setup[.]exe | Triage™

General

Target
setup.exe
Size 325KB
Sample230425-ay3lqsfe45
SHA256 e44d62bd95c876a7624c2ff900348de8ca1ff4199837c4e8897f99ec70c6245b
MD5 9d8faab99a9ee30174716e4f5404cb83
SHA1 80cf49d631e5864ab6e0f533e00685e395815703
SHA512 8d81b0b7d1baeb8081533cc1494b2cbfd2549f2e1ae6f75c9c2bac18e8ce958b539bd51f867a126ae1867958556ba7c23354b1c494399c3e00f4d1d360d125b2
SSDEEP 3072:mbFpETCSzqoyXFVirO0RwK+CNl+Sc4dcd+apzoLou8up3UZQTD3QMwF5mossZZ6U:4bQeFEa0RxZ1u8cu8fZADp2gbypG
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

setup.exe

.exe 325KB

setup.exe

IMPHASH 7b4896352eacf26f78ef6e8da79677ff
SHA256 e44d62bd95c876a7624c2ff900348de8ca1ff4199837c4e8897f99ec70c6245b
MD5 9d8faab99a9ee30174716e4f5404cb83
SHA1 80cf49d631e5864ab6e0f533e00685e395815703
SHA512 8d81b0b7d1baeb8081533cc1494b2cbfd2549f2e1ae6f75c9c2bac18e8ce958b539bd51f867a126ae1867958556ba7c23354b1c494399c3e00f4d1d360d125b2
SSDEEP 3072:mbFpETCSzqoyXFVirO0RwK+CNl+Sc4dcd+apzoLou8up3UZQTD3QMwF5mossZZ6U:4bQeFEa0RxZ1u8cu8fZADp2gbypG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42611

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalFix CreateMutexW EnumCalendarInfoA GetConsoleAliasesLengthW RtlCaptureContext GetDriveTypeW GlobalCompact InterlockedIncrement EnumCalendarInfoW GetCommState ZombifyActCtx QueryDosDeviceA GetNamedPipeHandleStateA GetEnvironmentStringsW WaitForSingleObject SetComputerNameW GetModuleHandleW GetTickCount GetConsoleTitleA EnumResourceTypesA GetDriveTypeA GetProcessTimes GetVolumePathNameW GetConsoleCP GlobalAlloc SetFileShortNameW LoadLibraryW GetConsoleWindow GetConsoleAliasExesLengthW GetStringTypeExW GetFileAttributesA GetConsoleAliasW GetFileAttributesW GetBinaryTypeW GetOverlappedResult FindNextVolumeMountPointW SetTapePosition EnumSystemLocalesA GetPrivateProfileIntW GetLastError GetProcAddress CreateJobSet RemoveDirectoryA UnhandledExceptionFilter LocalAlloc BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW BeginUpdateResourceA SetThreadIdealProcessor FindAtomA GetPrivateProfileStructA FoldStringA GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW GetShortPathNameW GetCPInfoExA SetCalendarInfoA SetThreadAffinityMask TerminateJobObject QueryDepthSList MoveFileWithProgressW DebugBreak InterlockedPushEntrySList EnumSystemLocalesW DeleteFileA SetFilePointer CreateFileW WriteConsoleW FlushFileBuffers GetConsoleMode WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetConsoleCtrlHandler FreeLibrary SetStdHandle

user32

DefDlgProcA GetMenuBarInfo

shell32

DuplicateIcon

Sharing