setup[.]exe | Triage™

General

Target
setup.exe
Size 471KB
Sample230413-a2w85ahf7x
SHA256 0bddc13a8f3e8f2512f5e24fdaecc048d9a76c29ba85137deb70fb0c15da3fb0
MD5 7f6b90384779636088615db99d40dcfb
SHA1 603f55fcb45a006b8d958ddd0fb47e78ea1c3be5
SHA512 1f58b5b2c3efbfbe4766a7bb466066c1f282d3200a2b67fe0c61f81eda0945b97fe8a396ea25c013128aaec2afa1d309afa22044d19cc884b518c21f3b672714
SSDEEP 12288:UF8D4xEvVd75vwJx3FrRIDa0/YXuuWO11:UiD7dl6xbXuuWu
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 471KB

setup.exe

IMPHASH 65e26f7361921acdd644477d2064c736
SHA256 0bddc13a8f3e8f2512f5e24fdaecc048d9a76c29ba85137deb70fb0c15da3fb0
MD5 7f6b90384779636088615db99d40dcfb
SHA1 603f55fcb45a006b8d958ddd0fb47e78ea1c3be5
SHA512 1f58b5b2c3efbfbe4766a7bb466066c1f282d3200a2b67fe0c61f81eda0945b97fe8a396ea25c013128aaec2afa1d309afa22044d19cc884b518c21f3b672714
SSDEEP 12288:UF8D4xEvVd75vwJx3FrRIDa0/YXuuWO11:UiD7dl6xbXuuWu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43597

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA SetUnhandledExceptionFilter EnumCalendarInfoW GetConsoleAliasA GetCurrentProcess GetNamedPipeHandleStateA GetModuleHandleExW GetUserDefaultLCID InterlockedCompareExchange WriteConsoleInputA SetEvent FreeEnvironmentStringsA GetModuleHandleW CreateRemoteThread WaitNamedPipeW AllocateUserPhysicalPages GetEnvironmentStrings GlobalAlloc WideCharToMultiByte GlobalFindAtomA GetConsoleMode GetVersionExW GetFileAttributesA DnsHostnameToComputerNameW GetComputerNameExA FindNextVolumeW GetModuleFileNameW lstrcmpW GetDriveTypeW FindNextVolumeMountPointW GetConsoleOutputCP GetLastError BackupRead GetProcAddress GlobalGetAtomNameA PrepareTape LoadLibraryA OpenMutexA SetCalendarInfoW RemoveDirectoryW SetCommMask RtlCaptureStackBackTrace GetPrivateProfileStructA GetTapeParameters EnumResourceTypesW FindNextFileA SetConsoleCursorInfo GetModuleHandleA CreateMutexA CreateMailslotA RequestWakeupLatency GetDiskFreeSpaceExA DeleteFileW GetFileInformationByHandle FindActCtxSectionStringW EnumSystemLocalesW CreateFileW WriteConsoleW GetVolumePathNameA GetStringTypeA FlushFileBuffers SetStdHandle InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc DeleteFileA HeapReAlloc ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind LCMapStringW MultiByteToWideChar GetCPInfo UnhandledExceptionFilter IsDebuggerPresent TerminateProcess IsProcessorFeaturePresent HeapCreate HeapDestroy WriteFile GetStdHandle SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread FatalAppExitA SetConsoleCtrlHandler FreeLibrary LoadLibraryW GetLocaleInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW GetConsoleCP CloseHandle

user32

GetMenu

advapi32

ReportEventW

winhttp

WinHttpSetOption

Sharing