Static task
static1
Behavioral task
behavioral1
Sample
installer_patched.exe
Resource
win7-20240221-en
General
-
Target
installer_patched.exe
-
Size
1.5MB
-
MD5
d09d44a95532d96936a56e7d70b0b659
-
SHA1
6c60a72e6b436f58e19c07fac0a87c51025cb154
-
SHA256
f3e20762dd3e0bfb3b0b43d3df73f02f491ffc82af2d7b5abfac1134fb3bcf0d
-
SHA512
6e1ddb63f837bca2c9292522f3892059673d65a6ad0c04752e8afba07474f5a4411c9135826d36a993d16d2ec410c5a5b039ab9ffe8c31885502561c49842a66
-
SSDEEP
24576:BoSJMFMFTWSTXQWoooooooooooooooooooooooooooooooooooooooooooog:zJMFk+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource installer_patched.exe
Files
-
installer_patched.exe.exe .ps1 windows:4 windows x64 arch:x64 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.2MB - Virtual size: 305.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ