setup[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

setup.exe
Size

24.8MB
MD5

4e5f150050059181850630647c600d15
SHA1

d6404ee6c19f4870fa1feb4a691bff0c6a1aeb40
SHA256

54d6f47bcbe29b538937786046d71569168cd51ef1e8687340eccb6715a86d10
SHA512

650737b56ea8018247105cd787418008529c837cb230191439c06cfb71f8ba22d0005169db32a85932854e792032103b7a23fb572474d2314c385d69563f20ca
SSDEEP

786432:b+vgdjLOL+cAadoy+J9unkQzsifqYQnc3Ti:b+vmXs+z5y+WnRQifqDnc3Ti

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setup.exe

Files

setup.exe
.exe windows x86

2dbda5c761e9e5bbbe4cc37c0bfc3e1d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetFileInformationByHandle
PeekNamedPipe
LCMapStringW
GetACP
GetStringTypeW
GetTimeZoneInformation
WriteConsoleW
GetProcessHeap
IsProcessorFeaturePresent
LoadLibraryA
ExpandEnvironmentStringsA
GetCPInfo
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapSize
HeapQueryInformation
HeapReAlloc
ExitProcess
HeapFree
HeapAlloc
SetEnvironmentVariableA
SetCurrentDirectoryW
SetEnvironmentVariableW
GetSystemTimeAsFileTime
CreateThread
ExitThread
DecodePointer
EncodePointer
FindFirstFileExW
GetDriveTypeW
RaiseException
RtlUnwind
GetStartupInfoW
HeapSetInformation
FindResourceExW
VirtualProtect
GetProfileIntW
GetTickCount
SearchPathW
GetNumberFormatW
GetWindowsDirectoryW
GetTempFileNameW
FindNextFileW
SetErrorMode
lstrlenA
GlobalGetAtomNameW
GlobalFlags
lstrcpyW
GetCurrentDirectoryW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedIncrement
LocalAlloc
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GlobalFindAtomW
CompareStringW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetFileTime
GetFileSizeEx
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SetFileAttributesW
GetFileAttributesExW
CreateFileW
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
GetCurrentProcessId
FreeResource
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
lstrcmpA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
CompareStringA
ActivateActCtx
DeactivateActCtx
lstrcmpW
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
MulDiv
WideCharToMultiByte
MultiByteToWideChar
GetFileAttributesW
LoadLibraryW
FreeLibrary
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
FindFirstFileW
FindClose
GetSystemDirectoryW
GetSystemWindowsDirectoryW
FindResourceW
LoadResource
LockResource
SizeofResource
GetUserDefaultLangID
GetVersionExW
GetModuleHandleW
GetProcAddress
ConvertDefaultLocale
Sleep
EnterCriticalSection
LeaveCriticalSection
CreateMutexW
GetLastError
ReleaseMutex
GetModuleFileNameW
RemoveDirectoryW
GetCommandLineW
CreateDirectoryW
GetTempPathW
GetLongPathNameW
GetPrivateProfileStringW
GetDiskFreeSpaceExW
DeleteFileW
InitializeCriticalSection
SetLastError

user32

DestroyMenu
GetMenuItemInfoW
InflateRect
UnregisterClassW
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
RealChildWindowFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
DeleteMenu
LoadCursorW
GetSysColorBrush
CharUpperW
MapVirtualKeyW
GetKeyNameTextW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
CreateAcceleratorTableW
CopyRect
PtInRect
GetWindow
ShowOwnedPopups
SetCursor
SetWindowsHookExW
IntersectRect
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
SystemParametersInfoW
OffsetRect
MessageBeep
RedrawWindow
IsZoomed
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GrayStringW
SetWindowRgn
NotifyWinEvent
CreatePopupMenu
DrawTextExW
DrawTextW
DrawIcon
SendMessageW
IsIconic
GetWindowRect
GetClientRect
TabbedTextOutW
FillRect
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxW
LoadMenuW
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
UnhookWindowsHookEx
PostMessageW
PostQuitMessage
GetMenuState
GetMenuStringW
SetParent
SetClassLongW
TranslateAcceleratorW
BringWindowToTop
InsertMenuItemW
DestroyIcon
LoadImageW
ReuseDDElParam
UnpackDDElParam
MonitorFromPoint
IsMenu
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
InvalidateRect
KillTimer
SetTimer
UpdateWindow
GetSystemMetrics
PostThreadMessageW
CopyAcceleratorTableW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
GetAsyncKeyState
DestroyAcceleratorTable
CallNextHookEx
LoadAcceleratorsW
EnableWindow
LoadIconW
DestroyCursor
GetWindowRgn
MapDialogRect
GetDoubleClickTime
GetSystemMenu
SubtractRect
CopyIcon
CharUpperBuffW
GetUpdateRect
FrameRect
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
IsClipboardFormatAvailable
MapVirtualKeyExW
IsCharLowerW
SetMenuDefaultItem
UpdateLayeredWindow
UnionRect
GetNextDlgGroupItem
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
SetCursorPos
SetRect
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
DrawStateW
RegisterClipboardFormatW
EnumChildWindows
LockWindowUpdate
IsRectEmpty
SetWindowPos
CreateMenu

gdi32

GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateBitmap
CreateCompatibleDC
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
CreateDIBitmap
CreateCompatibleBitmap
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
GetTextExtentPoint32W
SetRectRgn
CombineRgn
DPtoLP
OffsetRgn
GetViewportExtEx
CreateRoundRectRgn
GetTextColor
SetDIBColorTable
GetDIBits
RealizePalette
StretchBlt
SetPixel
CreateDIBSection
CreateRectRgn
CreatePolygonRgn
GetBkColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
Rectangle
EnumFontFamiliesExW
GetWindowOrgEx
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
GetTextFaceW
SetPixelV
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
GetDeviceCaps
GetObjectW
CreateFontIndirectW
SelectClipRgn
DeleteObject
SetLayout
GetLayout
GetRgnBox
GetStockObject

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegOpenKeyExA
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
CreateServiceW
QueryServiceStatusEx
OpenSCManagerW
OpenServiceW
CloseServiceHandle
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCloseKey
RegQueryValueExA

shell32

SHAppBarMessage
DragQueryFileW
DragFinish
SHGetMalloc
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathW
ShellExecuteW

comctl32

ImageList_GetIconSize
InitCommonControlsEx

shlwapi

UrlUnescapeW
PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
SHDeleteKeyW
PathRemoveFileSpecW

ole32

ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CreateStreamOnHGlobal
OleLockRunning
CoCreateGuid
IsAccelerator
CoTaskMemFree
CoCreateInstance
DoDragDrop
OleGetClipboard
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoInitialize
CoUninitialize

oleaut32

VariantInit
SysStringLen
VariantChangeType
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
VariantClear
SysAllocStringLen
SysAllocString
SysFreeString

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage

msi

ord111
ord113
ord173

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

wininet

InternetCloseHandle
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetOpenUrlW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetQueryOptionW
InternetGetLastResponseInfoW
HttpQueryInfoW
InternetQueryDataAvailable

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 372KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22.9MB - Virtual size: 22.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2dbda5c761e9e5bbbe4cc37c0bfc3e1d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

msi

version

oleacc

wininet

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 372KB - Virtual size: 372KB

.data Size: 26KB - Virtual size: 460KB

.rsrc Size: 22.9MB - Virtual size: 22.9MB

.reloc Size: 178KB - Virtual size: 178KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 372KB - Virtual size: 372KB

.data
Size: 26KB - Virtual size: 460KB

.rsrc
Size: 22.9MB - Virtual size: 22.9MB

.reloc
Size: 178KB - Virtual size: 178KB