installerwn[.]exe | Triage

Resubmissions

18/04/2024, 18:43

240418-xdeeqsch4t 10

12/03/2024, 17:54

240312-wg6gyshd77 10

Sharing

General

Target

installerwn.exe
Size

3.7MB
MD5

d4a600901a6a14b13b019b17a2101aba
SHA1

bcbb3a94fc0c8560580f32130f6f10e535ae205c
SHA256

c35426dfbfbf28bf2f408ed265f1a248d45c27d439f1b913fd7d4da299c284b9
SHA512

99b2573580b90eaf190818fad8310365c508468cbaebe197860ad8e037e72f604784e157245fc20413956fa6c55bf4643e3ebf279190324fb3eea7c7ad59091f
SSDEEP

49152:a2C+Jdpu3bzRoFQBHHTRdGwdTNA3qENNLZsDlZbMSlraAyuO0Bm2rZKHt:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
installerwn.exe

Files

installerwn.exe
.exe windows:4 windows x64 arch:x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ