setup[.]exe | Triage™

General

Target
setup.exe
Size 424KB
Sample230419-bms4lafd65
SHA256 000927343397bd9ae9b8520a13d1915cf029e7bb5b2217bf42d7240dddbbb203
MD5 216277e82f9eefaa3f01f6e941d86edf
SHA1 3667fd08ac1afbf3fefda60315fb9b6c4bbc9c25
SHA512 095ca03f0c5e156e1c640ed505c35cdd581da7c51c8825950c6f152ad0760e83e670ae184af979a1bca947711cb08d30d39e15f289d6de109670e0f1e7ed8354
SSDEEP 6144:oE+7+CiPfzR4uJmYIN3jNjH5OFXUi9vafi6xs2A8W69shIv:oE5jjR4uJ1INTNj5YXVQf/N9sSv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 424KB

setup.exe

IMPHASH 6476d6750bfcde9cc0b44dbe56d72cb5
SHA256 000927343397bd9ae9b8520a13d1915cf029e7bb5b2217bf42d7240dddbbb203
MD5 216277e82f9eefaa3f01f6e941d86edf
SHA1 3667fd08ac1afbf3fefda60315fb9b6c4bbc9c25
SHA512 095ca03f0c5e156e1c640ed505c35cdd581da7c51c8825950c6f152ad0760e83e670ae184af979a1bca947711cb08d30d39e15f289d6de109670e0f1e7ed8354
SSDEEP 6144:oE+7+CiPfzR4uJmYIN3jNjH5OFXUi9vafi6xs2A8W69shIv:oE5jjR4uJ1INTNj5YXVQf/N9sSv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43733

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

BuildCommDCBAndTimeoutsA SetUnhandledExceptionFilter EnumCalendarInfoW GetConsoleAliasA InterlockedDecrement GetNamedPipeHandleStateA GetEnvironmentStringsW SetComputerNameW GetComputerNameW GetProcessPriorityBoost GetModuleHandleW GetTickCount GetPrivateProfileStringW GetDriveTypeA GetVolumePathNameW LoadLibraryW SetConsoleCP GetFileAttributesA SetConsoleMode GetFileAttributesW GetModuleFileNameW FindNextVolumeMountPointW GetStringTypeExA EnumSystemLocalesA GetConsoleAliasExesLengthA InterlockedFlushSList GetProcAddress GetComputerNameExW RemoveDirectoryA PrepareTape LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler FindFirstVolumeMountPointW BeginUpdateResourceA PostQueuedCompletionStatus EnumResourceTypesW Process32NextW FindNextFileA FreeEnvironmentStringsW WaitForDebugEvent GetVersionExA FindAtomW DeleteFileW GetFileInformationByHandle GetConsoleProcessList CloseHandle CreateFileW OpenMutexW CreateMutexW InterlockedIncrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType HeapSize GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW SetConsoleCtrlHandler GetConsoleCP GetConsoleMode FreeLibrary SetStdHandle FlushFileBuffers WriteConsoleW DeleteFileA

user32

GetMenu

advapi32

ReportEventW

Sharing