2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b

Sharing

Copy URL Twitter E-mail

General

Target
2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b
Size 548KB
Sample221002-g2egmsbff4
SHA256 2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b
MD5 706db3cc08664453d03ad47973b64d39
SHA1 5a7c51c93f00ecf716b7bc88d7e06d57ca131f4c
SHA512 4147437c66680a6a8b1390eed487fe1e85ac110112582fba4b397a305fdf9c43faf53c8d83a5c0d514db13acf6dfdad82eac820ab4b8889a545bc4af856b3333
SSDEEP 12288:pWf213EgbX2z0rGQg+vQlZZhPQIxVTFm2eDf/ElB7R:pRbFGQgplZZtQI3E2eO9
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_1

File Explorer

2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b

.exe 548KB

2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b

IMPHASH 4a9446e5cc2412c6405cea69dddb93be
SHA256 2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b
MD5 706db3cc08664453d03ad47973b64d39
SHA1 5a7c51c93f00ecf716b7bc88d7e06d57ca131f4c
SHA512 4147437c66680a6a8b1390eed487fe1e85ac110112582fba4b397a305fdf9c43faf53c8d83a5c0d514db13acf6dfdad82eac820ab4b8889a545bc4af856b3333
SSDEEP 12288:pWf213EgbX2z0rGQg+vQlZZhPQIxVTFm2eDf/ElB7R:pRbFGQgplZZtQI3E2eO9
MD5 SHA1 SHA512 SSDEEP

windows x86

NSIS installer

installer

Minor OS version

Major OS version

Entry point

13006

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle SetFileTime CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep CreateFileA GetFileSize GetModuleFileNameA GetTickCount GetCurrentProcess lstrcmpiA CopyFileA GetWindowsDirectoryA GetTempPathA GetCommandLineA LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA lstrcmpA GetEnvironmentVariableA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess SetErrorMode GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile MulDiv ReadFile SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA ExitProcess

user32

ScreenToClient GetWindowRect SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard EndDialog AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxA CharPrevA DispatchMessageA PeekMessageA CreateDialogParamA DestroyWindow SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow ShowWindow SendMessageTimeoutA FindWindowExA RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA TrackPopupMenu ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint wsprintfA

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetMalloc SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA