Avast_X64_Setup[.]exe | Triage

Sharing

General

Target

Avast_X64_Setup.exe
Size

2.1MB
MD5

7c047e3938fd0922d33cb2ef46ee7442
SHA1

6852d87e7c0d31a7f18a1940e2af97bfbc631020
SHA256

ce2a840634046423c86396364f804dc2a5a49b184325453100277d2c0e5426b2
SHA512

a81af4abca655e13c868c533bd484811f10515a21f6e0d13a64fc3a8e7d1d0cdbcbd5f861361782a018663db81185d96dfe831feb5e1f052154c6ef0663e4058
SSDEEP

49152:AlxWDZw0lpTzRn6BFjwGYLb2zlxWDZw0lpTzIlxWDZw0lpTz:AlxWDZw0lpTzRWY32zlxWDZw0lpTzIlK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Avast_X64_Setup.exe

Files

Avast_X64_Setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\User\Pictures\RunFile\RunFile\obj\Debug\Avast_X64_Setup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 450KB - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ