General

  • Target

    e0d058a3e40ef26767cf44553fbd1928

  • Size

    677KB

  • MD5

    e0d058a3e40ef26767cf44553fbd1928

  • SHA1

    211aa23da46804ac72cc8a5d646c9d8f33d855c4

  • SHA256

    048d662a0942cd719cd70dd797f23825aaeec6f13e70a5ebece15ad6f60d54e3

  • SHA512

    a102b323aec138400804d1450cf02f587e848b3caeb71bbd1ad8fc4a3fde1ef6ea7f947a960ebbb7092c2d65127085fe4ea588a4e21ecc175ca2b545dc61ffd5

  • SSDEEP

    12288:WBPEUWOpeZP2Hx3htbkP5QU1yZRcgDvFzMBe4bX/zg5c810eYuoJvqL:WBPNVZRrbkP5j1yZJlMBe4bX/zgOhlA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • e0d058a3e40ef26767cf44553fbd1928
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/kwgahlb.dll
    .dll windows:6 windows x86 arch:x86

    ef0395c3130920c1f8c8dc12ea63a782


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • 1432209682.fcbcabficbcd