Static task
static1
Behavioral task
behavioral1
Sample
installer-x64.exe
Resource
win7-20240220-en
General
-
Target
installer-x64.exe.vir
-
Size
1.6MB
-
MD5
88e1850f9c5367d7837562ed9d751a8b
-
SHA1
5b65f2d76792ea21d06c13a862eee2b75e72aa65
-
SHA256
eaf478841191c228aac02af051a54b32ca7ba786a978d025b337a7ad112264f6
-
SHA512
f185e81b8ef43c336b2f1c2f004bdd683cc360047757cba5c0bf8a645637ba5b439bd303b6075670e5cc4793d4ce3b59e9606402cc03df8cec3ee6079cd4efe2
-
SSDEEP
24576:IB/2VURbbHgUbpoooooooooooooooooooooooooooooooooooooooooooov:IuU3HF1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource installer-x64.exe.vir
Files
-
installer-x64.exe.vir.exe .ps1 windows:4 windows x64 arch:x64 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 347KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.2MB - Virtual size: 305.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ