db325178acd871aaffa0b9f36b61f3661493caa37acd59e0801939d8ccc6561b

General

Target

db325178acd871aaffa0b9f36b61f3661493caa37acd59e0801939d8ccc6561b
Size

247KB
MD5

4819c7d1ddb8bcdf9f3ad1cfd045f4c2
SHA1

355d344106f0de7facc8f4699796a23c05813bb4
SHA256

db325178acd871aaffa0b9f36b61f3661493caa37acd59e0801939d8ccc6561b
SHA512

e019bd6c961bec6fe3433b62660f67cd79a8d8fad56a1767c9507bab5a70f09119e8db25e1c8453278cbbf33c41291dc3f4f62b33b05a7f55176129d8ff484d5
SSDEEP

3072:WwLiKMgXdZt9P6D3XJx450UzYqmlYiyuRpu9fWWq5g7Hbu5JcrtSwlT2vS67VV61:5iKMe34jvhq6V75SrtSk6RQj2QVZ6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db325178acd871aaffa0b9f36b61f3661493caa37acd59e0801939d8ccc6561b

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2

Files

db325178acd871aaffa0b9f36b61f3661493caa37acd59e0801939d8ccc6561b
.exe windows:3 windows x86 arch:x86

289659d05d41bf4c557342206db3ca42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

msi

MsiCloseHandle

dbghelp

SymEnumerateModules
SymEnumerateModules64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindFileInPath
SymFromAddr
SymFromName
SymFunctionTableAccess
SymGetFileLineOffsets64
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromName
SymGetLineFromName64
SymGetLineNext
SymGetLineNext64
SymGetLinePrev
SymGetLinePrev64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOptions
SymGetSearchPath
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64

kernel32

MapViewOfFileEx
GetTickCount
GetSystemDirectoryA
LocalAlloc
SetConsoleTitleW
EnumCalendarInfoA
CallNamedPipeA
ReadFile
CreateFileA

oleaut32

OleLoadPictureEx
OleIconToCursor
SafeArrayCopy
SafeArrayCreate

Sections

.code
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA
Size: 9KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RSRC
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.r1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

289659d05d41bf4c557342206db3ca42

Headers

File Characteristics

Imports

msi

dbghelp

kernel32

oleaut32

Sections

.code Size: 5KB - Virtual size: 20KB

.DATA Size: 9KB - Virtual size: 80KB

RSRC Size: 14KB - Virtual size: 16KB

.r1 Size: 4KB - Virtual size: 4KB

.code
Size: 5KB - Virtual size: 20KB

.DATA
Size: 9KB - Virtual size: 80KB

RSRC
Size: 14KB - Virtual size: 16KB

.r1
Size: 4KB - Virtual size: 4KB