setup[.]exe | Triage™

General

Target
setup.exe
Size 215KB
Sample230426-ajbjpsfg5v
SHA256 c3c492f7cbdeca7fbacbd36e95927c0aa80795691fa7bd95775a7efd5353ceb4
MD5 675b8af53a9ad5da6b1cfdc75f82fe5a
SHA1 a97812594ce18c074c6a66a9c1e5877c4124af9b
SHA512 0e59f3a7a293b7c30c2814ea3bb21386c29635de6e5958fc5476fef9e4389988380dd6fc69c5d3bd85e9f486e954bd63335f0ad9eb24a9264d058237437692e6
SSDEEP 3072:i0oWoEao69GdIE20qzgyNqNQmjZaTsk6YcayEvBCJXR95y6E:ZoBGc0q8y2YTskiEw6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setup.exe

File Explorer

setup.exe

.exe 215KB

setup.exe

IMPHASH 26aba4ad52753514f8ddcd5d0906ca12
SHA256 c3c492f7cbdeca7fbacbd36e95927c0aa80795691fa7bd95775a7efd5353ceb4
MD5 675b8af53a9ad5da6b1cfdc75f82fe5a
SHA1 a97812594ce18c074c6a66a9c1e5877c4124af9b
SHA512 0e59f3a7a293b7c30c2814ea3bb21386c29635de6e5958fc5476fef9e4389988380dd6fc69c5d3bd85e9f486e954bd63335f0ad9eb24a9264d058237437692e6
SSDEEP 3072:i0oWoEao69GdIE20qzgyNqNQmjZaTsk6YcayEvBCJXR95y6E:ZoBGc0q8y2YTskiEw6
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19823

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA FindResourceExW SystemTimeToFileTime ReadConsoleA ScrollConsoleScreenBufferW SetHandleInformation WaitForSingleObject BackupSeek GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetWindowsDirectoryA EnumTimeFormatsW TzSpecificLocalTimeToSystemTime SetProcessPriorityBoost FindResourceExA GlobalAlloc GetCalendarInfoA IsBadCodePtr GetConsoleAliasW GlobalUnlock GetLastError SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW WriteProfileSectionA lstrlenA SetThreadPriorityBoost LoadLibraryA WriteConsoleA InterlockedExchangeAdd WritePrivateProfileStringA GetNumberFormatW RemoveDirectoryW GetDiskFreeSpaceA AddAtomA EnumResourceTypesW GetOEMCP GetDefaultCommConfigA GetConsoleTitleW VirtualProtect GetShortPathNameW GetCPInfoExA TlsAlloc DeleteTimerQueueTimer AddConsoleAliasA DebugBreak FindNextVolumeA GetModuleHandleA EnumResourceNamesW GetDateFormatW GetComputerNameA GetConsoleDisplayMode MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsGetValue TlsSetValue TlsFree GetCurrentThreadId Sleep HeapSize ExitProcess SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind RaiseException

user32

GetWindowLongW GetSysColorBrush SetCaretPos CharLowerBuffW

gdi32

GetCharWidthW GetColorAdjustment GetCharABCWidthsW

Sharing