54418bd2d37242c006969b729a6cce1a6311766f003f047d40b9b2cae4a7beef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54418bd2d37242c006969b729a6cce1a6311766f003f047d40b9b2cae4a7beef
Size

17.6MB
MD5

8cc457b03bc3b4110b897d2c13074444
SHA1

6228e00a43d4e486c5ac098221080fa887e99594
SHA256

54418bd2d37242c006969b729a6cce1a6311766f003f047d40b9b2cae4a7beef
SHA512

864fdd325d2cff2e0f3deec9062e841e34b72b7f9e352bfa4e5c36ee473f4295d901ec33b5421145874a6e0f4b67d771cc97d55f088ec8153c3bda1a373bc716
SSDEEP

393216:4559ESPsUIX/L95+sTCp6N0QGpYM5Smjq4kseHBAYvwkrQXxl8dwC:M5t03D95Wp6NmCe751yAYFr0C

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

54418bd2d37242c006969b729a6cce1a6311766f003f047d40b9b2cae4a7beef
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gda
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE