Artemis[.]Installer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Artemis.Installer.exe
Size

4.5MB
MD5

968df94da9dcd5970806909fe77f4059
SHA1

65a03d59f90a2fd65d9c10a2b464db1fda609f76
SHA256

a9fed03197f416cc6c700aed276e908bf9454fffc5b5ed29ea13815d3666d57a
SHA512

110a2e9be1494e9f341ebb9a8f3d503f6985ffad6a58e468b5e6840b019b5858ef1f1b13345da10ba8b6c60dfa1ca21fc724de79d468dee4942f765cd47e81d0
SSDEEP

98304:r1Sa8fZRyP4k6SnGbXeEmn42PlEbp2WxO9YAnALVwC:r1Sa8fiDQXeEz2t2smBLVw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Artemis.Installer.exe

Files

Artemis.Installer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\a\1\s\src\Artemis.Installer\obj\Release\net472\Artemis.Installer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ