Executor Injector Installer[.]exe | Triage

Sharing

General

Target

Executor Injector Installer.exe
Size

2.4MB
MD5

3fd79871c74d377df8940f06ea8c7ac0
SHA1

301353d765055c09b2b893afa7b3d4c12f97ee2a
SHA256

ea9743d1ac71e9032addf63319eb9fd5f403d9d7687040c098524c0c85fe27d0
SHA512

9a18785eb56c4c50a172fa9e4348124fa301addfe88d8c9aa440ac2135155bca29294f7a484743e6f11692bf7c804c61708d0351e940cbb2001b6a871ea702e8
SSDEEP

49152:R/l6UIyFQzWJ/VIj2+9lKuvCb9SG4KCv/12DAN0rKOWN8O3b0/3GhiIAzP91:v6KOCtd6lKxbjMX14

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Executor Injector Installer.exe

Files

Executor Injector Installer.exe
.exe windows:4 windows x86 arch:x86

Password: 2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pCc
Size: - Virtual size: 637B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.|qT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.{0t
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ