setup[.]exe | Triage™

Resubmissions

09/08/2026, 14:30

260809-rvda4sgm7w

09/08/2026, 14:28

260809-rtfd3sgm6t7

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 2.7MB
Sample260809-rtfd3sgm6t
SHA256 05baac7a0225e5fccef9bb30c5969c1bb2c48520e1ccd6b1159ea339fe22147d
MD5 bb4b8f90a10a1b8687625c5551528439
SHA1 b3aa95e54bcd84512dab9328801129c66cfb527f
SHA512 2ba6f364f7e7407aabb8d0787fb893ab061648edc3ac39630f5922d175fea443df3ddd0315628c40489156b77c0488649fe2f3b2a0e363e93f35cecb95880440
SSDEEP 49152:X1DYjo/j1ryJVYTFVbpoapK89Yj3J+SQUl2cXbLgfYk/J3afQ0f:XpYc/jXTHbqapjKl3VXbLaVcQ0
TLSH
T12AD51261B4E4C1E1D02B70B5CD5578F6A2F27E52CF609E8F1C003E653E766A96878E2C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setup.exe

File Explorer

setup.exe

.exe 2.7MB

setup.exe

IMPHASH 6d9c27ca5008bc63e9fbc102659734db
SHA256 05baac7a0225e5fccef9bb30c5969c1bb2c48520e1ccd6b1159ea339fe22147d
MD5 bb4b8f90a10a1b8687625c5551528439
SHA1 b3aa95e54bcd84512dab9328801129c66cfb527f
SHA512 2ba6f364f7e7407aabb8d0787fb893ab061648edc3ac39630f5922d175fea443df3ddd0315628c40489156b77c0488649fe2f3b2a0e363e93f35cecb95880440
SSDEEP 49152:X1DYjo/j1ryJVYTFVbpoapK89Yj3J+SQUl2cXbLgfYk/J3afQ0f:XpYc/jXTHbqapjKl3VXbLaVcQ0
TLSH
T12AD51261B4E4C1E1D02B70B5CD5578F6A2F27E52CF609E8F1C003E653E766A96878E2C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

128336

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

ord17

shell32

ShellExecuteW SHBrowseForFolderW ShellExecuteExW SHGetPathFromIDListW SHGetFileInfoW SHGetSpecialFolderPathW SHGetMalloc

gdi32

CreateCompatibleDC CreateFontIndirectW DeleteObject DeleteDC GetCurrentObject StretchBlt GetDeviceCaps CreateCompatibleBitmap SelectObject SetStretchBltMode GetObjectW

advapi32

FreeSid AllocateAndInitializeSid CheckTokenMembership

user32

GetSystemMenu EnableMenuItem EnableWindow MessageBeep LoadIconW LoadImageW SetWindowsHookExW PtInRect CallNextHookEx DefWindowProcW CallWindowProcW DrawIconEx DialogBoxIndirectParamW GetWindow ClientToScreen GetDC DrawTextW SystemParametersInfoW SetFocus UnhookWindowsHookEx GetWindowLongPtrW SetWindowLongPtrW GetSystemMetrics GetClientRect GetDlgItem IsWindow CreateWindowExA MessageBoxA DestroyWindow GetSysColor SetWindowTextW GetWindowTextLengthW GetWindowTextW wsprintfA GetClassNameA GetWindowLongW GetMenu GetWindowDC ReleaseDC CopyImage GetParent ScreenToClient CreateWindowExW GetDesktopWindow wvsprintfW SetWindowPos SetTimer GetMessageW DispatchMessageW GetWindowRect CharUpperW SendMessageW ShowWindow BringWindowToTop wsprintfW MessageBoxW EndDialog SetWindowLongW GetKeyState KillTimer

ole32

CreateStreamOnHGlobal CoInitialize CoCreateInstance

oleaut32

SysFreeString VariantClear SysAllocStringLen OleLoadPicture SysAllocString

kernel32

ReadFile SetFileTime SetEndOfFile VirtualAlloc VirtualFree GetFileInformationByHandle WaitForMultipleObjects SetFilePointer GetFileSize LeaveCriticalSection EnterCriticalSection DeleteCriticalSection FormatMessageW lstrcpyW LocalFree IsBadReadPtr GetSystemDirectoryW GetCurrentThreadId SuspendThread TerminateThread InitializeCriticalSection ResetEvent SetEvent CreateEventW GetVersionExW GetModuleFileNameW GetCurrentProcess SetProcessWorkingSetSize SetEnvironmentVariableW GetDriveTypeW CreateFileW LoadLibraryA SetThreadLocale GetSystemTimeAsFileTime ExpandEnvironmentStringsW CompareFileTime WideCharToMultiByte GetTempPathW GetCurrentDirectoryW GetEnvironmentVariableW lstrcmpiW GetLocaleInfoW MultiByteToWideChar GetUserDefaultUILanguage GetSystemDefaultUILanguage GetSystemDefaultLCID lstrcmpiA GlobalAlloc GlobalFree MulDiv FindResourceExA SizeofResource LoadResource LockResource GetProcAddress GetModuleHandleW FindFirstFileW lstrcmpW DeleteFileW FindNextFileW FindClose RemoveDirectoryW GetStdHandle WriteFile lstrlenA CreateDirectoryW GetFileAttributesW SetCurrentDirectoryW GetLocalTime SystemTimeToFileTime CreateThread GetExitCodeThread Sleep SetFileAttributesW GetDiskFreeSpaceExW SetLastError GetCommandLineW GetStartupInfoW GetTickCount lstrlenW ExitProcess lstrcatW AddVectoredExceptionHandler RemoveVectoredExceptionHandler CloseHandle WaitForSingleObject GetExitCodeProcess GetQueuedCompletionStatus ResumeThread SetInformationJobObject CreateIoCompletionPort AssignProcessToJobObject CreateJobObjectW GetLastError CreateProcessW GetStartupInfoA

msvcrt

free __set_app_type ??3@YAXPEAX@Z _purecall ??2@YAPEAX_K@Z _wtol __CxxFrameHandler memset memmove memcpy _wcsnicmp memcmp strncpy wcsncpy wcsncmp strncmp ?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z _beginthreadex _CxxThrowException wcsstr _fmode realloc malloc __dllonexit _onexit ??1type_info@@UEAA@XZ __C_specific_handler _XcptFilter _c_exit _exit _cexit exit _acmdln __getmainargs _initterm __setusermatherr _commode ?terminate@@YAXXZ