d27fb2093c6c5ce194dbc7d3749f24b20a610444bbd0b5f81d0fc42ddb44b07f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d27fb2093c6c5ce194dbc7d3749f24b20a610444bbd0b5f81d0fc42ddb44b07f
Size

423KB
MD5

0829549c53a07b079e07e0fdc6d127d3
SHA1

818cc1733be8bdcf66a400876f263acd118101f1
SHA256

d27fb2093c6c5ce194dbc7d3749f24b20a610444bbd0b5f81d0fc42ddb44b07f
SHA512

24593575c85424dcab7897aba09666e729f2dbe17fb009cce0572e308e674048abddf68bf5f0f25916ba428b854f449949843ebbffcd2d26be6a56708357c2b3
SSDEEP

12288:iPf52RYuh0xDcXYqHxn98ZGljmz+fKpSw4Vod85+rrM:g22ujYm/ZfXPWdzY

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

d27fb2093c6c5ce194dbc7d3749f24b20a610444bbd0b5f81d0fc42ddb44b07f
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gda
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE