485b1344963dabc97922b77dd92a4ccd88263c5c0c3341cb3a31d6c3f4426cbb

Sharing

Copy URL Twitter E-mail

General

Target
485b1344963dabc97922b77dd92a4ccd88263c5c0c3341cb3a31d6c3f4426cbb
Size 608KB
Sample221205-wpbybacf69
SHA256 485b1344963dabc97922b77dd92a4ccd88263c5c0c3341cb3a31d6c3f4426cbb
MD5 7b3e0b5f7c83814393701175536ea70d
SHA1 5bbdf91caa50e8520db86a8f246b8f09cf3f81ed
SHA512 a6c53cd48a02698aa6303dcbf8747137989b3cae27c1fe5134386bef7eecce6cadd4217646e863ded668d04e27840914866023d5e8441b9f8d88c9aeb371cb1c
SSDEEP 12288:Wue91FFhqjAW3C3FPNT5vmOskANBH5BDvCtapC+e:E9FcjjS1PbvlANBatasZ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_1

File Explorer

485b1344963dabc97922b77dd92a4ccd88263c5c0c3341cb3a31d6c3f4426cbb

.exe 608KB

485b1344963dabc97922b77dd92a4ccd88263c5c0c3341cb3a31d6c3f4426cbb

IMPHASH 81c812ed76d4690c8678b3a4f0737a5f
SHA256 485b1344963dabc97922b77dd92a4ccd88263c5c0c3341cb3a31d6c3f4426cbb
MD5 7b3e0b5f7c83814393701175536ea70d
SHA1 5bbdf91caa50e8520db86a8f246b8f09cf3f81ed
SHA512 a6c53cd48a02698aa6303dcbf8747137989b3cae27c1fe5134386bef7eecce6cadd4217646e863ded668d04e27840914866023d5e8441b9f8d88c9aeb371cb1c
SSDEEP 12288:Wue91FFhqjAW3C3FPNT5vmOskANBH5BDvCtapC+e:E9FcjjS1PbvlANBatasZ
MD5 SHA1 SHA512 SSDEEP

windows x86

NSIS installer

installer

Minor OS version

Major OS version

Entry point

16539

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ImageList_Create ord17 ImageList_AddMasked ImageList_Destroy

kernel32

GetExitCodeProcess WaitForSingleObject ExpandEnvironmentStringsA GetEnvironmentVariableA lstrcmpiA FindNextFileA DeleteFileA FindFirstFileA SetFileTime GetFileAttributesA CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA lstrcatA SetCurrentDirectoryA CreateDirectoryA SetFileAttributesA CreateFileA GetFileSize GetModuleFileNameA GetTickCount CopyFileA SetErrorMode lstrcpynA GetCommandLineA GetWindowsDirectoryA GetTempPathA GetUserDefaultLangID GetDiskFreeSpaceA GetVersion GlobalUnlock GlobalLock GlobalAlloc CreateProcessA RemoveDirectoryA GetTempFileNameA SetEndOfFile UnmapViewOfFile MapViewOfFile CreateFileMappingA lstrcpyA lstrlenA GetSystemDirectoryA EnterCriticalSection Sleep LeaveCriticalSection InitializeCriticalSection CloseHandle GlobalFree GetModuleHandleA LoadLibraryA CreateThread GetProcAddress FreeLibrary MultiByteToWideChar GetCurrentProcess WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile SetFilePointer FindClose MulDiv ExitProcess

user32

CreateDialogParamA DialogBoxParamA GetClassInfoA CreateWindowExA SystemParametersInfoA RegisterClassA EndDialog SetFocus ScreenToClient GetWindowRect GetWindowLongA SetClassLongA IsWindowEnabled SetWindowPos LoadCursorA SetCursor GetDlgItemTextA MapWindowPoints GetMessagePos LoadBitmapA CallWindowProcA CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA MessageBoxA CharPrevA DestroyWindow SetTimer SetForegroundWindow ShowWindow CharNextA wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem GetSysColor SetWindowLongA LoadImageA GetDC EnableWindow PeekMessageA DispatchMessageA ExitWindowsEx PostQuitMessage SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect GetWindowTextA DrawTextA EndPaint InvalidateRect

gdi32

SetBkColor GetDeviceCaps CreateFontIndirectA DeleteObject CreateSolidBrush CreateFontA SetBkMode SetTextColor CreateBrushIndirect SelectObject

advapi32

RegEnumValueA RegEnumKeyA RegQueryValueExA RegSetValueExA RegDeleteKeyA RegOpenKeyExA RegDeleteValueA RegCreateKeyA RegCloseKey

shell32

ShellExecuteA SHBrowseForFolderA SHGetPathFromIDListA SHGetMalloc SHGetSpecialFolderLocation SHFileOperationA

ole32

OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA