ISetup5[.]exe | Triage™

General

Target
ISetup5.exe
Size 434KB
Sample240502-c2hf3sef4x
SHA256 6bea74bd9d96718e04955348bb175fc00018d7e19b94b764fb987702694e6a0f
MD5 a8ddb720d9e97fb0aa4dd54e8e55b971
SHA1 3797eafecfd3be08f97741886440c7a6a0ddfc4e
SHA512 3cb1fae111027cc00f49fd8e293bcf7ac49f64500d82de810e3aef80deae7d14adb41bdcc0539b68f3aa925fbca43fb0772501fe3d1dd78c1fc9d2c890cced1d
SSDEEP 6144:YjCWCQdVWjXWRSltCvyKN51/jFU+piWhXCS4W6N2sPyOG+V81t6xjo:u5/WMPZ1/jFU+pi8XD6NUD8xjo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ISetup5.exe

File Explorer

ISetup5.exe

.exe 434KB

ISetup5.exe

IMPHASH be37cfa8808e82b62b6ce7f603a1d7f3
SHA256 6bea74bd9d96718e04955348bb175fc00018d7e19b94b764fb987702694e6a0f
MD5 a8ddb720d9e97fb0aa4dd54e8e55b971
SHA1 3797eafecfd3be08f97741886440c7a6a0ddfc4e
SHA512 3cb1fae111027cc00f49fd8e293bcf7ac49f64500d82de810e3aef80deae7d14adb41bdcc0539b68f3aa925fbca43fb0772501fe3d1dd78c1fc9d2c890cced1d
SSDEEP 6144:YjCWCQdVWjXWRSltCvyKN51/jFU+piWhXCS4W6N2sPyOG+V81t6xjo:u5/WMPZ1/jFU+pi8XD6NUD8xjo
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState SetDefaultCommConfigW FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GetVolumeInformationA LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW GetModuleFileNameW SetConsoleTitleA SetCurrentDirectoryA FindFirstFileExA EnumCalendarInfoW SetLastError GetProcAddress GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA LocalAlloc SetConsoleCtrlHandler HeapWalk FindAtomA WaitForMultipleObjects EnumDateFormatsW GetSystemTime GetCurrentDirectoryW GetLocaleInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing