setup[.]exe | Triage™

General

Target
setup.exe
Size 350KB
Sample230417-aschcseb9s
SHA256 69c57aa90ca59ad02b39fc738b91ba9e858e63f4ff771f9f6aa6b3d540ca940f
MD5 53dd01e60f53e89a06d9859caa32fdc1
SHA1 506c29f0cad16f36b02fb859dd34545e56f5c14b
SHA512 ab710cc6852ca5a9356918dd36c65593210725aca27741e024e174a4674395f2da7c5ca6eb7052307e57bff7e835d0441fc41268e30f92901d893cc8cd08eb52
SSDEEP 6144:SRIhM6RMLvyzgsgnFcdOrCFoIl4B5+NErNa2:SRSM6M7yzgsgqd6Wl6SEh
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 350KB

setup.exe

IMPHASH eb82d918f96f2f58cf83ea5d1467cbf7
SHA256 69c57aa90ca59ad02b39fc738b91ba9e858e63f4ff771f9f6aa6b3d540ca940f
MD5 53dd01e60f53e89a06d9859caa32fdc1
SHA1 506c29f0cad16f36b02fb859dd34545e56f5c14b
SHA512 ab710cc6852ca5a9356918dd36c65593210725aca27741e024e174a4674395f2da7c5ca6eb7052307e57bff7e835d0441fc41268e30f92901d893cc8cd08eb52
SSDEEP 6144:SRIhM6RMLvyzgsgnFcdOrCFoIl4B5+NErNa2:SRSM6M7yzgsgqd6Wl6SEh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42488

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA SetUnhandledExceptionFilter InterlockedIncrement EnumCalendarInfoW GetEnvironmentStringsW SetComputerNameW GetComputerNameW BackupSeek FreeEnvironmentStringsA GetModuleHandleW GetTickCount EnumResourceTypesA GetDriveTypeA GetSystemDirectoryW WideCharToMultiByte LoadLibraryW SetConsoleCP GetComputerNameExA SetConsoleMode GetConsoleAliasW GetFileAttributesW HeapQueryInformation GetVolumePathNameA FindNextVolumeMountPointW GetStringTypeExA GetNumaProcessorNode EnumSystemLocalesA OpenMutexW InterlockedFlushSList SetLastError GetProcAddress BeginUpdateResourceW RemoveDirectoryA PrepareTape GetPrivateProfileStringA LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler PostQueuedCompletionStatus GetModuleFileNameA Process32NextW FindNextFileA FindFirstVolumeMountPointA CreateMutexA RequestWakeupLatency GetVersionExA FindAtomW GetFileInformationByHandle GetConsoleProcessList DeleteFileA CloseHandle WriteConsoleW GetNamedPipeHandleStateW DebugActiveProcess InterlockedDecrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate HeapDestroy SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW SetConsoleCtrlHandler SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers FreeLibrary CreateFileW

user32

GetMenu

advapi32

ReportEventA

Sharing