setup[.]exe | Triage™

General

Target
setup.exe
Size 305KB
Sample230503-asxtaseh3x
SHA256 c99a1c764d580a930af69a77b18e395223d7c37cddd8524151f5c457add290c1
MD5 4671e3c9c691fdd8fbae90d1db23729a
SHA1 e7bb4967178fdfb723b4034587b748d94cbc697f
SHA512 0cb9cd57025543e27e5beda3f82074d608bc4ff49ab901269b1b450cb24f6e1ae9689f375a697e0ffac32de8f7706ee618f46cc3aef93aaf367cb07b92406b9d
SSDEEP 6144:013HI2Q6/Xk2VTuGS8G+B5hbGCWhaeyoo6VM8/AG:013od6/Xk8SaVXWMIA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setup.exe

File Explorer

setup.exe

.exe 305KB

setup.exe

IMPHASH 572e3147b52a8a182bb424a11eea2bc5
SHA256 c99a1c764d580a930af69a77b18e395223d7c37cddd8524151f5c457add290c1
MD5 4671e3c9c691fdd8fbae90d1db23729a
SHA1 e7bb4967178fdfb723b4034587b748d94cbc697f
SHA512 0cb9cd57025543e27e5beda3f82074d608bc4ff49ab901269b1b450cb24f6e1ae9689f375a697e0ffac32de8f7706ee618f46cc3aef93aaf367cb07b92406b9d
SSDEEP 6144:013HI2Q6/Xk2VTuGS8G+B5hbGCWhaeyoo6VM8/AG:013od6/Xk8SaVXWMIA
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

35530

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW SearchPathW SetLocaleInfoA EnumCalendarInfoA GetDriveTypeW GetProfileIntW GetNumberOfConsoleInputEvents EnumCalendarInfoW GetCommState InterlockedDecrement InitializeSListHead CallNamedPipeW FreeEnvironmentStringsA MoveFileWithProgressA GetTickCount FindNextVolumeMountPointA GetConsoleTitleA GlobalAlloc GetPrivateProfileIntA AddRefActCtx LoadLibraryW GetConsoleAliasExesLengthW InterlockedPopEntrySList GetStringTypeExW GlobalFlags GetFileAttributesW WriteConsoleW GetModuleFileNameW lstrcatA GetOverlappedResult GetVolumePathNameA EnumSystemLocalesA GlobalUnfix GetStdHandle GetProcAddress RemoveDirectoryA SetComputerNameA VerLanguageNameW PrepareTape UnhandledExceptionFilter SetCalendarInfoW BuildCommDCBAndTimeoutsW BeginUpdateResourceA SetThreadIdealProcessor FindAtomA EnumDateFormatsA GetModuleHandleA IsDebuggerPresent FindNextFileW GetStringTypeW EnumDateFormatsW SetFileShortNameA GetVolumeNameForVolumeMountPointW DeleteFileW DeleteFileA WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError MoveFileA HeapFree HeapAlloc GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW SetUnhandledExceptionFilter TerminateProcess GetCurrentProcess HeapCreate WriteFile HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId CloseHandle InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime IsProcessorFeaturePresent GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CreateFileW

Sharing