Agent_Install[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Agent_Install.exe
Size

9.7MB
MD5

b947973b6989db485d5d2255cd4a620b
SHA1

abe6d29065276c66fffe1156e6488673ba873e44
SHA256

68abc0ea4563ecea3311ea974bd249b70ecf7aab51a174bf3f39116e9d5c56ee
SHA512

f98acb9e61f724f8fa2c7c81885bb96e83fe9451352dcd6c8d8e1e7a3414b32412ebe1ad6403a6841d4400a3dd0d83d457e8ec68a8131a9d07ba26d3bb100cb3
SSDEEP

196608:I10H2BgDy98POpILqlkXmxwTitsopkt3vaGdU6d2ZYExj0jSgi1:I10H2BgDy98POpILqlkXmxwTitsopktK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Agent_Install.exe

Files

Agent_Install.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.6MB - Virtual size: 9.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 223B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ