Installs[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Installs.exe
Size

379KB
MD5

87e37569b3ca8cbd184c0b1e8e2b34f8
SHA1

684b805d98fa5841364df9ceeb1bfc8440fc58fa
SHA256

829ba8578b8ce3262c448c819a8c63fa9221a36edfe36290863ecc10706ecc80
SHA512

e8e56251ac437176fdd43cb35851ec3df8d63c35180b07c4202ce9a6f579b57340fe85b78b6b05c86e92c4be2a6e627604dbecfb15d788e8da96e7e980a79fd8
SSDEEP

6144:kB4ouFdXJAWXVNrB2isX6zWf0G+TP/XXVeXC8X3cO9bOXX3Go:kB4ouF7rJGOn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Installs.exe

Files

Installs.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ