165236448_NotoriousInstaller[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

165236448_NotoriousInstaller.exe
Size

12.6MB
MD5

80a5671ff62a490d19bf606fc2f2336d
SHA1

fd06d5b3aa066313b2bfc438a16f9cd9c9ab2d8b
SHA256

485f86c0612fa1c630639e2bc075bedd2e4c763deb5c27525e5e657d73b15aae
SHA512

6ae9cde3d1aeda93dc6fd1c2b6fb4a94c7e0ca67971b92a5c15a0c9b8d79a7858b3308087c01a4b17e7a0b63c366181d2a1ac67ddff0e1a77b475eca7d97d6f4
SSDEEP

393216:MYmgLxwtGpsw4qk9eaxcXjqy3Am/Z5+wM+FK:uOytxnzQaxcmWvK7kK

Score

1^/10

Malware Config

Signatures

Files

165236448_NotoriousInstaller.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12.5MB - Virtual size: 12.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ