d2a80962ee7b45b24ba8a202d2a0c2c58af5fe2ba69f525b64564123af8f27c8 | Triage

Sharing

General

Target

d2a80962ee7b45b24ba8a202d2a0c2c58af5fe2ba69f525b64564123af8f27c8
Size

13.5MB
MD5

fb58d05cae958fff426c8ca2f4694ca5
SHA1

0c7a92890d523da45bf42de083f27c486dd906d8
SHA256

d2a80962ee7b45b24ba8a202d2a0c2c58af5fe2ba69f525b64564123af8f27c8
SHA512

d1cace6d24221208cae0a06a66012da0bd4a15d8858eba89f5648fd1fe4f308d2b2116534668aee3f11b6a602bbe5b9a086cdb6f67d77899f4d68c708caa3aef
SSDEEP

393216:sIQL6oMHOW5gZPkSX1VWCw0r1hXD0Q92ArZU0:spL62k01VZr3p9230

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

Processes:

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

d2a80962ee7b45b24ba8a202d2a0c2c58af5fe2ba69f525b64564123af8f27c8
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 282KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE