Installer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Installer.exe
Size

2.7MB
MD5

95bd63c5f7c6cc0c2d0f20e179fd9a86
SHA1

7ea5f353767a63918202d3a5fa0facc917a4aec6
SHA256

e9740a3a34c668b5c5aa454b3c90d64fbba243df162edb1efe5721c365d64bdd
SHA512

fd5a5faf3747c848f4e69d884cd380ac3d6d3320b2426d7579aa94b6c8a8ddd996efd2fd20066649117ef768a273d6dcc7de83b4cee1e88e7487c9cc129d685b
SSDEEP

49152:3mHd/TB51rxqnMvTEvrhae8Jdx5xMiD1AA8NRJFJOg:3V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Installer.exe

Files

Installer.exe
.exe windows x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ