147a767058cc10555fd312905a32ff80f42d68a6ce891afaf6e3c5a721c75788 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

147a767058cc10555fd312905a32ff80f42d68a6ce891afaf6e3c5a721c75788
Size

754KB
MD5

654f7b41541a75fab745b09cc58b8200
SHA1

d84c7d64124d8b646ba3013a3b7201b11a03dd2c
SHA256

147a767058cc10555fd312905a32ff80f42d68a6ce891afaf6e3c5a721c75788
SHA512

c5a9806a65c68ff0c389dc76140fe94a32dd6127f683fba55d3b2efb02f380101c2dc8936b8d16b9a49e8d6141e77841ccc1427760eb907450abeb94ccf2b18c
SSDEEP

12288:kBws6vFhIEF3r/eG53d0Z4UEm2G3HpfEPApslpIdOl1jIVyedid:muLf7/B3dcMYpfEPAddudW0

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

147a767058cc10555fd312905a32ff80f42d68a6ce891afaf6e3c5a721c75788
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 235KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE