Static task
static1
Behavioral task
behavioral1
Sample
9139caa5dcf6a0fb57fc25e9c1f7b09f6e58facb851b669f46cbbb169f731fc4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9139caa5dcf6a0fb57fc25e9c1f7b09f6e58facb851b669f46cbbb169f731fc4.exe
Resource
win10v2004-20221111-en
General
-
Target
9139caa5dcf6a0fb57fc25e9c1f7b09f6e58facb851b669f46cbbb169f731fc4
-
Size
4.5MB
-
MD5
2c71e79a25ceb77504ca193f6fa10e47
-
SHA1
8de02eb3770795392835942a460c14b978a668e5
-
SHA256
9139caa5dcf6a0fb57fc25e9c1f7b09f6e58facb851b669f46cbbb169f731fc4
-
SHA512
4a0c6233031e41410da3e748def92acbb3df7e7d613282be6665af2beaead7cae51d98224d1187498e98a9c151844924cc05d0c96a8d5bec47b1f58fb8861599
-
SSDEEP
98304:F1KT+V8PzZwUGkHB9zgdDGkMOAwkDv0uHkr2O:WZbZwjknaiOAw60uHrO
Malware Config
Signatures
-
NSIS installer 1 IoCs
Processes:
resource yara_rule sample nsis_installer_2
Files
-
9139caa5dcf6a0fb57fc25e9c1f7b09f6e58facb851b669f46cbbb169f731fc4.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ