installer2[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

installer2.exe
Size

16.2MB
MD5

5aece647826a6f39a8bb8b17cd4186d6
SHA1

446ba99bb2ca06fed22c0019a5e8671e7e3f1e62
SHA256

aa212361c56bc3c307df12dd1ef574bb21c03f28a3cacc94a5a683d217b27ebc
SHA512

3997bf2eed4ebd50d7ba558bfd0c54222b53e6f1776e1499edc77de4ee8075bb0b712fde9a9a4c287f964bb86fcc3bd99f78e3012d2c7870b38810821939e9f4
SSDEEP

393216:A/53AXVAd5y2XjI4j10HlDR4K55RUGOtdMPFSeUP:GqUy+j1a9yPkFvU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
installer2.exe

Files

installer2.exe
.exe windows:6 windows x64 arch:x64

c7b7b517cf49febe9724e1b897a98881

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

__C_specific_handler

kernel32

DeleteCriticalSection
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M2@
Size: - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.v;2
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.'xa
Size: 16.2MB - Virtual size: 16.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c7b7b517cf49febe9724e1b897a98881

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

Sections

.text Size: - Virtual size: 46KB

.rdata Size: - Virtual size: 17KB

.data Size: - Virtual size: 5.2MB

.pdata Size: - Virtual size: 420B

.00cfg Size: - Virtual size: 16B

.tls Size: - Virtual size: 16B

.M2@ Size: - Virtual size: 7.1MB

.v;2 Size: 2KB - Virtual size: 2KB

.'xa Size: 16.2MB - Virtual size: 16.2MB

.reloc Size: 512B - Virtual size: 288B

.text
Size: - Virtual size: 46KB

.rdata
Size: - Virtual size: 17KB

.data
Size: - Virtual size: 5.2MB

.pdata
Size: - Virtual size: 420B

.00cfg
Size: - Virtual size: 16B

.tls
Size: - Virtual size: 16B

.M2@
Size: - Virtual size: 7.1MB

.v;2
Size: 2KB - Virtual size: 2KB

.'xa
Size: 16.2MB - Virtual size: 16.2MB

.reloc
Size: 512B - Virtual size: 288B