8c5e7da6ed46bc2c3b53dadc091233fb | Triage

Sharing

General

Target

8c5e7da6ed46bc2c3b53dadc091233fb
Size

2.4MB
MD5

8c5e7da6ed46bc2c3b53dadc091233fb
SHA1

d652bae5c3d89aac92734038a8b1c5fbcc810f18
SHA256

98ad12dabc6516a68ba99e8fa45919a51ae6f6e5c705553053b747038a816a43
SHA512

53cd70fbd44715d5b8e0297399f640ca56f812a3adb2b89bde33a6fec86c70c4bb0c4500826bdac92c24b468acd46d37bfb2302a4d8ccc792768abf22fd2ea30
SSDEEP

49152:SqEFskPOsqEFskPOyJ+ap+V8tgJd8XcY/+:0L3p+Cgas7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c5e7da6ed46bc2c3b53dadc091233fb

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

8c5e7da6ed46bc2c3b53dadc091233fb
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

bckgzm.pdb

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ