KHYX Files Installer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KHYX Files Installer.exe
Size

644KB
MD5

6f47509a6638f5bf9e8f69565900092f
SHA1

18c8736f56a09200d581739911d83a422c5d017c
SHA256

28c013c14e328bdf0aa4934d7042878645bbbc089bb02409a7e468548f65c358
SHA512

3632614f7cc61ce52ede6fc2674cedb0464ec48da09cc62d70896b1f5972bcdb4c3a730b4657bbea56a4d7075d5cfe6f5d601703f2edce50c9ade1af50bea1d8
SSDEEP

12288:QpTYc09dbqt5e42YnFPIT0JRxQ24i6r0av5+ApSY9:QpTYc4bqQgpIwJl4i6PpSY9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KHYX Files Installer.exe

Files

KHYX Files Installer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\khyyx\source\repos\KHYX Files Installer\KHYX Files Installer\obj\Debug\KHYX Files Installer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 528KB - Virtual size: 527KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ