Setup_Installer_32x-64x[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Setup_Installer_32x-64x.exe
Size

325KB
MD5

44777dddfe086f025c456655d458dff8
SHA1

0e13adf7fb567d53646666262e180b90bb813bd7
SHA256

5ec7ba267c1f2ce602e5810c470a64b560cb7f520392528c9786f23d2d41fac5
SHA512

dd820c72b5ac0f3bdb94ac1ee6dee70a05bbd79579d54b09b9b1c1e726574556053a9e55a17919fd3c25a58233724b4e698096a207816c20b31851f233a3c6a8
SSDEEP

6144:LjPAS5q92Nawf9BpeBORHwemWjyF4WltPhZyQjpTOuj1kIstx:f4G9F20QemWjGHry0UkLs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Setup_Installer_32x-64x.exe

Files

Setup_Installer_32x-64x.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\sal9u7y17nn4np\obj\Release\MSG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 322KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ