a13f6cae64969e588cbb1f8674c5df78eb37eccb2a4e1326bbd10dd65350730c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a13f6cae64969e588cbb1f8674c5df78eb37eccb2a4e1326bbd10dd65350730c
Size

239KB
MD5

6c61b713ca8ee360a29c7b904201afa0
SHA1

c8fa990b2f691d3965aca51bab081444864b4b07
SHA256

a13f6cae64969e588cbb1f8674c5df78eb37eccb2a4e1326bbd10dd65350730c
SHA512

e81f98a851f9e084ac7274192b20e7e231c623067fa4e9e406507344e33cd3365c346db1b448af44e77627fc06830832c853d90c6715ea1fa353110df6a81b0a
SSDEEP

6144:WI5ieX7f6RrtqD8hfgRCamc/upZKptuvqUjq:DiIfMrAD8hihm0ufKWi

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

a13f6cae64969e588cbb1f8674c5df78eb37eccb2a4e1326bbd10dd65350730c
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE