InnoSetup32Downloader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

InnoSetup32Downloader.exe
Size

6KB
MD5

3f89b2e1f20ba90b36fb9c5eddfc056d
SHA1

b116128b7807f1a10222323f7d54fb23b1df8545
SHA256

24dbbe1a9828a469ca983089d4eea725d2c5ce51ba1ef317fb9d58f8b9ab3c25
SHA512

c1eb92c73dd44f5233fe47228278e1803d962bb7cdba124e268c46b7d41b614ba4d870a88eb538598eb0e9b76f0a6a627eaddafc4fdd46fcfb351de027a6116c
SSDEEP

96:J6gkYs22Sci6aK4RZB5ZYiSnyeqoFCMC7thCc:if2bV6URfCyMFCn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
InnoSetup32Downloader.exe

Files

InnoSetup32Downloader.exe
.exe windows:4 windows x86 arch:x86

ba41acd43ab9b86ebac26ee964c0759a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

fopen
fseek
ftell
fclose
malloc
fread
free
strcmp
_iob
fprintf
memset
strstr
_strdup
_controlfp
__set_app_type
__argc
__argv
_environ
__getmainargs
exit
_XcptFilter
_exit
_except_handler3

kernel32

ExitProcess
AddVectoredExceptionHandler
GetModuleFileNameW
SetCurrentDirectoryW
GetStartupInfoA
GetCommandLineA
GetModuleHandleA

libtcc

tcc_new
tcc_set_lib_path
tcc_add_include_path
tcc_add_library_path
tcc_set_output_type
tcc_define_symbol
tcc_compile_string
tcc_add_symbol
tcc_relocate
tcc_get_symbol
tcc_delete

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ