setup[.]exe | Triage™

General

Target
setup.exe
Size 226KB
Sample230422-bdtc1abd39
SHA256 cf0c8fb5107e1050a82bceac1996d5e5e8ccbac9026996bbbb463b15075b61f0
MD5 fdf52f22136ba739df08c52c94d81f1c
SHA1 30c613fd4b59b6dd3df93eba626fb492ad286ae1
SHA512 e222a42f5c22b8191cfeb9f87363b084e3480873780fcf55f26a21cd097820edc9c784b40d34aca6536dc5df88e4b8bf5ef3078aeadfb4e9654cd5e2f9435b17
SSDEEP 3072:faN+y8bdCBl/sGa+OiA82t5vg2JUNXV45H/hELJF:yN+fdiPr5Al/g2JGo/hC
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 226KB

setup.exe

IMPHASH 8cb869f42d9744fa3286b04b1d083ca7
SHA256 cf0c8fb5107e1050a82bceac1996d5e5e8ccbac9026996bbbb463b15075b61f0
MD5 fdf52f22136ba739df08c52c94d81f1c
SHA1 30c613fd4b59b6dd3df93eba626fb492ad286ae1
SHA512 e222a42f5c22b8191cfeb9f87363b084e3480873780fcf55f26a21cd097820edc9c784b40d34aca6536dc5df88e4b8bf5ef3078aeadfb4e9654cd5e2f9435b17
SSDEEP 3072:faN+y8bdCBl/sGa+OiA82t5vg2JUNXV45H/hELJF:yN+fdiPr5Al/g2JGo/hC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18413

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddConsoleAliasW FindCloseChangeNotification UnlockFile GetLogicalDrives GetModuleHandleW GetConsoleTitleA GetWindowsDirectoryA EnumTimeFormatsA GetDateFormatA EnumTimeFormatsW EnumResourceTypesA TlsSetValue FindResourceExA GlobalAlloc LoadLibraryW SetCommConfig GetCalendarInfoW GetStringTypeExW FindNextVolumeW GetFileAttributesW EnumSystemLocalesA GlobalUnfix GetProfileIntA SetThreadLocale ScrollConsoleScreenBufferW GetConsoleAliasesLengthW VirtualAlloc HeapSize BeginUpdateResourceW WriteProfileSectionA CreateMemoryResourceNotification SetThreadPriorityBoost LoadLibraryA WriteConsoleA InterlockedExchangeAdd WaitForMultipleObjects CreateMailslotA VirtualProtect OpenEventW GetCPInfoExA GetWindowsDirectoryW AddConsoleAliasA DebugBreak EnumCalendarInfoExA RtlUnwind SetMailslotInfo SetLastError VerSetConditionMask CreateFileA GetProcAddress MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowLongW RegisterClassW SetCaretPos CharLowerBuffW

gdi32

GetCharWidthW SetColorAdjustment GetCharABCWidthsI

advapi32

LogonUserA

Sharing