afb1f3706009897f40f00d032fb1e6443871da8bee99382dd7d05d968a30f357 | Triage

Sharing

General

Target

afb1f3706009897f40f00d032fb1e6443871da8bee99382dd7d05d968a30f357
Size

304KB
MD5

8f652259f64ea11c2f3cf7080f675cce
SHA1

2f259441a95de339ddb1a40cb4dba9a8d1ad5b1c
SHA256

afb1f3706009897f40f00d032fb1e6443871da8bee99382dd7d05d968a30f357
SHA512

4635fc4a286310f06d553a1550cd8b5a0436baaaece733efa790ed520645854494ed5decfdb6a3b6f6b1ae544669c9e67ad0142fd18444affb3dd3910a419c06
SSDEEP

6144:vYszUwKFAa8Y0GaG4cEW5gEXirdwDe0bFN7IE0rMyXWWIUyLQ:XzUwKFADYJzgNrh0FN+M8T1yLQ

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

afb1f3706009897f40f00d032fb1e6443871da8bee99382dd7d05d968a30f357
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yvs
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE