installer[.]exe | Triage

Sharing

General

Target

installer.exe
Size

7.3MB
MD5

f568881d03a342f371433cd0f19c5e67
SHA1

fb1cb21f48c2dd3ca283af45134106e4b648abe2
SHA256

238bd3ace87618aadbab44eaf0891156387a8f30b84ba42b8d1d7e3f896a3454
SHA512

1b0f792a16005c72b9a53d82a9b1f0786803067338074392bc698331061ae11c5b2a91a1f8e2e68296994e5d6f193470d558c001746e3df31ab8408c1a177449
SSDEEP

6144:NR8UlY4LnM4ffwp1fpeQREpAR6ZSU8dPbnWE8vvaLB/YIIaUXoTdp8:NRPK4LnM1veQREe7C1Xa1/j1Tdp8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
installer.exe

Files

installer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\1byqsbor18feml\obj\Re\ease\gqa.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ