Install Transformation Pack[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Install Transformation Pack.exe
Size

503.5MB
MD5

b79c78bf7c84aa01a89dbdcbd890a0f4
SHA1

dc4c5f8fac12ab491599a419c038b766ba70b51d
SHA256

7fe638fd27ae9bbad7d2ed9a64ba279e07c1a3f8f837099c67c76e45b4ce37d2
SHA512

0c6e5bd8e1c1fdec6260d8938f42aa9d306c03e275361e6387a529006995100eb0acf93efba35184030df0b7f7e0c32cc889b7bce5a284d21433e5fdf4fbcdd3
SSDEEP

12582912:n/gni9ntj+0Pde4kDJ3WBk5gbTLt1Ts1EC:n/wi9n5Pde4kDNDgb/t1TLC

Score

1^/10

Malware Config

Signatures

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

Install Transformation Pack.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 503.5MB - Virtual size: 503.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 205B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ