NavaInstaller(SILENT)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NavaInstaller(SILENT).exe
Size

9.6MB
MD5

324ea2073247bf177267a77a00347fd2
SHA1

66af05b663c6af495a7806c02a04e8a73d95f3c5
SHA256

ba96d50083e90591060d1a69144ab0d6f5eca056c1c869a155a751ffc3922b50
SHA512

22e9bcfe67a2218815a2df04dc2b87bdd6a897f0e9751f6a08ea424588543c97945073e062164a8f8fcb1dc7222eb167aa57601ecc569f9a28adbb8104b64274
SSDEEP

196608:CtqTP1ErBwMQjd1YTHdmpCP2PVgP/acIE/xQ0zyZejVk+YzbYdTk:N1E1+dYx6OP9hdyZwV4z9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NavaInstaller(SILENT).exe

Files

NavaInstaller(SILENT).exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ