e60c79a783d44f065df7fd238949c7ee86bdb11c82ed929e72fc470e4c7dae97

Resubmissions

03/09/2026, 13:03

260903-qapyqstwbw7

24/01/2022, 02:45

220124-c871baafdm10

Sharing

Copy URL Twitter E-mail

General

Target
e60c79a783d44f065df7fd238949c7ee86bdb11c82ed929e72fc470e4c7dae97
Size 1.8MB
Sample220124-c871baafdm
SHA256 e60c79a783d44f065df7fd238949c7ee86bdb11c82ed929e72fc470e4c7dae97
MD5 186b2e42de0d2e58d070313bd6730243
SHA1 f79da0d8bb1267f9906fad1111bd929a41b18c03
SHA512 1e9e2d897ba1e1b7b8ce86d354e0f7342141353391fc81b3962117bb02970fb69977890bc3426c435e6c358fee049b57af06bee398fd4d10b2864ac6cbcece09
SSDEEP 49152:PhKVf2qaJYNf/pz03jJT+6cY75ZLqaMsDp6ro6s:gVfro4f/103jx1jZLLzp6ro6s
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2

File Explorer

e60c79a783d44f065df7fd238949c7ee86bdb11c82ed929e72fc470e4c7dae97

.exe 1.8MB

e60c79a783d44f065df7fd238949c7ee86bdb11c82ed929e72fc470e4c7dae97

IMPHASH 34791a1ad0a42b816d48d1d1c182fe7d
SHA256 e60c79a783d44f065df7fd238949c7ee86bdb11c82ed929e72fc470e4c7dae97
MD5 186b2e42de0d2e58d070313bd6730243
SHA1 f79da0d8bb1267f9906fad1111bd929a41b18c03
SHA512 1e9e2d897ba1e1b7b8ce86d354e0f7342141353391fc81b3962117bb02970fb69977890bc3426c435e6c358fee049b57af06bee398fd4d10b2864ac6cbcece09
SSDEEP 49152:PhKVf2qaJYNf/pz03jJT+6cY75ZLqaMsDp6ro6s:gVfro4f/103jx1jZLLzp6ro6s
MD5 SHA1 SHA512 SSDEEP

windows x86

NSIS installer

installer

Minor OS version

Major OS version

Entry point

31519

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

GetTokenInformation OpenProcessToken GetSidSubAuthority

shell32

CommandLineToArgvW ShellExecuteExW

shlwapi

StrCmpIW PathFileExistsW PathAppendW

user32

wsprintfW

kernel32

HeapReAlloc LoadLibraryW SetEnvironmentVariableW CompareStringW QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep VirtualAlloc MultiByteToWideChar VirtualFree LocalAlloc GetLastError GetCurrentProcess ReadFile CloseHandle GetFileSizeEx CreateFileW Process32NextW Process32FirstW CreateToolhelp32Snapshot GetSystemDirectoryW SetFileTime FileTimeToSystemTime GetFileTime GetModuleFileNameW MoveFileW DeleteFileW CreateProcessW GetStartupInfoW GetCommandLineW SetErrorMode lstrlenA WideCharToMultiByte GetFileSize WriteFile RtlUnwind RaiseException EncodePointer DecodePointer HeapAlloc HeapSetInformation IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError InterlockedDecrement GetProcAddress TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW ExitProcess InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree HeapSize GetStdHandle HeapCreate SetHandleCount GetFileType LCMapStringW GetStringTypeW