setup[.]exe | Triage™

General

Target
setup.exe
Size 263KB
Sample230408-baxw1sbb99
SHA256 bee408f8a719302224b40ebacef5bd733b1aa4262dd7552c0e95f808b5c9aefc
MD5 f429fd679226ab4f60b5f4df81d941a1
SHA1 c6465b0b57d6716405c14f40abe34ec200934f40
SHA512 47712f24c545ec3a56b14f441a1461983f2b5c81b1ddec5759afab601d229cb9b630df498946c48aff0010c1d0dc7686d97014414ba90e30fefa94852d664b62
SSDEEP 3072:OvZ99I/9hcwXHS0fG+DA6nKTM/JsajLY50bPBVks05qTKmAG8zqEl0051mM0S4:yh6O+gTMBspGpnDm1mM0
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 263KB

setup.exe

IMPHASH 5d89d480ca50e80ba5a0de339176474b
SHA256 bee408f8a719302224b40ebacef5bd733b1aa4262dd7552c0e95f808b5c9aefc
MD5 f429fd679226ab4f60b5f4df81d941a1
SHA1 c6465b0b57d6716405c14f40abe34ec200934f40
SHA512 47712f24c545ec3a56b14f441a1461983f2b5c81b1ddec5759afab601d229cb9b630df498946c48aff0010c1d0dc7686d97014414ba90e30fefa94852d664b62
SSDEEP 3072:OvZ99I/9hcwXHS0fG+DA6nKTM/JsajLY50bPBVks05qTKmAG8zqEl0051mM0S4:yh6O+gTMBspGpnDm1mM0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19694

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA SetFirmwareEnvironmentVariableA QueryPerformanceCounter GetUserDefaultLCID SetConsoleScreenBufferSize InterlockedCompareExchange AddConsoleAliasW FreeEnvironmentStringsA GetModuleHandleW ReadConsoleW TlsSetValue GlobalAlloc LoadLibraryW CopyFileW GetVersionExW DeleteVolumeMountPointW GetFileAttributesA SetConsoleMode GetConsoleAliasW GetMailslotInfo WritePrivateProfileStringW GetStringTypeExA CreateJobObjectA GetProfileIntA GetCPInfoExW GetCommState GetLastError InterlockedFlushSList GetProcAddress VirtualAlloc HeapSize BeginUpdateResourceW BackupWrite RemoveDirectoryA SetStdHandle MoveFileA AddAtomW WriteProfileSectionW FoldStringA EnumResourceTypesW GetModuleHandleA VirtualProtect OpenEventW GetShortPathNameW GetVersionExA GetWindowsDirectoryW GetConsoleProcessList DebugBreak EnumCalendarInfoExA InterlockedIncrement FindResourceW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId RaiseException GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind LoadLibraryA InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

CharLowerBuffW

gdi32

GetBrushOrgEx GetCharWidthI

Sharing