Static task
static1
Behavioral task
behavioral1
Sample
nitro.exe
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
nitro.exe
Resource
win10v2004-20220812-en
General
-
Target
10f30e000c7500ef9ac1116ca3022f03a50700ce39a3f6f76c2b6202bcf14760.zip
-
Size
160KB
-
MD5
1b01b176dcc36b86e657dc05e680b39a
-
SHA1
520a2dd58117656709b09444b37682cdccff07ef
-
SHA256
1f816f908c11995784981abc0ff7d0bd6cdb90f840b2584944263eb9fc8760bb
-
SHA512
8509c0692c6c8fc5e324d70d70c410da33195d54e56f81db5a3777643e3eae4588a8131045a1a1946c0ef2f2d2b2877254e2b2c60dcc52f71d5d98f2f2ab9ea9
-
SSDEEP
3072:1VExI1qr/URAa/rE2v4bZZU11TaT3QpcN4p/9vmh31UJIHtvlkUil:HExI1Y2v4bZqHa0pcN4RQhlUJINKUil
Malware Config
Signatures
Files
-
10f30e000c7500ef9ac1116ca3022f03a50700ce39a3f6f76c2b6202bcf14760.zip.zip
Password: infected
-
nitro.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ