setup[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

setup.exe
Size

108KB
MD5

c926766ba5ef82571a1da3c7855d43bb
SHA1

27215d25a7d04b317f97f0c80309031c985dd99b
SHA256

bc63cefb2d5df0cf02377f13b50c55b35124972bc1cd6137c85e7e791e533152
SHA512

34cee3d1b662165fd912cc4ca056c5e94296c1a0a7ef638f4d3c5811c759435bf69ff47df82373b15f58020945f1c1e67f662a1af9bc96e99482389ba60dd6ff
SSDEEP

1536:G6O7KAOFmbh0pbPyhKU9tz5p806tAMtHZEgMhVdQpVApUu:BO7pkxytNR6tAaqRhVdQpVAqu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setup.exe

Files

setup.exe
.exe windows x86

4ffdad3b44570907faee61acf03c26d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupQueryInfVersionInformationA
SetupGetInfInformationA
SetupDiRemoveDevice
SetupDiDestroyDriverInfoList
SetupDiInstallDevice
SetupDiSetSelectedDriverA
SetupDiEnumDriverInfoA
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsA
SetupDiGetDeviceInstallParamsA
SetupDiGetINFClassA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo

kernel32

HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
InitializeCriticalSection
GetStdHandle
WriteFile
SystemTimeToFileTime
CreateFileA
GetLastError
SetFileTime
CloseHandle
FindResourceA
FlushFileBuffers
LockResource
SizeofResource
FindFirstFileA
FindClose
CreateDirectoryA
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
GetTempPathA
LocalFree
LocalAlloc
lstrlenA
LoadLibraryA
GetProcAddress
FreeLibrary
GetFullPathNameA
CopyFileA
DeleteFileA
MultiByteToWideChar
LoadResource
GetACP
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
RaiseException
GetOEMCP
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode

advapi32

RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegSetValueExA

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ffdad3b44570907faee61acf03c26d3

Headers

File Characteristics

Imports

setupapi

kernel32

advapi32

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 32KB - Virtual size: 29KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 32KB - Virtual size: 29KB