MMSetup[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
MMSetup.exe
Size 3.4MB
Sample260720-w2a7jsbv7r
SHA256 9e5ffa164c04edf45b73768a6485d685231f36a3f4876c687344b3ab08dc4bcb
MD5 bf07369483ee7589435f793848764611
SHA1 df9f3525fa89473686a6d4ca1475c168a19c1267
SHA512 493f880c70cc708f38c7287f479b7c92ca9b9dd850f1780dff2ca06146f6fb261749b834f8384c51f61f9719a08750382761835536b0a2197d063e43a91e6369
SSDEEP 49152:5sVVzEYhxYEaDSLb0OCygLp2XtzHCsxf+5auSTHT8hrgvHlg7:5sn9LUHQRf0fh
TLSH
T1C9F55C17B284E13EC46F1A32C573A6809A3F7B6179368D5B67F4484C8F396802E3F656
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MMSetup.exe

File Explorer

MMSetup.exe

.exe 3.4MB

MMSetup.exe

IMPHASH fc710c872e87acefd82876cc58d2dfb3
SHA256 9e5ffa164c04edf45b73768a6485d685231f36a3f4876c687344b3ab08dc4bcb
MD5 bf07369483ee7589435f793848764611
SHA1 df9f3525fa89473686a6d4ca1475c168a19c1267
SHA512 493f880c70cc708f38c7287f479b7c92ca9b9dd850f1780dff2ca06146f6fb261749b834f8384c51f61f9719a08750382761835536b0a2197d063e43a91e6369
SSDEEP 49152:5sVVzEYhxYEaDSLb0OCygLp2XtzHCsxf+5auSTHT8hrgvHlg7:5sn9LUHQRf0fh
TLSH
T1C9F55C17B284E13EC46F1A32C573A6809A3F7B6179368D5B67F4484C8F396802E3F656
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3153440

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

mpr

WNetEnumResourceW WNetGetUniversalNameW WNetCloseEnum WNetOpenEnumW

wininet

InternetCloseHandle InternetGetLastResponseInfoW FtpGetFileSize InternetConnectW InternetSetOptionW FtpOpenFileW InternetReadFile HttpOpenRequestW InternetSetStatusCallback InternetOpenW HttpSendRequestW HttpQueryInfoW

comctl32

FlatSB_SetScrollInfo InitCommonControls ImageList_DragMove ImageList_Destroy _TrackMouseEvent ImageList_DragShowNolock ImageList_Add ImageList_GetDragImage FlatSB_SetScrollProp ImageList_Create ImageList_EndDrag ImageList_DrawEx ImageList_SetImageCount FlatSB_GetScrollPos FlatSB_SetScrollPos InitializeFlatSB FlatSB_GetScrollInfo ImageList_Write ImageList_GetBkColor ImageList_SetBkColor ImageList_BeginDrag ImageList_GetIcon ImageList_GetImageCount ImageList_DragEnter ImageList_GetIconSize ImageList_SetIconSize ImageList_Read ImageList_DragLeave ImageList_Draw ImageList_Remove

shell32

SHBrowseForFolderW SHGetMalloc SHGetDesktopFolder SHGetSpecialFolderLocation Shell_NotifyIconW SHGetPathFromIDListW ShellExecuteExW

user32

CopyImage CreateWindowExW GetMenuItemInfoW SetMenuItemInfoW DefFrameProcW GetDCEx PeekMessageW MonitorFromWindow GetDlgCtrlID SetTimer WindowFromPoint BeginPaint RegisterClipboardFormatW FrameRect MapVirtualKeyW IsWindowUnicode CharToOemA RegisterWindowMessageW FillRect GetMenuStringW DispatchMessageW SendMessageA DefMDIChildProcW EnumWindows GetClassInfoW ShowOwnedPopups GetSystemMenu GetScrollRange GetScrollPos SetScrollPos GetActiveWindow SetActiveWindow DrawEdge GetKeyboardLayoutList OemToCharBuffA LoadBitmapW DrawFocusRect EnumChildWindows ReleaseCapture UnhookWindowsHookEx LoadCursorW GetCapture SetCapture CreatePopupMenu ScrollWindow ShowCaret GetMenuItemID GetLastActivePopup CharLowerBuffW GetSystemMetrics SetWindowLongW PostMessageW DrawMenuBar SetParent IsZoomed CharUpperBuffW GetClientRect IsChild ClientToScreen GetClipboardData SetClipboardData SetWindowPlacement IsIconic CallNextHookEx GetMonitorInfoW ShowWindow CheckMenuItem CharUpperW DefWindowProcW GetForegroundWindow SetForegroundWindow GetWindowTextW EnableWindow DestroyWindow IsDialogMessageW EndMenu RegisterClassW CharNextW GetWindowThreadProcessId RedrawWindow GetDC GetFocus SetFocus EndPaint ReleaseDC MsgWaitForMultipleObjectsEx LoadKeyboardLayoutW GetClassLongW ActivateKeyboardLayout GetParent CharToOemBuffA DrawTextW SetScrollRange InsertMenuItemW PeekMessageA GetPropW SetClassLongW MessageBoxW MessageBeep SetPropW RemovePropW UpdateWindow GetSubMenu MsgWaitForMultipleObjects DestroyMenu OemToCharA DestroyIcon SetWindowsHookExW EmptyClipboard IsWindowVisible GetDlgItem DispatchMessageA UnregisterClassW GetTopWindow SendMessageW AdjustWindowRectEx DrawIcon IsWindow EnumThreadWindows InvalidateRect GetKeyboardState DrawFrameControl ScreenToClient SetCursor CreateIcon CreateMenu LoadStringW CharLowerW SetWindowRgn SetWindowPos GetMenuItemCount RemoveMenu GetSysColorBrush GetKeyboardLayoutNameW GetWindowDC TranslateMessage OpenClipboard DrawTextExW MapWindowPoints EnumDisplayMonitors CharLowerBuffA CallWindowProcW CloseClipboard DestroyCursor GetScrollInfo SetWindowTextW GetMessageExtraInfo EnableScrollBar GetSysColor TrackPopupMenu CharUpperBuffA DrawIconEx PostQuitMessage GetClassNameW ShowScrollBar EnableMenuItem GetIconInfo GetMessagePos SetScrollInfo GetKeyNameTextW GetDesktopWindow GetCursorPos SetCursorPos HideCaret GetMenu GetMenuState SetMenu SetRect GetKeyState FindWindowExW MonitorFromPoint SystemParametersInfoW LoadIconW GetCursor GetWindow GetWindowLongW GetWindowRect InsertMenuW KillTimer WaitMessage IsWindowEnabled IsDialogMessageA TranslateMDISysAccel GetWindowPlacement FindWindowW DeleteMenu GetKeyboardLayout

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

oleaut32

SafeArrayPutElement SetErrorInfo GetErrorInfo VariantInit VariantClear SysFreeString SafeArrayAccessData SysReAllocStringLen SafeArrayCreate CreateErrorInfo SafeArrayGetElement SysAllocStringLen SafeArrayUnaccessData SafeArrayPtrOfIndex VariantCopy SafeArrayGetUBound SafeArrayGetLBound VariantCopyInd VariantChangeType

advapi32

RegFlushKey RegQueryValueExA RegQueryValueExW RegCloseKey RegOpenKeyExA RegOpenKeyExW

netapi32

NetWkstaGetInfo NetApiBufferFree

msvcrt

memcpy memset

winhttp

WinHttpGetIEProxyConfigForCurrentUser WinHttpSetTimeouts WinHttpSetStatusCallback WinHttpConnect WinHttpReceiveResponse WinHttpQueryAuthSchemes WinHttpGetProxyForUrl WinHttpReadData WinHttpCloseHandle WinHttpQueryHeaders WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpOpen WinHttpWriteData WinHttpSetCredentials WinHttpQueryDataAvailable WinHttpSetOption WinHttpSendRequest WinHttpQueryOption

kernel32

SetFileAttributesW SetFileTime QueryDosDeviceW GetACP GetStringTypeExW CloseHandle LocalFree GetCurrentProcessId SizeofResource VirtualProtect TerminateThread QueryPerformanceFrequency IsDebuggerPresent FindNextFileW GetFullPathNameW VirtualFree ExitProcess HeapAlloc GetCPInfoExW GetLongPathNameW RtlUnwind GetCPInfo EnumSystemLocalesW GetStdHandle GetTimeZoneInformation FileTimeToLocalFileTime GetModuleHandleW FreeLibrary HeapDestroy FileTimeToDosDateTime ReadFile DosDateTimeToFileTime GetUserDefaultLCID CreateProcessW GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW lstrlenA CreateThread CompareStringW MapViewOfFile LoadLibraryA GetVolumeInformationW ResetEvent MulDiv FreeResource GetDriveTypeW GetVersion RaiseException MoveFileW GlobalAddAtomW FormatMessageW SwitchToThread GetExitCodeThread OutputDebugStringW GetCurrentThread LocalFileTimeToFileTime GetFileAttributesExW LoadLibraryExW LockResource FileTimeToSystemTime GetCurrentThreadId UnhandledExceptionFilter VirtualQuery GlobalFindAtomW VirtualQueryEx GlobalFree Sleep SetVolumeLabelW EnterCriticalSection SetFilePointer FlushFileBuffers GetStringTypeExA LoadResource SuspendThread GetTickCount GetFileSize GetTempFileNameW GlobalDeleteAtom GetStartupInfoW GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW InitializeCriticalSection GetThreadPriority GetCurrentProcess SetThreadPriority GlobalLock VirtualAlloc GetTempPathW GetSystemInfo GetCommandLineW LeaveCriticalSection GetProcAddress ResumeThread GetLogicalDriveStringsW GetVersionExW VerifyVersionInfoW HeapCreate LCMapStringW GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage UnmapViewOfFile lstrlenW CompareStringA QueryPerformanceCounter SetEndOfFile HeapFree WideCharToMultiByte FindClose MultiByteToWideChar LoadLibraryW SetEvent CreateFileW GetLocaleInfoW DeleteFileW GetLocalTime WaitForSingleObject WriteFile CreateFileMappingW ExitThread DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode IsValidLocale SleepEx TlsSetValue CreateDirectoryW GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW GlobalMemoryStatus CreateEventW WaitForMultipleObjectsEx GetThreadLocale SetThreadLocale

ole32

IsEqualGUID OleInitialize OleUninitialize CoInitialize CoCreateInstance CoUninitialize CoTaskMemFree CoTaskMemAlloc

gdi32

Arc Pie SetBkMode SelectPalette CreateCompatibleBitmap GetEnhMetaFileHeader ExcludeClipRect RectVisible SetWindowOrgEx MaskBlt AngleArc DeleteEnhMetaFile Chord SetTextColor StretchBlt SetDIBits SetViewportOrgEx CreateRectRgn RealizePalette GetDIBColorTable SetDIBColorTable RoundRect RestoreDC SetRectRgn GetTextMetricsW GetWindowOrgEx CreatePalette CreateBrushIndirect PatBlt SetEnhMetaFileBits PolyBezierTo GetStockObject CreateSolidBrush Polygon Rectangle MoveToEx DeleteDC SaveDC PlayEnhMetaFile BitBlt Ellipse FrameRgn GetDeviceCaps GetBitmapBits GetTextExtentPoint32W GetClipBox Polyline IntersectClipRect GetEnhMetaFileBits GetSystemPaletteEntries CreateBitmap SetWinMetaFileBits CreateDIBitmap GetStretchBltMode CreateDIBSection CreatePenIndirect GetDIBits SetStretchBltMode GetEnhMetaFilePaletteEntries CreateFontIndirectW PolyBezier LineTo GetRgnBox CreateHalftonePalette DeleteObject SelectObject ExtFloodFill UnrealizeObject CopyEnhMetaFileW SetBkColor CreateCompatibleDC GetObjectW GetBrushOrgEx GetCurrentPositionEx GetWinMetaFileBits SetROP2 GetTextExtentPointW ExtTextOutW SetBrushOrgEx GetEnhMetaFileDescriptionW GetPixel ArcTo GdiFlush SetPixel EnumFontFamiliesExW GetPaletteEntries

Name

.text

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

546KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

153B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

88B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

93B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

285KB

Virtual Size

285KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

MMSetup.exe

mpr

wininet

comctl32

shell32

user32

version

oleaut32

advapi32

netapi32

msvcrt

winhttp

kernel32

ole32

gdi32

generic