4caf21fe53609cb3c227cb2f9597c78fb5019eb54e5cf057e5493336b3ee3aee | Triage

Sharing

General

Target

4caf21fe53609cb3c227cb2f9597c78fb5019eb54e5cf057e5493336b3ee3aee
Size

4.7MB
MD5

478ea75a4095c0f4f06771965243264e
SHA1

36364438c5ed4591bd82c3514693fa0d8518773d
SHA256

4caf21fe53609cb3c227cb2f9597c78fb5019eb54e5cf057e5493336b3ee3aee
SHA512

f825a3f159d24d5e2cae33fa9b1633783960c16acdc2879138b346bb180af40b9b3e4ee2d7e5ba319db431d4fdb6acbeb30bd44aa649d5eb2de3c19224254cfc
SSDEEP

98304:wPGIvSHVrmjImDGbCf5gS7Gx3I5egNqcJeOzuG1BjIyAl7:4GaQrcDGu5gSle9cJbzusyyY

Score

1^/10

Malware Config

Signatures

NSIS installer 1 IoCs
installer

Processes:

resource yara_rule

sample nsis_installer_1

Files

4caf21fe53609cb3c227cb2f9597c78fb5019eb54e5cf057e5493336b3ee3aee
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yvs
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE