installer[.]exe | Triage

Sharing

General

Target

installer.exe
Size

7.7MB
MD5

e62eae84b891e0ae57f7eabf1739cd9d
SHA1

ed768cd2b8a3181a1d3ee210ed804c2a32498160
SHA256

132ab67167c25f51fac3929b0369e815bfa7ea815ce9aed4f91e92defc680523
SHA512

f254c5d495992c10e6f53ff2ac08ce6dd8347a84a9b003db0eb6118e6f022d92a80653d6e159f155a940a43ab5d6c725ba8710bd8ea1b945991a63ec52b2f38e
SSDEEP

12288:P3KTJCYUQC6tJVvlrk/N9AyU/Gtm13KTJCYUQC6tJVvlrk/N9AyU/GtmM:CTo9d6tNrABjTo9d6tNrABr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
installer.exe

Files

installer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.css
Size: 330KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.css
Size: 330KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE