2da34a4c14074a89d1259ff9b6c5c7808fcec99fe3bf5ecdffeba2b17ca2d479

Sharing

Copy URL Twitter E-mail

General

Target

2da34a4c14074a89d1259ff9b6c5c7808fcec99fe3bf5ecdffeba2b17ca2d479
Size

572KB
MD5

284ab08fd96c575b8ab2e406e842fafc
SHA1

e78a472110b4c4f713816f52c8d1303004b6fe95
SHA256

2da34a4c14074a89d1259ff9b6c5c7808fcec99fe3bf5ecdffeba2b17ca2d479
SHA512

ddeca6fe768cb052f9c44ea9a095e3abd7d7e81e54ade68b7f628b89673e1f0c788f35dcb9edc352f5731bebf9422d3741926130b9f352dab2d435bec4103c10
SSDEEP

6144:qeo7ZWqYL6wvnBUxqXZD39kmlcuolZSghNwPCow9t25My+/YiJIjUNDooo/VI:TMu6EnBUxq539RqbSOOPRSy+rRoooi

Score

1^/10

Malware Config

Signatures

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2

Files

2da34a4c14074a89d1259ff9b6c5c7808fcec99fe3bf5ecdffeba2b17ca2d479
.exe windows x86

1552f5699ee94b4b68ed032f361278bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ord17

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

WaitForSingleObject
GlobalAlloc
GlobalFree
ExpandEnvironmentStringsA
lstrcmpA
lstrcmpiA
CloseHandle
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSizeEx
GetModuleFileNameA
SetFilePointerEx
GetCurrentProcess
ExitProcess
CopyFileA
SetEnvironmentVariableA
GetWindowsDirectoryA
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrlenA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
GetFileSize
lstrcpyA
lstrcatA
GetSystemDirectoryA
GetVersion
GetProcAddress
IsValidLocale
GetDateFormatA
GetTimeFormatA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetFilePointer
GetLocaleInfoW
GetExitCodeProcess
GetStringTypeA
LCMapStringW
LCMapStringA
OutputDebugStringW
OutputDebugStringA
VirtualAlloc
HeapReAlloc
HeapSize
GetConsoleMode
GetConsoleCP
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
InterlockedExchange
FatalAppExitA
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetCurrentThread
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsBadReadPtr
HeapValidate
DeleteCriticalSection
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
LeaveCriticalSection
CompareStringW
EnterCriticalSection
LoadLibraryW
SetConsoleCtrlHandler
InterlockedDecrement
InterlockedIncrement
GetModuleHandleW
VirtualQuery
GetProcessHeap
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
GetStdHandle
GetModuleHandleA
LoadLibraryExA
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
GetStringTypeW
ReadFile
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
MulDiv
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
CompareStringA
GetLocaleInfoA
GetFileType
WriteConsoleW
GetModuleFileNameW
WideCharToMultiByte
DebugBreak
RaiseException
IsDebuggerPresent

user32

DrawTextA
EndPaint
DefWindowProcA
EnableMenuItem
FillRect
PeekMessageA
DispatchMessageA
wvsprintfA
CharPrevA
MessageBoxIndirectA
GetDlgItemTextA
SetDlgItemTextA
GetSystemMetrics
CreatePopupMenu
AppendMenuA
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
IsWindowVisible
CallWindowProcA
LoadBitmapA
GetMessagePos
IsDlgButtonChecked
GetAsyncKeyState
CheckDlgButton
LoadCursorA
SetCursor
GetWindowLongA
GetSysColor
SetClassLongA
EndDialog
GetSystemMenu
CloseClipboard
GetWindowRect
ScreenToClient
SetWindowPos
IsWindowEnabled
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
BeginPaint
GetClientRect

gdi32

GetDeviceCaps
CreateBrushIndirect
DeleteObject
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SetBkColor

advapi32

RegEnumKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegEnumValueA

shell32

SHGetSpecialFolderLocation
ShellExecuteA
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
SHFileOperationA

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance

Sections

.textbss
Size: - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 423KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1552f5699ee94b4b68ed032f361278bf

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.textbss Size: - Virtual size: 202KB

.text Size: 423KB - Virtual size: 422KB

.rdata Size: 89KB - Virtual size: 89KB

.data Size: 5KB - Virtual size: 4.3MB

.idata Size: 8KB - Virtual size: 7KB

.ndata Size: - Virtual size: 44KB

.rsrc Size: 162KB - Virtual size: 161KB

.reloc Size: 32KB - Virtual size: 31KB

.textbss
Size: - Virtual size: 202KB

.text
Size: 423KB - Virtual size: 422KB

.rdata
Size: 89KB - Virtual size: 89KB

.data
Size: 5KB - Virtual size: 4.3MB

.idata
Size: 8KB - Virtual size: 7KB

.ndata
Size: - Virtual size: 44KB

.rsrc
Size: 162KB - Virtual size: 161KB

.reloc
Size: 32KB - Virtual size: 31KB