b0df3c647dc6d4c9ddc84e88c10f9f4efd44b69bbd33c399bb7a20114ff1a0e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0df3c647dc6d4c9ddc84e88c10f9f4efd44b69bbd33c399bb7a20114ff1a0e2
Size

344KB
MD5

605a9a5e0c77e374b516f46f4153b1d0
SHA1

f11e764d02fb6e6d7440cfa117301d063b99ad85
SHA256

b0df3c647dc6d4c9ddc84e88c10f9f4efd44b69bbd33c399bb7a20114ff1a0e2
SHA512

50417ccfac0a9f3255142be3d165e92c6ac6fa393ba2c59cc226256e0c3972d0ecb4f28a94edf31040b4f9dc5f3d58e44aa7756c2cf05ba072e13ea054dbec64
SSDEEP

6144:hWAovvpnnEtIyDEWAovvpnnEtIyDEWAovvpnnEtIyDNeTeM/zTQwxGPILl:hW7R8IyDEW7R8IyDEW7R8IyDxM/Qwpl

Score

1^/10

Malware Config

Signatures

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

b0df3c647dc6d4c9ddc84e88c10f9f4efd44b69bbd33c399bb7a20114ff1a0e2
.exe windows x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ