Install[.]exe | Triage

Sharing

General

Target

Install.exe
Size

276KB
MD5

41d1944db427ba8c989c8d99c5ac7199
SHA1

e94170b4052dd3548e65ea3cad537b8c4eb7e350
SHA256

d648c12d82196bb3d320ced232cbb0ce2abc54e4d23407f8ce954df0979d9aee
SHA512

1e4c70be3397296e6083a1b93a31a00278c6fa234ca1f54ece76598fd8b77537a41d20424b0b96bd681afacd441faf4c9252483d979d147d14fc38cb2ebb5c56
SSDEEP

3072:Gh+pXHYRlvAkeTf0IWSnJaOAwOVjgHT2A6J1zLz+ytHA32Cf58ljVMyBEpXHYRK:Gh+pX4Rlmf0ItnJaOVOlBd17gVRpX4R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Install.exe

Files

Install.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\KrisVandermotten\source\repos\PaintDotNet.Effects\Install\obj\Release\Install.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ