setup[.]exe | Triage™

General

Target
setup.exe
Size 472KB
Sample230417-amr1vsce53
SHA256 585ecea5cbd604932ea18eb6e089c11bf542b6bdcbc1183d134b7937c3908063
MD5 86c4ac82564828ab77c4c10c99a9aca9
SHA1 187a3ed09d4c1b98055a3f775da407de55b35abb
SHA512 950d95a508977a2eb9dca58dea8011bf9ae35d6dd1f851af4fac123eeb899872ebfc1d44e39db238008e15515adb4dc25309f7c5711a61af5e6ab1471190667f
SSDEEP 12288:t9Vq4MqlVeZJsckDsjxWtYab6BmfFpWK:trqzsUsDsjxWtbL9
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 472KB

setup.exe

IMPHASH eb82d918f96f2f58cf83ea5d1467cbf7
SHA256 585ecea5cbd604932ea18eb6e089c11bf542b6bdcbc1183d134b7937c3908063
MD5 86c4ac82564828ab77c4c10c99a9aca9
SHA1 187a3ed09d4c1b98055a3f775da407de55b35abb
SHA512 950d95a508977a2eb9dca58dea8011bf9ae35d6dd1f851af4fac123eeb899872ebfc1d44e39db238008e15515adb4dc25309f7c5711a61af5e6ab1471190667f
SSDEEP 12288:t9Vq4MqlVeZJsckDsjxWtYab6BmfFpWK:trqzsUsDsjxWtbL9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42488

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA SetUnhandledExceptionFilter InterlockedIncrement EnumCalendarInfoW GetEnvironmentStringsW SetComputerNameW GetComputerNameW BackupSeek FreeEnvironmentStringsA GetModuleHandleW GetTickCount EnumResourceTypesA GetDriveTypeA GetSystemDirectoryW WideCharToMultiByte LoadLibraryW SetConsoleCP GetComputerNameExA SetConsoleMode GetConsoleAliasW GetFileAttributesW HeapQueryInformation GetVolumePathNameA FindNextVolumeMountPointW GetStringTypeExA GetNumaProcessorNode EnumSystemLocalesA OpenMutexW InterlockedFlushSList SetLastError GetProcAddress BeginUpdateResourceW RemoveDirectoryA PrepareTape GetPrivateProfileStringA LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler PostQueuedCompletionStatus GetModuleFileNameA Process32NextW FindNextFileA FindFirstVolumeMountPointA CreateMutexA RequestWakeupLatency GetVersionExA FindAtomW GetFileInformationByHandle GetConsoleProcessList DeleteFileA CloseHandle WriteConsoleW GetNamedPipeHandleStateW DebugActiveProcess InterlockedDecrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate HeapDestroy SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW SetConsoleCtrlHandler SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers FreeLibrary CreateFileW

user32

GetMenu

advapi32

ReportEventA

Sharing