setup[.]exe | Triage™

General

Target
setup.exe
Size 423KB
Sample230419-bl84esfd63
SHA256 3d7566812366cea0ea926397e36f469b1b8ff5abd26fa0841dbecfbc7691530e
MD5 e29bff52843372f6c9687b62c72bd929
SHA1 6f5aaf919f32db47977ae5fbd1b1eb60e679770a
SHA512 003aa38ca1261c8a6e83305dbe510bcb1aa4b4f31b1b559f6357f20bdcf75cfce83c3055888cf177befd642e17eac54a5b95c9e15c7232253c9d883a5edac018
SSDEEP 6144:Hrwq1lCWWccnucf6JlN7/XZ3e/2ZI+obAzTIH0tnB+bi0y9Iv:HrflzWtu66JDrZq+okzTsYnBq5yuv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 423KB

setup.exe

IMPHASH 4e8f8ce21e6073433b2cbeca299d21ee
SHA256 3d7566812366cea0ea926397e36f469b1b8ff5abd26fa0841dbecfbc7691530e
MD5 e29bff52843372f6c9687b62c72bd929
SHA1 6f5aaf919f32db47977ae5fbd1b1eb60e679770a
SHA512 003aa38ca1261c8a6e83305dbe510bcb1aa4b4f31b1b559f6357f20bdcf75cfce83c3055888cf177befd642e17eac54a5b95c9e15c7232253c9d883a5edac018
SSDEEP 6144:Hrwq1lCWWccnucf6JlN7/XZ3e/2ZI+obAzTIH0tnB+bi0y9Iv:HrflzWtu66JDrZq+okzTsYnBq5yuv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44025

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetUnhandledExceptionFilter EnumCalendarInfoW GetConsoleAliasA InterlockedDecrement GetNamedPipeHandleStateA GetEnvironmentStringsW SetComputerNameW GetProcessPriorityBoost GetModuleHandleW GetTickCount GetPrivateProfileStringW GetDriveTypeA GetVolumePathNameW LoadLibraryW IsProcessInJob SetConsoleCP GetFileAttributesA SetConsoleMode GetFileAttributesW GetModuleFileNameW FindNextVolumeMountPointW GetStringTypeExA EnumSystemLocalesA OpenMutexW GetConsoleAliasExesLengthA GetProcAddress GetComputerNameExW RemoveDirectoryA PrepareTape Process32FirstW LocalAlloc SetCalendarInfoW BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW BeginUpdateResourceA PostQueuedCompletionStatus FindAtomA EnumResourceTypesW FindNextFileA GetModuleHandleA FreeEnvironmentStringsW WaitForDebugEvent GetVersionExA DeleteFileW GetFileInformationByHandle GetConsoleProcessList CloseHandle CreateFileW InterlockedFlushSList CreateMutexW InterlockedIncrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread GetACP GetOEMCP IsValidCodePage GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW SetConsoleCtrlHandler GetConsoleCP GetConsoleMode FreeLibrary SetStdHandle FlushFileBuffers WriteConsoleW DeleteFileA

user32

GetMenu

advapi32

ReportEventW

Sharing