a6b45ca7ca2074320e4b006de402b28deefa5dfab7f2877947a4e446904759379
SSDEEP 6144:hLhdrUs8fFSIdkZXL4sNqE+Y3ORwmwU1kUjbmj:RhdNNz1DqEV37mhbmj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24359

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumberOfConsoleMouseButtons SetMailslotInfo CreateJobObjectW InterlockedCompareExchange FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesLengthA WaitNamedPipeW TlsSetValue FindResourceExA LoadLibraryW GetVersionExW DeleteVolumeMountPointW SetConsoleMode HeapValidate SetConsoleCursorPosition GetModuleFileNameW GetStringTypeExA InterlockedFlushSList SetLastError ReadConsoleA GetProcAddress VirtualAlloc BeginUpdateResourceW SetStdHandle LocalAlloc WritePrivateProfileStringA WriteProfileSectionW AddAtomA FoldStringW EnumResourceTypesW GetModuleHandleA OpenEventW QueryPerformanceFrequency GetCPInfoExA GetWindowsDirectoryW DeleteAtom AddConsoleAliasA DebugBreak EnumCalendarInfoExA DeleteFileA GetCommState MoveFileExW VerSetConditionMask CommConfigDialogA InterlockedIncrement BackupRead GetSystemDefaultLangID InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA RtlUnwind RaiseException ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapCreate VirtualFree HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetHandleCount GetFileType SetFilePointer GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharacterPlacementA SelectPalette GetTextExtentExPointA GetCharWidthI

advapi32

MapGenericMask GetEventLogInformation

Sharing