setup[.]exe | Triage™

General

Target
setup.exe
Size 424KB
Sample230419-blm6ysfd62
SHA256 3da7899a97dcce17b1625b2193f870f8f568b39fe520adbde6f61f7e63f5c0ae
MD5 d8bca64c81e628b416c5e99e57561664
SHA1 a8c69936126344413837595f8d71d861cce221a6
SHA512 8b0d9a5faad5dd08441ed81b7c908b0fef82eea205a93c3ca41d2bc2cbd7eef19dc04e788005e6dec491e2050209fd9d3295523ae12efc5507889f26a2177147
SSDEEP 6144:uJw69lf7YLckt0tIetvwF6LiqpSPO/2t1imYEBLePwKT2fqxwkIv:uJnlDY1t8Ie9a6FpSBd5eIKHWfv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 424KB

setup.exe

IMPHASH 4e8f8ce21e6073433b2cbeca299d21ee
SHA256 3da7899a97dcce17b1625b2193f870f8f568b39fe520adbde6f61f7e63f5c0ae
MD5 d8bca64c81e628b416c5e99e57561664
SHA1 a8c69936126344413837595f8d71d861cce221a6
SHA512 8b0d9a5faad5dd08441ed81b7c908b0fef82eea205a93c3ca41d2bc2cbd7eef19dc04e788005e6dec491e2050209fd9d3295523ae12efc5507889f26a2177147
SSDEEP 6144:uJw69lf7YLckt0tIetvwF6LiqpSPO/2t1imYEBLePwKT2fqxwkIv:uJnlDY1t8Ie9a6FpSBd5eIKHWfv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44025

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetUnhandledExceptionFilter EnumCalendarInfoW GetConsoleAliasA InterlockedDecrement GetNamedPipeHandleStateA GetEnvironmentStringsW SetComputerNameW GetProcessPriorityBoost GetModuleHandleW GetTickCount GetPrivateProfileStringW GetDriveTypeA GetVolumePathNameW LoadLibraryW IsProcessInJob SetConsoleCP GetFileAttributesA SetConsoleMode GetFileAttributesW GetModuleFileNameW FindNextVolumeMountPointW GetStringTypeExA EnumSystemLocalesA OpenMutexW GetConsoleAliasExesLengthA GetProcAddress GetComputerNameExW RemoveDirectoryA PrepareTape Process32FirstW LocalAlloc SetCalendarInfoW BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW BeginUpdateResourceA PostQueuedCompletionStatus FindAtomA EnumResourceTypesW FindNextFileA GetModuleHandleA FreeEnvironmentStringsW WaitForDebugEvent GetVersionExA DeleteFileW GetFileInformationByHandle GetConsoleProcessList CloseHandle CreateFileW InterlockedFlushSList CreateMutexW InterlockedIncrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread GetACP GetOEMCP IsValidCodePage GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW SetConsoleCtrlHandler GetConsoleCP GetConsoleMode FreeLibrary SetStdHandle FlushFileBuffers WriteConsoleW DeleteFileA

user32

GetMenu

advapi32

ReportEventW

Sharing