Installer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Installer.exe
Size

623KB
MD5

3fb799f733178e70fc988a5adf9f2a69
SHA1

f9df2d2ff42b56d5fbde4eff4ab6856d293fa5f1
SHA256

26ed403b0b5dbc6596c15fff5780f8cd3103c7b9a4e99d4ac405be3389b25058
SHA512

476a7a55e7f491269dc51877e31aef279f81fdaf5b010d0c902c709d4729064c31c93557dc88fe46579c2ae942288a01faaeb51cfd433c8ffe33ac6ebd58cd92
SSDEEP

12288:06n1BPP0I1AXN7Fl6XlmszjT3T0+Y3034ilbR/yAzSwzriMbPiMV:zn1ZP0d7u4sTdF4YdyYzxb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Installer.exe

Files

Installer.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Repos\invise\Installer\obj\x64\Release\Installer.pdb

Sections

.text
Size: 544KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ