installer[.]exe | Triage™

General

Target
installer.exe
Size 3.4MB
Sample260319-vfcb2sg18j
SHA256 f67a9f79d2adf2ed0b74c2ba2f8b841d4b86830f648fa63b654839fb5eff2049
MD5 c19daaf9d543291fcc474480ce723b9e
SHA1 e74b0249e269a1e87170024e1dd61d0b54ec541d
SHA512 330d7ee5177ab2538cc0198c3f973ab23c4fadc1ed61fe019f43f8284ff6cc6b89de9fd0e60a226d70c13eccd7fd7cf0e0127c3e7002c5889debf93324762a4e
SSDEEP 98304:p37IS/jDHTD/9gSZdENqvIPNeqEWXc2yW2w:pRHzD9gnNbxyfw
TLSH
T12BF53328A1345AB6D8BF6BF410FC5D1910A22382B1ADC94B7D1F9FF908912F61F36794
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
installer.exe

SHA256 f67a9f79d2adf2ed0b74c2ba2f8b841d4b86830f648fa63b654839fb5eff2049
MD5 c19daaf9d543291fcc474480ce723b9e
SHA1 e74b0249e269a1e87170024e1dd61d0b54ec541d
SHA512 330d7ee5177ab2538cc0198c3f973ab23c4fadc1ed61fe019f43f8284ff6cc6b89de9fd0e60a226d70c13eccd7fd7cf0e0127c3e7002c5889debf93324762a4e
SSDEEP 98304:p37IS/jDHTD/9gSZdENqvIPNeqEWXc2yW2w:pRHzD9gnNbxyfw
TLSH
T12BF53328A1345AB6D8BF6BF410FC5D1910A22382B1ADC94B7D1F9FF908912F61F36794
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12930272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths