Setup[.]exe | Triage™

General

Target
Setup.exe
Size 124KB
Sample261024-stadhafb92
SHA256 255472e23f31eebe810f217212bf9caa39a30cac423dbe9893b554308da7db4b
MD5 fb47cb26a0c7480148a8d0c8f8e01be1
SHA1 bff6e89f3f724f79b136a4af7e6be03ff8d945e8
SHA512 59bf831d10f9b2787e8152c2eea2abc8d131a9b45986da21d0cd6b38b43907becad39c332ed2c251bb3c28c14bfa022a7635487230a1f8643fb7ac20f1518ee7
SSDEEP 1536:hqpq/ePFcK9o/ttHwGanUw2oKGPD77DOsU+e0Nx91VOco5X:hq/tZ9ARoU5oKGPDrOsmco5X
TLSH
T157C35A167AE5D8A6D8C60171D9628EF1476AFC23D9E09647F7807E0E3E30AD1DD26383
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Setup.exe

File Explorer

Setup.exe

.exe 124KB

Setup.exe

IMPHASH a7dc77a40ddad1ca9093babcb223b371
SHA256 255472e23f31eebe810f217212bf9caa39a30cac423dbe9893b554308da7db4b
MD5 fb47cb26a0c7480148a8d0c8f8e01be1
SHA1 bff6e89f3f724f79b136a4af7e6be03ff8d945e8
SHA512 59bf831d10f9b2787e8152c2eea2abc8d131a9b45986da21d0cd6b38b43907becad39c332ed2c251bb3c28c14bfa022a7635487230a1f8643fb7ac20f1518ee7
SSDEEP 1536:hqpq/ePFcK9o/ttHwGanUw2oKGPD77DOsU+e0Nx91VOco5X:hq/tZ9ARoU5oKGPDrOsmco5X
TLSH
T157C35A167AE5D8A6D8C60171D9628EF1476AFC23D9E09647F7807E0E3E30AD1DD26383
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13055

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVersion CloseHandle WaitForSingleObject CreateProcessA lstrlenA LocalFree lstrcatA FormatMessageA GetPrivateProfileStringA CreateThread WriteFile SizeofResource CreateFileA LockResource LoadResource FindResourceA GetWindowsDirectoryA Sleep DeleteFileA FindClose FindNextFileA FindFirstFileA CreateDirectoryA GetTempPathA GetFileSize CopyFileA GetPrivateProfileIntA FreeLibrary GetDiskFreeSpaceA GetProcAddress LoadLibraryA GetTempFileNameA SetFileAttributesA RemoveDirectoryA GetLastError lstrcpyA GetCommandLineA ExitProcess HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate GetUserDefaultLCID HeapFree RtlUnwind VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP MultiByteToWideChar GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetSystemDirectoryA lstrcpynA OpenFile GetModuleFileNameA lstrcmpA GetStartupInfoA GetModuleHandleA VirtualFree

user32

IsWindow UpdateWindow ShowWindow CreateWindowExA RegisterClassA LoadCursorA LoadIconA DefWindowProcA PostQuitMessage DialogBoxParamA wsprintfA LoadStringA SetDlgItemTextA SetWindowTextA EnableWindow GetDlgItem SendMessageA EndDialog PostMessageA GetMessageA SetWindowLongA GetWindowLongA InvalidateRect ReleaseDC GetDC EndPaint BeginPaint DrawTextA FillRect GetSysColor GetClientRect TranslateMessage DispatchMessageA MessageBoxA GetWindowRect GetSystemMetrics SetWindowPos RegisterWindowMessageA

gdi32

RestoreDC SetTextColor SetBkMode DeleteObject CreateSolidBrush SaveDC

Sharing