Static task
static1
Behavioral task
behavioral1
Sample
1d86777fa82c74a6c6503bc9a254f98e52c1b2bb213318315be77e0fe048a158.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1d86777fa82c74a6c6503bc9a254f98e52c1b2bb213318315be77e0fe048a158.exe
Resource
win10v2004-20220901-en
General
-
Target
1d86777fa82c74a6c6503bc9a254f98e52c1b2bb213318315be77e0fe048a158
-
Size
564KB
-
MD5
087ac9b8d7c259ea7e4c6f9404b56b99
-
SHA1
2af874d7b9b31d83c7ff265c1ba93c7d2fde3e9a
-
SHA256
1d86777fa82c74a6c6503bc9a254f98e52c1b2bb213318315be77e0fe048a158
-
SHA512
3e0dcf7273f5d2c6d6ed82cf728359ff94995f5a0331f1e614a1a0683328a7a78dbab724c16318151876ad5b19be24fd43581453fe191ce66ef6cfb12a2b3b83
-
SSDEEP
12288:u+MDtCi7NFlZnNqZ9xGrLpZ0ZHEqtgb0UK:utplNFgxG5eZngb01
Malware Config
Signatures
-
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
1d86777fa82c74a6c6503bc9a254f98e52c1b2bb213318315be77e0fe048a158.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 528KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ