0358bd9325e5b0b209b9de6961f875b4 | Triage

Sharing

General

Target

0358bd9325e5b0b209b9de6961f875b4
Size

947KB
MD5

0358bd9325e5b0b209b9de6961f875b4
SHA1

d9619c9e9c5a8914ec296e13bf2ee57ff9a751c5
SHA256

139afcd23c9604b2d492fcac03245ef15c5ec76a21c76b1828ae69c1c3d552a7
SHA512

2d639158b0c6e0c30dbe9fe3ad8ef22c6ff648b2bd0737c82e79449cca0d16c29620bbaffac29c8b88ee2d3fc60c8c6e5fdb7ee086c8066ba4d6a0cdac7ad8e8
SSDEEP

24576:r8h52PR1QP0IzLktmopJjvr1xfYr4O8kfeas:r8hC1QcIzLi7jRlYrYk2D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0358bd9325e5b0b209b9de6961f875b4

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

0358bd9325e5b0b209b9de6961f875b4
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.spm
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE