c3ed5af0a98038ab8b95872370f7eac2bd41e6cfb53a2c963c764c5e57792594

resource
c3ed5af0a98038ab8b95872370f7eac2bd41e6cfb53a2c963c764c5e57792594

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

IMPHASH b76363e9cb88bf9390860da8e50999d2
SHA256 c3ed5af0a98038ab8b95872370f7eac2bd41e6cfb53a2c963c764c5e57792594
MD5 c6de5c8fb983fe74fc17f1a562f86e79
SHA1 a9f721eb5fbf794e59f4fff2e37c6daad065dbe5
SHA512 ccd04730557332ff47e50bf9003b572b3cdc240445d0366d7855b01c9f65bee27b1890c03e2be6dc9401d327f12a1d7d7c5223742cc5ed8ae4d851ad5a0a09f9
SSDEEP 24576:fte3AgpSu9IfpXh6qyTg2WfgQtmm5YGPJiYqAU7edXBujq:le1ku9036qy9ggQt5Ycxbxiq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA SetFileAttributesA CompareFileTime SearchPathA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA GetTempPathA Sleep lstrcmpiA GetVersion SetErrorMode lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryA CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrcatA GetSystemDirectoryA WaitForSingleObject SetFileTime CloseHandle GlobalFree lstrcmpA ExpandEnvironmentStringsA GetExitCodeProcess GlobalAlloc lstrlenA GetCommandLineA GetProcAddress FindFirstFileA FindNextFileA DeleteFileA SetFilePointer ReadFile FindClose GetPrivateProfileStringA WritePrivateProfileStringA WriteFile MulDiv MultiByteToWideChar LoadLibraryExA GetModuleHandleA FreeLibrary

user32

SetCursor GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor EndDialog ScreenToClient LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetForegroundWindow GetWindowLongA RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx SetTimer PostQuitMessage SetWindowLongA SendMessageTimeoutA LoadImageA wsprintfA GetDlgItem FindWindowExA IsWindow SetClipboardData EmptyClipboard OpenClipboard EndPaint CreateDialogParamA DestroyWindow ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA SHFileOperationA ShellExecuteA

advapi32

RegDeleteValueA SetFileSecurityA RegOpenKeyExA RegDeleteKeyA RegEnumValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_AddMasked ImageList_Destroy ImageList_Create ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

Benono.exe

SHA256 6892caeb8651419cf9b3f620c9b1047050449bf293bdee758f2091242e647186
MD5 f616fce65faca4623e74390bad961ba0
SHA1 1ed18d43911314c2784f4aecd8d967c1741c38aa
SHA512 b4cd4926e724034784be7d3702108352758ed103bbdb8ab536e818fa3541f7c0194482e70e80c56f581800150468ef4b4daaae46f0a2d844a811c043cddcf150
SSDEEP 96:WugX8v7XMICXadKeiwm+A3xujTtov6sJToz7XQoBy/4M25AQMjfK72Cg0xTUds8+:pgIICe+PVrzQoBywMKhwfegxs8I0c
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Dapasosefure.pif

SHA256 8fcac5a03719ffc87a9d5bdc53b52f169f8a55f60958de70059c713cb09f8136
MD5 7b4a55ef175542d1fbb21e0fbf17df9f
SHA1 9e965924fd24aaf76d4fb3c4f0e17bb2ab3db60e
SHA512 8615088b05d6dfdbbafdad276c6e150118c4956d91cec4f32e6b48022fabf0fe6679d27bbe657c05ceefa43bd479f0d0ecd1f91bd4bbda3669f485c611cfb77d
SSDEEP 96:4ZaBhSCPwNrybM5rDGT3mYWvzoH6H5tgQnd7WYyy3xWVtvmQh11pE+BBlOO2ZCBZ:YQkfYhjjWvEc5t3d7WCWVtr1nrPlgZXa
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Darodumom.csv

SHA256 50a2cd00c0c4f85819371bcf48ada568d8778d4e7c34fa9139b3a12f58014d21
MD5 1769b2032e27c4be5a4cac99128b4ac6
SHA1 1640045dc4e5bceb014d021f1054e8d50b2ae50e
SHA512 4d24c0d9974dc24a24caa46ebad385e1e07460491b42fc5af4a261f3f554cceac7f51be099ccc1d37cfcd0caeb1788f260c200a0693690f77c5e2882c25af85d
SSDEEP 192:qyRX/bU6ycOfSu9ODZ3Rm/5q9o3rkYW09ucJ4Gofqik/PluaA:qye6KSu9M+B13rx5ccaGoSicNuL
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Hufotig.pptx

SHA256 da866eaa20cdbdcc06ae7fc6d7e78659d61f2c91f8e14bc813b67665f3d1b230
MD5 5be9b184b76af1eafa75fae51d0a6bc9
SHA1 df13d4d451b0a6fe350054306625486869b5c81f
SHA512 1a278bb96abca50f541657c6d5f5b2e388cd5eee2890333a8d736a5d07a533519072378539bb631dc1fae0ef0e348e657eae32ebe91045e7e7edc612051bdf5a
SSDEEP 96:GG1zyOhyZHVA3W5zBW3oEyEEYWorq0lPu2DL4xdlFgtgTLFR30k2xlWvsRHzFexq:GGwacoW5I3QEEYtrqsm2DagEv3PEJFeI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Keboni.no

SHA256 2c26ed62ae336f5bc9bbd86524b4020c523caa177081847f30cd489d6cf837f1
MD5 8a49fdd8cf8793cabe7bb4137fcbbdbc
SHA1 0112b204f36b61f31ee5259363ccec9ab689e435
SHA512 b6a378229065731e84b84a833f28ff521cca2083c8a67f76301c25a26948ebd07654e5cbd3798b78c3635818ca9220abaf45b69234f02efc3b204907bd6cbc32
SSDEEP 192:/JLWGi0SSFWCjOBW3okYMckmvh+6jvcqhoVJNc/:/BW/SF/ymYMck+cCinc/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Kenicudeca.mp3

SHA256 c9cf428f6e651526f43f53c48bbfa760ddb208eebbe0b7f715c13444a04a0cea
MD5 9ed3f3e1d0c5aa507a9cd09b5a6f9932
SHA1 81e5579bae731f77c87056cabede12c9d0b6539a
SHA512 25f0c2a32e7b1c7f1d4d66e9ca32db3df73ac02d1ee3b2711a9c269c15700101e1e97a7d58aeb8088fcbd0f6e6783da7e75e90dd28d84afe1a6023dfc7ec8e68
SSDEEP 192:uC8SN14li3JlCU906pdTYNwsQwl3/IVRqInIeutMszF:H8U/3HCU9pheLQQvkRbITtMszF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Laloradoc.com

SHA256 375c04664fbc4117db986bd1d6c786363e59333edb5a8f73c79b601d1f3d22f7
MD5 e7e60f6abd272546358f1a5a6adcf489
SHA1 9e91ef20c6a66250a9de0d7b522790dcb98ac9b8
SHA512 e69be5952a23bb7a957cfd5c3a2f15490a989988a072af5969d879064ac036e3eee1ecad1bb1cd302730a1428ed05f25d7dc0f0bdd13a42a4098ccc35e949b15
SSDEEP 192:ko4yfTT2J6F+WyoiRSwrwAdCvzk5CQlc1LYaRMk6pxao+N:kojLT2wF+qiQwRezkEdLYegao+N
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Meneco.asf

SHA256 7a14eb6ec1db3011bf5035151e6cabf12e6eab8ca108953e563d310b901272eb
MD5 edff198fd367ada89a8225db2323ba3c
SHA1 fd4134ac671200e22be712a80042d881cca76ded
SHA512 00b0633bd010b65abab5cf980ba87fe3e72ed9076dce29d2c207e449807e2a7e56210fe3320562c23756cd185019a5d51a897f622fea4e4182240533f5339b9c
SSDEEP 96:mrS1QreNaWwJ+bLYls6ECwvEo/fCfrcp/y2mpEuGndLd6GnH11c+Dh4ok5utI1cS:zQVWiK9vEFT0LndLdryewh113n
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Mobatogul.vob

SHA256 287ff9b8daa1a865ec5c3c6faa8b44726fb822de83503ccdd31b001382ff2204
MD5 8b429b6d024a6449ec2af14682f9ee75
SHA1 9a8e512058903e6f9d8b658717d48e920503c87f
SHA512 1a8dd2f5cb4930f82c97d466d4fb426603353c3c769775fce1b9d717ae216063d69f6ff04e96266c03be3e58f4223e40b7b06b15d2bb9ff1280f28e1b29b43a7
SSDEEP 192:R5IYUl2x2NezvQyWyGyVW/csASCGz18fw:RZ2oQkjw/8SC61yw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Mopogagigifa.m3u

SHA256 78dfb9c3ec005c36add7a8bc0d711fc03f27d72123392375ed0054d9c5395edd
MD5 cd16a102ae97485578f05af4da98c417
SHA1 7bae3e2ac5d9366491cb579c70af00c0f8b483c1
SHA512 5c498db7351c304c7d287a05d133cde5de4a9b89f430704c49df6ff66918dfcd413df7941d91cd4c22a35a4ec27f874f5ce607e4211b73781a0a191757a34258
SSDEEP 192:INxRqveSM8f8UYRSn6F2kTCng9TTFN7y36Z:IhqmV32EppTFRC6Z
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Notidolote.msg

SHA256 6f94817e179d78961617d30ed3cf0b202acc96267d29f60ad045c5dca9151c31
MD5 dedeb985329512623bd963e519186ed6
SHA1 782b52bdcc6f6b3a249629fe7d7ad3e39690cae0
SHA512 6963d0c9b5cbbc870f493b251091ae14a35daf0cd7cd35e01f0094f1f2f482ea18380a32444efba31f72387e05abe9e72f14812f3b17c31848679823920c196f
SSDEEP 96:6VkZPTvzva8s2p9FMF6SKaflPIkGxikp+4e0dmvVhO1zyoxb4SA1iLPugB:6aZPTrva8lvGU+KvgcdmvVhOp1RIiLPF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Pofoc

SHA256 7faaa3077e1f0186a4a064eb2354e512490e458dcd794b3cc74cb0bb10bfbb5f
MD5 07d7afeafa40e28fe4560e8cc980a0d5
SHA1 bf6d4e2c376551e408ae51d4a6c8257710c9f3d6
SHA512 eeec9057c36e51f5eaaabceb2c0e3457de383fb56a87a0c1c1482c2dbbbc1241257d981b0a3204389de03aef5779fe7dd5f8771d9dd496e645fd37ccaba9cf4f
SSDEEP 192:IKjkOhN7zsVVLJqPbmh7fZT3A2HZt+CfW:IKgWh0LwiVFAeb+Cu
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Regotapuni.jar

SHA256 3ab96445bde270764a4ecf97d38b1b0adb7727de0845eea02291f684c46e46b0
MD5 ee4dd8af92d4492a343fd7854183545c
SHA1 240fdc8c814289bfd24da4c40c87bb721d500288
SHA512 1c00012c5c92a1bb798aa03f0fc5a14b1756edc7219ae4b34310aba8e1a4fe7ffcdf4b0963bd6f7b740ed15dee9e9da797244c829b57d0efa82adae34ce72421
SSDEEP 192:dC2Xc55gSoOtH1wtfImBrtNm4PQc8D8qRhLjO16:dC2s41wVYImBt/bO8qR5jC6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Tahenanaf.doc

SHA256 168ff58e754bbcad04489ac5de4ca6211562ce4e90519ec315d8a3d095670b70
MD5 9c40968e75c4ad96f491b851dc6da9c7
SHA1 619d7e06136f1a877dd37cf36f1e749b1541848f
SHA512 2c2fef7776c93eb0cb67b83ab71c7b9e9c444e6ed7b884609e7581e92c437aeebe66e8b17271b48d8f9e64b7f0fbad0d8bd932e0afacf00f707b8564161b7b93
SSDEEP 192:NV2XQHSXJBx0bXHEEKkoxVWPts+MOPL7BzmO:NV2XQH0y7kEK/xV2G+JqO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Tericofo

SHA256 68e0fe71371ea48cd8a04a1305aa147cc3a6b77df7c66019973771f83eb84343
MD5 c4a7cc9cd166507f804f4ae69ab0255a
SHA1 0a069d7bb87b69989a35334e3d95137f5244a704
SHA512 b0777d7b66304ea7c9379001b8e1b5506b279a2baf5960067bb5c62acf06b8a36dec256aa95cb5073500755131c9c19f74bd445bdbc21c5539456d23f0d4753e
SSDEEP 96:PHgEOrhKTxXW6pEbtTuLBgRDXcUQWGLpKER2v1w1CI:PAEOrhKtXVDLBgRDffCKEwv1qp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Sharing

Errors

General

Malware Config

Signatures

File Explorer