Static task
static1
Behavioral task
behavioral1
Sample
installer-bundle_patched.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
installer-bundle_patched.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
installer-bundle_patched.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral4
Sample
installer-bundle_patched.exe
Resource
win11-20240419-en
General
-
Target
installer-bundle_patched.exe
-
Size
1.9MB
-
MD5
32950836cc2e22e267ff32ac13facb3a
-
SHA1
91f6a85bb173c5e998453e9ce1cddb506e09c122
-
SHA256
f32c67f6ae876fbbe54ef2158b5041a3b00828ee6f7142c3f6df49ffdec66cee
-
SHA512
7bf3640b78671abc18ba209fc5b584ff16c694c250476e33fd094f94af09dc652afe2c99f5c81534d1ecdda4da181a3c8e8b348cbaa38d90c72db97da964845b
-
SSDEEP
12288:0EoiX1Kmni0TM+pAQIyOjltNFQi3U4ib08wvmHs2H0eewSh6T/bqGBFtdHiNF+D:0EBKmn5T1A7lE9I8wOM2r/qGBvxiH0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource installer-bundle_patched.exe
Files
-
installer-bundle_patched.exe.exe .ps1 windows:4 windows x64 arch:x64 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 727KB - Virtual size: 727KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.2MB - Virtual size: 295.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ