e2f5d700e48191bcc450c5cbaf7c283a680afe430bde0489bc1060591ed499b2

Sharing

Copy URL Twitter E-mail

General

Target
e2f5d700e48191bcc450c5cbaf7c283a680afe430bde0489bc1060591ed499b2
Size 2.6MB
Sample221029-jsv45shagj
SHA256 e2f5d700e48191bcc450c5cbaf7c283a680afe430bde0489bc1060591ed499b2
MD5 4ab9c8978f674eae73ea1602679497c9
SHA1 1c80a489e54ffce61e6bcca1f0c9bf9226dcd1ad
SHA512 f292cf2ef1eff439959bf4d41d674dc4baf08765e5c524ca33b04d28ed13d520661f90f1a984fa6be557fef4ac8344d23c425c1f04bf64f5b6dbf2dda10d4762
SSDEEP 49152:RdKARLE4rFVCXzUDWIBf6E8pUPGLwlrNIdGmzkmpGF/xQCK6815Civ:RdKAbTDHfYuPYIrNwzBpGRKn68159v
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

e2f5d700e48191bcc450c5cbaf7c283a680afe430bde0489bc1060591ed499b2

.exe 2.6MB

e2f5d700e48191bcc450c5cbaf7c283a680afe430bde0489bc1060591ed499b2

IMPHASH b86507c06cdbcec3edd95e095bc5f436
SHA256 e2f5d700e48191bcc450c5cbaf7c283a680afe430bde0489bc1060591ed499b2
MD5 4ab9c8978f674eae73ea1602679497c9
SHA1 1c80a489e54ffce61e6bcca1f0c9bf9226dcd1ad
SHA512 f292cf2ef1eff439959bf4d41d674dc4baf08765e5c524ca33b04d28ed13d520661f90f1a984fa6be557fef4ac8344d23c425c1f04bf64f5b6dbf2dda10d4762
SSDEEP 49152:RdKARLE4rFVCXzUDWIBf6E8pUPGLwlrNIdGmzkmpGF/xQCK6815Civ:RdKAbTDHfYuPYIrNwzBpGRKn68159v
MD5 SHA1 SHA512 SSDEEP

windows x86

NSIS installer

installer

Minor OS version

Major OS version

Entry point

13188

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetFileTime GetTempPathA GetCommandLineA SetErrorMode lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread LoadLibraryA CreateProcessA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion RemoveDirectoryA CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetWindowsDirectoryA

user32

ScreenToClient GetMessagePos CallWindowProcA IsWindowVisible LoadBitmapA CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuA CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos CheckDlgButton GetClassInfoA CreateWindowExA SystemParametersInfoA RegisterClassA SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA LoadCursorA SetCursor GetWindowLongA GetSysColor CharNextA DialogBoxParamA ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderA SHGetPathFromIDListA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegEnumKeyA RegOpenKeyExA RegCloseKey RegDeleteKeyA RegDeleteValueA RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumValueA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA