Install-x32-x64[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Install-x32-x64.exe
Size

285KB
MD5

fb352738e18a33cc16af28bd07fadd3f
SHA1

7173ccad22de47a6f1dfb2de40abbb66599036ee
SHA256

0ffedd2a1bbad0ba69ad0331f0fc542a2471ab374a252659ba219a9f0b47a945
SHA512

915c414935119ae374068f4fdafed724ed6ecef482ff9b8afd9296acfe8870defe94c684f7718a8795b49bb23d158871d72033781457783cd8119bb738d68239
SSDEEP

6144:X3b0KovpFzbRMFSrdGuJVqdTdd2HqV2GtFfBSpwyf6IMZy3Uh5iBu:gKipR2c5V+tV2GtFJmwS6m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Install-x32-x64.exe

Files

Install-x32-x64.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\3xszefq1pc9p\obj\Release\doX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ