CryptowatchDesktopInstaller[.]zip | Triage

Sharing

General

Target

CryptowatchDesktopInstaller.zip
Size

16.2MB
MD5

4cd7a3be0252c8b3b83e8fd03d382af6
SHA1

d6b0eecd3d7e391fdcd5e2beb54f8748121f68e6
SHA256

0170176a536d90e6e43f6caf5ebf0f28418c8c2e72a1dcc91f744f82ddfe4366
SHA512

98c50c822fb4fa231918a0f75c241293b21b6990838cffdc4f9547a92bd5fd624a903c0cb887c8b21ce981007ea4394bbd96d0efe9e970d6e67661ace49f4958
SSDEEP

393216:cgpfb8mqo5sZyTtTdl0FvgIBrSDqx7FHpQ+cF4iW72U:cgpomqotTtIF4IBrS+x7VpQ+cqie

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CryptowatchDesktopInstaller.exe

Files

CryptowatchDesktopInstaller.zip
.zip
CryptowatchDesktopInstaller.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 683.3MB - Virtual size: 683.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ