Static task
static1
Behavioral task
behavioral1
Sample
installer.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
installer.exe
Resource
win10v2004-20230220-en
General
-
Target
installer.exe
-
Size
14.3MB
-
MD5
3a18e7dbec7f9f60cf3958973cc66366
-
SHA1
45b3f2987096aca936d2ebc9f09e10a300bad297
-
SHA256
a9d367de45513c7d431a2eb1c77d283a2f6c1ee672d0e8a1f64c3cbf88f031b1
-
SHA512
9ba9e19d726840fc57dc50d67dce9c305e5d8af1edccfd81ecc998a19fccafa980c169e9a0e6d6727d2ae80759fc0941bfa0751e1fea051a9da038c238712e15
-
SSDEEP
196608:gKKLm1e0L72mGi90a/CtCQW62LbPKBzytF7AMGoWiFgMKstrxOCpRq9Cs+lRRX:P+m1edptKHDc+t27jieMKyOuR8+1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource installer.exe
Files
-
installer.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 14.3MB - Virtual size: 14.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ