9ff554a3dee3e1c2d4eb692c2fc0890cc03d285580f32bc1d4fdb1f4f175febf

Sharing

Copy URL Twitter E-mail

General

Target
9ff554a3dee3e1c2d4eb692c2fc0890cc03d285580f32bc1d4fdb1f4f175febf
Size 80KB
Sample260828-h2ecbavbla
SHA256 9ff554a3dee3e1c2d4eb692c2fc0890cc03d285580f32bc1d4fdb1f4f175febf
MD5 104db4c7d87d9f5d330ceb3aa6133b94
SHA1 9011268a900ce955947b9d08040c87fab4369aa2
SHA512 05f5d9e7e04bfe7ff96a8fc89f692f43a98e4eebcc99291cd7669381d95210614584b3b996149567c2c555f6d33e1e2e58de8acb27d9abe1b3d2330aa6ade4a8
SSDEEP 1536:pAHwUHU3HmS252QtCL9FypzgcT51QnSBotCJK6rqZu/Fx:pAdHU2S25Ltw9kzgIQilJK6rqZA
TLSH
T185831818EE07A8F1ED474930564BE7BF15285E3284348E82EF801E77DDB24F29636B91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

installer

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ff554a3dee3e1c2d4eb692c2fc0890cc03d285580f32bc1d4fdb1f4f175febf

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2

File Explorer

9ff554a3dee3e1c2d4eb692c2fc0890cc03d285580f32bc1d4fdb1f4f175febf

.exe 80KB

9ff554a3dee3e1c2d4eb692c2fc0890cc03d285580f32bc1d4fdb1f4f175febf

IMPHASH 28a099a911237a28521d8b7ea250f089
SHA256 9ff554a3dee3e1c2d4eb692c2fc0890cc03d285580f32bc1d4fdb1f4f175febf
MD5 104db4c7d87d9f5d330ceb3aa6133b94
SHA1 9011268a900ce955947b9d08040c87fab4369aa2
SHA512 05f5d9e7e04bfe7ff96a8fc89f692f43a98e4eebcc99291cd7669381d95210614584b3b996149567c2c555f6d33e1e2e58de8acb27d9abe1b3d2330aa6ade4a8
SSDEEP 1536:pAHwUHU3HmS252QtCL9FypzgcT51QnSBotCJK6rqZu/Fx:pAdHU2S25Ltw9kzgIQilJK6rqZA
TLSH
T185831818EE07A8F1ED474930564BE7BF15285E3284348E82EF801E77DDB24F29636B91
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

17187

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey RegCreateKeyExA RegDeleteKeyA RegDeleteValueA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegQueryValueExA RegSetValueExA

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy InitCommonControls

gdi32

CreateBrushIndirect CreateFontIndirectA DeleteObject GetDeviceCaps SelectObject SetBkColor SetBkMode SetTextColor

kernel32

CloseHandle CompareFileTime CopyFileA CreateDirectoryA CreateFileA CreateProcessA CreateThread DeleteFileA ExitProcess ExpandEnvironmentStringsA FindClose FindFirstFileA FindNextFileA FreeLibrary GetCommandLineA GetCurrentProcess GetDiskFreeSpaceA GetExitCodeProcess GetFileAttributesA GetFileSize GetFullPathNameA GetLastError GetModuleFileNameA GetModuleHandleA GetPrivateProfileStringA GetProcAddress GetShortPathNameA GetSystemDirectoryA GetTempFileNameA GetTempPathA GetTickCount GetVersion GetWindowsDirectoryA GlobalAlloc GlobalFree GlobalLock GlobalUnlock LoadLibraryA LoadLibraryExA MoveFileA MulDiv MultiByteToWideChar ReadFile RemoveDirectoryA SearchPathA SetCurrentDirectoryA SetErrorMode SetFileAttributesA SetFilePointer SetFileTime Sleep WaitForSingleObject WriteFile WritePrivateProfileStringA lstrcatA lstrcmpA lstrcmpiA lstrcpynA lstrlenA

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

shell32

SHBrowseForFolderA SHFileOperationA SHGetFileInfoA SHGetPathFromIDListA SHGetSpecialFolderLocation ShellExecuteA

user32

AppendMenuA BeginPaint CallWindowProcA CharNextA CharPrevA CheckDlgButton CloseClipboard CreateDialogParamA CreatePopupMenu CreateWindowExA DefWindowProcA DestroyWindow DialogBoxParamA DispatchMessageA DrawTextA EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint ExitWindowsEx FillRect FindWindowExA GetClassInfoA GetClientRect GetDC GetDlgItem GetDlgItemTextA GetMessagePos GetSysColor GetSystemMenu GetSystemMetrics GetWindowLongA GetWindowRect InvalidateRect IsWindow IsWindowEnabled IsWindowVisible LoadBitmapA LoadCursorA LoadImageA MessageBoxIndirectA OpenClipboard PeekMessageA PostQuitMessage RegisterClassA ScreenToClient SendMessageA SendMessageTimeoutA SetClassLongA SetClipboardData SetCursor SetDlgItemTextA SetForegroundWindow SetTimer SetWindowLongA SetWindowPos SetWindowTextA ShowWindow SystemParametersInfoA TrackPopupMenu wsprintfA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

Name

.text

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

140B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

246KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

8KB

Virtual Size

17.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

9ff554a3dee3e1c2d4eb692c2fc0890cc03d285580f32bc1d4fdb1f4f175febf

advapi32

comctl32

gdi32

kernel32

ole32

shell32

user32

version

generic