setup[.]exe | Triage™

General

Target
setup.exe
Size 189KB
Sample230406-bmtp5acf3t
SHA256 535efc7e7039d10bc61fdf9bdf67dd6d04f3136dfc9d64fcef4daef7480f23de
MD5 754bfb6e26affa258c731c6dd1dadb75
SHA1 e03f17d2740d27f32c7f619e983a6c1363514b50
SHA512 ed713e974e4f80e1d9412cbf5e76b92b230b90fdfd4d9859f87235732a620655764467668dd5c0c040211702900c6ef0ecec7f7074bf80b5c2f9ad78e1c4abf0
SSDEEP 1536:AhJrKChi9OCbR/kKEfnXupbkqjpQYTEVe4R3DOn5FUywNOJMM1jSGLDHj5zqzlTi:ArhQGnXMb5D/kyn2xl0D5zqZTY9TIx
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 189KB

setup.exe

IMPHASH 8b6575194362f1831c68d0b3be18bb4b
SHA256 535efc7e7039d10bc61fdf9bdf67dd6d04f3136dfc9d64fcef4daef7480f23de
MD5 754bfb6e26affa258c731c6dd1dadb75
SHA1 e03f17d2740d27f32c7f619e983a6c1363514b50
SHA512 ed713e974e4f80e1d9412cbf5e76b92b230b90fdfd4d9859f87235732a620655764467668dd5c0c040211702900c6ef0ecec7f7074bf80b5c2f9ad78e1c4abf0
SSDEEP 1536:AhJrKChi9OCbR/kKEfnXupbkqjpQYTEVe4R3DOn5FUywNOJMM1jSGLDHj5zqzlTi:ArhQGnXMb5D/kyn2xl0D5zqZTY9TIx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16622

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA VerSetConditionMask GetCommState ReadConsoleA InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA InterlockedCompareExchange GetModuleHandleW EnumCalendarInfoExW SetCommState EnumResourceTypesA TlsSetValue FindResourceExA LoadLibraryW GetVersionExW GetFileAttributesA SetConsoleMode GetConsoleAliasW HeapValidate SetConsoleCursorPosition GetMailslotInfo WritePrivateProfileStringW GetStringTypeExA CreateJobObjectA GetProfileIntA GetCPInfoExW GetLastError InterlockedFlushSList GetProcAddress VirtualAlloc BackupWrite WriteProfileSectionA RemoveDirectoryA SetStdHandle LocalAlloc MoveFileA AddAtomW BeginUpdateResourceA FoldStringA GetModuleHandleA FreeEnvironmentStringsW VirtualProtect OpenEventW QueryPerformanceFrequency GetShortPathNameW GetWindowsDirectoryW AddConsoleAliasA GetConsoleProcessList DebugBreak DeleteFileA GetConsoleAliasesLengthW GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException LoadLibraryA InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharLowerBuffW

gdi32

SelectPalette GetCharWidthI

shell32

CommandLineToArgvW

Sharing