f11273397c2aaf35640c08c8d6a27e705f029b83aafc3a8c6a962390ef73a0ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f11273397c2aaf35640c08c8d6a27e705f029b83aafc3a8c6a962390ef73a0ab
Size

357KB
MD5

91ed049863dd1b7795b6dddc22753e8d
SHA1

483bc7f6e332f3bfd5b3112bf98ba61a626e1855
SHA256

f11273397c2aaf35640c08c8d6a27e705f029b83aafc3a8c6a962390ef73a0ab
SHA512

313ac5b16b7e240400d6d17e5322ee957b9dc423dbe0f00d8d7d44f3044b5016bbc05f3b888ea2190ffa3ef631f8de103edfef1b10257ac5e2d64f3a9fe1271c
SSDEEP

6144:/hNKooj2i5Rp1XMHDd0p3TQkSLVON4WRwrOd/1+qQeaZUxt963QFQrUI1UjYLNuy:SoojXmDiRTaVpWRtR1RaCH96B/dL/

Score

1^/10

Malware Config

Signatures

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

f11273397c2aaf35640c08c8d6a27e705f029b83aafc3a8c6a962390ef73a0ab
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgd
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE