setup[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 386KB
Sample230414-bnx4yagg7v
SHA256 1c4fff759380974bfefb163c13bd2c7c68e96076fe1e703c9e6ee167ea74297b
MD5 e01c861036570dc5670d8c819212aeca
SHA1 7c7f0cf452892d2bc0091132a9c93ab636975a41
SHA512 db54f390bb6dac7fd49cb1297b74c689a608a43ab98425e0e6346b8f9cc668f33af81ccc6a35b13fddcceaf04d0ddc19ad4d67f9591e48dafe82f2555807ecf0
SSDEEP 6144:sEzUVCsLA003xlWwt5uj5qFacrqBkNqPZ:jp0exlWiUcrs
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 386KB

setup.exe

IMPHASH de151605379a2e4c123d6083283ac636
SHA256 1c4fff759380974bfefb163c13bd2c7c68e96076fe1e703c9e6ee167ea74297b
MD5 e01c861036570dc5670d8c819212aeca
SHA1 7c7f0cf452892d2bc0091132a9c93ab636975a41
SHA512 db54f390bb6dac7fd49cb1297b74c689a608a43ab98425e0e6346b8f9cc668f33af81ccc6a35b13fddcceaf04d0ddc19ad4d67f9591e48dafe82f2555807ecf0
SSDEEP 6144:sEzUVCsLA003xlWwt5uj5qFacrqBkNqPZ:jp0exlWiUcrs
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18800

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW ConvertFiberToThread GetWindowsDirectoryA EnumTimeFormatsA EnumTimeFormatsW SetHandleCount GetFirmwareEnvironmentVariableA LoadLibraryW SetCommConfig GetFileAttributesW GetConsoleFontSize GetShortPathNameA EnumSystemLocalesA GetCPInfoExW GetLastError GetProcAddress AttachConsole BackupSeek WriteProfileSectionA RemoveDirectoryA GetNumaHighestNodeNumber InterlockedExchangeAdd LocalAlloc SetConsoleDisplayMode BeginUpdateResourceA PostQueuedCompletionStatus HeapWalk EnumResourceTypesW OpenEventW ScrollConsoleScreenBufferA GetCPInfoExA AddConsoleAliasA DebugBreak EnumCalendarInfoExA QueryPerformanceCounter ReadConsoleA VirtualAlloc FindFirstChangeNotificationW CreateFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection RaiseException Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle

gdi32

GetCharWidthA GetCharWidthI

advapi32

ClearEventLogA

ole32

CoGetPSClsid

winhttp

WinHttpCheckPlatform