Centrifuge[.]Installer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Centrifuge.Installer.exe
Size

24KB
MD5

1e93c1d3b32e1211ba7124bdd5083e55
SHA1

b9b6d2de9bce46fb592fb72d3828fce5f449425c
SHA256

344240196dfe03ee46b30660c857188e40aaa0831e6b4e12a77c06d078976ff1
SHA512

2e9e6f12d12250d44f45c2ca01c49a2e74dff1c4bdb70387fbb917dbefc0d56000e5c111d726360ebc4090a74f44e0c877952c3a56056182d4bc89ed24fecd39
SSDEEP

768:DH6996xiQDgF4ppls1eUbC1oZrApVePUPzVs:QExikgF4pplso1UcpVZVs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Centrifuge.Installer.exe

Files

Centrifuge.Installer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Codespace\Dotnet\Centrifuge\Centrifuge.Installer\obj\Release\net461\Centrifuge.Installer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ