inst[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

inst.exe
Size

657KB
MD5

b407b7eca5e883eb69aa4f02d57f4b73
SHA1

a35d188f7e02d2739eb777554739b79946061c0b
SHA256

f433b006ba6bd73ff5862b598ec25c5afc411584261db051e624d3796f9d5959
SHA512

6a9f5b091f782f357f4d18820d3e1b340825d43ffa0dc17b9b22dfdc4954f2155f908b9d2742d7a71ea232c7f7f58c3669940b4fb903052699a1bbb146a43f83
SSDEEP

12288:CE6nhFrp5UJCNkwoR9lQXNB8uHpZSiQ+szbm8WNmhLDt3qdvNw+7XkyAuVr7l8mL:CE6nh5UclzXDHO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
inst.exe

Files

inst.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 654KB - Virtual size: 654KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ