setup[.]exe | Triage™

General

Target
setup.exe
Size 298KB
Sample230420-axyamaec96
SHA256 411ae76fa21378768d5038fa423837cf9909e5f91fa15e04e9a1c4a364b5b3a7
MD5 df16d5e9904bbaff20a19abc2649cde9
SHA1 9a9b44f7ac4b5ec6a31faa61444e906ef47e8467
SHA512 67335a822f25e5f87c9ed03f3945dc92ee8cdf06326a60cfa9083b16c4ec9d8721731dcf145e281b02c7e4a252fb2e2bd9a785286164bade0b4c0d02c808dc9c
SSDEEP 6144:AiUlFQB0QCCJuve4fOQH+5abvsc74Rzxhl0asJg4/ve3:AFFBYx4fvKcEJa
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 298KB

setup.exe

IMPHASH fcefd95474e5b4dc39c6ed905cd56747
SHA256 411ae76fa21378768d5038fa423837cf9909e5f91fa15e04e9a1c4a364b5b3a7
MD5 df16d5e9904bbaff20a19abc2649cde9
SHA1 9a9b44f7ac4b5ec6a31faa61444e906ef47e8467
SHA512 67335a822f25e5f87c9ed03f3945dc92ee8cdf06326a60cfa9083b16c4ec9d8721731dcf145e281b02c7e4a252fb2e2bd9a785286164bade0b4c0d02c808dc9c
SSDEEP 6144:AiUlFQB0QCCJuve4fOQH+5abvsc74Rzxhl0asJg4/ve3:AFFBYx4fvKcEJa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18083

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnlockFile GetModuleHandleW EnumTimeFormatsA EnumTimeFormatsW EnumResourceTypesA SetHandleCount GlobalAlloc LoadLibraryW GetStringTypeExW GetFileAttributesA FindNextVolumeW EnumSystemLocalesA GetProfileIntA GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA CreateMemoryResourceNotification _hwrite ScrollConsoleScreenBufferW WriteConsoleA InterlockedExchangeAdd OpenEventA BeginUpdateResourceA WriteProfileSectionW WaitForMultipleObjects CreateMailslotA VirtualProtect OpenEventW GetCPInfoExA GetWindowsDirectoryW AddConsoleAliasA EnumCalendarInfoExA TlsFree RaiseException LoadLibraryA FindFirstChangeNotificationW MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapReAlloc GetModuleHandleA RtlUnwind HeapSize

user32

GetWindowLongA SetCaretPos RegisterClassA CharLowerBuffW

gdi32

GetCharWidthW GetCharABCWidthsI

Sharing