setup[.]exe | Triage™

General

Target
setup.exe
Size 264KB
Sample230409-bcnq5aaa8w
SHA256 c0093f55371c87e201ef12c1f98becc18dee2afab323d8d97e8605ce5a08c2d1
MD5 fc1b43bd15336833638a4175395a420b
SHA1 2066bc865bd89338f35e7074b5b5d305b2a3d0d3
SHA512 7e19546cb3b51f22150c52000f63fc9d5e79a45673dcbc1d699c1f52f3ccf3ff5d58c7332f711dc0fbe3f5cda5c6331d4723d724dde439481fff9c1106618fb1
SSDEEP 3072:LdTGoS8N8WAKVsCMZtjWbK0GO1d/X0CqLzhLWOO6RalTpIC5OBsy:5SyN8bT6bJP/UWCrl
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 264KB

setup.exe

IMPHASH 8effd33c0c7d3209e4d0dde05803b13b
SHA256 c0093f55371c87e201ef12c1f98becc18dee2afab323d8d97e8605ce5a08c2d1
MD5 fc1b43bd15336833638a4175395a420b
SHA1 2066bc865bd89338f35e7074b5b5d305b2a3d0d3
SHA512 7e19546cb3b51f22150c52000f63fc9d5e79a45673dcbc1d699c1f52f3ccf3ff5d58c7332f711dc0fbe3f5cda5c6331d4723d724dde439481fff9c1106618fb1
SSDEEP 3072:LdTGoS8N8WAKVsCMZtjWbK0GO1d/X0CqLzhLWOO6RalTpIC5OBsy:5SyN8bT6bJP/UWCrl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20791

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ScrollConsoleScreenBufferW QueryPerformanceCounter GetUserDefaultLCID SetConsoleScreenBufferSize InterlockedCompareExchange AddConsoleAliasW GetModuleHandleW EnumCalendarInfoExW ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsW GlobalAlloc LoadLibraryW GetVersionExW GetFileAttributesA HeapQueryInformation GetMailslotInfo GetStringTypeExA CreateJobObjectA EnumSystemLocalesA GetProfileIntA GetLastError InterlockedFlushSList GetProcAddress VirtualAlloc WaitNamedPipeA BackupWrite SetFirmwareEnvironmentVariableW RemoveDirectoryA CopyFileA CreateSemaphoreW WritePrivateProfileStringA MoveFileA AddAtomW BeginUpdateResourceA PostQueuedCompletionStatus WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleHandleA FreeEnvironmentStringsW VirtualProtect OpenEventW GetShortPathNameW GetCPInfoExA GetVersionExA GetConsoleProcessList DebugBreak HeapSize InterlockedIncrement MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree RaiseException WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapReAlloc

user32

CharLowerBuffW

gdi32

GetBrushOrgEx GetCharWidthI

Sharing