886bf79b6a314c5afc8625a991acb663dab2a46b959dfe76e217fc217b323cdf | Triage

Sharing

General

Target

886bf79b6a314c5afc8625a991acb663dab2a46b959dfe76e217fc217b323cdf
Size

182KB
MD5

209b3742c9d1dacf98b43f25a31c1dcb
SHA1

bec354f642d4fde09b1b5e32c31ed49550566c68
SHA256

886bf79b6a314c5afc8625a991acb663dab2a46b959dfe76e217fc217b323cdf
SHA512

f7ccdfcfa7a86fb04d90918483604b62d7ea95d10a0a19dc14743bd0030b6ed6a7c9ab03b6d9ab90653b8cd146569a8e312def2f75bb1f794873991f0861f53e
SSDEEP

3072:sgRURTXJKeqgKJ+BCjHr1IABx6bYQaYWJu8DJldkZPKz/vz79Lqo1Wi5RLOP7Uq7:s1ogKGABobBogygPKb9+o0iTcND4kJ

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

Processes:

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

886bf79b6a314c5afc8625a991acb663dab2a46b959dfe76e217fc217b323cdf
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ