Installer-InstallWizard_v8[.]0z[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Installer-InstallWizard_v8.0z.rar
Size

59.3MB
MD5

0a17f636926d4d5c42884a0e3dd8573b
SHA1

83e9d92c7a20d17797287bdfd42172f3ad34465c
SHA256

1318cec1d0dfdbb9c2535ddfcc629b6b8dce4cc3a99400629eccd8a568c591a2
SHA512

2ece5dc1c78c566549f45402600cfa072a89ff70337a655ca5800a71f00df8e7a04518a4c3ecac17011e27f8888d4ffd04ec6983a45f3290f93946cdd627b515
SSDEEP

786432:m46Py6bl2p96nrTdRRC1qi4irV/O+nDjANsgM0SPB5JsLFvnzGeCUXZCxZRTASLa:jd6JM6fd/X4/130cA7j4JXL5LG82

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Installer-InstallWizard_v8.0z.exe

Files

Installer-InstallWizard_v8.0z.rar
.rar
Installer-InstallWizard_v8.0z.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 456KB - Virtual size: 455KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 624.0MB - Virtual size: 624.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ