Static task
static1
Behavioral task
behavioral1
Sample
installer.exe
Resource
win7-20240221-en
General
-
Target
installer.exe
-
Size
705KB
-
MD5
c1c35ccfad006816ccb5b0a9fdb10844
-
SHA1
99b2098dfbe4aaf9f44ecdd446213cac015881a1
-
SHA256
4e7c7656e9b4cf09a42f6cde00daca9ed122aa9e711655132d6837b5e5d4b0e1
-
SHA512
3227eca51d34f47a5321f0576b7c907d1f87874f9a74f84b87ff0a4904ef8e01488cd2daf730490021f471dfd28ee68b9ecbcbdeefaf27039011956fed939678
-
SSDEEP
12288:ZLYiKpH7RB2xRja/DHF3lqBpAYg5Mki8qOl9G1ABXVK79PLtAEe2tj1ecNI4GVhJ:ZLDg9QRq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource installer.exe
Files
-
installer.exe.exe windows:4 windows x86 arch:x86
Password: 2024
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 702KB - Virtual size: 701KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ