FlashpointInstaller[.]exe | Triage

Sharing

General

Target

FlashpointInstaller.exe
Size

1.9MB
MD5

fb1935a769f0b313db074240f9471481
SHA1

afb65c7600a3d2acd55caae5992c04f26cffe335
SHA256

3b49c90ff2571e045cb5fd985b7397b37d7bb83e58729a0b4e44b0e5543135df
SHA512

b3a36f7a5ab8a6c27f6e035e14fe166ecc21e070f9ec57b5cbd721e6f2e53d087898f09ec87476792fc965923454cb6494dac48de8aa21249efb3aa84fd69193
SSDEEP

49152:QzL5eKJmNVJsq4+prB0k80WgvnTYanse+PHFaD5Esn:3KE2q4+prBz5TYWsBP4D5EM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FlashpointInstaller.exe

Files

FlashpointInstaller.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Coding\GitHub\Flashpoint-Project\FlashpointComponentTools\FlashpointInstaller\obj\Release\FlashpointInstaller.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ