c54f663d7f13cfdeb3a181370bd9f320c3df25f58b1a27055f76de6d2b1cdfd6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c54f663d7f13cfdeb3a181370bd9f320c3df25f58b1a27055f76de6d2b1cdfd6
Size

5.3MB
MD5

b814f442a46338c82152fbb6a98b396c
SHA1

57670735560cf5985d2ae929e1f49a9014463ac8
SHA256

c54f663d7f13cfdeb3a181370bd9f320c3df25f58b1a27055f76de6d2b1cdfd6
SHA512

1d72cfcf35e89f962d7ca920733d3f080243a04ac534a38000fd907433c1679f4be296d0bd20c251791880aec2cde00906296e12cb2a3cbadbf886cd8ef74beb
SSDEEP

98304:uLNBTfowc8XamvuYltEHphS2ZyRVfFRAE05vBqNs15NQjj46WNqsu0cMEf5Ib:knFXam/DEHLZyXfFeEyQv4RxSXIb

Score

1^/10

Malware Config

Signatures

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

c54f663d7f13cfdeb3a181370bd9f320c3df25f58b1a27055f76de6d2b1cdfd6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 536KB - Virtual size: 536KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7.7MB - Virtual size: 7.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ