882e987150e481362aa97fe0ec8a6baa49df0c490f0862b86765233facb9a589[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
882e987150e481362aa97fe0ec8a6baa49df0c490f0862b86765233facb9a589.exe
Size 1.1MB
Sample230110-pawkvabf8w
SHA256 882e987150e481362aa97fe0ec8a6baa49df0c490f0862b86765233facb9a589
MD5 310d8c641b1fb1cadc6f64ae66f83cc0
SHA1 0f9175556c8239e48e061ce8e2c834bed02a69d8
SHA512 540c14042443f0bcd02dbe63613d89d6f5029bd93bff76455ff265ce06f68e095546b92c09fcec6bff499bf6e66d0f33779bbfbd925aafcc20c9f5b428a205e6
SSDEEP 12288:D+9UPAuwh26KeRg66K9kyEyhGS8ewso3nolYqgvpyhOMqNy+AfSBvzoGKi3qo43:D+YAuk26KeClyh8+4qgxOnqM+vKo8
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

882e987150e481362aa97fe0ec8a6baa49df0c490f0862b86765233facb9a589.exe

.exe 1.1MB

882e987150e481362aa97fe0ec8a6baa49df0c490f0862b86765233facb9a589.exe

IMPHASH ab6770b0a8635b9d92a5838920cfe770
SHA256 882e987150e481362aa97fe0ec8a6baa49df0c490f0862b86765233facb9a589
MD5 310d8c641b1fb1cadc6f64ae66f83cc0
SHA1 0f9175556c8239e48e061ce8e2c834bed02a69d8
SHA512 540c14042443f0bcd02dbe63613d89d6f5029bd93bff76455ff265ce06f68e095546b92c09fcec6bff499bf6e66d0f33779bbfbd925aafcc20c9f5b428a205e6
SSDEEP 12288:D+9UPAuwh26KeRg66K9kyEyhGS8ewso3nolYqgvpyhOMqNy+AfSBvzoGKi3qo43:D+YAuk26KeClyh8+4qgxOnqM+vKo8
MD5 SHA1 SHA512 SSDEEP

windows x86

NSIS installer

installer

Minor OS version

Major OS version

Entry point

12879

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileAttributesA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CompareFileTime SearchPathA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA CreateDirectoryA lstrcmpiA GetTempPathA GetCommandLineA GetVersion SetErrorMode lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA LoadLibraryA SetFileTime CloseHandle GlobalFree lstrcmpA ExpandEnvironmentStringsA GetExitCodeProcess GlobalAlloc WaitForSingleObject ExitProcess GetWindowsDirectoryA GetProcAddress FindFirstFileA FindNextFileA DeleteFileA SetFilePointer ReadFile FindClose GetPrivateProfileStringA WritePrivateProfileStringA WriteFile MulDiv LoadLibraryExA GetModuleHandleA MultiByteToWideChar FreeLibrary

user32

GetWindowRect EnableMenuItem GetSystemMenu ScreenToClient SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetForegroundWindow PostQuitMessage RegisterClassA EndDialog AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx DestroyWindow OpenClipboard TrackPopupMenu SendMessageTimeoutA GetDC LoadImageA GetDlgItem FindWindowExA IsWindow SetClipboardData SetWindowLongA EmptyClipboard SetTimer CreateDialogParamA wsprintfA ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteValueA SetFileSecurityA RegOpenKeyExA RegDeleteKeyA RegEnumValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_Destroy ord17 ImageList_AddMasked

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance