Installer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Installer.exe
Size

8.7MB
MD5

8b437bf3a98b2a413dd15015c72bb0b3
SHA1

36ca5429b6af5d3f5e596e45e46d7aa1683a41d5
SHA256

90774909f64284721b54f4103a9c4eda82a4c3f12a646fca11afc9a3d983fb0d
SHA512

790b8cd451e34ae20b351970fe6032c1b47bba73169065e85b35cf69e7b713bec7c4fe5f2a42085a708f080af8f348f8ae1f1985b9acb221b026969484328d17
SSDEEP

196608:iti+JRJTJ/qVvqVOqVoqVHqVIqV4qVVqVAqVgqV6qVjqVTkZJZE7uWEuvzt:t+JRJTJ/qVvqVOqVoqVHqVIqV4qVVqVM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Installer.exe

Files

Installer.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ