installer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

installer.exe
Size

4.1MB
MD5

52f3530687072a893f4151fc9cb69fff
SHA1

aeda89cf85b05908584ef37177cb59a4cfb01979
SHA256

02c7d58b74fb6853e4bd5413e9a175c542580767fea023da5ebf01668d66615d
SHA512

6dad25235c05d51f08bde63261e4b0910aa6eab7ba485fd89961d1c04545cb45e85f122f0fa0e4726ba99303405cead5a218af4f639cc6748d700b31ac5eb1b5
SSDEEP

98304:OGFDAqes7yV7i5lGfQO6LiZk2TYOfQKqzfE2Vnmq+aNp5f:OGlAqXyV7ivGojiZJTnqrE2VmqtNp5f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
installer.exe

Files

installer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ