e5ef45da6e75b8ee68e41e8487e0e5d5bda2424783bb78ac6a9a5a2b5bc89ef3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e5ef45da6e75b8ee68e41e8487e0e5d5bda2424783bb78ac6a9a5a2b5bc89ef3
Size

5.4MB
MD5

e5f1f6785673c36b072424f0d8a0773a
SHA1

2a262551e0e468f4b11ff8c861e32ee517b55a81
SHA256

e5ef45da6e75b8ee68e41e8487e0e5d5bda2424783bb78ac6a9a5a2b5bc89ef3
SHA512

33db64219f601d150576f0dbd9d027366ea4de6716e3331676831ab8a8c40c210d64c28612a159b16f4a926462fe1dbfdc063977b4efd136e6ab745ca571a4f8
SSDEEP

98304:odht7ZtgQmPUbp/qyJXcIjsLXtTNA7h5p45o7r2zX2OKMzLYObfek:WEwfJXcIjLPio7rEX7HNqk

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

e5ef45da6e75b8ee68e41e8487e0e5d5bda2424783bb78ac6a9a5a2b5bc89ef3
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE