21fe4b0111ec4f85f7181bb104f6c28e2193f97cfed82e4acbbe88de00a5f664[.]exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

21fe4b0111ec4f85f7181bb104f6c28e2193f97cfed82e4acbbe88de00a5f664.exe

IMPHASH 57e98d9a5a72c8d7ad8fb7a6a58b3daf
SHA256 21fe4b0111ec4f85f7181bb104f6c28e2193f97cfed82e4acbbe88de00a5f664
MD5 bd819dbdd029540fd5a3f2d50c5703b6
SHA1 19c773a27f63d35680ad47dba72c0efa8c21514a
SHA512 0d40d3f8bcaaded7cf46db20827da3c0ffbfc73c9441dde23e2aff5bc5fc12d02819ec872e9f815c27446ebd2fd4e6d678002e33328960f5d4afc7e534f14323
SSDEEP 12288:1fpsz6myEfxf4FfxmwYxmvWpo0zif5ffYe2AG4SZ:1fprqcfxhZwo0zUI2G4A
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

0f:ca:41:a8:c0:74:ba:59:71:9d:6b:35:69:a0:05:a2:9c:9e:d3:97:73:2e:b8:9f:ec:66:48:e0:9d:0b:85:bb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=sjusk,OU=Duemoses Tricots\ ,O=sjusk,L=Villers-en-Arthies,ST=Île-de-France,C=FR,1.2.840.113549.1.9.1=#0c1a54696c73746f657665646540506f727476696e657332332e4469

Chains

Jun 4, 2024

Minor OS version

0

Major OS version

4

Entry point

13069

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableA CreateFileA GetFileSize GetModuleFileNameA ReadFile GetCurrentProcess CopyFileA Sleep GetTickCount GetWindowsDirectoryA GetTempPathA GetCommandLineA lstrlenA GetVersion SetErrorMode lstrcpynA ExitProcess SetCurrentDirectoryA GlobalLock CreateThread GetLastError CreateDirectoryA CreateProcessA RemoveDirectoryA GetTempFileNameA WriteFile lstrcpyA MoveFileExA lstrcatA GetSystemDirectoryA GetProcAddress GetExitCodeProcess WaitForSingleObject CompareFileTime SetFileAttributesA GetFileAttributesA GetShortPathNameA MoveFileA GetFullPathNameA SetFileTime SearchPathA CloseHandle lstrcmpiA GlobalUnlock GetDiskFreeSpaceA lstrcmpA FindFirstFileA FindNextFileA DeleteFileA SetFilePointer GetPrivateProfileStringA FindClose MultiByteToWideChar FreeLibrary MulDiv WritePrivateProfileStringA LoadLibraryExA GetModuleHandleA GlobalAlloc GlobalFree ExpandEnvironmentStringsA

user32

ScreenToClient GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard PostQuitMessage GetWindowRect EnableMenuItem CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndDialog RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx GetDC CreateDialogParamA SetTimer GetDlgItem SetWindowLongA SetForegroundWindow LoadImageA IsWindow SendMessageTimeoutA FindWindowExA OpenClipboard TrackPopupMenu AppendMenuA EndPaint DestroyWindow wsprintfA ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA SHFileOperationA

advapi32

AdjustTokenPrivileges RegCreateKeyExA RegOpenKeyExA SetFileSecurityA OpenProcessToken LookupPrivilegeValueA RegEnumValueA RegDeleteKeyA RegDeleteValueA RegCloseKey RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

Egenproduktion.For

SHA256 9b157953a46e381890a01dc865f578948b5b4e978f46663466a32cf5f91f2859
MD5 9938704499ef37f7784c47c931715e5b
SHA1 2a078b6ac3c73e5a7c51ab2bcfa81599e03dcbff
SHA512 11364cf44b91cd9fcd150c8a9825528f37427475ef2401d10f19b3880b560d61a4ae119c04ddad9f845a1c43209474257a0ae2a0c921f9d590909756b6d60036
SSDEEP 6144:Etk/QKAdD06iThbBuQq6MHTQqU8QvotEeZ8tIXHv6i2nUojlmS0dWGDGN54N:N/DAJ0rhBTpMXlQvotzZ8tBljAdtDA4N
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Incompensation/Bello.txt

SHA256 baa121f23cfbe4b2c7d93aa811837b3edd6ebd3a1b51f0697e7ae5bf0b42cbec
MD5 b23904199ba09b6b63a795044d088391
SHA1 a7abf8614eed43425223b188f7149e15e941d5fd
SHA512 10263dfdce3939c9a9bac58f6b3c295a1139d432f8f119b3ddae03347227622704e5c9e7e55b773c5ca40ab472816caac371fead157860861f4484a749593ee6
MD5 SHA1 SHA512

NSIS installer

installer

Incompensation/Brepillerne.Iam

SHA256 b053fd712f7eca839900ffb92b3153aee5d27a313f247539106d6eadb2fc5c48
MD5 de718dfa72c3ac9820c48903228076eb
SHA1 0ec701e0ddab7030598b4db3cb2bfdec3aedd4e1
SHA512 d930324faed17c8846443d4d92d67bcd7affa0e7898f22a1db67b4c1b1cac8856d223f8c11de592fc62ad49abb4620c13fc72be8495474550f65636fd35d0eda
SSDEEP 1536:DLC8MyuFarLGYnKpIhSI2aCLhHF0VzAaG9iK295BFyy:DLR04rLzKpqlCLozARu9J/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Incompensation/Dumrianernes.ver

SHA256 dcf3e7abc82b9251ae501a0c6eb5d96f7790d415926a457f92c4ddcd50b3e398
MD5 d781cad9ec3316aed952f9f0af95102d
SHA1 4ad454f0909131fe586d70fc033c8342f278b262
SHA512 3cce7ffd1a6683cd80325210fd174007c7acec206f69f5b3a8fe59d5aa276da8945fde0d6aa473abf10f3106db3b0406587d1e9f4632437653119c0c538547f3
MD5 SHA1 SHA512

NSIS installer

installer

Incompensation/Skatist.pap

SHA256 0902502f3857da6769c2ff4e9a0ca7b3f98fab6455a439f91a8240f5df343cf9
MD5 d236fdc5453a29f08229db78a15f9542
SHA1 2b75507412893a255aeb690fc7caa43b62c4bf2f
SHA512 72b46f201b00e484d8d31ae27956a561d928947105fd580eb02cb3cba0fac76da5d83b7173cb81308c734728885fa5ff5c974119d9188f5617ea4724667023d4
MD5 SHA1 SHA512

NSIS installer

installer

Incompensation/aflseliges.vmm

SHA256 622ea3ff27e393768253356db5cc492e095c395eae69fc9ffe30c129edb8bf38
MD5 1a5541b68b6f042e84f8fa638bb4efe5
SHA1 b03d3398cebe86939cc8c607d17bcf5db0c93e13
SHA512 091fcb7fe41df65b785941d26c7f5df841f7d0242104871ed74d95f58bd1be3b5d400cbf8944296c4174ec6f26b84fe0f5fe957aae9cfc5e141999850dda3cf4
MD5 SHA1 SHA512

NSIS installer

installer

Incompensation/belligerences.sta

SHA256 eea3e900baff78fe20c231b9c7fcf3016e1a1d3790219d76deb9531d8dd53186
MD5 98be60f15022d7d91ec641623b99b4d7
SHA1 fa3c2c6a4755ce17bbb1732f75fa6b19ba5a76ba
SHA512 548f92d050e1aebd65cfe89b29446a82b7636956f38345bbd913fbd1edbe3aaf98655b9abfab0b07918079aeb8656261413bc94e18748f7a88c80f2bbc86e539
SSDEEP 384:JWuJUt60k2pQ7RcvIz5a5q7pImQmhG16g7fvb5GB:JWuJR92YWwz5agpImHhG16wb+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Incompensation/criminogenesis.bes

SHA256 62379deb5c8571d7328f0d86fb10846ffe4643c0e5c2cbfad08156421fa82492
MD5 a073970c556d6ff47cb42c92d5bcb606
SHA1 993c4fbba8c228106ac17c8c31c3272960e2f0fb
SHA512 f91db6ec43ff316f746df1caab0877d07a20d25e16ab4ab1327da4b47ee0dabf86b86304239a9d659b3d05a4b12c16360625407671b1c6f8ccd192add2d03b9f
SSDEEP 192:jFjfnhnV45gloeerLtAyB4kd+lBw8x0ZYR6vacdPCsAEUiG2KkPxo1Ah:jFjMkoeeNAq4kd8wW6vacdPC7EZGqxoY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Incompensation/evicts.ass

SHA256 284532f94272891569b743469dc4a26375a48280741276d0937f38fb7d42951b
MD5 e5e93e31de8e0e0c4e5d1765e2d82d60
SHA1 aa9c99630c0743e31b580f39820e9b233569a19f
SHA512 1116485b57dea468b1fa2a0074c006733d46b8ca76ab24318ace3c2731a7630090574c55b86b137741ab91914620f8a943644dc81afc62ff1decd68adb32845a
SSDEEP 192:27VmRZHTaTERdpEtqmkRrMdFWZkEiM7zCVK4pNfZ71C96h64J3vtVoF:qmRZza+dkBkrziMfCIwFZs9p4Jvu
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Incompensation/hemimetamorphosis.har

SHA256 10dedc650575c910bdd3436b3e80a68ed7cd5810205ff396c5a2c343eed4eaec
MD5 7f1551c3e3791ee111b39f73d5b1f3d9
SHA1 7e4254dc905d31c5841a90a6cc79d3537736928b
SHA512 f0d42e10f5ca827b4659f50186765fa55039369e96837ce5e49c8be33c741c4121a343f1a1f9600ada150a47b957e6a552324694e024788112723c1eaafe1aa3
SSDEEP 384:ItOsE7G/STOZYwvYe9KFcvt/thg3z0MmQYYDayz:InEQSTOzQeKcvRthSik
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Incompensation/highballing.dit

SHA256 509c058e28c9fa1581b5780c55b549aae955515d17e11f75606fcd9f7b228173
MD5 abfce9f96a7321001b019d251dc9d381
SHA1 52adf70e0b6c3309723936a4244aa673e4c8fac2
SHA512 907958935943981d69919af17743841d07a4c4f41babb470d9592c18ce7132ba36ab3e0f08ef03ee8959f3a9a9a0988f325ed305fe60fcc782048929c2cac1e1
SSDEEP 96:cb6nEHOmQ6iHulcR1LGVludteYFNNsHA2tSp:dVmiHulklIlgFYIp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Incompensation/karakteriserer.eve

SHA256 3aecb8acc248cde570b8dbcbfdd8559db071f9b8dae14ac625ef2c9d5cec60fc
MD5 af61d899d84b138b60abfbaaeb36ef51
SHA1 50229ac7eafacaa53b6b186015b2d1b4382edc67
SHA512 5a7bcdca4373b230166acd162ec173d02de56833989dbfcb1bfe0a46ee42049a46597246c5a48743c3e2dde85b9b51839562123ee621529a188114118ebc97d1
SSDEEP 384:AYB6gRBAAwrfTqv9CPJgPd/XfGw+E/blz5M:6iofqsJ2x+judM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Incompensation/mderet.vir

SHA256 8c8e58aa3409e31c0324e7ba7d421763e22fa1cbea90b61744e15843e0566045
MD5 d43007d63fc76a4fa6d8d7a1ba7e0de0
SHA1 00e055f29874b1767bedc6f8f0f97787eb35743b
SHA512 6922407d3ca657288947adbc2bb4a37a2dd0841e115a19ddef76d12a1bff87b0ab85ff2c464f547ac87c600b528a17314ab7afce5ee162a883891f8c6ae26e28
MD5 SHA1 SHA512

NSIS installer

installer

Incompensation/osteoclastic.qua

SHA256 4b7a8b0213cad20fa71a1ba12c2333c6f39d80e17e25d66dbad4e0f76e8fdcf8
MD5 136c645aedc4196bf6b438e7de862882
SHA1 8c4c66fabf7e5faf554f444a7c2a386794dec8e1
SHA512 a79ae5bd7e42d18ff394b7685f58174fb0a3c9009ff53b98721374aa8cd5fc557733a95fc82a75437a0e1b6a5135698a7a239682a2ab0e02e86e8356d12bc3a9
MD5 SHA1 SHA512

NSIS installer

installer

Incompensation/pehrs.hal

SHA256 46b2904b801eaf220b70a1d7e07ed5a398b4520949bfa26d6af4678adf2408e2
MD5 0837c12109304cb935346f0052ce2aa4
SHA1 bbade193b3f047eeee04a5b43da6ec43af9075d3
SHA512 1ad627fa17ad0ace17be70ca187d6125c9a78e6e7aa14cb1907da6d1c8b5a6c88e707905392044c9c6c7be75ea47838c191238d70f0e2c73f6518a76773c76f7
SSDEEP 384:4p39rdWbgp0Jykh3AD66UT45p72RvWkHu/wTIu:4pOrRAtgFWOAk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Incompensation/ploughpoint.slu

SHA256 8cc2e0ecbbdbc66b446bb8a37c96e925d9eec7e7de97c33fd845c6bbd9734921
MD5 3bcc2391b1555d6e0f1bf5f25e1096a7
SHA1 db07f2f38396d950b52b04d628f240fae5e963ab
SHA512 495a14e02e69436ddc78cbcfdfdd9f8f2b7cc073578c61f1a19f9f14130d9fa979aa78d600e1b35ebaa9bc815d6f3bd6788e38bbc858ddfdb585a3f14630f9e4
SSDEEP 96:YZasXiGRZ+nm5i3l/BUkdi7307tNpb+MsHKYDYhoAX2SkmVEPweNlrbvlvJ503In:/gT+nm+Z1sDjUhoAXdkm/epvHnRJMKoM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Incompensation/restaurationskkkenernes.fas

SHA256 366daa06851550059019e929230122acaaaa10535cbb83377cb30b1ef2f9815c
MD5 d877b9fd35ce4ddb1a081c1f98a2cce1
SHA1 9dc797961260199ae97a07bab6fbf8f32b8abf47
SHA512 ef867bc57929001cbc27112bce4fcd50404283fdc2f5790a9726e509de3f1fc04255a65f454bbce359c7b247b6e5d1d681ebf8908b82e2ada27f1b762d911372
SSDEEP 192:iTk6olpHD6rHI/IIm//tR65cNZ0GNqylvcozhVWLQaZuNlatLUav:istUHIAvlL0ohiLQac4LUav
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Incompensation/venalities.vau

SHA256 cbf8d546e152c96e43d1689754ace43b699cd71d9c5d3bc2ec370c8569ec3442
MD5 10326e326dabc556791f1ef93327988a
SHA1 7aa39e9797209802f079c63bbaf90c84bb2cf76b
SHA512 b8dc2d6910c6e7a1eba755d22b6474f09983cfdc2f88b5ed9f0d0b572c16d6f2636268a11c1e247f43ebf7961f077a51a2eb25fa16499f6e618d193e9fc1ee08
SSDEEP 192:SHRj7B6ZxsiJZA3qp9OaVcR90zGMf3iULUB384S89HJ4OX2Azy:0orzOV2mDTJrmN
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer