Installer-Wizard_v1[.]4o[.]7n_patched[.]exe | Triage

Resubmissions

26-06-2023 16:03

230626-thnmesad46 10

22-06-2023 21:47

230622-1nf8vsbc4t 10

Sharing

General

Target

Installer-Wizard_v1.4o.7n_patched.exe
Size

151KB
MD5

3950c1e15b18007b3ee172a178fda0f8
SHA1

73345e1d1f324d93874e7de3bde75528ca30983c
SHA256

8ec6230482badb0211902e2d2e563a9b878f47ba7ff4fa22c4bbb15426a9a99c
SHA512

9575cca3db94074c1acd59c4aa7bf41663f6db16bd3b61a13cc767ac3a2d841323d285102a3807c6a7387cc49690ddea78dd0692dee14717693d3144089ad7ad
SSDEEP

3072:mgGJB5QpCwS40nLbL7kRDzz8LhAsT+Egm:mgIBOpCLXL7kZz8Cm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
Installer-Wizard_v1.4o.7n_patched.exe

Files

Installer-Wizard_v1.4o.7n_patched.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 74.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ