4e805364ca6c6947ad0680e62cf37440 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e805364ca6c6947ad0680e62cf37440
Size

1.7MB
MD5

4e805364ca6c6947ad0680e62cf37440
SHA1

eaf60f749da6555f7f71ebc53fbacf7a6a6a28d6
SHA256

6d4d612dd2f8453f0870232a7e4080b2ddf5854f3b310687544a1834c5046f60
SHA512

f1d80e9f4aead84727ecea8ba50ce57426f9911b0ce253135ec1c0ab812fc0be19d43242c3e48b32af5b4820d5f738b4db7bb02d37c83826d67bd6048ca36d70
SSDEEP

24576:PBKlbcT7lWFlMLqoc2nt8efOoBNnwoGEqrQ+wkUCowDfswOSZqkJSV4kUxQjJ:rGoc2W4MvEj+wkUm2SZpo

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

4e805364ca6c6947ad0680e62cf37440
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE