Executable installers are defective^WEVIL (case 1): putty-0.68-installer.exe

Posted by Stefan Kanthak on Mar 05

Hi @ll,

although puTTY finally offers MSI packages as primary installers on
<http://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html>,
they still provide an executable installer putty-0.68-installer.exe
(see <http://seclists.org/fulldisclosure/2016/Mar/12>), still
created with InnoSetup.

putty-0.68-installer.exe is but a DEFECTIVE “portable executable”
image (see DUMPBIN output below)!

JFTR: unfortunately…

Leave a Reply