ZoomInstaller[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ZoomInstaller.rar
Size

300.3MB
MD5

b981755aa962738177f43e8d6c34f1cc
SHA1

6d77832851070e11f4d46e1c76cf1c48d9f5c7ff
SHA256

7ec34974bbd65ec95a3cacc228e6d929d6706942431be2bb6b081cf79eb4c0e8
SHA512

3387dc5434722415a306cfc1ac6859be692a8b2a9159e24f2e55277196dedd2e1a673b0ef302ad78e392dee52ee3140246804f4e9b9aeb1b4820bdabdc302f89
SSDEEP

12288:MpwGp1dO5yNUcVxQOkYc/YMlRX8Hea0124K18EUCcFvOKcIGrPZNzB7xww4K:cvww4K

Score

N/A

Malware Config

Signatures

Files

ZoomInstaller.rar
.iso
ZoomInstaller.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ