setup[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 338KB
Sample230414-bcnfcsfc54
SHA256 c8b6d97c8058d1d7c1bbc543733d6d953d9f3a70fbf62801c7ffb76e981d72f1
MD5 00355abe549f9e78059a3fa00114d276
SHA1 618927127ba7a749e032dc7eb4b8ae966c661721
SHA512 41b51d01e0326c7debe8220590bb0cf3db41ee3b28a9f7c9351049c02a8217166c158c9ddf680dfa08ce89e7efe51a0d1e05973d8d43044fcb583f795283a4fa
SSDEEP 6144:AUmSVJ2TWrmowfMSpf06PCJUcZsbQ9kDqQ:PxJ26yRXJ0BbQ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 338KB

setup.exe

IMPHASH de151605379a2e4c123d6083283ac636
SHA256 c8b6d97c8058d1d7c1bbc543733d6d953d9f3a70fbf62801c7ffb76e981d72f1
MD5 00355abe549f9e78059a3fa00114d276
SHA1 618927127ba7a749e032dc7eb4b8ae966c661721
SHA512 41b51d01e0326c7debe8220590bb0cf3db41ee3b28a9f7c9351049c02a8217166c158c9ddf680dfa08ce89e7efe51a0d1e05973d8d43044fcb583f795283a4fa
SSDEEP 6144:AUmSVJ2TWrmowfMSpf06PCJUcZsbQ9kDqQ:PxJ26yRXJ0BbQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18800

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW ConvertFiberToThread GetWindowsDirectoryA EnumTimeFormatsA EnumTimeFormatsW SetHandleCount GetFirmwareEnvironmentVariableA LoadLibraryW SetCommConfig GetFileAttributesW GetConsoleFontSize GetShortPathNameA EnumSystemLocalesA GetCPInfoExW GetLastError GetProcAddress AttachConsole BackupSeek WriteProfileSectionA RemoveDirectoryA GetNumaHighestNodeNumber InterlockedExchangeAdd LocalAlloc SetConsoleDisplayMode BeginUpdateResourceA PostQueuedCompletionStatus HeapWalk EnumResourceTypesW OpenEventW ScrollConsoleScreenBufferA GetCPInfoExA AddConsoleAliasA DebugBreak EnumCalendarInfoExA QueryPerformanceCounter ReadConsoleA VirtualAlloc FindFirstChangeNotificationW CreateFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection RaiseException Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle

gdi32

GetCharWidthA GetCharWidthI

advapi32

ClearEventLogA

ole32

CoGetPSClsid

winhttp

WinHttpCheckPlatform