setup[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 339KB
Sample230414-bb3tnafc48
SHA256 b9ad234abeb1490f2c2d28dd2387f0575ba5128ebb799741b1f3179622204175
MD5 5daf34c3c86969f1d9caa5876cb3a5e9
SHA1 6e8d662be02470d57d1007ffc8857779232c9d4d
SHA512 45119da070300d5009b5b910760ad1e72912e38e07148e53e6d8dd5270026344789f786b153e9d16f0d34f89032a6bc54643434465d8a2ea956ada28094fa5c1
SSDEEP 3072:y4j6wHa1Iz2xFchEb8+cxcl2XEaQQQLtsiwOV8osCNqe1F2CDQMQRkeVL8sLNt/5:0g/hEba6sluLtRJPse1E1RkeVYsv3y
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 339KB

setup.exe

IMPHASH de151605379a2e4c123d6083283ac636
SHA256 b9ad234abeb1490f2c2d28dd2387f0575ba5128ebb799741b1f3179622204175
MD5 5daf34c3c86969f1d9caa5876cb3a5e9
SHA1 6e8d662be02470d57d1007ffc8857779232c9d4d
SHA512 45119da070300d5009b5b910760ad1e72912e38e07148e53e6d8dd5270026344789f786b153e9d16f0d34f89032a6bc54643434465d8a2ea956ada28094fa5c1
SSDEEP 3072:y4j6wHa1Iz2xFchEb8+cxcl2XEaQQQLtsiwOV8osCNqe1F2CDQMQRkeVL8sLNt/5:0g/hEba6sluLtRJPse1E1RkeVYsv3y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18800

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW ConvertFiberToThread GetWindowsDirectoryA EnumTimeFormatsA EnumTimeFormatsW SetHandleCount GetFirmwareEnvironmentVariableA LoadLibraryW SetCommConfig GetFileAttributesW GetConsoleFontSize GetShortPathNameA EnumSystemLocalesA GetCPInfoExW GetLastError GetProcAddress AttachConsole BackupSeek WriteProfileSectionA RemoveDirectoryA GetNumaHighestNodeNumber InterlockedExchangeAdd LocalAlloc SetConsoleDisplayMode BeginUpdateResourceA PostQueuedCompletionStatus HeapWalk EnumResourceTypesW OpenEventW ScrollConsoleScreenBufferA GetCPInfoExA AddConsoleAliasA DebugBreak EnumCalendarInfoExA QueryPerformanceCounter ReadConsoleA VirtualAlloc FindFirstChangeNotificationW CreateFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection RaiseException Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle

gdi32

GetCharWidthA GetCharWidthI

advapi32

ClearEventLogA

ole32

CoGetPSClsid

winhttp

WinHttpCheckPlatform