Static task
static1
Behavioral task
behavioral1
Sample
Installer.exe
Resource
win7-20240704-en
General
-
Target
Installer.exe
-
Size
245KB
-
MD5
4a80d86385efe840124362cbd01d9306
-
SHA1
644e2c598f6b39253ce50744550b43fbc2b88e26
-
SHA256
3acb8bd4982104f0f80391e0c1f9b104dcd785cd88693c03b473df0175c89d7b
-
SHA512
46420b8e7197b1320fc30807989d89b795f2c30aaaa0e026a35d597f90eae30133c6605f9942ed03fd91e6f35509c841f93b8d0ff112ad4b891d02a7752ad7cf
-
SSDEEP
6144:NIxxBaxHUbwtGwD6D4hvQZdYu1RPzHlvHliU7VMRIfeIq:NIzwGMFvYT1R7H/RIz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Installer.exe
Files
-
Installer.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 240KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ