Static task
static1
Behavioral task
behavioral1
Sample
1abffd7dfc649312a285d3c631f8dfc0a6da01d087644afa1aafa4d29e75514e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1abffd7dfc649312a285d3c631f8dfc0a6da01d087644afa1aafa4d29e75514e.exe
Resource
win10v2004-20220812-en
General
-
Target
1abffd7dfc649312a285d3c631f8dfc0a6da01d087644afa1aafa4d29e75514e
-
Size
573KB
-
MD5
697eba6566aa6a4a950914c5f71ecbf6
-
SHA1
6aecb452efa1282f75a269178345b9c830f262b9
-
SHA256
1abffd7dfc649312a285d3c631f8dfc0a6da01d087644afa1aafa4d29e75514e
-
SHA512
f718f14afa87e2e7ce231434174e2f6b410e8289f4bddaef29b8d7cd3307979875e428489a5a223c9e4d0779ec47580996b15f5c0a664c07fe06043c6e75c9bb
-
SSDEEP
12288:OR+Ro+D4hSjKqRzPTwAi01FdCLevcEmUfc:O0RyhqZzUA2L+cOc
Malware Config
Signatures
-
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
1abffd7dfc649312a285d3c631f8dfc0a6da01d087644afa1aafa4d29e75514e.exe windows x86
c26a70fdc7c6e922a0d6f329bbaf2219
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceExW
SizeofResource
WriteFile
CreateDirectoryW
GetModuleFileNameW
CreateProcessW
GetLastError
LoadResource
SetLastError
lstrlenW
RaiseException
RtlUnwind
IsDebuggerPresent
FindResourceW
LockResource
CloseHandle
CreateFileW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetModuleHandleA
GetStartupInfoW
ExitProcess
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
user32
wvsprintfW
UnregisterClassA
CharNextW
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
shell32
SHGetSpecialFolderPathW
shlwapi
PathStripPathW
PathAppendW
PathFileExistsW
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10.6MB - Virtual size: 10.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ