Roselia Installer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Roselia Installer.exe
Size

262KB
MD5

27244193734bfbeee68e0bd88ab37e19
SHA1

5f4a33a333e991f555ad92809201445428022451
SHA256

1c0f3b57d27a3750c26e7e3839b7f11fd3fccda2fd779982cc65ddd6181a027f
SHA512

77257850c403fc88540f3a100ea436b12430b96d0c0e32ecc03d332ce413bdf4710f439f2f1b85c25bb358fe6419f0479367adac19f85096106b05a62d99a34f
SSDEEP

1536:dj8W1RIqDuWIQC8rDdRpOyoJyg1K7KnU5AY1EIqfu1IQL:djR1R/Du0CCRRRoJyI8AY1EzfuhL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Roselia Installer.exe

Files

Roselia Installer.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ