0af9ed76355b335b4144f8d412d5a69baa7dc87ae215094704f99a5fd1dea769 | Triage

Sharing

General

Target

0af9ed76355b335b4144f8d412d5a69baa7dc87ae215094704f99a5fd1dea769
Size

231KB
MD5

67c08c10119e90970828d01400fcc2d0
SHA1

f5bbf42d372aec9a0901283b24188a3835a45750
SHA256

0af9ed76355b335b4144f8d412d5a69baa7dc87ae215094704f99a5fd1dea769
SHA512

2776f4fdd69a6348b2b90e1af9bd61947e95f271d38c91561d936f1b661b5c7edecd3ea9f4820828e9f0c939f45b4a1695ce87ea7496d3322f3b6a40df345aec
SSDEEP

6144:zQXCrxzlsYSlTbChtU9bhTW1YPPApFX1EjOttfj/5UoC:sCtlsbTktkbA1KoYOTjxrC

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

0af9ed76355b335b4144f8d412d5a69baa7dc87ae215094704f99a5fd1dea769
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE