setup[.]exe | Triage™

General

Target
setup.exe
Size 213KB
Sample230412-axcc6agd47
SHA256 954a2b32a088ec729d059b519adadbd5520a348cd99cb4b2952c814be0aa698a
MD5 ff2a63d9c945c595362135736c9fd41b
SHA1 b6208a6a797ab177b2c91d911591501016700310
SHA512 6c5219631bec0e428f908b62dd10606bfbb3543e3b4bde8055194f695da919fc4f81f07cd3131d3ea082ba3f5709d5f86f78f9f86f97e9bb0bbca3faff1d2492
SSDEEP 3072:mZPW+cOjsAmmb181JCzc90qSph8IZcUfgmAqdp+O615Nc6JD:6u+cYmmbe1IAOqSpvtTzp+J1c65
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 213KB

setup.exe

IMPHASH b1fdc126cbffd1158f4f7e2df2177ca3
SHA256 954a2b32a088ec729d059b519adadbd5520a348cd99cb4b2952c814be0aa698a
MD5 ff2a63d9c945c595362135736c9fd41b
SHA1 b6208a6a797ab177b2c91d911591501016700310
SHA512 6c5219631bec0e428f908b62dd10606bfbb3543e3b4bde8055194f695da919fc4f81f07cd3131d3ea082ba3f5709d5f86f78f9f86f97e9bb0bbca3faff1d2492
SSDEEP 3072:mZPW+cOjsAmmb181JCzc90qSph8IZcUfgmAqdp+O615Nc6JD:6u+cYmmbe1IAOqSpvtTzp+J1c65
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20308

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

QueryPerformanceCounter AddConsoleAliasW FindCloseChangeNotification BackupSeek FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW VirtualFree ConvertFiberToThread ReadConsoleW EnumTimeFormatsA EnumResourceTypesA SetHandleCount LoadLibraryW SetCommConfig GetConsoleWindow GetVersionExW GetFileAttributesW EnumSystemLocalesA InterlockedExchange GetProfileIntA SetThreadLocale GetCPInfoExW InterlockedDecrement GetLastError GetProcAddress VirtualAlloc HeapSize BeginUpdateResourceW LoadLibraryA LocalAlloc OpenEventA RemoveDirectoryW PostQueuedCompletionStatus WriteProfileSectionW FoldStringA EnumDateFormatsA GetModuleHandleA HeapSetInformation GetConsoleTitleW VirtualProtect ScrollConsoleScreenBufferA GetShortPathNameW GetWindowsDirectoryW DebugBreak FillConsoleOutputCharacterW GetSystemDefaultUILanguage Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection RtlUnwind GetStdHandle GetFileType DeleteCriticalSection RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc CloseHandle CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle SetFilePointer SetEndOfFile GetProcessHeap MultiByteToWideChar ReadFile LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidthA GetCharWidthI

Sharing