ISetup8[.]exe | Triage™

General

Target
ISetup8.exe
Size 451KB
Sample240428-3bcq1sbf79
SHA256 e43b79bf105ec37a7cfff9ad84ea28a0320f1aeba4b47fa5ad119672f9b52acb
MD5 762256f7246e75a7537109d5371af60b
SHA1 953a670596dc2ded2aa93b6a1e6e3332aadfd7af
SHA512 aeb4937d560d212046404788cbfe85fafb412736c6e487409c6cbca9827c4a127865f060acb6982f07b78411ceec8052d29f8bb893efe7c357640bd594c55b48
SSDEEP 6144:+0HYlMeYOX8mE94DowCxV0jZVqmnvi1UVX1Zbt2S0gjaUH:+04lMXmQ4LCxWjZji1U/rhaUH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ISetup8.exe

File Explorer

ISetup8.exe

.exe 451KB

ISetup8.exe

IMPHASH fc30ce1f37fa7cd963320fd0a84f3bf6
SHA256 e43b79bf105ec37a7cfff9ad84ea28a0320f1aeba4b47fa5ad119672f9b52acb
MD5 762256f7246e75a7537109d5371af60b
SHA1 953a670596dc2ded2aa93b6a1e6e3332aadfd7af
SHA512 aeb4937d560d212046404788cbfe85fafb412736c6e487409c6cbca9827c4a127865f060acb6982f07b78411ceec8052d29f8bb893efe7c357640bd594c55b48
SSDEEP 6144:+0HYlMeYOX8mE94DowCxV0jZVqmnvi1UVX1Zbt2S0gjaUH:+04lMXmQ4LCxWjZji1U/rhaUH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17266

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\depefenitux\doyidutor\j.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus FindResourceA GetLocaleInfoA LoadLibraryExW InterlockedDecrement GetComputerNameW CreateHardLinkA BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA CreateEventA WriteConsoleW GetModuleFileNameW GetSystemDirectoryA GetACP MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA InterlockedExchangeAdd SetCalendarInfoW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetProcessHeap GetStdHandle GetFileType GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing