setup[.]exe | Triage™

General

Target
setup.exe
Size 373KB
Sample230410-bbhhqaeb63
SHA256 008a8ec151cc1eb318e153ca506efc96641fce3173790c47bf2203d27df40eed
MD5 cf59c06eb34e2c3245a2aaab823f3101
SHA1 7c3345bd500be2bb0428728331f8d341df74b9eb
SHA512 da19df63e87be4020c651b526e15f892c216bfc12e0e20544289c3184d6ca7536a1c197b75f72e978e714e9c87d4242586e9df6cda8186fb362ba92ee7946d45
SSDEEP 6144:9wi2Kh6TzMZ7am2scFM2/BKTUCOsX4mDDsS:9wixh6TzMZ7aZsyD/BKTUVsX4I
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 373KB

setup.exe

IMPHASH 19f87512189bc3d11ceffc7f82e766f2
SHA256 008a8ec151cc1eb318e153ca506efc96641fce3173790c47bf2203d27df40eed
MD5 cf59c06eb34e2c3245a2aaab823f3101
SHA1 7c3345bd500be2bb0428728331f8d341df74b9eb
SHA512 da19df63e87be4020c651b526e15f892c216bfc12e0e20544289c3184d6ca7536a1c197b75f72e978e714e9c87d4242586e9df6cda8186fb362ba92ee7946d45
SSDEEP 6144:9wi2Kh6TzMZ7am2scFM2/BKTUCOsX4mDDsS:9wixh6TzMZ7aZsyD/BKTUVsX4I
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18408

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA GetDriveTypeW BuildCommDCBAndTimeoutsA SetUnhandledExceptionFilter GetConsoleAliasA WaitNamedPipeA GetNamedPipeHandleStateA GetModuleHandleExW GetUserDefaultLCID InterlockedCompareExchange WriteConsoleInputA SetEvent FreeEnvironmentStringsA SetTapeParameters GetModuleHandleW CreateRemoteThread GetDateFormatA AllocateUserPhysicalPages GetEnvironmentStrings GlobalAlloc GetConsoleMode GetVersionExW GetFileAttributesA FindNextVolumeW GetBinaryTypeA GetModuleFileNameW lstrcmpW MultiByteToWideChar FindNextVolumeMountPointW EnumCalendarInfoA GetLastError BackupRead GetProcAddress GetComputerNameExW RemoveDirectoryA GlobalGetAtomNameA LoadLibraryA OpenMutexA DnsHostnameToComputerNameA GetCommMask RtlCaptureStackBackTrace GetPrivateProfileStructA GlobalFindAtomW EnumResourceTypesW FindNextFileA GetModuleHandleA EraseTape CreateMutexA CreateMailslotA RequestWakeupLatency ScrollConsoleScreenBufferA SetCalendarInfoA GetDiskFreeSpaceExA DeleteFileW GetFileInformationByHandle FindActCtxSectionStringW EnumSystemLocalesW CreateFileW IsProcessorFeaturePresent GetConsoleOutputCP GetVolumeNameForVolumeMountPointA WriteConsoleW HeapSize DeleteFileA HeapReAlloc ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread HeapCreate HeapDestroy HeapFree HeapAlloc FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryW GetLocaleInfoW WriteFile GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP Sleep SetStdHandle FlushFileBuffers RtlUnwind LCMapStringW GetStringTypeW GetLocaleInfoA EnumSystemLocalesA IsValidLocale CloseHandle

user32

GetMenu

advapi32

ReportEventA

winhttp

WinHttpSetOption

Sharing