451be484c0ecb431e9fcb0a5053e2277 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

451be484c0ecb431e9fcb0a5053e2277
Size

464KB
MD5

451be484c0ecb431e9fcb0a5053e2277
SHA1

2319daff7efa9fee749328f174cd236cb7713d69
SHA256

220140e381bc6c34dc0e520d5af7de0736377c3177cfea5e4a02910dac443c23
SHA512

c2c1ce73a678d4e0344d7ff77efc238ef12130a9ef9669596303da9464c2e24d0cf908d74800510ff6e356d95db6ac8ffe5f338e81fe43ce34000fe2287beae1
SSDEEP

6144:he3EWylHyCn4ik6yiUfFY2SzpYn2/gnqqjG73e7VqdBQQr9ivRHZobwIrn3:iYFkJy2Sz6n2/93+wnQikcrn3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
451be484c0ecb431e9fcb0a5053e2277

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

451be484c0ecb431e9fcb0a5053e2277
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE