75a1bf14e14d6298f64e741f4638d4ee6e948897 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75a1bf14e14d6298f64e741f4638d4ee6e948897
Size

84.4MB
MD5

91ef80925474675a731fa459094e0caf
SHA1

75a1bf14e14d6298f64e741f4638d4ee6e948897
SHA256

e039cebe1a9a61d39377570688b588401b48431fb8aa8d612bd3160577dcfb5f
SHA512

187c039bfb204c048fc12b8e923056d0b84b278d74693249ea9e9d4a05349a7c40f959723c80da71065c97dce2292790a3e8d7bc48e91a65aba16b152a16871d
SSDEEP

1572864:V58R413G9pLDTSgWTQlpXDhPIaXuwduseenSA9KUy70+tGZfcvGuo0YRREWMJ:VX129pTXNpX9ZXuwdxnS0iv60vGuQEJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75a1bf14e14d6298f64e741f4638d4ee6e948897

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

75a1bf14e14d6298f64e741f4638d4ee6e948897
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

X:\EntrSCO_AppSupport\OMASUPRT6\Test\new driver testing\RangerForPanini-VisionAPI-4.9.1.0-2.5.4.0\f.Fiserv_RangerForPanini_RR_v2.2.1.1_SCO2\obj\Debug\Fiserv_RangerForPanini_v4.9.1.0-2.5.4.0_RR_v2.2.1.1_SCO2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 84.3MB - Virtual size: 84.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ