Installer[.]zip | Triage

Sharing

General

Target

Installer.zip
Size

15.4MB
MD5

84f9509d4d4c3689db698ee622daca3d
SHA1

f3291f7f48060f7add3a67b61fff2cfb7f9e2c1c
SHA256

85dac40d1f4110209bf105eea8d2ff1d5a6ff8693d1cc368c6fad42cf15942da
SHA512

cb4790e40677099525be1c3e0f9a72a9c1c58fbf6a5320bf5ea135a2619347884377242338b7fdde5c838a7ed1dda263e8b724115e5cab6166486b7250c2a95b
SSDEEP

393216:XcA9WL8GW/qjRjjT0qT3YNyNYZz7FDklJNO16YyM6XzeaFl85hB+yGG:XZ9dGWApTSzZP6l/O1yTFlufiG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Installer/Installer.exe

Files

Installer.zip
.zip
Installer/Installer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

,ferxY{n
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 343KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Installer/config.ini
Installer/datalaunch.bin