Static task
static1
Behavioral task
behavioral1
Sample
new_installerN3.exe
Resource
win7-20230712-en
General
-
Target
new_installerN3.exe
-
Size
662.0MB
-
MD5
dc65f5dea7e1b60ca6521f04c6b223f2
-
SHA1
cf104b70b7c6ffcd38352b9a1c65f4d10cc2cb07
-
SHA256
78d830e27e0fa5799714715c88ce9c6f1bdeaaa43e4cd85d88fd20264b63b727
-
SHA512
899a6de3d011d1a0c93b2a2fc7e9e15d31ae3152d18ad13fd715f8e9a37ad34bd467079285365a046dba41bf1332455d91b35ab663b70c0416b279eb195c22e0
-
SSDEEP
98304:zeGLgvf5P8QViJsLONjEApe96eBlzSVk6:CGLQJM/5EAOPSVk6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource new_installerN3.exe
Files
-
new_installerN3.exe.exe windows x86
Password: oiwioecra
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 658.1MB - Virtual size: 658.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pvzmmuuc Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
echinrgg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE