setup[.]exe | Triage™

General

Target
setup.exe
Size 362KB
Sample230527-jptf5sbb78
SHA256 8aec7f3354e9897a3eefd2e32357081ed1e7f5f49dbfd26d34947460a00d1938
MD5 a78d6e450c92da7601378112fb7843b4
SHA1 3e4190b321c460e2f117e650caa9782b2dafc5ca
SHA512 0166cfb97a505cd7b8362f58c90d971ed771c54e017f428bb9ce3e48ea3c384e6d85a845f104e06c6ede35344a88be8fafa4f1af3240af93cb93e2c368520dee
SSDEEP 3072:0KFVArjg78B9EbcJG8dbiT7CuHLOhwEgJyWIEk22uu/CPc3DAyPAUgOZv57AKX5h:XFVAc2hmT7CurOuEcKpTApUBv57YYa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setup.exe

File Explorer

setup.exe

.exe 362KB

setup.exe

IMPHASH bd191f6a78cc98a8bbe61db18ad8e9a2
SHA256 8aec7f3354e9897a3eefd2e32357081ed1e7f5f49dbfd26d34947460a00d1938
MD5 a78d6e450c92da7601378112fb7843b4
SHA1 3e4190b321c460e2f117e650caa9782b2dafc5ca
SHA512 0166cfb97a505cd7b8362f58c90d971ed771c54e017f428bb9ce3e48ea3c384e6d85a845f104e06c6ede35344a88be8fafa4f1af3240af93cb93e2c368520dee
SSDEEP 3072:0KFVArjg78B9EbcJG8dbiT7CuHLOhwEgJyWIEk22uu/CPc3DAyPAUgOZv57AKX5h:XFVAc2hmT7CurOuEcKpTApUBv57YYa
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20041

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CancelWaitableTimer AddConsoleAliasW GetProcessPriorityBoost GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleTitleA CancelDeviceWakeupRequest WriteFile FreeConsole GetVersionExW WritePrivateProfileStructW GetNamedPipeInfo FindNextVolumeW MulDiv GetModuleFileNameW CreateActCtxA ReplaceFileA GetStringTypeExA CreateJobObjectA GetStdHandle GetLogicalDriveStringsA WaitForSingleObject ReadConsoleOutputCharacterA GetProcAddress AttachConsole GetLongPathNameA VirtualAlloc EnterCriticalSection _hwrite LoadLibraryA OpenMutexA InterlockedExchangeAdd LocalAlloc GetFileType CreateFileMappingW FindFirstVolumeMountPointW GetNumberFormatW CreateEventW GetModuleFileNameA lstrcmpiW GetModuleHandleA GetFileAttributesExW SetProcessShutdownParameters FindAtomW DebugBreak GetConsoleAliasA GetCommState GetProfileIntW GetLastError GetConsoleAliasesLengthW GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree WideCharToMultiByte SetHandleCount DeleteCriticalSection LeaveCriticalSection Sleep ExitProcess FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers CreateFileA CloseHandle

user32

CharLowerBuffA

gdi32

GetCharWidthW EnumFontsW GetCharABCWidthsFloatW

advapi32

MapGenericMask

Sharing