Installer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Installer.exe
Size

182KB
MD5

dfefc0cbd0ede8d61b241653fbd69f3b
SHA1

2a7ab8c585ea83a0300df7bb1aa97820bf321ea7
SHA256

81807f4bda1873dcb1f0769a5cdf7e49610d0d3563eb8cb48fdc651f5b01365f
SHA512

8278e472e9c30cc6e40fb97800bfcda9315510e2822f6a986173a0d1a8099c90326fcad1c7d11333a72809d80e930ea8fd52ec597f913b952d6772a9678af8f8
SSDEEP

3072:kVclm3iehFpmw8ZFcdG+Gr5CTqex/nQbfKhWj0paZE2nqkUj27vCfvw:kVdyel+Fco6mftZE2nAS7vy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Installer.exe

Files

Installer.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ