Static task
static1
General
-
Target
SRMLInstaller.exe
-
Size
4.1MB
-
MD5
95ab0691cd0c79b17687639eecfeb961
-
SHA1
12b5df1a02931fef3ef260a0b0a1b6b47fe64f06
-
SHA256
0b9c7738a872bdda3f4e35d820f962b552505d838b63dce1dae3597e6aec4de8
-
SHA512
6bf702cb20b950eec743104a32bc773898b59bb3b93e9f9e2e8d8bac648b2756c5380ee5f183f36932cae08ba6d4307c2f5895182a43c76ada23b2102ddcd25e
-
SSDEEP
49152:luSPHa8zQN3xnpJbC8VLBJjRaDVr1taArvll7ZVWwiw4qeszRqvdQy3gdbLjqgvG:lTPH1ZVRtvtkwiwJUO6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SRMLInstaller.exe
Files
-
SRMLInstaller.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ