setup[.]exe | Triage™

General

Target
setup.exe
Size 197KB
Sample230411-a87y7sbb31
SHA256 1caa6ce5ec2129481db6402f1b9449e084de97a97aec7dcff9843ea169b996bf
MD5 2e3d27072ae98534d90b5ea6ff4d7078
SHA1 a189ab7367a0279678dc967d763a88fd768a89e9
SHA512 644ce5038ce9e7dc754c6062775530fe719b9e991e700837a5d17336a400c7e723fff426fcd0b278a3f18280614a1bef5b913e538977e0a69d3cfd5658e4e217
SSDEEP 3072:7ee28anlk0YN7WbIFKwJFIzGZ1LBmbwmvTVeMPeZxWOwLW:P28cG7eqKwJxTLawmLVFPe0y
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 197KB

setup.exe

IMPHASH 407cedf3cd305e74ebcf3ed2bbc4e3b6
SHA256 1caa6ce5ec2129481db6402f1b9449e084de97a97aec7dcff9843ea169b996bf
MD5 2e3d27072ae98534d90b5ea6ff4d7078
SHA1 a189ab7367a0279678dc967d763a88fd768a89e9
SHA512 644ce5038ce9e7dc754c6062775530fe719b9e991e700837a5d17336a400c7e723fff426fcd0b278a3f18280614a1bef5b913e538977e0a69d3cfd5658e4e217
SSDEEP 3072:7ee28anlk0YN7WbIFKwJFIzGZ1LBmbwmvTVeMPeZxWOwLW:P28cG7eqKwJxTLawmLVFPe0y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18966

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetUserDefaultLCID InterlockedCompareExchange GetLogicalDrives GetSystemDefaultLCID BackupSeek GetModuleHandleW GetCommConfig VirtualFree ConvertFiberToThread GetConsoleTitleA ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsW EnumResourceTypesA LoadLibraryW GetConsoleWindow GetVersionExW GetFileAttributesW EnumSystemLocalesA InterlockedExchange GetProfileIntA GetCPInfoExW SetLastError GetProcAddress QueryPerformanceCounter HeapSize BeginUpdateResourceW RemoveDirectoryA LoadLibraryA LocalAlloc AddAtomW PostQueuedCompletionStatus WriteProfileSectionW FindNextChangeNotification EnumDateFormatsA HeapSetInformation FreeEnvironmentStringsW GetStringTypeW VirtualProtect OpenEventW ScrollConsoleScreenBufferA GetShortPathNameW GetVersionExA AddConsoleAliasA DebugBreak EnumCalendarInfoExA ScrollConsoleScreenBufferW VirtualAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA

user32

CharLowerBuffW

gdi32

GetBrushOrgEx GetCharWidthI

Sharing