setup[.]exe | Triage™

General

Target
setup.exe
Size 473KB
Sample230417-aql9saeb71
SHA256 76a4ed024ae4064f850fb46eee2f83e8edd8da2dc0aa45ee023b13e43d12d5be
MD5 9dd2a0faa58bb8822dd860f3fce31f5a
SHA1 459a2b184cbd02ddceb6bd1b79025de014255a19
SHA512 72bb7cd6632218d0863ff4ae1e2794a4eeb41925533b392cc937f40eed6acec04791ba8181b2c8a89737fee341c947b26c7ba52553ca269c6e3d0a2334077d3d
SSDEEP 12288:+nVMGdihlfOkI3lsu/WjxJ9kgeBf0mk1q:+VMNbOZDOlqB
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 473KB

setup.exe

IMPHASH e08247a88d4f18f2ba3b665b08e638a7
SHA256 76a4ed024ae4064f850fb46eee2f83e8edd8da2dc0aa45ee023b13e43d12d5be
MD5 9dd2a0faa58bb8822dd860f3fce31f5a
SHA1 459a2b184cbd02ddceb6bd1b79025de014255a19
SHA512 72bb7cd6632218d0863ff4ae1e2794a4eeb41925533b392cc937f40eed6acec04791ba8181b2c8a89737fee341c947b26c7ba52553ca269c6e3d0a2334077d3d
SSDEEP 12288:+nVMGdihlfOkI3lsu/WjxJ9kgeBf0mk1q:+VMNbOZDOlqB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42408

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA SetUnhandledExceptionFilter InterlockedIncrement EnumCalendarInfoW GetEnvironmentStringsW SetComputerNameW FreeEnvironmentStringsA GetModuleHandleW GetTickCount EnumResourceTypesA GetDriveTypeA WideCharToMultiByte LoadLibraryW SetConsoleCP GetComputerNameExA SetConsoleMode GetConsoleAliasW GetFileAttributesW HeapQueryInformation GetVolumePathNameA FindNextVolumeMountPointW GetStringTypeExA GetNamedPipeHandleStateW EnumSystemLocalesA GetNumaProcessorNode InterlockedFlushSList SetLastError GetProcAddress BeginUpdateResourceW RemoveDirectoryA PrepareTape GetPrivateProfileStringA LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler GetModuleFileNameA Process32NextW FindNextFileA FindFirstVolumeMountPointA GetModuleHandleA CreateMutexA RequestWakeupLatency GetVersionExA FindAtomW GetCurrentProcessId GetFileInformationByHandle GetConsoleProcessList DeleteFileA CloseHandle WriteConsoleW OpenMutexW DebugActiveProcess InterlockedDecrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate HeapDestroy SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread QueryPerformanceCounter GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW SetConsoleCtrlHandler SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers FreeLibrary CreateFileW

user32

GetMenu

advapi32

ReportEventA

Sharing