24ae42c5b0304192c99b5f9d164c7f55cfd070e0c5a37f5ab6819f70ae130fb3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24ae42c5b0304192c99b5f9d164c7f55cfd070e0c5a37f5ab6819f70ae130fb3
Size

1.3MB
MD5

0532d60e781016920d1254c1aeb53b00
SHA1

cc908347a5965db6670da20f539d30734afa7338
SHA256

24ae42c5b0304192c99b5f9d164c7f55cfd070e0c5a37f5ab6819f70ae130fb3
SHA512

47e9701e23c259e07c8ee6d63fa4419c85eb4b2c903e128034bc37793209ad88f1741562696d429d32233c052bf88f15f604ce1cbeb7500e0f15b2c1b0a36f88
SSDEEP

24576:ZCAYYnV8wTlYRXmbu6edrUtDG31PQwgGAAfF4ZMEICt2P+KdJvm:UQTTlY8bOrR31P5g/R2P+KdJvm

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

24ae42c5b0304192c99b5f9d164c7f55cfd070e0c5a37f5ab6819f70ae130fb3
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xur
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE