Static task
static1
Behavioral task
behavioral1
Sample
5213ffb63db12faf5e57da218b9d47231af51f4bc0af7526b3d63666916c52f1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5213ffb63db12faf5e57da218b9d47231af51f4bc0af7526b3d63666916c52f1.exe
Resource
win10v2004-20220812-en
General
-
Target
5213ffb63db12faf5e57da218b9d47231af51f4bc0af7526b3d63666916c52f1
-
Size
910KB
-
MD5
6b996589c4d3e48b23ccaa62c5a30fe2
-
SHA1
1f90085fe3be59213bb011404c5ba9f63c947f70
-
SHA256
5213ffb63db12faf5e57da218b9d47231af51f4bc0af7526b3d63666916c52f1
-
SHA512
69eb78eef5c07452fec62edcbee4016f28fd9e6dd862cc612798208c6f7a4394a53ccb228fc22a807c190c7a058531f7bb0bd30aef4e38eb10e5b9b3197791a6
-
SSDEEP
24576:G3N9QsCfhJkzbWTKS0oQnCln0u8r7084OBCDRdtFA:Gd9JCjuWTT0o0C5IrjnkRds
Malware Config
Signatures
-
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
5213ffb63db12faf5e57da218b9d47231af51f4bc0af7526b3d63666916c52f1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE