setup[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 183KB
Sample261023-bapweabs9m
SHA256 39aaf00d15933ee514962ce1fb6692964347123dcb14e46ee470d914054f8cdd
MD5 c4f5ac94ab724ba37d22fc4000b62d0a
SHA1 2c8b6f96f6fa45e702e21c3ded91b937d2392d32
SHA512 4cfee7433bb73f17b1b2605ce8ebf041feca4369858a6c7d8b1ae8f444f10ff0abdff78387e7b0576f2148d0cb348f22ef3f72e07af9d214b8a1da94aa2551a9
SSDEEP 3072:/K8832hp9sHrEzclcHfvXwQ1XpR97R5/99WWWgAmp0wRKUqCVTF3AJhjYv4G3rZB:/K862p+HwzcOHHwmq1CxFwaT3x9qm
TLSH
T1D1043A5B76A461F5E1679078C9529A47F3B270820320E3DF13A487B75F27AE1AD3E321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setup.exe

File Explorer

setup.exe

.exe 183KB

setup.exe

IMPHASH 22e7125b95acf497b07e79559bdc556c
SHA256 39aaf00d15933ee514962ce1fb6692964347123dcb14e46ee470d914054f8cdd
MD5 c4f5ac94ab724ba37d22fc4000b62d0a
SHA1 2c8b6f96f6fa45e702e21c3ded91b937d2392d32
SHA512 4cfee7433bb73f17b1b2605ce8ebf041feca4369858a6c7d8b1ae8f444f10ff0abdff78387e7b0576f2148d0cb348f22ef3f72e07af9d214b8a1da94aa2551a9
SSDEEP 3072:/K8832hp9sHrEzclcHfvXwQ1XpR97R5/99WWWgAmp0wRKUqCVTF3AJhjYv4G3rZB:/K862p+HwzcOHHwmq1CxFwaT3x9qm
TLSH
T1D1043A5B76A461F5E1679078C9529A47F3B270820320E3DF13A487B75F27AE1AD3E321
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

148140

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

ord17

shell32

ShellExecuteW SHBrowseForFolderW ShellExecuteExW SHGetPathFromIDListW SHGetFileInfoW SHGetSpecialFolderPathW SHGetMalloc

gdi32

CreateCompatibleDC CreateFontIndirectW DeleteObject DeleteDC GetCurrentObject StretchBlt GetDeviceCaps CreateCompatibleBitmap SelectObject SetStretchBltMode GetObjectW

advapi32

FreeSid AllocateAndInitializeSid CheckTokenMembership

user32

GetSystemMenu EnableMenuItem EnableWindow MessageBeep LoadIconW LoadImageW SetWindowsHookExW PtInRect CallNextHookEx DefWindowProcW CallWindowProcW DrawIconEx DialogBoxIndirectParamW GetWindow ClientToScreen GetDC DrawTextW SystemParametersInfoW SetFocus UnhookWindowsHookEx GetWindowLongPtrW SetWindowLongPtrW GetSystemMetrics GetClientRect GetDlgItem IsWindow CreateWindowExA MessageBoxA DestroyWindow GetSysColor SetWindowTextW GetWindowTextLengthW GetWindowTextW wsprintfA GetClassNameA GetWindowLongW GetMenu GetWindowDC ReleaseDC CopyImage GetParent ScreenToClient CreateWindowExW GetDesktopWindow GetWindowRect SetWindowPos wvsprintfW GetMessageW DispatchMessageW KillTimer SetTimer SendMessageW ShowWindow BringWindowToTop wsprintfW MessageBoxW EndDialog SetWindowLongW GetKeyState CharUpperW

ole32

CreateStreamOnHGlobal CoInitialize CoCreateInstance

oleaut32

SysFreeString VariantClear SysAllocStringLen OleLoadPicture SysAllocString

kernel32

SetEndOfFile GetFileInformationByHandle WaitForMultipleObjects SetUnhandledExceptionFilter QueryPerformanceCounter VirtualAlloc VirtualFree SetFileTime ReadFile SetFilePointer GetFileSize LeaveCriticalSection EnterCriticalSection DeleteCriticalSection FormatMessageW lstrcpyW LocalFree IsBadReadPtr GetSystemDirectoryW GetCurrentThreadId SuspendThread TerminateThread InitializeCriticalSection ResetEvent SetEvent CreateEventW GetVersionExW GetModuleFileNameW GetCurrentProcess SetProcessWorkingSetSize SetEnvironmentVariableW GetDriveTypeW CreateFileW LoadLibraryA SetThreadLocale GetSystemTimeAsFileTime ExpandEnvironmentStringsW CompareFileTime WideCharToMultiByte GetTempPathW GetCurrentDirectoryW GetEnvironmentVariableW lstrcmpiW GetLocaleInfoW MultiByteToWideChar GetUserDefaultUILanguage GetSystemDefaultUILanguage GetSystemDefaultLCID lstrcmpiA GlobalAlloc GlobalFree MulDiv FindResourceExA SizeofResource LoadResource LockResource GetProcAddress GetModuleHandleW FindFirstFileW lstrcmpW DeleteFileW FindNextFileW FindClose RemoveDirectoryW GetStdHandle WriteFile lstrlenA CreateDirectoryW GetFileAttributesW SetCurrentDirectoryW GetLocalTime SystemTimeToFileTime CreateThread GetExitCodeThread Sleep SetFileAttributesW GetDiskFreeSpaceExW SetLastError GetTickCount lstrlenW ExitProcess lstrcatW AddVectoredExceptionHandler RemoveVectoredExceptionHandler CloseHandle WaitForSingleObject GetExitCodeProcess GetQueuedCompletionStatus ResumeThread SetInformationJobObject CreateIoCompletionPort AssignProcessToJobObject CreateJobObjectW GetLastError CreateProcessW GetStartupInfoW GetCommandLineW GetCurrentProcessId

msvcrt

__C_specific_handler ??3@YAXPEAX@Z _purecall ??2@YAPEAX_K@Z _wtol __CxxFrameHandler memset memmove memcpy _wcsnicmp memcmp strncpy wcsncpy wcsncmp strncmp ?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z _beginthreadex _CxxThrowException wcsstr free realloc malloc _unlock __dllonexit _lock _onexit ??1type_info@@UEAA@XZ __getmainargs _XcptFilter _exit _ismbblead _cexit exit _acmdln _initterm _amsg_exit __setusermatherr _commode _fmode __set_app_type ?terminate@@YAXXZ