setup[.]exe | Triage™

General

Target
setup.exe
Size 1004KB
Sample260718-1w4n5agy21
SHA256 7a45536610652ea87c8aed24295bafff2725d0ca1642b6d6a4b3622008f2d2b0
MD5 049e25788bdd71375680d15aac9ac439
SHA1 7d13816ce356cf88fbc4fde58375bdb9a9d4d832
SHA512 48b677e778e7662ab47b7a963fa01fefb124a1a844cd20181cb589b1403175e724018fcd9fa10fc0854e4380a6459c4b2de79c28b23f717c7d231375fd860925
SSDEEP 24576:9Ib5qFnsmjOzM+B3FmUoY+5gjAkEgElLssKkQ190xhWZ/:k5i9mFmT5M1ErQkOCxQd
TLSH
T12B252344BAA6A472D56944358073CF82A33BFD76F9F94B476FC47A5F6C302019A23C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setup.exe

File Explorer

setup.exe

.exe 1004KB

setup.exe

IMPHASH d2c82993d1a616abe994cabd5db7b4f8
SHA256 7a45536610652ea87c8aed24295bafff2725d0ca1642b6d6a4b3622008f2d2b0
MD5 049e25788bdd71375680d15aac9ac439
SHA1 7d13816ce356cf88fbc4fde58375bdb9a9d4d832
SHA512 48b677e778e7662ab47b7a963fa01fefb124a1a844cd20181cb589b1403175e724018fcd9fa10fc0854e4380a6459c4b2de79c28b23f717c7d231375fd860925
SSDEEP 24576:9Ib5qFnsmjOzM+B3FmUoY+5gjAkEgElLssKkQ190xhWZ/:k5i9mFmT5M1ErQkOCxQd
TLSH
T12B252344BAA6A472D56944358073CF82A33BFD76F9F94B476FC47A5F6C302019A23C1A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12409

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetUnhandledExceptionFilter lstrcmpiA lstrcpyA lstrlenA _lclose GetModuleFileNameA _lread _llseek _lopen _lwrite _lcreat CreateDirectoryA SetCurrentDirectoryA lstrcatA FreeLibrary GetProcAddress LoadLibraryA GetDiskFreeSpaceA UnhandledExceptionFilter RemoveDirectoryA DeleteFileA GetTempPathA GetCurrentDirectoryA CloseHandle GetExitCodeProcess LocalFree Sleep HeapSize RtlUnwind LCMapStringW LCMapStringA GetStringTypeW GetCurrentProcess GetFileAttributesA TerminateProcess MultiByteToWideChar GetStringTypeA GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement ExitProcess HeapFree HeapAlloc GetCommandLineA GetVersionExA GetProcessHeap GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetStdHandle InitializeCriticalSection HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoA

user32

TranslateMessage DispatchMessageA PeekMessageA wsprintfA LoadCursorA SetCursor MessageBoxA MsgWaitForMultipleObjects

advapi32

GetTokenInformation OpenProcessToken

shell32

ShellExecuteExA

Sharing