Install[.]exe | Triage

Sharing

General

Target

Install.exe
Size

691.0MB
MD5

00a76ad22e39b5c3e608d150f2bc3f0e
SHA1

6271ff704ac6d0d1832b1bb168326a5599f7ead7
SHA256

a5d43ac144de8d9ab77c4854715bdc6b03d00bd362c115eedd53b8242a0236ca
SHA512

33e98cdece9a6af7398131a2cb33d6cccaff7e113070099c1d6154a70a5af21c050f166c7cbfa54874b38976f329777d11b322ec883d62b4959d58e3344e923c
SSDEEP

98304:MSba1ebfe+7IA01oWDXUArOfDUucka/VftJAw3jgfw8zVkLzcev2G7:Bbf2AIoWrUo5kVagfw8asl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Install.exe

Files

Install.exe
.exe windows x86

71dac11c80b80d1f1b6b3c60718d874a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

CoCreateInstance

Sections

.MPRESS1
Size: 4.8MB - Virtual size: 10.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE