a912f3ff5e226afdd9d5064013111a403a077fa5b637ef8f84dd2e249643183d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a912f3ff5e226afdd9d5064013111a403a077fa5b637ef8f84dd2e249643183d
Size

2.7MB
MD5

c0728ff9336503678ed7498e905cfb53
SHA1

e0f9828791468d2f0dc3feba92e5bcff9832d9f4
SHA256

a912f3ff5e226afdd9d5064013111a403a077fa5b637ef8f84dd2e249643183d
SHA512

de16b1156961a5c519fb5ac69c140c908f7d071adc0da8be1faf6127ca0cb21d5c34f485e3841ac9dc917eb93fc76d19dd2859bd16655165de4044d0a9a47be9
SSDEEP

49152:DvkPe2zdzEr+/joC1o5s49mnRi4qJPfP0aHHiBfO5nvw9WnKRtu/uv8NSyp4i:D+zES/jojUyFn07+Kvu/uv8NjZ

Score

1^/10

Malware Config

Signatures

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

a912f3ff5e226afdd9d5064013111a403a077fa5b637ef8f84dd2e249643183d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ