4e7d892312a5ac49b78194662cf07eb643a32c2fd3846fb6149fa37c9684cf42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e7d892312a5ac49b78194662cf07eb643a32c2fd3846fb6149fa37c9684cf42
Size

788KB
MD5

0fee5f19fd0792b71ce4b667c480aec0
SHA1

6d7bdcfdba8fd5f6d0e17e65c9a5250a42214de8
SHA256

4e7d892312a5ac49b78194662cf07eb643a32c2fd3846fb6149fa37c9684cf42
SHA512

41c3d6a277a1af926cc4158cf9bc96a2dda1e7f02de14265c03ae3d019a1ae6f2d60f00e1296ba9ae2dd9fb82f8ac823e7369f66d2cca22fad0a8c5db66ffddd
SSDEEP

12288:rBdBws6vFhIEO+NlsfV4nhsjia1+IDiw7x3AOOPux:FvuLk+EVAiW6iewOmw

Score

1^/10

Malware Config

Signatures

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

4e7d892312a5ac49b78194662cf07eb643a32c2fd3846fb6149fa37c9684cf42
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ