400000[.]InstallUtil[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

400000.InstallUtil.exe
Size

589KB
MD5

d2d6526c3a1dbe8fdc844759ef9954d0
SHA1

e2bd814cc566fb8c0658c2f7849010c08652847d
SHA256

cf10077906a535826ee41f3e13b07c45437d8bd506d1e0372c5579a24c622f7c
SHA512

926aefbfd130e4a2c78eae4241a75d442c0bd37bd750b17d19e5002abb55e9bce9b6c1c6a3399c098b6bb02ac8fe95c27a4b671374a538f04380ef1cfae4a66a
SSDEEP

6144:N1RLHK5f70YHEjrt/EuJElcWhqRDRw6aDBh2TSSbNrAng1c8v50nxX:ZJBrOOWcRi6s2TSSbNrAng1c8hgx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
400000.InstallUtil.exe

Files

400000.InstallUtil.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 222KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ